#!/usr/bin/python3
# -*- coding: utf-8 -*-
# (c) B.Kerler 2018-2025 GPLv3 License
import logging
import os
from struct import pack, unpack
from mtkclient.Library.gui_utils import LogBase, logsetup
from mtkclient.Library.cryptutils import CryptUtils

CustomSeed = bytes.fromhex("00be13bb95e218b53d07a089cb935255294f70d4088f3930350bc636cc49c9025ece7a62c292853ef55b23a6e" +
                           "f7b7464c7f3f2a74ae919416d6b4d9c1d6809655dd82d43d65999cf041a386e1c0f1e58849d8ed09ef07e6a9f" +
                           "0d7d3b8dad6cbae4668a2fd53776c3d26f88b0bf617c8112b8b1a871d322d9513491e07396e1638090055f4b8" +
                           "b9aa2f4ec24ebaeb917e81f468783ea771b278614cd5779a3ca50df5cc5af0edc332e2b69b2b42154bcfffd0a" +
                           "f13ce5a467abb7fb107fe794f928da44b6db7215aa53bd0398e3403126fad1f7de2a56edfe474c5a06f8dd9bc" +
                           "0b3422c45a9a132e64e48fcacf63f787560c4c89701d7c125118c20a5ee820c3a16")

g_aes_swotp = [0x7D4F7A57, 0x6025FC1D, 0xE2A78AFC, 0x98347309, 0xDDBC43BD, 0x2425A444, 0xEF7F1ACB, 0x70131C4F]
g_UnqKey_Fixed_Pattern = [0x13EE5220, 0xA506CEDB, 0x51CCE623, 0xF7AB9BDF, 0xEEF8D525,
                          0xD80784B0, 0x78C4E975, 0xCB8B87BF, 0xB3FDF30F, 0x7CDBE782,
                          0xBF72F9A, 0xA0B20DCE, 0x3A3E3A21, 0x2ABA4790, 0x1F6EA02D,
                          0xCE26F757, 0x1098DD15, 0xD4109E9B, 0x8A5FE074, 0xD27BD9DF,
                          0xA586450C, 0x8A026299, 0x390ADFA1, 0x940F7F3D, 0x93E6269,
                          0x38C2A28D, 0x10C2414D, 0xFECC8536, 0x394DBD6, 0x20E6A02,
                          0x82C5F911, 0x6793A052, 0x9FB5E17B, 0x816A8DDB, 0x999F7D67,
                          0xFC96CC27, 0xFC96CC27, 0x8CC0FB7D, 0x9969AC67, 0x26CA6E33]

g_UnqKey_IV = [0x6786CFBD, 0x44B7F1E0, 0x1544B07B, 0x53A28EB3, 0xD7AB8AA2, 0xB9E30E7E, 0x172156E0, 0x3064C973]


# SEJ = Security Engine for JTAG protection

def bytes_to_dwords(buf):
    res = []
    for i in range(0, len(buf) // 4):
        res.append(unpack("<I", buf[i * 4:(i * 4) + 4])[0])
    return res


class SymKey:
    key = None
    key_len = 0x10
    mode = 1
    iv = None


AES_CBC_MODE = 1
AES_SW_KEY = 0
AES_HW_KEY = 1
AES_HW_WRAP_KEY = 2
AES_KEY_128 = 16
AES_KEY_256 = 32


class sej_cryptmode:
    SW_ENCRYPTED = 0
    HW_ENCRYPTED = 1
    HW_ENCRYPTED_5G = 2
    UNLOCK = 3


regval = {
    "HACC_CON": 0x0000,
    "HACC_ACON": 0x0004,
    "HACC_ACON2": 0x0008,
    "HACC_ACONK": 0x000C,
    "HACC_ASRC0": 0x0010,
    "HACC_ASRC1": 0x0014,
    "HACC_ASRC2": 0x0018,
    "HACC_ASRC3": 0x001C,
    "HACC_AKEY0": 0x0020,
    "HACC_AKEY1": 0x0024,
    "HACC_AKEY2": 0x0028,
    "HACC_AKEY3": 0x002C,
    "HACC_AKEY4": 0x0030,
    "HACC_AKEY5": 0x0034,
    "HACC_AKEY6": 0x0038,
    "HACC_AKEY7": 0x003C,
    "HACC_ACFG0": 0x0040,
    "HACC_ACFG1": 0x0044,
    "HACC_ACFG2": 0x0048,
    "HACC_ACFG3": 0x004C,
    "HACC_AOUT0": 0x0050,
    "HACC_AOUT1": 0x0054,
    "HACC_AOUT2": 0x0058,
    "HACC_AOUT3": 0x005C,
    "HACC_SW_OTP0": 0x0060,
    "HACC_SW_OTP1": 0x0064,
    "HACC_SW_OTP2": 0x0068,
    "HACC_SW_OTP3": 0x006c,
    "HACC_SW_OTP4": 0x0070,
    "HACC_SW_OTP5": 0x0074,
    "HACC_SW_OTP6": 0x0078,
    "HACC_SW_OTP7": 0x007c,
    "HACC_SECINIT0": 0x0080,
    "HACC_SECINIT1": 0x0084,
    "HACC_SECINIT2": 0x0088,
    "HACC_MKJ": 0x00a0,
    "HACC_UNK": 0x00bc
}


class HaccReg:
    def __init__(self, setup):
        self.sej_base = setup.sej_base
        self.read32 = setup.read32
        self.write32 = setup.write32

    def __setattr__(self, key, value):
        if key in ("sej_base", "read32", "write32", "regval"):
            return super(HaccReg, self).__setattr__(key, value)
        if key in regval:
            addr = regval[key] + self.sej_base
            return self.write32(addr, value)
        else:
            return super(HaccReg, self).__setattr__(key, value)

    def __getattribute__(self, item):
        if item in ("sej_base", "read32", "write32", "regval"):
            return super(HaccReg, self).__getattribute__(item)
        if item in regval:
            addr = regval[item] + self.sej_base
            return self.read32(addr)
        else:
            return super(HaccReg, self).__getattribute__(item)


class Sej(metaclass=LogBase):
    encrypt = True

    HACC_AES_DEC = 0x00000000
    HACC_AES_ENC = 0x00000001
    HACC_AES_MODE_MASK = 0x00000002
    HACC_AES_ECB = 0x00000000
    HACC_AES_CBC = 0x00000002
    HACC_AES_TYPE_MASK = 0x00000030
    HACC_AES_128 = 0x00000000
    HACC_AES_192 = 0x00000010
    HACC_AES_256 = 0x00000020
    HACC_AES_CHG_BO_MASK = 0x00001000
    HACC_AES_CHG_BO_OFF = 0x00000000
    HACC_AES_CHG_BO_ON = 0x00001000
    HACC_AES_START = 0x00000001
    HACC_AES_CLR = 0x00000002
    HACC_AES_RDY = 0x00008000

