Thimbron

As you may know, "blatta" is Latin for "cockroach." This name seems more aligned with the Pest theme, so I'm going with that.

I'm attempting to release this as a signed genesis. I haven't been able to figure out how to press it myself yet using vk.pl, but it *should* work for those who know how to use their v implementation.

This version implements several Pest-specific commands: AT, WOT, KEY, UNKEY, PEER, UNPEER, and GENKEY. In addition, this version requires only one key to be shared between a pair of peers, and also uses base64 format to store and display keys.

This is the first version that doesn't require a station to be restarted to add new peers, so it may be a bit easier at this point to stand up a longer running test net.

genesis.vdiff genesis.vdiff.thimbronion.sig

From the updated README:

Alcuin implements a subset of the Pest spec, which can be found
here: http://www.loper-os.org/pub/pest/pest_draft.html                                                    

Although it is a work in progress and much is yet to be completed, Alcuin
*should* be able to interact with another Pest client
successfully.

Notably missing:                                                                                          

- Pest specific client commands
- Pest specific warning/informational output for incoming/outgoing messages
- GetData message support
- Key Offer message support
- Key Slice message support                                                                               

Under the hood there is a dynamic AT and WOT, but there is no way to update
them via the client.

For the moment the client must still be configured via the config.py file,
although this is now passed in via the --address-table-path command line
option.  For now, the config file is really a combination WOT/AT.

I am unable to provide a genesis using vdiff at this time because I can't get vdiff to exclude certain ephemeral files and directories.

alcuin-9994.tar.gz alcuin-9994.tar.gz.asc

• add propagate field
• don't propagate PMs
• filter commands sent to client via udp by nick/channel

alcuin-9995.diff alcuin-9995.tar.gz

Alcuin 9997 now uses a gossip protocol to send messages between network nodes. Additionally, the config file has been restructured to allow for using a separate local secret for each peer. Packet sizes have been significantly reduced through usage of the struct.pack/unpack functions to directly write bytes to the packet. Thanks to PeterL for a snippet I used to detect duplicate timestamps.

I don't foresee making any further major releases until asciilifeform publishes his standard.

alcuin-9997-gossip.diff | alcuin-9997.tar.gz

Alcuin 9998 is available as a patch to the genesis, or as a tarball.

This release includes the following changes:

• Packet encryption using a pure Python implementation of Serpent¹
• Digest now includes the peer secret in order to allow easy dropping of garbage packets
• Updated config file format - all peer information including port number is now specified in the config file. The --peers command line option has been removed.

