GARbro-mirror/ArcFormats/KiriKiri/YuzCrypt.cs

//! \file       YuzCrypt.cs
//! \date       2018 Apr 01
//! \brief      YuzuSoft KiriKiri encryption schemes.
//
// Copyright (C) 2018 by morkt
//
// Permission is hereby granted, free of charge, to any person obtaining a copy
// of this software and associated documentation files (the "Software"), to
// deal in the Software without restriction, including without limitation the
// rights to use, copy, modify, merge, publish, distribute, sublicense, and/or
// sell copies of the Software, and to permit persons to whom the Software is
// furnished to do so, subject to the following conditions:
//
// The above copyright notice and this permission notice shall be included in
// all copies or substantial portions of the Software.
//
// THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
// IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
// FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
// AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
// LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
// FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS
// IN THE SOFTWARE.
//

using System;
using System.IO;
using System.Text;
using GameRes.Compression;
using GameRes.Utility;

namespace GameRes.Formats.KiriKiri
{
    [Serializable]
    public class SenrenCxCrypt : CxEncryption
    {
        public SenrenCxCrypt (CxScheme scheme) : base (scheme)
        {
        }

        public virtual string NamesSectionId { get { return "sen:"; } }

        internal virtual void ReadYuzNames (byte[] yuz, FilenameMap filename_map)
        {
            using (var ystream = new MemoryStream (yuz))
            using (var zstream = ZLibCompressor.DeCompress (ystream))
            using (var input = new BinaryReader (zstream, Encoding.Unicode))
            {
                long dir_offset = 0;
                while (-1 != input.PeekChar())
                {
                    uint entry_signature = input.ReadUInt32();
                    long entry_size = input.ReadInt64();
                    if (entry_size < 0)
                        return;
                    dir_offset += 12 + entry_size;
                    uint hash = input.ReadUInt32();
                    int name_size = input.ReadInt16();
                    if (name_size > 0)
                    {
                        entry_size -= 6;
                        if (name_size * 2 <= entry_size)
                        {
                            var filename = new string (input.ReadChars (name_size));
                            filename_map.Add (hash, filename);
                        }
                    }
                    input.BaseStream.Position = dir_offset;
                }
                filename_map.AddShortcut ("$", "startup.tjs");
            }
        }
    }

    [Serializable]
    public class CabbageCxCrypt : SenrenCxCrypt
    {
        uint m_random_seed;

        public CabbageCxCrypt (CxScheme scheme, uint seed) : base (scheme)
        {
            m_random_seed = seed;
        }

        public override string NamesSectionId { get { return "cbg:"; } }

        internal override CxProgram NewProgram (uint seed)
        {
            return new CxProgramNana (seed, m_random_seed, ControlBlock);
        }
    }

    [Serializable]
    public class NanaCxCrypt : CabbageCxCrypt
    {
        public uint[] YuzKey;

        public NanaCxCrypt (CxScheme scheme, uint seed) : base (scheme, seed)
        {
        }

        public override string NamesSectionId { get { return "dls:"; } }

        internal override void ReadYuzNames (byte[] yuz, FilenameMap filename_map)
        {
            if (null == YuzKey)
                throw new InvalidEncryptionScheme();
            var decryptor = CreateNameListDecryptor();
            decryptor.Decrypt (yuz, Math.Min (yuz.Length, 0x100));
            base.ReadYuzNames (yuz, filename_map);
        }

        internal virtual INameListDecryptor CreateNameListDecryptor ()
        {
            return new NanaDecryptor (YuzKey, YuzKey[4], YuzKey[5]);
        }
    }

    [Serializable]
    public class RiddleCxCrypt : NanaCxCrypt
    {
        public uint m_key1 = 0xAAAAAAAA;
        public uint m_key2 = 0x55555555;

        public RiddleCxCrypt (CxScheme scheme, uint seed) : base (scheme, seed)
        {
        }

        public override string NamesSectionId { get { return "yuz:"; } }

        public override void Decrypt (Xp3Entry entry, long offset, byte[] buffer, int pos, int count)
        {
            ProcessFirstBytes (entry, offset, buffer, pos, count);
            base.Decrypt (entry, offset, buffer, pos, count);
        }

        public override void Encrypt (Xp3Entry entry, long offset, byte[] buffer, int pos, int count)
        {
            base.Encrypt (entry, offset, buffer, pos, count);
            ProcessFirstBytes (entry, offset, buffer, pos, count);
        }