    HACC_AES_BK2C = 0x00000010
    HACC_AES_R2K = 0x00000100

    HACC_SECINIT0_MAGIC = 0xAE0ACBEA
    HACC_SECINIT1_MAGIC = 0xCD957018
    HACC_SECINIT2_MAGIC = 0x46293911

    # This seems to be fixed
    g_CFG_RANDOM_PATTERN = [
        0x2D44BB70,
        0xA744D227,
        0xD0A9864B,
        0x83FFC244,
        0x7EC8266B,
        0x43E80FB2,
        0x01A6348A,
        0x2067F9A0,
        0x54536405,
        0xD546A6B1,
        0x1CC3EC3A,
        0xDE377A83
    ]

    g_HACC_CFG_1 = [
        0x9ED40400, 0x00E884A1, 0xE3F083BD, 0x2F4E6D8A,
        0xFF838E5C, 0xE940A0E3, 0x8D4DECC6, 0x45FC0989
    ]

    g_HACC_CFG_2 = [
        0xAA542CDA, 0x55522114, 0xE3F083BD, 0x55522114,
        0xAA542CDA, 0xAA542CDA, 0x55522114, 0xAA542CDA
    ]

    g_HACC_CFG_3 = [
        0x2684B690, 0xEB67A8BE, 0xA113144C, 0x177B1215,
        0x168BEE66, 0x1284B684, 0xDF3BCE3A, 0x217F6FA2
    ]

    g_HACC_CFG_MTEE = [
        0x9ED40400, 0xE884A1, 0xE3F083BD, 0x2F4E6D8A
    ]

    def __init__(self, setup, loglevel=logging.INFO):
        self.__logger, self.info, self.debug, self.warning, self.error = logsetup(self, self.__logger,
                                                                                  loglevel, None)
        self.hwcode = setup.hwcode
        self.reg = HaccReg(setup)
        # mediatek,hacc, mediatek,sej
        self.sej_base = setup.sej_base
        self.read32 = setup.read32
        self.write32 = setup.write32
        if loglevel == logging.DEBUG:
            logfilename = os.path.join("logs", "log.txt")
            fh = logging.FileHandler(logfilename, encoding='utf-8')
            self.__logger.addHandler(fh)
            self.__logger.setLevel(logging.DEBUG)
        else:
            self.__logger.setLevel(logging.INFO)

    @staticmethod
    def uffs(x):
        v1 = x
        if x & 0xFFFF:
            result = 1
        else:
            v1 >>= 16
            result = 17
        if not v1 & 0xFF:
            v1 >>= 8
            result += 8
        if not ((v1 << 28) & 0xFFFFFFFF):
            v1 >>= 4
            result += 4
        if not ((v1 << 30) & 0xFFFFFFFF):
            v1 >>= 2
            result += 2
        if not v1 & 1:
            result += 1
        return result

    def tz_dapc_set_master_transaction(self, master_index, permission_control):
        t = 1 << master_index
        v = self.read32(0x10007500) & ~t
        if t:
            t = self.uffs(t)
        val = v | permission_control << (t - 1)
        self.write32(0x10007500, val)
        return t

    def crypto_secure(self, val):
        if val:
            self.write32(0x10216024, 0x20002)
        else:
            self.write32(0x10216024, 0x0)

    def device_apc_dom_setup(self):
        self.write32(0x10007F00, 0)
        tv = self.read32(0x10007400) & 0xFFFFFFFF
        self.write32(0x10007400, tv | (1 << (self.uffs(0xF0000000) - 1)))
        # tv_0 =
        self.read32(0x10007400) & 0xF0FFFFFF
        self.write32(0x10007400, tv | (2 << (self.uffs(0xF0000000) - 1)))

    def sej_set_mode(self, mode):
        self.reg.HACC_ACON = self.reg.HACC_ACON & ((~2) & 0xFFFFFFFF)
        if mode == 1:  # CBC
            self.reg.HACC_ACON |= 2

    def get_world_clock_value(self):
        return self.read32(0x10017008)

    def check_timeout(self, clockvalue, timeout=200):
        tmp = -clockvalue
        curtime = self.read32(0x10017008)
        if curtime < clockvalue:
            tmp = ~clockvalue
        return tmp + self.read32(0x10017008) >= timeout * 1000 * 13

    def sej_samsung_keygen(self, level):
        for i in range(0, 0xA0 // 4, 0x10 // 4):
            g_UnqKey_Fixed_Pattern[i] = (g_UnqKey_Fixed_Pattern[i] & 0xFFFFFF00) | level
        buf = b"".join(int.to_bytes(x, 4, 'little') for x in g_UnqKey_Fixed_Pattern)
        self.sej_samsung_special(aes256=True)
        seed = b"".join(int.to_bytes(x, 4, 'little') for x in g_UnqKey_IV)
        aes_gcm_key = self.sst_secure_algo_with_level(encrypt=True, buf=buf, m_sst_type=0x65, unlock=False,
                                                      legacyxor=True, seed=seed)
        return aes_gcm_key

    def sej_samsung_special(self, aes256: bool = True):
        x = 1
        self.reg.HACC_AKEY0 = 0
        self.reg.HACC_AKEY1 = 0
        self.reg.HACC_AKEY2 = 0
        self.reg.HACC_AKEY3 = 0
        self.reg.HACC_AKEY4 = 0
        self.reg.HACC_AKEY5 = 0
        self.reg.HACC_AKEY6 = 0
        self.reg.HACC_AKEY7 = 0
        self.sej_set_otp(g_aes_swotp)

        self.reg.HACC_ACON = x
        self.reg.HACC_ACONK = 0
        self.reg.HACC_SECINIT0 = x
        self.reg.HACC_AKEY0 = 0
        self.reg.HACC_AKEY1 = 0
        self.reg.HACC_AKEY2 = 0
        self.reg.HACC_AKEY3 = 0
        self.reg.HACC_AKEY4 = 0
        self.reg.HACC_AKEY5 = 0
        self.reg.HACC_AKEY6 = 0
        self.reg.HACC_AKEY7 = 0
        if aes256:
            self.reg.HACC_ACON = 0x23
        else:
            self.reg.HACC_ACON = 3
        self.reg.HACC_SECINIT0 |= 2
        self.reg.HACC_ACON2 = 0x40000002
        while self.toSigned32(self.reg.HACC_ACON2) >= 0:
            continue
        self.reg.HACC_ACON2 = 2
        self.reg.HACC_ACON = x
        self.reg.HACC_ACONK = 0
        self.reg.HACC_SECINIT0 = x