1	diff --git a/README.txt b/README.txt
2	index 2d5ff88..5228ab4 100644
3	--- a/README.txt
4	+++ b/README.txt
5	@@ -5,17 +5,13 @@ yet to be completed including but not limited to:
6
7	- gossip style message forwarding
8	- message deduplication
9	-- symmetric encryption of messages
10	-- support for broadcasting several important IRC commands
11	- over the gossip net.
12	- mitigation of hash length extension attacks
13
14	GETTING STARTED
15
16	-1. Copy config.py.example to config.py (nothing in the config file is
17	-used yet, but alcuin will crash if it doesn't exist).
18	+1. Copy config.py.example to config.py and update it appropriately.
19	2. Launch alcuin with something like the following command:
20	-./alcuin --verbose --port=6668 --peers=206.189.163.145
21	+./alcuin --port=6668
22
23	NOTES FOR DIFF/PATCH N00B5
24
25	diff --git a/lib/server.py b/lib/server.py
26	index f2c6206..a609aaf 100644
27	--- a/lib/server.py
28	+++ b/lib/server.py
29	@@ -1,4 +1,4 @@
30	-VERSION = "9999"
31	+VERSION = "9998"
32
33	import os
34	import select
35
36	diff --git a/lib/infosec.py b/lib/infosec.py
37	index 0807633..255d201 100644
38	--- a/lib/infosec.py
39	+++ b/lib/infosec.py
40	@@ -16,7 +16,7 @@ class Infosec(object):
41	serpent = Serpent(self._pad(config.secret, MAX_SECRET_SIZE))
42	padded_message = self._pad(message, MAX_MESSAGE_SIZE)
43	ciphertext = binascii.hexlify(serpent.encrypt(padded_message.encode("ascii")))
44	- digest = hashlib.sha512(ciphertext).hexdigest()
45	+ digest = hashlib.sha512(config.secret + ciphertext).hexdigest()
46	print("packing message: %s" % message)
47	print("pack digest: %s" % digest)
48	print("pack digest length: %d" % len(digest))
49	@@ -32,7 +32,7 @@ class Infosec(object):
50	print("received package: %s" % package)
51	received_digest = package[0:128]
52	ciphertext = package[128:1152]
53	- digest = hashlib.sha512(ciphertext).hexdigest()
54	+ digest = hashlib.sha512(peer_secret + ciphertext).hexdigest()
55	print("unpack package length: %d" % len(package))
56	print("unpack sender digest: %s" % received_digest)
57	print("unpack sender digest length: %d" % len(received_digest))
58
59	diff --git a/alcuin b/alcuin
60	index bbf9ed4..44efc5d 100755
61	--- a/alcuin
62	+++ b/alcuin
63	@@ -13,7 +13,6 @@ from lib.server import Server
64	from lib.peer import Peer
65	from datetime import datetime
66	from optparse import OptionParser
67	-import config as cfg
68
69
70	def main(argv):
71	@@ -59,10 +58,6 @@ def main(argv):
72	help="listen for UDP packets on X;"
73	" default: 7778")
74	op.add_option(
75	- "--peers",
76	- metavar="X",
77	- help="Broadcast to X (a list of IP addresses separated by comma or whitespace)")
78	- op.add_option(
79	"--statedir",
80	metavar="X",
81	help="save persistent channel state (topic, key) in directory X")
82	@@ -90,8 +85,6 @@ def main(argv):
83	options.ports = "6667"
84	else:
85	options.ports = "6697"
86	- if options.peers is None:
87	- options.peers = ""
88	if options.udp_port is None:
89	options.udp_port = 7778
90	else:
91	@@ -127,13 +120,6 @@ def main(argv):
92	except ValueError:
93	op.error("bad port: %r" % port)
94	options.ports = ports
95	- peers = []
96	- for peer in re.split(r"[,\s]+", options.peers):
97	- try:
98	- peers.append(Peer(peer))
99	- except ValueError:
100	- op.error("bad peer ip: %r" % peer)
101	- options.peers = peers
102	server = Server(options)
103	if options.daemon:
104	server.daemonize()
105	diff --git a/config.py.example b/config.py.example
106	index f9adc62..611913e 100644
107	--- a/config.py.example
108	+++ b/config.py.example
109	@@ -1,4 +1,9 @@
110	secret = "SEEKRIT"
111	-peer_secrets = {
112	- "10.0.0.1":"K33P-0U7!"
113	-}
114	+peers = [
115	+ {
116	+ "name":"schellenberg",
117	+ "secret":"K33P-0U7!",
118	+ "address":"10.0.0.1",
119	+ "port":7778
120	+ }
121	+]
122	diff --git a/lib/client.py b/lib/client.py
123	index 97d8a7f..30eb5ed 100644
124	--- a/lib/client.py
125	+++ b/lib/client.py
126	@@ -446,9 +446,13 @@ class Client(object):
127
128	def udp_data_received(self, address, data):
129	if data:
130	- message = self.infosec.unpack(address, data)
131	- if(message != None):
132	- self.message(message)
133	+ for peer in self.server.peers:
134	+ if(address == peer.address):
135	+ message = self.infosec.unpack(peer, data)
136	+ if(message != None):
137	+ self.message(message)
138	+ return
139	+ print("Unknown peer address: " % address)
140
141	def socket_readable_notification(self):
142	try:
143	diff --git a/lib/infosec.py b/lib/infosec.py
144	index f11b992..0807633 100644
145	--- a/lib/infosec.py
146	+++ b/lib/infosec.py
147	@@ -26,28 +26,25 @@ class Infosec(object):
148	print("pack package length: %d" % len(package))
149	return package
150
151	- def unpack(self, address, package):
152	- peer_secret = config.peer_secrets[address]
153	- if(None != peer_secret):
154	- serpent = Serpent(self._pad(peer_secret, MAX_SECRET_SIZE))
155	- print("received package: %s" % package)
156	- received_digest = package[0:128]
157	- ciphertext = package[128:1152]
158	- digest = hashlib.sha512(ciphertext).hexdigest()
159	- print("unpack package length: %d" % len(package))
160	- print("unpack sender digest: %s" % received_digest)
161	- print("unpack sender digest length: %d" % len(received_digest))
162	- print("unpack local digest: %s" % digest)
163	- print("unpack local digest length: %d" % len(digest))
164	- print("unpack ciphertext: %s") % ciphertext
165	- print("unpack ciphertext length: %d") % len(ciphertext)
166	- if(received_digest == digest):
167	- return serpent.decrypt(binascii.unhexlify(ciphertext))
168	- else:
169	- print("unable to validate package: %s" % package)
170	- return None
171	+ def unpack(self, peer, package):
172	+ peer_secret = peer.secret
173	+ serpent = Serpent(self._pad(peer_secret, MAX_SECRET_SIZE))
174	+ print("received package: %s" % package)
175	+ received_digest = package[0:128]
176	+ ciphertext = package[128:1152]
177	+ digest = hashlib.sha512(ciphertext).hexdigest()
178	+ print("unpack package length: %d" % len(package))
179	+ print("unpack sender digest: %s" % received_digest)
180	+ print("unpack sender digest length: %d" % len(received_digest))
181	+ print("unpack local digest: %s" % digest)
182	+ print("unpack local digest length: %d" % len(digest))
183	+ print("unpack ciphertext: %s") % ciphertext
184	+ print("unpack ciphertext length: %d") % len(ciphertext)
185	+ if(received_digest == digest):
186	+ return serpent.decrypt(binascii.unhexlify(ciphertext))
187	else:
188	- print("received message from unknown peer: %s" % address)
189	+ print("unable to validate package: %s" % package)
190	+ return None
191
192	def _pad(self, text, size):
193	return text.ljust(size)
194	diff --git a/lib/peer.py b/lib/peer.py
195	index 4a64ed7..fcb0f0c 100644
196	--- a/lib/peer.py
197	+++ b/lib/peer.py
198	@@ -1,13 +1,16 @@
199	import socket
200	from infosec import Infosec
201
202	-class Peer(object):
203	- def __init__(self, address):
204	- self.address = address
205	- self.socket = socket.socket(family=socket.AF_INET, type=socket.SOCK_DGRAM)
206	- self.infosec = Infosec()
207	+class Peer(object):
208	+ def __init__(self, peer_entry):
209	+ self.name = peer_entry["name"]
210	+ self.address = peer_entry["address"]
211	+ self.secret = peer_entry["secret"]
212	+ self.port = peer_entry["port"]
213	+ self.socket = socket.socket(family=socket.AF_INET, type=socket.SOCK_DGRAM)
214	+ self.infosec = Infosec()
215
216	- def send(self, client, msg):
217	- full_message = str.encode(":%s %s" % (client.nickname, msg))
218	- print("sending formatted_msg: %s" % full_message)
219	- self.socket.sendto(self.infosec.pack(full_message), (self.address, 7778))
220	+ def send(self, client, msg):
221	+ full_message = str.encode(":%s %s" % (client.nickname, msg))
222	+ print("sending formatted_msg: %s" % full_message)
223	+ self.socket.sendto(self.infosec.pack(full_message), (self.address, self.port))
224	diff --git a/lib/server.py b/lib/server.py
225	index a248f1a..f2c6206 100644
226	--- a/lib/server.py
227	+++ b/lib/server.py
228	@@ -15,11 +15,11 @@ from lib.infosec import PACKET_SIZE
229	from lib.infosec import Infosec
230	from lib.peer import Peer
231	from funcs import *
232	+import config as cfg
233
234	class Server(object):
235	def __init__(self, options):
236	self.ports = options.ports
237	- self.peers = options.peers
238	self.udp_port = options.udp_port
239	self.password = options.password
240	self.ssl_pem_file = options.ssl_pem_file
241	@@ -41,6 +41,9 @@ class Server(object):
242	self.channels = {} # irc_lower(Channel name) --> Channel instance.
243	self.clients = {} # Socket --> Client instance..peers = ""
244	self.nicknames = {} # irc_lower(Nickname) --> Client instance.
245	+ self.peers = []
246	+ for peer_entry in cfg.peers:
247	+ self.peers.append(Peer(peer_entry))
248	if self.logdir:
249	create_directory(self.logdir)
250	if self.statedir:
251
252	diff --git a/lib/client.py b/lib/client.py
253	index cfc5331..97d8a7f 100644
254	--- a/lib/client.py
255	+++ b/lib/client.py
256	@@ -444,9 +444,9 @@ class Client(object):
257	except KeyError:
258	self.reply("421 %s %s :Unknown command" % (self.nickname, command))
259
260	- def udp_data_received(self, data):
261	+ def udp_data_received(self, address, data):
262	if data:
263	- message = self.infosec.unpack(data)
264	+ message = self.infosec.unpack(address, data)
265	if(message != None):
266	self.message(message)
267
268	diff --git a/lib/infosec.py b/lib/infosec.py
269	index 6e87ca6..f11b992 100644
270	--- a/lib/infosec.py
271	+++ b/lib/infosec.py
272	@@ -1,29 +1,54 @@
273	import hashlib
274	-PACKET_SIZE = 1024
275	+import lib.serpent
276	+
277	+from lib.serpent import Serpent
278	+import config
279	+import binascii
280	+PACKET_SIZE = 1152
281	MAX_MESSAGE_SIZE = 512
282	+MAX_SECRET_SIZE = 24
283
284	class Infosec(object):
285	#def __init__(self):
286	# do nothing
287
288	def pack(self, message):
289	- digest = hashlib.sha512(self._pad(message)).hexdigest()
290	- return digest + message
291	+ serpent = Serpent(self._pad(config.secret, MAX_SECRET_SIZE))
292	+ padded_message = self._pad(message, MAX_MESSAGE_SIZE)
293	+ ciphertext = binascii.hexlify(serpent.encrypt(padded_message.encode("ascii")))
294	+ digest = hashlib.sha512(ciphertext).hexdigest()
295	+ print("packing message: %s" % message)
296	+ print("pack digest: %s" % digest)
297	+ print("pack digest length: %d" % len(digest))
298	+ print("pack ciphertext: %s" % ciphertext)
299	+ print("pack ciphertext length: %d" % len(ciphertext))
300	+ package = digest + ciphertext
301	+ print("pack package length: %d" % len(package))
302	+ return package
303
304	- def unpack(self, package):
305	- print("received package: %s" % package)
306	- received_digest = package[0:128]
307	- message = package[128:1023]
308	- digest = hashlib.sha512(self._pad(message)).hexdigest()
309	- print("received_digest: %s" % received_digest)
310	- print("digest: %s" % digest)
311	- print("message: %s") % message
312	- if(received_digest == digest):
313	- return message
314	+ def unpack(self, address, package):
315	+ peer_secret = config.peer_secrets[address]
316	+ if(None != peer_secret):
317	+ serpent = Serpent(self._pad(peer_secret, MAX_SECRET_SIZE))
318	+ print("received package: %s" % package)
319	+ received_digest = package[0:128]
320	+ ciphertext = package[128:1152]
321	+ digest = hashlib.sha512(ciphertext).hexdigest()
322	+ print("unpack package length: %d" % len(package))
323	+ print("unpack sender digest: %s" % received_digest)
324	+ print("unpack sender digest length: %d" % len(received_digest))
325	+ print("unpack local digest: %s" % digest)
326	+ print("unpack local digest length: %d" % len(digest))
327	+ print("unpack ciphertext: %s") % ciphertext
328	+ print("unpack ciphertext length: %d") % len(ciphertext)
329	+ if(received_digest == digest):
330	+ return serpent.decrypt(binascii.unhexlify(ciphertext))
331	+ else:
332	+ print("unable to validate package: %s" % package)
333	+ return None
334	else:
335	- print("unable to validate package: %s" % package)
336	- return None
