using System; using System.Collections.Generic; using System.Security.Cryptography; using System.Text; namespace Shadowsocks.Encrypt { public abstract class IVEncryptor : EncryptorBase { protected static byte[] tempbuf = new byte[MAX_INPUT_SIZE]; protected Dictionary ciphers; private static readonly Dictionary CachedKeys = new Dictionary(); protected byte[] _encryptIV; protected byte[] _decryptIV; protected bool _decryptIVReceived; protected bool _encryptIVSent; protected int _encryptIVOffset = 0; protected int _decryptIVOffset = 0; protected string _method; protected int _cipher; protected int[] _cipherInfo; protected byte[] _key; protected int keyLen; protected int ivLen; public IVEncryptor(string method, string password) : base(method, password) { InitKey(method, password); } protected abstract Dictionary getCiphers(); protected void InitKey(string method, string password) { method = method.ToLower(); _method = method; string k = method + ":" + password; ciphers = getCiphers(); _cipherInfo = ciphers[_method]; _cipher = _cipherInfo[2]; if (_cipher == 0) { throw new Exception("method not found"); } keyLen = ciphers[_method][0]; ivLen = ciphers[_method][1]; if (CachedKeys.ContainsKey(k)) { _key = CachedKeys[k]; } else { byte[] passbuf = Encoding.UTF8.GetBytes(password); _key = new byte[32]; byte[] iv = new byte[16]; bytesToKey(passbuf, _key); CachedKeys[k] = _key; } } protected void bytesToKey(byte[] password, byte[] key) { byte[] result = new byte[password.Length + 16]; int i = 0; byte[] md5sum = null; while (i < key.Length) { MD5 md5 = MD5.Create(); if (i == 0) { md5sum = md5.ComputeHash(password); } else { md5sum.CopyTo(result, 0); password.CopyTo(result, md5sum.Length); md5sum = md5.ComputeHash(result); } md5sum.CopyTo(key, i); i += md5sum.Length; } } protected static void randBytes(byte[] buf, int length) { byte[] temp = new byte[length]; new Random().NextBytes(temp); temp.CopyTo(buf, 0); } protected virtual void initCipher(byte[] iv, bool isCipher) { if (ivLen > 0) { if (isCipher) { _encryptIV = new byte[ivLen]; Array.Copy(iv, _encryptIV, ivLen); } else { _decryptIV = new byte[ivLen]; Array.Copy(iv, _decryptIV, ivLen); } } } protected abstract void cipherUpdate(bool isCipher, int length, byte[] buf, byte[] outbuf); public override void Encrypt(byte[] buf, int length, byte[] outbuf, out int outlength) { if (!_encryptIVSent) { _encryptIVSent = true; randBytes(outbuf, ivLen); initCipher(outbuf, true); outlength = length + ivLen; lock (tempbuf) { cipherUpdate(true, length, buf, tempbuf); outlength = length + ivLen; Buffer.BlockCopy(tempbuf, 0, outbuf, ivLen, length); } } else { outlength = length; cipherUpdate(true, length, buf, outbuf); } } public override void Decrypt(byte[] buf, int length, byte[] outbuf, out int outlength) { if (!_decryptIVReceived) { _decryptIVReceived = true; initCipher(buf, false); outlength = length - ivLen; lock (tempbuf) { // C# could be multi-threaded Buffer.BlockCopy(buf, ivLen, tempbuf, 0, length - ivLen); cipherUpdate(false, length - ivLen, tempbuf, outbuf); } } else { outlength = length; cipherUpdate(false, length, buf, outbuf); } } } }