Poly1305.cs

using System;
using System.IO;
using System.Numerics;
using System.Threading.Tasks;
 
namespace Waher.Security.ChaChaPoly
{
    public class Poly1305
    {
        private readonly static BigInteger p = BigInteger.Pow(2, 130) - 5;
        private readonly BigInteger r;
        private readonly BigInteger s;
 
        public Poly1305(byte[] Key)
        {
            if (Key.Length != 32)
                throw new ArgumentException("Poly1305 keys must be 32 bytes (256 bits) long.", nameof(Key));
 
            byte[] rBin = new byte[(Key[15] & 0x80) != 0 ? 17 : 16];
            byte[] sBin = new byte[(Key[31] & 0x80) != 0 ? 17 : 16];
 
            Array.Copy(Key, 0, rBin, 0, 16);
            Array.Copy(Key, 16, sBin, 0, 16);
 
            rBin[3] &= 15;
            rBin[7] &= 15;
            rBin[11] &= 15;
            rBin[15] &= 15;
            rBin[4] &= 252;
            rBin[8] &= 252;
            rBin[12] &= 252;
 
            this.r = new BigInteger(rBin);
            this.s = new BigInteger(sBin);
        }
 
        public static Poly1305 FromChaCha20(byte[] Key, byte[] Nonce)
        {
            ChaCha20 Cipher = new ChaCha20(Key, 0, Nonce);
            byte[] Key2 = Cipher.GetBytes(32);
            return new Poly1305(Key2);
        }
 
        public byte[] CalcMac(byte[] Data)
        {
            int i = 0;
            int c = Data.Length;
            byte[] Bin = new byte[17];
            int j;
            BigInteger Accumulator = BigInteger.Zero;
 
            while (i < c)
            {
                j = Math.Min(c - i, 16);
                Array.Copy(Data, i, Bin, 0, j);
                i += j;
                Bin[j++] = 1;
                while (j < 17)
                    Bin[j++] = 0;
 
                Accumulator = BigInteger.Remainder((Accumulator + new BigInteger(Bin)) * this.r, p);
            }
 
            Accumulator += this.s;
 
            byte[] Result = Accumulator.ToByteArray();
 
            if (Result.Length != 16)
                Array.Resize(ref Result, 16);
 
            return Result;
        }
 
        public async Task<byte[]> CalcMac(Stream Data)
        {
            long i = 0;
            long c = Data.Length;
            byte[] Bin = new byte[17];
            int j;
            BigInteger Accumulator = BigInteger.Zero;
 
            while (i < c)
            {
                j = (int)Math.Min(c - i, 16);
                if (j != await Data.ReadAsync(Bin, 0, j))
                    throw new IOException("Unexpected end of file.");
 
                i += j;
                Bin[j++] = 1;
                while (j < 17)
                    Bin[j++] = 0;
 
                Accumulator = BigInteger.Remainder((Accumulator + new BigInteger(Bin)) * this.r, p);
            }
 
            Accumulator += this.s;
 
            byte[] Result = Accumulator.ToByteArray();
 
            if (Result.Length != 16)
                Array.Resize(ref Result, 16);
 
            return Result;
        }
 
    }
}