/** * Author......: See docs/credits.txt * License.....: MIT */ #define NEW_SIMD_CODE #include "inc_vendor.cl" #include "inc_hash_constants.h" #include "inc_hash_functions.cl" #include "inc_types.cl" #include "inc_common.cl" #include "inc_simd.cl" #include "inc_hash_md4.cl" #include "inc_hash_sha1.cl" #include "inc_hash_sha512.cl" #include "inc_cipher_aes.cl" #define COMPARE_S "inc_comp_single.cl" #define COMPARE_M "inc_comp_multi.cl" #define PERM_OP(a,b,tt,n,m) \ { \ tt = a >> n; \ tt = tt ^ b; \ tt = tt & m; \ b = b ^ tt; \ tt = tt << n; \ a = a ^ tt; \ } #define HPERM_OP(a,tt,n,m) \ { \ tt = a << (16 + n); \ tt = tt ^ a; \ tt = tt & m; \ a = a ^ tt; \ tt = tt >> (16 + n); \ a = a ^ tt; \ } #define IP(l,r,tt) \ { \ PERM_OP (r, l, tt, 4, 0x0f0f0f0f); \ PERM_OP (l, r, tt, 16, 0x0000ffff); \ PERM_OP (r, l, tt, 2, 0x33333333); \ PERM_OP (l, r, tt, 8, 0x00ff00ff); \ PERM_OP (r, l, tt, 1, 0x55555555); \ } #define FP(l,r,tt) \ { \ PERM_OP (l, r, tt, 1, 0x55555555); \ PERM_OP (r, l, tt, 8, 0x00ff00ff); \ PERM_OP (l, r, tt, 2, 0x33333333); \ PERM_OP (r, l, tt, 16, 0x0000ffff); \ PERM_OP (l, r, tt, 4, 0x0f0f0f0f); \ } __constant u32a c_SPtrans[8][64] = { { /* nibble 0 */ 0x02080800, 0x00080000, 0x02000002, 0x02080802, 0x02000000, 0x00080802, 0x00080002, 0x02000002, 0x00080802, 0x02080800, 0x02080000, 0x00000802, 0x02000802, 0x02000000, 0x00000000, 0x00080002, 0x00080000, 0x00000002, 0x02000800, 0x00080800, 0x02080802, 0x02080000, 0x00000802, 0x02000800, 0x00000002, 0x00000800, 0x00080800, 0x02080002, 0x00000800, 0x02000802, 0x02080002, 0x00000000, 0x00000000, 0x02080802, 0x02000800, 0x00080002, 0x02080800, 0x00080000, 0x00000802, 0x02000800, 0x02080002, 0x00000800, 0x00080800, 0x02000002, 0x00080802, 0x00000002, 0x02000002, 0x02080000, 0x02080802, 0x00080800, 0x02080000, 0x02000802, 0x02000000, 0x00000802, 0x00080002, 0x00000000, 0x00080000, 0x02000000, 0x02000802, 0x02080800, 0x00000002, 0x02080002, 0x00000800, 0x00080802, }, { /* nibble 1 */ 0x40108010, 0x00000000, 0x00108000, 0x40100000, 0x40000010, 0x00008010, 0x40008000, 0x00108000, 0x00008000, 0x40100010, 0x00000010, 0x40008000, 0x00100010, 0x40108000, 0x40100000, 0x00000010, 0x00100000, 0x40008010, 0x40100010, 0x00008000, 0x00108010, 0x40000000, 0x00000000, 0x00100010, 0x40008010, 0x00108010, 0x40108000, 0x40000010, 0x40000000, 0x00100000, 0x00008010, 0x40108010, 0x00100010, 0x40108000, 0x40008000, 0x00108010, 0x40108010, 0x00100010, 0x40000010, 0x00000000, 0x40000000, 0x00008010, 0x00100000, 0x40100010, 0x00008000, 0x40000000, 0x00108010, 0x40008010, 0x40108000, 0x00008000, 0x00000000, 0x40000010, 0x00000010, 0x40108010, 0x00108000, 0x40100000, 0x40100010, 0x00100000, 0x00008010, 0x40008000, 0x40008010, 0x00000010, 0x40100000, 0x00108000, }, { /* nibble 2 */ 0x04000001, 0x04040100, 0x00000100, 0x04000101, 0x00040001, 0x04000000, 0x04000101, 0x00040100, 0x04000100, 0x00040000, 0x04040000, 0x00000001, 0x04040101, 0x00000101, 0x00000001, 0x04040001, 0x00000000, 0x00040001, 0x04040100, 0x00000100, 0x00000101, 0x04040101, 0x00040000, 0x04000001, 0x04040001, 0x04000100, 0x00040101, 0x04040000, 0x00040100, 0x00000000, 0x04000000, 0x00040101, 0x04040100, 0x00000100, 0x00000001, 0x00040000, 0x00000101, 0x00040001, 0x04040000, 0x04000101, 0x00000000, 0x04040100, 0x00040100, 0x04040001, 0x00040001, 0x04000000, 0x04040101, 0x00000001, 0x00040101, 0x04000001, 0x04000000, 0x04040101, 0x00040000, 0x04000100, 0x04000101, 0x00040100, 0x04000100, 0x00000000, 0x04040001, 0x00000101, 0x04000001, 0x00040101, 0x00000100, 0x04040000, }, { /* nibble 3 */ 0x00401008, 0x10001000, 0x00000008, 0x10401008, 0x00000000, 0x10400000, 0x10001008, 0x00400008, 0x10401000, 0x10000008, 0x10000000, 0x00001008, 0x10000008, 0x00401008, 0x00400000, 0x10000000, 0x10400008, 0x00401000, 0x00001000, 0x00000008, 0x00401000, 0x10001008, 0x10400000, 0x00001000, 0x00001008, 0x00000000, 0x00400008, 0x10401000, 0x10001000, 0x10400008, 0x10401008, 0x00400000, 0x10400008, 0x00001008, 0x00400000, 0x10000008, 0x00401000, 0x10001000, 0x00000008, 0x10400000, 0x10001008, 0x00000000, 0x00001000, 0x00400008, 0x00000000, 0x10400008, 0x10401000, 0x00001000, 0x10000000, 0x10401008, 0x00401008, 0x00400000, 0x10401008, 0x00000008, 0x10001000, 0x00401008, 0x00400008, 0x00401000, 0x10400000, 0x10001008, 0x00001008, 0x10000000, 0x10000008, 0x10401000, }, { /* nibble 4 */ 0x08000000, 0x00010000, 0x00000400, 0x08010420, 0x08010020, 0x08000400, 0x00010420, 0x08010000, 0x00010000, 0x00000020, 0x08000020, 0x00010400, 0x08000420, 0x08010020, 0x08010400, 0x00000000, 0x00010400, 0x08000000, 0x00010020, 0x00000420, 0x08000400, 0x00010420, 0x00000000, 0x08000020, 0x00000020, 0x08000420, 0x08010420, 0x00010020, 0x08010000, 0x00000400, 0x00000420, 0x08010400, 0x08010400, 0x08000420, 0x00010020, 0x08010000, 0x00010000, 0x00000020, 0x08000020, 0x08000400, 0x08000000, 0x00010400, 0x08010420, 0x00000000, 0x00010420, 0x08000000, 0x00000400, 0x00010020, 0x08000420, 0x00000400, 0x00000000, 0x08010420, 0x08010020, 0x08010400, 0x00000420, 0x00010000, 0x00010400, 0x08010020, 0x08000400, 0x00000420, 0x00000020, 0x00010420, 0x08010000, 0x08000020, }, { /* nibble 5 */ 0x80000040, 0x00200040, 0x00000000, 0x80202000, 0x00200040, 0x00002000, 0x80002040, 0x00200000, 0x00002040, 0x80202040, 0x00202000, 0x80000000, 0x80002000, 0x80000040, 0x80200000, 0x00202040, 0x00200000, 0x80002040, 0x80200040, 0x00000000, 0x00002000, 0x00000040, 0x80202000, 0x80200040, 0x80202040, 0x80200000, 0x80000000, 0x00002040, 0x00000040, 0x00202000, 0x00202040, 0x80002000, 0x00002040, 0x80000000, 0x80002000, 0x00202040, 0x80202000, 0x00200040, 0x00000000, 0x80002000, 0x80000000, 0x00002000, 0x80200040, 0x00200000, 0x00200040, 0x80202040, 0x00202000, 0x00000040, 0x80202040, 0x00202000, 0x00200000, 