337	+ print("received message from unknown peer: %s" % address)
338
339	- def _pad(self, text):
340	- return str(text.ljust(MAX_MESSAGE_SIZE)).encode("ascii")
341	+ def _pad(self, text, size):
342	+ return text.ljust(size)
343
344	diff --git a/lib/serpent.py b/lib/serpent.py
345	new file mode 100644
346	index 0000000..c7c9f83
347	--- /dev/null
348	+++ b/lib/serpent.py
349	@@ -0,0 +1,2998 @@
350	+## serpent.py - pure Python implementation of the Serpent algorithm.
351	+## Bjorn Edstrom <be@bjrn.se> 13 december 2007.
352	+##
353	+## Copyrights
354	+## ==========
355	+##
356	+## This code is a derived from an implementation by Dr Brian Gladman
357	+## (gladman@seven77.demon.co.uk) which is subject to the following license.
358	+## This Python implementation is not subject to any other license.
359	+##
360	+##/* This is an independent implementation of the encryption algorithm:
361	+## *
362	+## * Serpent by Ross Anderson, Eli Biham and Lars Knudsen
363	+## *
364	+## * which is a candidate algorithm in the Advanced Encryption Standard
365	+## * programme of the US National Institute of Standards and Technology
366	+## *
367	+## * Copyright in this implementation is held by Dr B R Gladman but I
368	+## * hereby give permission for its free direct or derivative use subject
369	+## * to acknowledgment of its origin and compliance with any conditions
370	+## * that the originators of the algorithm place on its exploitation.
371	+## *
372	+## * Dr Brian Gladman (gladman@seven77.demon.co.uk) 14th January 1999
373	+## */
374	+##
375	+## The above copyright notice must not be removed.
376	+##
377	+## Information
378	+## ===========
379	+##
380	+## Anyone thinking of using this code should reconsider. It's slow.
381	+## Try python-mcrypt instead. In case a faster library is not installed
382	+## on the target system, this code can be used as a portable fallback.
383	+
384	+import binascii
385	+import base64
386	+
387	+block_size = 16
388	+key_size = 32
389	+
390	+class Serpent:
391	+
392	+ def __init__(self, key=None):
393	+ """Serpent."""
394	+
395	+ if key:
396	+ self.set_key(key)
397	+
398	+
399	+ def set_key(self, key):
400	+ """Init."""
401	+
402	+ key_len = len(key)
403	+ if key_len % 4:
404	+ # XXX: add padding?
405	+ raise KeyError, "key not a multiple of 4"
406	+ if key_len > 32:
407	+ # XXX: prune?
408	+ raise KeyError, "key_len > 32"
409	+
410	+ self.key_context = [0] * 140
411	+
412	+ key_word32 = [0] * 32
413	+ i = 0
414	+ while key:
415	+ key_word32[i] = struct.unpack("<L", key[0:4])[0]
416	+ key = key[4:]
417	+ i += 1
418	+
419	+ set_key(self.key_context, key_word32, key_len)
420	+ #print(map(hex,self.key_context))
421	+
422	+
423	+ def decrypt(self, block):
424	+ """Decrypt blocks."""
425	+
426	+ if len(block) % 16:
427	+ raise ValueError, "block size must be a multiple of 16"
428	+
429	+ plaintext = ''
430	+
431	+ while block:
432	+ a, b, c, d = struct.unpack("<4L", block[:16])
433	+ temp = [a, b, c, d]
434	+ decrypt(self.key_context, temp)
435	+ plaintext += struct.pack("<4L", *temp)
436	+ block = block[16:]
437	+
438	+ return plaintext
439	+
440	+
441	+ def encrypt(self, block):
442	+ """Encrypt blocks."""
443	+
444	+ if len(block) % 16:
445	+ raise ValueError, "block size must be a multiple of 16"
446	+
447	+ ciphertext = ''
448	+
449	+ while block:
450	+ a, b, c, d = struct.unpack("<4L", block[0:16])
451	+ temp = [a, b, c, d]
452	+ encrypt(self.key_context, temp)
453	+ ciphertext += struct.pack("<4L", *temp)
454	+ block = block[16:]
455	+
456	+ return ciphertext
457	+
458	+
459	+ def get_name(self):
460	+ """Return the name of the cipher."""
461	+
462	+ return "Serpent"
463	+
464	+
465	+ def get_block_size(self):
466	+ """Get cipher block size in bytes."""
467	+
468	+ return 16
469	+
470	+
471	+ def get_key_size(self):
472	+ """Get cipher key size in bytes."""
473	+
474	+ return 32
475	+
476	+
477	+#
478	+# Private.
479	+#
480	+
481	+import struct
482	+import sys
483	+
484	+WORD_BIGENDIAN = 0
485	+if sys.byteorder == 'big':
486	+ WORD_BIGENDIAN = 1
487	+
488	+def rotr32(x, n):
489	+ return (x >> n) | ((x << (32 - n)) & 0xFFFFFFFF)
490	+
491	+def rotl32(x, n):
492	+ return ((x << n) & 0xFFFFFFFF) | (x >> (32 - n))
493	+
494	+def byteswap32(x):
495	+ return ((x & 0xff) << 24) | (((x >> & 0xff) << 16) | \
496	+ (((x >> 16) & 0xff) << | ((x >> 24) & 0xff)
497	+
498	+def set_key(l_key, key, key_len):
499	+ key_len *= 8
500	+ if key_len > 256:
501	+ return False
502	+
503	+ i = 0
504	+ lk = (key_len + 31) / 32
505	+ while i < lk:
506	+ l_key[i] = key[i]
507	+ if WORD_BIGENDIAN:
508	+ l_key[i] = byteswap32(key[i])
509	+ i += 1
510	+
511	+ if key_len < 256:
512	+ while i < 8:
513	+ l_key[i] = 0
514	+ i += 1
515	+ i = key_len / 32
516	+ lk = 1 << (key_len % 32)
517	+ l_key[i] = (l_key[i] & (lk - 1)) | lk
518	+ for i in xrange(132):
519	+ lk = l_key[i] ^ l_key[i + 3] ^ l_key[i + 5] ^ l_key[i + 7] ^ 0x9e3779b9 ^ i
520	+ l_key[i + 8] = ((lk << 11) & 0xFFFFFFFF) | (lk >> 21)
521	+
522	+ key = l_key
523	+ # serpent_generate.py
524	+ a = key[4 * 0 + 8]
525	+ b = key[4 * 0 + 9]
526	+ c = key[4 * 0 + 10]
527	+ d = key[4 * 0 + 11]
528	+ e = 0
529	+ f = 0
530	+ g = 0
531	+ h = 0
532	+ t1 = 0
533	+ t2 = 0
534	+ t3 = 0
535	+ t4 = 0
536	+ t5 = 0
537	+ t6 = 0
538	+ t7 = 0
539	+ t8 = 0
540	+ t9 = 0
541	+ t10 = 0
542	+ t11 = 0
543	+ t12 = 0
544	+ t13 = 0
545	+ t14 = 0
546	+ t15 = 0
547	+ t16 = 0
548	+ t1 = a ^ c;
549	+ t2 = d ^ t1;
550	+ t3 = a & t2;
551	+ t4 = d ^ t3;
552	+ t5 = b & t4;
553	+ g = t2 ^ t5;
554	+ t7 = a | g;
555	+ t8 = b | d;
556	+ t11 = a | d;
557	+ t9 = t4 & t7;
558	+ f = t8 ^ t9;
559	+ t12 = b ^ t11;
560	+ t13 = g ^ t9;
561	+ t15 = t3 ^ t8;
562	+ h = t12 ^ t13;
563	+ t16 = c & t15;
564	+ e = t12 ^ t16
565	+ key[4 * 0 + 8] = e
566	+ key[4 * 0 + 9] = f
567	+ key[4 * 0 + 10] = g
568	+ key[4 * 0 + 11] = h
569	+ a = key[4 * 1 + 8]
570	+ b = key[4 * 1 + 9]
571	+ c = key[4 * 1 + 10]
572	+ d = key[4 * 1 + 11]
573	+ t1 = (~a) % 0x100000000;
574	+ t2 = b ^ d;
575	+ t3 = c & t1;
576	+ t13 = d | t1;
577	+ e = t2 ^ t3;
578	+ t5 = c ^ t1;
579	+ t6 = c ^ e;
580	+ t7 = b & t6;
581	+ t10 = e | t5;
582	+ h = t5 ^ t7;
583	+ t9 = d | t7;
584	+ t11 = t9 & t10;
585	+ t14 = t2 ^ h;
586	+ g = a ^ t11;
587	+ t15 = g ^ t13;
588	+ f = t14 ^ t15
589	+ key[4 * 1 + 8] = e
590	+ key[4 * 1 + 9] = f
591	+ key[4 * 1 + 10] = g
592	+ key[4 * 1 + 11] = h
593	+ a = key[4 * 2 + 8]
594	+ b = key[4 * 2 + 9]
595	+ c = key[4 * 2 + 10]
596	+ d = key[4 * 2 + 11]
597	+ t1 = (~a) % 0x100000000;
598	+ t2 = b ^ t1;
599	+ t3 = a | t2;
600	+ t4 = d | t2;
601	+ t5 = c ^ t3;
602	+ g = d ^ t5;
603	+ t7 = b ^ t4;
604	+ t8 = t2 ^ g;
605	+ t9 = t5 & t7;
606	+ h = t8 ^ t9;
607	+ t11 = t5 ^ t7;
608	+ f = h ^ t11;
609	+ t13 = t8 & t11;
610	+ e = t5 ^ t13
611	+ key[4 * 2 + 8] = e
612	+ key[4 * 2 + 9] = f
613	+ key[4 * 2 + 10] = g
614	+ key[4 * 2 + 11] = h
615	+ a = key[4 * 3 + 8]
616	+ b = key[4 * 3 + 9]
617	+ c = key[4 * 3 + 10]
618	+ d = key[4 * 3 + 11]
619	+ t1 = a ^ d;
620	+ t2 = a & d;
621	+ t3 = c ^ t1;
622	+ t6 = b & t1;
623	+ t4 = b ^ t3;
624	+ t10 = (~t3) % 0x100000000;
625	+ h = t2 ^ t4;
626	+ t7 = a ^ t6;
627	+ t14 = (~t7) % 0x100000000;
628	+ t8 = c | t7;
629	+ t11 = t3 ^ t7;
630	+ g = t4 ^ t8;
631	+ t12 = h & t11;
632	+ f = t10 ^ t12;
633	+ e = t12 ^ t14
634	+ key[4 * 3 + 8] = e
635	+ key[4 * 3 + 9] = f
636	+ key[4 * 3 + 10] = g
637	+ key[4 * 3 + 11] = h
638	+ a = key[4 * 4 + 8]
639	+ b = key[4 * 4 + 9]
640	+ c = key[4 * 4 + 10]
641	+ d = key[4 * 4 + 11]
642	+ t1 = (~c) % 0x100000000;
643	+ t2 = b ^ c;
644	+ t3 = b | t1;
645	+ t4 = d ^ t3;
646	+ t5 = a & t4;
647	+ t7 = a ^ d;
648	+ h = t2 ^ t5;
649	+ t8 = b ^ t5;
650	+ t9 = t2 | t8;
651	+ t11 = d & t3;
652	+ f = t7 ^ t9;
653	+ t12 = t5 ^ f;
654	+ t15 = t1 | t4;
655	+ t13 = h & t12;
656	+ g = t11 ^ t13;
657	+ t16 = t12 ^ g;
658	+ e = t15 ^ t16
659	+ key[4 * 4 + 8] = e
660	+ key[4 * 4 + 9] = f
661	+ key[4 * 4 + 10] = g
662	+ key[4 * 4 + 11] = h
663	+ a = key[4 * 5 + 8]
664	+ b = key[4 * 5 + 9]
665	+ c = key[4 * 5 + 10]
666	+ d = key[4 * 5 + 11]
667	+ t1 = (~a) % 0x100000000;
668	+ t2 = a ^ d;
669	+ t3 = b ^ t2;
670	+ t4 = t1 | t2;
671	+ t5 = c ^ t4;
672	+ f = b ^ t5;
673	+ t13 = (~t5) % 0x100000000;
674	+ t7 = t2 | f;
675	+ t8 = d ^ t7;
676	+ t9 = t5 & t8;
677	+ g = t3 ^ t9;
678	+ t11 = t5 ^ t8;
679	+ e = g ^ t11;
680	+ t14 = t3 & t11;
681	+ h = t13 ^ t14
682	+ key[4 * 5 + 8] = e
683	+ key[4 * 5 + 9] = f
684	+ key[4 * 5 + 10] = g
685	+ key[4 * 5 + 11] = h
686	+ a = key[4 * 6 + 8]
687	+ b = key[4 * 6 + 9]
688	+ c = key[4 * 6 + 10]
689	+ d = key[4 * 6 + 11]
690	+ t1 = (~a) % 0x100000000;
691	+ t2 = a ^ b;
692	+ t3 = a ^ d;
693	+ t4 = c ^ t1;
694	+ t5 = t2 | t3;
695	+ e = t4 ^ t5;
696	+ t7 = d & e;
697	+ t8 = t2 ^ e;
698	+ t10 = t1 | e;
699	+ f = t7 ^ t8;
700	+ t11 = t2 | t7;
701	+ t12 = t3 ^ t10;
702	+ t14 = b ^ t7;
703	+ g = t11 ^ t12;
704	+ t15 = f & t12;
705	+ h = t14 ^ t15
706	+ key[4 * 6 + 8] = e
707	+ key[4 * 6 + 9] = f
708	+ key[4 * 6 + 10] = g
709	+ key[4 * 6 + 11] = h
710	+ a = key[4 * 7 + 8]
711	+ b = key[4 * 7 + 9]
712	+ c = key[4 * 7 + 10]
713	+ d = key[4 * 7 + 11]
714	+ t1 = a ^ d;
715	+ t2 = d & t1;
716	+ t3 = c ^ t2;
717	+ t4 = b | t3;
718	+ h = t1 ^ t4;
719	+ t6 = (~b) % 0x100000000;
720	+ t7 = t1 | t6;
721	+ e = t3 ^ t7;
722	+ t9 = a & e;
723	+ t10 = t1 ^ t6;
724	+ t11 = t4 & t10;
725	+ g = t9 ^ t11;
726	+ t13 = a ^ t3;
727	+ t14 = t10 & g;
728	+ f = t13 ^ t14
729	+ key[4 * 7 + 8] = e
730	+ key[4 * 7 + 9] = f
731	+ key[4 * 7 + 10] = g
732	+ key[4 * 7 + 11] = h
733	+ a = key[4 * 8 + 8]
734	+ b = key[4 * 8 + 9]
735	+ c = key[4 * 8 + 10]
736	+ d = key[4 * 8 + 11]
737	+ t1 = a ^ c;
738	+ t2 = d ^ t1;
739	+ t3 = a & t2;
740	+ t4 = d ^ t3;
741	+ t5 = b & t4;
742	+ g = t2 ^ t5;
743	+ t7 = a | g;
744	+ t8 = b | d;
745	+ t11 = a | d;
746	+ t9 = t4 & t7;
747	+ f = t8 ^ t9;
748	+ t12 = b ^ t11;
749	+ t13 = g ^ t9;
750	+ t15 = t3 ^ t8;
751	+ h = t12 ^ t13;
752	+ t16 = c & t15;
753	+ e = t12 ^ t16
754	+ key[4 * 8 + 8] = e
755	+ key[4 * 8 + 9] = f
756	+ key[4 * 8 + 10] = g
757	+ key[4 * 8 + 11] = h
758	+ a = key[4 * 9 + 8]
759	+ b = key[4 * 9 + 9]
760	+ c = key[4 * 9 + 10]
761	+ d = key[4 * 9 + 11]
762	+ t1 = (~a) % 0x100000000;
763	+ t2 = b ^ d;
764	+ t3 = c & t1;
765	+ t13 = d | t1;
766	+ e = t2 ^ t3;
767	+ t5 = c ^ t1;
768	+ t6 = c ^ e;
769	+ t7 = b & t6;
770	+ t10 = e | t5;
771	+ h = t5 ^ t7;
772	+ t9 = d | t7;
773	+ t11 = t9 & t10;
774	+ t14 = t2 ^ h;
775	+ g = a ^ t11;
776	+ t15 = g ^ t13;
777	+ f = t14 ^ t15
778	+ key[4 * 9 + 8] = e
779	+ key[4 * 9 + 9] = f
780	+ key[4 * 9 + 10] = g
781	+ key[4 * 9 + 11] = h
782	+ a = key[4 * 10 + 8]
783	+ b = key[4 * 10 + 9]
784	+ c = key[4 * 10 + 10]
785	+ d = key[4 * 10 + 11]
786	+ t1 = (~a) % 0x100000000;
787	+ t2 = b ^ t1;
788	+ t3 = a | t2;
789	+ t4 = d | t2;
790	+ t5 = c ^ t3;
791	+ g = d ^ t5;
792	+ t7 = b ^ t4;
793	+ t8 = t2 ^ g;
794	+ t9 = t5 & t7;
795	+ h = t8 ^ t9;
796	+ t11 = t5 ^ t7;
797	+ f = h ^ t11;
798	+ t13 = t8 & t11;
799	+ e = t5 ^ t13
800	+ key[4 * 10 + 8] = e
801	+ key[4 * 10 + 9] = f
802	+ key[4 * 10 + 10] = g
803	+ key[4 * 10 + 11] = h
804	+ a = key[4 * 11 + 8]
805	+ b = key[4 * 11 + 9]
806	+ c = key[4 * 11 + 10]
807	+ d = key[4 * 11 + 11]
808	+ t1 = a ^ d;
809	+ t2 = a & d;
810	+ t3 = c ^ t1;
811	+ t6 = b & t1;
812	+ t4 = b ^ t3;
813	+ t10 = (~t3) % 0x100000000;
814	+ h = t2 ^ t4;
815	+ t7 = a ^ t6;
816	+ t14 = (~t7) % 0x100000000;
817	+ t8 = c | t7;
818	+ t11 = t3 ^ t7;
819	+ g = t4 ^ t8;
820	+ t12 = h & t11;
821	+ f = t10 ^ t12;
822	+ e = t12 ^ t14
823	+ key[4 * 11 + 8] = e
824	+ key[4 * 11 + 9] = f
825	+ key[4 * 11 + 10] = g
826	+ key[4 * 11 + 11] = h
827	+ a = key[4 * 12 + 8]
828	+ b = key[4 * 12 + 9]
829	+ c = key[4 * 12 + 10]
830	+ d = key[4 * 12 + 11]
831	+ t1 = (~c) % 0x100000000;
832	+ t2 = b ^ c;
833	+ t3 = b | t1;
834	+ t4 = d ^ t3;
835	+ t5 = a & t4;
836	+ t7 = a ^ d;
837	+ h = t2 ^ t5;
838	+ t8 = b ^ t5;
839	+ t9 = t2 | t8;
840	+ t11 = d & t3;
841	+ f = t7 ^ t9;
842	+ t12 = t5 ^ f;
843	+ t15 = t1 | t4;
844	+ t13 = h & t12;
845	+ g = t11 ^ t13;
846	+ t16 = t12 ^ g;
847	+ e = t15 ^ t16
