Public Class AriaCore Private S(3, 255) As Byte Private KRK(2, 15) As Byte Private roundKey(271) As Byte Private R As Integer Private ReadOnly KeyBits As Integer Public Sub New(key As Byte(), Optional encrypt As Boolean = True) If key.Length Mod 8 <> 0 Or key.Length < 16 Or key.Length > 32 Then Throw New ArgumentException($"ARIA key must be 16, 24, 32 bytes. Your key length is {key.Length} bytes") End If InitConstants() ' Set key length KeyBits = key.Length * 8 KeySchedule(key, encrypt) End Sub Public Sub InitConstants() KRK = New Byte(,) { { &H51, &H7C, &HC1, &HB7, &H27, &H22, &HA, &H94, &HFE, &H13, &HAB, &HE8, &HFA, &H9A, &H6E, &HE0 }, { &H6D, &HB1, &H4A, &HCC, &H9E, &H21, &HC8, &H20, &HFF, &H28, &HB1, &HD5, &HEF, &H5D, &HE2, &HB0 }, { &HDB, &H92, &H37, &H1D, &H21, &H26, &HE9, &H70, &H3, &H24, &H97, &H75, &H4, &HE8, &HC9, &HE } } S = New Byte(,) { { &H63, &H7C, &H77, &H7B, &HF2, &H6B, &H6F, &HC5, &H30, &H1, &H67, &H2B, &HFE, &HD7, &HAB, &H76, &HCA, &H82, &HC9, &H7D, &HFA, &H59, &H47, &HF0, &HAD, &HD4, &HA2, &HAF, &H9C, &HA4, &H72, &HC0, &HB7, &HFD, &H93, &H26, &H36, &H3F, &HF7, &HCC, &H34, &HA5, &HE5, &HF1, &H71, &HD8, &H31, &H15, &H4, &HC7, &H23, &HC3, &H18, &H96, &H5, &H9A, &H7, &H12, &H80, &HE2, &HEB, &H27, &HB2, &H75, &H9, &H83, &H2C, &H1A, &H1B, &H6E, &H5A, &HA0, &H52, &H3B, &HD6, &HB3, &H29, &HE3, &H2F, &H84, &H53, &HD1, &H0, &HED, &H20, &HFC, &HB1, &H5B, &H6A, &HCB, &HBE, &H39, &H4A, &H4C, &H58, &HCF, &HD0, &HEF, &HAA, &HFB, &H43, &H4D, &H33, &H85, &H45, &HF9, &H2, &H7F, &H50, &H3C, &H9F, &HA8, &H51, &HA3, &H40, &H8F, &H92, &H9D, &H38, &HF5, &HBC, &HB6, &HDA, &H21, &H10, &HFF, &HF3, &HD2, &HCD, &HC, &H13, &HEC, &H5F, &H97, &H44, &H17, &HC4, &HA7, &H7E, &H3D, &H64, &H5D, &H19, &H73, &H60, &H81, &H4F, &HDC, &H22, &H2A, &H90, &H88, &H46, &HEE, &HB8, &H14, &HDE, &H5E, &HB, &HDB, &HE0, &H32, &H3A, &HA, &H49, &H6, &H24, &H5C, &HC2, &HD3, &HAC, &H62, &H91, &H95, &HE4, &H79, &HE7, &HC8, &H37, &H6D, &H8D, &HD5, &H4E, &HA9, &H6C, &H56, &HF4, &HEA, &H65, &H7A, &HAE, &H8, &HBA, &H78, &H25, &H2E, &H1C, &HA6, &HB4, &HC6, &HE8, &HDD, &H74, &H1F, &H4B, &HBD, &H8B, &H8A, &H70, &H3E, &HB5, &H66, &H48, &H3, &HF6, &HE, &H61, &H35, &H57, &HB9, &H86, &HC1, &H1D, &H9E, &HE1, &HF8, &H98, &H11, &H69, &HD9, &H8E, &H94, &H9B, &H1E, &H87, &HE9, &HCE, &H55, &H28, &HDF, &H8C, &HA1, &H89, &HD, &HBF, &HE6, &H42, &H68, &H41, &H99, &H2D, &HF, &HB0, &H54, &HBB, &H16 }, { &HE2, &H4E, &H54, &HFC, &H94, &HC2, &H4A, &HCC, &H62, &HD, &H6A, &H46, &H3C, &H4D, &H8B, &HD1, &H5E, &HFA, &H64, &HCB, &HB4, &H97, &HBE, &H2B, &HBC, &H77, &H2E, &H3, &HD3, &H19, &H59, &HC1, &H1D, &H6, &H41, &H6B, &H55, &HF0, &H99, &H69, &HEA, &H9C, &H18, &HAE, &H63, &HDF, &HE7, &HBB, &H0, &H73, &H66, &HFB, &H96, &H4C, &H85, &HE4, &H3A, &H9, &H45, &HAA, &HF, &HEE, &H10, &HEB, &H2D, &H7F, &HF4, &H29, &HAC, &HCF, &HAD, &H91, &H8D, &H78, &HC8, &H95, &HF9, &H2F, &HCE, &HCD, &H8, &H7A, &H88, &H38, &H5C, &H83, &H2A, &H28, &H47, &HDB, &HB8, &HC7, &H93, &HA4, &H12, &H53, &HFF, &H87, &HE, &H31, &H36, &H21, &H58, &H48, &H1, &H8E, &H37, &H74, &H32, &HCA, &HE9, &HB1, &HB7, &HAB, &HC, &HD7, &HC4, &H56, &H42, &H26, &H7, &H98, &H60, &HD9, &HB6, &HB9, &H11, &H40, &HEC, &H20, &H8C, &HBD, &HA0, &HC9, &H84, &H4, &H49, &H23, &HF1, &H4F, &H50, &H1F, &H13, &HDC, &HD8, &HC0, &H9E, &H57, &HE3, &HC3, &H7B, &H65, &H3B, &H2, &H8F, &H3E, &HE8, &H25, &H92, &HE5, &H15, &HDD, &HFD, &H17, &HA9, &HBF, &HD4, &H9A, &H7E, &HC5, &H39, &H67, &HFE, &H76, &H9D, &H43, &HA7, &HE1, &HD0, &HF5, &H68, &HF2, &H1B, &H34, &H70, &H5, &HA3, &H8A, &HD5, &H79, &H86, &HA8, &H30, &HC6, &H51, &H4B, &H1E, &HA6, &H27, &HF6, &H35, &HD2, &H6E, &H24, &H16, &H82, &H5F, &HDA, &HE6, &H75, &HA2, &HEF, &H2C, &HB2, &H1C, &H9F, &H5D, &H6F, &H80, &HA, &H72, &H44, &H9B, &H6C, &H90, &HB, &H5B, &H33, &H7D, &H5A, &H52, &HF3, &H61, &HA1, &HF7, &HB0, &HD6, &H3F, &H7C, &H6D, &HED, &H14, &HE0, &HA5, &H3D, &H22, &HB3, &HF8, &H89, &HDE, &H71, &H1A, &HAF, &HBA, &HB5, &H81 }, { &H52, &H9, &H6A, &HD5, &H30, &H36, &HA5, &H38, &HBF, &H40, &HA3, &H9E, &H81, &HF3, &HD7, &HFB, &H7C, &HE3, &H39, &H82, &H9B, &H2F, &HFF, &H87, &H34, &H8E, &H43, &H44, &HC4, &HDE, &HE9, &HCB, &H54, &H7B, &H94, &H32, &HA6, &HC2, &H23, &H3D, &HEE, &H4C, &H95, &HB, &H42, &HFA, &HC3, &H4E, &H8, &H2E, &HA1, &H66, &H28, &HD9, &H24, &HB2, &H76, &H5B, &HA2, &H49, &H6D, &H8B, &HD1, &H25, &H72, &HF8, &HF6, &H64, &H86, &H68, &H98, &H16, &HD4, &HA4, &H5C, &HCC, &H5D, &H65, &HB6, &H92, &H6C, &H70, &H48, &H50, &HFD, &HED, &HB9, &HDA, &H5E, &H15, &H46, &H57, &HA7, &H8D, &H9D, &H84, &H90, &HD8, &HAB, &H0, &H8C, &HBC, &HD3, &HA, &HF7, &HE4, &H58, &H5, &HB8, &HB3, &H45, &H6, &HD0, &H2C, &H1E, &H8F, &HCA, &H3F, &HF, &H2, &HC1, &HAF, &HBD, &H3, &H1, &H13, &H8A, &H6B, &H3A, &H91, &H11, &H41, &H4F, &H67, &HDC, &HEA, &H97, &HF2, &HCF, &HCE, &HF0, &HB4, &HE6, &H73, &H96, &HAC, &H74, &H22, &HE7, &HAD