0x80002040, 0x80000040, 0x80200000, 0x00202040, 0x00000000, 0x00002000, 0x80000040, 0x80002040, 0x80202000, 0x80200000, 0x00002040, 0x00000040, 0x80200040, }, { /* nibble 6 */ 0x00004000, 0x00000200, 0x01000200, 0x01000004, 0x01004204, 0x00004004, 0x00004200, 0x00000000, 0x01000000, 0x01000204, 0x00000204, 0x01004000, 0x00000004, 0x01004200, 0x01004000, 0x00000204, 0x01000204, 0x00004000, 0x00004004, 0x01004204, 0x00000000, 0x01000200, 0x01000004, 0x00004200, 0x01004004, 0x00004204, 0x01004200, 0x00000004, 0x00004204, 0x01004004, 0x00000200, 0x01000000, 0x00004204, 0x01004000, 0x01004004, 0x00000204, 0x00004000, 0x00000200, 0x01000000, 0x01004004, 0x01000204, 0x00004204, 0x00004200, 0x00000000, 0x00000200, 0x01000004, 0x00000004, 0x01000200, 0x00000000, 0x01000204, 0x01000200, 0x00004200, 0x00000204, 0x00004000, 0x01004204, 0x01000000, 0x01004200, 0x00000004, 0x00004004, 0x01004204, 0x01000004, 0x01004200, 0x01004000, 0x00004004, }, { /* nibble 7 */ 0x20800080, 0x20820000, 0x00020080, 0x00000000, 0x20020000, 0x00800080, 0x20800000, 0x20820080, 0x00000080, 0x20000000, 0x00820000, 0x00020080, 0x00820080, 0x20020080, 0x20000080, 0x20800000, 0x00020000, 0x00820080, 0x00800080, 0x20020000, 0x20820080, 0x20000080, 0x00000000, 0x00820000, 0x20000000, 0x00800000, 0x20020080, 0x20800080, 0x00800000, 0x00020000, 0x20820000, 0x00000080, 0x00800000, 0x00020000, 0x20000080, 0x20820080, 0x00020080, 0x20000000, 0x00000000, 0x00820000, 0x20800080, 0x20020080, 0x20020000, 0x00800080, 0x20820000, 0x00000080, 0x00800080, 0x20020000, 0x20820080, 0x00800000, 0x20800000, 0x20000080, 0x00820000, 0x00020080, 0x20020080, 0x20800000, 0x00000080, 0x20820000, 0x00820080, 0x00000000, 0x20000000, 0x20800080, 0x00020000, 0x00820080, }, }; __constant u32a c_skb[8][64] = { { 0x00000000, 0x00000010, 0x20000000, 0x20000010, 0x00010000, 0x00010010, 0x20010000, 0x20010010, 0x00000800, 0x00000810, 0x20000800, 0x20000810, 0x00010800, 0x00010810, 0x20010800, 0x20010810, 0x00000020, 0x00000030, 0x20000020, 0x20000030, 0x00010020, 0x00010030, 0x20010020, 0x20010030, 0x00000820, 0x00000830, 0x20000820, 0x20000830, 0x00010820, 0x00010830, 0x20010820, 0x20010830, 0x00080000, 0x00080010, 0x20080000, 0x20080010, 0x00090000, 0x00090010, 0x20090000, 0x20090010, 0x00080800, 0x00080810, 0x20080800, 0x20080810, 0x00090800, 0x00090810, 0x20090800, 0x20090810, 0x00080020, 0x00080030, 0x20080020, 0x20080030, 0x00090020, 0x00090030, 0x20090020, 0x20090030, 0x00080820, 0x00080830, 0x20080820, 0x20080830, 0x00090820, 0x00090830, 0x20090820, 0x20090830, }, { 0x00000000, 0x02000000, 0x00002000, 0x02002000, 0x00200000, 0x02200000, 0x00202000, 0x02202000, 0x00000004, 0x02000004, 0x00002004, 0x02002004, 0x00200004, 0x02200004, 0x00202004, 0x02202004, 0x00000400, 0x02000400, 0x00002400, 0x02002400, 0x00200400, 0x02200400, 0x00202400, 0x02202400, 0x00000404, 0x02000404, 0x00002404, 0x02002404, 0x00200404, 0x02200404, 0x00202404, 0x02202404, 0x10000000, 0x12000000, 0x10002000, 0x12002000, 0x10200000, 0x12200000, 0x10202000, 0x12202000, 0x10000004, 0x12000004, 0x10002004, 0x12002004, 0x10200004, 0x12200004, 0x10202004, 0x12202004, 0x10000400, 0x12000400, 0x10002400, 0x12002400, 0x10200400, 0x12200400, 0x10202400, 0x12202400, 0x10000404, 0x12000404, 0x10002404, 0x12002404, 0x10200404, 0x12200404, 0x10202404, 0x12202404, }, { 0x00000000, 0x00000001, 0x00040000, 0x00040001, 0x01000000, 0x01000001, 0x01040000, 0x01040001, 0x00000002, 0x00000003, 0x00040002, 0x00040003, 0x01000002, 0x01000003, 0x01040002, 0x01040003, 0x00000200, 0x00000201, 0x00040200, 0x00040201, 0x01000200, 0x01000201, 0x01040200, 0x01040201, 0x00000202, 0x00000203, 0x00040202, 0x00040203, 0x01000202, 0x01000203, 0x01040202, 0x01040203, 0x08000000, 0x08000001, 0x08040000, 0x08040001, 0x09000000, 0x09000001, 0x09040000, 0x09040001, 0x08000002, 0x08000003, 0x08040002, 0x08040003, 0x09000002, 0x09000003, 0x09040002, 0x09040003, 0x08000200, 0x08000201, 0x08040200, 0x08040201, 0x09000200, 0x09000201, 0x09040200, 0x09040201, 0x08000202, 0x08000203, 0x08040202, 0x08040203, 0x09000202, 0x09000203, 0x09040202, 0x09040203, }, { 0x00000000, 0x00100000, 0x00000100, 0x00100100, 0x00000008, 0x00100008, 0x00000108, 0x00100108, 0x00001000, 0x00101000, 0x00001100, 0x00101100, 0x00001008, 0x00101008, 0x00001108, 0x00101108, 0x04000000, 0x04100000, 0x04000100, 0x04100100, 0x04000008, 0x04100008, 0x04000108, 0x04100108, 0x04001000, 0x04101000, 0x04001100, 0x04101100, 0x04001008, 0x04101008, 0x04001108, 0x04101108, 0x00020000, 0x00120000, 0x00020100, 0x00120100, 0x00020008, 0x00120008, 0x00020108, 0x00120108, 0x00021000, 0x00121000, 0x00021100, 0x00121100, 0x00021008, 0x00121008, 0x00021108, 0x00121108, 0x04020000, 0x04120000, 0x04020100, 0x04120100, 0x04020008, 0x04120008, 0x04020108, 0x04120108, 0x04021000, 0x04121000, 0x04021100, 0x04121100, 0x04021008, 0x04121008, 0x04021108, 0x04121108, }, { 0x00000000, 0x10000000, 0x00010000, 0x10010000, 0x00000004, 0x10000004, 0x00010004, 0x10010004, 0x20000000, 0x30000000, 0x20010000, 0x30010000, 0x20000004, 0x30000004, 0x20010004, 0x30010004, 0x00100000, 0x10100000, 0x00110000, 0x10110000, 0x00100004, 0x10100004, 0x00110004, 0x10110004, 0x20100000, 0x30100000, 0x20110000, 0x30110000, 0x20100004, 0x30100004, 0x20110004, 0x30110004, 0x00001000, 0x10001000, 0x00011000, 0x10011000, 0x00001004, 0x10001004, 0x00011004, 0x10011004, 0x20001000, 0x30001000, 0x20011000, 0x30011000, 0x20001004, 0x30001004, 0x20011004, 0x30011004, 0x00101000, 0x10101000, 0x00111000, 0x10111000, 0x00101004, 0x10101004, 0x00111004, 0x10111004, 0x20101000, 0x30101000, 0x20111000, 0x30111000, 0x20101004, 0x30101004, 0x20111004, 0x30111004, }, { 0x00000000, 0x08000000, 0x00000008, 0x08000008, 0x00000400, 0x08000400, 0x00000408, 