848	+ key[4 * 12 + 8] = e
849	+ key[4 * 12 + 9] = f
850	+ key[4 * 12 + 10] = g
851	+ key[4 * 12 + 11] = h
852	+ a = key[4 * 13 + 8]
853	+ b = key[4 * 13 + 9]
854	+ c = key[4 * 13 + 10]
855	+ d = key[4 * 13 + 11]
856	+ t1 = (~a) % 0x100000000;
857	+ t2 = a ^ d;
858	+ t3 = b ^ t2;
859	+ t4 = t1 | t2;
860	+ t5 = c ^ t4;
861	+ f = b ^ t5;
862	+ t13 = (~t5) % 0x100000000;
863	+ t7 = t2 | f;
864	+ t8 = d ^ t7;
865	+ t9 = t5 & t8;
866	+ g = t3 ^ t9;
867	+ t11 = t5 ^ t8;
868	+ e = g ^ t11;
869	+ t14 = t3 & t11;
870	+ h = t13 ^ t14
871	+ key[4 * 13 + 8] = e
872	+ key[4 * 13 + 9] = f
873	+ key[4 * 13 + 10] = g
874	+ key[4 * 13 + 11] = h
875	+ a = key[4 * 14 + 8]
876	+ b = key[4 * 14 + 9]
877	+ c = key[4 * 14 + 10]
878	+ d = key[4 * 14 + 11]
879	+ t1 = (~a) % 0x100000000;
880	+ t2 = a ^ b;
881	+ t3 = a ^ d;
882	+ t4 = c ^ t1;
883	+ t5 = t2 | t3;
884	+ e = t4 ^ t5;
885	+ t7 = d & e;
886	+ t8 = t2 ^ e;
887	+ t10 = t1 | e;
888	+ f = t7 ^ t8;
889	+ t11 = t2 | t7;
890	+ t12 = t3 ^ t10;
891	+ t14 = b ^ t7;
892	+ g = t11 ^ t12;
893	+ t15 = f & t12;
894	+ h = t14 ^ t15
895	+ key[4 * 14 + 8] = e
896	+ key[4 * 14 + 9] = f
897	+ key[4 * 14 + 10] = g
898	+ key[4 * 14 + 11] = h
899	+ a = key[4 * 15 + 8]
900	+ b = key[4 * 15 + 9]
901	+ c = key[4 * 15 + 10]
902	+ d = key[4 * 15 + 11]
903	+ t1 = a ^ d;
904	+ t2 = d & t1;
905	+ t3 = c ^ t2;
906	+ t4 = b | t3;
907	+ h = t1 ^ t4;
908	+ t6 = (~b) % 0x100000000;
909	+ t7 = t1 | t6;
910	+ e = t3 ^ t7;
911	+ t9 = a & e;
912	+ t10 = t1 ^ t6;
913	+ t11 = t4 & t10;
914	+ g = t9 ^ t11;
915	+ t13 = a ^ t3;
916	+ t14 = t10 & g;
917	+ f = t13 ^ t14
918	+ key[4 * 15 + 8] = e
919	+ key[4 * 15 + 9] = f
920	+ key[4 * 15 + 10] = g
921	+ key[4 * 15 + 11] = h
922	+ a = key[4 * 16 + 8]
923	+ b = key[4 * 16 + 9]
924	+ c = key[4 * 16 + 10]
925	+ d = key[4 * 16 + 11]
926	+ t1 = a ^ c;
927	+ t2 = d ^ t1;
928	+ t3 = a & t2;
929	+ t4 = d ^ t3;
930	+ t5 = b & t4;
931	+ g = t2 ^ t5;
932	+ t7 = a | g;
933	+ t8 = b | d;
934	+ t11 = a | d;
935	+ t9 = t4 & t7;
936	+ f = t8 ^ t9;
937	+ t12 = b ^ t11;
938	+ t13 = g ^ t9;
939	+ t15 = t3 ^ t8;
940	+ h = t12 ^ t13;
941	+ t16 = c & t15;
942	+ e = t12 ^ t16
943	+ key[4 * 16 + 8] = e
944	+ key[4 * 16 + 9] = f
945	+ key[4 * 16 + 10] = g
946	+ key[4 * 16 + 11] = h
947	+ a = key[4 * 17 + 8]
948	+ b = key[4 * 17 + 9]
949	+ c = key[4 * 17 + 10]
950	+ d = key[4 * 17 + 11]
951	+ t1 = (~a) % 0x100000000;
952	+ t2 = b ^ d;
953	+ t3 = c & t1;
954	+ t13 = d | t1;
955	+ e = t2 ^ t3;
956	+ t5 = c ^ t1;
957	+ t6 = c ^ e;
958	+ t7 = b & t6;
959	+ t10 = e | t5;
960	+ h = t5 ^ t7;
961	+ t9 = d | t7;
962	+ t11 = t9 & t10;
963	+ t14 = t2 ^ h;
964	+ g = a ^ t11;
965	+ t15 = g ^ t13;
966	+ f = t14 ^ t15
967	+ key[4 * 17 + 8] = e
968	+ key[4 * 17 + 9] = f
969	+ key[4 * 17 + 10] = g
970	+ key[4 * 17 + 11] = h
971	+ a = key[4 * 18 + 8]
972	+ b = key[4 * 18 + 9]
973	+ c = key[4 * 18 + 10]
974	+ d = key[4 * 18 + 11]
975	+ t1 = (~a) % 0x100000000;
976	+ t2 = b ^ t1;
977	+ t3 = a | t2;
978	+ t4 = d | t2;
979	+ t5 = c ^ t3;
980	+ g = d ^ t5;
981	+ t7 = b ^ t4;
982	+ t8 = t2 ^ g;
983	+ t9 = t5 & t7;
984	+ h = t8 ^ t9;
985	+ t11 = t5 ^ t7;
986	+ f = h ^ t11;
987	+ t13 = t8 & t11;
988	+ e = t5 ^ t13
989	+ key[4 * 18 + 8] = e
990	+ key[4 * 18 + 9] = f
991	+ key[4 * 18 + 10] = g
992	+ key[4 * 18 + 11] = h
993	+ a = key[4 * 19 + 8]
994	+ b = key[4 * 19 + 9]
995	+ c = key[4 * 19 + 10]
996	+ d = key[4 * 19 + 11]
997	+ t1 = a ^ d;
998	+ t2 = a & d;
999	+ t3 = c ^ t1;
1000	+ t6 = b & t1;
1001	+ t4 = b ^ t3;
1002	+ t10 = (~t3) % 0x100000000;
1003	+ h = t2 ^ t4;
1004	+ t7 = a ^ t6;
1005	+ t14 = (~t7) % 0x100000000;
1006	+ t8 = c | t7;
1007	+ t11 = t3 ^ t7;
1008	+ g = t4 ^ t8;
1009	+ t12 = h & t11;
1010	+ f = t10 ^ t12;
1011	+ e = t12 ^ t14
1012	+ key[4 * 19 + 8] = e
1013	+ key[4 * 19 + 9] = f
1014	+ key[4 * 19 + 10] = g
1015	+ key[4 * 19 + 11] = h
1016	+ a = key[4 * 20 + 8]
1017	+ b = key[4 * 20 + 9]
1018	+ c = key[4 * 20 + 10]
1019	+ d = key[4 * 20 + 11]
1020	+ t1 = (~c) % 0x100000000;
1021	+ t2 = b ^ c;
1022	+ t3 = b | t1;
1023	+ t4 = d ^ t3;
1024	+ t5 = a & t4;
1025	+ t7 = a ^ d;
1026	+ h = t2 ^ t5;
1027	+ t8 = b ^ t5;
1028	+ t9 = t2 | t8;
1029	+ t11 = d & t3;
1030	+ f = t7 ^ t9;
1031	+ t12 = t5 ^ f;
1032	+ t15 = t1 | t4;
1033	+ t13 = h & t12;
1034	+ g = t11 ^ t13;
1035	+ t16 = t12 ^ g;
1036	+ e = t15 ^ t16
1037	+ key[4 * 20 + 8] = e
1038	+ key[4 * 20 + 9] = f
1039	+ key[4 * 20 + 10] = g
1040	+ key[4 * 20 + 11] = h
1041	+ a = key[4 * 21 + 8]
1042	+ b = key[4 * 21 + 9]
1043	+ c = key[4 * 21 + 10]
1044	+ d = key[4 * 21 + 11]
1045	+ t1 = (~a) % 0x100000000;
1046	+ t2 = a ^ d;
1047	+ t3 = b ^ t2;
1048	+ t4 = t1 | t2;
1049	+ t5 = c ^ t4;
1050	+ f = b ^ t5;
1051	+ t13 = (~t5) % 0x100000000;
1052	+ t7 = t2 | f;
1053	+ t8 = d ^ t7;
1054	+ t9 = t5 & t8;
1055	+ g = t3 ^ t9;
1056	+ t11 = t5 ^ t8;
1057	+ e = g ^ t11;
1058	+ t14 = t3 & t11;
1059	+ h = t13 ^ t14
1060	+ key[4 * 21 + 8] = e
1061	+ key[4 * 21 + 9] = f
1062	+ key[4 * 21 + 10] = g
1063	+ key[4 * 21 + 11] = h
1064	+ a = key[4 * 22 + 8]
1065	+ b = key[4 * 22 + 9]
1066	+ c = key[4 * 22 + 10]
1067	+ d = key[4 * 22 + 11]
1068	+ t1 = (~a) % 0x100000000;
1069	+ t2 = a ^ b;
1070	+ t3 = a ^ d;
1071	+ t4 = c ^ t1;
1072	+ t5 = t2 | t3;
1073	+ e = t4 ^ t5;
1074	+ t7 = d & e;
1075	+ t8 = t2 ^ e;
1076	+ t10 = t1 | e;
1077	+ f = t7 ^ t8;
1078	+ t11 = t2 | t7;
1079	+ t12 = t3 ^ t10;
1080	+ t14 = b ^ t7;
1081	+ g = t11 ^ t12;
1082	+ t15 = f & t12;
1083	+ h = t14 ^ t15
1084	+ key[4 * 22 + 8] = e
1085	+ key[4 * 22 + 9] = f
1086	+ key[4 * 22 + 10] = g
1087	+ key[4 * 22 + 11] = h
1088	+ a = key[4 * 23 + 8]
1089	+ b = key[4 * 23 + 9]
1090	+ c = key[4 * 23 + 10]
1091	+ d = key[4 * 23 + 11]
1092	+ t1 = a ^ d;
1093	+ t2 = d & t1;
1094	+ t3 = c ^ t2;
1095	+ t4 = b | t3;
1096	+ h = t1 ^ t4;
1097	+ t6 = (~b) % 0x100000000;
1098	+ t7 = t1 | t6;
1099	+ e = t3 ^ t7;
1100	+ t9 = a & e;
1101	+ t10 = t1 ^ t6;
1102	+ t11 = t4 & t10;
1103	+ g = t9 ^ t11;
1104	+ t13 = a ^ t3;
1105	+ t14 = t10 & g;
1106	+ f = t13 ^ t14
1107	+ key[4 * 23 + 8] = e
1108	+ key[4 * 23 + 9] = f
1109	+ key[4 * 23 + 10] = g
1110	+ key[4 * 23 + 11] = h
1111	+ a = key[4 * 24 + 8]
1112	+ b = key[4 * 24 + 9]
1113	+ c = key[4 * 24 + 10]
1114	+ d = key[4 * 24 + 11]
1115	+ t1 = a ^ c;
1116	+ t2 = d ^ t1;
1117	+ t3 = a & t2;
1118	+ t4 = d ^ t3;
1119	+ t5 = b & t4;
1120	+ g = t2 ^ t5;
1121	+ t7 = a | g;
1122	+ t8 = b | d;
1123	+ t11 = a | d;
1124	+ t9 = t4 & t7;
1125	+ f = t8 ^ t9;
1126	+ t12 = b ^ t11;
1127	+ t13 = g ^ t9;
1128	+ t15 = t3 ^ t8;
1129	+ h = t12 ^ t13;
1130	+ t16 = c & t15;
1131	+ e = t12 ^ t16
1132	+ key[4 * 24 + 8] = e
1133	+ key[4 * 24 + 9] = f
1134	+ key[4 * 24 + 10] = g
1135	+ key[4 * 24 + 11] = h
1136	+ a = key[4 * 25 + 8]
1137	+ b = key[4 * 25 + 9]
1138	+ c = key[4 * 25 + 10]
1139	+ d = key[4 * 25 + 11]
1140	+ t1 = (~a) % 0x100000000;
1141	+ t2 = b ^ d;
1142	+ t3 = c & t1;
1143	+ t13 = d | t1;
1144	+ e = t2 ^ t3;
1145	+ t5 = c ^ t1;
1146	+ t6 = c ^ e;
1147	+ t7 = b & t6;
1148	+ t10 = e | t5;
1149	+ h = t5 ^ t7;
1150	+ t9 = d | t7;
1151	+ t11 = t9 & t10;
1152	+ t14 = t2 ^ h;
1153	+ g = a ^ t11;
1154	+ t15 = g ^ t13;
1155	+ f = t14 ^ t15
1156	+ key[4 * 25 + 8] = e
1157	+ key[4 * 25 + 9] = f
1158	+ key[4 * 25 + 10] = g
1159	+ key[4 * 25 + 11] = h
1160	+ a = key[4 * 26 + 8]
1161	+ b = key[4 * 26 + 9]
1162	+ c = key[4 * 26 + 10]
1163	+ d = key[4 * 26 + 11]
1164	+ t1 = (~a) % 0x100000000;
1165	+ t2 = b ^ t1;
1166	+ t3 = a | t2;
1167	+ t4 = d | t2;
1168	+ t5 = c ^ t3;
1169	+ g = d ^ t5;
1170	+ t7 = b ^ t4;
1171	+ t8 = t2 ^ g;
1172	+ t9 = t5 & t7;
1173	+ h = t8 ^ t9;
1174	+ t11 = t5 ^ t7;
1175	+ f = h ^ t11;
1176	+ t13 = t8 & t11;
1177	+ e = t5 ^ t13
1178	+ key[4 * 26 + 8] = e
1179	+ key[4 * 26 + 9] = f
1180	+ key[4 * 26 + 10] = g
1181	+ key[4 * 26 + 11] = h
1182	+ a = key[4 * 27 + 8]
1183	+ b = key[4 * 27 + 9]
1184	+ c = key[4 * 27 + 10]
1185	+ d = key[4 * 27 + 11]
1186	+ t1 = a ^ d;
1187	+ t2 = a & d;
1188	+ t3 = c ^ t1;
1189	+ t6 = b & t1;
1190	+ t4 = b ^ t3;
1191	+ t10 = (~t3) % 0x100000000;
1192	+ h = t2 ^ t4;
1193	+ t7 = a ^ t6;
1194	+ t14 = (~t7) % 0x100000000;
1195	+ t8 = c | t7;
1196	+ t11 = t3 ^ t7;
1197	+ g = t4 ^ t8;
1198	+ t12 = h & t11;
1199	+ f = t10 ^ t12;
1200	+ e = t12 ^ t14
1201	+ key[4 * 27 + 8] = e
1202	+ key[4 * 27 + 9] = f
1203	+ key[4 * 27 + 10] = g
1204	+ key[4 * 27 + 11] = h
1205	+ a = key[4 * 28 + 8]
1206	+ b = key[4 * 28 + 9]
1207	+ c = key[4 * 28 + 10]
1208	+ d = key[4 * 28 + 11]
1209	+ t1 = (~c) % 0x100000000;
1210	+ t2 = b ^ c;
1211	+ t3 = b | t1;
1212	+ t4 = d ^ t3;
1213	+ t5 = a & t4;
1214	+ t7 = a ^ d;
1215	+ h = t2 ^ t5;
1216	+ t8 = b ^ t5;
1217	+ t9 = t2 | t8;
1218	+ t11 = d & t3;
1219	+ f = t7 ^ t9;
1220	+ t12 = t5 ^ f;
1221	+ t15 = t1 | t4;
1222	+ t13 = h & t12;
1223	+ g = t11 ^ t13;
1224	+ t16 = t12 ^ g;
1225	+ e = t15 ^ t16
1226	+ key[4 * 28 + 8] = e
1227	+ key[4 * 28 + 9] = f
1228	+ key[4 * 28 + 10] = g
1229	+ key[4 * 28 + 11] = h
1230	+ a = key[4 * 29 + 8]
1231	+ b = key[4 * 29 + 9]
1232	+ c = key[4 * 29 + 10]
1233	+ d = key[4 * 29 + 11]
1234	+ t1 = (~a) % 0x100000000;
1235	+ t2 = a ^ d;
1236	+ t3 = b ^ t2;
1237	+ t4 = t1 | t2;
1238	+ t5 = c ^ t4;
1239	+ f = b ^ t5;
1240	+ t13 = (~t5) % 0x100000000;
1241	+ t7 = t2 | f;
1242	+ t8 = d ^ t7;
1243	+ t9 = t5 & t8;
1244	+ g = t3 ^ t9;
1245	+ t11 = t5 ^ t8;
1246	+ e = g ^ t11;
1247	+ t14 = t3 & t11;
1248	+ h = t13 ^ t14
1249	+ key[4 * 29 + 8] = e
1250	+ key[4 * 29 + 9] = f
1251	+ key[4 * 29 + 10] = g
1252	+ key[4 * 29 + 11] = h
1253	+ a = key[4 * 30 + 8]
1254	+ b = key[4 * 30 + 9]
1255	+ c = key[4 * 30 + 10]
1256	+ d = key[4 * 30 + 11]
1257	+ t1 = (~a) % 0x100000000;
1258	+ t2 = a ^ b;
1259	+ t3 = a ^ d;
1260	+ t4 = c ^ t1;
1261	+ t5 = t2 | t3;
1262	+ e = t4 ^ t5;
1263	+ t7 = d & e;
1264	+ t8 = t2 ^ e;
1265	+ t10 = t1 | e;
1266	+ f = t7 ^ t8;
1267	+ t11 = t2 | t7;
1268	+ t12 = t3 ^ t10;
1269	+ t14 = b ^ t7;
1270	+ g = t11 ^ t12;
1271	+ t15 = f & t12;
1272	+ h = t14 ^ t15
1273	+ key[4 * 30 + 8] = e
1274	+ key[4 * 30 + 9] = f
1275	+ key[4 * 30 + 10] = g
1276	+ key[4 * 30 + 11] = h
1277	+ a = key[4 * 31 + 8]
1278	+ b = key[4 * 31 + 9]
1279	+ c = key[4 * 31 + 10]
1280	+ d = key[4 * 31 + 11]
1281	+ t1 = a ^ d;
1282	+ t2 = d & t1;
1283	+ t3 = c ^ t2;
1284	+ t4 = b | t3;
1285	+ h = t1 ^ t4;
1286	+ t6 = (~b) % 0x100000000;
1287	+ t7 = t1 | t6;
1288	+ e = t3 ^ t7;
1289	+ t9 = a & e;
1290	+ t10 = t1 ^ t6;
1291	+ t11 = t4 & t10;
1292	+ g = t9 ^ t11;
1293	+ t13 = a ^ t3;
1294	+ t14 = t10 & g;
1295	+ f = t13 ^ t14
1296	+ key[4 * 31 + 8] = e
1297	+ key[4 * 31 + 9] = f
1298	+ key[4 * 31 + 10] = g
1299	+ key[4 * 31 + 11] = h
1300	+ a = key[4 * 32 + 8]
1301	+ b = key[4 * 32 + 9]
1302	+ c = key[4 * 32 + 10]
1303	+ d = key[4 * 32 + 11]
1304	+ t1 = a ^ c;
1305	+ t2 = d ^ t1;
1306	+ t3 = a & t2;
1307	+ t4 = d ^ t3;
1308	+ t5 = b & t4;
1309	+ g = t2 ^ t5;
1310	+ t7 = a | g;
1311	+ t8 = b | d;
1312	+ t11 = a | d;
1313	+ t9 = t4 & t7;
1314	+ f = t8 ^ t9;
1315	+ t12 = b ^ t11;
1316	+ t13 = g ^ t9;
1317	+ t15 = t3 ^ t8;
1318	+ h = t12 ^ t13;
1319	+ t16 = c & t15;
1320	+ e = t12 ^ t16
1321	+ key[4 * 32 + 8] = e
1322	+ key[4 * 32 + 9] = f
1323	+ key[4 * 32 + 10] = g
1324	+ key[4 * 32 + 11] = h
1325	+
1326	+def encrypt(key, in_blk):
1327	+ # serpent_generate.py
1328	+ a = in_blk[0]
1329	+ b = in_blk[1]
1330	+ c = in_blk[2]
1331	+ d = in_blk[3]
1332	+ if WORD_BIGENDIAN:
1333	+ a = byteswap32(a)
1334	+ b = byteswap32(b)
1335	+ c = byteswap32(c)
1336	+ d = byteswap32(d)
1337	+ e = 0
1338	+ f = 0
1339	+ g = 0
1340	+ h = 0
1341	+ t1 = 0
1342	+ t2 = 0
1343	+ t3 = 0
1344	+ t4 = 0
1345	+ t5 = 0
1346	+ t6 = 0
1347	+ t7 = 0
1348	+ t8 = 0
1349	+ t9 = 0
1350	+ t10 = 0
1351	+ t11 = 0
1352	+ t12 = 0
1353	+ t13 = 0
1354	+ t14 = 0
1355	+ t15 = 0
1356	+ t16 = 0
1357	+ a ^= key[4 * 0 + 8]
1358	+ b ^= key[4 * 0 + 9]
1359	+ c ^= key[4 * 0 + 10]
1360	+ d ^= key[4 * 0 + 11]
1361	+ t1 = a ^ d;
1362	+ t2 = a & d;
1363	+ t3 = c ^ t1;
1364	+ t6 = b & t1;
1365	+ t4 = b ^ t3;
1366	+ t10 = (~t3) % 0x100000000;
1367	+ h = t2 ^ t4;
1368	+ t7 = a ^ t6;
1369	+ t14 = (~t7) % 0x100000000;
1370	+ t8 = c | t7;
1371	+ t11 = t3 ^ t7;
1372	+ g = t4 ^ t8;
1373	+ t12 = h & t11;
1374	+ f = t10 ^ t12;