        self.sej_set_otp(g_aes_swotp)
        return

    def SST_SEJ_Derive_AES_128_Key(self, pattern):
        self.reg.HACC_AKEY0 = 0
        self.reg.HACC_AKEY1 = 0
        self.reg.HACC_AKEY2 = 0
        self.reg.HACC_AKEY3 = 0
        self.reg.HACC_AKEY4 = 0
        self.reg.HACC_AKEY5 = 0
        self.reg.HACC_AKEY6 = 0
        self.reg.HACC_AKEY7 = 0
        self.reg.HACC_SECINIT0 = 1
        self.reg.HACC_ACON = 3
        self.reg.HACC_ACONK = 0x110
        self.reg.HACC_ACON2 = 2
        self.reg.HACC_ACFG0 = g_UnqKey_IV[0]
        self.reg.HACC_ACFG1 = g_UnqKey_IV[1]
        self.reg.HACC_ACFG2 = g_UnqKey_IV[2]
        self.reg.HACC_ACFG3 = g_UnqKey_IV[3]
        self.reg.HACC_AOUT0 = g_UnqKey_IV[4]
        self.reg.HACC_AOUT1 = g_UnqKey_IV[5]
        self.reg.HACC_AOUT2 = g_UnqKey_IV[6]
        self.reg.HACC_AOUT3 = g_UnqKey_IV[7]
        key = self.HACC_V3_Run(pattern)
        self.reg.HACC_ACON2 = 2
        self.reg.HACC_ACON = 0
        self.reg.HACC_ACONK = 0
        return key

    def toSigned32(self, n):
        n = n & 0xffffffff
        return n | (-(n & 0x80000000))

    def SST_SEJ_Derive_AES_Key_KDF_Key(self, pattern, aes256):  # SST_ChipRK_Init
        self.reg.HACC_AKEY0 = 0
        self.reg.HACC_AKEY1 = 0
        self.reg.HACC_AKEY2 = 0
        self.reg.HACC_AKEY3 = 0
        self.reg.HACC_AKEY4 = 0
        self.reg.HACC_AKEY5 = 0
        self.reg.HACC_AKEY6 = 0
        self.reg.HACC_AKEY7 = 0
        self.sej_set_otp(g_aes_swotp)
        if not aes256:
            self.reg.HACC_ACON = self.HACC_AES_CHG_BO_OFF | self.HACC_AES_128 | self.HACC_AES_CBC | self.HACC_AES_ENC  # 3
        else:
            self.reg.HACC_ACON = self.HACC_AES_CHG_BO_OFF | self.HACC_AES_128 | self.HACC_AES_CBC | self.HACC_AES_ENC | 0x20
        self.reg.HACC_SECINIT0 |= 2
        self.reg.HACC_ACON2 |= (0x40000000 | self.HACC_AES_CLR)
        clockvalue = self.get_world_clock_value()
        while self.toSigned32(self.reg.HACC_ACON2) >= 0:
            if self.check_timeout(clockvalue=clockvalue, timeout=200):
                return 0x4005
        self.reg.HACC_SECINIT0 &= 0xfffffffe
        self.reg.HACC_ACONK = self.HACC_AES_R2K | self.HACC_AES_BK2C  # 0x110
        self.reg.HACC_ACFG0 = g_UnqKey_IV[0]
        self.reg.HACC_ACFG1 = g_UnqKey_IV[1]
        self.reg.HACC_ACFG2 = g_UnqKey_IV[2]
        self.reg.HACC_ACFG3 = g_UnqKey_IV[3]
        self.reg.HACC_AOUT0 = g_UnqKey_IV[4]
        self.reg.HACC_AOUT1 = g_UnqKey_IV[5]
        self.reg.HACC_AOUT2 = g_UnqKey_IV[6]
        self.reg.HACC_AOUT3 = g_UnqKey_IV[7]

        self.HACC_V3_Run(pattern)
        self.sej_set_otp(g_aes_swotp)
        self.reg.HACC_ACON2 = 2
        self.reg.HACC_ACON = 0
        self.reg.HACC_ACONK = 0

    def SST_SSF_Init(self, m_sst_type):
        if m_sst_type & 0x20 != 0:
            self.sej_set_otp(g_aes_swotp)
            key = self.SST_SEJ_Derive_AES_128_Key(g_UnqKey_Fixed_Pattern)
            self.SST_SEJ_Derive_AES_Key_KDF_Key(g_UnqKey_Fixed_Pattern, (m_sst_type & 0x40) != 0)
            return key
        return b""

    def crypto_meta_hw(self, m_sst_type, otp, unlock, data, encrypt, samsung=False):
        if unlock:
            m_sst_type = 0x64
        if samsung:
            self.sej_samsung_keygen(level=7)
            self.sej_samsung_special(aes256=True)
        else:
            self.sej_set_otp(otp)
            self.SST_SSF_Init(m_sst_type)
            self.sej_set_otp(otp)

        aes_top_legacy = (m_sst_type & 1)
        _ = aes_top_legacy
        if m_sst_type & 0x10 != 0:
            ret_dec = self.sst_secure_algo_with_level(data, encrypt=encrypt, legacyxor=True, m_sst_type=m_sst_type,
                                                      unlock=unlock)
        else:
            ret_dec = self.sst_secure_algo_with_level(data, encrypt=encrypt, legacyxor=True, m_sst_type=m_sst_type,
                                                      unlock=unlock)
            ret_enc = self.sst_secure_algo_with_level(ret_dec, encrypt=not encrypt, legacyxor=True,
                                                      m_sst_type=m_sst_type, unlock=unlock)
            if ret_enc != data:
                return b""

        return ret_dec

    def sej_set_key(self, key, flag, data=None):
        # 0 uses software key (sml_aes_key)
        # 1 uses Real HW Crypto Key
        # 2 uses 32 byte hw derived key from sw key
        # 3 uses 32 byte hw derived key from rid
        # 4 uses custom key (customer key ?)
        klen = 0x10
        if flag == 0x18:
            klen = 0x10
        elif flag == 0x20:
            klen = 0x20
        self.write32(0x109E64, klen)
        self.reg.HACC_ACON = (self.reg.HACC_ACON & 0xFFFFFFCF) | klen
        self.reg.HACC_AKEY0 = 0
        self.reg.HACC_AKEY1 = 0
        self.reg.HACC_AKEY2 = 0
        self.reg.HACC_AKEY3 = 0
        self.reg.HACC_AKEY4 = 0
        self.reg.HACC_AKEY5 = 0
        self.reg.HACC_AKEY6 = 0
        self.reg.HACC_AKEY7 = 0

