hc
2024-01-31 f9004dbfff8a3fbbd7e2a88c8a4327c7f2f8e5b2
kernel/crypto/des_generic.c
....@@ -1,15 +1,10 @@
1
+// SPDX-License-Identifier: GPL-2.0-or-later
12 /*
23 * Cryptographic API.
34 *
45 * DES & Triple DES EDE Cipher Algorithms.
56 *
67 * Copyright (c) 2005 Dag Arne Osvik <da@osvik.no>
7
- *
8
- * This program is free software; you can redistribute it and/or modify
9
- * it under the terms of the GNU General Public License as published by
10
- * the Free Software Foundation; either version 2 of the License, or
11
- * (at your option) any later version.
12
- *
138 */
149
1510 #include <asm/byteorder.h>
....@@ -18,924 +13,73 @@
1813 #include <linux/module.h>
1914 #include <linux/errno.h>
2015 #include <linux/crypto.h>
21
-#include <linux/types.h>
2216
23
-#include <crypto/des.h>
24
-
25
-#define ROL(x, r) ((x) = rol32((x), (r)))
26
-#define ROR(x, r) ((x) = ror32((x), (r)))
27
-
28
-struct des_ctx {
29
- u32 expkey[DES_EXPKEY_WORDS];
30
-};
31
-
32
-struct des3_ede_ctx {
33
- u32 expkey[DES3_EDE_EXPKEY_WORDS];
34
-};
35
-
36
-/* Lookup tables for key expansion */
37
-
38
-static const u8 pc1[256] = {
39
- 0x00, 0x00, 0x40, 0x04, 0x10, 0x10, 0x50, 0x14,
40
- 0x04, 0x40, 0x44, 0x44, 0x14, 0x50, 0x54, 0x54,
41
- 0x02, 0x02, 0x42, 0x06, 0x12, 0x12, 0x52, 0x16,
42
- 0x06, 0x42, 0x46, 0x46, 0x16, 0x52, 0x56, 0x56,
43
- 0x80, 0x08, 0xc0, 0x0c, 0x90, 0x18, 0xd0, 0x1c,
44
- 0x84, 0x48, 0xc4, 0x4c, 0x94, 0x58, 0xd4, 0x5c,
45
- 0x82, 0x0a, 0xc2, 0x0e, 0x92, 0x1a, 0xd2, 0x1e,
46
- 0x86, 0x4a, 0xc6, 0x4e, 0x96, 0x5a, 0xd6, 0x5e,
47
- 0x20, 0x20, 0x60, 0x24, 0x30, 0x30, 0x70, 0x34,
48
- 0x24, 0x60, 0x64, 0x64, 0x34, 0x70, 0x74, 0x74,
49
- 0x22, 0x22, 0x62, 0x26, 0x32, 0x32, 0x72, 0x36,
50
- 0x26, 0x62, 0x66, 0x66, 0x36, 0x72, 0x76, 0x76,
51
- 0xa0, 0x28, 0xe0, 0x2c, 0xb0, 0x38, 0xf0, 0x3c,
52
- 0xa4, 0x68, 0xe4, 0x6c, 0xb4, 0x78, 0xf4, 0x7c,
53
- 0xa2, 0x2a, 0xe2, 0x2e, 0xb2, 0x3a, 0xf2, 0x3e,
54
- 0xa6, 0x6a, 0xe6, 0x6e, 0xb6, 0x7a, 0xf6, 0x7e,
55
- 0x08, 0x80, 0x48, 0x84, 0x18, 0x90, 0x58, 0x94,
56
- 0x0c, 0xc0, 0x4c, 0xc4, 0x1c, 0xd0, 0x5c, 0xd4,
57
- 0x0a, 0x82, 0x4a, 0x86, 0x1a, 0x92, 0x5a, 0x96,
58
- 0x0e, 0xc2, 0x4e, 0xc6, 0x1e, 0xd2, 0x5e, 0xd6,
59
- 0x88, 0x88, 0xc8, 0x8c, 0x98, 0x98, 0xd8, 0x9c,
60
- 0x8c, 0xc8, 0xcc, 0xcc, 0x9c, 0xd8, 0xdc, 0xdc,
61
- 0x8a, 0x8a, 0xca, 0x8e, 0x9a, 0x9a, 0xda, 0x9e,
62
- 0x8e, 0xca, 0xce, 0xce, 0x9e, 0xda, 0xde, 0xde,
63
- 0x28, 0xa0, 0x68, 0xa4, 0x38, 0xb0, 0x78, 0xb4,
64
- 0x2c, 0xe0, 0x6c, 0xe4, 0x3c, 0xf0, 0x7c, 0xf4,
65
- 0x2a, 0xa2, 0x6a, 0xa6, 0x3a, 0xb2, 0x7a, 0xb6,
66
- 0x2e, 0xe2, 0x6e, 0xe6, 0x3e, 0xf2, 0x7e, 0xf6,
67
- 0xa8, 0xa8, 0xe8, 0xac, 0xb8, 0xb8, 0xf8, 0xbc,
68
- 0xac, 0xe8, 0xec, 0xec, 0xbc, 0xf8, 0xfc, 0xfc,
69
- 0xaa, 0xaa, 0xea, 0xae, 0xba, 0xba, 0xfa, 0xbe,
70
- 0xae, 0xea, 0xee, 0xee, 0xbe, 0xfa, 0xfe, 0xfe
71
-};
72
-
73
-static const u8 rs[256] = {
74
- 0x00, 0x00, 0x80, 0x80, 0x02, 0x02, 0x82, 0x82,
75
- 0x04, 0x04, 0x84, 0x84, 0x06, 0x06, 0x86, 0x86,
76
- 0x08, 0x08, 0x88, 0x88, 0x0a, 0x0a, 0x8a, 0x8a,
77
- 0x0c, 0x0c, 0x8c, 0x8c, 0x0e, 0x0e, 0x8e, 0x8e,
78
- 0x10, 0x10, 0x90, 0x90, 0x12, 0x12, 0x92, 0x92,
79
- 0x14, 0x14, 0x94, 0x94, 0x16, 0x16, 0x96, 0x96,
80
- 0x18, 0x18, 0x98, 0x98, 0x1a, 0x1a, 0x9a, 0x9a,
81
- 0x1c, 0x1c, 0x9c, 0x9c, 0x1e, 0x1e, 0x9e, 0x9e,
82
- 0x20, 0x20, 0xa0, 0xa0, 0x22, 0x22, 0xa2, 0xa2,
83
- 0x24, 0x24, 0xa4, 0xa4, 0x26, 0x26, 0xa6, 0xa6,
84
- 0x28, 0x28, 0xa8, 0xa8, 0x2a, 0x2a, 0xaa, 0xaa,
85
- 0x2c, 0x2c, 0xac, 0xac, 0x2e, 0x2e, 0xae, 0xae,
86
- 0x30, 0x30, 0xb0, 0xb0, 0x32, 0x32, 0xb2, 0xb2,
87
- 0x34, 0x34, 0xb4, 0xb4, 0x36, 0x36, 0xb6, 0xb6,
88
- 0x38, 0x38, 0xb8, 0xb8, 0x3a, 0x3a, 0xba, 0xba,
89
- 0x3c, 0x3c, 0xbc, 0xbc, 0x3e, 0x3e, 0xbe, 0xbe,
90
- 0x40, 0x40, 0xc0, 0xc0, 0x42, 0x42, 0xc2, 0xc2,
91
- 0x44, 0x44, 0xc4, 0xc4, 0x46, 0x46, 0xc6, 0xc6,
92
- 0x48, 0x48, 0xc8, 0xc8, 0x4a, 0x4a, 0xca, 0xca,
93
- 0x4c, 0x4c, 0xcc, 0xcc, 0x4e, 0x4e, 0xce, 0xce,
94
- 0x50, 0x50, 0xd0, 0xd0, 0x52, 0x52, 0xd2, 0xd2,
95
- 0x54, 0x54, 0xd4, 0xd4, 0x56, 0x56, 0xd6, 0xd6,
96
- 0x58, 0x58, 0xd8, 0xd8, 0x5a, 0x5a, 0xda, 0xda,
97
- 0x5c, 0x5c, 0xdc, 0xdc, 0x5e, 0x5e, 0xde, 0xde,
98
- 0x60, 0x60, 0xe0, 0xe0, 0x62, 0x62, 0xe2, 0xe2,
99
