Now available: The Design and Implementation of the FreeBSD Operating System (Second Edition)
[ source navigation ] [ diff markup ] [ identifier search ] [ freetext search ] [ file search ] [ list types ] [ track identifier ]
FreeBSD/Linux Kernel Cross Reference
sys/crypto/des.c
Version:
- FREEBSD - FREEBSD-13-STABLE - FREEBSD-13-0 - FREEBSD-12-STABLE - FREEBSD-12-0 - FREEBSD-11-STABLE - FREEBSD-11-0 - FREEBSD-10-STABLE - FREEBSD-10-0 - FREEBSD-9-STABLE - FREEBSD-9-0 - FREEBSD-8-STABLE - FREEBSD-8-0 - FREEBSD-7-STABLE - FREEBSD-7-0 - FREEBSD-6-STABLE - FREEBSD-6-0 - FREEBSD-5-STABLE - FREEBSD-5-0 - FREEBSD-4-STABLE - FREEBSD-3-STABLE - FREEBSD22 - l41 - OPENBSD - linux-2.6 - MK84 - PLAN9 - xnu-8792
SearchContext: - none - 3 - 10
SearchContext: - none - 3 - 10
1 /* 2 * Cryptographic API. 3 * 4 * DES & Triple DES EDE Cipher Algorithms. 5 * 6 * Originally released as descore by Dana L. How <how@isl.stanford.edu>. 7 * Modified by Raimar Falke <rf13@inf.tu-dresden.de> for the Linux-Kernel. 8 * Derived from Cryptoapi and Nettle implementations, adapted for in-place 9 * scatterlist interface. Changed LGPL to GPL per section 3 of the LGPL. 10 * 11 * Copyright (c) 1992 Dana L. How. 12 * Copyright (c) Raimar Falke <rf13@inf.tu-dresden.de> 13 * Copyright (c) Gisle Sælensminde <gisle@ii.uib.no> 14 * Copyright (C) 2001 Niels Möller. 15 * Copyright (c) 2002 James Morris <jmorris@intercode.com.au> 16 * 17 * This program is free software; you can redistribute it and/or modify 18 * it under the terms of the GNU General Public License as published by 19 * the Free Software Foundation; either version 2 of the License, or 20 * (at your option) any later version. 21 * 22 */ 23 #include <linux/init.h> 24 #include <linux/module.h> 25 #include <linux/mm.h> 26 #include <linux/errno.h> 27 #include <asm/scatterlist.h> 28 #include <linux/crypto.h> 29 30 #define DES_KEY_SIZE 8 31 #define DES_EXPKEY_WORDS 32 32 #define DES_BLOCK_SIZE 8 33 34 #define DES3_EDE_KEY_SIZE (3 * DES_KEY_SIZE) 35 #define DES3_EDE_EXPKEY_WORDS (3 * DES_EXPKEY_WORDS) 36 #define DES3_EDE_BLOCK_SIZE DES_BLOCK_SIZE 37 38 #define ROR(d,c,o) ((d) = (d) >> (c) | (d) << (o)) 39 40 struct des_ctx { 41 u8 iv[DES_BLOCK_SIZE]; 42 u32 expkey[DES_EXPKEY_WORDS]; 43 }; 44 45 struct des3_ede_ctx { 46 u8 iv[DES_BLOCK_SIZE]; 47 u32 expkey[DES3_EDE_EXPKEY_WORDS]; 48 }; 49 50 static const u32 des_keymap[] = { 51 0x02080008, 0x02082000, 0x00002008, 0x00000000, 52 0x02002000, 0x00080008, 0x02080000, 0x02082008, 53 0x00000008, 0x02000000, 0x00082000, 0x00002008, 54 0x00082008, 0x02002008, 0x02000008, 0x02080000, 55 0x00002000, 0x00082008, 0x00080008, 0x02002000, 56 0x02082008, 0x02000008, 0x00000000, 0x00082000, 57 0x02000000, 0x00080000, 0x02002008, 0x02080008, 58 0x00080000, 0x00002000, 0x02082000, 0x00000008, 59 0x00080000, 0x00002000, 0x02000008, 0x02082008, 60 0x00002008, 0x02000000, 0x00000000, 0x00082000, 61 0x02080008, 0x02002008, 0x02002000, 0x00080008, 62 0x02082000, 0x00000008, 0x00080008, 0x02002000, 63 0x02082008, 0x00080000, 0x02080000, 0x02000008, 64 0x00082000, 0x00002008, 0x02002008, 0x02080000, 65 0x00000008, 0x02082000, 0x00082008, 0x00000000, 66 0x02000000, 0x02080008, 0x00002000, 0x00082008, 67 68 0x08000004, 0x00020004, 0x00000000, 0x08020200, 69 0x00020004, 0x00000200, 0x08000204, 0x00020000, 70 0x00000204, 0x08020204, 0x00020200, 0x08000000, 71 0x08000200, 0x08000004, 0x08020000, 0x00020204, 72 0x00020000, 0x08000204, 0x08020004, 0x00000000, 73 0x00000200, 0x00000004, 0x08020200, 0x08020004, 74 0x08020204, 0x08020000, 0x08000000, 0x00000204, 75 0x00000004, 0x00020200, 0x00020204, 0x08000200, 76 0x00000204, 0x08000000, 0x08000200, 0x00020204, 77 0x08020200, 0x00020004, 0x00000000, 0x08000200, 78 0x08000000, 0x00000200, 0x08020004, 0x00020000, 79 0x00020004, 0x08020204, 0x00020200, 0x00000004, 80 0x08020204, 0x00020200, 0x00020000, 0x08000204, 81 0x08000004, 0x08020000, 0x00020204, 0x00000000, 82 0x00000200, 0x08000004, 0x08000204, 0x08020200, 83 0x08020000, 0x00000204, 0x00000004, 0x08020004, 84 85 0x80040100, 0x01000100, 0x80000000, 0x81040100, 86 0x00000000, 0x01040000, 0x81000100, 0x80040000, 87 0x01040100, 0x81000000, 0x01000000, 0x80000100, 88 0x81000000, 0x80040100, 0x00040000, 0x01000000, 89 0x81040000, 0x00040100, 0x00000100, 0x80000000, 90 0x00040100, 0x81000100, 0x01040000, 0x00000100, 91 0x80000100, 0x00000000, 0x80040000, 0x01040100, 92 0x01000100, 0x81040000, 0x81040100, 0x00040000, 93 0x81040000, 0x80000100, 0x00040000, 0x81000000, 94 0x00040100, 0x01000100, 0x80000000, 0x01040000, 95 0x81000100, 0x00000000, 0x00000100, 0x80040000, 96 0x00000000, 0x81040000, 0x01040100, 0x00000100, 97 0x01000000, 0x81040100, 0x80040100, 0x00040000, 98 0x81040100, 0x80000000, 0x01000100, 0x80040100, 99 0x80040000, 0x00040100, 0x01040000, 0x81000100, 100 0x80000100, 0x01000000, 0x81000000, 0x01040100, 101 102 0x04010801, 0x00000000, 0x00010800, 0x04010000, 103 0x04000001, 0x00000801, 0x04000800, 0x00010800, 104 0x00000800, 0x04010001, 0x00000001, 0x04000800, 105 0x00010001, 0x04010800, 0x04010000, 0x00000001, 106 0x00010000, 0x04000801, 0x04010001, 0x00000800, 107 0x00010801, 0x04000000, 0x00000000, 0x00010001, 108 0x04000801, 0x00010801, 0x04010800, 0x04000001, 109 0x04000000, 0x00010000, 0x00000801, 0x04010801, 110 0x00010001, 0x04010800, 0x04000800, 0x00010801, 111 0x04010801, 0x00010001, 0x04000001, 0x00000000, 112 0x04000000, 0x00000801, 0x00010000, 0x04010001, 113 0x00000800, 0x04000000, 0x00010801, 0x04000801, 114 0x04010800, 0x00000800, 0x00000000, 0x04000001, 115 0x00000001, 