0x08000408, 0x00020000, 0x08020000, 0x00020008, 0x08020008, 0x00020400, 0x08020400, 0x00020408, 0x08020408, 0x00000001, 0x08000001, 0x00000009, 0x08000009, 0x00000401, 0x08000401, 0x00000409, 0x08000409, 0x00020001, 0x08020001, 0x00020009, 0x08020009, 0x00020401, 0x08020401, 0x00020409, 0x08020409, 0x02000000, 0x0A000000, 0x02000008, 0x0A000008, 0x02000400, 0x0A000400, 0x02000408, 0x0A000408, 0x02020000, 0x0A020000, 0x02020008, 0x0A020008, 0x02020400, 0x0A020400, 0x02020408, 0x0A020408, 0x02000001, 0x0A000001, 0x02000009, 0x0A000009, 0x02000401, 0x0A000401, 0x02000409, 0x0A000409, 0x02020001, 0x0A020001, 0x02020009, 0x0A020009, 0x02020401, 0x0A020401, 0x02020409, 0x0A020409, }, { 0x00000000, 0x00000100, 0x00080000, 0x00080100, 0x01000000, 0x01000100, 0x01080000, 0x01080100, 0x00000010, 0x00000110, 0x00080010, 0x00080110, 0x01000010, 0x01000110, 0x01080010, 0x01080110, 0x00200000, 0x00200100, 0x00280000, 0x00280100, 0x01200000, 0x01200100, 0x01280000, 0x01280100, 0x00200010, 0x00200110, 0x00280010, 0x00280110, 0x01200010, 0x01200110, 0x01280010, 0x01280110, 0x00000200, 0x00000300, 0x00080200, 0x00080300, 0x01000200, 0x01000300, 0x01080200, 0x01080300, 0x00000210, 0x00000310, 0x00080210, 0x00080310, 0x01000210, 0x01000310, 0x01080210, 0x01080310, 0x00200200, 0x00200300, 0x00280200, 0x00280300, 0x01200200, 0x01200300, 0x01280200, 0x01280300, 0x00200210, 0x00200310, 0x00280210, 0x00280310, 0x01200210, 0x01200310, 0x01280210, 0x01280310, }, { 0x00000000, 0x04000000, 0x00040000, 0x04040000, 0x00000002, 0x04000002, 0x00040002, 0x04040002, 0x00002000, 0x04002000, 0x00042000, 0x04042000, 0x00002002, 0x04002002, 0x00042002, 0x04042002, 0x00000020, 0x04000020, 0x00040020, 0x04040020, 0x00000022, 0x04000022, 0x00040022, 0x04040022, 0x00002020, 0x04002020, 0x00042020, 0x04042020, 0x00002022, 0x04002022, 0x00042022, 0x04042022, 0x00000800, 0x04000800, 0x00040800, 0x04040800, 0x00000802, 0x04000802, 0x00040802, 0x04040802, 0x00002800, 0x04002800, 0x00042800, 0x04042800, 0x00002802, 0x04002802, 0x00042802, 0x04042802, 0x00000820, 0x04000820, 0x00040820, 0x04040820, 0x00000822, 0x04000822, 0x00040822, 0x04040822, 0x00002820, 0x04002820, 0x00042820, 0x04042820, 0x00002822, 0x04002822, 0x00042822, 0x04042822 } }; #define BOX(i,n,S) (S)[(n)][(i)] #define BOX1(i,S) (S)[(i)] void _des_crypt_encrypt (u32 iv[2], u32 data[2], u32 Kc[16], u32 Kd[16], __local u32 (*s_SPtrans)[64]) { u32 tt; u32 r = data[0]; u32 l = data[1]; IP (r, l, tt); r = rotl32_S (r, 3u); l = rotl32_S (l, 3u); #ifdef _unroll #pragma unroll #endif for (u32 i = 0; i < 16; i += 2) { u32 u; u32 t; u = Kc[i + 0] ^ r; t = Kd[i + 0] ^ rotl32_S (r, 28u); l ^= BOX (((u >> 2) & 0x3f), 0, s_SPtrans) | BOX (((u >> 10) & 0x3f), 2, s_SPtrans) | BOX (((u >> 18) & 0x3f), 4, s_SPtrans) | BOX (((u >> 26) & 0x3f), 6, s_SPtrans) | BOX (((t >> 2) & 0x3f), 1, s_SPtrans) | BOX (((t >> 10) & 0x3f), 3, s_SPtrans) | BOX (((t >> 18) & 0x3f), 5, s_SPtrans) | BOX (((t >> 26) & 0x3f), 7, s_SPtrans); u = Kc[i + 1] ^ l; t = Kd[i + 1] ^ rotl32_S (l, 28u); r ^= BOX (((u >> 2) & 0x3f), 0, s_SPtrans) | BOX (((u >> 10) & 0x3f), 2, s_SPtrans) | BOX (((u >> 18) & 0x3f), 4, s_SPtrans) | BOX (((u >> 26) & 0x3f), 6, s_SPtrans) | BOX (((t >> 2) & 0x3f), 1, s_SPtrans) | BOX (((t >> 10) & 0x3f), 3, s_SPtrans) | BOX (((t >> 18) & 0x3f), 5, s_SPtrans) | BOX (((t >> 26) & 0x3f), 7, s_SPtrans); } l = rotl32_S (l, 29u); r = rotl32_S (r, 29u); FP (r, l, tt); iv[0] = l; iv[1] = r; } void _des_crypt_decrypt (u32 iv[2], u32 data[2], u32 Kc[16], u32 Kd[16], __local u32 (*s_SPtrans)[64]) { u32 tt; u32 r = data[0]; u32 l = data[1]; IP (r, l, tt); r = rotl32_S (r, 3u); l = rotl32_S (l, 3u); #ifdef _unroll #pragma unroll #endif for (u32 i = 16; i > 0; i -= 2) { u32 u; u32 t; u = Kc[i - 1] ^ r; t = Kd[i - 1] ^ rotl32_S (r, 28u); l ^= BOX (((u >> 2) & 0x3f), 0, s_SPtrans) | BOX (((u >> 10) & 0x3f), 2, s_SPtrans) | BOX (((u >> 18) & 0x3f), 4, s_SPtrans) | BOX (((u >> 26) & 0x3f), 6, s_SPtrans) | BOX (((t >> 2) & 0x3f), 1, s_SPtrans) | BOX (((t >> 10) & 0x3f), 3, s_SPtrans) | BOX (((t >> 18) & 0x3f), 5, s_SPtrans) | BOX (((t >> 26) & 0x3f), 7, s_SPtrans); u = Kc[i - 2] ^ l; t = Kd[i - 2] ^ rotl32_S (l, 28u); r ^= BOX (((u >> 2) & 0x3f), 0, s_SPtrans) | BOX (((u >> 10) & 0x3f), 2, s_SPtrans) | BOX (((u >> 18) & 0x3f), 4, s_SPtrans) | BOX (((u >> 26) & 0x3f), 6, s_SPtrans) | BOX (((t >> 2) & 0x3f), 1, s_SPtrans) | BOX (((t >> 10) & 0x3f), 3, s_SPtrans) | BOX (((t >> 18) & 0x3f), 5, s_SPtrans) | BOX (((t >> 26) & 0x3f), 7, s_SPtrans); } l = rotl32_S (l, 29u); r = rotl32_S (r, 29u); FP (r, l, tt); iv[0] = l; iv[1] = r; } void _des_crypt_keysetup (u32 c, u32 d, u32 Kc[16], u32 Kd[16], __local u32 (*s_skb)[64]) { u32 tt; PERM_OP (d, c, tt, 4, 0x0f0f0f0f); HPERM_OP (c, tt, 2, 0xcccc0000); HPERM_OP (d, tt, 2, 0xcccc0000); PERM_OP (d, c, tt, 1, 0x55555555); PERM_OP (c, d, tt, 8, 0x00ff00ff); PERM_OP (d, c, tt, 1, 0x55555555); d = ((d & 0x000000ff) << 16) | ((d & 0x0000ff00) << 0) | ((d & 0x00ff0000) >> 16) | ((c & 0xf0000000) >> 4); c = c & 0x0fffffff; #ifdef _unroll #pragma unroll #endif for (u32 i = 0; i < 16; i++) { if ((i < 2) || (i == 8) || (i == 15)) { c = ((c >> 1) | (c << 27)); d = ((d >> 1) | (d << 27)); } else { c = ((c >> 2) | (c << 26)); d = ((d >> 2) | (d << 26)); } c = c & 0x0fffffff; d = d & 0x0fffffff; const u32 c00 = (c >> 0) & 0x0000003f; const u32 c06 = (c >> 6) & 0x00383003; const u32 c07 = (c >> 7) & 0x0000003c; const u32 c13 = (c >> 13) & 0x0000060f; const u32 c20 = (c >> 20) & 0x00000001; u32 s = BOX (((c00 >> 0) & 0xff), 0, s_skb) | BOX (((c06 >> 0) & 0xff) |((c07 >> 0) & 0xff), 1, s_skb) | BOX (((c13 >> 0) & 0xff) |((c06 >> 8) & 0xff), 2, s_skb) | BOX (((c20 >> 0) & 0xff) |((c13 >> 8) & 0xff) |((c06 >> 16) & 0xff), 