        if key == 1:
            self.reg.HACC_ACONK |= 0x10
        else:
            # Key has to be converted to be big endian
            keydata = [0, 0, 0, 0, 0, 0, 0, 0]
            for i in range(0, len(data), 4):
                keydata[i // 4] = unpack(">I", data[i:i + 4])[0]
            self.reg.HACC_AKEY0 = keydata[0]
            self.reg.HACC_AKEY1 = keydata[1]
            self.reg.HACC_AKEY2 = keydata[2]
            self.reg.HACC_AKEY3 = keydata[3]
            self.reg.HACC_AKEY4 = keydata[4]
            self.reg.HACC_AKEY5 = keydata[5]
            self.reg.HACC_AKEY6 = keydata[6]
            self.reg.HACC_AKEY7 = keydata[7]

    def tz_pre_init(self):
        # self.device_APC_dom_setup()
        # self.tz_dapc_set_master_transaction(4,1)
        # self.crypto_secure(1)
        return

    def HACC_V3_Run(self, data, noread: bool = False, legacy: bool = False, attr=0, sej_param=0):
        pdst = bytearray()
        if isinstance(data, list):
            psrc = data
        else:
            psrc = bytes_to_dwords(data)
        plen = len(psrc)
        if legacy:
            if (attr & 8) != 0 and (sej_param & 2) != 0:
                self.reg.HACC_ACONK |= self.HACC_AES_R2K
            else:
                self.reg.HACC_ACONK &= 0xFFFFFEFF
        pos = 0
        for i in range(plen // 4):
            self.reg.HACC_ASRC0 = psrc[pos + 0]
            self.reg.HACC_ASRC1 = psrc[pos + 1]
            self.reg.HACC_ASRC2 = psrc[pos + 2]
            self.reg.HACC_ASRC3 = psrc[pos + 3]
            self.reg.HACC_ACON2 = self.HACC_AES_START
            i = 0
            while i < 20:
                if self.reg.HACC_ACON2 & self.HACC_AES_RDY != 0:
                    break
                i += 1
            if i == 20:
                self.error("SEJ Hardware seems not to be configured correctly. Results may be wrong.")
            if not noread:
                pdst.extend(pack("<I", self.reg.HACC_AOUT0))
                pdst.extend(pack("<I", self.reg.HACC_AOUT1))
                pdst.extend(pack("<I", self.reg.HACC_AOUT2))
                pdst.extend(pack("<I", self.reg.HACC_AOUT3))
            pos += 4
        return pdst

    def HACC_V3_Terminate(self):
        self.HACC_ACON2 = self.HACC_AES_CLR
        self.HACC_AKEY0 = 0
        self.HACC_AKEY1 = 0
        self.HACC_AKEY2 = 0
        self.HACC_AKEY3 = 0
        self.HACC_AKEY4 = 0
        self.HACC_AKEY5 = 0
        self.HACC_AKEY6 = 0
        self.HACC_AKEY7 = 0

    """
    def sej_aes_hw_init(self, attr, key: SymKey, sej_param=3):
        # key.mode 0 = ECB
        # key.mode 1 = CBC
        if key.key is None:
            key.key = b""
        if attr << 31 and sej_param << 31:
            if key.key is None:
                return 0x6001
        if key.iv is None and key.mode == 1:
            return 0x6002

        self.reg.HACC_SECINIT0 = 1
        if attr & 1 == 0 or sej_param & 1 != 0:
            acon_setting = self.HACC_AES_128
        elif len(key.key) == 0x18:
            acon_setting = self.HACC_AES_192
        elif len(key.key) == 0x20:
            acon_setting = self.HACC_AES_256
        else:
            acon_setting = self.HACC_AES_192
        if key.mode:
            acon_setting |= self.HACC_AES_CBC
        self.reg.HACC_ACON = acon_setting
        """"""
        if m_src_addr<<30 or m_dst_addr << 30:
            return 0x6007
        if not m_src_len:
            return 0x600A
        if m_src_len != m_dst_len:
            return 0x6000
        if m_src_len << 29:
            return 0x6032
        memset(outbuf,0,0x20)
        if attr&4 == 0:
           CP_Power_On_SEJ_HW(1)
        """"""

        if attr & 1 != 0:
            self.reg.HACC_AKEY0 = 0
            self.reg.HACC_AKEY1 = 0
            self.reg.HACC_AKEY2 = 0
            self.reg.HACC_AKEY3 = 0
            self.reg.HACC_AKEY4 = 0
            self.reg.HACC_AKEY5 = 0
            self.reg.HACC_AKEY6 = 0
            self.reg.HACC_AKEY7 = 0
            if sej_param & 1 != 0:
                self.reg.HACC_ACONK = self.HACC_AES_BK2C
            else:
                keydata = [0, 0, 0, 0, 0, 0, 0, 0]
                for i in range(0, len(key.key), 4):
                    keydata[i // 4] = unpack(">I", key.key[i:i + 4])[0]
                if len(key.key) >= 8:
                    self.reg.HACC_AKEY0 = keydata[0]
                    self.reg.HACC_AKEY1 = keydata[1]
                if len(key.key) >= 16:
                    self.reg.HACC_AKEY2 = keydata[2]
                    self.reg.HACC_AKEY3 = keydata[3]
                if len(key.key) >= 24:
                    self.reg.HACC_AKEY4 = keydata[4]
                    self.reg.HACC_AKEY5 = keydata[5]
                if len(key.key) >= 32:
                    self.reg.HACC_AKEY6 = keydata[6]
                    self.reg.HACC_AKEY7 = keydata[7]
        if attr & 2 != 0:
            self.reg.HACC_ACON2 = self.HACC_AES_CLR
            self.reg.HACC_ACFG0 = key.iv[0]  # g_AC_CFG
            self.reg.HACC_ACFG1 = key.iv[1]
            self.reg.HACC_ACFG2 = key.iv[2]
            self.reg.HACC_ACFG3 = key.iv[3]
    """

