ParagonIE_Sodium_Crypto::secretstream_xchacha20poly1305_push( string $state, string $msg, string $aad = '', int $tag = 0 ): string

1304    public static function secretstream_xchacha20poly1305_push(&$state, $msg, $aad = '', $tag = 0)1305    {1306        $st = ParagonIE_Sodium_Core_SecretStream_State::fromString($state);1307        # crypto_onetimeauth_poly1305_state poly1305_state;1308        # unsigned char                     block[64U];1309        # unsigned char                     slen[8U];1310        # unsigned char                    *c;1311        # unsigned char                    *mac;1312 1313        $msglen = ParagonIE_Sodium_Core_Util::strlen($msg);1314        $aadlen = ParagonIE_Sodium_Core_Util::strlen($aad);1315 1316        if ((($msglen + 63) >> 6) > 0xfffffffe) {1317            throw new SodiumException(1318                'message cannot be larger than SODIUM_CRYPTO_SECRETSTREAM_XCHACHA20POLY1305_MESSAGEBYTES_MAX bytes'1319            );1320        }1321 1322        # if (outlen_p != NULL) {1323        #     *outlen_p = 0U;1324        # }1325        # if (mlen > crypto_secretstream_xchacha20poly1305_MESSAGEBYTES_MAX) {1326        #     sodium_misuse();1327        # }1328 1329        # crypto_stream_chacha20_ietf(block, sizeof block, state->nonce, state->k);1330        # crypto_onetimeauth_poly1305_init(&poly1305_state, block);1331        # sodium_memzero(block, sizeof block);1332        $auth = new ParagonIE_Sodium_Core_Poly1305_State(1333            ParagonIE_Sodium_Core_ChaCha20::ietfStream(32, $st->getCombinedNonce(), $st->getKey())1334        );1335 1336        # crypto_onetimeauth_poly1305_update(&poly1305_state, ad, adlen);1337        $auth->update($aad);1338 1339        # crypto_onetimeauth_poly1305_update(&poly1305_state, _pad0,1340        #     (0x10 - adlen) & 0xf);1341        $auth->update(str_repeat("\0", ((0x10 - $aadlen) & 0xf)));1342 1343        # memset(block, 0, sizeof block);1344        # block[0] = tag;1345        # crypto_stream_chacha20_ietf_xor_ic(block, block, sizeof block,1346        #                                    state->nonce, 1U, state->k);1347        $block = ParagonIE_Sodium_Core_ChaCha20::ietfStreamXorIc(1348            ParagonIE_Sodium_Core_Util::intToChr($tag) . str_repeat("\0", 63),1349            $st->getCombinedNonce(),1350            $st->getKey(),1351            ParagonIE_Sodium_Core_Util::store64_le(1)1352        );1353 1354        # crypto_onetimeauth_poly1305_update(&poly1305_state, block, sizeof block);1355        $auth->update($block);1356 1357        # out[0] = block[0];1358        $out = $block[0];1359        # c = out + (sizeof tag);1360        # crypto_stream_chacha20_ietf_xor_ic(c, m, mlen, state->nonce, 2U, state->k);1361        $cipher = ParagonIE_Sodium_Core_ChaCha20::ietfStreamXorIc(1362            $msg,1363            $st->getCombinedNonce(),1364            $st->getKey(),1365            ParagonIE_Sodium_Core_Util::store64_le(2)1366        );1367 1368        # crypto_onetimeauth_poly1305_update(&poly1305_state, c, mlen);1369        $auth->update($cipher);1370 1371        $out .= $cipher;1372        unset($cipher);1373 1374        # crypto_onetimeauth_poly1305_update1375        # (&poly1305_state, _pad0, (0x10 - (sizeof block) + mlen) & 0xf);1376        $auth->update(str_repeat("\0", ((0x10 - 64 + $msglen) & 0xf)));1377 1378        # STORE64_LE(slen, (uint64_t) adlen);1379        $slen = ParagonIE_Sodium_Core_Util::store64_le($aadlen);1380 1381        # crypto_onetimeauth_poly1305_update(&poly1305_state, slen, sizeof slen);1382        $auth->update($slen);1383