, &H35, &H85, &HE2, &HF9, &H37, &HE8, &H1C, &H75, &HDF, &H6E, &H47, &HF1, &H1A, &H71, &H1D, &H29, &HC5, &H89, &H6F, &HB7, &H62, &HE, &HAA, &H18, &HBE, &H1B, &HFC, &H56, &H3E, &H4B, &HC6, &HD2, &H79, &H20, &H9A, &HDB, &HC0, &HFE, &H78, &HCD, &H5A, &HF4, &H1F, &HDD, &HA8, &H33, &H88, &H7, &HC7, &H31, &HB1, &H12, &H10, &H59, &H27, &H80, &HEC, &H5F, &H60, &H51, &H7F, &HA9, &H19, &HB5, &H4A, &HD, &H2D, &HE5, &H7A, &H9F, &H93, &HC9, &H9C, &HEF, &HA0, &HE0, &H3B, &H4D, &HAE, &H2A, &HF5, &HB0, &HC8, &HEB, &HBB, &H3C, &H83, &H53, &H99, &H61, &H17, &H2B, &H4, &H7E, &HBA, &H77, &HD6, &H26, &HE1, &H69, &H14, &H63, &H55, &H21, &HC, &H7D }, { &H30, &H68, &H99, &H1B, &H87, &HB9, &H21, &H78, &H50, &H39, &HDB, &HE1, &H72, &H9, &H62, &H3C, &H3E, &H7E, &H5E, &H8E, &HF1, &HA0, &HCC, &HA3, &H2A, &H1D, &HFB, &HB6, &HD6, &H20, &HC4, &H8D, &H81, &H65, &HF5, &H89, &HCB, &H9D, &H77, &HC6, &H57, &H43, &H56, &H17, &HD4, &H40, &H1A, &H4D, &HC0, &H63, &H6C, &HE3, &HB7, &HC8, &H64, &H6A, &H53, &HAA, &H38, &H98, &HC, &HF4, &H9B, &HED, &H7F, &H22, &H76, &HAF, &HDD, &H3A, &HB, &H58, &H67, &H88, &H6, &HC3, &H35, &HD, &H1, &H8B, &H8C, &HC2, &HE6, &H5F, &H2, &H24, &H75, &H93, &H66, &H1E, &HE5, &HE2, &H54, &HD8, &H10, &HCE, &H7A, &HE8, &H8, &H2C, &H12, &H97, &H32, &HAB, &HB4, &H27, &HA, &H23, &HDF, &HEF, &HCA, &HD9, &HB8, &HFA, &HDC, &H31, &H6B, &HD1, &HAD, &H19, &H49, &HBD, &H51, &H96, &HEE, &HE4, &HA8, &H41, &HDA, &HFF, &HCD, &H55, &H86, &H36, &HBE, &H61, &H52, &HF8, &HBB, &HE, &H82, &H48, &H69, &H9A, &HE0, &H47, &H9E, &H5C, &H4, &H4B, &H34, &H15, &H79, &H26, &HA7, &HDE, &H29, &HAE, &H92, &HD7, &H84, &HE9, &HD2, &HBA, &H5D, &HF3, &HC5, &HB0, &HBF, &HA4, &H3B, &H71, &H44, &H46, &H2B, &HFC, &HEB, &H6F, &HD5, &HF6, &H14, &HFE, &H7C, &H70, &H5A, &H7D, &HFD, &H2F, &H18, &H83, &H16, &HA5, &H91, &H1F, &H5, &H95, &H74, &HA9, &HC1, &H5B, &H4A, &H85, &H6D, &H13, &H7, &H4F, &H4E, &H45, &HB2, &HF, &HC9, &H1C, &HA6, &HBC, &HEC, &H73, &H90, &H7B, &HCF, &H59, &H8F, &HA1, &HF9, &H2D, &HF2, &HB1, &H0, &H94, &H37, &H9F, &HD0, &H2E, &H9C, &H6E, &H28, &H3F, &H80, &HF0, &H3D, &HD3, &H25, &H8A, &HB5, &HE7, &H42, &HB3, &HC7, &HEA, &HF7, &H4C, &H11, &H33, &H3, &HA2, &HAC, &H60 } } End Sub Private Sub KeySchedule(userKey As Byte(), encrypt As Boolean) If encrypt Then R = EncKeySetup(userKey, roundKey) Else R = DecKeySetup(userKey, roundKey) End If End Sub Public Sub DL(ByRef input() As Byte, ByRef output() As Byte) Dim