0x04010801, 0x00010800, 0x04010000, 116 0x04010001, 0x00010000, 0x00000801, 0x04000800, 117 0x04000801, 0x00000001, 0x04010000, 0x00010800, 118 119 0x00000400, 0x00000020, 0x00100020, 0x40100000, 120 0x40100420, 0x40000400, 0x00000420, 0x00000000, 121 0x00100000, 0x40100020, 0x40000020, 0x00100400, 122 0x40000000, 0x00100420, 0x00100400, 0x40000020, 123 0x40100020, 0x00000400, 0x40000400, 0x40100420, 124 0x00000000, 0x00100020, 0x40100000, 0x00000420, 125 0x40100400, 0x40000420, 0x00100420, 0x40000000, 126 0x40000420, 0x40100400, 0x00000020, 0x00100000, 127 0x40000420, 0x00100400, 0x40100400, 0x40000020, 128 0x00000400, 0x00000020, 0x00100000, 0x40100400, 129 0x40100020, 0x40000420, 0x00000420, 0x00000000, 130 0x00000020, 0x40100000, 0x40000000, 0x00100020, 131 0x00000000, 0x40100020, 0x00100020, 0x00000420, 132 0x40000020, 0x00000400, 0x40100420, 0x00100000, 133 0x00100420, 0x40000000, 0x40000400, 0x40100420, 134 0x40100000, 0x00100420, 0x00100400, 0x40000400, 135 136 0x00800000, 0x00001000, 0x00000040, 0x00801042, 137 0x00801002, 0x00800040, 0x00001042, 0x00801000, 138 0x00001000, 0x00000002, 0x00800002, 0x00001040, 139 0x00800042, 0x00801002, 0x00801040, 0x00000000, 140 0x00001040, 0x00800000, 0x00001002, 0x00000042, 141 0x00800040, 0x00001042, 0x00000000, 0x00800002, 142 0x00000002, 0x00800042, 0x00801042, 0x00001002, 143 0x00801000, 0x00000040, 0x00000042, 0x00801040, 144 0x00801040, 0x00800042, 0x00001002, 0x00801000, 145 0x00001000, 0x00000002, 0x00800002, 0x00800040, 146 0x00800000, 0x00001040, 0x00801042, 0x00000000, 147 0x00001042, 0x00800000, 0x00000040, 0x00001002, 148 0x00800042, 0x00000040, 0x00000000, 0x00801042, 149 0x00801002, 0x00801040, 0x00000042, 0x00001000, 150 0x00001040, 0x00801002, 0x00800040, 0x00000042, 151 0x00000002, 0x00001042, 0x00801000, 0x00800002, 152 153 0x10400000, 0x00404010, 0x00000010, 0x10400010, 154 0x10004000, 0x00400000, 0x10400010, 0x00004010, 155 0x00400010, 0x00004000, 0x00404000, 0x10000000, 156 0x10404010, 0x10000010, 0x10000000, 0x10404000, 157 0x00000000, 0x10004000, 0x00404010, 0x00000010, 158 0x10000010, 0x10404010, 0x00004000, 0x10400000, 159 0x10404000, 0x00400010, 0x10004010, 0x00404000, 160 0x00004010, 0x00000000, 0x00400000, 0x10004010, 161 0x00404010, 0x00000010, 0x10000000, 0x00004000, 162 0x10000010, 0x10004000, 0x00404000, 0x10400010, 163 0x00000000, 0x00404010, 0x00004010, 0x10404000, 164 0x10004000, 0x00400000, 0x10404010, 0x10000000, 165 0x10004010, 0x10400000, 0x00400000, 0x10404010, 166 0x00004000, 0x00400010, 0x10400010, 0x00004010, 167 0x00400010, 0x00000000, 0x10404000, 0x10000010, 168 0x10400000, 0x10004010, 0x00000010, 0x00404000, 169 170 0x00208080, 0x00008000, 0x20200000, 0x20208080, 171 0x00200000, 0x20008080, 0x20008000, 0x20200000, 172 0x20008080, 0x00208080, 0x00208000, 0x20000080, 173 0x20200080, 0x00200000, 0x00000000, 0x20008000, 174 0x00008000, 0x20000000, 0x00200080, 0x00008080, 175 0x20208080, 0x00208000, 0x20000080, 0x00200080, 176 0x20000000, 0x00000080, 0x00008080, 0x20208000, 177 0x00000080, 0x20200080, 0x20208000, 0x00000000, 178 0x00000000, 0x20208080, 0x00200080, 0x20008000, 179 0x00208080, 0x00008000, 0x20000080, 0x00200080, 180 0x20208000, 0x00000080, 0x00008080, 0x20200000, 181 0x20008080, 0x20000000, 0x20200000, 0x00208000, 182 0x20208080, 0x00008080, 0x00208000, 0x20200080, 183 0x00200000, 0x20000080, 0x20008000, 0x00000000, 184 0x00008000, 0x00200000, 0x20200080, 0x00208080, 185 0x20000000, 0x20208000, 0x00000080, 0x20008080, 186 }; 187 188 static const u8 rotors[] = { 189 34, 13, 5, 46, 47, 18, 32, 41, 11, 53, 33, 20, 190 14, 36, 30, 24, 49, 2, 15, 37, 42, 50, 0, 21, 191 38, 48, 6, 26, 39, 4, 52, 25, 12, 27, 31, 40, 192 1, 17, 28, 29, 23, 51, 35, 7, 3, 22, 9, 43, 193 194 41, 20, 12, 53, 54, 25, 39, 48, 18, 31, 40, 27, 195 21, 43, 37, 0, 1, 9, 22, 44, 49, 2, 7, 28, 196 45, 55, 13, 33, 46, 11, 6, 32, 19, 34, 38, 47, 197 8, 24, 35, 36, 30, 3, 42, 14, 10, 29, 16, 50, 198 199 55, 34, 26, 38, 11, 39, 53, 5, 32, 45, 54, 41, 200 35, 2, 51, 14, 15, 23, 36, 3, 8, 16, 21, 42, 201 6, 12, 27, 47, 31, 25, 20, 46, 33, 48, 52, 4, 202 22, 7, 49, 50, 44, 17, 1, 28, 24, 43, 30, 9, 203 204 12, 48, 40, 52, 25, 53, 38, 19, 46, 6, 11, 55, 205 49, 16, 10, 28, 29, 37, 50, 17, 22, 30, 35, 1, 206 20, 26, 41, 4, 45, 39, 34, 31, 47, 5, 13, 18, 207 36, 21, 8, 9, 3, 0, 15, 42, 7, 2, 44, 23, 208 209 26, 5, 54, 13, 39, 38, 52, 33, 31, 20, 25, 12, 210 8, 30, 24, 42, 43, 51, 9, 0, 36, 44, 49, 15, 211 34, 40, 55, 18, 6, 53, 48, 45, 4, 19, 27, 32, 212 50, 35, 22, 23, 17, 14, 29, 1, 21, 16, 3, 37, 213 214 40, 19, 11, 27, 53, 52, 13, 47, 45, 34, 39, 26, 215 22, 44, 7, 1, 2, 10, 23, 14, 50, 3, 8, 29, 216 48, 54, 12, 32, 20, 38, 5, 6, 18, 33, 41, 46, 217 9, 49, 36, 37, 0, 28, 43, 15, 35, 30, 17, 51, 218 219 54, 33, 25, 41, 38, 13, 27, 4, 6, 48, 53, 40, 220 36, 3, 21, 15, 16, 24, 37, 28, 9, 17, 22, 43, 221 5, 11, 26, 46, 34, 52, 19, 20, 32, 47, 55, 31, 222 23, 8, 50, 51, 14, 42, 2, 29, 49, 44, 0, 10, 223 224 11, 47, 39, 55, 52, 27, 41, 18, 20, 5, 38, 54, 225 50, 17, 35, 29, 30, 7, 51, 42, 23, 0, 36, 2, 226 19, 25, 40, 31, 48, 13, 33, 34, 46, 4, 12, 45, 227 37, 22, 9, 10, 28, 1, 16, 43, 8, 3, 14, 24, 228 229 18, 54, 46, 5, 6, 34, 48, 25, 27, 12, 45, 4, 230 2, 24, 42, 36, 37, 14, 3, 49, 30, 7, 43, 9, 231 26, 32, 47, 38, 55, 20, 40, 41, 53, 11, 19, 52, 232 44, 29, 16, 17, 35, 8, 23, 50, 15, 10, 21, 0, 233 234 32, 11, 31, 19, 20, 48, 5, 39, 41, 26, 6, 18, 235 16, 7, 1, 50, 51, 28, 17, 8, 44, 21, 2, 23, 236 40, 46, 4, 52, 12, 34, 54, 55, 38, 25, 33, 13, 237 3, 43, 30, 0, 