    def sej_aes_hw_internal_5g(self, data, encrypt, attr, sej_param, legacy=True):
        psrc = bytes_to_dwords(data)
        if encrypt:
            self.reg.HACC_ACON |= 1
        pdst = self.HACC_V3_Run(psrc, legacy=legacy, attr=attr, sej_param=sej_param)
        if legacy:
            if (attr & 8) != 0 and (sej_param & 2) == 0:
                # Key_Feedback_XOR_Handler
                # keylen = 0x20
                self.reg.HACC_AKEY0 = self.reg.HACC_AOUT0 ^ self.reg.HACC_AKEY0
                self.reg.HACC_AKEY1 = self.reg.HACC_AOUT1 ^ self.reg.HACC_AKEY1
                self.reg.HACC_AKEY2 = self.reg.HACC_AOUT2 ^ self.reg.HACC_AKEY2
                self.reg.HACC_AKEY3 = self.reg.HACC_AOUT3 ^ self.reg.HACC_AKEY3
        # Clear key
        self.reg.HACC_ACON2 = 2
        return pdst

    def sej_aes_hw_internal_4g(self, data, encrypt):
        if encrypt:
            self.reg.HACC_ACON |= 1

        psrc = bytes_to_dwords(data)
        pdst = self.HACC_V3_Run(psrc, legacy=False)
        return pdst

    def sst_init_5g(self, attr, iv, keylen=0x10, sejparam=5, key=None, m_sst_type=64):
        if key is None:
            key = [0, 0, 0, 0, 0, 0, 0, 0]
        self.reg.HACC_SECINIT0 = 1
        if keylen == 0x10 or sejparam & 1 != 0 or attr & 1 != 0:
            acon_setting = self.HACC_AES_128
        elif keylen == 0x18:
            acon_setting = self.HACC_AES_192
        elif keylen == 0x20:
            acon_setting = self.HACC_AES_256
        else:
            acon_setting = self.HACC_AES_128
        if attr & 4 == 0:
            print("SEJ_3DES_HW_SetKey")
        if iv is not None:
            acon_setting |= self.HACC_AES_CBC  # 0
        self.reg.HACC_ACON = acon_setting

        if attr & 1 == 0:
            if attr & 2 != 0:
                self.reg.HACC_ACON2 = self.HACC_AES_CLR
                self.reg.HACC_ACFG0 = iv[0]  # g_AC_CFG
                self.reg.HACC_ACFG1 = iv[1]
                self.reg.HACC_ACFG2 = iv[2]
                self.reg.HACC_ACFG3 = iv[3]
            return acon_setting
        else:
            self.reg.HACC_AKEY0 = key[0]
            self.reg.HACC_AKEY1 = key[1]
            self.reg.HACC_AKEY2 = key[2]
            self.reg.HACC_AKEY3 = key[3]
            self.reg.HACC_AKEY4 = key[4]
            self.reg.HACC_AKEY5 = key[5]
            self.reg.HACC_AKEY6 = key[6]
            self.reg.HACC_AKEY7 = key[7]
            if sejparam & 1 == 0:
                if attr & 2 != 0:
                    self.reg.HACC_ACON2 = self.HACC_AES_CLR
                    self.reg.HACC_ACFG0 = iv[0]  # g_AC_CFG
                    self.reg.HACC_ACFG1 = iv[1]
                    self.reg.HACC_ACFG2 = iv[2]
                    self.reg.HACC_ACFG3 = iv[3]
                return 0
            elif m_sst_type & 8 == 0:
                if m_sst_type & 2 == 0:
                    self.reg.HACC_ACONK = self.HACC_AES_BK2C
                if attr & 2 != 0:
                    self.reg.HACC_ACON2 = self.HACC_AES_CLR
                    self.reg.HACC_ACFG0 = iv[0]  # g_AC_CFG
                    self.reg.HACC_ACFG1 = iv[1]
                    self.reg.HACC_ACFG2 = iv[2]
                    self.reg.HACC_ACFG3 = iv[3]
                return 0
            if sejparam & 8 != 0:
                self.reg.HACC_UNK &= 0xFFFFFFFD
            else:
                self.reg.HACC_UNK |= 2
            if sejparam & 4 == 0:
                self.reg.HACC_UNK |= 1
                if m_sst_type & 2 == 0:
                    self.reg.HACC_ACONK = self.HACC_AES_BK2C
                if attr & 2 != 0:
                    self.reg.HACC_ACON2 = self.HACC_AES_CLR
                    self.reg.HACC_ACFG0 = iv[0]  # g_AC_CFG
                    self.reg.HACC_ACFG1 = iv[1]
                    self.reg.HACC_ACFG2 = iv[2]
                    self.reg.HACC_ACFG3 = iv[3]
                return 0
            self.reg.HACC_ACON2 |= 0x40000000
            current_clock = self.get_world_clock_value()
            while True:
                if self.reg.HACC_ACON2 < 0:
                    self.reg.HACC_UNK &= 0xFFFFFFFE
                if self.check_timeout(current_clock, 200):
                    return -1
        return 0

    def sst_init_4g(self, attr, iv, keylen=0x10, key=None, m_sst_type=64):
        if key is None:
            key = [0, 0, 0, 0, 0, 0, 0, 0]
        acon_setting = keylen & 0xF
        if iv is not None:
            acon_setting |= self.HACC_AES_CBC  # 0

        self.reg.HACC_AKEY0 = key[0]
        self.reg.HACC_AKEY1 = key[1]
        self.reg.HACC_AKEY2 = key[2]
        self.reg.HACC_AKEY3 = key[3]
        self.reg.HACC_AKEY4 = key[4]
        self.reg.HACC_AKEY5 = key[5]
        self.reg.HACC_AKEY6 = key[6]
        self.reg.HACC_AKEY7 = key[7]
        self.reg.HACC_ACON2 = self.HACC_AES_CLR

        if attr & 2 != 0:
            self.reg.HACC_ACON2 = self.HACC_AES_CLR
            self.reg.HACC_ACFG0 = iv[0]  # g_AC_CFG
            self.reg.HACC_ACFG1 = iv[1]
            self.reg.HACC_ACFG2 = iv[2]
            self.reg.HACC_ACFG3 = iv[3]

        if attr & 8:
            self.reg.HACC_SECINIT0 |= 2
        self.reg.HACC_ACON2 |= 0x40000000

        current_clock = self.get_world_clock_value()
        while self.toSigned32(self.reg.HACC_ACON2) >= 0:
            if self.check_timeout(current_clock, 200):
                return 0x4001

        if m_sst_type & 2 == 0:
            self.reg.HACC_ACONK = 16
        self.reg.HACC_ACON = acon_setting
        return 0

    def sst_secure_algo_with_level(self, buf, encrypt=True, m_sst_type=0x64, unlock=False, legacyxor=True,
                                   seed=CustomSeed):
        if unlock:
            _iv = [self.g_HACC_CFG_1[0], self.g_HACC_CFG_1[1], self.g_HACC_CFG_1[2], self.g_HACC_CFG_1[3]]
        else:
            seed = (seed[2] << 16) | (seed[1] << 8) | seed[0] | (seed[3] << 24)
            _iv = [seed, (~seed) & 0xFFFFFFFF, (((seed >> 16) | (seed << 16)) & 0xFFFFFFFF),
                   (~((seed >> 16) | (seed << 16)) & 0xFFFFFFFF)]

        key = SymKey()
        key.key = None
        key.key_len = 0x10
        # meta_key_len = 0x10
        key.mode = 1  # CBC
        if (m_sst_type & 1) != 0:
            sej_param = 3
        else:
            sej_param = 5
        if (m_sst_type & 0x10) != 0:
            sej_param = 7
            _iv = [g_UnqKey_IV[0], g_UnqKey_IV[1], g_UnqKey_IV[2], g_UnqKey_IV[3]]
            key.key_len = 0x20
        key.iv = _iv