- 0x64, 0x64, 0xe4, 0xe4, 0x66, 0x66, 0xe6, 0xe6,
100
- 0x68, 0x68, 0xe8, 0xe8, 0x6a, 0x6a, 0xea, 0xea,
101
- 0x6c, 0x6c, 0xec, 0xec, 0x6e, 0x6e, 0xee, 0xee,
102
- 0x70, 0x70, 0xf0, 0xf0, 0x72, 0x72, 0xf2, 0xf2,
103
- 0x74, 0x74, 0xf4, 0xf4, 0x76, 0x76, 0xf6, 0xf6,
104
- 0x78, 0x78, 0xf8, 0xf8, 0x7a, 0x7a, 0xfa, 0xfa,
105
- 0x7c, 0x7c, 0xfc, 0xfc, 0x7e, 0x7e, 0xfe, 0xfe
106
-};
107
-
108
-static const u32 pc2[1024] = {
109
- 0x00000000, 0x00000000, 0x00000000, 0x00000000,
110
- 0x00040000, 0x00000000, 0x04000000, 0x00100000,
111
- 0x00400000, 0x00000008, 0x00000800, 0x40000000,
112
- 0x00440000, 0x00000008, 0x04000800, 0x40100000,
113
- 0x00000400, 0x00000020, 0x08000000, 0x00000100,
114
- 0x00040400, 0x00000020, 0x0c000000, 0x00100100,
115
- 0x00400400, 0x00000028, 0x08000800, 0x40000100,
116
- 0x00440400, 0x00000028, 0x0c000800, 0x40100100,
117
- 0x80000000, 0x00000010, 0x00000000, 0x00800000,
118
- 0x80040000, 0x00000010, 0x04000000, 0x00900000,
119
- 0x80400000, 0x00000018, 0x00000800, 0x40800000,
120
- 0x80440000, 0x00000018, 0x04000800, 0x40900000,
121
- 0x80000400, 0x00000030, 0x08000000, 0x00800100,
122
- 0x80040400, 0x00000030, 0x0c000000, 0x00900100,
123
- 0x80400400, 0x00000038, 0x08000800, 0x40800100,
124
- 0x80440400, 0x00000038, 0x0c000800, 0x40900100,
125
- 0x10000000, 0x00000000, 0x00200000, 0x00001000,
126
- 0x10040000, 0x00000000, 0x04200000, 0x00101000,
127
- 0x10400000, 0x00000008, 0x00200800, 0x40001000,
128
- 0x10440000, 0x00000008, 0x04200800, 0x40101000,
129
- 0x10000400, 0x00000020, 0x08200000, 0x00001100,
130
- 0x10040400, 0x00000020, 0x0c200000, 0x00101100,
131
- 0x10400400, 0x00000028, 0x08200800, 0x40001100,
132
- 0x10440400, 0x00000028, 0x0c200800, 0x40101100,
133
- 0x90000000, 0x00000010, 0x00200000, 0x00801000,
134
- 0x90040000, 0x00000010, 0x04200000, 0x00901000,
135
- 0x90400000, 0x00000018, 0x00200800, 0x40801000,
136
- 0x90440000, 0x00000018, 0x04200800, 0x40901000,
137
- 0x90000400, 0x00000030, 0x08200000, 0x00801100,
138
- 0x90040400, 0x00000030, 0x0c200000, 0x00901100,
139
- 0x90400400, 0x00000038, 0x08200800, 0x40801100,
140
- 0x90440400, 0x00000038, 0x0c200800, 0x40901100,
141
- 0x00000200, 0x00080000, 0x00000000, 0x00000004,
142
- 0x00040200, 0x00080000, 0x04000000, 0x00100004,
143
- 0x00400200, 0x00080008, 0x00000800, 0x40000004,
144
- 0x00440200, 0x00080008, 0x04000800, 0x40100004,
145
- 0x00000600, 0x00080020, 0x08000000, 0x00000104,
146
- 0x00040600, 0x00080020, 0x0c000000, 0x00100104,
147
- 0x00400600, 0x00080028, 0x08000800, 0x40000104,
148
- 0x00440600, 0x00080028, 0x0c000800, 0x40100104,
149
- 0x80000200, 0x00080010, 0x00000000, 0x00800004,
150
- 0x80040200, 0x00080010, 0x04000000, 0x00900004,
151
- 0x80400200, 0x00080018, 0x00000800, 0x40800004,
152
- 0x80440200, 0x00080018, 0x04000800, 0x40900004,
153
- 0x80000600, 0x00080030, 0x08000000, 0x00800104,
154
- 0x80040600, 0x00080030, 0x0c000000, 0x00900104,
155
- 0x80400600, 0x00080038, 0x08000800, 0x40800104,
156
- 0x80440600, 0x00080038, 0x0c000800, 0x40900104,
157
- 0x10000200, 0x00080000, 0x00200000, 0x00001004,
158
- 0x10040200, 0x00080000, 0x04200000, 0x00101004,
159
- 0x10400200, 0x00080008, 0x00200800, 0x40001004,
160
- 0x10440200, 0x00080008, 0x04200800, 0x40101004,
161
- 0x10000600, 0x00080020, 0x08200000, 0x00001104,
162
- 0x10040600, 0x00080020, 0x0c200000, 0x00101104,
163
- 0x10400600, 0x00080028, 0x08200800, 0x40001104,
164
- 0x10440600, 0x00080028, 0x0c200800, 0x40101104,
165
- 0x90000200, 0x00080010, 0x00200000, 0x00801004,
166
- 0x90040200, 0x00080010, 0x04200000, 0x00901004,
167
- 0x90400200, 0x00080018, 0x00200800, 0x40801004,
168
- 0x90440200, 0x00080018, 0x04200800, 0x40901004,
169
- 0x90000600, 0x00080030, 0x08200000, 0x00801104,
170
- 0x90040600, 0x00080030, 0x0c200000, 0x00901104,
171
- 0x90400600, 0x00080038, 0x08200800, 0x40801104,
172
- 0x90440600, 0x00080038, 0x0c200800, 0x40901104,
173
- 0x00000002, 0x00002000, 0x20000000, 0x00000001,
174
- 0x00040002, 0x00002000, 0x24000000, 0x00100001,
175
- 0x00400002, 0x00002008, 0x20000800, 0x40000001,
176
- 0x00440002, 0x00002008, 0x24000800, 0x40100001,
177
- 0x00000402, 0x00002020, 0x28000000, 0x00000101,
178
- 0x00040402, 0x00002020, 0x2c000000, 0x00100101,
179