1375	+ e = t12 ^ t14
1376	+ e = rotl32(e, 13)
1377	+ g = rotl32(g, 3)
1378	+ h ^= g ^ ((e << 3) & 0xFFFFFFFF)
1379	+ f ^= e ^ g
1380	+ h = rotl32(h, 7)
1381	+ f = rotl32(f, 1)
1382	+ e ^= f ^ h
1383	+ g ^= h ^ ((f << 7) & 0xFFFFFFFF)
1384	+ e = rotl32(e, 5)
1385	+ g = rotl32(g, 22)
1386	+ e ^= key[4 * 1 + 8]
1387	+ f ^= key[4 * 1 + 9]
1388	+ g ^= key[4 * 1 + 10]
1389	+ h ^= key[4 * 1 + 11]
1390	+ t1 = (~e) % 0x100000000;
1391	+ t2 = f ^ t1;
1392	+ t3 = e | t2;
1393	+ t4 = h | t2;
1394	+ t5 = g ^ t3;
1395	+ c = h ^ t5;
1396	+ t7 = f ^ t4;
1397	+ t8 = t2 ^ c;
1398	+ t9 = t5 & t7;
1399	+ d = t8 ^ t9;
1400	+ t11 = t5 ^ t7;
1401	+ b = d ^ t11;
1402	+ t13 = t8 & t11;
1403	+ a = t5 ^ t13
1404	+ a = rotl32(a, 13)
1405	+ c = rotl32(c, 3)
1406	+ d ^= c ^ ((a << 3) & 0xFFFFFFFF)
1407	+ b ^= a ^ c
1408	+ d = rotl32(d, 7)
1409	+ b = rotl32(b, 1)
1410	+ a ^= b ^ d
1411	+ c ^= d ^ ((b << 7) & 0xFFFFFFFF)
1412	+ a = rotl32(a, 5)
1413	+ c = rotl32(c, 22)
1414	+ a ^= key[4 * 2 + 8]
1415	+ b ^= key[4 * 2 + 9]
1416	+ c ^= key[4 * 2 + 10]
1417	+ d ^= key[4 * 2 + 11]
1418	+ t1 = (~a) % 0x100000000;
1419	+ t2 = b ^ d;
1420	+ t3 = c & t1;
1421	+ t13 = d | t1;
1422	+ e = t2 ^ t3;
1423	+ t5 = c ^ t1;
1424	+ t6 = c ^ e;
1425	+ t7 = b & t6;
1426	+ t10 = e | t5;
1427	+ h = t5 ^ t7;
1428	+ t9 = d | t7;
1429	+ t11 = t9 & t10;
1430	+ t14 = t2 ^ h;
1431	+ g = a ^ t11;
1432	+ t15 = g ^ t13;
1433	+ f = t14 ^ t15
1434	+ e = rotl32(e, 13)
1435	+ g = rotl32(g, 3)
1436	+ h ^= g ^ ((e << 3) & 0xFFFFFFFF)
1437	+ f ^= e ^ g
1438	+ h = rotl32(h, 7)
1439	+ f = rotl32(f, 1)
1440	+ e ^= f ^ h
1441	+ g ^= h ^ ((f << 7) & 0xFFFFFFFF)
1442	+ e = rotl32(e, 5)
1443	+ g = rotl32(g, 22)
1444	+ e ^= key[4 * 3 + 8]
1445	+ f ^= key[4 * 3 + 9]
1446	+ g ^= key[4 * 3 + 10]
1447	+ h ^= key[4 * 3 + 11]
1448	+ t1 = e ^ g;
1449	+ t2 = h ^ t1;
1450	+ t3 = e & t2;
1451	+ t4 = h ^ t3;
1452	+ t5 = f & t4;
1453	+ c = t2 ^ t5;
1454	+ t7 = e | c;
1455	+ t8 = f | h;
1456	+ t11 = e | h;
1457	+ t9 = t4 & t7;
1458	+ b = t8 ^ t9;
1459	+ t12 = f ^ t11;
1460	+ t13 = c ^ t9;
1461	+ t15 = t3 ^ t8;
1462	+ d = t12 ^ t13;
1463	+ t16 = g & t15;
1464	+ a = t12 ^ t16
1465	+ a = rotl32(a, 13)
1466	+ c = rotl32(c, 3)
1467	+ d ^= c ^ ((a << 3) & 0xFFFFFFFF)
1468	+ b ^= a ^ c
1469	+ d = rotl32(d, 7)
1470	+ b = rotl32(b, 1)
1471	+ a ^= b ^ d
1472	+ c ^= d ^ ((b << 7) & 0xFFFFFFFF)
1473	+ a = rotl32(a, 5)
1474	+ c = rotl32(c, 22)
1475	+ a ^= key[4 * 4 + 8]
1476	+ b ^= key[4 * 4 + 9]
1477	+ c ^= key[4 * 4 + 10]
1478	+ d ^= key[4 * 4 + 11]
1479	+ t1 = a ^ d;
1480	+ t2 = d & t1;
1481	+ t3 = c ^ t2;
1482	+ t4 = b | t3;
1483	+ h = t1 ^ t4;
1484	+ t6 = (~b) % 0x100000000;
1485	+ t7 = t1 | t6;
1486	+ e = t3 ^ t7;
1487	+ t9 = a & e;
1488	+ t10 = t1 ^ t6;
1489	+ t11 = t4 & t10;
1490	+ g = t9 ^ t11;
1491	+ t13 = a ^ t3;
1492	+ t14 = t10 & g;
1493	+ f = t13 ^ t14
1494	+ e = rotl32(e, 13)
1495	+ g = rotl32(g, 3)
1496	+ h ^= g ^ ((e << 3) & 0xFFFFFFFF)
1497	+ f ^= e ^ g
1498	+ h = rotl32(h, 7)
1499	+ f = rotl32(f, 1)
1500	+ e ^= f ^ h
1501	+ g ^= h ^ ((f << 7) & 0xFFFFFFFF)
1502	+ e = rotl32(e, 5)
1503	+ g = rotl32(g, 22)
1504	+ e ^= key[4 * 5 + 8]
1505	+ f ^= key[4 * 5 + 9]
1506	+ g ^= key[4 * 5 + 10]
1507	+ h ^= key[4 * 5 + 11]
1508	+ t1 = (~e) % 0x100000000;
1509	+ t2 = e ^ f;
1510	+ t3 = e ^ h;
1511	+ t4 = g ^ t1;
1512	+ t5 = t2 | t3;
1513	+ a = t4 ^ t5;
1514	+ t7 = h & a;
1515	+ t8 = t2 ^ a;
1516	+ t10 = t1 | a;
1517	+ b = t7 ^ t8;
1518	+ t11 = t2 | t7;
1519	+ t12 = t3 ^ t10;
1520	+ t14 = f ^ t7;
1521	+ c = t11 ^ t12;
1522	+ t15 = b & t12;
1523	+ d = t14 ^ t15
1524	+ a = rotl32(a, 13)
1525	+ c = rotl32(c, 3)
1526	+ d ^= c ^ ((a << 3) & 0xFFFFFFFF)
1527	+ b ^= a ^ c
1528	+ d = rotl32(d, 7)
1529	+ b = rotl32(b, 1)
1530	+ a ^= b ^ d
1531	+ c ^= d ^ ((b << 7) & 0xFFFFFFFF)
1532	+ a = rotl32(a, 5)
1533	+ c = rotl32(c, 22)
1534	+ a ^= key[4 * 6 + 8]
1535	+ b ^= key[4 * 6 + 9]
1536	+ c ^= key[4 * 6 + 10]
1537	+ d ^= key[4 * 6 + 11]
1538	+ t1 = (~a) % 0x100000000;
1539	+ t2 = a ^ d;
1540	+ t3 = b ^ t2;
1541	+ t4 = t1 | t2;
1542	+ t5 = c ^ t4;
1543	+ f = b ^ t5;
1544	+ t13 = (~t5) % 0x100000000;
1545	+ t7 = t2 | f;
1546	+ t8 = d ^ t7;
1547	+ t9 = t5 & t8;
1548	+ g = t3 ^ t9;
1549	+ t11 = t5 ^ t8;
1550	+ e = g ^ t11;
1551	+ t14 = t3 & t11;
1552	+ h = t13 ^ t14
1553	+ e = rotl32(e, 13)
1554	+ g = rotl32(g, 3)
1555	+ h ^= g ^ ((e << 3) & 0xFFFFFFFF)
1556	+ f ^= e ^ g
1557	+ h = rotl32(h, 7)
1558	+ f = rotl32(f, 1)
1559	+ e ^= f ^ h
1560	+ g ^= h ^ ((f << 7) & 0xFFFFFFFF)
1561	+ e = rotl32(e, 5)
1562	+ g = rotl32(g, 22)
1563	+ e ^= key[4 * 7 + 8]
1564	+ f ^= key[4 * 7 + 9]
1565	+ g ^= key[4 * 7 + 10]
1566	+ h ^= key[4 * 7 + 11]
1567	+ t1 = (~g) % 0x100000000;
1568	+ t2 = f ^ g;
1569	+ t3 = f | t1;
1570	+ t4 = h ^ t3;
1571	+ t5 = e & t4;
1572	+ t7 = e ^ h;
1573	+ d = t2 ^ t5;
1574	+ t8 = f ^ t5;
1575	+ t9 = t2 | t8;
1576	+ t11 = h & t3;
1577	+ b = t7 ^ t9;
1578	+ t12 = t5 ^ b;
1579	+ t15 = t1 | t4;
1580	+ t13 = d & t12;
1581	+ c = t11 ^ t13;
1582	+ t16 = t12 ^ c;
1583	+ a = t15 ^ t16
1584	+ a = rotl32(a, 13)
1585	+ c = rotl32(c, 3)
1586	+ d ^= c ^ ((a << 3) & 0xFFFFFFFF)
1587	+ b ^= a ^ c
1588	+ d = rotl32(d, 7)
1589	+ b = rotl32(b, 1)
1590	+ a ^= b ^ d
1591	+ c ^= d ^ ((b << 7) & 0xFFFFFFFF)
1592	+ a = rotl32(a, 5)
1593	+ c = rotl32(c, 22)
1594	+ a ^= key[4 * 8 + 8]
1595	+ b ^= key[4 * 8 + 9]
1596	+ c ^= key[4 * 8 + 10]
1597	+ d ^= key[4 * 8 + 11]
1598	+ t1 = a ^ d;
1599	+ t2 = a & d;
1600	+ t3 = c ^ t1;
1601	+ t6 = b & t1;
1602	+ t4 = b ^ t3;
1603	+ t10 = (~t3) % 0x100000000;
1604	+ h = t2 ^ t4;
1605	+ t7 = a ^ t6;
1606	+ t14 = (~t7) % 0x100000000;
1607	+ t8 = c | t7;
1608	+ t11 = t3 ^ t7;
1609	+ g = t4 ^ t8;
1610	+ t12 = h & t11;
1611	+ f = t10 ^ t12;
1612	+ e = t12 ^ t14
1613	+ e = rotl32(e, 13)
1614	+ g = rotl32(g, 3)
1615	+ h ^= g ^ ((e << 3) & 0xFFFFFFFF)
1616	+ f ^= e ^ g
1617	+ h = rotl32(h, 7)
1618	+ f = rotl32(f, 1)
1619	+ e ^= f ^ h
1620	+ g ^= h ^ ((f << 7) & 0xFFFFFFFF)
1621	+ e = rotl32(e, 5)
1622	+ g = rotl32(g, 22)
1623	+ e ^= key[4 * 9 + 8]
1624	+ f ^= key[4 * 9 + 9]
1625	+ g ^= key[4 * 9 + 10]
1626	+ h ^= key[4 * 9 + 11]
1627	+ t1 = (~e) % 0x100000000;
1628	+ t2 = f ^ t1;
1629	+ t3 = e | t2;
1630	+ t4 = h | t2;
1631	+ t5 = g ^ t3;
1632	+ c = h ^ t5;
1633	+ t7 = f ^ t4;
1634	+ t8 = t2 ^ c;
1635	+ t9 = t5 & t7;
1636	+ d = t8 ^ t9;
1637	+ t11 = t5 ^ t7;
1638	+ b = d ^ t11;
1639	+ t13 = t8 & t11;
1640	+ a = t5 ^ t13
1641	+ a = rotl32(a, 13)
1642	+ c = rotl32(c, 3)
1643	+ d ^= c ^ ((a << 3) & 0xFFFFFFFF)
1644	+ b ^= a ^ c
1645	+ d = rotl32(d, 7)
1646	+ b = rotl32(b, 1)
1647	+ a ^= b ^ d
1648	+ c ^= d ^ ((b << 7) & 0xFFFFFFFF)
1649	+ a = rotl32(a, 5)
1650	+ c = rotl32(c, 22)
1651	+ a ^= key[4 * 10 + 8]
1652	+ b ^= key[4 * 10 + 9]
1653	+ c ^= key[4 * 10 + 10]
1654	+ d ^= key[4 * 10 + 11]
1655	+ t1 = (~a) % 0x100000000;
1656	+ t2 = b ^ d;
1657	+ t3 = c & t1;
1658	+ t13 = d | t1;
1659	+ e = t2 ^ t3;
1660	+ t5 = c ^ t1;
1661	+ t6 = c ^ e;
1662	+ t7 = b & t6;
1663	+ t10 = e | t5;
1664	+ h = t5 ^ t7;
1665	+ t9 = d | t7;
1666	+ t11 = t9 & t10;
1667	+ t14 = t2 ^ h;
1668	+ g = a ^ t11;
1669	+ t15 = g ^ t13;
1670	+ f = t14 ^ t15
1671	+ e = rotl32(e, 13)
1672	+ g = rotl32(g, 3)
1673	+ h ^= g ^ ((e << 3) & 0xFFFFFFFF)
1674	+ f ^= e ^ g
1675	+ h = rotl32(h, 7)
1676	+ f = rotl32(f, 1)
1677	+ e ^= f ^ h
1678	+ g ^= h ^ ((f << 7) & 0xFFFFFFFF)
1679	+ e = rotl32(e, 5)
1680	+ g = rotl32(g, 22)
1681	+ e ^= key[4 * 11 + 8]
1682	+ f ^= key[4 * 11 + 9]
1683	+ g ^= key[4 * 11 + 10]
1684	+ h ^= key[4 * 11 + 11]
1685	+ t1 = e ^ g;
1686	+ t2 = h ^ t1;
1687	+ t3 = e & t2;
1688	+ t4 = h ^ t3;
1689	+ t5 = f & t4;
1690	+ c = t2 ^ t5;
1691	+ t7 = e | c;
1692	+ t8 = f | h;
1693	+ t11 = e | h;
1694	+ t9 = t4 & t7;
1695	+ b = t8 ^ t9;
1696	+ t12 = f ^ t11;
1697	+ t13 = c ^ t9;
1698	+ t15 = t3 ^ t8;
1699	+ d = t12 ^ t13;
1700	+ t16 = g & t15;
1701	+ a = t12 ^ t16
1702	+ a = rotl32(a, 13)
1703	+ c = rotl32(c, 3)
1704	+ d ^= c ^ ((a << 3) & 0xFFFFFFFF)
1705	+ b ^= a ^ c
1706	+ d = rotl32(d, 7)
1707	+ b = rotl32(b, 1)
1708	+ a ^= b ^ d
1709	+ c ^= d ^ ((b << 7) & 0xFFFFFFFF)
1710	+ a = rotl32(a, 5)
1711	+ c = rotl32(c, 22)
1712	+ a ^= key[4 * 12 + 8]
1713	+ b ^= key[4 * 12 + 9]
1714	+ c ^= key[4 * 12 + 10]
1715	+ d ^= key[4 * 12 + 11]
1716	+ t1 = a ^ d;
1717	+ t2 = d & t1;
1718	+ t3 = c ^ t2;
1719	+ t4 = b | t3;
1720	+ h = t1 ^ t4;
1721	+ t6 = (~b) % 0x100000000;
1722	+ t7 = t1 | t6;
1723	+ e = t3 ^ t7;
1724	+ t9 = a & e;
1725	+ t10 = t1 ^ t6;
1726	+ t11 = t4 & t10;
1727	+ g = t9 ^ t11;
1728	+ t13 = a ^ t3;
1729	+ t14 = t10 & g;
1730	+ f = t13 ^ t14
1731	+ e = rotl32(e, 13)
1732	+ g = rotl32(g, 3)
1733	+ h ^= g ^ ((e << 3) & 0xFFFFFFFF)
1734	+ f ^= e ^ g
1735	+ h = rotl32(h, 7)
1736	+ f = rotl32(f, 1)
1737	+ e ^= f ^ h
1738	+ g ^= h ^ ((f << 7) & 0xFFFFFFFF)
1739	+ e = rotl32(e, 5)
1740	+ g = rotl32(g, 22)
1741	+ e ^= key[4 * 13 + 8]
1742	+ f ^= key[4 * 13 + 9]
1743	+ g ^= key[4 * 13 + 10]
1744	+ h ^= key[4 * 13 + 11]
1745	+ t1 = (~e) % 0x100000000;
1746	+ t2 = e ^ f;
1747	+ t3 = e ^ h;
1748	+ t4 = g ^ t1;
1749	+ t5 = t2 | t3;
1750	+ a = t4 ^ t5;
1751	+ t7 = h & a;
1752	+ t8 = t2 ^ a;
1753	+ t10 = t1 | a;
1754	+ b = t7 ^ t8;
1755	+ t11 = t2 | t7;
1756	+ t12 = t3 ^ t10;
1757	+ t14 = f ^ t7;
1758	+ c = t11 ^ t12;
1759	+ t15 = b & t12;
1760	+ d = t14 ^ t15
1761	+ a = rotl32(a, 13)
1762	+ c = rotl32(c, 3)
1763	+ d ^= c ^ ((a << 3) & 0xFFFFFFFF)
1764	+ b ^= a ^ c
1765	+ d = rotl32(d, 7)
1766	+ b = rotl32(b, 1)
1767	+ a ^= b ^ d
1768	+ c ^= d ^ ((b << 7) & 0xFFFFFFFF)
1769	+ a = rotl32(a, 5)
1770	+ c = rotl32(c, 22)
1771	+ a ^= key[4 * 14 + 8]
1772	+ b ^= key[4 * 14 + 9]
1773	+ c ^= key[4 * 14 + 10]
1774	+ d ^= key[4 * 14 + 11]
1775	+ t1 = (~a) % 0x100000000;
1776	+ t2 = a ^ d;
1777	+ t3 = b ^ t2;
1778	+ t4 = t1 | t2;
1779	+ t5 = c ^ t4;
1780	+ f = b ^ t5;
1781	+ t13 = (~t5) % 0x100000000;
1782	+ t7 = t2 | f;
1783	+ t8 = d ^ t7;
1784	+ t9 = t5 & t8;
1785	+ g = t3 ^ t9;
1786	+ t11 = t5 ^ t8;
1787	+ e = g ^ t11;
1788	+ t14 = t3 & t11;
1789	+ h = t13 ^ t14
1790	+ e = rotl32(e, 13)
1791	+ g = rotl32(g, 3)
1792	+ h ^= g ^ ((e << 3) & 0xFFFFFFFF)
1793	+ f ^= e ^ g
1794	+ h = rotl32(h, 7)
1795	+ f = rotl32(f, 1)
1796	+ e ^= f ^ h
1797	+ g ^= h ^ ((f << 7) & 0xFFFFFFFF)
1798	+ e = rotl32(e, 5)
1799	+ g = rotl32(g, 22)
1800	+ e ^= key[4 * 15 + 8]
1801	+ f ^= key[4 * 15 + 9]
1802	+ g ^= key[4 * 15 + 10]
1803	+ h ^= key[4 * 15 + 11]
1804	+ t1 = (~g) % 0x100000000;
1805	+ t2 = f ^ g;
1806	+ t3 = f | t1;
1807	+ t4 = h ^ t3;
1808	+ t5 = e & t4;
1809	+ t7 = e ^ h;
1810	+ d = t2 ^ t5;
1811	+ t8 = f ^ t5;
1812	+ t9 = t2 | t8;
1813	+ t11 = h & t3;
1814	+ b = t7 ^ t9;
1815	+ t12 = t5 ^ b;
1816	+ t15 = t1 | t4;
1817	+ t13 = d & t12;
1818	+ c = t11 ^ t13;
1819	+ t16 = t12 ^ c;
1820	+ a = t15 ^ t16
1821	+ a = rotl32(a, 13)
1822	+ c = rotl32(c, 3)
1823	+ d ^= c ^ ((a << 3) & 0xFFFFFFFF)
1824	+ b ^= a ^ c
1825	+ d = rotl32(d, 7)
1826	+ b = rotl32(b, 1)
1827	+ a ^= b ^ d
1828	+ c ^= d ^ ((b << 7) & 0xFFFFFFFF)
1829	+ a = rotl32(a, 5)
1830	+ c = rotl32(c, 22)
1831	+ a ^= key[4 * 16 + 8]
1832	+ b ^= key[4 * 16 + 9]
1833	+ c ^= key[4 * 16 + 10]
1834	+ d ^= key[4 * 16 + 11]
1835	+ t1 = a ^ d;
1836	+ t2 = a & d;
1837	+ t3 = c ^ t1;
1838	+ t6 = b & t1;
1839	+ t4 = b ^ t3;
1840	+ t10 = (~t3) % 0x100000000;
1841	+ h = t2 ^ t4;
1842	+ t7 = a ^ t6;
1843	+ t14 = (~t7) % 0x100000000;
1844	+ t8 = c | t7;
1845	+ t11 = t3 ^ t7;
1846	+ g = t4 ^ t8;
1847	+ t12 = h & t11;
1848	+ f = t10 ^ t12;
1849	+ e = t12 ^ t14
1850	+ e = rotl32(e, 13)
1851	+ g = rotl32(g, 3)
1852	+ h ^= g ^ ((e << 3) & 0xFFFFFFFF)
1853	+ f ^= e ^ g
1854	+ h = rotl32(h, 7)
1855	+ f = rotl32(f, 1)
1856	+ e ^= f ^ h
1857	+ g ^= h ^ ((f << 7) & 0xFFFFFFFF)
1858	+ e = rotl32(e, 5)
1859	+ g = rotl32(g, 22)
1860	+ e ^= key[4 * 17 + 8]
1861	+ f ^= key[4 * 17 + 9]
1862	+ g ^= key[4 * 17 + 10]
1863	+ h ^= key[4 * 17 + 11]
1864	+ t1 = (~e) % 0x100000000;
1865	+ t2 = f ^ t1;
1866	+ t3 = e | t2;
1867	+ t4 = h | t2;
1868	+ t5 = g ^ t3;
1869	+ c = h ^ t5;
1870	+ t7 = f ^ t4;
1871	+ t8 = t2 ^ c;
1872	+ t9 = t5 & t7;
1873	+ d = t8 ^ t9;
1874	+ t11 = t5 ^ t7;
1875	+ b = d ^ t11;
1876	+ t13 = t8 & t11;