        # Cipher Internal
        if sej_param & 0xC != 0:
            if sej_param & 4 != 0:
                # sej_param 5
                attr = 0x3A
            else:
                attr = 0x32
            metaflag = 0
        else:
            # aes_top_legacy
            attr = 0x33
            metaflag = 1

        # CS_MTK_Cipher_Internal
        if metaflag:
            # length=0x10
            _attr = 0x5B
            src = b"".join([int.to_bytes(val, 4, 'little') for val in self.g_CFG_RANDOM_PATTERN])
            # self.sej_aes_hw_init(_attr, key, sej_param)
            if m_sst_type & 1 != 0:
                self.sst_init_5g(attr=_attr, iv=_iv, keylen=key.key_len, sejparam=sej_param, key=key.key,
                                 m_sst_type=m_sst_type)
                rnd = self.sej_aes_hw_internal_5g(src, encrypt=False, attr=_attr, sej_param=sej_param,
                                                  legacy=legacyxor)
                _ = rnd
            else:
                self.sst_init_4g(attr=_attr, iv=_iv, keylen=key.key_len, key=key.key, m_sst_type=m_sst_type)
                rnd = self.sej_aes_hw_internal_4g(src, encrypt=False)
                _ = rnd
            attr = (attr & 0xFFFFFFFA) | 4

        if m_sst_type & 1 != 0:
            self.sst_init_5g(attr=attr, iv=_iv, keylen=key.key_len, sejparam=sej_param, key=key.key,
                             m_sst_type=m_sst_type)
            buf2 = self.sej_aes_hw_internal_5g(buf, encrypt=encrypt, attr=attr, sej_param=sej_param, legacy=legacyxor)
        else:
            self.sst_init_4g(attr=attr, iv=_iv, keylen=key.key_len, key=key.key, m_sst_type=m_sst_type)
            buf2 = self.sej_aes_hw_internal_4g(buf, encrypt=encrypt)
        self.reg.HACC_AKEY0 = 0
        self.reg.HACC_AKEY1 = 0
        self.reg.HACC_AKEY2 = 0
        self.reg.HACC_AKEY3 = 0
        self.reg.HACC_AKEY4 = 0
        self.reg.HACC_AKEY5 = 0
        self.reg.HACC_AKEY6 = 0
        self.reg.HACC_AKEY7 = 0
        return buf2

    def sej_terminate(self):
        self.reg.HACC_ACON2 = self.HACC_AES_CLR
        self.reg.HACC_AKEY0 = 0
        self.reg.HACC_AKEY1 = 0
        self.reg.HACC_AKEY2 = 0
        self.reg.HACC_AKEY3 = 0
        self.reg.HACC_AKEY4 = 0
        self.reg.HACC_AKEY5 = 0
        self.reg.HACC_AKEY6 = 0
        self.reg.HACC_AKEY7 = 0

    def SEJ_V3_Init(self, ben=True, iv=None, legacy=False):
        # 0x335 = MT6737M/MT6735G
        # 0x321 = MT6735/T,MT8735A
        # 0x337 = MT6753
        if self.hwcode in [0x6795, 0x335, 0x321, 0x337]:
            legacy = False
        acon_setting = self.HACC_AES_CHG_BO_OFF | self.HACC_AES_128
        if iv is not None:
            acon_setting |= self.HACC_AES_CBC
        if ben:
            acon_setting |= self.HACC_AES_ENC
        else:
            acon_setting |= self.HACC_AES_DEC

        # clear key
        self.reg.HACC_AKEY0 = 0  # 0x20
        self.reg.HACC_AKEY1 = 0
        self.reg.HACC_AKEY2 = 0
        self.reg.HACC_AKEY3 = 0
        self.reg.HACC_AKEY4 = 0
        self.reg.HACC_AKEY5 = 0
        self.reg.HACC_AKEY6 = 0
        self.reg.HACC_AKEY7 = 0  # 0x3C

        # Generate META Key # 0x04
        self.reg.HACC_ACON = self.HACC_AES_CHG_BO_OFF | self.HACC_AES_CBC | self.HACC_AES_128 | self.HACC_AES_DEC

        # init ACONK, bind HUID/HUK to HACC, this may differ
        # enable R2K, so that output data is feedback to key by HACC internal algorithm
        self.reg.HACC_ACONK = self.HACC_AES_BK2C
        self.reg.HACC_ACONK |= self.HACC_AES_R2K  # 0x110

        # clear HACC_ASRC/HACC_ACFG/HACC_AOUT
        self.reg.HACC_ACON2 = self.HACC_AES_CLR  # 0x2

        self.reg.HACC_ACFG0 = iv[0]  # g_AC_CFG
        self.reg.HACC_ACFG1 = iv[1]
        self.reg.HACC_ACFG2 = iv[2]
        self.reg.HACC_ACFG3 = iv[3]

        if legacy:
            self.reg.HACC_UNK |= 2
            # clear HACC_ASRC/HACC_ACFG/HACC_AOUT
            self.reg.HACC_ACON2 |= 0x40000000
            i = 0
            while i < 20:
                if self.reg.HACC_ACON2 > 0x80000000:
                    break
                i += 1
            if i == 20:
                self.error("SEJ Legacy Hardware seems not to be configured correctly. Results may be wrong.")
            self.reg.HACC_UNK &= 0xFFFFFFFE
            self.reg.HACC_ACONK = self.HACC_AES_BK2C
            self.reg.HACC_ACON = acon_setting
        else:
            # The reg below needed for mtee ?
            self.reg.HACC_UNK = 1