- 0x00400402, 0x00002028, 0x28000800, 0x40000101,
180
- 0x00440402, 0x00002028, 0x2c000800, 0x40100101,
181
- 0x80000002, 0x00002010, 0x20000000, 0x00800001,
182
- 0x80040002, 0x00002010, 0x24000000, 0x00900001,
183
- 0x80400002, 0x00002018, 0x20000800, 0x40800001,
184
- 0x80440002, 0x00002018, 0x24000800, 0x40900001,
185
- 0x80000402, 0x00002030, 0x28000000, 0x00800101,
186
- 0x80040402, 0x00002030, 0x2c000000, 0x00900101,
187
- 0x80400402, 0x00002038, 0x28000800, 0x40800101,
188
- 0x80440402, 0x00002038, 0x2c000800, 0x40900101,
189
- 0x10000002, 0x00002000, 0x20200000, 0x00001001,
190
- 0x10040002, 0x00002000, 0x24200000, 0x00101001,
191
- 0x10400002, 0x00002008, 0x20200800, 0x40001001,
192
- 0x10440002, 0x00002008, 0x24200800, 0x40101001,
193
- 0x10000402, 0x00002020, 0x28200000, 0x00001101,
194
- 0x10040402, 0x00002020, 0x2c200000, 0x00101101,
195
- 0x10400402, 0x00002028, 0x28200800, 0x40001101,
196
- 0x10440402, 0x00002028, 0x2c200800, 0x40101101,
197
- 0x90000002, 0x00002010, 0x20200000, 0x00801001,
198
- 0x90040002, 0x00002010, 0x24200000, 0x00901001,
199
- 0x90400002, 0x00002018, 0x20200800, 0x40801001,
200
- 0x90440002, 0x00002018, 0x24200800, 0x40901001,
201
- 0x90000402, 0x00002030, 0x28200000, 0x00801101,
202
- 0x90040402, 0x00002030, 0x2c200000, 0x00901101,
203
- 0x90400402, 0x00002038, 0x28200800, 0x40801101,
204
- 0x90440402, 0x00002038, 0x2c200800, 0x40901101,
205
- 0x00000202, 0x00082000, 0x20000000, 0x00000005,
206
- 0x00040202, 0x00082000, 0x24000000, 0x00100005,
207
- 0x00400202, 0x00082008, 0x20000800, 0x40000005,
208
- 0x00440202, 0x00082008, 0x24000800, 0x40100005,
209
- 0x00000602, 0x00082020, 0x28000000, 0x00000105,
210
- 0x00040602, 0x00082020, 0x2c000000, 0x00100105,
211
- 0x00400602, 0x00082028, 0x28000800, 0x40000105,
212
- 0x00440602, 0x00082028, 0x2c000800, 0x40100105,
213
- 0x80000202, 0x00082010, 0x20000000, 0x00800005,
214
- 0x80040202, 0x00082010, 0x24000000, 0x00900005,
215
- 0x80400202, 0x00082018, 0x20000800, 0x40800005,
216
- 0x80440202, 0x00082018, 0x24000800, 0x40900005,
217
- 0x80000602, 0x00082030, 0x28000000, 0x00800105,
218
- 0x80040602, 0x00082030, 0x2c000000, 0x00900105,
219
- 0x80400602, 0x00082038, 0x28000800, 0x40800105,
220
- 0x80440602, 0x00082038, 0x2c000800, 0x40900105,
221
- 0x10000202, 0x00082000, 0x20200000, 0x00001005,
222
- 0x10040202, 0x00082000, 0x24200000, 0x00101005,
223
- 0x10400202, 0x00082008, 0x20200800, 0x40001005,
224
- 0x10440202, 0x00082008, 0x24200800, 0x40101005,
225
- 0x10000602, 0x00082020, 0x28200000, 0x00001105,
226
- 0x10040602, 0x00082020, 0x2c200000, 0x00101105,
227
- 0x10400602, 0x00082028, 0x28200800, 0x40001105,
228
- 0x10440602, 0x00082028, 0x2c200800, 0x40101105,
229
- 0x90000202, 0x00082010, 0x20200000, 0x00801005,
230
- 0x90040202, 0x00082010, 0x24200000, 0x00901005,
231
- 0x90400202, 0x00082018, 0x20200800, 0x40801005,
232
- 0x90440202, 0x00082018, 0x24200800, 0x40901005,
233
- 0x90000602, 0x00082030, 0x28200000, 0x00801105,
234
- 0x90040602, 0x00082030, 0x2c200000, 0x00901105,
235
- 0x90400602, 0x00082038, 0x28200800, 0x40801105,
236
- 0x90440602, 0x00082038, 0x2c200800, 0x40901105,
237
-
238
- 0x00000000, 0x00000000, 0x00000000, 0x00000000,
239
- 0x00000000, 0x00000008, 0x00080000, 0x10000000,
240
- 0x02000000, 0x00000000, 0x00000080, 0x00001000,
241
- 0x02000000, 0x00000008, 0x00080080, 0x10001000,
242
- 0x00004000, 0x00000000, 0x00000040, 0x00040000,
243
- 0x00004000, 0x00000008, 0x00080040, 0x10040000,
244
- 0x02004000, 0x00000000, 0x000000c0, 0x00041000,
245
- 0x02004000, 0x00000008, 0x000800c0, 0x10041000,
246
- 0x00020000, 0x00008000, 0x08000000, 0x00200000,
247
- 0x00020000, 0x00008008, 0x08080000, 0x10200000,
248
- 0x02020000, 0x00008000, 0x08000080, 0x00201000,
249
- 0x02020000, 0x00008008, 0x08080080, 0x10201000,
250
- 0x00024000, 0x00008000, 0x08000040, 0x00240000,
251
- 0x00024000, 0x00008008, 0x08080040, 0x10240000,
252
- 0x02024000, 0x00008000, 0x080000c0, 0x00241000,
253
- 0x02024000, 0x00008008, 0x080800c0, 0x10241000,
254
- 0x00000000, 0x01000000, 0x00002000, 0x00000020,
255
- 0x00000000, 0x01000008, 0x00082000, 0x10000020,
256
- 0x02000000, 0x01000000, 0x00002080, 0x00001020,
257
- 0x02000000, 0x01000008, 0x00082080, 0x10001020,