3, s_skb); const u32 d00 = (d >> 0) & 0x00003c3f; const u32 d07 = (d >> 7) & 0x00003f03; const u32 d21 = (d >> 21) & 0x0000000f; const u32 d22 = (d >> 22) & 0x00000030; u32 t = BOX (((d00 >> 0) & 0xff), 4, s_skb) | BOX (((d07 >> 0) & 0xff) |((d00 >> 8) & 0xff), 5, s_skb) | BOX (((d07 >> 8) & 0xff), 6, s_skb) | BOX (((d21 >> 0) & 0xff) |((d22 >> 0) & 0xff), 7, s_skb); Kc[i] = ((t << 16) | (s & 0x0000ffff)); Kd[i] = ((s >> 16) | (t & 0xffff0000)); Kc[i] = rotl32_S (Kc[i], 2u); Kd[i] = rotl32_S (Kd[i], 2u); } } void hmac_sha1_run_V (u32x w0[4], u32x w1[4], u32x w2[4], u32x w3[4], u32x ipad[5], u32x opad[5], u32x digest[5]) { digest[0] = ipad[0]; digest[1] = ipad[1]; digest[2] = ipad[2]; digest[3] = ipad[3]; digest[4] = ipad[4]; sha1_transform_vector (w0, w1, w2, w3, digest); w0[0] = digest[0]; w0[1] = digest[1]; w0[2] = digest[2]; w0[3] = digest[3]; w1[0] = digest[4]; w1[1] = 0x80000000; w1[2] = 0; w1[3] = 0; w2[0] = 0; w2[1] = 0; w2[2] = 0; w2[3] = 0; w3[0] = 0; w3[1] = 0; w3[2] = 0; w3[3] = (64 + 20) * 8; digest[0] = opad[0]; digest[1] = opad[1]; digest[2] = opad[2]; digest[3] = opad[3]; digest[4] = opad[4]; sha1_transform_vector (w0, w1, w2, w3, digest); } void hmac_sha512_run_V (u32x w0[4], u32x w1[4], u32x w2[4], u32x w3[4], u32x w4[4], u32x w5[4], u32x w6[4], u32x w7[4], u64x ipad[8], u64x opad[8], u64x digest[8]) { digest[0] = ipad[0]; digest[1] = ipad[1]; digest[2] = ipad[2]; digest[3] = ipad[3]; digest[4] = ipad[4]; digest[5] = ipad[5]; digest[6] = ipad[6]; digest[7] = ipad[7]; sha512_transform_vector (w0, w1, w2, w3, w4, w5, w6, w7, digest); w0[0] = h32_from_64 (digest[0]); w0[1] = l32_from_64 (digest[0]); w0[2] = h32_from_64 (digest[1]); w0[3] = l32_from_64 (digest[1]); w1[0] = h32_from_64 (digest[2]); w1[1] = l32_from_64 (digest[2]); w1[2] = h32_from_64 (digest[3]); w1[3] = l32_from_64 (digest[3]); w2[0] = h32_from_64 (digest[4]); w2[1] = l32_from_64 (digest[4]); w2[2] = h32_from_64 (digest[5]); w2[3] = l32_from_64 (digest[5]); w3[0] = h32_from_64 (digest[6]); w3[1] = l32_from_64 (digest[6]); w3[2] = h32_from_64 (digest[7]); w3[3] = l32_from_64 (digest[7]); w4[0] = 0x80000000; w4[1] = 0; w4[2] = 0; w4[3] = 0; w5[0] = 0; w5[1] = 0; w5[2] = 0; w5[3] = 0; w6[0] = 0; w6[1] = 0; w6[2] = 0; w6[3] = 0; w7[0] = 0; w7[1] = 0; w7[2] = 0; w7[3] = (128 + 64) * 8; digest[0] = opad[0]; digest[1] = opad[1]; digest[2] = opad[2]; digest[3] = opad[3]; digest[4] = opad[4]; digest[5] = opad[5]; digest[6] = opad[6]; digest[7] = opad[7]; sha512_transform_vector (w0, w1, w2, w3, w4, w5, w6, w7, digest); } __kernel void m15300_init (__global pw_t *pws, __constant const kernel_rule_t *rules_buf, __global const pw_t *combs_buf, __global const bf_t *bfs_buf, __global dpapimk_tmp_t *tmps, __global void *hooks, __global const u32 *bitmaps_buf_s1_a, __global const u32 *bitmaps_buf_s1_b, __global const u32 *bitmaps_buf_s1_c, __global const u32 *bitmaps_buf_s1_d, __global const u32 *bitmaps_buf_s2_a, __global const u32 *bitmaps_buf_s2_b, __global const u32 *bitmaps_buf_s2_c, __global const u32 *bitmaps_buf_s2_d, __global plain_t *plains_buf, __global const digest_t *digests_buf, __global u32 *hashes_shown, __global const salt_t *salt_bufs, __global const dpapimk_t *esalt_bufs, __global u32 *d_return_buf, __global u32 *d_scryptV0_buf, __global u32 *d_scryptV1_buf, __global u32 *d_scryptV2_buf, __global u32 *d_scryptV3_buf, const u32 bitmap_mask, const u32 bitmap_shift1, const u32 bitmap_shift2, const u32 salt_pos, const u32 loop_pos, const u32 loop_cnt, const u32 rules_cnt, const u32 digests_cnt, const u32 digests_offset, const u32 combs_mode, const u64 gid_max) { /** * base */ const u64 gid = get_global_id (0); if (gid >= gid_max) return; /** * main */ u32 digest_context[5]; if (esalt_bufs[digests_offset].context == 1) { /* local credentials */ sha1_ctx_t ctx; sha1_init (&ctx); sha1_update_global_utf16le_swap (&ctx, pws[gid].i, pws[gid].pw_len); sha1_final (&ctx); digest_context[0] = ctx.h[0]; digest_context[1] = ctx.h[1]; digest_context[2] = ctx.h[2]; digest_context[3] = ctx.h[3]; digest_context[4] = ctx.h[4]; } else if (esalt_bufs[digests_offset].context == 2) { /* domain credentials */ md4_ctx_t ctx; md4_init (&ctx); md4_update_global_utf16le (&ctx, pws[gid].i, pws[gid].pw_len); md4_final (&ctx); digest_context[0] = ctx.h[0]; digest_context[1] = ctx.h[1]; digest_context[2] = ctx.h[2]; digest_context[3] = ctx.h[3]; digest_context[4] = 0; digest_context[0] = swap32_S (digest_context[0]); digest_context[1] = swap32_S (digest_context[1]); digest_context[2] = swap32_S (digest_context[2]); digest_context[3] = swap32_S (digest_context[3]); } /* initialize hmac-sha1 */ u32 w0[4]; u32 w1[4]; u32 w2[4]; u32 w3[4]; w0[0] = digest_context[0]; w0[1] = digest_context[1]; w0[2] = digest_context[2]; w0[3] = digest_context[3]; w1[0] = digest_context[4]; w1[1] = 0; w1[2] = 0; w1[3] = 0; w2[0] = 0; w2[1] = 0; w2[2] = 0; w2[3] = 0; w3[0] = 0; w3[1] = 0; w3[2] = 0; w3[3] = 0; sha1_hmac_ctx_t ctx; sha1_hmac_init_64 (&ctx, w0, w1, w2, w3); sha1_hmac_update_global (&ctx, esalt_bufs[digests_offset].SID, esalt_bufs[digests_offset].SID_len); sha1_hmac_final (&ctx); u32 key[5]; key[0] = ctx.opad.h[0]; key[1] = ctx.opad.h[1]; key[2] = ctx.opad.h[2]; key[3] = ctx.opad.h[3]; key[4] = ctx.opad.h[4]; /* this key is used as password for pbkdf2-hmac-* */ tmps[gid].userKey[0] = key[0]; tmps[gid].userKey[1] = key[1]; tmps[gid].userKey[2] = key[2]; tmps[gid].userKey[3] = key[3]; tmps[gid].userKey[4] = key[4]; if (esalt_bufs[digests_offset].version == 1) { /* if DPAPImk version 1, pbkdf-hmac-sha1 is used */ w0[0] = key[0]; w0[1] = key[1]; w0[2] = key[2]; w0[3] = key[3]; w1[0] = key[4]; w1[1] = 0; w1[2] = 0; w1[3] = 0; w2[0] = 0; w2[1] = 0; w2[2] = 0; w2[3] = 0; w3[0] = 0; w3[1] = 