49, 22, 37, 9, 29, 24, 35, 14, 238 239 46, 25, 45, 33, 34, 5, 19, 53, 55, 40, 20, 32, 240 30, 21, 15, 9, 10, 42, 0, 22, 3, 35, 16, 37, 241 54, 31, 18, 13, 26, 48, 11, 12, 52, 39, 47, 27, 242 17, 2, 44, 14, 8, 36, 51, 23, 43, 7, 49, 28, 243 244 31, 39, 6, 47, 48, 19, 33, 38, 12, 54, 34, 46, 245 44, 35, 29, 23, 24, 1, 14, 36, 17, 49, 30, 51, 246 11, 45, 32, 27, 40, 5, 25, 26, 13, 53, 4, 41, 247 0, 16, 3, 28, 22, 50, 10, 37, 2, 21, 8, 42, 248 249 45, 53, 20, 4, 5, 33, 47, 52, 26, 11, 48, 31, 250 3, 49, 43, 37, 7, 15, 28, 50, 0, 8, 44, 10, 251 25, 6, 46, 41, 54, 19, 39, 40, 27, 38, 18, 55, 252 14, 30, 17, 42, 36, 9, 24, 51, 16, 35, 22, 1, 253 254 6, 38, 34, 18, 19, 47, 4, 13, 40, 25, 5, 45, 255 17, 8, 2, 51, 21, 29, 42, 9, 14, 22, 3, 24, 256 39, 20, 31, 55, 11, 33, 53, 54, 41, 52, 32, 12, 257 28, 44, 0, 1, 50, 23, 7, 10, 30, 49, 36, 15, 258 259 20, 52, 48, 32, 33, 4, 18, 27, 54, 39, 19, 6, 260 0, 22, 16, 10, 35, 43, 1, 23, 28, 36, 17, 7, 261 53, 34, 45, 12, 25, 47, 38, 11, 55, 13, 46, 26, 262 42, 3, 14, 15, 9, 37, 21, 24, 44, 8, 50, 29, 263 264 27, 6, 55, 39, 40, 11, 25, 34, 4, 46, 26, 13, 265 7, 29, 23, 17, 42, 50, 8, 30, 35, 43, 24, 14, 266 31, 41, 52, 19, 32, 54, 45, 18, 5, 20, 53, 33, 267 49, 10, 21, 22, 16, 44, 28, 0, 51, 15, 2, 36, 268 }; 269 270 static const u8 parity[] = { 271 8,1,0,8,0,8,8,0,0,8,8,0,8,0,2,8,0,8,8,0,8,0,0,8,8,0,0,8,0,8,8,3, 272 0,8,8,0,8,0,0,8,8,0,0,8,0,8,8,0,8,0,0,8,0,8,8,0,0,8,8,0,8,0,0,8, 273 0,8,8,0,8,0,0,8,8,0,0,8,0,8,8,0,8,0,0,8,0,8,8,0,0,8,8,0,8,0,0,8, 274 8,0,0,8,0,8,8,0,0,8,8,0,8,0,0,8,0,8,8,0,8,0,0,8,8,0,0,8,0,8,8,0, 275 0,8,8,0,8,0,0,8,8,0,0,8,0,8,8,0,8,0,0,8,0,8,8,0,0,8,8,0,8,0,0,8, 276 8,0,0,8,0,8,8,0,0,8,8,0,8,0,0,8,0,8,8,0,8,0,0,8,8,0,0,8,0,8,8,0, 277 8,0,0,8,0,8,8,0,0,8,8,0,8,0,0,8,0,8,8,0,8,0,0,8,8,0,0,8,0,8,8,0, 278 4,8,8,0,8,0,0,8,8,0,0,8,0,8,8,0,8,5,0,8,0,8,8,0,0,8,8,0,8,0,6,8, 279 }; 280 281 282 static void des_small_fips_encrypt(u32 *expkey, u8 *dst, const u8 *src) 283 { 284 u32 x, y, z; 285 286 x = src[7]; 287 x <<= 8; 288 x |= src[6]; 289 x <<= 8; 290 x |= src[5]; 291 x <<= 8; 292 x |= src[4]; 293 y = src[3]; 294 y <<= 8; 295 y |= src[2]; 296 y <<= 8; 297 y |= src[1]; 298 y <<= 8; 299 y |= src[0]; 300 z = ((x >> 004) ^ y) & 0x0F0F0F0FL; 301 x ^= z << 004; 302 y ^= z; 303 z = ((y >> 020) ^ x) & 0x0000FFFFL; 304 y ^= z << 020; 305 x ^= z; 306 z = ((x >> 002) ^ y) & 0x33333333L; 307 x ^= z << 002; 308 y ^= z; 309 z = ((y >> 010) ^ x) & 0x00FF00FFL; 310 y ^= z << 010; 311 x ^= z; 312 x = x >> 1 | x << 31; 313 z = (x ^ y) & 0x55555555L; 314 y ^= z; 315 x ^= z; 316 y = y >> 1 | y << 31; 317 z = expkey[0]; 318 z ^= y; 319 x ^= * (u32 *) ((u8 *) (des_keymap + 192) + (0xFC & z)); 320 z >>= 8; 321 x ^= * (u32 *) ((u8 *) (des_keymap + 128) + (0xFC & z)); 322 z >>= 8; 323 x ^= * (u32 *) ((u8 *) (des_keymap + 64) + (0xFC & z)); 324 z >>= 8; 325 x ^= * (u32 *) ((u8 *) des_keymap + (0xFC & z)); 326 z = expkey[1]; 327 z ^= y; 328 z = z << 4 | z >> 28; 329 x ^= * (u32 *) ((u8 *) (des_keymap + 448) + (0xFC & z)); 330 z >>= 8; 331 x ^= * (u32 *) ((u8 *) (des_keymap + 384) + (0xFC & z)); 332 z >>= 8; 333 x ^= * (u32 *) ((u8 *) (des_keymap + 320) + (0xFC & z)); 334 z >>= 8; 335 x ^= * (u32 *) ((u8 *) (des_keymap + 256) + (0xFC & z)); 336 z = expkey[2]; 337 z ^= x; 338 y ^= * (u32 *) ((u8 *) (des_keymap + 192) + (0xFC & z)); 339 z >>= 8; 340 y ^= * (u32 *) ((u8 *) (des_keymap + 128) + (0xFC & z)); 341 z >>= 8; 342 y ^= * (u32 *) ((u8 *) (des_keymap + 64) + (0xFC & z)); 343 z >>= 8; 344 y ^= * (u32 *) ((u8 *) des_keymap + (0xFC & z)); 345 z = expkey[3]; 346 z ^= x; 347 z = z << 4 | z >> 28; 348 y ^= * (u32 *) ((u8 *) (des_keymap + 448) + (0xFC & z)); 349 z >>= 8; 350 y ^= * (u32 *) ((u8 *) (des_keymap + 384) + (0xFC & z)); 351 z >>= 8; 352 y ^= * (u32 *) ((u8 *) (des_keymap + 320) + (0xFC & z)); 353 z >>= 8; 354 y ^= * (u32 *) ((u8 *) (des_keymap + 256) + (0xFC & z)); 355 z = expkey[4]; 356 z ^= y; 357 x ^= * (u32 *) ((u8 *) (des_keymap + 192) + (0xFC & z)); 358 z >>= 8; 359 x ^= * (u32 *) ((u8 *) (des_keymap + 128) + (0xFC & z)); 360 z >>= 8; 361 x ^= * (u32 *) ((u8 *) (des_keymap + 64) + (0xFC & z)); 362 z >>= 8; 363 x ^= * (u32 *) ((u8 *) des_keymap + (0xFC & z)); 364 z = expkey[5]; 365 z ^= y; 366 z = z << 4 | z >> 28; 367 x ^= * (u32 *) ((u8 *) (des_keymap + 448) + (0xFC & z)); 368 z >>= 8; 369 x ^= * (u32 *) ((u8 *) (des_keymap + 384) + (0xFC & z)); 370 z >>= 8; 371 x ^= * (u32 *) ((u8 *) (des_keymap + 320) + (0xFC & z)); 372 z >>= 8; 373 x ^= * (u32 *) ((u8 *) (des_keymap + 256) + (0xFC & z)); 374 z = expkey[6]; 375 z ^= x; 376 y ^= * (u32 *) ((u8 *) (des_keymap + 192) + (0xFC & z)); 377 z >>= 8; 378 y ^= * (u32 *) ((u8 *) (des_keymap + 128) + (0xFC & z)); 379 z >>= 8; 380 y ^= * (u32 *) ((u8 *) (des_keymap + 64) + (0xFC & z)); 381 z >>= 8; 382 y ^= * (u32 *) ((u8 *) des_keymap + (0xFC & z)); 383 z = expkey[7]; 384 z ^= x; 385 z = z << 4 | z >> 28; 386 y ^= * (u32 *) ((u8 *) (des_keymap + 448) + (0xFC & z)); 387 z >>= 8; 388 y ^= * (u32 *) ((u8 *) (des_keymap + 384) + (0xFC & z)); 389 z >>= 8; 390 y ^= * (u32 *) ((u8 *) (des_keymap + 320) + (0xFC & z)); 391 z >>= 8; 392 y ^= * (u32 *) ((u8 *) (des_keymap + 256) + (0xFC & z)); 393 z = expkey[8]; 394 z ^= y; 395 x ^= * (u32 *) ((u8 *) (des_keymap + 192) + (0xFC & z)); 396 z >>= 8; 397 x ^= * (u32 *) ((u8 *) (des_keymap + 128) + (0xFC & z)); 398 z >>= 8; 399 x ^= * (u32 *) ((u8 *) (des_keymap + 64) + (0xFC & z)); 400 z >>= 8; 401 x ^= * (u32 *) ((u8 *) des_keymap + (0xFC & z)); 402 z = expkey[9]; 403 z ^= y; 404 z = z << 4 | z >> 28; 405 x ^= * (u32 *) ((u8 *) (des_keymap + 448) + (0xFC & z)); 406 z >>= 8; 407 x ^= * (u32 *) ((u8 *) (des_keymap + 384) + (0xFC & z)); 408 z >>= 8; 409 x ^= * (u32 *) ((u8 *) (des_keymap + 320) + (0xFC & z)); 410 z >>= 8; 411 x ^= * (u32 *) ((u8 *) (des_keymap + 256) + (0xFC & z)); 412 z = expkey[10]; 413 z ^= x; 414 y ^= * (u32 *) ((u8 *) (des_keymap + 192) + (0xFC & z)); 415 z >>= 8; 416 y ^= * (u32 *) ((u8 *) (des_keymap + 128) + (0xFC & z)); 417 z >>= 8; 418 y ^= * (u32 *) ((u8 *) (des_keymap + 64) + (0xFC & z)); 419 z >>= 8; 420 y ^= * (u32 *) ((u8 *) des_keymap + (0xFC & z)); 421 z = expkey[11]; 422 z ^= x; 423 z = z << 4 | z >> 28; 424 y ^= * (u32 *) ((u8 *) (des_keymap + 448) + (0xFC & z)); 425 z >>= 8; 426 y ^= * (u32 *) ((u8 *) (des_keymap + 384) + (0xFC & z)); 427 z >>= 8; 428 y ^= * (u32 *) ((u8 *) (des_keymap + 320) + (0xFC & z)); 429 z >>= 8; 430 y ^= * (u32 *) ((u8 *) (des_keymap + 256) + (0xFC & z)); 431 z = expkey[12]; 432 z ^= y; 433 x ^= * (u32 *) ((u8 *) (des_keymap + 192) + (0xFC & z)); 434 z >>= 8; 435 x ^= * (u32 *) ((u8 *) (des_keymap + 128) + (0xFC & z)); 436 z >>= 8; 437 x ^= * (u32 *) ((u8 *) (des_keymap + 64) + (0xFC & z)); 438 z >>= 8; 439 x ^= * (u32 *) ((u8 *) des_keymap + (0xFC & z)); 440 z = expkey[13]; 441 z ^= y; 442 z = z << 4 | z >> 28; 443 x ^= * (u32 *) ((u8 *) (des_keymap + 448) + (0xFC & z)); 444 z >>= 8; 445 x ^= * (u32 *) ((u8 *) (des_keymap + 384) + (0xFC & z)); 446 z >>= 8; 447 x ^= * (u32 *) ((u8 *) (des_keymap + 320) + (0xFC & z)); 448 z >>= 8; 449 x ^= * (u32 *) ((u8 *) (des_keymap + 256) + (0xFC & z)); 450 z = expkey[14]; 451 z ^= x; 452 y ^= * (u32 *) ((u8 *) (des_keymap + 192) + (0xFC & z)); 453 z >>= 8; 454 y ^= * (u32 *) ((u8 *) (des_keymap + 128) + (0xFC & z)); 455 z >>= 8; 456 y ^= * (u32 *) ((u8 *) (des_keymap + 64) + (0xFC & z)); 457 z >>= 8; 458 y ^= * (u32 *) ((u8 *) des_keymap + (0xFC & z)); 459 z = expkey[15]; 460 z ^= x; 461 z = z << 4 | z >> 28; 462 y ^= * (u32 *) ((u8 *) (des_keymap + 448) + (0xFC & z)); 463 z >>= 8; 464 y ^= * (u32 *) ((u8 *) (des_keymap + 384) + (0xFC & z)); 465 z >>= 8; 466 y ^= * (u32 *) ((u8 *) (des_keymap + 320) + (0xFC & z)); 467 z >>= 8; 468 y ^= * (u32 *) ((u8 *) (des_keymap + 256) + (0xFC & z)); 469 z = expkey[16]; 470 z ^= y; 471 x ^= * (u32 *) ((u8 *) (des_keymap + 192) + (0xFC & z)); 472 z >>= 8; 473 x ^= * (u32 *) ((u8 *) (des_keymap + 128) + (0xFC & z)); 474 z >>= 8; 475 x ^= * (u32 *) ((u8 *) (des_keymap + 64) + (0xFC & z)); 476 z >>= 8; 477 x ^= * (u32 *) ((u8 *) des_keymap + (0xFC & z)); 478 z = expkey[17]; 479 z ^= y; 480 z = z << 4 | z >> 28; 481 x ^= * (u32 *) ((u8 *) (des_keymap + 448) + (0xFC & z)); 482 z >>= 8; 483 x ^= * (u32 *) ((u8 *) (des_keymap + 384) + (0xFC & z)); 484 z >>= 8; 485 x ^= * (u32 *) ((u8 *) (des_keymap + 320) + (0xFC & z)); 486 z >>= 8; 487 x ^= * (u32 *) ((u8 *) (des_keymap + 256) + (0xFC & z)); 488 z = expkey[18]; 489 z ^= x; 490 y ^= * (u32 *) ((u8 *) (des_keymap + 192) + (0xFC & z)); 491 z >>= 8; 492 y ^= * (u32 *) ((u8 *) (des_keymap + 128) + (0xFC & z)); 493 z >>= 8; 494 y ^= * (u32 *) ((u8 *) (des_keymap + 64) + (0xFC & z)); 495 z >>= 8; 496 y ^= * (u32 *) ((u8 *) des_keymap + (0xFC & z)); 497 z = expkey[19]; 498 z ^= x; 499 z = z << 4 | z >> 28; 500 y ^= * (u32 *) ((u8 *) (des_keymap + 448) + (0xFC & z)); 501 z >>= 8; 502 y ^= * (u32 *) ((u8 *) (des_keymap + 384) + (0xFC & z)); 503 z >>= 8; 504 y ^= * (u32 *) ((u8 *) (des_keymap + 320) + (0xFC & z)); 505 z >>= 8; 506 y ^= * (u32 *) ((u8 *) (des_keymap + 256) + (0xFC & z)); 507 z = expkey[20]; 508 z ^= y; 509 x ^= * (u32 *) ((u8 *) (des_keymap + 192) + (0xFC & z)); 510 z >>= 8; 511 x ^= * (u32 *) ((u8 *) (des_keymap + 128) + (0xFC & z)); 512 z >>= 8; 513 x ^= * (u32 *) ((u8 *) (des_keymap + 64) + (0xFC & z)); 514 z >>= 8; 515 x ^= * (u32 *) ((u8 *) des_keymap + (0xFC & z)); 516 z = expkey[21]; 517 z ^= y; 518 z = z << 4 | z >> 28; 519 x ^= * (u32 *) ((u8 *) (des_keymap + 448) + (0xFC & z)); 520 z >>= 8; 521 x ^= * (u32 *) ((u8 *) (des_keymap + 384) + (0xFC & z)); 522 z >>= 8; 523 x ^= * (u32 *) ((u8 *) (des_keymap + 320) + (0xFC & z)); 524 z >>= 8; 525 x ^= * (u32 *) ((u8 *) (des_keymap + 256) + (0xFC & z)); 526 z = expkey[22]; 527 z ^= x; 528 y ^= * (u32 *) ((u8 *) (des_keymap + 192) + (0xFC & z)); 529 z >>= 8; 530 y ^= * (u32 *) ((u8 *) (des_keymap + 128) + (0xFC & z)); 531 z >>= 8; 532 y ^= * (u32 *) ((u8 *) (des_keymap + 64) + (0xFC & z)); 533 z >>= 8; 534 y ^= * (u32 *) ((u8 *) des_keymap + (0xFC & z)); 535 z = expkey[23]; 536 z ^= x; 537 z = z << 4 | z >> 28; 538 y ^= * (u32 *) ((u8 *) (des_keymap + 448) + (0xFC & z)); 539 z >>= 8; 540 y ^= * (u32 *) ((u8 *) (des_keymap + 384) + (0xFC & z)); 541 z >>= 8; 542 y ^= * (u32 *) ((u8 *) (des_keymap + 320) + (0xFC & z)); 543 z >>= 8; 544 y ^= * (u32 *) ((u8 *) (des_keymap + 256) + (0xFC & z)); 545 z = expkey[24]; 546 z ^= y; 547 x ^= * (u32 *) ((u8 *) (des_keymap + 192) + (0xFC & z)); 548 z >>= 8; 549 x ^= * (u32 *) ((u8 *) (des_keymap + 128) + (0xFC & z)); 550 z >>= 8; 551 x ^= * (u32 *) ((u8 *) (des_keymap + 64) + (0xFC & z)); 552 z >>= 8; 553 x ^= * (u32 *) ((u8 *) des_keymap + (0xFC & z)); 554 z = expkey[25]; 555 z ^= y; 556 z = z << 4 | z >> 28; 557 x ^= * (u32 *) ((u8 *) (des_keymap + 448) + (0xFC & z)); 558 z >>= 8; 559 x ^= * (u32 *) ((u8 *) (des_keymap + 384) + (0xFC & z)); 560 z >>= 8; 561 x ^= * (u32 *) ((u8 *) (des_keymap + 320) + (0xFC & z)); 562 z >>= 8; 563 x ^= * (u32 *) ((u8 *) (des_keymap + 256) + (0xFC & z)); 564 z = expkey[26]; 565 z ^= x; 566 y ^= * (u32 *) ((u8 *) (des_keymap + 