package Y3; import java.security.GeneralSecurityException; import java.security.MessageDigest; import java.util.Arrays; /* JADX INFO: loaded from: classes3.dex */ public final class l { /* JADX INFO: renamed from: a, reason: collision with root package name */ public final Z3.a f8832a; public l(byte[] bArr) { if (!A0.a.a(1)) { throw new IllegalStateException(new GeneralSecurityException("Can not use Ed25519 in FIPS-mode.")); } if (bArr.length != 32) { throw new IllegalArgumentException("Given public key's length is not 32."); } this.f8832a = Z3.a.a(bArr); } public final void a(byte[] bArr, byte[] bArr2) throws GeneralSecurityException { long[] jArr; C4.f fVar; byte[] bArr3 = bArr; if (bArr3.length != 64) { throw new GeneralSecurityException("The length of the signature is not 64."); } byte[] bArr4 = this.f8832a.f9150a; byte[] bArr5 = new byte[bArr4.length]; System.arraycopy(bArr4, 0, bArr5, 0, bArr4.length); if (bArr3.length == 64) { byte[] bArrCopyOfRange = Arrays.copyOfRange(bArr3, 32, 64); int i6 = 31; while (true) { if (i6 < 0) { break; } int i7 = bArrCopyOfRange[i6] & 255; int i8 = j.f8819b[i6] & 255; if (i7 == i8) { i6--; bArr3 = bArr; } else if (i7 < i8) { MessageDigest messageDigest = (MessageDigest) o.f8840d.f8841a.a("SHA-512"); messageDigest.update(bArr3, 0, 32); messageDigest.update(bArr5); messageDigest.update(bArr2); byte[] bArrDigest = messageDigest.digest(); long jH = j.h(bArrDigest, 0) & 2097151; long jI = (j.i(bArrDigest, 2) >> 5) & 2097151; long jH2 = (j.h(bArrDigest, 5) >> 2) & 2097151; long jI2 = (j.i(bArrDigest, 7) >> 7) & 2097151; long jI3 = (j.i(bArrDigest, 10) >> 4) & 2097151; long jH3 = (j.h(bArrDigest, 13) >> 1) & 2097151; long jI4 = (j.i(bArrDigest, 15) >> 6) & 2097151; long jH4 = (j.h(bArrDigest, 18) >> 3) & 2097151; long jH5 = j.h(bArrDigest, 21) & 2097151; long jI5 = (j.i(bArrDigest, 23) >> 5) & 2097151; long jH6 = (j.h(bArrDigest, 26) >> 2) & 2097151; long jI6 = (j.i(bArrDigest, 28) >> 7) & 2097151; long jI7 = (j.i(bArrDigest, 31) >> 4) & 2097151; long jH7 = (j.h(bArrDigest, 34) >> 1) & 2097151; long jI8 = (j.i(bArrDigest, 36) >> 6) & 2097151; long jH8 = (j.h(bArrDigest, 39) >> 3) & 2097151; long jH9 = j.h(bArrDigest, 42) & 2097151; long jI9 = (j.i(bArrDigest, 44) >> 5) & 2097151; long jH10 = (j.h(bArrDigest, 47) >> 2) & 2097151; long jI10 = (j.i(bArrDigest, 49) >> 7) & 2097151; long jI11 = (j.i(bArrDigest, 52) >> 4) & 2097151; long jH11 = (j.h(bArrDigest, 55) >> 1) & 2097151; long jI12 = (j.i(bArrDigest, 57) >> 6) & 2097151; long jI13 = j.i(bArrDigest, 60) >> 3; long j4 = (jI13 * 666643) + jI6; long j6 = (jI13 * 470296) + jI7; long j7 = (jI13 * 654183) + jH7; long j8 = jI8 - (jI13 * 997805); long j9 = (jI13 * 136657) + jH8; long j10 = jH9 - (jI13 * 683901); long j11 = (jI12 * 666643) + jH6; long j12 = (jI12 * 470296) + j4; long j13 = (jI12 * 654183) + j6; long