0; w3[2] = 0; w3[3] = 0; sha1_hmac_ctx_t sha1_hmac_ctx; sha1_hmac_init_64 (&sha1_hmac_ctx, w0, w1, w2, w3); tmps[gid].ipad[0] = sha1_hmac_ctx.ipad.h[0]; tmps[gid].ipad[1] = sha1_hmac_ctx.ipad.h[1]; tmps[gid].ipad[2] = sha1_hmac_ctx.ipad.h[2]; tmps[gid].ipad[3] = sha1_hmac_ctx.ipad.h[3]; tmps[gid].ipad[4] = sha1_hmac_ctx.ipad.h[4]; tmps[gid].opad[0] = sha1_hmac_ctx.opad.h[0]; tmps[gid].opad[1] = sha1_hmac_ctx.opad.h[1]; tmps[gid].opad[2] = sha1_hmac_ctx.opad.h[2]; tmps[gid].opad[3] = sha1_hmac_ctx.opad.h[3]; tmps[gid].opad[4] = sha1_hmac_ctx.opad.h[4]; w0[0] = esalt_bufs[digests_offset].iv[0]; w0[1] = esalt_bufs[digests_offset].iv[1]; w0[2] = esalt_bufs[digests_offset].iv[2]; w0[3] = esalt_bufs[digests_offset].iv[3]; w1[0] = 0; w1[1] = 0; w1[2] = 0; w1[3] = 0; w2[0] = 0; w2[1] = 0; w2[2] = 0; w2[3] = 0; w3[0] = 0; w3[1] = 0; w3[2] = 0; w3[3] = 0; sha1_hmac_update_64 (&sha1_hmac_ctx, w0, w1, w2, w3, 16); for (u32 i = 0, j = 1; i < 8; i += 5, j += 1) { sha1_hmac_ctx_t sha1_hmac_ctx2 = sha1_hmac_ctx; w0[0] = j; w0[1] = 0; w0[2] = 0; w0[3] = 0; w1[0] = 0; w1[1] = 0; w1[2] = 0; w1[3] = 0; w2[0] = 0; w2[1] = 0; w2[2] = 0; w2[3] = 0; w3[0] = 0; w3[1] = 0; w3[2] = 0; w3[3] = 0; sha1_hmac_update_64 (&sha1_hmac_ctx2, w0, w1, w2, w3, 4); sha1_hmac_final (&sha1_hmac_ctx2); tmps[gid].dgst[i + 0] = sha1_hmac_ctx2.opad.h[0]; tmps[gid].dgst[i + 1] = sha1_hmac_ctx2.opad.h[1]; tmps[gid].dgst[i + 2] = sha1_hmac_ctx2.opad.h[2]; tmps[gid].dgst[i + 3] = sha1_hmac_ctx2.opad.h[3]; tmps[gid].dgst[i + 4] = sha1_hmac_ctx2.opad.h[4]; tmps[gid].out[i + 0] = tmps[gid].dgst[i + 0]; tmps[gid].out[i + 1] = tmps[gid].dgst[i + 1]; tmps[gid].out[i + 2] = tmps[gid].dgst[i + 2]; tmps[gid].out[i + 3] = tmps[gid].dgst[i + 3]; tmps[gid].out[i + 4] = tmps[gid].dgst[i + 4]; } } else if (esalt_bufs[digests_offset].version == 2) { /* if DPAPImk version 2, pbkdf-hmac-sha512 is used*/ u32 w0[4]; u32 w1[4]; u32 w2[4]; u32 w3[4]; u32 w4[4]; u32 w5[4]; u32 w6[4]; u32 w7[4]; w0[0] = key[0]; w0[1] = key[1]; w0[2] = key[2]; w0[3] = key[3]; w1[0] = key[4]; w1[1] = 0; w1[2] = 0; w1[3] = 0; w2[0] = 0; w2[1] = 0; w2[2] = 0; w2[3] = 0; w3[0] = 0; w3[1] = 0; w3[2] = 0; w3[3] = 0; w4[0] = 0; w4[1] = 0; w4[2] = 0; w4[3] = 0; w5[0] = 0; w5[1] = 0; w5[2] = 0; w5[3] = 0; w6[0] = 0; w6[1] = 0; w6[2] = 0; w6[3] = 0; w7[0] = 0; w7[1] = 0; w7[2] = 0; w7[3] = 0; sha512_hmac_ctx_t sha512_hmac_ctx; sha512_hmac_init_128 (&sha512_hmac_ctx, w0, w1, w2, w3, w5, w5, w6, w7); tmps[gid].ipad64[0] = sha512_hmac_ctx.ipad.h[0]; tmps[gid].ipad64[1] = sha512_hmac_ctx.ipad.h[1]; tmps[gid].ipad64[2] = sha512_hmac_ctx.ipad.h[2]; tmps[gid].ipad64[3] = sha512_hmac_ctx.ipad.h[3]; tmps[gid].ipad64[4] = sha512_hmac_ctx.ipad.h[4]; tmps[gid].ipad64[5] = sha512_hmac_ctx.ipad.h[5]; tmps[gid].ipad64[6] = sha512_hmac_ctx.ipad.h[6]; tmps[gid].ipad64[7] = sha512_hmac_ctx.ipad.h[7]; tmps[gid].opad64[0] = sha512_hmac_ctx.opad.h[0]; tmps[gid].opad64[1] = sha512_hmac_ctx.opad.h[1]; tmps[gid].opad64[2] = sha512_hmac_ctx.opad.h[2]; tmps[gid].opad64[3] = sha512_hmac_ctx.opad.h[3]; tmps[gid].opad64[4] = sha512_hmac_ctx.opad.h[4]; tmps[gid].opad64[5] = sha512_hmac_ctx.opad.h[5]; tmps[gid].opad64[6] = sha512_hmac_ctx.opad.h[6]; tmps[gid].opad64[7] = sha512_hmac_ctx.opad.h[7]; w0[0] = esalt_bufs[digests_offset].iv[0]; w0[1] = esalt_bufs[digests_offset].iv[1]; w0[2] = esalt_bufs[digests_offset].iv[2]; w0[3] = esalt_bufs[digests_offset].iv[3]; w1[0] = 0; w1[1] = 0; w1[2] = 0; w1[3] = 0; w2[0] = 0; w2[1] = 0; w2[2] = 0; w2[3] = 0; w3[0] = 0; w3[1] = 0; w3[2] = 0; w3[3] = 0; w4[0] = 0; w4[1] = 0; w4[2] = 0; w4[3] = 0; w5[0] = 0; w5[1] = 0; w5[2] = 0; w5[3] = 0; w6[0] = 0; w6[1] = 0; w6[2] = 0; w6[3] = 0; w7[0] = 0; w7[1] = 0; w7[2] = 0; w7[3] = 0; sha512_hmac_update_128 (&sha512_hmac_ctx, w0, w1, w2, w3, w4, w5, w6, w7, 16); for (u32 i = 0, j = 1; i < 8; i += 8, j += 1) { sha512_hmac_ctx_t sha512_hmac_ctx2 = sha512_hmac_ctx; w0[0] = j; w0[1] = 0; w0[2] = 0; w0[3] = 0; w1[0] = 0; w1[1] = 0; w1[2] = 0; w1[3] = 0; w2[0] = 0; w2[1] = 0; w2[2] = 0; w2[3] = 0; w3[0] = 0; w3[1] = 0; w3[2] = 0; w3[3] = 0; w4[0] = 0; w4[1] = 0; w4[2] = 0; w4[3] = 0; w5[0] = 0; w5[1] = 0; w5[2] = 0; w5[3] = 0; w6[0] = 0; w6[1] = 0; w6[2] = 0; w6[3] = 0; w7[0] = 0; w7[1] = 0; w7[2] = 0; w7[3] = 0; sha512_hmac_update_128 (&sha512_hmac_ctx2, w0, w1, w2, w3, w4, w5, w6, w7, 4); sha512_hmac_final (&sha512_hmac_ctx2); tmps[gid].dgst64[i + 0] = sha512_hmac_ctx2.opad.h[0]; tmps[gid].dgst64[i + 1] = sha512_hmac_ctx2.opad.h[1]; tmps[gid].dgst64[i + 2] = sha512_hmac_ctx2.opad.h[2]; tmps[gid].dgst64[i + 3] = sha512_hmac_ctx2.opad.h[3]; tmps[gid].dgst64[i + 4] = sha512_hmac_ctx2.opad.h[4]; tmps[gid].dgst64[i + 5] = sha512_hmac_ctx2.opad.h[5]; tmps[gid].dgst64[i + 6] = sha512_hmac_ctx2.opad.h[6]; tmps[gid].dgst64[i + 7] = sha512_hmac_ctx2.opad.h[7]; tmps[gid].out64[i + 0] = tmps[gid].dgst64[i + 0]; tmps[gid].out64[i + 1] = tmps[gid].dgst64[i + 1]; tmps[gid].out64[i + 2] = tmps[gid].dgst64[i + 2]; tmps[gid].out64[i + 3] = tmps[gid].dgst64[i + 3]; tmps[gid].out64[i + 4] = tmps[gid].dgst64[i + 4]; tmps[gid].out64[i + 5] = tmps[gid].dgst64[i + 5]; tmps[gid].out64[i + 6] = tmps[gid].dgst64[i + 6]; tmps[gid].out64[i + 7] = tmps[gid].dgst64[i + 7]; } } } __kernel void m15300_loop (__global pw_t *pws, __constant const kernel_rule_t *rules_buf, __global const pw_t *combs_buf, __global const bf_t *bfs_buf, __global dpapimk_tmp_t *tmps, __global void *hooks, __global const u32 *bitmaps_buf_s1_a, __global const u32 *bitmaps_buf_s1_b, __global const u32 *bitmaps_buf_s1_c, __global const u32 *bitmaps_buf_s1_d, __global const u32 *bitmaps_buf_s2_a, __global const u32 *bitmaps_buf_s2_b, __global const u32 *bitmaps_buf_s2_c, __global const u32 *bitmaps_buf_s2_d, __global plain_t *plains_buf, __global