1877	+ a = t5 ^ t13
1878	+ a = rotl32(a, 13)
1879	+ c = rotl32(c, 3)
1880	+ d ^= c ^ ((a << 3) & 0xFFFFFFFF)
1881	+ b ^= a ^ c
1882	+ d = rotl32(d, 7)
1883	+ b = rotl32(b, 1)
1884	+ a ^= b ^ d
1885	+ c ^= d ^ ((b << 7) & 0xFFFFFFFF)
1886	+ a = rotl32(a, 5)
1887	+ c = rotl32(c, 22)
1888	+ a ^= key[4 * 18 + 8]
1889	+ b ^= key[4 * 18 + 9]
1890	+ c ^= key[4 * 18 + 10]
1891	+ d ^= key[4 * 18 + 11]
1892	+ t1 = (~a) % 0x100000000;
1893	+ t2 = b ^ d;
1894	+ t3 = c & t1;
1895	+ t13 = d | t1;
1896	+ e = t2 ^ t3;
1897	+ t5 = c ^ t1;
1898	+ t6 = c ^ e;
1899	+ t7 = b & t6;
1900	+ t10 = e | t5;
1901	+ h = t5 ^ t7;
1902	+ t9 = d | t7;
1903	+ t11 = t9 & t10;
1904	+ t14 = t2 ^ h;
1905	+ g = a ^ t11;
1906	+ t15 = g ^ t13;
1907	+ f = t14 ^ t15
1908	+ e = rotl32(e, 13)
1909	+ g = rotl32(g, 3)
1910	+ h ^= g ^ ((e << 3) & 0xFFFFFFFF)
1911	+ f ^= e ^ g
1912	+ h = rotl32(h, 7)
1913	+ f = rotl32(f, 1)
1914	+ e ^= f ^ h
1915	+ g ^= h ^ ((f << 7) & 0xFFFFFFFF)
1916	+ e = rotl32(e, 5)
1917	+ g = rotl32(g, 22)
1918	+ e ^= key[4 * 19 + 8]
1919	+ f ^= key[4 * 19 + 9]
1920	+ g ^= key[4 * 19 + 10]
1921	+ h ^= key[4 * 19 + 11]
1922	+ t1 = e ^ g;
1923	+ t2 = h ^ t1;
1924	+ t3 = e & t2;
1925	+ t4 = h ^ t3;
1926	+ t5 = f & t4;
1927	+ c = t2 ^ t5;
1928	+ t7 = e | c;
1929	+ t8 = f | h;
1930	+ t11 = e | h;
1931	+ t9 = t4 & t7;
1932	+ b = t8 ^ t9;
1933	+ t12 = f ^ t11;
1934	+ t13 = c ^ t9;
1935	+ t15 = t3 ^ t8;
1936	+ d = t12 ^ t13;
1937	+ t16 = g & t15;
1938	+ a = t12 ^ t16
1939	+ a = rotl32(a, 13)
1940	+ c = rotl32(c, 3)
1941	+ d ^= c ^ ((a << 3) & 0xFFFFFFFF)
1942	+ b ^= a ^ c
1943	+ d = rotl32(d, 7)
1944	+ b = rotl32(b, 1)
1945	+ a ^= b ^ d
1946	+ c ^= d ^ ((b << 7) & 0xFFFFFFFF)
1947	+ a = rotl32(a, 5)
1948	+ c = rotl32(c, 22)
1949	+ a ^= key[4 * 20 + 8]
1950	+ b ^= key[4 * 20 + 9]
1951	+ c ^= key[4 * 20 + 10]
1952	+ d ^= key[4 * 20 + 11]
1953	+ t1 = a ^ d;
1954	+ t2 = d & t1;
1955	+ t3 = c ^ t2;
1956	+ t4 = b | t3;
1957	+ h = t1 ^ t4;
1958	+ t6 = (~b) % 0x100000000;
1959	+ t7 = t1 | t6;
1960	+ e = t3 ^ t7;
1961	+ t9 = a & e;
1962	+ t10 = t1 ^ t6;
1963	+ t11 = t4 & t10;
1964	+ g = t9 ^ t11;
1965	+ t13 = a ^ t3;
1966	+ t14 = t10 & g;
1967	+ f = t13 ^ t14
1968	+ e = rotl32(e, 13)
1969	+ g = rotl32(g, 3)
1970	+ h ^= g ^ ((e << 3) & 0xFFFFFFFF)
1971	+ f ^= e ^ g
1972	+ h = rotl32(h, 7)
1973	+ f = rotl32(f, 1)
1974	+ e ^= f ^ h
1975	+ g ^= h ^ ((f << 7) & 0xFFFFFFFF)
1976	+ e = rotl32(e, 5)
1977	+ g = rotl32(g, 22)
1978	+ e ^= key[4 * 21 + 8]
1979	+ f ^= key[4 * 21 + 9]
1980	+ g ^= key[4 * 21 + 10]
1981	+ h ^= key[4 * 21 + 11]
1982	+ t1 = (~e) % 0x100000000;
1983	+ t2 = e ^ f;
1984	+ t3 = e ^ h;
1985	+ t4 = g ^ t1;
1986	+ t5 = t2 | t3;
1987	+ a = t4 ^ t5;
1988	+ t7 = h & a;
1989	+ t8 = t2 ^ a;
1990	+ t10 = t1 | a;
1991	+ b = t7 ^ t8;
1992	+ t11 = t2 | t7;
1993	+ t12 = t3 ^ t10;
1994	+ t14 = f ^ t7;
1995	+ c = t11 ^ t12;
1996	+ t15 = b & t12;
1997	+ d = t14 ^ t15
1998	+ a = rotl32(a, 13)
1999	+ c = rotl32(c, 3)
2000	+ d ^= c ^ ((a << 3) & 0xFFFFFFFF)
2001	+ b ^= a ^ c
2002	+ d = rotl32(d, 7)
2003	+ b = rotl32(b, 1)
2004	+ a ^= b ^ d
2005	+ c ^= d ^ ((b << 7) & 0xFFFFFFFF)
2006	+ a = rotl32(a, 5)
2007	+ c = rotl32(c, 22)
2008	+ a ^= key[4 * 22 + 8]
2009	+ b ^= key[4 * 22 + 9]
2010	+ c ^= key[4 * 22 + 10]
2011	+ d ^= key[4 * 22 + 11]
2012	+ t1 = (~a) % 0x100000000;
2013	+ t2 = a ^ d;
2014	+ t3 = b ^ t2;
2015	+ t4 = t1 | t2;
2016	+ t5 = c ^ t4;
2017	+ f = b ^ t5;
2018	+ t13 = (~t5) % 0x100000000;
2019	+ t7 = t2 | f;
2020	+ t8 = d ^ t7;
2021	+ t9 = t5 & t8;
2022	+ g = t3 ^ t9;
2023	+ t11 = t5 ^ t8;
2024	+ e = g ^ t11;
2025	+ t14 = t3 & t11;
2026	+ h = t13 ^ t14
2027	+ e = rotl32(e, 13)
2028	+ g = rotl32(g, 3)
2029	+ h ^= g ^ ((e << 3) & 0xFFFFFFFF)
2030	+ f ^= e ^ g
2031	+ h = rotl32(h, 7)
2032	+ f = rotl32(f, 1)
2033	+ e ^= f ^ h
2034	+ g ^= h ^ ((f << 7) & 0xFFFFFFFF)
2035	+ e = rotl32(e, 5)
2036	+ g = rotl32(g, 22)
2037	+ e ^= key[4 * 23 + 8]
2038	+ f ^= key[4 * 23 + 9]
2039	+ g ^= key[4 * 23 + 10]
2040	+ h ^= key[4 * 23 + 11]
2041	+ t1 = (~g) % 0x100000000;
2042	+ t2 = f ^ g;
2043	+ t3 = f | t1;
2044	+ t4 = h ^ t3;
2045	+ t5 = e & t4;
2046	+ t7 = e ^ h;
2047	+ d = t2 ^ t5;
2048	+ t8 = f ^ t5;
2049	+ t9 = t2 | t8;
2050	+ t11 = h & t3;
2051	+ b = t7 ^ t9;
2052	+ t12 = t5 ^ b;
2053	+ t15 = t1 | t4;
2054	+ t13 = d & t12;
2055	+ c = t11 ^ t13;
2056	+ t16 = t12 ^ c;
2057	+ a = t15 ^ t16
2058	+ a = rotl32(a, 13)
2059	+ c = rotl32(c, 3)
2060	+ d ^= c ^ ((a << 3) & 0xFFFFFFFF)
2061	+ b ^= a ^ c
2062	+ d = rotl32(d, 7)
2063	+ b = rotl32(b, 1)
2064	+ a ^= b ^ d
2065	+ c ^= d ^ ((b << 7) & 0xFFFFFFFF)
2066	+ a = rotl32(a, 5)
2067	+ c = rotl32(c, 22)
2068	+ a ^= key[4 * 24 + 8]
2069	+ b ^= key[4 * 24 + 9]
2070	+ c ^= key[4 * 24 + 10]
2071	+ d ^= key[4 * 24 + 11]
2072	+ t1 = a ^ d;
2073	+ t2 = a & d;
2074	+ t3 = c ^ t1;
2075	+ t6 = b & t1;
2076	+ t4 = b ^ t3;
2077	+ t10 = (~t3) % 0x100000000;
2078	+ h = t2 ^ t4;
2079	+ t7 = a ^ t6;
2080	+ t14 = (~t7) % 0x100000000;
2081	+ t8 = c | t7;
2082	+ t11 = t3 ^ t7;
2083	+ g = t4 ^ t8;
2084	+ t12 = h & t11;
2085	+ f = t10 ^ t12;
2086	+ e = t12 ^ t14
2087	+ e = rotl32(e, 13)
2088	+ g = rotl32(g, 3)
2089	+ h ^= g ^ ((e << 3) & 0xFFFFFFFF)
2090	+ f ^= e ^ g
2091	+ h = rotl32(h, 7)
2092	+ f = rotl32(f, 1)
2093	+ e ^= f ^ h
2094	+ g ^= h ^ ((f << 7) & 0xFFFFFFFF)
2095	+ e = rotl32(e, 5)
2096	+ g = rotl32(g, 22)
2097	+ e ^= key[4 * 25 + 8]
2098	+ f ^= key[4 * 25 + 9]
2099	+ g ^= key[4 * 25 + 10]
2100	+ h ^= key[4 * 25 + 11]
2101	+ t1 = (~e) % 0x100000000;
2102	+ t2 = f ^ t1;
2103	+ t3 = e | t2;
2104	+ t4 = h | t2;
2105	+ t5 = g ^ t3;
2106	+ c = h ^ t5;
2107	+ t7 = f ^ t4;
2108	+ t8 = t2 ^ c;
2109	+ t9 = t5 & t7;
2110	+ d = t8 ^ t9;
2111	+ t11 = t5 ^ t7;
2112	+ b = d ^ t11;
2113	+ t13 = t8 & t11;
2114	+ a = t5 ^ t13
2115	+ a = rotl32(a, 13)
2116	+ c = rotl32(c, 3)
2117	+ d ^= c ^ ((a << 3) & 0xFFFFFFFF)
2118	+ b ^= a ^ c
2119	+ d = rotl32(d, 7)
2120	+ b = rotl32(b, 1)
2121	+ a ^= b ^ d
2122	+ c ^= d ^ ((b << 7) & 0xFFFFFFFF)
2123	+ a = rotl32(a, 5)
2124	+ c = rotl32(c, 22)
2125	+ a ^= key[4 * 26 + 8]
2126	+ b ^= key[4 * 26 + 9]
2127	+ c ^= key[4 * 26 + 10]
2128	+ d ^= key[4 * 26 + 11]
2129	+ t1 = (~a) % 0x100000000;
2130	+ t2 = b ^ d;
2131	+ t3 = c & t1;
2132	+ t13 = d | t1;
2133	+ e = t2 ^ t3;
2134	+ t5 = c ^ t1;
2135	+ t6 = c ^ e;
2136	+ t7 = b & t6;
2137	+ t10 = e | t5;
2138	+ h = t5 ^ t7;
2139	+ t9 = d | t7;
2140	+ t11 = t9 & t10;
2141	+ t14 = t2 ^ h;
2142	+ g = a ^ t11;
2143	+ t15 = g ^ t13;
2144	+ f = t14 ^ t15
2145	+ e = rotl32(e, 13)
2146	+ g = rotl32(g, 3)
2147	+ h ^= g ^ ((e << 3) & 0xFFFFFFFF)
2148	+ f ^= e ^ g
2149	+ h = rotl32(h, 7)
2150	+ f = rotl32(f, 1)
2151	+ e ^= f ^ h
2152	+ g ^= h ^ ((f << 7) & 0xFFFFFFFF)
2153	+ e = rotl32(e, 5)
2154	+ g = rotl32(g, 22)
2155	+ e ^= key[4 * 27 + 8]
2156	+ f ^= key[4 * 27 + 9]
2157	+ g ^= key[4 * 27 + 10]
2158	+ h ^= key[4 * 27 + 11]
2159	+ t1 = e ^ g;
2160	+ t2 = h ^ t1;
2161	+ t3 = e & t2;
2162	+ t4 = h ^ t3;
2163	+ t5 = f & t4;
2164	+ c = t2 ^ t5;
2165	+ t7 = e | c;
2166	+ t8 = f | h;
2167	+ t11 = e | h;
2168	+ t9 = t4 & t7;
2169	+ b = t8 ^ t9;
2170	+ t12 = f ^ t11;
2171	+ t13 = c ^ t9;
2172	+ t15 = t3 ^ t8;
2173	+ d = t12 ^ t13;
2174	+ t16 = g & t15;
2175	+ a = t12 ^ t16
2176	+ a = rotl32(a, 13)
2177	+ c = rotl32(c, 3)
2178	+ d ^= c ^ ((a << 3) & 0xFFFFFFFF)
2179	+ b ^= a ^ c
2180	+ d = rotl32(d, 7)
2181	+ b = rotl32(b, 1)
2182	+ a ^= b ^ d
2183	+ c ^= d ^ ((b << 7) & 0xFFFFFFFF)
2184	+ a = rotl32(a, 5)
2185	+ c = rotl32(c, 22)
2186	+ a ^= key[4 * 28 + 8]
2187	+ b ^= key[4 * 28 + 9]
2188	+ c ^= key[4 * 28 + 10]
2189	+ d ^= key[4 * 28 + 11]
2190	+ t1 = a ^ d;
2191	+ t2 = d & t1;
2192	+ t3 = c ^ t2;
2193	+ t4 = b | t3;
2194	+ h = t1 ^ t4;
2195	+ t6 = (~b) % 0x100000000;
2196	+ t7 = t1 | t6;
2197	+ e = t3 ^ t7;
2198	+ t9 = a & e;
2199	+ t10 = t1 ^ t6;
2200	+ t11 = t4 & t10;
2201	+ g = t9 ^ t11;
2202	+ t13 = a ^ t3;
2203	+ t14 = t10 & g;
2204	+ f = t13 ^ t14
2205	+ e = rotl32(e, 13)
2206	+ g = rotl32(g, 3)
2207	+ h ^= g ^ ((e << 3) & 0xFFFFFFFF)
2208	+ f ^= e ^ g
2209	+ h = rotl32(h, 7)
2210	+ f = rotl32(f, 1)
2211	+ e ^= f ^ h
2212	+ g ^= h ^ ((f << 7) & 0xFFFFFFFF)
2213	+ e = rotl32(e, 5)
2214	+ g = rotl32(g, 22)
2215	+ e ^= key[4 * 29 + 8]
2216	+ f ^= key[4 * 29 + 9]
2217	+ g ^= key[4 * 29 + 10]
2218	+ h ^= key[4 * 29 + 11]
2219	+ t1 = (~e) % 0x100000000;
2220	+ t2 = e ^ f;
2221	+ t3 = e ^ h;
2222	+ t4 = g ^ t1;
2223	+ t5 = t2 | t3;
2224	+ a = t4 ^ t5;
2225	+ t7 = h & a;
2226	+ t8 = t2 ^ a;
2227	+ t10 = t1 | a;
2228	+ b = t7 ^ t8;
2229	+ t11 = t2 | t7;
2230	+ t12 = t3 ^ t10;
2231	+ t14 = f ^ t7;
2232	+ c = t11 ^ t12;
2233	+ t15 = b & t12;
2234	+ d = t14 ^ t15
2235	+ a = rotl32(a, 13)
2236	+ c = rotl32(c, 3)
2237	+ d ^= c ^ ((a << 3) & 0xFFFFFFFF)
2238	+ b ^= a ^ c
2239	+ d = rotl32(d, 7)
2240	+ b = rotl32(b, 1)
2241	+ a ^= b ^ d
2242	+ c ^= d ^ ((b << 7) & 0xFFFFFFFF)
2243	+ a = rotl32(a, 5)
2244	+ c = rotl32(c, 22)
2245	+ a ^= key[4 * 30 + 8]
2246	+ b ^= key[4 * 30 + 9]
2247	+ c ^= key[4 * 30 + 10]
2248	+ d ^= key[4 * 30 + 11]
2249	+ t1 = (~a) % 0x100000000;
2250	+ t2 = a ^ d;
2251	+ t3 = b ^ t2;
2252	+ t4 = t1 | t2;
2253	+ t5 = c ^ t4;
2254	+ f = b ^ t5;
2255	+ t13 = (~t5) % 0x100000000;
2256	+ t7 = t2 | f;
2257	+ t8 = d ^ t7;
2258	+ t9 = t5 & t8;
2259	+ g = t3 ^ t9;
2260	+ t11 = t5 ^ t8;
2261	+ e = g ^ t11;
2262	+ t14 = t3 & t11;
2263	+ h = t13 ^ t14
2264	+ e = rotl32(e, 13)
2265	+ g = rotl32(g, 3)
2266	+ h ^= g ^ ((e << 3) & 0xFFFFFFFF)
2267	+ f ^= e ^ g
2268	+ h = rotl32(h, 7)
2269	+ f = rotl32(f, 1)
2270	+ e ^= f ^ h
2271	+ g ^= h ^ ((f << 7) & 0xFFFFFFFF)
2272	+ e = rotl32(e, 5)
2273	+ g = rotl32(g, 22)
2274	+ e ^= key[4 * 31 + 8]
2275	+ f ^= key[4 * 31 + 9]
2276	+ g ^= key[4 * 31 + 10]
2277	+ h ^= key[4 * 31 + 11]
2278	+ t1 = (~g) % 0x100000000;
2279	+ t2 = f ^ g;
2280	+ t3 = f | t1;
2281	+ t4 = h ^ t3;
2282	+ t5 = e & t4;
2283	+ t7 = e ^ h;
2284	+ d = t2 ^ t5;
2285	+ t8 = f ^ t5;
2286	+ t9 = t2 | t8;
2287	+ t11 = h & t3;
2288	+ b = t7 ^ t9;
2289	+ t12 = t5 ^ b;
2290	+ t15 = t1 | t4;
2291	+ t13 = d & t12;
2292	+ c = t11 ^ t13;
2293	+ t16 = t12 ^ c;
2294	+ a = t15 ^ t16
2295	+ a ^= key[4 * 32 + 8]
2296	+ b ^= key[4 * 32 + 9]
2297	+ c ^= key[4 * 32 + 10]
2298	+ d ^= key[4 * 32 + 11]
2299	+ if WORD_BIGENDIAN:
2300	+ a = byteswap32(a)
2301	+ b = byteswap32(b)
2302	+ c = byteswap32(c)
2303	+ d = byteswap32(d)
2304	+ in_blk[0] = a
2305	+ in_blk[1] = b
2306	+ in_blk[2] = c
2307	+ in_blk[3] = d
2308	+
2309	+def decrypt(key, in_blk):
2310	+ # serpent_generate.py
2311	+ a = in_blk[0]
2312	+ b = in_blk[1]
2313	+ c = in_blk[2]
2314	+ d = in_blk[3]
2315	+ if WORD_BIGENDIAN:
2316	+ a = byteswap32(a)
2317	+ b = byteswap32(b)
2318	+ c = byteswap32(c)
2319	+ d = byteswap32(d)
2320	+ e = 0
2321	+ f = 0
2322	+ g = 0
2323	+ h = 0
2324	+ t1 = 0
2325	+ t2 = 0
2326	+ t3 = 0
2327	+ t4 = 0
2328	+ t5 = 0
2329	+ t6 = 0
2330	+ t7 = 0
2331	+ t8 = 0
2332	+ t9 = 0
2333	+ t10 = 0
2334	+ t11 = 0
2335	+ t12 = 0
2336	+ t13 = 0
2337	+ t14 = 0
2338	+ t15 = 0
2339	+ t16 = 0
2340	+ a ^= key[4 * 32 + 8]
2341	+ b ^= key[4 * 32 + 9]
2342	+ c ^= key[4 * 32 + 10]
2343	+ d ^= key[4 * 32 + 11]
2344	+ t1 = a & b;
2345	+ t2 = a | b;
2346	+ t3 = c | t1;
2347	+ t4 = d & t2;
2348	+ h = t3 ^ t4;
2349	+ t6 = (~d) % 0x100000000;
2350	+ t7 = b ^ t4;
2351	+ t8 = h ^ t6;
2352	+ t11 = c ^ t7;
2353	+ t9 = t7 | t8;
2354	+ f = a ^ t9;
2355	+ t12 = d | f;
2356	+ e = t11 ^ t12;
2357	+ t14 = a & h;
2358	+ t15 = t3 ^ f;
2359	+ t16 = e ^ t14;
2360	+ g = t15 ^ t16
2361	+ e ^= key[4 * 31 + 8]
2362	+ f ^= key[4 * 31 + 9]
2363	+ g ^= key[4 * 31 + 10]
2364	+ h ^= key[4 * 31 + 11]
2365	+ g = rotr32(g, 22)
2366	+ e = rotr32(e, 5)
2367	+ g ^= h ^ ((f << 7) & 0xFFFFFFFF)
2368	+ e ^= f ^ h
2369	+ h = rotr32(h, 7)
2370	+ f = rotr32(f, 1)
2371	+ h ^= g ^ ((e << 3) & 0xFFFFFFFF)
2372	+ f ^= e ^ g
2373	+ g = rotr32(g, 3)
2374	+ e = rotr32(e, 13)
2375	+ t1 = (~e) % 0x100000000;
2376	+ t2 = e ^ f;
2377	+ t3 = g ^ t2;
2378	+ t4 = g | t1;
2379	+ t5 = h ^ t4;
2380	+ t13 = h & t1;
2381	+ b = t3 ^ t5;
2382	+ t7 = t3 & t5;
2383	+ t8 = t2 ^ t7;
2384	+ t9 = f | t8;
2385	+ d = t5 ^ t9;
2386	+ t11 = f | d;
2387	+ a = t8 ^ t11;
2388	+ t14 = t3 ^ t11;