j14 = j7 - (jI12 * 997805); long j15 = (jI12 * 136657) + j8; long j16 = j9 - (jI12 * 683901); long j17 = (jH11 * 666643) + jI5; long j18 = (jH11 * 470296) + j11; long j19 = (jH11 * 654183) + j12; long j20 = j13 - (jH11 * 997805); long j21 = (jH11 * 136657) + j14; long j22 = j15 - (jH11 * 683901); long j23 = (jI11 * 666643) + jH5; long j24 = (jI11 * 470296) + j17; long j25 = (jI11 * 654183) + j18; long j26 = j19 - (jI11 * 997805); long j27 = (jI11 * 136657) + j20; long j28 = j21 - (jI11 * 683901); long j29 = (jI10 * 666643) + jH4; long j30 = (jI10 * 470296) + j23; long j31 = (jI10 * 654183) + j24; long j32 = j25 - (jI10 * 997805); long j33 = (jI10 * 136657) + j26; long j34 = j27 - (jI10 * 683901); long j35 = (jH10 * 666643) + jI4; long j36 = (jH10 * 470296) + j29; long j37 = (jH10 * 654183) + j30; long j38 = j31 - (jH10 * 997805); long j39 = (jH10 * 136657) + j32; long j40 = j33 - (jH10 * 683901); long j41 = (j35 + 1048576) >> 21; long j42 = j36 + j41; long j43 = j35 - (j41 << 21); long j44 = (j37 + 1048576) >> 21; long j45 = j38 + j44; long j46 = j37 - (j44 << 21); long j47 = (j39 + 1048576) >> 21; long j48 = j40 + j47; long j49 = j39 - (j47 << 21); long j50 = (j34 + 1048576) >> 21; long j51 = j28 + j50; long j52 = j34 - (j50 << 21); long j53 = (j22 + 1048576) >> 21; long j54 = j16 + j53; long j55 = j22 - (j53 << 21); long j56 = (j10 + 1048576) >> 21; long j57 = jI9 + j56; long j58 = j10 - (j56 << 21); long j59 = (j42 + 1048576) >> 21; long j60 = j46 + j59; long j61 = j42 - (j59 << 21); long j62 = (j45 + 1048576) >> 21; long j63 = j49 + j62; long j64 = j45 - (j62 << 21); long j65 = (j48 + 1048576) >> 21; long j66 = j52 + j65; long j67 = j48 - (j65 << 21); long j68 = (j51 + 1048576) >> 21; long j69 = j55 + j68; long j70 = j51 - (j68 << 21); long j71 = (j54 + 1048576) >> 21; long j72 = j58 + j71; long j73 = j54 - (j71 << 21); long j74 = (j57 * 666643) + jH3; long j75 = (j57 * 470296) + j43; long j76 = (j57 * 654183) + j61; long j77 = j60 - (j57 * 997805); long j78 = (j57 * 136657) + j64; long j79 = j63 - (j57 * 683901); long j80 = (j72 * 666643) + jI3; long j81 = (j72 * 470296) + j74; long j82 = (j72 * 654183) + j75; long j83 = j76 - (j72 * 997805); long j84 = (j72 * 136657) + j77; long j85 = j78 - (j72 * 683901); long j86 = (j73 * 666643) + jI2; long j87 = (j73 * 470296) + j80; long j88 = (j73 * 654183) + j81; long j89 = (j73 * 136657) + j83; long j90 = j84 - (j73 * 683901); long j91 = (j69 * 666643) + jH2; long j92 = (j69 * 470296) + j86; long j93 = (j69 * 654183) + j87; long j94 = (j69 * 136657) + (j82 - (j73 * 997805)); long j95 = (j70 * 666643) + jI; long j96 = (j70 * 470296) + j91; long j97 = (j70 * 654183) + j92; long j98 = j93 - (j70 * 997805); long j99 = (j70 * 136657) + (j88 - (j69 * 997805)); long j100 = j94 - (j70 * 683901); long j101 = (j66 * 666643) + jH; long j102 = (j66 * 470296) + j95; long j103 = (j66 * 654183) + j96; long j104 = j97 - (j66 * 997805); long j105 = (j66 * 136657) + j98; long j106 = j99 - (j66 * 683901); long j107 = (j101 + 1048576) >> 21; long j108 = j102 + j107; long j109 = j101 - (j107 << 21); long j110 = (j103 + 1048576) >> 21; long j111 = j104 + j110; long j112 = j103 - (j110 << 21); long j113 = (j105 + 1048576) >> 21; long j114 = j106 + j113; long j115 = j105 - (j113 << 21); long j116 = (j100 + 1048576) >> 21; long j117 = (j89 - (j69 * 683901)) + j116; long j118 = j100 - (j116 << 21); long j119 = (j90 + 1048576) >> 21; long j120 = j85 + j119; long j121 = j90 - (j119 << 21); long j122 = (j79 + 1048576) >> 21; long j123 = j67 + j122; long j124 = j79 - (j122 << 21); long j125 = (j108 + 1048576) >> 21; long j126 = j112 + j125; long j127 = j108 - (j125 << 21); long j128 = (j111 + 1048576) >> 21; long j129 = j115 + j128; long j130 = j111 - (j128 << 21); long j131 = (j114 + 1048576) >> 21; long j132 = j118 + j131; long j133 = j114 - (j131 << 21); long j134 = (j117 + 1048576) >> 21; long j135 = j121 + j134; long j136 = j117 - (j134 << 21); long j137 = (j120 + 1048576) >> 21; long j138 = j124 + j137; long j139 = j120 - (j137 << 21); long j140 = (j123 + 1048576) >> 21; long j141 = (j140 * 666643) + j109; long j142 = (j140 * 136657) + j129; long j143 = j141 >> 21; long j144 = (j140 * 470296) + j127 + j143; long j145 = j141 - (j143 << 21); long j146 = j144 >> 21; long j147 = (j140 * 654183) + j126 + j146; long j148 = j144 - (j146 << 21); long j149 = j147 >> 21; long j150 = (j130 - (j140 * 997805)) + j149; long j151 = j147 - (j149 << 21); long j152 = j150 >> 21; long j153 = j142 + j152; long j154 = j150 - (j152 << 21); long j155 = j153 >> 21; long j156 = (j133 - (j140 * 683901)) + j155; long j157 = j153 - (j155 << 21); long j158 = j156 >> 21; long j159 = j132 + j158; long j160 = j156 - (j158 << 21); long j161 = j159 >> 21; long j162 = j136 + j161; long j163 = j159 - (j161 << 21); long j164 = j162 >> 21; long j165 = j135 + j164; long j166 = j162 - (j164 << 21); long j167 = j165 >> 21; long j168 = j139 + j167; long j169 = j165 - (j167 << 21); long j170 = j168 >> 21; long j171 = j138 + j170; long j172 = j168 - (j170 << 21); long j173 = j171 >> 21; long j174 = (j123 - (j140 << 21)) + j173; long j175 = j171 - (j173 << 21); long j176 = j174 >> 21; long j177 = j174 - (j176 << 21); long j178 = (666643 * j176) + j145; long j179 = (654183 * j176) + j151; long j180 = j154 - (997805 * j176); long j181 = (136657 * j176) + j157; long j182 = j160 - (j176 * 683901); long j183 = j178 >> 21; long j184 = (470296 * j176) + j148 + j183; long j185 = j184 >> 21; long j186 = j179 + j185; long j187 = j184 - (j185 << 21); long j188 = j186 >> 21; long j189 = j180 + j188; long j190 = j186 - (j188 << 21); long j191 = j189 >> 21; long j192 = j181 + j191; long j193 = j189 - (j191 << 21); long j194 = j192 >> 21; long j195 = j182 + j194; long j196 = j192 - (j194 << 21); long j197 = j195 >> 21; long j198 = j163 + j197; long j199 = j195 - (j197 << 21); long j200 = j198 >> 21; long j201 = j166 + j200; long j202 = j198 - (j200 << 21); long j203 = j201 >> 21; long j204 = j169 + j203; long j205 = j201 - (j203 << 21); long j206 = j204 >> 21; long j207 = j172 + j206; long j208 = j207 >> 21; long j209 = j175 + j208; long j210 = j207 - (j208 << 21); long j211 = j209 >> 21; long j212 = j177 + j211; long j213 = j209 - (j211 << 21); bArrDigest[0] = (byte) (j178 - (j183 << 21)); bArrDigest[1] = (byte) (r10 >> 8); bArrDigest[2] = (byte) ((r10 >> 16) | (j187 << 5)); bArrDigest[3] = (byte) (j187 >> 3); bArrDigest[4] = (byte) (j187 >> 11); bArrDigest[5] = (byte) ((j187 >> 19) | (j190 << 2)); bArrDigest[6] = (byte) (j190 >> 6); bArrDigest[7] = (byte) ((j190 >> 14) | (j193 << 7)); bArrDigest[8] = (byte) (j193 >> 1); bArrDigest[9] = (byte) (j193 >> 9); bArrDigest[10] = (byte) ((j193 >> 17) | (j196 << 4)); bArrDigest[11] = (byte) (j196 >> 4); bArrDigest[12] = (byte) (j196 >> 12); bArrDigest[13] = (byte) ((j196 >> 20) | (j199 << 1)); bArrDigest[14] = (byte) (j199 >> 7); bArrDigest[15] = (byte) ((j199 >> 15) | (j202 << 6)); bArrDigest[16] = (byte) (j202 >> 2); bArrDigest[17] = (byte) (j202 >> 10); bArrDigest[18] = (byte) ((j202 >> 18) | (j205 << 3)); bArrDigest[19] = (byte) (j205 >> 5); bArrDigest[20] = (byte) (j205 >> 13); bArrDigest[21] = (byte) (j204 - (j206 << 21)); bArrDigest[22] = (byte) (r14 >> 8); bArrDigest[23] = (byte) ((r14 >> 16) | (j210 << 5)); bArrDigest[24] = (byte) (j210 >> 3); bArrDigest[25] = (byte) (j210 >> 11); bArrDigest[26] = (byte) ((j210 >> 19) | (j213 << 2)); bArrDigest[27] = (byte) (j213 >> 6); bArrDigest[28] = (byte) ((j213 >> 14) | (j212 << 7)); bArrDigest[29] = (byte) (j212 >> 1); bArrDigest[30] = (byte) (j212 >> 9); bArrDigest[31] = (byte) (j212 >> 17); long[] jArr2 = new long[10]; long[] jArrG = j.g(bArr5); long[] jArr3 = new long[10]; jArr3[0] = 1; long[] jArr4 = new long[10]; long[] jArr5 = new long[10]; long[] jArr6 = new long[10]; long[] jArr7 = new long[10]; long[] jArr8 = new long[10]; j.n(jArr5, jArrG); j.j(jArr6, jArr5, k.f8824a); j.p(jArr5, jArr5, jArr3); j.q(jArr6, jArr6, jArr3); long[] jArr9 = new long[10]; j.n(jArr9, jArr6); j.j(jArr9, jArr9, jArr6); j.n(jArr2, jArr9); j.j(jArr2, jArr2, jArr6); j.j(jArr2, jArr2, jArr5); long[] jArr10 = new long[10]; long[] jArr11 = new long[10]; long[] jArr12 = new long[10]; j.n(jArr10, jArr2); j.n(jArr11, jArr10); j.n(jArr11, jArr11); j.j(jArr11, jArr2, jArr11); j.j(jArr10, jArr10, jArr11); j.n(jArr10, jArr10); j.j(jArr10, jArr11, jArr10); j.n(jArr11, jArr10); for (int i9 = 1; i9 < 5; i9++) { j.n(jArr11, jArr11); } j.j(jArr10, jArr11, jArr10); j.n(jArr11, jArr10); for (int i10 = 1; i10 < 