        public override byte Decrypt (Xp3Entry entry, long offset, byte value)
        {
            if (offset < 8)
            {
                var buffer = new byte[1] { value };
                this.Decrypt (entry, offset, buffer, 0, 1);
                return buffer[0];
            }
            else
            {
                return base.Decrypt (entry, offset, value);
            }
        }

        internal void ProcessFirstBytes (Xp3Entry entry, long offset, byte[] buffer, int pos, int count)
        {
            if (offset < 8 && count > 0)
            {
                ulong key = GetKeyFromHash (entry.Hash);
                key >>= (int)offset << 3;
                int first_chunk = Math.Min (count, 8 - (int)offset);
                for (int i = 0; i < first_chunk; ++i)
                {
                    buffer[pos+i] ^= (byte)key;
                    key >>= 8;
                }
            }
        }

        internal virtual ulong GetKeyFromHash (uint hash)
        {
            uint lo = hash ^ m_key2;
            uint hi = (hash << 13) ^ hash;
            hi ^= hi >> 17;
            hi ^= (hi << 5) ^ m_key1;
            return (ulong)hi << 32 | lo;
        }

        internal override INameListDecryptor CreateNameListDecryptor ()
        {
            return new YuzDecryptor (ControlBlock, YuzKey, YuzKey[4], YuzKey[5]);
        }
    }

    internal interface INameListDecryptor
    {
        void Decrypt (byte[] data, int length);
    }

    internal class YuzDecryptor : INameListDecryptor
    {
        byte[]  m_state;

        public YuzDecryptor (uint[] key1, uint[] key2, uint seed1, uint seed2)
        {
            m_state = new byte[64];
            Buffer.BlockCopy (key2, 0, m_state, 0, 16);
            Buffer.BlockCopy (key1, 0, m_state, 16, 32);
            LittleEndian.Pack (~0, m_state, 48);
            LittleEndian.Pack (~0, m_state, 52);
            LittleEndian.Pack (~seed1, m_state, 56);
            LittleEndian.Pack (~seed2, m_state, 60);
        }

        public void Decrypt (byte[] data, int length)
        {
            var state1 = new byte[64];
            var state2 = new byte[64];
            int i = 0;
            ulong offset = 0;
            while (length > 0)
            {
                Buffer.BlockCopy (m_state, 0, state1, 0, 64);
                LittleEndian.Pack (~offset++, state1, 48);
                TransformState (state1, state2, 8);
                int count = Math.Min (0x40, length);
                for (int j = 0; j < count; ++j)
                {
                    data[i++] ^= state2[j];
                }
                length -= count;
            }
        }

        uint[] tmp = new uint[16];