192) + (0xFC & z)); 567 z >>= 8; 568 y ^= * (u32 *) ((u8 *) (des_keymap + 128) + (0xFC & z)); 569 z >>= 8; 570 y ^= * (u32 *) ((u8 *) (des_keymap + 64) + (0xFC & z)); 571 z >>= 8; 572 y ^= * (u32 *) ((u8 *) des_keymap + (0xFC & z)); 573 z = expkey[27]; 574 z ^= x; 575 z = z << 4 | z >> 28; 576 y ^= * (u32 *) ((u8 *) (des_keymap + 448) + (0xFC & z)); 577 z >>= 8; 578 y ^= * (u32 *) ((u8 *) (des_keymap + 384) + (0xFC & z)); 579 z >>= 8; 580 y ^= * (u32 *) ((u8 *) (des_keymap + 320) + (0xFC & z)); 581 z >>= 8; 582 y ^= * (u32 *) ((u8 *) (des_keymap + 256) + (0xFC & z)); 583 z = expkey[28]; 584 z ^= y; 585 x ^= * (u32 *) ((u8 *) (des_keymap + 192) + (0xFC & z)); 586 z >>= 8; 587 x ^= * (u32 *) ((u8 *) (des_keymap + 128) + (0xFC & z)); 588 z >>= 8; 589 x ^= * (u32 *) ((u8 *) (des_keymap + 64) + (0xFC & z)); 590 z >>= 8; 591 x ^= * (u32 *) ((u8 *) des_keymap + (0xFC & z)); 592 z = expkey[29]; 593 z ^= y; 594 z = z << 4 | z >> 28; 595 x ^= * (u32 *) ((u8 *) (des_keymap + 448) + (0xFC & z)); 596 z >>= 8; 597 x ^= * (u32 *) ((u8 *) (des_keymap + 384) + (0xFC & z)); 598 z >>= 8; 599 x ^= * (u32 *) ((u8 *) (des_keymap + 320) + (0xFC & z)); 600 z >>= 8; 601 x ^= * (u32 *) ((u8 *) (des_keymap + 256) + (0xFC & z)); 602 z = expkey[30]; 603 z ^= x; 604 y ^= * (u32 *) ((u8 *) (des_keymap + 192) + (0xFC & z)); 605 z >>= 8; 606 y ^= * (u32 *) ((u8 *) (des_keymap + 128) + (0xFC & z)); 607 z >>= 8; 608 y ^= * (u32 *) ((u8 *) (des_keymap + 64) + (0xFC & z)); 609 z >>= 8; 610 y ^= * (u32 *) ((u8 *) des_keymap + (0xFC & z)); 611 z = expkey[31]; 612 z ^= x; 613 z = z << 4 | z >> 28; 614 y ^= * (u32 *) ((u8 *) (des_keymap + 448) + (0xFC & z)); 615 z >>= 8; 616 y ^= * (u32 *) ((u8 *) (des_keymap + 384) + (0xFC & z)); 617 z >>= 8; 618 y ^= * (u32 *) ((u8 *) (des_keymap + 320) + (0xFC & z)); 619 z >>= 8; 620 y ^= * (u32 *) ((u8 *) (des_keymap + 256) + (0xFC & z)); 621 x = x << 1 | x >> 31; 622 z = (x ^ y) & 0x55555555L; 623 y ^= z; 624 x ^= z; 625 y = y << 1 | y >> 31; 626 z = ((x >> 010) ^ y) & 0x00FF00FFL; 627 x ^= z << 010; 628 y ^= z; 629 z = ((y >> 002) ^ x) & 0x33333333L; 630 y ^= z << 002; 631 x ^= z; 632 z = ((x >> 020) ^ y) & 0x0000FFFFL; 633 x ^= z << 020; 634 y ^= z; 635 z = ((y >> 004) ^ x) & 0x0F0F0F0FL; 636 y ^= z << 004; 637 x ^= z; 638 dst[0] = x; 639 x >>= 8; 640 dst[1] = x; 641 x >>= 8; 642 dst[2] = x; 643 x >>= 8; 644 dst[3] = x; 645 dst[4] = y; 646 y >>= 8; 647 dst[5] = y; 648 y >>= 8; 649 dst[6] = y; 650 y >>= 8; 651 dst[7] = y; 652 } 653 654 static void des_small_fips_decrypt(u32 *expkey, u8 *dst, const u8 *src) 655 { 656 u32 x, y, z; 657 658 x = src[7]; 659 x <<= 8; 660 x |= src[6]; 661 x <<= 8; 662 x |= src[5]; 663 x <<= 8; 664 x |= src[4]; 665 y = src[3]; 666 y <<= 8; 667 y |= src[2]; 668 y <<= 8; 669 y |= src[1]; 670 y <<= 8; 671 y |= src[0]; 672 z = ((x >> 004) ^ y) & 0x0F0F0F0FL; 673 x ^= z << 004; 674 y ^= z; 675 z = ((y >> 020) ^ x) & 0x0000FFFFL; 676 y ^= z << 020; 677 x ^= z; 678 z = ((x >> 002) ^ y) & 0x33333333L; 679 x ^= z << 002; 680 y ^= z; 681 z = ((y >> 010) ^ x) & 0x00FF00FFL; 682 y ^= z << 010; 683 x ^= z; 684 x = x >> 1 | x << 31; 685 z = (x ^ y) & 0x55555555L; 686 y ^= z; 687 x ^= z; 688 y = y >> 1 | y << 31; 689 z = expkey[31]; 690 z ^= y; 691 z = z << 4 | z >> 28; 692 x ^= * (u32 *) ((u8 *) (des_keymap + 448) + (0xFC & z)); 693 z >>= 8; 694 x ^= * (u32 *) ((u8 *) (des_keymap + 384) + (0xFC & z)); 695 z >>= 8; 696 x ^= * (u32 *) ((u8 *) (des_keymap + 320) + (0xFC & z)); 697 z >>= 8; 698 x ^= * (u32 *) ((u8 *) (des_keymap + 256) + (0xFC & z)); 699 z = expkey[30]; 700 z ^= y; 701 x ^= * (u32 *) ((u8 *) (des_keymap + 192) + (0xFC & z)); 702 z >>= 8; 703 x ^= * (u32 *) ((u8 *) (des_keymap + 128) + (0xFC & z)); 704 z >>= 8; 705 x ^= * (u32 *) ((u8 *) (des_keymap + 64) + (0xFC & z)); 706 z >>= 8; 707 x ^= * (u32 *) ((u8 *) des_keymap + (0xFC & z)); 708 z = expkey[29]; 709 z ^= x; 710 z = z << 4 | z >> 28; 711 y ^= * (u32 *) ((u8 *) (des_keymap + 448) + (0xFC & z)); 712 z >>= 8; 713 y ^= * (u32 *) ((u8 *) (des_keymap + 384) + (0xFC & z)); 714 z >>= 8; 715 y ^= * (u32 *) ((u8 *) (des_keymap + 320) + (0xFC & z)); 716 z >>= 8; 717 y ^= * (u32 *) ((u8 *) (des_keymap + 256) + (0xFC & z)); 718 z = expkey[28]; 719 z ^= x; 720 y ^= * (u32 *) ((u8 *) (des_keymap + 192) + (0xFC & z)); 721 z >>= 8; 722 y ^= * (u32 *) ((u8 *) (des_keymap + 128) + (0xFC & z)); 723 z >>= 8; 724 y ^= * (u32 *) ((u8 *) (des_keymap + 64) + (0xFC & z)); 725 z >>= 8; 726 y ^= * (u32 *) ((u8 *) des_keymap + (0xFC & z)); 727 z = expkey[27]; 728 z ^= y; 729 z = z << 4 | z >> 28; 730 x ^= * (u32 *) ((u8 *) (des_keymap + 448) + (0xFC & z)); 731 z >>= 8; 732 x ^= * (u32 *) ((u8 *) (des_keymap + 384) + (0xFC & z)); 733 z >>= 8; 734 x ^= * (u32 *) ((u8 *) (des_keymap + 320) + (0xFC & z)); 735 z >>= 8; 736 x ^= * (u32 *) ((u8 *) (des_keymap + 256) + (0xFC & z)); 737 z = expkey[26]; 738 z ^= y; 739 x ^= * (u32 *) ((u8 *) (des_keymap + 192) + (0xFC & z)); 740 z >>= 8; 741 x ^= * (u32 *) ((u8 *) (des_keymap + 128) + (0xFC & z)); 742 z >>= 8; 743 x ^= * (u32 *) ((u8 *) (des_keymap + 64) + (0xFC & z)); 744 z >>= 8; 745 x ^= * (u32 *) ((u8 *) des_keymap + (0xFC & z)); 746 z = expkey[25]; 747 z ^= x; 748 z = z << 4 | z >> 28; 749 y ^= * (u32 *) ((u8 *) (des_keymap + 448) + (0xFC & z)); 750 z >>= 8; 751 y ^= * (u32 *) ((u8 *) (des_keymap + 384) + (0xFC & z)); 752 z >>= 8; 753 y ^= * (u32 *) ((u8 *) (des_keymap + 320) + (0xFC & z)); 754 z >>= 8; 755 y ^= * (u32 *) ((u8 *) (des_keymap + 256) + (0xFC & z)); 756 z = expkey[24]; 757 z ^= x; 758 y ^= * (u32 *) ((u8 *) (des_keymap + 192) + (0xFC & z)); 759 z >>= 8; 760 y ^= * (u32 *) ((u8 *) (des_keymap + 128) + (0xFC & z)); 761 z >>= 8; 762 y ^= * (u32 *) ((u8 *) (des_keymap + 64) + (0xFC & z)); 763 z >>= 8; 764 y ^= * (u32 *) ((u8 *) des_keymap + (0xFC & z)); 765 z = expkey[23]; 766 z ^= y; 767 z = z << 4 | z >> 28; 768 x ^= * (u32 *) ((u8 *) (des_keymap + 448) + (0xFC & z)); 769 z >>= 8; 770 x ^= * (u32 *) ((u8 *) (des_keymap + 384) + (0xFC & z)); 771 z >>= 8; 772 x ^= * (u32 *) ((u8 *) (des_keymap + 320) + (0xFC & z)); 773 z >>= 8; 774 x ^= * (u32 *) ((u8 *) (des_keymap + 256) + (0xFC & z)); 775 z = expkey[22]; 776 z ^= y; 777 x ^= * (u32 *) ((u8 *) (des_keymap + 192) + (0xFC & z)); 778 z >>= 8; 779 x ^= * (u32 *) ((u8 *) (des_keymap + 128) + (0xFC & z)); 780 z >>= 8; 781 x ^= * (u32 *) ((u8 *) (des_keymap + 64) + (0xFC & z)); 782 z >>= 8; 783 x ^= * (u32 *) ((u8 *) des_keymap + (0xFC & z)); 784 z = expkey[21]; 785 z ^= x; 786 z = z << 4 | z >> 28; 787 y ^= * (u32 *) ((u8 *) (des_keymap + 448) + (0xFC & z)); 788 z >>= 8; 789 y ^= * (u32 *) ((u8 *) (des_keymap + 384) + (0xFC & z)); 790 z >>= 8; 791 y ^= * (u32 *) ((u8 *) (des_keymap + 320) + (0xFC & z)); 792 z >>= 8; 793 y ^= * (u32 *) ((u8 *) (des_keymap + 256) + (0xFC & z)); 794 z = expkey[20]; 795 z ^= x; 796 y ^= * (u32 *) ((u8 *) (des_keymap + 192) + (0xFC & z)); 797 z >>= 8; 798 y ^= * (u32 *) ((u8 *) (des_keymap + 128) + (0xFC & z)); 799 z >>= 8; 800 y ^= * (u32 *) ((u8 *) (des_keymap + 64) + (0xFC & z)); 801 z >>= 8; 802 y ^= * (u32 *) ((u8 *) des_keymap + (0xFC & z)); 803 z = expkey[19]; 804 z ^= y; 805 z = z << 4 | z >> 28; 806 x ^= * (u32 *) ((u8 *) (des_keymap + 448) + (0xFC & z)); 807 z >>= 8; 808 x ^= * (u32 *) ((u8 *) (des_keymap + 384) + (0xFC & z)); 809 z >>= 8; 810 x ^= * (u32 *) ((u8 *) (des_keymap + 320) + (0xFC & z)); 811 z >>= 8; 812 x ^= * (u32 *) ((u8 *) (des_keymap + 256) + (0xFC & z)); 813 z = expkey[18]; 814 z ^= y; 815 x ^= * (u32 *) ((u8 *) (des_keymap + 192) + (0xFC & z)); 816 z >>= 8; 817 x ^= * (u32 *) ((u8 *) (des_keymap + 128) + (0xFC & z)); 818 z >>= 8; 819 x ^= * (u32 *) ((u8 *) (des_keymap + 64) + (0xFC & z)); 820 z >>= 8; 821 x ^= * (u32 *) ((u8 *) des_keymap + (0xFC & z)); 822 z = expkey[17]; 823 z ^= x; 824 z = z << 4 | z >> 28; 825 y ^= * (u32 *) ((u8 *) (des_keymap + 448) + (0xFC & z)); 826 z >>= 8; 827 y ^= * (u32 *) ((u8 *) (des_keymap + 384) + (0xFC & z)); 828 z >>= 8; 829 y ^= * (u32 *) ((u8 *) (des_keymap + 320) + (0xFC & z)); 830 z >>= 8; 831 y ^= * (u32 *) ((u8 *) (des_keymap + 256) + (0xFC & z)); 832 z = expkey[16]; 833 z ^= x; 834 y ^= * (u32 *) ((u8 *) (des_keymap + 192) + (0xFC & z)); 835 z >>= 8; 836 y ^= * (u32 *) ((u8 *) (des_keymap + 128) + (0xFC & z)); 837 z >>= 8; 838 y ^= * (u32 *) ((u8 *) (des_keymap + 64) + (0xFC & z)); 839 z >>= 8; 840 y ^= * (u32 *) ((u8 *) des_keymap + (0xFC & z)); 841 z = expkey[15]; 842 z ^= y; 843 z = z << 4 | z >> 28; 844 x ^= * (u32 *) ((u8 *) (des_keymap + 448) + (0xFC & z)); 845 z >>= 8; 846 x ^= * (u32 *) ((u8 *) (des_keymap + 384) + (0xFC & z)); 847 z >>= 8; 848 x ^= * (u32 *) ((u8 *) (des_keymap + 320) + (0xFC & z)); 849 z >>= 8; 850 x ^= * (u32 *) ((u8 *) (des_keymap + 256) + (0xFC & z)); 851 z = expkey[14]; 852 z ^= y; 853 x ^= * (u32 *) ((u8 *) (des_keymap + 192) + (0xFC & z)); 854 z >>= 8; 855 x ^= * (u32 *) ((u8 *) (des_keymap + 128) + (0xFC & z)); 856 z >>= 8; 857 x ^= * (u32 *) ((u8 *) (des_keymap + 64) + (0xFC & z)); 858 z >>= 8; 859 x ^= * (u32 *) ((u8 *) des_keymap + (0xFC & z)); 860 z = expkey[13]; 861 z ^= x; 862 z = z << 4 | z >> 28; 863 y ^= * (u32 *) ((u8 *) (des_keymap + 448) + (0xFC & z)); 864 z >>= 8; 865 y ^= * (u32 *) ((u8 *) (des_keymap + 384) + (0xFC & z)); 866 z >>= 8; 867 y ^= * (u32 *) ((u8 *) (des_keymap + 320) + (0xFC & z)); 868 z >>= 8; 869 y ^= * (u32 *) ((u8 *) (des_keymap + 256) + (0xFC & z)); 870 z = expkey[12]; 871 z ^= x; 872 y ^= * (u32 *) ((u8 *) (des_keymap + 192) + (0xFC & z)); 873 z >>= 8; 874 y ^= * (u32 *) ((u8 *) (des_keymap + 128) + (0xFC & z)); 875 z >>= 8; 876 y ^= * (u32 *) ((u8 *) (des_keymap + 64) + (0xFC & z)); 877 z >>= 8; 878 y ^= * (u32 *) ((u8 *) des_keymap + (0xFC & z)); 879 z = expkey[11]; 880 z ^= y; 881 z = z << 4 | z >> 28; 882 x ^= * (u32 *) ((u8 *) (des_keymap + 448) + (0xFC & z)); 883 z >>= 8; 884 x ^= * (u32 *) ((u8 *) (des_keymap + 384) + (0xFC & z)); 885 z >>= 8; 886 x ^= * (u32 *) ((u8 *) (des_keymap + 320) + (0xFC & z)); 887 z >>= 8; 888 x ^= * (u32 *) ((u8 *) (des_keymap + 256) + (0xFC & z)); 889 z = expkey[10]; 890 z ^= y; 891 x ^= * (u32 *) ((u8 *) (des_keymap + 192) + (0xFC & z)); 892 z >>= 8; 893 x ^= * (u32 *) ((u8 *) (des_keymap + 128) + (0xFC & z)); 894 z >>= 8; 895 x ^= * (u32 *) ((u8 *) (des_keymap + 64) + (0xFC & z)); 896 z >>= 8; 897 x ^= * (u32 *) ((u8 *) des_keymap + (0xFC & z)); 898 z = expkey[9]; 899 z ^= x; 900 z = z << 4 | z >> 28; 901 y ^= * (u32 *) ((u8 *) (des_keymap + 448) + (0xFC & z)); 902 z >>= 8; 903 y ^= * (u32 *) ((u8 *) (des_keymap + 384) + (0xFC & z)); 904 z >>= 8; 905 y ^= * (u32 *) ((u8 *) (des_keymap + 320) + (0xFC & z)); 906 z >>= 8; 907 y ^= * (u32 *) ((u8 *) (des_keymap + 256) + (0xFC & z)); 908 z = expkey[8]; 909 z ^= x; 910 y ^= * (u32 *) ((u8 *) (des_keymap + 192) + (0xFC & z)); 911 z >>= 8; 912 y ^= * (u32 *) ((u8 *) (des_keymap + 128) + (0xFC & z)); 913 z >>= 8; 914 y ^= * (u32 *) ((u8 *) (des_keymap + 64) + (0xFC & z)); 915 z >>= 8; 916 y ^= * (u32 *) ((u8 *) des_keymap + (0xFC & z)); 917 z = expkey[7]; 918 z ^= y; 919 z = z << 4 | z >> 28; 920 x ^= * (u32 *) ((u8 *) (des_keymap + 448) + (0xFC & z)); 921 z >>= 8; 922 x ^= * (u32 *) ((u8 *) (des_keymap + 384) + (0xFC & z)); 923 z >>= 8; 924 x ^= * (u32 *) ((u8 *) (des_keymap + 320) + (0xFC & z)); 925 z >>= 8; 926 x ^= * (u32 *) ((u8 *) (des_keymap + 256) + (0xFC & z)); 927 z = expkey[6]; 928 z ^= y; 929 x ^= * (u32 *) ((u8 *) (des_keymap + 192) + (0xFC & z)); 930 z >>= 8; 931 x ^= * (u32 *) ((u8 *) (des_keymap + 128) + (0xFC & z)); 932 z >>= 8; 933 x ^= * (u32 *) ((u8 *) (des_keymap + 64) + (0xFC & z)); 934 z >>= 8; 935 x ^= * (u32 *) ((u8 *) des_keymap + (0xFC & z)); 936 z = expkey[5]; 937 z ^= x; 938 z = z << 4 | z >> 28; 939 y ^= * (u32 *) ((u8 *) (des_keymap + 448) + (0xFC & z)); 940 z >>= 8; 941 y ^= * (u32 *) ((u8 *) (des_keymap + 384) + (0xFC & z)); 942 z >>= 8; 943 y ^= * (u32 *) ((u8 *) (des_keymap + 320) + (0xFC & z)); 944 z >>= 8; 945 y ^= * (u32 *) ((u8 *) (des_keymap + 256) + (0xFC & z)); 946 z = expkey[4]; 947 z ^= x; 948 y ^= * (u32 *) ((u8 *) (des_keymap + 192) + (0xFC & z)); 949 z >>= 8; 950 y ^= * (u32 *) ((u8 *) (des_keymap + 128) + (0xFC & z)); 951 z >>= 8; 952 y ^= * (u32 *) ((u8 *) (des_keymap + 64) + (0xFC & z)); 953 z >>= 8; 954 y ^= * (u32 *) ((u8 *) des_keymap + (0xFC & z)); 955 z = expkey[3]; 956 z ^= y; 957 z = z << 4 | z >> 28; 958 x ^= * (u32 *) ((u8 *) (des_keymap + 448) + (0xFC & z)); 959 z >>= 8; 960 x ^= * (u32 *) ((u8 *) (des_keymap + 384) + (0xFC & z)); 961 z >>= 8; 962 x ^= * (u32 *) ((u8 *) (des_keymap + 320) + (0xFC & z)); 963 z >>= 8; 964 x ^= * (u32 *) ((u8 *) (des_keymap + 256) + (0xFC & z)); 965 z = expkey[2]; 966 z ^= y; 967 x ^= * (u32 *) ((u8 *) (des_keymap + 192) + (0xFC & z)); 968 z >>= 8; 969 x ^= * (u32 *) ((u8 *) (des_keymap + 128) + (0xFC & z)); 970 z >>= 8; 971 x ^= * (u32 *) ((u8 *) (des_keymap + 64) + (0xFC & z)); 972 z >>= 8; 973 x ^= * (u32 *) ((u8 *) des_keymap + (0xFC & z)); 974 z = expkey[1]; 975 z ^= x; 976 z = z << 4 | z >> 28; 977 y ^= * (u32 *) ((u8 *) (des_keymap + 448) + (0xFC & z)); 978 z >>= 8; 979 y ^= * (u32 *) ((u8 *) (des_keymap + 384) + (0xFC & z)); 980 z >>= 8; 981 y ^= * (u32 *) ((u8 *) (des_keymap + 320) + (0xFC & z)); 982 z >>= 8; 983 y ^= * (u32 *) ((u8 *) (des_keymap + 256) + (0xFC & z)); 984 z = expkey[0]; 985 z ^= x; 986 y ^= * (u32 *) ((u8 *) (des_keymap + 192) + (0xFC & z)); 987 z >>= 8; 988 y ^= * (u32 *) ((u8 *) (des_keymap + 128) + (0xFC & z)); 989 z >>= 8; 990 y ^= * (u32 *) ((u8 *) (des_keymap + 64) + (0xFC & z)); 991 z >>= 8; 992 y ^= * (u32 *) ((u8 *) des_keymap + (0xFC & z)); 993 x = x << 1 | x >> 31; 994 z = (x ^ y) & 0x55555555L; 995 y ^= z; 996 x ^= z; 997 y = y << 1 | y >> 31; 998 z = ((x >> 010) ^ y) & 0x00FF00FFL; 999 x ^= z << 010; 1000 y ^= z; 1001 z = ((y >> 002) ^ x) & 0x33333333L; 1002 y ^= z << 002; 1003 x ^= z; 1004 z = ((x >> 020) ^ y) & 0x0000FFFFL; 1005 x ^= z << 020; 1006 y ^= z; 1007 z = ((y >> 004) ^ x) & 0x0F0F0F0FL; 1008 y ^= z << 004; 1009 x ^= z; 1010 dst[0] = x; 1011 x >>= 8; 1012 dst[1] = x; 1013 x >>= 8; 1014 dst[2] = x; 1015 x >>= 8; 1016 dst[3] = x; 1017 dst[4] = y; 1018 y >>= 8; 1019 dst[5] = y; 1020 y >>= 8; 1021 dst[6] = y; 1022 y >>= 8; 1023 dst[7] = y; 1024 } 1025 1026 /* 1027 * RFC2451: Weak key checks SHOULD be performed. 1028 */ 1029 static int setkey(u32 *expkey, const u8 *key, unsigned int keylen, u32 *flags) 1030 { 1031 const u8 *k; 1032 u8 *b0, *b1; 1033 u32 n, w; 1034 u8 bits0[56], bits1[56]; 1035 1036 n = parity[key[0]]; n <<= 4; 1037 n |= parity[key[1]]; n <<= 4; 1038 n |= parity[key[2]]; n <<= 4; 1039 n |= parity[key[3]]; n <<= 4; 1040 n |= parity[key[4]]; n <<= 4; 1041 n |= parity[key[5]]; n <<= 4; 1042 n |= parity[key[6]]; n <<= 4; 1043 n |= parity[key[7]]; 1044 w = 0x88888888L; 1045 1046 if ((*flags & CRYPTO_TFM_REQ_WEAK_KEY) 1047 && !((n - (w >> 3)) & w)) { /* 1 in 10^10 keys passes this test */ 1048 if (n < 0x41415151) { 1049 if (n < 0x31312121) { 1050 if (n < 0x14141515) { 1051 /* 01 01 01 01 01 01 01 01 */ 1052 if (n == 0x11111111) goto weak; 1053 /* 01 1F 01 1F 01 0E 01 0E */ 1054 if (n == 0x13131212) goto weak; 1055 } else { 1056 /* 01 E0 01 E0 01 F1 01 F1 */ 1057 if (n == 0x14141515) goto weak; 1058 /* 01 FE 01 FE 01 FE 01 FE */ 1059 if (n == 0x16161616) goto weak; 1060 } 1061 } else { 1062 if (n < 0x34342525) { 1063 /* 1F 01 1F 01 0E 01 0E 01 */ 1064 if (n == 0x31312121) goto weak; 1065 /* 1F 1F 1F 1F 0E 0E 0E 0E (?) */ 1066 if (n == 0x33332222) goto weak; 1067 } else { 1068 /* 1F E0 1F E0 0E F1 0E F1 */ 1069 if (n == 0x34342525) goto weak; 1070 /* 1F FE 1F FE 0E FE 0E FE */ 1071 if (n == 0x36362626) goto weak; 1072 } 1073 } 1074 } else { 1075 if (n < 0x61616161) { 1076 if (n < 0x44445555) { 1077 /* E0 01 E0 01 F1 01 F1 01 */ 1078 if (n == 0x41415151) goto weak; 1079 /* E0 1F E0 1F F1 0E F1 0E */ 1080 if (n == 0x43435252) goto weak; 1081 } else { 1082 /* E0 E0 E0 E0 F1 F1 F1 F1 (?) */ 1083 if (n == 0x44445555) goto weak; 1084 /* E0 FE E0 FE F1 FE F1 FE */ 1085 if (n == 0x46465656) goto weak; 1086 } 1087 } else { 1088 if (n < 0x64646565) { 1089 /* FE 01 FE 01 FE 01 FE 01 */ 1090 if (n == 0x61616161) goto weak; 1091 /* FE 1F FE 1F FE 0E FE 0E */ 1092 if (n == 0x63636262) goto weak; 1093 } else { 1094 /* FE E0 FE E0 FE F1 FE F1 */ 1095 if (n == 0x64646565) goto weak; 1096 /* FE FE FE FE FE FE FE FE */ 1097 if (n == 0x66666666) goto weak; 1098 } 1099 } 1100 } 1101 1102 goto not_weak; 1103 weak: 1104 *flags |= CRYPTO_TFM_RES_WEAK_KEY; 1105 return -EINVAL; 1106 } 1107 1108 not_weak: 1109 1110 /* explode the bits */ 1111 n = 56; 1112 b0 = bits0; 1113 b1 = bits1; 1114 1115 do { 1116 w = (256 | *key++) << 2; 1117 do { 1118 --n; 