258
- 0x00004000, 0x01000000, 0x00002040, 0x00040020,
259
- 0x00004000, 0x01000008, 0x00082040, 0x10040020,
260
- 0x02004000, 0x01000000, 0x000020c0, 0x00041020,
261
- 0x02004000, 0x01000008, 0x000820c0, 0x10041020,
262
- 0x00020000, 0x01008000, 0x08002000, 0x00200020,
263
- 0x00020000, 0x01008008, 0x08082000, 0x10200020,
264
- 0x02020000, 0x01008000, 0x08002080, 0x00201020,
265
- 0x02020000, 0x01008008, 0x08082080, 0x10201020,
266
- 0x00024000, 0x01008000, 0x08002040, 0x00240020,
267
- 0x00024000, 0x01008008, 0x08082040, 0x10240020,
268
- 0x02024000, 0x01008000, 0x080020c0, 0x00241020,
269
- 0x02024000, 0x01008008, 0x080820c0, 0x10241020,
270
- 0x00000400, 0x04000000, 0x00100000, 0x00000004,
271
- 0x00000400, 0x04000008, 0x00180000, 0x10000004,
272
- 0x02000400, 0x04000000, 0x00100080, 0x00001004,
273
- 0x02000400, 0x04000008, 0x00180080, 0x10001004,
274
- 0x00004400, 0x04000000, 0x00100040, 0x00040004,
275
- 0x00004400, 0x04000008, 0x00180040, 0x10040004,
276
- 0x02004400, 0x04000000, 0x001000c0, 0x00041004,
277
- 0x02004400, 0x04000008, 0x001800c0, 0x10041004,
278
- 0x00020400, 0x04008000, 0x08100000, 0x00200004,
279
- 0x00020400, 0x04008008, 0x08180000, 0x10200004,
280
- 0x02020400, 0x04008000, 0x08100080, 0x00201004,
281
- 0x02020400, 0x04008008, 0x08180080, 0x10201004,
282
- 0x00024400, 0x04008000, 0x08100040, 0x00240004,
283
- 0x00024400, 0x04008008, 0x08180040, 0x10240004,
284
- 0x02024400, 0x04008000, 0x081000c0, 0x00241004,
285
- 0x02024400, 0x04008008, 0x081800c0, 0x10241004,
286
- 0x00000400, 0x05000000, 0x00102000, 0x00000024,
287
- 0x00000400, 0x05000008, 0x00182000, 0x10000024,
288
- 0x02000400, 0x05000000, 0x00102080, 0x00001024,
289
- 0x02000400, 0x05000008, 0x00182080, 0x10001024,
290
- 0x00004400, 0x05000000, 0x00102040, 0x00040024,
291
- 0x00004400, 0x05000008, 0x00182040, 0x10040024,
292
- 0x02004400, 0x05000000, 0x001020c0, 0x00041024,
293
- 0x02004400, 0x05000008, 0x001820c0, 0x10041024,
294
- 0x00020400, 0x05008000, 0x08102000, 0x00200024,
295
- 0x00020400, 0x05008008, 0x08182000, 0x10200024,
296
- 0x02020400, 0x05008000, 0x08102080, 0x00201024,
297
- 0x02020400, 0x05008008, 0x08182080, 0x10201024,
298
- 0x00024400, 0x05008000, 0x08102040, 0x00240024,
299
- 0x00024400, 0x05008008, 0x08182040, 0x10240024,
300
- 0x02024400, 0x05008000, 0x081020c0, 0x00241024,
301
- 0x02024400, 0x05008008, 0x081820c0, 0x10241024,
302
- 0x00000800, 0x00010000, 0x20000000, 0x00000010,
303
- 0x00000800, 0x00010008, 0x20080000, 0x10000010,
304
- 0x02000800, 0x00010000, 0x20000080, 0x00001010,
305
- 0x02000800, 0x00010008, 0x20080080, 0x10001010,
306
- 0x00004800, 0x00010000, 0x20000040, 0x00040010,
307
- 0x00004800, 0x00010008, 0x20080040, 0x10040010,
308
- 0x02004800, 0x00010000, 0x200000c0, 0x00041010,
309
- 0x02004800, 0x00010008, 0x200800c0, 0x10041010,
310
- 0x00020800, 0x00018000, 0x28000000, 0x00200010,
311
- 0x00020800, 0x00018008, 0x28080000, 0x10200010,
312
- 0x02020800, 0x00018000, 0x28000080, 0x00201010,
313
- 0x02020800, 0x00018008, 0x28080080, 0x10201010,
314
- 0x00024800, 0x00018000, 0x28000040, 0x00240010,
315
- 0x00024800, 0x00018008, 0x28080040, 0x10240010,
316
- 0x02024800, 0x00018000, 0x280000c0, 0x00241010,
317
- 0x02024800, 0x00018008, 0x280800c0, 0x10241010,
318
- 0x00000800, 0x01010000, 0x20002000, 0x00000030,
319
- 0x00000800, 0x01010008, 0x20082000, 0x10000030,
320
- 0x02000800, 0x01010000, 0x20002080, 0x00001030,
321
- 0x02000800, 0x01010008, 0x20082080, 0x10001030,
322
- 0x00004800, 0x01010000, 0x20002040, 0x00040030,
323
- 0x00004800, 0x01010008, 0x20082040, 0x10040030,
324
- 0x02004800, 0x01010000, 0x200020c0, 0x00041030,
325
- 0x02004800, 0x01010008, 0x200820c0, 0x10041030,
326
- 0x00020800, 0x01018000, 0x28002000, 0x00200030,
327
- 0x00020800, 0x01018008, 0x28082000, 0x10200030,
328
- 0x02020800, 0x01018000, 0x28002080, 0x00201030,
329
- 0x02020800, 0x01018008, 0x28082080, 0x10201030,
330
- 0x00024800, 0x01018000, 0x28002040, 0x00240030,
331
- 0x00024800, 0x01018008, 0x28082040, 0x10240030,
332
- 0x02024800, 0x01018000, 0x280020c0, 0x00241030,
333
- 0x02024800, 0x01018008, 0x280820c0, 0x10241030,
334
- 0x00000c00, 0x04010000, 0x20100000, 0x00000014,
335