        void TransformState (byte[] state1, byte[] target, int length)
        {
            for (int i = 0; i < 16; ++i)
            {
                tmp[i] = ~LittleEndian.ToUInt32 (state1, i * 4);
            }
            if (length > 0)
            {
                for (int count = ((length - 1) >> 1) + 1; count > 0; --count)
                {
                    uint t1 = tmp[4] + tmp[0];
                    uint t2 = Binary.RotL (t1 ^ tmp[12], 16);
                    uint t3 = t2 + tmp[8];
                    uint t4 = Binary.RotL (tmp[4] ^ t3, 12);
                    uint t5 = t4 + t1;
                    uint t6 = Binary.RotL (t5 ^ t2, 8);
                    tmp[12] = t6;
                    t6 += t3;
                    tmp[4] = Binary.RotL (t4 ^ t6, 7);
                    t4 = Binary.RotL ((tmp[5] + tmp[1]) ^ tmp[13], 16);
                    t3 = Binary.RotL (tmp[5] ^ (t4 + tmp[9]), 12);
                    t2 = t3 + tmp[5] + tmp[1];
                    tmp[13] = Binary.RotL (t2 ^ t4, 8);
                    tmp[9] += tmp[13] + t4;
                    tmp[5] = Binary.RotL (t3 ^ tmp[9], 7);
                    t4 = Binary.RotL ((tmp[6] + tmp[2]) ^ tmp[14], 16);
                    tmp[10] += t4;
                    t1 = Binary.RotL (tmp[6] ^ tmp[10], 12);
                    t3 = t1 + tmp[6] + tmp[2];
                    tmp[14] = Binary.RotL (t3 ^ t4, 8);
                    tmp[6] = Binary.RotL (t1 ^ (tmp[14] + tmp[10]), 7);
                    tmp[10] += tmp[14];
                    t4 = (tmp[7] + tmp[3]) ^ tmp[15];
                    tmp[3] += tmp[7];
                    t4 = Binary.RotL (t4, 16);
                    tmp[11] += t4;
                    t1 = Binary.RotL (tmp[7] ^ tmp[11], 12);
                    t4 ^= t1 + tmp[3];
                    tmp[3] += t1;
                    t4 = Binary.RotL (t4, 8);
                    tmp[11] += t4;
                    t1 = Binary.RotL (t1 ^ tmp[11], 7);
                    t5 += tmp[5];
                    t2 += tmp[6];
                    t4 = Binary.RotL (t5 ^ t4, 16);
                    tmp[10] += t4;
                    tmp[5] = Binary.RotL (tmp[5] ^ tmp[10], 12);
                    tmp[0] = tmp[5] + t5;
                    t4 = Binary.RotL (tmp[0] ^ t4, 8);
                    tmp[15] = t4;
                    tmp[10] += t4;
                    tmp[5] = Binary.RotL (tmp[5] ^ tmp[10], 7);
                    tmp[12] = Binary.RotL (tmp[12] ^ t2, 16);
                    tmp[11] += tmp[12];
                    t4 = Binary.RotL (tmp[11] ^ tmp[6], 12);
                    tmp[1] = t4 + t2;
                    tmp[12] = Binary.RotL (tmp[12] ^ tmp[1], 8);
                    tmp[11] += tmp[12];
                    tmp[6] = Binary.RotL (t4 ^ tmp[11], 7);
                    t3 += t1;
                    t4 = Binary.RotL (tmp[13] ^ t3, 16);
                    t2 = t4 + t6;
                    t1 = Binary.RotL (t2 ^ t1, 12);
                    tmp[2] = t1 + t3;
                    tmp[13] = Binary.RotL (t4 ^ tmp[2], 8);
                    tmp[8] = tmp[13] + t2;
                    tmp[7] = Binary.RotL (tmp[8] ^ t1, 7);
                    t6 = Binary.RotL (tmp[14] ^ (tmp[4] + tmp[3]), 16);
                    t1 = Binary.RotL (tmp[4] ^ (t6 + tmp[9]), 12);
                    tmp[3] += t1 + tmp[4];
                    t3 = Binary.RotL (t6 ^ tmp[3], 8);
                    tmp[9] += t3 + t6;
                    tmp[4] = Binary.RotL (t1 ^ tmp[9], 7);
                    tmp[14] = t3;
                }
            }
            int pos = 0;
            for (int i = 0; i < 16; ++i)
            {
                uint x = tmp[i] + ~LittleEndian.ToUInt32 (state1, pos);
                LittleEndian.Pack (x, target, pos);
                pos += 4;
            }
        }
    }

    internal class NanaDecryptor : INameListDecryptor
    {
        uint[]  m_state;
        ulong   m_seed;

        public NanaDecryptor (uint[] key, uint seed1, uint seed2)
        {
            m_state = new uint[27];
            m_seed = (ulong)seed2 << 32 | seed1;
            var s = new uint[3];
            uint k = key[0];
            s[0] = key[1];
            s[1] = key[2];
            s[2] = key[3];
            m_state[0] = k;
            int dst = 1;
            for (uint i = 0; i < 26; ++i)
            {
                int src = (int)i % 3;
                uint m = Binary.RotR (s[src], 8);
                uint n = i ^ (k + m);
                k = n ^ Binary.RotL (k, 3);
                m_state[dst++] = k;
                s[src] = n;
            }
        }

        public void Decrypt (byte[] data, int length)
        {
            int i = 0;
            ulong offset = 0;
            while (length > 0)
            {
                ulong key = ++offset ^ m_seed;
                key = TransformKey (key);
                int count = Math.Min (8, length);
                for (int j = 0; j < count; ++j)
                {
                    data[i++] ^= (byte)key;
                    key >>= 8;
                }
                length -= count;
            }
        }

        ulong TransformKey (ulong key)
        {
            uint lo = (uint)key;
            uint hi = (uint)(key >> 32);
            for (int i = 0; i < 27; ++i)
            {
                hi = Binary.RotR (hi, 8);
                hi += lo;
                hi ^= m_state[i];
                lo = Binary.RotL (lo, 3);
                lo ^= hi;
            }
            return (ulong)hi << 32 | lo;
        }
    }
}