const digest_t *digests_buf, __global u32 *hashes_shown, __global const salt_t *salt_bufs, __global const dpapimk_t *esalt_bufs, __global u32 *d_return_buf, __global u32 *d_scryptV0_buf, __global u32 *d_scryptV1_buf, __global u32 *d_scryptV2_buf, __global u32 *d_scryptV3_buf, const u32 bitmap_mask, const u32 bitmap_shift1, const u32 bitmap_shift2, const u32 salt_pos, const u32 loop_pos, const u32 loop_cnt, const u32 rules_cnt, const u32 digests_cnt, const u32 digests_offset, const u32 combs_mode, const u64 gid_max) { /** * base */ const u64 gid = get_global_id (0); if ((gid * VECT_SIZE) >= gid_max) return; if (esalt_bufs[digests_offset].version == 1) { u32x ipad[5]; u32x opad[5]; ipad[0] = packv (tmps, ipad, gid, 0); ipad[1] = packv (tmps, ipad, gid, 1); ipad[2] = packv (tmps, ipad, gid, 2); ipad[3] = packv (tmps, ipad, gid, 3); ipad[4] = packv (tmps, ipad, gid, 4); opad[0] = packv (tmps, opad, gid, 0); opad[1] = packv (tmps, opad, gid, 1); opad[2] = packv (tmps, opad, gid, 2); opad[3] = packv (tmps, opad, gid, 3); opad[4] = packv (tmps, opad, gid, 4); for (u32 i = 0; i < 8; i += 5) { u32x dgst[5]; u32x out[5]; dgst[0] = packv (tmps, dgst, gid, i + 0); dgst[1] = packv (tmps, dgst, gid, i + 1); dgst[2] = packv (tmps, dgst, gid, i + 2); dgst[3] = packv (tmps, dgst, gid, i + 3); dgst[4] = packv (tmps, dgst, gid, i + 4); out[0] = packv (tmps, out, gid, i + 0); out[1] = packv (tmps, out, gid, i + 1); out[2] = packv (tmps, out, gid, i + 2); out[3] = packv (tmps, out, gid, i + 3); out[4] = packv (tmps, out, gid, i + 4); for (u32 j = 0; j < loop_cnt; j++) { u32x w0[4]; u32x w1[4]; u32x w2[4]; u32x w3[4]; w0[0] = out[0]; w0[1] = out[1]; w0[2] = out[2]; w0[3] = out[3]; w1[0] = out[4]; w1[1] = 0x80000000; w1[2] = 0; w1[3] = 0; w2[0] = 0; w2[1] = 0; w2[2] = 0; w2[3] = 0; w3[0] = 0; w3[1] = 0; w3[2] = 0; w3[3] = (64 + 20) * 8; hmac_sha1_run_V (w0, w1, w2, w3, ipad, opad, dgst); out[0] ^= dgst[0]; out[1] ^= dgst[1]; out[2] ^= dgst[2]; out[3] ^= dgst[3]; out[4] ^= dgst[4]; } unpackv (tmps, dgst, gid, i + 0, dgst[0]); unpackv (tmps, dgst, gid, i + 1, dgst[1]); unpackv (tmps, dgst, gid, i + 2, dgst[2]); unpackv (tmps, dgst, gid, i + 3, dgst[3]); unpackv (tmps, dgst, gid, i + 4, dgst[4]); unpackv (tmps, out, gid, i + 0, out[0]); unpackv (tmps, out, gid, i + 1, out[1]); unpackv (tmps, out, gid, i + 2, out[2]); unpackv (tmps, out, gid, i + 3, out[3]); unpackv (tmps, out, gid, i + 4, out[4]); } } else if (esalt_bufs[digests_offset].version == 2) { u64x ipad[8]; u64x opad[8]; ipad[0] = pack64v (tmps, ipad64, gid, 0); ipad[1] = pack64v (tmps, ipad64, gid, 1); ipad[2] = pack64v (tmps, ipad64, gid, 2); ipad[3] = pack64v (tmps, ipad64, gid, 3); ipad[4] = pack64v (tmps, ipad64, gid, 4); ipad[5] = pack64v (tmps, ipad64, gid, 5); ipad[6] = pack64v (tmps, ipad64, gid, 6); ipad[7] = pack64v (tmps, ipad64, gid, 7); opad[0] = pack64v (tmps, opad64, gid, 0); opad[1] = pack64v (tmps, opad64, gid, 1); opad[2] = pack64v (tmps, opad64, gid, 2); opad[3] = pack64v (tmps, opad64, gid, 3); opad[4] = pack64v (tmps, opad64, gid, 4); opad[5] = pack64v (tmps, opad64, gid, 5); opad[6] = pack64v (tmps, opad64, gid, 6); opad[7] = pack64v (tmps, opad64, gid, 7); for (u32 i = 0; i < 8; i += 8) { u64x dgst[8]; u64x out[8]; dgst[0] = pack64v (tmps, dgst64, gid, i + 0); dgst[1] = pack64v (tmps, dgst64, gid, i + 1); dgst[2] = pack64v (tmps, dgst64, gid, i + 2); dgst[3] = pack64v (tmps, dgst64, gid, i + 3); dgst[4] = pack64v (tmps, dgst64, gid, i + 4); dgst[5] = pack64v (tmps, dgst64, gid, i + 5); dgst[6] = pack64v (tmps, dgst64, gid, i + 6); dgst[7] = pack64v (tmps, dgst64, gid, i + 7); out[0] = pack64v (tmps, out64, gid, i + 0); out[1] = pack64v (tmps, out64, gid, i + 1); out[2] = pack64v (tmps, out64, gid, i + 2); out[3] = pack64v (tmps, out64, gid, i + 3); out[4] = pack64v (tmps, out64, gid, i + 4); out[5] = pack64v (tmps, out64, gid, i + 5); out[6] = pack64v (tmps, out64, gid, i + 6); out[7] = pack64v (tmps, out64, gid, i + 7); for (u32 j = 0; j < loop_cnt; j++) { u32x w0[4]; u32x w1[4]; u32x w2[4]; u32x w3[4]; u32x w4[4]; u32x w5[4]; u32x w6[4]; u32x w7[4]; w0[0] = h32_from_64 (out[0]); w0[1] = l32_from_64 (out[0]); w0[2] = h32_from_64 (out[1]); w0[3] = l32_from_64 (out[1]); w1[0] = h32_from_64 (out[2]); w1[1] = l32_from_64 (out[2]); w1[2] = h32_from_64 (out[3]); w1[3] = l32_from_64 (out[3]); w2[0] = h32_from_64 (out[4]); w2[1] = l32_from_64 (out[4]); w2[2] = h32_from_64 (out[5]); w2[3] = l32_from_64 (out[5]); w3[0] = h32_from_64 (out[6]); w3[1] = l32_from_64 (out[6]); w3[2] = h32_from_64 (out[7]); w3[3] = l32_from_64 (out[7]); w4[0] = 0x80000000; w4[1] = 0; w4[2] = 0; w4[3] = 0; w5[0] = 0; w5[1] = 0; w5[2] = 0; w5[3] = 0; w6[0] = 0; w6[1] = 0; w6[2] = 0; w6[3] = 0; w7[0] = 0; w7[1] = 0; w7[2] = 0; w7[3] = (128 + 64) * 8; hmac_sha512_run_V (w0, w1, w2, w3, w4, w5, w6, w7, ipad, opad, dgst); out[0] ^= dgst[0]; out[1] ^= dgst[1]; out[2] ^= dgst[2]; out[3] ^= dgst[3]; out[4] ^= dgst[4]; out[5] ^= dgst[5]; out[6] ^= dgst[6]; out[7] ^= dgst[7]; } unpack64v (tmps, dgst64, gid, i + 0, dgst[0]); unpack64v (tmps, dgst64, gid, i + 1, dgst[1]); unpack64v (tmps, dgst64, gid, i + 2, dgst[2]); unpack64v (tmps, dgst64, gid, i + 3, dgst[3]); unpack64v (tmps, dgst64, gid, i + 4, dgst[4]); unpack64v (tmps, dgst64, gid, i + 5, dgst[5]); unpack64v (tmps, dgst64, gid, i + 6, dgst[6]); unpack64v (tmps, dgst64, gid, i + 7, dgst[7]); unpack64v (tmps, out64, gid, i + 0, out[0]); unpack64v (tmps, out64, gid, i + 1, out[1]); unpack64v (tmps, out64, gid, i + 2, out[2]); unpack64v (tmps, out64, gid, i + 3, out[3]); unpack64v (tmps, out64, gid, i + 4, out[4]); unpack64v (tmps, out64, gid, i + 5, out[5]); unpack64v (tmps, out64, gid, i + 6, out[6]); unpack64v (tmps, out64, gid, i + 