- 0x00000c00, 0x04010008, 0x20180000, 0x10000014,
336
- 0x02000c00, 0x04010000, 0x20100080, 0x00001014,
337
- 0x02000c00, 0x04010008, 0x20180080, 0x10001014,
338
- 0x00004c00, 0x04010000, 0x20100040, 0x00040014,
339
- 0x00004c00, 0x04010008, 0x20180040, 0x10040014,
340
- 0x02004c00, 0x04010000, 0x201000c0, 0x00041014,
341
- 0x02004c00, 0x04010008, 0x201800c0, 0x10041014,
342
- 0x00020c00, 0x04018000, 0x28100000, 0x00200014,
343
- 0x00020c00, 0x04018008, 0x28180000, 0x10200014,
344
- 0x02020c00, 0x04018000, 0x28100080, 0x00201014,
345
- 0x02020c00, 0x04018008, 0x28180080, 0x10201014,
346
- 0x00024c00, 0x04018000, 0x28100040, 0x00240014,
347
- 0x00024c00, 0x04018008, 0x28180040, 0x10240014,
348
- 0x02024c00, 0x04018000, 0x281000c0, 0x00241014,
349
- 0x02024c00, 0x04018008, 0x281800c0, 0x10241014,
350
- 0x00000c00, 0x05010000, 0x20102000, 0x00000034,
351
- 0x00000c00, 0x05010008, 0x20182000, 0x10000034,
352
- 0x02000c00, 0x05010000, 0x20102080, 0x00001034,
353
- 0x02000c00, 0x05010008, 0x20182080, 0x10001034,
354
- 0x00004c00, 0x05010000, 0x20102040, 0x00040034,
355
- 0x00004c00, 0x05010008, 0x20182040, 0x10040034,
356
- 0x02004c00, 0x05010000, 0x201020c0, 0x00041034,
357
- 0x02004c00, 0x05010008, 0x201820c0, 0x10041034,
358
- 0x00020c00, 0x05018000, 0x28102000, 0x00200034,
359
- 0x00020c00, 0x05018008, 0x28182000, 0x10200034,
360
- 0x02020c00, 0x05018000, 0x28102080, 0x00201034,
361
- 0x02020c00, 0x05018008, 0x28182080, 0x10201034,
362
- 0x00024c00, 0x05018000, 0x28102040, 0x00240034,
363
- 0x00024c00, 0x05018008, 0x28182040, 0x10240034,
364
- 0x02024c00, 0x05018000, 0x281020c0, 0x00241034,
365
- 0x02024c00, 0x05018008, 0x281820c0, 0x10241034
366
-};
367
-
368
-/* S-box lookup tables */
369
-
370
-static const u32 S1[64] = {
371
- 0x01010400, 0x00000000, 0x00010000, 0x01010404,
372
- 0x01010004, 0x00010404, 0x00000004, 0x00010000,
373
- 0x00000400, 0x01010400, 0x01010404, 0x00000400,
374
- 0x01000404, 0x01010004, 0x01000000, 0x00000004,
375
- 0x00000404, 0x01000400, 0x01000400, 0x00010400,
376
- 0x00010400, 0x01010000, 0x01010000, 0x01000404,
377
- 0x00010004, 0x01000004, 0x01000004, 0x00010004,
378
- 0x00000000, 0x00000404, 0x00010404, 0x01000000,
379
- 0x00010000, 0x01010404, 0x00000004, 0x01010000,
380
- 0x01010400, 0x01000000, 0x01000000, 0x00000400,
381
- 0x01010004, 0x00010000, 0x00010400, 0x01000004,
382
- 0x00000400, 0x00000004, 0x01000404, 0x00010404,
383
- 0x01010404, 0x00010004, 0x01010000, 0x01000404,
384
- 0x01000004, 0x00000404, 0x00010404, 0x01010400,
385
- 0x00000404, 0x01000400, 0x01000400, 0x00000000,
386
- 0x00010004, 0x00010400, 0x00000000, 0x01010004
387
-};
388
-
389
-static const u32 S2[64] = {
390
- 0x80108020, 0x80008000, 0x00008000, 0x00108020,
391
- 0x00100000, 0x00000020, 0x80100020, 0x80008020,
392
- 0x80000020, 0x80108020, 0x80108000, 0x80000000,
393
- 0x80008000, 0x00100000, 0x00000020, 0x80100020,
394
- 0x00108000, 0x00100020, 0x80008020, 0x00000000,
395
- 0x80000000, 0x00008000, 0x00108020, 0x80100000,
396
- 0x00100020, 0x80000020, 0x00000000, 0x00108000,
397
- 0x00008020, 0x80108000, 0x80100000, 0x00008020,
398
- 0x00000000, 0x00108020, 0x80100020, 0x00100000,
399
- 0x80008020, 0x80100000, 0x80108000, 0x00008000,
400
- 0x80100000, 0x80008000, 0x00000020, 0x80108020,
401
- 0x00108020, 0x00000020, 0x00008000, 0x80000000,
402
- 0x00008020, 0x80108000, 0x00100000, 0x80000020,
403
- 0x00100020, 0x80008020, 0x80000020, 0x00100020,
404
- 0x00108000, 0x00000000, 0x80008000, 0x00008020,
405
- 0x80000000, 0x80100020, 0x80108020, 0x00108000
406
-};
407
-
408
-static const u32 S3[64] = {
409
- 0x00000208, 0x08020200, 0x00000000, 0x08020008,
410
- 0x08000200, 0x00000000, 0x00020208, 0x08000200,
411
- 0x00020008, 0x08000008, 0x08000008, 0x00020000,
412
- 0x08020208, 0x00020008, 0x08020000, 0x00000208,
413
- 0x08000000, 0x00000008, 0x08020200, 0x00000200,
414
- 0x00020200, 0x08020000, 0x08020008, 0x00020208,
415
- 0x08000208, 0x00020200, 0x00020000, 0x08000208,
416
- 0x00000008, 0x08020208, 0x00000200, 0x08000000,
417
- 0x08020200, 0x08000000, 0x00020008, 0x00000208,
418
- 0x00020000, 0x08020200, 0x08000200, 0x00000000,
419
- 0x00000200, 0x00020008, 0x08020208, 0x08000200,
420
- 0x08000008, 0x00000200, 0x00000000, 0x08020008,