            # encrypt fix pattern 3 rounds to generate a pattern from HUID/HUK
            for i in range(0, 3):
                pos = i * 4
                self.reg.HACC_ASRC0 = self.g_CFG_RANDOM_PATTERN[pos]
                self.reg.HACC_ASRC1 = self.g_CFG_RANDOM_PATTERN[pos + 1]
                self.reg.HACC_ASRC2 = self.g_CFG_RANDOM_PATTERN[pos + 2]
                self.reg.HACC_ASRC3 = self.g_CFG_RANDOM_PATTERN[pos + 3]
                self.reg.HACC_ACON2 = self.HACC_AES_START # 0x1
                i = 0
                while i < 20:
                    if self.reg.HACC_ACON2 & self.HACC_AES_RDY != 0:
                        break
                    i += 1
                if i == 20:
                    self.error("SEJ Hardware seems not to be configured correctly. Results may be wrong.")

            self.reg.HACC_ACON2 = self.HACC_AES_CLR

            self.reg.HACC_ACFG0 = iv[0]
            self.reg.HACC_ACFG1 = iv[1]
            self.reg.HACC_ACFG2 = iv[2]
            self.reg.HACC_ACFG3 = iv[3]
            self.reg.HACC_ACON = acon_setting
            self.reg.HACC_ACONK = 0
        return acon_setting

    def hw_aes128_cbc_encrypt(self, buf, encrypt=True, iv=None, legacy=False):
        if iv is None:
            iv = self.g_HACC_CFG_1
        self.tz_pre_init()
        self.info("AES128 CBC - HACC init")
        self.SEJ_V3_Init(ben=encrypt, iv=iv, legacy=legacy)
        self.info("AES128 CBC - HACC run")
        buf2 = self.HACC_V3_Run(buf)
        self.info("AES128 CBC - HACC terminate")
        self.sej_terminate()
        return buf2

    def sej_set_otp(self, data):
        if isinstance(data, bytes) or isinstance(data, bytearray):
            pd = bytes_to_dwords(data)
        else:
            pd = data
        self.reg.HACC_SW_OTP0 = pd[0]
        self.reg.HACC_SW_OTP1 = pd[1]
        self.reg.HACC_SW_OTP2 = pd[2]
        self.reg.HACC_SW_OTP3 = pd[3]
        self.reg.HACC_SW_OTP4 = pd[4]
        self.reg.HACC_SW_OTP5 = pd[5]
        self.reg.HACC_SW_OTP6 = pd[6]
        self.reg.HACC_SW_OTP7 = pd[7]
        # self.reg.HACC_SECINIT0 = pd[8]
        # self.reg.HACC_SECINIT1 = pd[9]
        # self.reg.HACC_SECINIT2 = pd[0xA]
        # self.reg.HACC_MKJ = pd[0xB]

    def sej_do_aes(self, encrypt, iv=None, data=b"", length=16):
        self.reg.HACC_ACON2 |= self.HACC_AES_CLR
        if iv is not None:
            piv = bytes_to_dwords(iv)
            self.reg.HACC_ACFG0 = piv[0]
            self.reg.HACC_ACFG1 = piv[1]
            self.reg.HACC_ACFG2 = piv[2]
            self.reg.HACC_ACFG3 = piv[3]
        if encrypt:
            self.reg.HACC_ACON |= self.HACC_AES_ENC
        else:
            self.reg.HACC_ACON &= 0xFFFFFFFE
        pdst = bytearray()
        for pos in range(0, length, 16):
            psrc = bytes_to_dwords(data[(pos % len(data)):(pos % len(data)) + 16])
            plen = len(psrc)
            pos = 0
            for i in range(plen // 4):
                self.reg.HACC_ASRC0 = psrc[pos + 0]
                self.reg.HACC_ASRC1 = psrc[pos + 1]
                self.reg.HACC_ASRC2 = psrc[pos + 2]
                self.reg.HACC_ASRC3 = psrc[pos + 3]
                self.reg.HACC_ACON2 |= self.HACC_AES_START
                i = 0
                while i < 20:
                    if self.reg.HACC_ACON2 & self.HACC_AES_RDY != 0:
                        break
                    i += 1
                if i == 20:
                    self.error("SEJ Hardware seems not to be configured correctly. Results may be wrong.")
                pdst.extend(pack("<I", self.reg.HACC_AOUT0))
                pdst.extend(pack("<I", self.reg.HACC_AOUT1))
                pdst.extend(pack("<I", self.reg.HACC_AOUT2))
                pdst.extend(pack("<I", self.reg.HACC_AOUT3))
        return pdst

    def sej_key_config(self, swkey):
        iv = bytes.fromhex("57325A5A125497661254976657325A5A")
        self.sej_set_mode(AES_CBC_MODE)
        self.sej_set_key(AES_HW_KEY, AES_KEY_128)
        hw_key = self.sej_do_aes(True, iv, swkey, 32)
        self.sej_set_key(AES_HW_WRAP_KEY, AES_KEY_256, hw_key)

    @staticmethod
    def sej_sec_cfg_sw(data, encrypt=True):
        """
        Left for reference - hw implementation
        --------------------------------------
        self.sej_set_mode(AES_CBC_MODE)
        self.sej_set_key(AES_SW_KEY, AES_KEY_256, b"1A52A367CB12C458965D32CD874B36B2")
        iv = bytes.fromhex("57325A5A125497661254976657325A5A")
        res = self.sej_do_aes(encrypt, iv, data, len(data))
        """
        ctx = CryptUtils.Aes()
        res = ctx.aes_cbc(key=b"25A1763A21BC854CD569DC23B4782B63",
                          iv=bytes.fromhex("57325A5A125497661254976657325A5A"), data=data,
                          decrypt=not encrypt)
        return res

    def xor_data(self, data):
        i = 0
        for val in self.g_HACC_CFG_1:
            data[i:i + 4] = pack("<I", unpack("<I", data[i:i + 4])[0] ^ val)
            i += 4
            if i == 16:
                break
        return data

    def sej_sec_cfg_hw(self, data, encrypt=True, noxor=False):
        if encrypt and not noxor:
            data = self.xor_data(bytearray(data))
        self.info("SecCfg Hw - HACC init")
        self.SEJ_V3_Init(ben=encrypt, iv=self.g_HACC_CFG_1, legacy=True)
        self.info("SecCfg Hw - HACC run")
        dec = self.HACC_V3_Run(data)
        self.info("SecCfg Hw - HACC terminate")
        self.sej_terminate()
        if not encrypt and not noxor:
            dec = self.xor_data(dec)
        return dec

    def sej_sec_cfg_hw_V3(self, data, encrypt=True, legacy=False):
        return self.hw_aes128_cbc_encrypt(buf=data, encrypt=encrypt, legacy=legacy)