7, out[7]); } } } __kernel void m15300_comp (__global pw_t *pws, __constant const kernel_rule_t *rules_buf, __global const pw_t *combs_buf, __global const bf_t *bfs_buf, __global dpapimk_tmp_t *tmps, __global void *hooks, __global const u32 *bitmaps_buf_s1_a, __global const u32 *bitmaps_buf_s1_b, __global const u32 *bitmaps_buf_s1_c, __global const u32 *bitmaps_buf_s1_d, __global const u32 *bitmaps_buf_s2_a, __global const u32 *bitmaps_buf_s2_b, __global const u32 *bitmaps_buf_s2_c, __global const u32 *bitmaps_buf_s2_d, __global plain_t *plains_buf, __global const digest_t *digests_buf, __global u32 *hashes_shown, __global const salt_t *salt_bufs, __global const dpapimk_t *esalt_bufs, __global u32 *d_return_buf, __global u32 *d_scryptV0_buf, __global u32 *d_scryptV1_buf, __global u32 *d_scryptV2_buf, __global u32 *d_scryptV3_buf, const u32 bitmap_mask, const u32 bitmap_shift1, const u32 bitmap_shift2, const u32 salt_pos, const u32 loop_pos, const u32 loop_cnt, const u32 rules_cnt, const u32 digests_cnt, const u32 digests_offset, const u32 combs_mode, const u64 gid_max) { const u64 gid = get_global_id (0); const u64 lid = get_local_id (0); const u64 lsz = get_local_size (0); /** * des shared */ __local u32 s_SPtrans[8][64]; __local u32 s_skb[8][64]; for (u32 i = lid; i < 64; i += lsz) { s_SPtrans[0][i] = c_SPtrans[0][i]; s_SPtrans[1][i] = c_SPtrans[1][i]; s_SPtrans[2][i] = c_SPtrans[2][i]; s_SPtrans[3][i] = c_SPtrans[3][i]; s_SPtrans[4][i] = c_SPtrans[4][i]; s_SPtrans[5][i] = c_SPtrans[5][i]; s_SPtrans[6][i] = c_SPtrans[6][i]; s_SPtrans[7][i] = c_SPtrans[7][i]; s_skb[0][i] = c_skb[0][i]; s_skb[1][i] = c_skb[1][i]; s_skb[2][i] = c_skb[2][i]; s_skb[3][i] = c_skb[3][i]; s_skb[4][i] = c_skb[4][i]; s_skb[5][i] = c_skb[5][i]; s_skb[6][i] = c_skb[6][i]; s_skb[7][i] = c_skb[7][i]; } barrier (CLK_LOCAL_MEM_FENCE); /** * aes shared */ #ifdef REAL_SHM __local u32 s_td0[256]; __local u32 s_td1[256]; __local u32 s_td2[256]; __local u32 s_td3[256]; __local u32 s_td4[256]; __local u32 s_te0[256]; __local u32 s_te1[256]; __local u32 s_te2[256]; __local u32 s_te3[256]; __local u32 s_te4[256]; for (u32 i = lid; i < 256; i += lsz) { s_td0[i] = td0[i]; s_td1[i] = td1[i]; s_td2[i] = td2[i]; s_td3[i] = td3[i]; s_td4[i] = td4[i]; s_te0[i] = te0[i]; s_te1[i] = te1[i]; s_te2[i] = te2[i]; s_te3[i] = te3[i]; s_te4[i] = te4[i]; } barrier (CLK_LOCAL_MEM_FENCE); #else __constant u32a *s_td0 = td0; __constant u32a *s_td1 = td1; __constant u32a *s_td2 = td2; __constant u32a *s_td3 = td3; __constant u32a *s_td4 = td4; __constant u32a *s_te0 = te0; __constant u32a *s_te1 = te1; __constant u32a *s_te2 = te2; __constant u32a *s_te3 = te3; __constant u32a *s_te4 = te4; #endif if (gid >= gid_max) return; /** * main */ if (esalt_bufs[digests_offset].version == 1) { u32 w0[4]; u32 w1[4]; u32 w2[4]; u32 w3[4]; u32 ipad[5]; u32 opad[5]; u32 key[6]; key[0] = swap32_S (tmps[gid].out[0]); key[1] = swap32_S (tmps[gid].out[1]); key[2] = swap32_S (tmps[gid].out[2]); key[3] = swap32_S (tmps[gid].out[3]); key[4] = swap32_S (tmps[gid].out[4]); key[5] = swap32_S (tmps[gid].out[5]); u32 iv[2]; iv[0] = swap32_S (tmps[gid].out[6]); iv[1] = swap32_S (tmps[gid].out[7]); u32 decrypted[26]; /* Construct 3DES keys */ const u32 a = (key[0]); const u32 b = (key[1]); u32 Ka[16]; u32 Kb[16]; _des_crypt_keysetup (a, b, Ka, Kb, s_skb); const u32 c = (key[2]); const u32 d = (key[3]); u32 Kc[16]; u32 Kd[16]; _des_crypt_keysetup (c, d, Kc, Kd, s_skb); const u32 e = (key[4]); const u32 f = (key[5]); u32 Ke[16]; u32 Kf[16]; _des_crypt_keysetup (e, f, Ke, Kf, s_skb); u32 contents_pos; u32 contents_off; u32 wx_off; for (wx_off = 0, contents_pos = 0, contents_off = 0; contents_pos < esalt_bufs[digests_offset].contents_len; wx_off += 2, contents_pos += 8, contents_off += 2) { /* First Pass */ u32 data[2]; data[0] = swap32_S (esalt_bufs[digests_offset].contents[contents_off + 0]); data[1] = swap32_S (esalt_bufs[digests_offset].contents[contents_off + 1]); u32 p1[2]; _des_crypt_decrypt (p1, data, Ke, Kf, s_SPtrans); /* Second Pass */ u32 p2[2]; _des_crypt_encrypt (p2, p1, Kc, Kd, s_SPtrans); /* Third Pass */ u32 out[2]; _des_crypt_decrypt (out, p2, Ka, Kb, s_SPtrans); out[0] ^= iv[0]; out[1] ^= iv[1]; decrypted[wx_off + 0] = out[0]; decrypted[wx_off + 1] = out[1]; iv[0] = data[0]; iv[1] = data[1]; } u32 hmacSalt[4]; u32 expectedHmac[4]; u32 lastKey[16]; hmacSalt[0] = swap32_S (decrypted[0]); hmacSalt[1] = swap32_S (decrypted[1]); hmacSalt[2] = swap32_S (decrypted[2]); hmacSalt[3] = swap32_S (decrypted[3]); expectedHmac[0] = swap32_S (decrypted[4 + 0]); expectedHmac[1] = swap32_S (decrypted[4 + 1]); expectedHmac[2] = swap32_S (decrypted[4 + 2]); expectedHmac[3] = swap32_S (decrypted[4 + 3]); for(int i = 0; i < 16; i++) { lastKey[i] = decrypted[i + 26 - 16]; } w0[0] = tmps[gid].userKey[0]; w0[1] = tmps[gid].userKey[1]; w0[2] = tmps[gid].userKey[2]; w0[3] = tmps[gid].userKey[3]; w1[0] = tmps[gid].userKey[4]; w1[1] = 0; w1[2] = 0; w1[3] = 0; w2[0] = 0; w2[1] = 0; w2[2] = 0; w2[3] = 0; w3[0] = 0; w3[1] = 0; w3[2] = 0; w3[3] = 0; sha1_hmac_ctx_t ctx; sha1_hmac_init_64 (&ctx, w0, w1, w2, w3); w0[0] = hmacSalt[0]; w0[1] = hmacSalt[1]; w0[2] = hmacSalt[2]; w0[3] = hmacSalt[3]; w1[0] = 0; w1[1] = 0; w1[2] = 0; w1[3] = 0; w2[0] = 0; w2[1] = 0; w2[2] = 0; w2[3] = 0; w3[0] = 0; w3[1] = 0; w3[2] = 0; w3[3] = 0; sha1_hmac_update_64 (&ctx, w0, w1, w2, w3, 16); sha1_hmac_final (&ctx); w0[0] = ctx.opad.h[0]; w0[1] = ctx.opad.h[1]; w0[2] = ctx.opad.h[2]; w0[3] = ctx.opad.h[3]; w1[0] = ctx.opad.h[4]; w1[1] = 0; w1[2] = 0; w1[3] = 0; w2[0] = 0; w2[1] = 0; w2[2] = 0; w2[3] = 0; w3[0] = 0; w3[1] = 0; w3[2] = 0; w3[3] = 0; sha1_hmac_init_64 (&ctx, w0, w1, w2, w3); w0[0] = swap32_S (lastKey[ 0]); w0[1] = swap32_S (lastKey[ 1]); w0[2] = swap32_S (lastKey[ 2]); w0[3] = swap32_S (lastKey[ 3]); w1[0] = swap32_S (lastKey[ 4]); w1[1] = swap32_S (lastKey[ 5]); w1[2] = swap32_S (lastKey[ 6]); w1[3] = swap32_S (lastKey[ 7]); w2[0] = swap32_S (lastKey[ 8]); w2[1] = swap32_S (lastKey[ 9]); w2[2] = swap32_S (lastKey[10]); w2[3] = swap32_S (lastKey[11]); w3[0] = swap32_S (lastKey[12]); w3[1] = swap32_S (lastKey[13]); w3[2] = swap32_S (lastKey[14]); w3[3] = swap32_S (lastKey[15]); sha1_hmac_update_64 (&ctx, w0, w1, w2, w3, 64); sha1_hmac_final (&ctx); #define il_pos 0 if ((expectedHmac[0] == ctx.opad.h[0]) && (expectedHmac[1] == ctx.opad.h[1]) && (expectedHmac[2] == ctx.opad.h[2]) && (expectedHmac[3] == ctx.opad.h[3])) { if (atomic_inc (&hashes_shown[digests_offset]) == 0) { mark_hash (plains_buf, d_return_buf, salt_pos, digests_cnt, 0, digests_offset + 0, gid, il_pos); } } } else if (esalt_bufs[digests_offset].version == 2) { u32 w0[4]; u32 w1[4]; u32 w2[4]; u32 w3[4]; u32 w4[4]; u32 w5[4]; u32 w6[4]; u32 w7[4]; /* Construct AES key */ u32 key[8]; key[0] = h32_from_64_S (tmps[gid].out64[0]); key[1] = l32_from_64_S (tmps[gid].out64[0]); key[2] = h32_from_64_S (tmps[gid].out64[1]); key[3] = l32_from_64_S (tmps[gid].out64[1]); key[4] = h32_from_64_S (tmps[gid].out64[2]); key[5] = l32_from_64_S (tmps[gid].out64[2]); key[6] = h32_from_64_S (tmps[gid].out64[3]); key[7] = l32_from_64_S (tmps[gid].out64[3]); u32 iv[4]; iv[0] = h32_from_64_S (tmps[gid].out64[4]); iv[1] = l32_from_64_S (tmps[gid].out64[4]); iv[2] = h32_from_64_S (tmps[gid].out64[5]); iv[3] = l32_from_64_S (tmps[gid].out64[5]); #define KEYLEN 60 u32 ks[KEYLEN]; AES256_set_decrypt_key (ks, key, s_te0, s_te1, s_te2, s_te3, s_te4, s_td0, s_td1, s_td2, s_td3, s_td4); /* 144 bytes */ u32 decrypted[36] = { 0 }; u32 contents_pos; u32 contents_off; u32 wx_off; for (wx_off = 0, contents_pos = 0, contents_off = 0; contents_pos < esalt_bufs[digests_offset].contents_len; wx_off += 4, contents_pos += 16, contents_off += 4) { u32 data[4]; data[0] = esalt_bufs[digests_offset].contents[contents_off + 0]; data[1] = esalt_bufs[digests_offset].contents[contents_off + 1]; data[2] = esalt_bufs[digests_offset].contents[contents_off + 2]; data[3] = esalt_bufs[digests_offset].contents[contents_off + 3]; u32 out[4]; AES256_decrypt (ks, data, out, s_td0, s_td1, s_td2, s_td3, s_td4); out[0] ^= iv[0]; out[1] ^= iv[1]; out[2] ^= iv[2]; out[3] ^= iv[3]; decrypted[wx_off + 0] = out[0]; decrypted[wx_off + 1] = out[1]; decrypted[wx_off + 2] = out[2]; decrypted[wx_off + 3] = out[3]; iv[0] = data[0]; iv[1] = data[1]; iv[2] = data[2]; iv[3] = data[3]; } u32 hmacSalt[4]; u32 expectedHmac[16]; u32 lastKey[16]; hmacSalt[0] = decrypted[0]; hmacSalt[1] = decrypted[1]; hmacSalt[2] = decrypted[2]; hmacSalt[3] = decrypted[3]; for(int i = 0; i < 16; i++) { expectedHmac[i] = decrypted[i + 4]; lastKey[i] = decrypted[i + 36 - 16]; } w0[0] = tmps[gid].userKey[0]; w0[1] = tmps[gid].userKey[1]; w0[2] = tmps[gid].userKey[2]; w0[3] = tmps[gid].userKey[3]; w1[0] = tmps[gid].userKey[4]; w1[1] = 0; w1[2] = 0; w1[3] = 0; w2[0] = 0; w2[1] = 0; w2[2] = 0; w2[3] = 0; w3[0] = 0; w3[1] = 0; w3[2] = 0; w3[3] = 0; w4[0] = 0; w4[1] = 0; w4[2] = 0; w4[3] = 0; w5[0] = 0; w5[1] = 0; w5[2] = 0; w5[3] = 0; w6[0] = 0; w6[1] = 0; w6[2] = 0; w6[3] = 0; w7[0] = 0; w7[1] = 0; w7[2] = 0; w7[3] = 0; sha512_hmac_ctx_t ctx; sha512_hmac_init_128 (&ctx, w0, w1, w2, w3, w4, w5, w6, w7); w0[0] = hmacSalt[0]; w0[1] = hmacSalt[1]; w0[2] = hmacSalt[2]; w0[3] = hmacSalt[3]; w1[0] = 0; w1[1] = 0; w1[2] = 0; w1[3] = 0; w2[0] = 0; w2[1] = 0; w2[2] = 0; w2[3] = 0; w3[0] = 0; w3[1] = 0; w3[2] = 0; w3[3] = 0; w4[0] = 0; w4[1] = 0; w4[2] = 0; w4[3] = 0; w5[0] = 0; w5[1] = 0; w5[2] = 0; w5[3] = 0; w6[0] = 0; w6[1] = 0; w6[2] = 0; w6[3] = 0; w7[0] = 0; w7[1] = 0; w7[2] = 0; w7[3] = 0; sha512_hmac_update_128 (&ctx, w0, w1, w2, w3, w4, w5, w6, w7, 16); sha512_hmac_final (&ctx); w0[0] = h32_from_64_S (ctx.opad.h[0]); w0[1] = l32_from_64_S (ctx.opad.h[0]); w0[2] = h32_from_64_S (ctx.opad.h[1]); w0[3] = l32_from_64_S (ctx.opad.h[1]); w1[0] = h32_from_64_S (ctx.opad.h[2]); w1[1] = l32_from_64_S (ctx.opad.h[2]); w1[2] = h32_from_64_S (ctx.opad.h[3]); w1[3] = l32_from_64_S (ctx.opad.h[3]); w2[0] = h32_from_64_S (ctx.opad.h[4]); w2[1] = l32_from_64_S (ctx.opad.h[4]); w2[2] = h32_from_64_S (ctx.opad.h[5]); w2[3] = l32_from_64_S (ctx.opad.h[5]); w3[0] = h32_from_64_S (ctx.opad.h[6]); w3[1] = l32_from_64_S (ctx.opad.h[6]); w3[2] = h32_from_64_S (ctx.opad.h[7]); w3[3] = l32_from_64_S (ctx.opad.h[7]); w4[0] = 0; w4[1] = 0; w4[2] = 0; w4[3] = 0; w5[0] = 0; w5[1] = 0; w5[2] = 0; w5[3] = 0; w6[0] = 0; w6[1] = 0; w6[2] = 0; w6[3] = 0; w7[0] = 0; w7[1] = 0; w7[2] = 0; w7[3] = 0; sha512_hmac_init_128 (&ctx, w0, w1, w2, w3, w4, w5, w6, w7); w0[0] = lastKey[ 0]; w0[1] = lastKey[ 1]; w0[2] = lastKey[ 2]; w0[3] = lastKey[ 3]; w1[0] = lastKey[ 4]; w1[1] = lastKey[ 5]; w1[2] = lastKey[ 6]; w1[3] = lastKey[ 7]; w2[0] = lastKey[ 8]; w2[1] = lastKey[ 9]; w2[2] = lastKey[10]; w2[3] = lastKey[11]; w3[0] = lastKey[12]; w3[1] = lastKey[13]; w3[2] = lastKey[14]; w3[3] = lastKey[15]; w4[0] = 0; w4[1] = 0; w4[2] = 0; w4[3] = 0; w5[0] = 0; w5[1] = 0; w5[2] = 0; w5[3] = 0; w6[0] = 0; w6[1] = 0; w6[2] = 0; w6[3] = 0; w7[0] = 0; w7[1] = 0; w7[2] = 0; w7[3] = 0; sha512_hmac_update_128 (&ctx, w0, w1, w2, w3, w4, w5, w6, w7, 64); sha512_hmac_final (&ctx); #define il_pos 0 if ((expectedHmac[0] == h32_from_64_S (ctx.opad.h[0])) && (expectedHmac[1] == l32_from_64_S (ctx.opad.h[0])) && (expectedHmac[2] == h32_from_64_S (ctx.opad.h[1])) && (expectedHmac[3] == l32_from_64_S (ctx.opad.h[1]))) { if (atomic_inc (&hashes_shown[digests_offset]) == 0) { mark_hash (plains_buf, d_return_buf, salt_pos, digests_cnt, 0, digests_offset + 0, gid, il_pos); } } } }