421
- 0x08000208, 0x00020000, 0x08000000, 0x08020208,
422
- 0x00000008, 0x00020208, 0x00020200, 0x08000008,
423
- 0x08020000, 0x08000208, 0x00000208, 0x08020000,
424
- 0x00020208, 0x00000008, 0x08020008, 0x00020200
425
-};
426
-
427
-static const u32 S4[64] = {
428
- 0x00802001, 0x00002081, 0x00002081, 0x00000080,
429
- 0x00802080, 0x00800081, 0x00800001, 0x00002001,
430
- 0x00000000, 0x00802000, 0x00802000, 0x00802081,
431
- 0x00000081, 0x00000000, 0x00800080, 0x00800001,
432
- 0x00000001, 0x00002000, 0x00800000, 0x00802001,
433
- 0x00000080, 0x00800000, 0x00002001, 0x00002080,
434
- 0x00800081, 0x00000001, 0x00002080, 0x00800080,
435
- 0x00002000, 0x00802080, 0x00802081, 0x00000081,
436
- 0x00800080, 0x00800001, 0x00802000, 0x00802081,
437
- 0x00000081, 0x00000000, 0x00000000, 0x00802000,
438
- 0x00002080, 0x00800080, 0x00800081, 0x00000001,
439
- 0x00802001, 0x00002081, 0x00002081, 0x00000080,
440
- 0x00802081, 0x00000081, 0x00000001, 0x00002000,
441
- 0x00800001, 0x00002001, 0x00802080, 0x00800081,
442
- 0x00002001, 0x00002080, 0x00800000, 0x00802001,
443
- 0x00000080, 0x00800000, 0x00002000, 0x00802080
444
-};
445
-
446
-static const u32 S5[64] = {
447
- 0x00000100, 0x02080100, 0x02080000, 0x42000100,
448
- 0x00080000, 0x00000100, 0x40000000, 0x02080000,
449
- 0x40080100, 0x00080000, 0x02000100, 0x40080100,
450
- 0x42000100, 0x42080000, 0x00080100, 0x40000000,
451
- 0x02000000, 0x40080000, 0x40080000, 0x00000000,
452
- 0x40000100, 0x42080100, 0x42080100, 0x02000100,
453
- 0x42080000, 0x40000100, 0x00000000, 0x42000000,
454
- 0x02080100, 0x02000000, 0x42000000, 0x00080100,
455
- 0x00080000, 0x42000100, 0x00000100, 0x02000000,
456
- 0x40000000, 0x02080000, 0x42000100, 0x40080100,
457
- 0x02000100, 0x40000000, 0x42080000, 0x02080100,
458
- 0x40080100, 0x00000100, 0x02000000, 0x42080000,
459
- 0x42080100, 0x00080100, 0x42000000, 0x42080100,
460
- 0x02080000, 0x00000000, 0x40080000, 0x42000000,
461
- 0x00080100, 0x02000100, 0x40000100, 0x00080000,
462
- 0x00000000, 0x40080000, 0x02080100, 0x40000100
463
-};
464
-
465
-static const u32 S6[64] = {
466
- 0x20000010, 0x20400000, 0x00004000, 0x20404010,
467
- 0x20400000, 0x00000010, 0x20404010, 0x00400000,
468
- 0x20004000, 0x00404010, 0x00400000, 0x20000010,
469
- 0x00400010, 0x20004000, 0x20000000, 0x00004010,
470
- 0x00000000, 0x00400010, 0x20004010, 0x00004000,
471
- 0x00404000, 0x20004010, 0x00000010, 0x20400010,
472
- 0x20400010, 0x00000000, 0x00404010, 0x20404000,
473
- 0x00004010, 0x00404000, 0x20404000, 0x20000000,
474
- 0x20004000, 0x00000010, 0x20400010, 0x00404000,
475
- 0x20404010, 0x00400000, 0x00004010, 0x20000010,
476
- 0x00400000, 0x20004000, 0x20000000, 0x00004010,
477
- 0x20000010, 0x20404010, 0x00404000, 0x20400000,
478
- 0x00404010, 0x20404000, 0x00000000, 0x20400010,
479
- 0x00000010, 0x00004000, 0x20400000, 0x00404010,
480
- 0x00004000, 0x00400010, 0x20004010, 0x00000000,
481
- 0x20404000, 0x20000000, 0x00400010, 0x20004010
482
-};
483
-
484
-static const u32 S7[64] = {
485
- 0x00200000, 0x04200002, 0x04000802, 0x00000000,
486
- 0x00000800, 0x04000802, 0x00200802, 0x04200800,
487
- 0x04200802, 0x00200000, 0x00000000, 0x04000002,
488
- 0x00000002, 0x04000000, 0x04200002, 0x00000802,
489
- 0x04000800, 0x00200802, 0x00200002, 0x04000800,
490
- 0x04000002, 0x04200000, 0x04200800, 0x00200002,
491
- 0x04200000, 0x00000800, 0x00000802, 0x04200802,
492
- 0x00200800, 0x00000002, 0x04000000, 0x00200800,
493
- 0x04000000, 0x00200800, 0x00200000, 0x04000802,
494
- 0x04000802, 0x04200002, 0x04200002, 0x00000002,
495
- 0x00200002, 0x04000000, 0x04000800, 0x00200000,
496
- 0x04200800, 0x00000802, 0x00200802, 0x04200800,
497
- 0x00000802, 0x04000002, 0x04200802, 0x04200000,
498
- 0x00200800, 0x00000000, 0x00000002, 0x04200802,
499
- 0x00000000, 0x00200802, 0x04200000, 0x00000800,
500
- 0x04000002, 0x04000800, 0x00000800, 0x00200002
501
-};
502
-
503
-static const u32 S8[64] = {
504
- 0x10001040, 0x00001000, 0x00040000, 0x10041040,
505
- 0x10000000, 0x10001040, 0x00000040, 0x10000000,
506
- 0x00040040, 0x10040000, 0x10041040, 0x00041000,
507
- 0x10041000, 0x00041040, 0x00001000, 0x00000040,
508
- 0x10040000, 0x10000040, 0x10001000, 0x00001040,
509