    # seclib_get_msg_auth_key
    def generate_rpmb(self, meid, otp, derivedlen=32):
        # self.sej_sec_cfg_decrypt(bytes.fromhex("1FF7EB9EEA3BA346C2C94E3D44850C2172B56BC26D2450CA9ADBAB7136604542C3B2EA50057037669A4C493BF7CC7E6E2644563808F73B3AA5AFE2D48D97597E"))
        # self.sej_key_config(b"1A52A367CB12C458965D32CD874B36B2")
        # self.sej_set_otp(bytes.fromhex("486973656E7365000023232323232323232323230A006420617320302C207468010000009400000040000000797B797B"))
        self.sej_set_otp(otp)
        buf = bytearray()
        meid = bytearray(meid)  # 0x100010
        for i in range(derivedlen):
            buf.append(meid[i % len(meid)])
        return self.hw_aes128_cbc_encrypt(buf=buf, encrypt=True, iv=self.g_HACC_CFG_1)

    def sp_hacc_internal(self, buf: bytes, b_ac: bool, user: int, b_do_lock: bool, aes_type: int, b_en: bool):
        dec = None
        if user == 0:
            iv = self.g_HACC_CFG_1
            self.info("SP_HAcc0 - HACC init")
            self.SEJ_V3_Init(ben=b_en, iv=iv)
            self.info("SP_HAcc0 - HACC run")
            dec = self.HACC_V3_Run(buf)
            self.info("SP_HAcc0 - HACC terminate")
            self.sej_terminate()
        elif user == 1:
            iv = self.g_HACC_CFG_2
            self.info("SP_HAcc1 - HACC init")
            self.SEJ_V3_Init(ben=b_en, iv=iv)
            self.info("SP_HAcc1 - HACC run")
            dec = self.HACC_V3_Run(buf)
            self.info("SP_HAcc1 - HACC terminate")
            self.sej_terminate()
        elif user == 2:
            self.sej_set_key(key=2, flag=32)
            iv = bytes.fromhex("57325A5A125497661254976657325A5A")
            dec = self.sej_do_aes(encrypt=aes_type, iv=iv, data=buf, length=len(buf))
        elif user == 3:
            iv = self.g_HACC_CFG_3
            self.info("SP_HAcc3 - HACC init")
            self.SEJ_V3_Init(ben=b_en, iv=iv)
            self.info("SP_HAcc3 - HACC run")
            dec = self.HACC_V3_Run(buf)
            self.info("SP_HAcc3 - HACC terminate")
            self.sej_terminate()
        return dec

    def dev_kdf(self, buf: bytes, derivelen=16):
        res = bytearray()
        for i in range(derivelen // 16):
            res.extend(self.sp_hacc_internal(buf=buf[i * 16:(i * 16) + 16], b_ac=True, user=0, b_do_lock=False,
                                             aes_type=1, b_en=True))
        return res

    def generate_mtee(self, otp=None):
        if otp is not None:
            self.sej_set_otp(otp)
        buf = bytes.fromhex("4B65796D61737465724D617374657200")
        return self.dev_kdf(buf=buf, derivelen=16)

    def generate_mtee_meid(self, meid):
        self.sej_key_config(meid)
        res1 = self.sej_do_aes(True, None, meid, 32)
        return self.sej_do_aes(True, None, res1, 32)

    def generate_mtee_hw(self, otp=None):
        if otp is not None:
            self.sej_set_otp(otp)
        self.info("MTee - HACC init")
        self.SEJ_V3_Init(ben=True, iv=self.g_HACC_CFG_MTEE)
        self.info("MTee - HACC run")
        dec = self.HACC_V3_Run(bytes.fromhex("7777772E6D6564696174656B2E636F6D30313233343536373839414243444546"))
        self.info("MTee - HACC terminate")
        self.sej_terminate()
        return dec

    def generate_hw_meta(self, otp=None, encrypt=False, data=b"", legacy=False, noxor=False):
        """
        WR8                                                                         mt65
        LR9     CRC                 RC4                     AES128-CBC              SBC=OFF
        LR11    CRC                 RC4                     AES128-CBC              SBC=ON
        LR12    CRC                 AES128-ECB              AES128-CBC              mt6750/6797
        LR12A   MD5                 AES128-ECB              AES128-CBC              mt6761/6765/6771/6777/6778/6779
        LR13    MD5                 AES128-ECB              AES128-CBC              mt6781/mt6785
        NR15    MD5                 AES128-ECB              AES128-CBC              mt6877/6889/6833
        NR16    MD5/HMAC-SHA256     AES128-CBC/AES256-CBC   AES128-CBC/AES256-CBC   mt6895
        NR17    MD5/HMAC-SHA256     AES128-CBC/AES256-CBC   AES128-CBC/AES256-CBC
        """
        if otp is not None:
            self.sej_set_otp(otp)
        seed = (CustomSeed[2] << 16) | (CustomSeed[1] << 8) | CustomSeed[0] | (CustomSeed[3] << 24)
        iv = [seed, (~seed) & 0xFFFFFFFF, (((seed >> 16) | (seed << 16)) & 0xFFFFFFFF),
              (~((seed >> 16) | (seed << 16)) & 0xFFFFFFFF)]
        self.info("Meta - HACC init")
        if encrypt and not noxor:
            data = self.xor_data(bytearray(data))
        self.info("Meta - HACC init")
        self.SEJ_V3_Init(ben=encrypt, iv=iv, legacy=legacy)
        self.info("Meta - HACC run")
        dec = self.HACC_V3_Run(data)
        self.info("Meta - HACC terminate")
        self.sej_terminate()
        if not encrypt and not noxor:
            dec = self.xor_data(dec)
        return dec


if __name__ == "__main__":
    seed = (CustomSeed[2] << 16) | (CustomSeed[1] << 8) | CustomSeed[0] | (CustomSeed[3] << 24)
    iv = [seed, (~seed) & 0xFFFFFFFF, (((seed >> 16) | (seed << 16)) & 0xFFFFFFFF),
          (~((seed >> 16) | (seed << 16)) & 0xFFFFFFFF)]

    ivtest = [0, 0, 0, 0]
    ivtest[0] = 0xbb13be00
    ivtest[1] = (~ivtest[0]) & 0xFFFFFFFF
    ivtest[2] = (ivtest[0] >> 0x10 | ivtest[0] << 0x10) & 0xFFFFFFFF
    ivtest[3] = (~ivtest[2]) & 0xFFFFFFFF

    print(b"".join(int.to_bytes(val, 4, 'little') for val in iv).hex())