T As Byte T = input(3) Xor input(4) Xor input(9) Xor input(14) output(0) = input(6) Xor input(8) Xor input(13) Xor T output(5) = input(1) Xor input(10) Xor input(15) Xor T output(11) = input(2) Xor input(7) Xor input(12) Xor T output(14) = input(0) Xor input(5) Xor input(11) Xor T T = input(2) Xor input(5) Xor input(8) Xor input(15) output(1) = input(7) Xor input(9) Xor input(12) Xor T output(4) = input(0) Xor input(11) Xor input(14) Xor T output(10) = input(3) Xor input(6) Xor input(13) Xor T output(15) = input(1) Xor input(4) Xor input(10) Xor T T = input(1) Xor input(6) Xor input(11) Xor input(12) output(2) = input(4) Xor input(10) Xor input(15) Xor T output(7) = input(3) Xor input(8) Xor input(13) Xor T output(9) = input(0) Xor input(5) Xor input(14) Xor T output(12) = input(2) Xor input(7) Xor input(9) Xor T T = input(0) Xor input(7) Xor input(10) Xor input(13) output(3) = input(5) Xor input(11) Xor input(14) Xor T output(6) = input(2) Xor input(9) Xor input(12) Xor T output(8) = input(1) Xor input(4) Xor input(15) Xor T output(13) = input(3) Xor input(6) Xor input(8) Xor T End Sub Public Sub RotXOR(ByRef s() As Byte, n As Integer, ByRef t() As Byte, Optional offset As Integer = 0) Dim i As Integer, q As Integer = n \ 8 : n = n Mod 8 For i = 0 To 15 t((q + i) Mod 16 + offset) = t((q + i) Mod 16 + offset) Xor (s(i) >> n) If n <> 0 Then t((q + i + 1) Mod 16 + offset) = t((q + i + 1) Mod 16 + offset) Xor (s(i) << (8 - n)) End If Next End Sub Public Function EncKeySetup(ByRef w0() As Byte, ByRef e() As Byte) As Integer Dim i As Integer Dim R As Integer = (KeyBits + 256) \ 32, q As Integer Dim t(15), w1(15), w2(15), w3(15) As Byte q = (KeyBits - 128) \ 64 For i = 0 To 15 : t(i) = S(i Mod 4, KRK(q, i) Xor w0(i)) : Next DL(t, w1) If R = 14 Then For i = 0 To 7 : w1(i) = w1(i) Xor w0(16 + i) : Next If R = 16 Then For i = 0 To 15 : w1(i) = w1(i) Xor w0(16 + i) : Next q = If(q = 2, 0, q + 1) For i = 0 To 15 : t(i) = S((2 + i) Mod 4, KRK(q, i) Xor w1(i)) : Next DL(t, w2) For i = 0 To 15 : w2(i) = w2(i) Xor w0(i) : Next q = If(q = 2, 0, q + 1) For i = 0 To 15 : t(i) = S(i Mod 4, KRK(q, i) Xor w2(i)) : Next DL(t, w3) For i = 0 To 15 : w3(i) = w3(i) Xor w1(i) : Next For i = 0 To 16 * (R + 1) - 1 : e(i) = 0 : Next RotXOR(w0, 0, e) : RotXOR(w1, 19, e) RotXOR(w1, 0, e, 16) : RotXOR(w2, 19, e, 16) RotXOR(w2, 0, e, 32) : RotXOR(w3, 19, e, 32) RotXOR(w3, 0, e, 48) : RotXOR(w0, 