- 0x00041000, 0x00040040, 0x10040040, 0x10041000,
510
- 0x00001040, 0x00000000, 0x00000000, 0x10040040,
511
- 0x10000040, 0x10001000, 0x00041040, 0x00040000,
512
- 0x00041040, 0x00040000, 0x10041000, 0x00001000,
513
- 0x00000040, 0x10040040, 0x00001000, 0x00041040,
514
- 0x10001000, 0x00000040, 0x10000040, 0x10040000,
515
- 0x10040040, 0x10000000, 0x00040000, 0x10001040,
516
- 0x00000000, 0x10041040, 0x00040040, 0x10000040,
517
- 0x10040000, 0x10001000, 0x10001040, 0x00000000,
518
- 0x10041040, 0x00041000, 0x00041000, 0x00001040,
519
- 0x00001040, 0x00040040, 0x10000000, 0x10041000
520
-};
521
-
522
-/* Encryption components: IP, FP, and round function */
523
-
524
-#define IP(L, R, T) \
525
- ROL(R, 4); \
526
- T = L; \
527
- L ^= R; \
528
- L &= 0xf0f0f0f0; \
529
- R ^= L; \
530
- L ^= T; \
531
- ROL(R, 12); \
532
- T = L; \
533
- L ^= R; \
534
- L &= 0xffff0000; \
535
- R ^= L; \
536
- L ^= T; \
537
- ROR(R, 14); \
538
- T = L; \
539
- L ^= R; \
540
- L &= 0xcccccccc; \
541
- R ^= L; \
542
- L ^= T; \
543
- ROL(R, 6); \
544
- T = L; \
545
- L ^= R; \
546
- L &= 0xff00ff00; \
547
- R ^= L; \
548
- L ^= T; \
549
- ROR(R, 7); \
550
- T = L; \
551
- L ^= R; \
552
- L &= 0xaaaaaaaa; \
553
- R ^= L; \
554
- L ^= T; \
555
- ROL(L, 1);
556
-
557
-#define FP(L, R, T) \
558
- ROR(L, 1); \
559
- T = L; \
560
- L ^= R; \
561
- L &= 0xaaaaaaaa; \
562
- R ^= L; \
563
- L ^= T; \
564
- ROL(R, 7); \
565
- T = L; \
566
- L ^= R; \
567
- L &= 0xff00ff00; \
568
- R ^= L; \
569
- L ^= T; \
570
- ROR(R, 6); \
571
- T = L; \
572
- L ^= R; \
573
- L &= 0xcccccccc; \
574
- R ^= L; \
575
- L ^= T; \
576
- ROL(R, 14); \
577
- T = L; \
578
- L ^= R; \
579
- L &= 0xffff0000; \
580
- R ^= L; \
581
- L ^= T; \
582
- ROR(R, 12); \
583
- T = L; \
584
- L ^= R; \
585
- L &= 0xf0f0f0f0; \
586
- R ^= L; \
587
- L ^= T; \
588
- ROR(R, 4);
589
-
590
-#define ROUND(L, R, A, B, K, d) \
591
- B = K[0]; A = K[1]; K += d; \
592
- B ^= R; A ^= R; \
593
- B &= 0x3f3f3f3f; ROR(A, 4); \
594
- L ^= S8[0xff & B]; A &= 0x3f3f3f3f; \
595
- L ^= S6[0xff & (B >> 8)]; B >>= 16; \
596
- L ^= S7[0xff & A]; \
597
- L ^= S5[0xff & (A >> 8)]; A >>= 16; \
598
- L ^= S4[0xff & B]; \
599
- L ^= S2[0xff & (B >> 8)]; \
600
- L ^= S3[0xff & A]; \
601
- L ^= S1[0xff & (A >> 8)];
602
-
603
-/*
604
- * PC2 lookup tables are organized as 2 consecutive sets of 4 interleaved
605
- * tables of 128 elements. One set is for C_i and the other for D_i, while
606
- * the 4 interleaved tables correspond to four 7-bit subsets of C_i or D_i.
607
- *
608
- * After PC1 each of the variables a,b,c,d contains a 7 bit subset of C_i
609
- * or D_i in bits 7-1 (bit 0 being the least significant).
610
- */
611
-
612
-#define T1(x) pt[2 * (x) + 0]
613
-#define T2(x) pt[2 * (x) + 1]
614
-#define T3(x) pt[2 * (x) + 2]
615
-#define T4(x) pt[2 * (x) + 3]
616
-
617
-#define DES_PC2(a, b, c, d) (T4(d) | T3(c) | T2(b) | T1(a))
618
-
619
-/*
620
- * Encryption key expansion
621
- *
622
- * RFC2451: Weak key checks SHOULD be performed.
623
- *
624
- * FIPS 74:
625
- *
626
- * Keys having duals are keys which produce all zeros, all ones, or
627
- * alternating zero-one patterns in the C and D registers after Permuted
628
- * Choice 1 has operated on the key.
629
- *
630
- */
631
-unsigned long des_ekey(u32 *pe, const u8 *k)
632
-{
633
- /* K&R: long is at least 32 bits */
634
- unsigned long a, b, c, d, w;
635
- const u32 *pt = pc2;
636
-
637
- d = k[4]; d &= 0x0e; d <<= 4; d |= k[0] & 0x1e; d = pc1[d];
638
- c = k[5]; c &= 0x0e; c <<= 4; c |= k[1] & 0x1e; c = pc1[c];
639
- b = k[6]; b &= 0x0e; b <<= 4; b |= k[2] & 0x1e; b = pc1[b];
640
- a = k[7]; a &= 0x0e; a <<= 4; a |= k[3] & 0x1e; a = pc1[a];
641
-
642
- pe[15 * 2 + 0] = DES_PC2(a, b, c, d); d = rs[d];
643
- pe[14 * 2 + 0] = DES_PC2(d, a, b, c); c = rs[c]; b = rs[b];
644
- pe[13 * 2 + 0] = DES_PC2(b, c, d, a); a = rs[a]; d = rs[d];
645
- pe[12 * 2 + 0] = DES_PC2(d, a, b, c); c = rs[c]; b = rs[b];
646
- pe[11 * 2 + 0] = DES_PC2(b, c, d, a); a = rs[a]; d = rs[d];
647
- pe[10 * 2 + 0] = DES_PC2(d, a, b, c); c = rs[c]; b = rs[b];
648
- pe[ 9 * 2 + 0] = DES_PC2(b, c, d, a); a = rs[a]; d = rs[d];
649
- pe[ 8 * 2 + 0] = DES_PC2(d, a, b, c); c = rs[c];
650