10; i10++) { j.n(jArr11, jArr11); } j.j(jArr11, jArr11, jArr10); j.n(jArr12, jArr11); for (int i11 = 1; i11 < 20; i11++) { j.n(jArr12, jArr12); } j.j(jArr11, jArr12, jArr11); j.n(jArr11, jArr11); for (int i12 = 1; i12 < 10; i12++) { j.n(jArr11, jArr11); } j.j(jArr10, jArr11, jArr10); j.n(jArr11, jArr10); for (int i13 = 1; i13 < 50; i13++) { j.n(jArr11, jArr11); } j.j(jArr11, jArr11, jArr10); j.n(jArr12, jArr11); for (int i14 = 1; i14 < 100; i14++) { j.n(jArr12, jArr12); } j.j(jArr11, jArr12, jArr11); j.n(jArr11, jArr11); for (int i15 = 1; i15 < 50; i15++) { j.n(jArr11, jArr11); } j.j(jArr10, jArr11, jArr10); j.n(jArr10, jArr10); j.n(jArr10, jArr10); j.j(jArr2, jArr10, jArr2); j.j(jArr2, jArr2, jArr9); j.j(jArr2, jArr2, jArr5); j.n(jArr7, jArr2); j.j(jArr7, jArr7, jArr6); j.p(jArr8, jArr7, jArr5); if (j.a(jArr8)) { j.q(jArr8, jArr7, jArr5); if (j.a(jArr8)) { throw new GeneralSecurityException("Cannot convert given bytes to extended projective coordinates. No square root exists for modulo 2^255-19"); } j.j(jArr2, jArr2, k.f8826c); } if (!j.a(jArr2) && ((bArr5[31] & 255) >> 7) != 0) { throw new GeneralSecurityException("Cannot convert given bytes to extended projective coordinates. Computed x is zero and encoded x's least significant bit is not zero"); } if ((j.d(jArr2)[0] & 1) == ((bArr5[31] & 255) >> 7)) { for (int i16 = 0; i16 < 10; i16++) { jArr2[i16] = -jArr2[i16]; } } j.j(jArr4, jArr2, jArrG); h[] hVarArr = new h[8]; hVarArr[0] = new h(new i(new C4.f(jArr2, jArrG, jArr3, 16), jArr4)); C4.f fVar2 = new C4.f(16); long[] jArr13 = new long[10]; i iVar = new i(fVar2, jArr13); long[] jArr14 = new long[10]; long[] jArr15 = (long[]) fVar2.f741b; j.n(jArr15, jArr2); long[] jArr16 = (long[]) fVar2.f743d; j.n(jArr16, jArrG); j.n(jArr13, jArr3); j.q(jArr13, jArr13, jArr13); long[] jArr17 = (long[]) fVar2.f742c; j.q(jArr17, jArr2, jArrG); j.n(jArr14, jArr17); j.q(jArr17, jArr16, jArr15); j.p(jArr16, jArr16, jArr15); j.p(jArr15, jArr14, jArr17); j.p(jArr13, jArr13, jArr16); i iVar2 = new i(iVar); for (int i17 = 1; i17 < 8; i17++) { j.b(iVar, iVar2, hVarArr[i17 - 1]); hVarArr[i17] = new h(new i(iVar)); } byte[] bArrM = j.m(bArrDigest); byte[] bArrM2 = j.m(bArrCopyOfRange); i iVar3 = new i(0); i iVar4 = new i(1); int i18 = 255; while (i18 >= 0 && bArrM[i18] == 0 && bArrM2[i18] == 0) { i18--; } while (true) { jArr = iVar3.f8817b; fVar = iVar3.f8816a; if (i18 < 0) { break; } long[] jArr18 = new long[10]; long[] jArr19 = new long[10]; long[] jArr20 = new long[10]; j.j(jArr18, (long[]) fVar.f741b, jArr); long[] jArr21 = (long[]) fVar.f742c; long[] jArr22 = (long[]) fVar.f743d; j.j(jArr19, jArr21, jArr22); j.j(jArr20, jArr22, jArr); long[] jArr23 = new long[10]; long[] jArr24 = (long[]) fVar.f741b; j.n(jArr24, jArr18); j.n(jArr22, jArr19); j.n(jArr, jArr20); j.q(jArr, jArr, jArr); j.q(jArr21, jArr18, jArr19); j.n(jArr23, jArr21); j.q(jArr21, jArr22, jArr24); j.p(jArr22, jArr22, jArr24); j.p(jArr24, jArr23, jArr21); j.p(jArr, jArr, jArr22); byte