1119 b1[n] = 8 & w; 1120 w >>= 1; 1121 b0[n] = 4 & w; 1122 } while ( w >= 16 ); 1123 } while ( n ); 1124 1125 /* put the bits in the correct places */ 1126 n = 16; 1127 k = rotors; 1128 1129 do { 1130 w = (b1[k[ 0 ]] | b0[k[ 1 ]]) << 4; 1131 w |= (b1[k[ 2 ]] | b0[k[ 3 ]]) << 2; 1132 w |= b1[k[ 4 ]] | b0[k[ 5 ]]; 1133 w <<= 8; 1134 w |= (b1[k[ 6 ]] | b0[k[ 7 ]]) << 4; 1135 w |= (b1[k[ 8 ]] | b0[k[ 9 ]]) << 2; 1136 w |= b1[k[10 ]] | b0[k[11 ]]; 1137 w <<= 8; 1138 w |= (b1[k[12 ]] | b0[k[13 ]]) << 4; 1139 w |= (b1[k[14 ]] | b0[k[15 ]]) << 2; 1140 w |= b1[k[16 ]] | b0[k[17 ]]; 1141 w <<= 8; 1142 w |= (b1[k[18 ]] | b0[k[19 ]]) << 4; 1143 w |= (b1[k[20 ]] | b0[k[21 ]]) << 2; 1144 w |= b1[k[22 ]] | b0[k[23 ]]; 1145 expkey[0] = w; 1146 1147 w = (b1[k[ 0+24]] | b0[k[ 1+24]]) << 4; 1148 w |= (b1[k[ 2+24]] | b0[k[ 3+24]]) << 2; 1149 w |= b1[k[ 4+24]] | b0[k[ 5+24]]; 1150 w <<= 8; 1151 w |= (b1[k[ 6+24]] | b0[k[ 7+24]]) << 4; 1152 w |= (b1[k[ 8+24]] | b0[k[ 9+24]]) << 2; 1153 w |= b1[k[10+24]] | b0[k[11+24]]; 1154 w <<= 8; 1155 w |= (b1[k[12+24]] | b0[k[13+24]]) << 4; 1156 w |= (b1[k[14+24]] | b0[k[15+24]]) << 2; 1157 w |= b1[k[16+24]] | b0[k[17+24]]; 1158 w <<= 8; 1159 w |= (b1[k[18+24]] | b0[k[19+24]]) << 4; 1160 w |= (b1[k[20+24]] | b0[k[21+24]]) << 2; 1161 w |= b1[k[22+24]] | b0[k[23+24]]; 1162 1163 ROR(w, 4, 28); /* could be eliminated */ 1164 expkey[1] = w; 1165 1166 k += 48; 1167 expkey += 2; 1168 } while (--n); 1169 1170 return 0; 1171 } 1172 1173 static int des_setkey(void *ctx, const u8 *key, unsigned int keylen, u32 *flags) 1174 { 1175 return setkey(((struct des_ctx *)ctx)->expkey, key, keylen, flags); 1176 } 1177 1178 static void des_encrypt(void *ctx, u8 *dst, const u8 *src) 1179 { 1180 des_small_fips_encrypt(((struct des_ctx *)ctx)->expkey, dst, src); 1181 } 1182 1183 static void des_decrypt(void *ctx, u8 *dst, const u8 *src) 1184 { 1185 des_small_fips_decrypt(((struct des_ctx *)ctx)->expkey, dst, src); 1186 } 1187 1188 /* 1189 * RFC2451: 1190 * 1191 * For DES-EDE3, there is no known need to reject weak or 1192 * complementation keys. Any weakness is obviated by the use of 1193 * multiple keys. 1194 * 1195 * However, if the first two or last two independent 64-bit keys are 1196 * equal (k1 == k2 or k2 == k3), then the DES3 operation is simply the 1197 * same as DES. Implementers MUST reject keys that exhibit this 1198 * property. 1199 * 1200 */ 1201 static int des3_ede_setkey(void *ctx, const u8 *key, 1202 unsigned int keylen, u32 *flags) 1203 { 1204 unsigned int i, off; 1205 struct des3_ede_ctx *dctx = ctx; 1206 1207 if (!(memcmp(key, &key[DES_KEY_SIZE], DES_KEY_SIZE) && 1208 memcmp(&key[DES_KEY_SIZE], &key[DES_KEY_SIZE * 2], 1209 DES_KEY_SIZE))) { 1210 1211 *flags |= CRYPTO_TFM_RES_BAD_KEY_SCHED; 1212 return -EINVAL; 1213 } 1214 1215 for (i = 0, off = 0; i < 3; i++, off += DES_EXPKEY_WORDS, 1216 key += DES_KEY_SIZE) { 1217 int ret = setkey(&dctx->expkey[off], key, DES_KEY_SIZE, flags); 1218 if (ret < 0) 1219 return ret; 1220 } 1221 return 0; 1222 } 1223 1224 static void des3_ede_encrypt(void *ctx, u8 *dst, const u8 *src) 1225 { 1226 struct des3_ede_ctx *dctx = ctx; 1227 1228 des_small_fips_encrypt(dctx->expkey, dst, src); 1229 des_small_fips_decrypt(&dctx->expkey[DES_EXPKEY_WORDS], dst, dst); 1230 des_small_fips_encrypt(&dctx->expkey[DES_EXPKEY_WORDS * 2], dst, dst); 1231 } 1232 1233 static void des3_ede_decrypt(void *ctx, u8 *dst, const u8 *src) 1234 { 1235 struct des3_ede_ctx *dctx = ctx; 1236 1237 des_small_fips_decrypt(&dctx->expkey[DES_EXPKEY_WORDS * 2], dst, src); 1238 des_small_fips_encrypt(&dctx->expkey[DES_EXPKEY_WORDS], dst, dst); 1239 des_small_fips_decrypt(dctx->expkey, dst, dst); 1240 } 1241 1242 static struct crypto_alg des_alg = { 1243 .cra_name = "des", 1244 .cra_flags = CRYPTO_ALG_TYPE_CIPHER, 1245 .cra_blocksize = DES_BLOCK_SIZE, 1246 .cra_ctxsize = sizeof(struct des_ctx), 1247 .cra_module = THIS_MODULE, 1248 .cra_list = LIST_HEAD_INIT(des_alg.cra_list), 1249 .cra_u = { .cipher = { 1250 .cia_min_keysize = DES_KEY_SIZE, 1251 .cia_max_keysize = DES_KEY_SIZE, 1252 .cia_ivsize = DES_BLOCK_SIZE, 1253 .cia_setkey = des_setkey, 1254 .cia_encrypt = des_encrypt, 1255 .cia_decrypt = des_decrypt } } 1256 }; 1257 1258 static struct crypto_alg des3_ede_alg = { 1259 .cra_name = "des3_ede", 1260 .cra_flags = CRYPTO_ALG_TYPE_CIPHER, 1261 .cra_blocksize = DES3_EDE_BLOCK_SIZE, 1262 .cra_ctxsize = sizeof(struct des3_ede_ctx), 1263 .cra_module = THIS_MODULE, 1264 .cra_list = LIST_HEAD_INIT(des3_ede_alg.cra_list), 1265 .cra_u = { .cipher = { 1266 .cia_min_keysize = DES3_EDE_KEY_SIZE, 1267 .cia_max_keysize = DES3_EDE_KEY_SIZE, 1268 .cia_ivsize = DES3_EDE_BLOCK_SIZE, 1269 .cia_setkey = des3_ede_setkey, 1270 .cia_encrypt = des3_ede_encrypt, 1271 .cia_decrypt = des3_ede_decrypt } } 1272 }; 1273 1274 static int __init init(void) 1275 { 1276 int ret = 0; 1277 1278 ret = crypto_register_alg(&des_alg); 1279 if (ret < 0) 1280 goto out; 1281 1282 ret = crypto_register_alg(&des3_ede_alg); 1283 if (ret < 0) 1284 crypto_unregister_alg(&des_alg); 1285 out: 1286 return ret; 1287 } 1288 1289 static void __exit fini(void) 1290 { 1291 crypto_unregister_alg(&des3_ede_alg); 1292 crypto_unregister_alg(&des_alg); 1293 } 1294 1295 module_init(init); 1296 module_exit(fini); 1297 1298 MODULE_LICENSE("GPL"); 1299 MODULE_DESCRIPTION("DES & Triple DES EDE Cipher Algorithms");
Cache object: 4e0eda244a12fba52352ce8f50e2166e
[ source navigation ] [ diff markup ] [ identifier search ] [ freetext search ] [ file search ] [ list types ] [ track identifier ]