2389	+ c = t13 ^ t14
2390	+ a ^= key[4 * 30 + 8]
2391	+ b ^= key[4 * 30 + 9]
2392	+ c ^= key[4 * 30 + 10]
2393	+ d ^= key[4 * 30 + 11]
2394	+ c = rotr32(c, 22)
2395	+ a = rotr32(a, 5)
2396	+ c ^= d ^ ((b << 7) & 0xFFFFFFFF)
2397	+ a ^= b ^ d
2398	+ d = rotr32(d, 7)
2399	+ b = rotr32(b, 1)
2400	+ d ^= c ^ ((a << 3) & 0xFFFFFFFF)
2401	+ b ^= a ^ c
2402	+ c = rotr32(c, 3)
2403	+ a = rotr32(a, 13)
2404	+ t1 = (~c) % 0x100000000;
2405	+ t2 = b & t1;
2406	+ t3 = d ^ t2;
2407	+ t4 = a & t3;
2408	+ t5 = b ^ t1;
2409	+ h = t4 ^ t5;
2410	+ t7 = b | h;
2411	+ t8 = a & t7;
2412	+ f = t3 ^ t8;
2413	+ t10 = a | d;
2414	+ t11 = t1 ^ t7;
2415	+ e = t10 ^ t11;
2416	+ t13 = a ^ c;
2417	+ t14 = b & t10;
2418	+ t15 = t4 | t13;
2419	+ g = t14 ^ t15
2420	+ e ^= key[4 * 29 + 8]
2421	+ f ^= key[4 * 29 + 9]
2422	+ g ^= key[4 * 29 + 10]
2423	+ h ^= key[4 * 29 + 11]
2424	+ g = rotr32(g, 22)
2425	+ e = rotr32(e, 5)
2426	+ g ^= h ^ ((f << 7) & 0xFFFFFFFF)
2427	+ e ^= f ^ h
2428	+ h = rotr32(h, 7)
2429	+ f = rotr32(f, 1)
2430	+ h ^= g ^ ((e << 3) & 0xFFFFFFFF)
2431	+ f ^= e ^ g
2432	+ g = rotr32(g, 3)
2433	+ e = rotr32(e, 13)
2434	+ t1 = g ^ h;
2435	+ t2 = g | h;
2436	+ t3 = f ^ t2;
2437	+ t4 = e & t3;
2438	+ b = t1 ^ t4;
2439	+ t6 = e ^ h;
2440	+ t7 = f | h;
2441	+ t8 = t6 & t7;
2442	+ d = t3 ^ t8;
2443	+ t10 = (~e) % 0x100000000;
2444	+ t11 = g ^ d;
2445	+ t12 = t10 | t11;
2446	+ a = t3 ^ t12;
2447	+ t14 = g | t4;
2448	+ t15 = t7 ^ t14;
2449	+ t16 = d | t10;
2450	+ c = t15 ^ t16
2451	+ a ^= key[4 * 28 + 8]
2452	+ b ^= key[4 * 28 + 9]
2453	+ c ^= key[4 * 28 + 10]
2454	+ d ^= key[4 * 28 + 11]
2455	+ c = rotr32(c, 22)
2456	+ a = rotr32(a, 5)
2457	+ c ^= d ^ ((b << 7) & 0xFFFFFFFF)
2458	+ a ^= b ^ d
2459	+ d = rotr32(d, 7)
2460	+ b = rotr32(b, 1)
2461	+
2462	+ d ^= c ^ ((a << 3) & 0xFFFFFFFF)
2463	+ b ^= a ^ c
2464	+ c = rotr32(c, 3)
2465	+ a = rotr32(a, 13)
2466	+ t1 = b ^ c;
2467	+ t2 = b | c;
2468	+ t3 = a ^ c;
2469	+ t7 = a ^ d;
2470	+ t4 = t2 ^ t3;
2471	+ t5 = d | t4;
2472	+ t9 = t2 ^ t7;
2473	+ e = t1 ^ t5;
2474	+ t8 = t1 | t5;
2475	+ t11 = a & t4;
2476	+ g = t8 ^ t9;
2477	+ t12 = e | t9;
2478	+ f = t11 ^ t12;
2479	+ t14 = a & g;
2480	+ t15 = t2 ^ t14;
2481	+ t16 = e & t15;
2482	+ h = t4 ^ t16
2483	+ e ^= key[4 * 27 + 8]
2484	+ f ^= key[4 * 27 + 9]
2485	+ g ^= key[4 * 27 + 10]
2486	+ h ^= key[4 * 27 + 11]
2487	+ g = rotr32(g, 22)
2488	+ e = rotr32(e, 5)
2489	+ g ^= h ^ ((f << 7) & 0xFFFFFFFF)
2490	+ e ^= f ^ h
2491	+ h = rotr32(h, 7)
2492	+ f = rotr32(f, 1)
2493	+ h ^= g ^ ((e << 3) & 0xFFFFFFFF)
2494	+ f ^= e ^ g
2495	+ g = rotr32(g, 3)
2496	+ e = rotr32(e, 13)
2497	+ t1 = f ^ h;
2498	+ t2 = (~t1) % 0x100000000;
2499	+ t3 = e ^ g;
2500	+ t4 = g ^ t1;
2501	+ t7 = e | t2;
2502	+ t5 = f & t4;
2503	+ t8 = h ^ t7;
2504	+ t11 = (~t4) % 0x100000000;
2505	+ a = t3 ^ t5;
2506	+ t9 = t3 | t8;
2507	+ t14 = h & t11;
2508	+ d = t1 ^ t9;
2509	+ t12 = a | d;
2510	+ b = t11 ^ t12;
2511	+ t15 = t3 ^ t12;
2512	+ c = t14 ^ t15
2513	+ a ^= key[4 * 26 + 8]
2514	+ b ^= key[4 * 26 + 9]
2515	+ c ^= key[4 * 26 + 10]
2516	+ d ^= key[4 * 26 + 11]
2517	+ c = rotr32(c, 22)
2518	+ a = rotr32(a, 5)
2519	+ c ^= d ^ ((b << 7) & 0xFFFFFFFF)
2520	+ a ^= b ^ d
2521	+ d = rotr32(d, 7)
2522	+ b = rotr32(b, 1)
2523	+ d ^= c ^ ((a << 3) & 0xFFFFFFFF)
2524	+ b ^= a ^ c
2525	+ c = rotr32(c, 3)
2526	+ a = rotr32(a, 13)
2527	+ t1 = a ^ d;
2528	+ t2 = a & b;
2529	+ t3 = b ^ c;
2530	+ t4 = a ^ t3;
2531	+ t5 = b | d;
2532	+ t7 = c | t1;
2533	+ h = t4 ^ t5;
2534	+ t8 = b ^ t7;
2535	+ t11 = (~t2) % 0x100000000;
2536	+ t9 = t4 & t8;
2537	+ f = t1 ^ t9;
2538	+ t13 = t9 ^ t11;
2539	+ t12 = h & f;
2540	+ g = t12 ^ t13;
2541	+ t15 = a & d;
2542	+ t16 = c ^ t13;
2543	+ e = t15 ^ t16
2544	+ e ^= key[4 * 25 + 8]
2545	+ f ^= key[4 * 25 + 9]
2546	+ g ^= key[4 * 25 + 10]
2547	+ h ^= key[4 * 25 + 11]
2548	+ g = rotr32(g, 22)
2549	+ e = rotr32(e, 5)
2550	+ g ^= h ^ ((f << 7) & 0xFFFFFFFF)
2551	+ e ^= f ^ h
2552	+ h = rotr32(h, 7)
2553	+ f = rotr32(f, 1)
2554	+ h ^= g ^ ((e << 3) & 0xFFFFFFFF)
2555	+ f ^= e ^ g
2556	+ g = rotr32(g, 3)
2557	+ e = rotr32(e, 13)
2558	+ t1 = (~e) % 0x100000000
2559	+ t2 = e ^ f
2560	+ t3 = t1 | t2
2561	+ t4 = h ^ t3
2562	+ t7 = h & t2
2563	+ t5 = g ^ t4
2564	+ t8 = t1 ^ t7
2565	+ c = t2 ^ t5
2566	+ t11 = e & t4
2567	+ t9 = c & t8
2568	+ t14 = t5 ^ t8
2569	+ b = t4 ^ t9
2570	+ t12 = t5 | b
2571	+ d = t11 ^ t12
2572	+ a = d ^ t14
2573	+ a ^= key[4 * 24 + 8]
2574	+ b ^= key[4 * 24 + 9]
2575	+ c ^= key[4 * 24 + 10]
2576	+ d ^= key[4 * 24 + 11]
2577	+ c = rotr32(c, 22)
2578	+ a = rotr32(a, 5)
2579	+ c ^= d ^ ((b << 7) & 0xFFFFFFFF)
2580	+ a ^= b ^ d
2581	+ d = rotr32(d, 7)
2582	+ b = rotr32(b, 1)
2583	+ d ^= c ^ ((a << 3) & 0xFFFFFFFF)
2584	+ b ^= a ^ c
2585	+ c = rotr32(c, 3)
2586	+ a = rotr32(a, 13)
2587	+ t1 = a & b;
2588	+ t2 = a | b;
2589	+ t3 = c | t1;
2590	+ t4 = d & t2;
2591	+ h = t3 ^ t4;
2592	+ t6 = (~d) % 0x100000000;
2593	+ t7 = b ^ t4;
2594	+ t8 = h ^ t6;
2595	+ t11 = c ^ t7;
2596	+ t9 = t7 | t8;
2597	+ f = a ^ t9;
2598	+ t12 = d | f;
2599	+ e = t11 ^ t12;
2600	+ t14 = a & h;
2601	+ t15 = t3 ^ f;
2602	+ t16 = e ^ t14;
2603	+ g = t15 ^ t16
2604	+ e ^= key[4 * 23 + 8]
2605	+ f ^= key[4 * 23 + 9]
2606	+ g ^= key[4 * 23 + 10]
2607	+ h ^= key[4 * 23 + 11]
2608	+ g = rotr32(g, 22)
2609	+ e = rotr32(e, 5)
2610	+ g ^= h ^ ((f << 7) & 0xFFFFFFFF)
2611	+ e ^= f ^ h
2612	+ h = rotr32(h, 7)
2613	+ f = rotr32(f, 1)
2614	+ h ^= g ^ ((e << 3) & 0xFFFFFFFF)
2615	+ f ^= e ^ g
2616	+ g = rotr32(g, 3)
2617	+ e = rotr32(e, 13)
2618	+ t1 = (~e) % 0x100000000;
2619	+ t2 = e ^ f;
2620	+ t3 = g ^ t2;
2621	+ t4 = g | t1;
2622	+ t5 = h ^ t4;
2623	+ t13 = h & t1;
2624	+ b = t3 ^ t5;
2625	+ t7 = t3 & t5;
2626	+ t8 = t2 ^ t7;
2627	+ t9 = f | t8;
2628	+ d = t5 ^ t9;
2629	+ t11 = f | d;
2630	+ a = t8 ^ t11;
2631	+ t14 = t3 ^ t11;
2632	+ c = t13 ^ t14
2633	+ a ^= key[4 * 22 + 8]
2634	+ b ^= key[4 * 22 + 9]
2635	+ c ^= key[4 * 22 + 10]
2636	+ d ^= key[4 * 22 + 11]
2637	+ c = rotr32(c, 22)
2638	+ a = rotr32(a, 5)
2639	+ c ^= d ^ ((b << 7) & 0xFFFFFFFF)
2640	+ a ^= b ^ d
2641	+ d = rotr32(d, 7)
2642	+ b = rotr32(b, 1)
2643	+ d ^= c ^ ((a << 3) & 0xFFFFFFFF)
2644	+ b ^= a ^ c
2645	+ c = rotr32(c, 3)
2646	+ a = rotr32(a, 13)
2647	+ t1 = (~c) % 0x100000000;
2648	+ t2 = b & t1;
2649	+ t3 = d ^ t2;
2650	+ t4 = a & t3;
2651	+ t5 = b ^ t1;
2652	+ h = t4 ^ t5;
2653	+ t7 = b | h;
2654	+ t8 = a & t7;
2655	+ f = t3 ^ t8;
2656	+ t10 = a | d;
2657	+ t11 = t1 ^ t7;
2658	+ e = t10 ^ t11;
2659	+ t13 = a ^ c;
2660	+ t14 = b & t10;
2661	+ t15 = t4 | t13;
2662	+ g = t14 ^ t15
2663	+ e ^= key[4 * 21 + 8]
2664	+ f ^= key[4 * 21 + 9]
2665	+ g ^= key[4 * 21 + 10]
2666	+ h ^= key[4 * 21 + 11]
2667	+ g = rotr32(g, 22)
2668	+ e = rotr32(e, 5)
2669	+ g ^= h ^ ((f << 7) & 0xFFFFFFFF)
2670	+ e ^= f ^ h
2671	+ h = rotr32(h, 7)
2672	+ f = rotr32(f, 1)
2673	+ h ^= g ^ ((e << 3) & 0xFFFFFFFF)
2674	+ f ^= e ^ g
2675	+ g = rotr32(g, 3)
2676	+ e = rotr32(e, 13)
2677	+ t1 = g ^ h;
2678	+ t2 = g | h;
2679	+ t3 = f ^ t2;
2680	+ t4 = e & t3;
2681	+ b = t1 ^ t4;
2682	+ t6 = e ^ h;
2683	+ t7 = f | h;
2684	+ t8 = t6 & t7;
2685	+ d = t3 ^ t8;
2686	+ t10 = (~e) % 0x100000000;
2687	+ t11 = g ^ d;
2688	+ t12 = t10 | t11;
2689	+ a = t3 ^ t12;
2690	+ t14 = g | t4;
2691	+ t15 = t7 ^ t14;
2692	+ t16 = d | t10;
2693	+ c = t15 ^ t16
2694	+ a ^= key[4 * 20 + 8]
2695	+ b ^= key[4 * 20 + 9]
2696	+ c ^= key[4 * 20 + 10]
2697	+ d ^= key[4 * 20 + 11]
2698	+ c = rotr32(c, 22)
2699	+ a = rotr32(a, 5)
2700	+ c ^= d ^ ((b << 7) & 0xFFFFFFFF)
2701	+ a ^= b ^ d
2702	+ d = rotr32(d, 7)
2703	+ b = rotr32(b, 1)
2704	+ d ^= c ^ ((a << 3) & 0xFFFFFFFF)
2705	+ b ^= a ^ c
2706	+ c = rotr32(c, 3)
2707	+ a = rotr32(a, 13)
2708	+ t1 = b ^ c;
2709	+ t2 = b | c;
2710	+ t3 = a ^ c;
2711	+ t7 = a ^ d;
2712	+ t4 = t2 ^ t3;
2713	+ t5 = d | t4;
2714	+ t9 = t2 ^ t7;
2715	+ e = t1 ^ t5;
2716	+ t8 = t1 | t5;
2717	+ t11 = a & t4;
2718	+ g = t8 ^ t9;
2719	+ t12 = e | t9;
2720	+ f = t11 ^ t12;
2721	+ t14 = a & g;
2722	+ t15 = t2 ^ t14;
2723	+ t16 = e & t15;
2724	+ h = t4 ^ t16
2725	+ e ^= key[4 * 19 + 8]
2726	+ f ^= key[4 * 19 + 9]
2727	+ g ^= key[4 * 19 + 10]
2728	+ h ^= key[4 * 19 + 11]
2729	+ g = rotr32(g, 22)
2730	+ e = rotr32(e, 5)
2731	+ g ^= h ^ ((f << 7) & 0xFFFFFFFF)
2732	+ e ^= f ^ h
2733	+ h = rotr32(h, 7)
2734	+ f = rotr32(f, 1)
2735	+ h ^= g ^ ((e << 3) & 0xFFFFFFFF)
2736	+ f ^= e ^ g
2737	+ g = rotr32(g, 3)
2738	+ e = rotr32(e, 13)
2739	+ t1 = f ^ h;
2740	+ t2 = (~t1) % 0x100000000;
2741	+ t3 = e ^ g;
2742	+ t4 = g ^ t1;
2743	+ t7 = e | t2;
2744	+ t5 = f & t4;
2745	+ t8 = h ^ t7;
2746	+ t11 = (~t4) % 0x100000000;
2747	+ a = t3 ^ t5;
2748	+ t9 = t3 | t8;
2749	+ t14 = h & t11;
2750	+ d = t1 ^ t9;
2751	+ t12 = a | d;
2752	+ b = t11 ^ t12;
2753	+ t15 = t3 ^ t12;
2754	+ c = t14 ^ t15
2755	+ a ^= key[4 * 18 + 8]
2756	+ b ^= key[4 * 18 + 9]
2757	+ c ^= key[4 * 18 + 10]
2758	+ d ^= key[4 * 18 + 11]
2759	+ c = rotr32(c, 22)
2760	+ a = rotr32(a, 5)
2761	+ c ^= d ^ ((b << 7) & 0xFFFFFFFF)
2762	+ a ^= b ^ d
2763	+ d = rotr32(d, 7)
2764	+ b = rotr32(b, 1)
2765	+ d ^= c ^ ((a << 3) & 0xFFFFFFFF)
2766	+ b ^= a ^ c
2767	+ c = rotr32(c, 3)
2768	+ a = rotr32(a, 13)
2769	+ t1 = a ^ d;
2770	+ t2 = a & b;
2771	+ t3 = b ^ c;
2772	+ t4 = a ^ t3;
2773	+ t5 = b | d;
2774	+ t7 = c | t1;
2775	+ h = t4 ^ t5;
2776	+ t8 = b ^ t7;
2777	+ t11 = (~t2) % 0x100000000;
2778	+ t9 = t4 & t8;
2779	+ f = t1 ^ t9;
2780	+ t13 = t9 ^ t11;
2781	+ t12 = h & f;
2782	+ g = t12 ^ t13;
2783	+ t15 = a & d;
2784	+ t16 = c ^ t13;
2785	+ e = t15 ^ t16
2786	+ e ^= key[4 * 17 + 8]
2787	+ f ^= key[4 * 17 + 9]
2788	+ g ^= key[4 * 17 + 10]
2789	+ h ^= key[4 * 17 + 11]
2790	+ g = rotr32(g, 22)
2791	+ e = rotr32(e, 5)
2792	+ g ^= h ^ ((f << 7) & 0xFFFFFFFF)
2793	+ e ^= f ^ h
2794	+ h = rotr32(h, 7)
2795	+ f = rotr32(f, 1)
2796	+ h ^= g ^ ((e << 3) & 0xFFFFFFFF)
2797	+ f ^= e ^ g
2798	+ g = rotr32(g, 3)
2799	+ e = rotr32(e, 13)
2800	+ t1 = (~e) % 0x100000000
2801	+ t2 = e ^ f
2802	+ t3 = t1 | t2
2803	+ t4 = h ^ t3
2804	+ t7 = h & t2
2805	+ t5 = g ^ t4
2806	+ t8 = t1 ^ t7
2807	+ c = t2 ^ t5
2808	+ t11 = e & t4
2809	+ t9 = c & t8
2810	+ t14 = t5 ^ t8
2811	+ b = t4 ^ t9
2812	+ t12 = t5 | b
2813	+ d = t11 ^ t12
2814	+ a = d ^ t14
2815	+ a ^= key[4 * 16 + 8]
2816	+ b ^= key[4 * 16 + 9]
2817	+ c ^= key[4 * 16 + 10]
2818	+ d ^= key[4 * 16 + 11]
2819	+ c = rotr32(c, 22)
2820	+ a = rotr32(a, 5)
2821	+ c ^= d ^ ((b << 7) & 0xFFFFFFFF)
2822	+ a ^= b ^ d
2823	+ d = rotr32(d, 7)
2824	+ b = rotr32(b, 1)
2825	+ d ^= c ^ ((a << 3) & 0xFFFFFFFF)
2826	+ b ^= a ^ c
2827	+ c = rotr32(c, 3)
2828	+ a = rotr32(a, 13)
2829	+ t1 = a & b;
2830	+ t2 = a | b;
2831	+ t3 = c | t1;
2832	+ t4 = d & t2;
2833	+ h = t3 ^ t4;
2834	+ t6 = (~d) % 0x100000000;
2835	+ t7 = b ^ t4;
2836	+ t8 = h ^ t6;
2837	+ t11 = c ^ t7;
2838	+ t9 = t7 | t8;
2839	+ f = a ^ t9;
2840	+ t12 = d | f;
2841	+ e = t11 ^ t12;
2842	+ t14 = a & h;
2843	+ t15 = t3 ^ f;
2844	+ t16 = e ^ t14;
2845	+ g = t15 ^ t16
2846	+ e ^= key[4 * 15 + 8]
2847	+ f ^= key[4 * 15 + 9]
2848	+ g ^= key[4 * 15 + 10]
2849	+ h ^= key[4 * 15 + 11]
2850	+ g = rotr32(g, 22)
2851	+ e = rotr32(e, 5)
2852	+ g ^= h ^ ((f << 7) & 0xFFFFFFFF)
2853	+ e ^= f ^ h
2854	+ h = rotr32(h, 7)
2855	+ f = rotr32(f, 1)
2856	+ h ^= g ^ ((e << 3) & 0xFFFFFFFF)
2857	+ f ^= e ^ g
2858	+ g = rotr32(g, 3)
2859	+ e = rotr32(e, 13)
2860	+ t1 = (~e) % 0x100000000;
2861	+ t2 = e ^ f;
2862	+ t3 = g ^ t2;
2863	+ t4 = g | t1;
2864	+ t5 = h ^ t4;
2865	+ t13 = h & t1;
2866	+ b = t3 ^ t5;
2867	+ t7 = t3 & t5;
2868	+ t8 = t2 ^ t7;
2869	+ t9 = f | t8;
2870	+ d = t5 ^ t9;
2871	+ t11 = f | d;
2872	+ a = t8 ^ t11;
2873	+ t14 = t3 ^ t11;
2874	+ c = t13 ^ t14
2875	+ a ^= key[4 * 14 + 8]
2876	+ b ^= key[4 * 14 + 9]
2877	+ c ^= key[4 * 14 + 10]
2878	+ d ^= key[4 * 14 + 11]
2879	+ c = rotr32(c, 22)
2880	+ a = rotr32(a, 5)
2881	+ c ^= d ^ ((b << 7) & 0xFFFFFFFF)
2882	+ a ^= b ^ d
2883	+ d = rotr32(d, 7)
2884	+ b = rotr32(b, 1)
2885	+ d ^= c ^ ((a << 3) & 0xFFFFFFFF)
2886	+ b ^= a ^ c
2887	+ c = rotr32(c, 3)
2888	+ a = rotr32(a, 13)
2889	+ t1 = (~c) % 0x100000000;
2890	+ t2 = b & t1;
2891	+ t3 = d ^ t2;
2892	+ t4 = a & t3;