b5 = bArrM[i18]; if (b5 > 0) { i.a(iVar4, iVar3); j.b(iVar3, iVar4, hVarArr[bArrM[i18] / 2]); } else if (b5 < 0) { i.a(iVar4, iVar3); j.o(iVar3, iVar4, hVarArr[(-bArrM[i18]) / 2]); } byte b6 = bArrM2[i18]; if (b6 > 0) { i.a(iVar4, iVar3); j.b(iVar3, iVar4, k.f8828e[bArrM2[i18] / 2]); } else if (b6 < 0) { i.a(iVar4, iVar3); j.o(iVar3, iVar4, k.f8828e[(-bArrM2[i18]) / 2]); } i18--; } long[] jArr25 = new long[10]; long[] jArr26 = new long[10]; long[] jArr27 = new long[10]; j.j(jArr25, (long[]) fVar.f741b, jArr); long[] jArr28 = (long[]) fVar.f742c; long[] jArr29 = (long[]) fVar.f743d; j.j(jArr26, jArr28, jArr29); j.j(jArr27, jArr29, jArr); long[] jArr30 = new long[10]; long[] jArr31 = new long[10]; long[] jArr32 = new long[10]; long[] jArr33 = new long[10]; long[] jArr34 = new long[10]; long[] jArr35 = new long[10]; long[] jArr36 = new long[10]; long[] jArr37 = new long[10]; long[] jArr38 = new long[10]; long[] jArr39 = new long[10]; long[] jArr40 = new long[10]; long[] jArr41 = new long[10]; long[] jArr42 = new long[10]; j.n(jArr33, jArr27); j.n(jArr42, jArr33); j.n(jArr41, jArr42); j.j(jArr34, jArr41, jArr27); j.j(jArr35, jArr34, jArr33); j.n(jArr41, jArr35); j.j(jArr36, jArr41, jArr34); j.n(jArr41, jArr36); j.n(jArr42, jArr41); j.n(jArr41, jArr42); j.n(jArr42, jArr41); j.n(jArr41, jArr42); j.j(jArr37, jArr41, jArr36); j.n(jArr41, jArr37); j.n(jArr42, jArr41); for (int i19 = 2; i19 < 10; i19 += 2) { j.n(jArr41, jArr42); j.n(jArr42, jArr41); } j.j(jArr38, jArr42, jArr37); j.n(jArr41, jArr38); j.n(jArr42, jArr41); for (int i20 = 2; i20 < 20; i20 += 2) { j.n(jArr41, jArr42); j.n(jArr42, jArr41); } j.j(jArr41, jArr42, jArr38); j.n(jArr42, jArr41); j.n(jArr41, jArr42); for (int i21 = 2; i21 < 10; i21 += 2) { j.n(jArr42, jArr41); j.n(jArr41, jArr42); } j.j(jArr39, jArr41, jArr37); j.n(jArr41, jArr39); j.n(jArr42, jArr41); for (int i22 = 2; i22 < 50; i22 += 2) { j.n(jArr41, jArr42); j.n(jArr42, jArr41); } j.j(jArr40, jArr42, jArr39); j.n(jArr42, jArr40); j.n(jArr41, jArr42); for (int i23 = 2; i23 < 100; i23 += 2) { j.n(jArr42, jArr41); j.n(jArr41, jArr42); } j.j(jArr42, jArr41, jArr40); j.n(jArr41, jArr42); j.n(jArr42, jArr41); for (int i24 = 2; i24 < 50; i24 += 2) { j.n(jArr41, jArr42); j.n(jArr42, jArr41); } j.j(jArr41, jArr42, jArr39); j.n(jArr42, jArr41); j.n(jArr41, jArr42); j.n(jArr42, jArr41); j.n(jArr41, jArr42); j.n(jArr42, jArr41); j.j(jArr30, jArr42, jArr35); j.j(jArr31, jArr25, jArr30); j.j(jArr32, jArr26, jArr30); byte[] bArrD = j.d(jArr32); bArrD[31] = (byte) (bArrD[31] ^ ((j.d(jArr31)[0] & 1) << 7)); for (int i25 = 0; i25 < 32; i25++) { if (bArrD[i25] == bArr[i25]) { } } return; } } } throw new GeneralSecurityException("Signature check failed."); } }