19, e, 48) RotXOR(w0, 0, e, 64) : RotXOR(w1, 31, e, 64) RotXOR(w1, 0, e, 80) : RotXOR(w2, 31, e, 80) RotXOR(w2, 0, e, 96) : RotXOR(w3, 31, e, 96) RotXOR(w3, 0, e, 112) : RotXOR(w0, 31, e, 112) RotXOR(w0, 0, e, 128) : RotXOR(w1, 67, e, 128) RotXOR(w1, 0, e, 144) : RotXOR(w2, 67, e, 144) RotXOR(w2, 0, e, 160) : RotXOR(w3, 67, e, 160) RotXOR(w3, 0, e, 176) : RotXOR(w0, 67, e, 176) RotXOR(w0, 0, e, 192) : RotXOR(w1, 97, e, 192) If R > 12 Then RotXOR(w1, 0, e, 208) : RotXOR(w2, 97, e, 208) RotXOR(w2, 0, e, 224) : RotXOR(w3, 97, e, 224) End If If R > 14 Then RotXOR(w3, 0, e, 240) : RotXOR(w0, 97, e, 240) RotXOR(w0, 0, e, 256) : RotXOR(w1, 109, e, 256) End If Return R End Function Public Function DecKeySetup(ByRef w0() As Byte, ByRef d() As Byte) As Integer Dim R As Integer = EncKeySetup(w0, d) Dim t(15) As Byte, i, j As Integer For j = 0 To 15 t(j) = d(j) d(j) = d(16 * R + j) d(16 * R + j) = t(j) Next For i = 1 To R \ 2 Dim input3(15) As Byte Array.Copy(d, i * 16, input3, 0, 16) DL(input3, t) Dim input4(15), output4(15) As Byte Array.Copy(d, (R - i) * 16, input4, 0, 16) DL(input4, output4) Array.Copy(output4, 0, d, i * 16, 16) For j = 0 To 15 : d((R - i) * 16 + j) = t(j) : Next Next Return R End Function Public Sub Crypt(ByRef p() As Byte, R As Integer, ByRef e() As Byte, ByRef c() As Byte) Dim i, j As Integer Dim t(15) As Byte Dim eOffset As Integer = 0 ' c = p For j = 0 To 15 c(j) = p(j) Next ' R/2 rounds, each with 2 subrounds (F0, F1) For i = 0 To (R \ 2) - 1 ' First substitution + DL For j = 0 To 15 t(j) = S(j Mod 4, e(eOffset + j) Xor c(j)) Next DL(t, c) eOffset += 16 ' Second substitution + DL For j = 0 To 15 t(j) = S((2 + j) Mod 4, e(eOffset + j) Xor c(j)) Next DL(t, c) eOffset += 16 Next ' Final round key mixing DL(c, t) For j = 0 To 15 c(j) = e(eOffset + j) Xor t(j) Next End Sub Public Sub EncryptBlock(input() As Byte, inOffset As Integer, output() As Byte, outOffset As Integer) Dim block(15) As Byte Array.Copy(input, inOffset, block, 0, 16) Dim encrypted(15) As Byte Crypt(block, R, roundKey, encrypted) Array.Copy(encrypted, 0, output, outOffset, 16) End Sub Public Sub DecryptBlock(input() As Byte, inOffset As Integer, output() As Byte, outOffset As Integer) Dim block(15) As Byte Array.Copy(input, inOffset, block, 0, 16) Dim decrypted(15) As Byte Crypt(block, R, roundKey, decrypted) Array.Copy(decrypted, 0, output, outOffset, 16) End Sub End Class