2893	+ t5 = b ^ t1;
2894	+ h = t4 ^ t5;
2895	+ t7 = b | h;
2896	+ t8 = a & t7;
2897	+ f = t3 ^ t8;
2898	+ t10 = a | d;
2899	+ t11 = t1 ^ t7;
2900	+ e = t10 ^ t11;
2901	+ t13 = a ^ c;
2902	+ t14 = b & t10;
2903	+ t15 = t4 | t13;
2904	+ g = t14 ^ t15
2905	+ e ^= key[4 * 13 + 8]
2906	+ f ^= key[4 * 13 + 9]
2907	+ g ^= key[4 * 13 + 10]
2908	+ h ^= key[4 * 13 + 11]
2909	+ g = rotr32(g, 22)
2910	+ e = rotr32(e, 5)
2911	+ g ^= h ^ ((f << 7) & 0xFFFFFFFF)
2912	+ e ^= f ^ h
2913	+ h = rotr32(h, 7)
2914	+ f = rotr32(f, 1)
2915	+ h ^= g ^ ((e << 3) & 0xFFFFFFFF)
2916	+ f ^= e ^ g
2917	+ g = rotr32(g, 3)
2918	+ e = rotr32(e, 13)
2919	+ t1 = g ^ h;
2920	+ t2 = g | h;
2921	+ t3 = f ^ t2;
2922	+ t4 = e & t3;
2923	+ b = t1 ^ t4;
2924	+ t6 = e ^ h;
2925	+ t7 = f | h;
2926	+ t8 = t6 & t7;
2927	+ d = t3 ^ t8;
2928	+ t10 = (~e) % 0x100000000;
2929	+ t11 = g ^ d;
2930	+ t12 = t10 | t11;
2931	+ a = t3 ^ t12;
2932	+ t14 = g | t4;
2933	+ t15 = t7 ^ t14;
2934	+ t16 = d | t10;
2935	+ c = t15 ^ t16
2936	+ a ^= key[4 * 12 + 8]
2937	+ b ^= key[4 * 12 + 9]
2938	+ c ^= key[4 * 12 + 10]
2939	+ d ^= key[4 * 12 + 11]
2940	+ c = rotr32(c, 22)
2941	+ a = rotr32(a, 5)
2942	+ c ^= d ^ ((b << 7) & 0xFFFFFFFF)
2943	+ a ^= b ^ d
2944	+ d = rotr32(d, 7)
2945	+ b = rotr32(b, 1)
2946	+ d ^= c ^ ((a << 3) & 0xFFFFFFFF)
2947	+ b ^= a ^ c
2948	+ c = rotr32(c, 3)
2949	+ a = rotr32(a, 13)
2950	+ t1 = b ^ c;
2951	+ t2 = b | c;
2952	+ t3 = a ^ c;
2953	+ t7 = a ^ d;
2954	+ t4 = t2 ^ t3;
2955	+ t5 = d | t4;
2956	+ t9 = t2 ^ t7;
2957	+ e = t1 ^ t5;
2958	+ t8 = t1 | t5;
2959	+ t11 = a & t4;
2960	+ g = t8 ^ t9;
2961	+ t12 = e | t9;
2962	+ f = t11 ^ t12;
2963	+ t14 = a & g;
2964	+ t15 = t2 ^ t14;
2965	+ t16 = e & t15;
2966	+ h = t4 ^ t16
2967	+ e ^= key[4 * 11 + 8]
2968	+ f ^= key[4 * 11 + 9]
2969	+ g ^= key[4 * 11 + 10]
2970	+ h ^= key[4 * 11 + 11]
2971	+ g = rotr32(g, 22)
2972	+ e = rotr32(e, 5)
2973	+ g ^= h ^ ((f << 7) & 0xFFFFFFFF)
2974	+ e ^= f ^ h
2975	+ h = rotr32(h, 7)
2976	+ f = rotr32(f, 1)
2977	+ h ^= g ^ ((e << 3) & 0xFFFFFFFF)
2978	+ f ^= e ^ g
2979	+ g = rotr32(g, 3)
2980	+ e = rotr32(e, 13)
2981	+ t1 = f ^ h;
2982	+ t2 = (~t1) % 0x100000000;
2983	+ t3 = e ^ g;
2984	+ t4 = g ^ t1;
2985	+ t7 = e | t2;
2986	+ t5 = f & t4;
2987	+ t8 = h ^ t7;
2988	+ t11 = (~t4) % 0x100000000;
2989	+ a = t3 ^ t5;
2990	+ t9 = t3 | t8;
2991	+ t14 = h & t11;
2992	+ d = t1 ^ t9;
2993	+ t12 = a | d;
2994	+ b = t11 ^ t12;
2995	+ t15 = t3 ^ t12;
2996	+ c = t14 ^ t15
2997	+ a ^= key[4 * 10 + 8]
2998	+ b ^= key[4 * 10 + 9]
2999	+ c ^= key[4 * 10 + 10]
3000	+ d ^= key[4 * 10 + 11]
3001	+ c = rotr32(c, 22)
3002	+ a = rotr32(a, 5)
3003	+ c ^= d ^ ((b << 7) & 0xFFFFFFFF)
3004	+ a ^= b ^ d
3005	+ d = rotr32(d, 7)
3006	+ b = rotr32(b, 1)
3007	+ d ^= c ^ ((a << 3) & 0xFFFFFFFF)
3008	+ b ^= a ^ c
3009	+ c = rotr32(c, 3)
3010	+ a = rotr32(a, 13)
3011	+ t1 = a ^ d;
3012	+ t2 = a & b;
3013	+ t3 = b ^ c;
3014	+ t4 = a ^ t3;
3015	+ t5 = b | d;
3016	+ t7 = c | t1;
3017	+ h = t4 ^ t5;
3018	+ t8 = b ^ t7;
3019	+ t11 = (~t2) % 0x100000000;
3020	+ t9 = t4 & t8;
3021	+ f = t1 ^ t9;
3022	+ t13 = t9 ^ t11;
3023	+ t12 = h & f;
3024	+ g = t12 ^ t13;
3025	+ t15 = a & d;
3026	+ t16 = c ^ t13;
3027	+ e = t15 ^ t16
3028	+ e ^= key[4 * 9 + 8]
3029	+ f ^= key[4 * 9 + 9]
3030	+ g ^= key[4 * 9 + 10]
3031	+ h ^= key[4 * 9 + 11]
3032	+ g = rotr32(g, 22)
3033	+ e = rotr32(e, 5)
3034	+ g ^= h ^ ((f << 7) & 0xFFFFFFFF)
3035	+ e ^= f ^ h
3036	+ h = rotr32(h, 7)
3037	+ f = rotr32(f, 1)
3038	+ h ^= g ^ ((e << 3) & 0xFFFFFFFF)
3039	+ f ^= e ^ g
3040	+ g = rotr32(g, 3)
3041	+ e = rotr32(e, 13)
3042	+ t1 = (~e) % 0x100000000
3043	+ t2 = e ^ f
3044	+ t3 = t1 | t2
3045	+ t4 = h ^ t3
3046	+ t7 = h & t2
3047	+ t5 = g ^ t4
3048	+ t8 = t1 ^ t7
3049	+ c = t2 ^ t5
3050	+ t11 = e & t4
3051	+ t9 = c & t8
3052	+ t14 = t5 ^ t8
3053	+ b = t4 ^ t9
3054	+ t12 = t5 | b
3055	+ d = t11 ^ t12
3056	+ a = d ^ t14
3057	+ a ^= key[4 * 8 + 8]
3058	+ b ^= key[4 * 8 + 9]
3059	+ c ^= key[4 * 8 + 10]
3060	+ d ^= key[4 * 8 + 11]
3061	+ c = rotr32(c, 22)
3062	+ a = rotr32(a, 5)
3063	+ c ^= d ^ ((b << 7) & 0xFFFFFFFF)
3064	+ a ^= b ^ d
3065	+ d = rotr32(d, 7)
3066	+ b = rotr32(b, 1)
3067	+ d ^= c ^ ((a << 3) & 0xFFFFFFFF)
3068	+ b ^= a ^ c
3069	+ c = rotr32(c, 3)
3070	+ a = rotr32(a, 13)
3071	+ t1 = a & b;
3072	+ t2 = a | b;
3073	+ t3 = c | t1;
3074	+ t4 = d & t2;
3075	+ h = t3 ^ t4;
3076	+ t6 = (~d) % 0x100000000;
3077	+ t7 = b ^ t4;
3078	+ t8 = h ^ t6;
3079	+ t11 = c ^ t7;
3080	+ t9 = t7 | t8;
3081	+ f = a ^ t9;
3082	+ t12 = d | f;
3083	+ e = t11 ^ t12;
3084	+ t14 = a & h;
3085	+ t15 = t3 ^ f;
3086	+ t16 = e ^ t14;
3087	+ g = t15 ^ t16
3088	+ e ^= key[4 * 7 + 8]
3089	+ f ^= key[4 * 7 + 9]
3090	+ g ^= key[4 * 7 + 10]
3091	+ h ^= key[4 * 7 + 11]
3092	+ g = rotr32(g, 22)
3093	+ e = rotr32(e, 5)
3094	+ g ^= h ^ ((f << 7) & 0xFFFFFFFF)
3095	+ e ^= f ^ h
3096	+ h = rotr32(h, 7)
3097	+ f = rotr32(f, 1)
3098	+ h ^= g ^ ((e << 3) & 0xFFFFFFFF)
3099	+ f ^= e ^ g
3100	+ g = rotr32(g, 3)
3101	+ e = rotr32(e, 13)
3102	+ t1 = (~e) % 0x100000000;
3103	+ t2 = e ^ f;
3104	+ t3 = g ^ t2;
3105	+ t4 = g | t1;
3106	+ t5 = h ^ t4;
3107	+ t13 = h & t1;
3108	+ b = t3 ^ t5;
3109	+ t7 = t3 & t5;
3110	+ t8 = t2 ^ t7;
3111	+ t9 = f | t8;
3112	+ d = t5 ^ t9;
3113	+ t11 = f | d;
3114	+ a = t8 ^ t11;
3115	+ t14 = t3 ^ t11;
3116	+ c = t13 ^ t14
3117	+ a ^= key[4 * 6 + 8]
3118	+ b ^= key[4 * 6 + 9]
3119	+ c ^= key[4 * 6 + 10]
3120	+ d ^= key[4 * 6 + 11]
3121	+ c = rotr32(c, 22)
3122	+ a = rotr32(a, 5)
3123	+ c ^= d ^ ((b << 7) & 0xFFFFFFFF)
3124	+ a ^= b ^ d
3125	+ d = rotr32(d, 7)
3126	+ b = rotr32(b, 1)
3127	+ d ^= c ^ ((a << 3) & 0xFFFFFFFF)
3128	+ b ^= a ^ c
3129	+ c = rotr32(c, 3)
3130	+ a = rotr32(a, 13)
3131	+ t1 = (~c) % 0x100000000;
3132	+ t2 = b & t1;
3133	+ t3 = d ^ t2;
3134	+ t4 = a & t3;
3135	+ t5 = b ^ t1;
3136	+ h = t4 ^ t5;
3137	+ t7 = b | h;
3138	+ t8 = a & t7;
3139	+ f = t3 ^ t8;
3140	+ t10 = a | d;
3141	+ t11 = t1 ^ t7;
3142	+ e = t10 ^ t11;
3143	+ t13 = a ^ c;
3144	+ t14 = b & t10;
3145	+ t15 = t4 | t13;
3146	+ g = t14 ^ t15
3147	+ e ^= key[4 * 5 + 8]
3148	+ f ^= key[4 * 5 + 9]
3149	+ g ^= key[4 * 5 + 10]
3150	+ h ^= key[4 * 5 + 11]
3151	+ g = rotr32(g, 22)
3152	+ e = rotr32(e, 5)
3153	+ g ^= h ^ ((f << 7) & 0xFFFFFFFF)
3154	+ e ^= f ^ h
3155	+ h = rotr32(h, 7)
3156	+ f = rotr32(f, 1)
3157	+ h ^= g ^ ((e << 3) & 0xFFFFFFFF)
3158	+ f ^= e ^ g
3159	+ g = rotr32(g, 3)
3160	+ e = rotr32(e, 13)
3161	+ t1 = g ^ h;
3162	+ t2 = g | h;
3163	+ t3 = f ^ t2;
3164	+ t4 = e & t3;
3165	+ b = t1 ^ t4;
3166	+ t6 = e ^ h;
3167	+ t7 = f | h;
3168	+ t8 = t6 & t7;
3169	+ d = t3 ^ t8;
3170	+ t10 = (~e) % 0x100000000;
3171	+ t11 = g ^ d;
3172	+ t12 = t10 | t11;
3173	+ a = t3 ^ t12;
3174	+ t14 = g | t4;
3175	+ t15 = t7 ^ t14;
3176	+ t16 = d | t10;
3177	+ c = t15 ^ t16
3178	+ a ^= key[4 * 4 + 8]
3179	+ b ^= key[4 * 4 + 9]
3180	+ c ^= key[4 * 4 + 10]
3181	+ d ^= key[4 * 4 + 11]
3182	+ c = rotr32(c, 22)
3183	+ a = rotr32(a, 5)
3184	+ c ^= d ^ ((b << 7) & 0xFFFFFFFF)
3185	+ a ^= b ^ d
3186	+ d = rotr32(d, 7)
3187	+ b = rotr32(b, 1)
3188	+ d ^= c ^ ((a << 3) & 0xFFFFFFFF)
3189	+ b ^= a ^ c
3190	+ c = rotr32(c, 3)
3191	+ a = rotr32(a, 13)
3192	+ t1 = b ^ c;
3193	+ t2 = b | c;
3194	+ t3 = a ^ c;
3195	+ t7 = a ^ d;
3196	+ t4 = t2 ^ t3;
3197	+ t5 = d | t4;
3198	+ t9 = t2 ^ t7;
3199	+ e = t1 ^ t5;
3200	+ t8 = t1 | t5;
3201	+ t11 = a & t4;
3202	+ g = t8 ^ t9;
3203	+ t12 = e | t9;
3204	+ f = t11 ^ t12;
3205	+ t14 = a & g;
3206	+ t15 = t2 ^ t14;
3207	+ t16 = e & t15;
3208	+ h = t4 ^ t16
3209	+ e ^= key[4 * 3 + 8]
3210	+ f ^= key[4 * 3 + 9]
3211	+ g ^= key[4 * 3 + 10]
3212	+ h ^= key[4 * 3 + 11]
3213	+ g = rotr32(g, 22)
3214	+ e = rotr32(e, 5)
3215	+ g ^= h ^ ((f << 7) & 0xFFFFFFFF)
3216	+ e ^= f ^ h
3217	+ h = rotr32(h, 7)
3218	+ f = rotr32(f, 1)
3219	+ h ^= g ^ ((e << 3) & 0xFFFFFFFF)
3220	+ f ^= e ^ g
3221	+ g = rotr32(g, 3)
3222	+ e = rotr32(e, 13)
3223	+ t1 = f ^ h;
3224	+ t2 = (~t1) % 0x100000000;
3225	+ t3 = e ^ g;
3226	+ t4 = g ^ t1;
3227	+ t7 = e | t2;
3228	+ t5 = f & t4;
3229	+ t8 = h ^ t7;
3230	+ t11 = (~t4) % 0x100000000;
3231	+ a = t3 ^ t5;
3232	+ t9 = t3 | t8;
3233	+ t14 = h & t11;
3234	+ d = t1 ^ t9;
3235	+ t12 = a | d;
3236	+ b = t11 ^ t12;
3237	+ t15 = t3 ^ t12;
3238	+ c = t14 ^ t15
3239	+ a ^= key[4 * 2 + 8]
3240	+ b ^= key[4 * 2 + 9]
3241	+ c ^= key[4 * 2 + 10]
3242	+ d ^= key[4 * 2 + 11]
3243	+ c = rotr32(c, 22)
3244	+ a = rotr32(a, 5)
3245	+ c ^= d ^ ((b << 7) & 0xFFFFFFFF)
3246	+ a ^= b ^ d
3247	+ d = rotr32(d, 7)
3248	+ b = rotr32(b, 1)
3249	+ d ^= c ^ ((a << 3) & 0xFFFFFFFF)
3250	+ b ^= a ^ c
3251	+ c = rotr32(c, 3)
3252	+ a = rotr32(a, 13)
3253	+ t1 = a ^ d;
3254	+ t2 = a & b;
3255	+ t3 = b ^ c;
3256	+ t4 = a ^ t3;
3257	+ t5 = b | d;
3258	+ t7 = c | t1;
3259	+ h = t4 ^ t5;
3260	+ t8 = b ^ t7;
3261	+ t11 = (~t2) % 0x100000000;
3262	+ t9 = t4 & t8;
3263	+ f = t1 ^ t9;
3264	+ t13 = t9 ^ t11;
3265	+ t12 = h & f;
3266	+ g = t12 ^ t13;
3267	+ t15 = a & d;
3268	+ t16 = c ^ t13;
3269	+ e = t15 ^ t16
3270	+ e ^= key[4 * 1 + 8]
3271	+ f ^= key[4 * 1 + 9]
3272	+ g ^= key[4 * 1 + 10]
3273	+ h ^= key[4 * 1 + 11]
3274	+ g = rotr32(g, 22)
3275	+ e = rotr32(e, 5)
3276	+ g ^= h ^ ((f << 7) & 0xFFFFFFFF)
3277	+ e ^= f ^ h
3278	+ h = rotr32(h, 7)
3279	+ f = rotr32(f, 1)
3280	+ h ^= g ^ ((e << 3) & 0xFFFFFFFF)
3281	+ f ^= e ^ g
3282	+ g = rotr32(g, 3)
3283	+ e = rotr32(e, 13)
3284	+ t1 = (~e) % 0x100000000
3285	+ t2 = e ^ f
3286	+ t3 = t1 | t2
3287	+ t4 = h ^ t3
3288	+ t7 = h & t2
3289	+ t5 = g ^ t4
3290	+ t8 = t1 ^ t7
3291	+ c = t2 ^ t5
3292	+ t11 = e & t4
3293	+ t9 = c & t8
3294	+ t14 = t5 ^ t8
3295	+ b = t4 ^ t9
3296	+ t12 = t5 | b
3297	+ d = t11 ^ t12
3298	+ a = d ^ t14
3299	+ a ^= key[4 * 0 + 8]
3300	+ b ^= key[4 * 0 + 9]
3301	+ c ^= key[4 * 0 + 10]
3302	+ d ^= key[4 * 0 + 11]
3303	+ if WORD_BIGENDIAN:
3304	+ a = byteswap32(a)
3305	+ b = byteswap32(b)
3306	+ c = byteswap32(c)
3307	+ d = byteswap32(d)
3308	+ in_blk[0] = a
3309	+ in_blk[1] = b
3310	+ in_blk[2] = c
3311	+ in_blk[3] = d
3312	+
3313	+__testkey = '\x00\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f'
3314	+__testdat = '\x00\x01\x02\x03\x04\x05\x06\x07\x08\t\n\x0b\x0c\r\x0e\x0f'
3315	+assert '\xde&\x9f\xf83\xe42\xb8[.\x88\xd2p\x1c\xe7\\' == Serpent(__testkey).encrypt(__testdat)
3316	+assert __testdat == Serpent(__testkey).decrypt('\xde&\x9f\xf83\xe42\xb8[.\x88\xd2p\x1c\xe7\\')
3317	+
3318	+#CBC Encrypt - Jason Reaves
3319	+def serpent_cbc_encrypt(key, data, iv='\x00'*16):
3320	+ out = ""
3321	+ last = iv
3322	+ for i in range((len(data)/16)):
3323	+ temp = data[i*16:(i+1)*16]
3324	+ to_encode = ""
3325	+ for j in range(4):
3326	+ temp1 = struct.unpack_from('<I', temp[j*4:])[0]
3327	+ temp2 = struct.unpack_from('<I', last[j*4:])[0]
3328	+ to_encode += struct.pack('<I',((temp1 ^ temp2) & 0xffffffff))
3329	+ last= Serpent(key).encrypt(to_encode)
3330	+ out += last
3331	+ #print(binascii.hexlify(Serpent(key).encrypt(data)))
3332	+ return out
3333	+
3334	+#CBC Decrypt - Jason Reaves
3335	+def serpent_cbc_decrypt(key,data,iv='\x00'*16):
3336	+ out2 = ""
3337	+ last = iv
3338	+ for i in range((len(data)/16)):
3339	+ temp = Serpent(key).decrypt(data[i*16:(i+1)*16])
3340	+ to_decode = ""
3341	+ for j in range(4):
3342	+ temp1 = struct.unpack_from('<I', temp[j*4:])[0]
3343	+ temp2 = struct.unpack_from('<I', last[j*4:])[0]
3344	+ to_decode += struct.pack('<I',((temp1 ^ temp2) & 0xffffffff))
3345	+ out2 += to_decode
3346	+ last = data[i*16:(i+1)*16]
3347	+ return out2
3348	diff --git a/lib/server.py b/lib/server.py
3349	index 38bf514..a248f1a 100644
3350	--- a/lib/server.py
3351	+++ b/lib/server.py
3352	@@ -167,10 +167,9 @@ class Server(object):
3353	if x == udp_server_socket:
3354	bytes_address_pair = udp_server_socket.recvfrom(PACKET_SIZE)
3355	message = bytes_address_pair[0]
3356	- address = bytes_address_pair[1]
3357	- print message
3358	+ address = bytes_address_pair[1][0]
3359	for c in self.clients:
3360	- self.clients[c].udp_data_received(message)
3361	+ self.clients[c].udp_data_received(address, message)
3362	for x in iwtd:
3363	if x in self.clients:
3364	self.clients[x].socket_readable_notification()
3365