Minecraft-Console-Client/MinecraftClient/Crypto/FastAes.cs

using System;
using System.Runtime.CompilerServices;
using System.Runtime.InteropServices;
using System.Runtime.Intrinsics;
using System.Runtime.Intrinsics.X86;

namespace MinecraftClient.Crypto
{
    // Using the AES-NI instruction set
    // https://gist.github.com/Thealexbarney/9f75883786a9f3100408ff795fb95d85
    public class FastAes
    {
        private Vector128<byte>[] RoundKeys { get; }

        public FastAes(Span<byte> key)
        {
            RoundKeys = KeyExpansion(key);
        }

        /// <summary>
        /// Detects if the required instruction set is supported
        /// </summary>
        /// <returns>Is it supported</returns>
        public static bool IsSupported()
        {
            return Sse2.IsSupported && Aes.IsSupported;
        }

        [MethodImpl(MethodImplOptions.AggressiveInlining | MethodImplOptions.AggressiveOptimization)]
        public void EncryptEcb(ReadOnlySpan<byte> plaintext, Span<byte> destination)
        {
            Vector128<byte>[] keys = RoundKeys;

            ReadOnlySpan<Vector128<byte>> blocks = MemoryMarshal.Cast<byte, Vector128<byte>>(plaintext);
            Span<Vector128<byte>> dest = MemoryMarshal.Cast<byte, Vector128<byte>>(destination);

            // Makes the JIT remove all the other range checks on keys
            _ = keys[10];

            for (int i = 0; i < blocks.Length; i++)
            {
                Vector128<byte> b = blocks[i];

                b = Sse2.Xor(b, keys[0]);
                b = Aes.Encrypt(b, keys[1]);
                b = Aes.Encrypt(b, keys[2]);
                b = Aes.Encrypt(b, keys[3]);
                b = Aes.Encrypt(b, keys[4]);
                b = Aes.Encrypt(b, keys[5]);
                b = Aes.Encrypt(b, keys[6]);
                b = Aes.Encrypt(b, keys[7]);
                b = Aes.Encrypt(b, keys[8]);
                b = Aes.Encrypt(b, keys[9]);
                b = Aes.EncryptLast(b, keys[10]);

                dest[i] = b;
            }
        }

        private static Vector128<byte>[] KeyExpansion(Span<byte> key)
        {
            var keys = new Vector128<byte>[20];

            keys[0] = Unsafe.ReadUnaligned<Vector128<byte>>(ref key[0]);

            ExpandRound(keys, 1, Aes.KeygenAssist(keys[0], 0x01));
            ExpandRound(keys, 2, Aes.KeygenAssist(keys[1], 0x02));
            ExpandRound(keys, 3, Aes.KeygenAssist(keys[2], 0x04));
            ExpandRound(keys, 4, Aes.KeygenAssist(keys[3], 0x08));
            ExpandRound(keys, 5, Aes.KeygenAssist(keys[4], 0x10));
            ExpandRound(keys, 6, Aes.KeygenAssist(keys[5], 0x20));
            ExpandRound(keys, 7, Aes.KeygenAssist(keys[6], 0x40));
            ExpandRound(keys, 8, Aes.KeygenAssist(keys[7], 0x80));
            ExpandRound(keys, 9, Aes.KeygenAssist(keys[8], 0x1b));
            ExpandRound(keys, 10, Aes.KeygenAssist(keys[9], 0x36));

            for (int i = 1; i < 10; i++)
            {
                keys[10 + i] = Aes.InverseMixColumns(keys[i]);
            }

            return keys;
        }

        [MethodImpl(MethodImplOptions.AggressiveInlining)]
        private static void ExpandRound(Vector128<byte>[] keys, int i, Vector128<byte> assist)
        {
            Vector128<byte> s = keys[i - 1];
            Vector128<byte> t = Sse2.Shuffle(assist.AsUInt32(), 0xFF).AsByte();

            s = Sse2.Xor(s, Sse2.ShiftLeftLogical128BitLane(s, 4));
            s = Sse2.Xor(s, Sse2.ShiftLeftLogical128BitLane(s, 8));

            keys[i] = Sse2.Xor(s, t);
        }
    }
}