- pe[ 7 * 2 + 0] = DES_PC2(c, d, a, b); b = rs[b]; a = rs[a];
651
- pe[ 6 * 2 + 0] = DES_PC2(a, b, c, d); d = rs[d]; c = rs[c];
652
- pe[ 5 * 2 + 0] = DES_PC2(c, d, a, b); b = rs[b]; a = rs[a];
653
- pe[ 4 * 2 + 0] = DES_PC2(a, b, c, d); d = rs[d]; c = rs[c];
654
- pe[ 3 * 2 + 0] = DES_PC2(c, d, a, b); b = rs[b]; a = rs[a];
655
- pe[ 2 * 2 + 0] = DES_PC2(a, b, c, d); d = rs[d]; c = rs[c];
656
- pe[ 1 * 2 + 0] = DES_PC2(c, d, a, b); b = rs[b];
657
- pe[ 0 * 2 + 0] = DES_PC2(b, c, d, a);
658
-
659
- /* Check if first half is weak */
660
- w = (a ^ c) | (b ^ d) | (rs[a] ^ c) | (b ^ rs[d]);
661
-
662
- /* Skip to next table set */
663
- pt += 512;
664
-
665
- d = k[0]; d &= 0xe0; d >>= 4; d |= k[4] & 0xf0; d = pc1[d + 1];
666
- c = k[1]; c &= 0xe0; c >>= 4; c |= k[5] & 0xf0; c = pc1[c + 1];
667
- b = k[2]; b &= 0xe0; b >>= 4; b |= k[6] & 0xf0; b = pc1[b + 1];
668
- a = k[3]; a &= 0xe0; a >>= 4; a |= k[7] & 0xf0; a = pc1[a + 1];
669
-
670
- /* Check if second half is weak */
671
- w |= (a ^ c) | (b ^ d) | (rs[a] ^ c) | (b ^ rs[d]);
672
-
673
- pe[15 * 2 + 1] = DES_PC2(a, b, c, d); d = rs[d];
674
- pe[14 * 2 + 1] = DES_PC2(d, a, b, c); c = rs[c]; b = rs[b];
675
- pe[13 * 2 + 1] = DES_PC2(b, c, d, a); a = rs[a]; d = rs[d];
676
- pe[12 * 2 + 1] = DES_PC2(d, a, b, c); c = rs[c]; b = rs[b];
677
- pe[11 * 2 + 1] = DES_PC2(b, c, d, a); a = rs[a]; d = rs[d];
678
- pe[10 * 2 + 1] = DES_PC2(d, a, b, c); c = rs[c]; b = rs[b];
679
- pe[ 9 * 2 + 1] = DES_PC2(b, c, d, a); a = rs[a]; d = rs[d];
680
- pe[ 8 * 2 + 1] = DES_PC2(d, a, b, c); c = rs[c];
681
- pe[ 7 * 2 + 1] = DES_PC2(c, d, a, b); b = rs[b]; a = rs[a];
682
- pe[ 6 * 2 + 1] = DES_PC2(a, b, c, d); d = rs[d]; c = rs[c];
683
- pe[ 5 * 2 + 1] = DES_PC2(c, d, a, b); b = rs[b]; a = rs[a];
684
- pe[ 4 * 2 + 1] = DES_PC2(a, b, c, d); d = rs[d]; c = rs[c];
685
- pe[ 3 * 2 + 1] = DES_PC2(c, d, a, b); b = rs[b]; a = rs[a];
686
- pe[ 2 * 2 + 1] = DES_PC2(a, b, c, d); d = rs[d]; c = rs[c];
687
- pe[ 1 * 2 + 1] = DES_PC2(c, d, a, b); b = rs[b];
688
- pe[ 0 * 2 + 1] = DES_PC2(b, c, d, a);
689
-
690
- /* Fixup: 2413 5768 -> 1357 2468 */
691
- for (d = 0; d < 16; ++d) {
692
- a = pe[2 * d];
693
- b = pe[2 * d + 1];
694
- c = a ^ b;
695
- c &= 0xffff0000;
696
- a ^= c;
697
- b ^= c;
698
- ROL(b, 18);
699
- pe[2 * d] = a;
700
- pe[2 * d + 1] = b;
701
- }
702
-
703
- /* Zero if weak key */
704
- return w;
705
-}
706
-EXPORT_SYMBOL_GPL(des_ekey);
707
-
708
-/*
709
- * Decryption key expansion
710
- *
711
- * No weak key checking is performed, as this is only used by triple DES
712
- *
713
- */
714
-static void dkey(u32 *pe, const u8 *k)
715
-{
716
- /* K&R: long is at least 32 bits */
717
- unsigned long a, b, c, d;
718
- const u32 *pt = pc2;
719
-
720
- d = k[4]; d &= 0x0e; d <<= 4; d |= k[0] & 0x1e; d = pc1[d];
721
- c = k[5]; c &= 0x0e; c <<= 4; c |= k[1] & 0x1e; c = pc1[c];
722
- b = k[6]; b &= 0x0e; b <<= 4; b |= k[2] & 0x1e; b = pc1[b];
723
- a = k[7]; a &= 0x0e; a <<= 4; a |= k[3] & 0x1e; a = pc1[a];
724
-
725
- pe[ 0 * 2] = DES_PC2(a, b, c, d); d = rs[d];
726
- pe[ 1 * 2] = DES_PC2(d, a, b, c); c = rs[c]; b = rs[b];
727
- pe[ 2 * 2] = DES_PC2(b, c, d, a); a = rs[a]; d = rs[d];
728
- pe[ 3 * 2] = DES_PC2(d, a, b, c); c = rs[c]; b = rs[b];
729
- pe[ 4 * 2] = DES_PC2(b, c, d, a); a = rs[a]; d = rs[d];
730
- pe[ 5 * 2] = DES_PC2(d, a, b, c); c = rs[c]; b = rs[b];
731
- pe[ 6 * 2] = DES_PC2(b, c, d, a); a = rs[a]; d = rs[d];
732
- pe[ 7 * 2] = DES_PC2(d, a, b, c); c = rs[c];
733
- pe[ 8 * 2] = DES_PC2(c, d, a, b); b = rs[b]; a = rs[a];
734
- pe[ 9 * 2] = DES_PC2(a, b, c, d); d = rs[d]; c = rs[c];
735
- pe[10 * 2] = DES_PC2(c, d, a, b); b = rs[b]; a = rs[a];
736
- pe[11 * 2] = DES_PC2(a, b, c, d); d = rs[d]; c = rs[c];
737
- pe[12 * 2] = DES_PC2(c, d, a, b); b = rs[b]; a = rs[a];
738
- pe[13 * 2] = DES_PC2(a, b, c, d); d = rs[d]; c = rs[c];
739
- pe[14 * 2] = DES_PC2(c, d, a, b); b = rs[b];
740
- pe[15 * 2] = DES_PC2(b, c, d, a);
741
-
742
- /* Skip to next table set */
743
- pt += 512;
744
-
745
- d = k[0]; d &= 0xe0; d >>= 4; d |= k[4] & 0xf0; d = pc1[d + 1];
746
- c = k[1]; c &= 0xe0; c >>= 4; c |= k[5] & 0xf0; c = pc1[c + 1];
747
- b = k[2]; b &= 0xe0; b >>= 4; b |= k[6] & 0xf0; b = pc1[b + 1];
748
- a = k[3]; a &= 0xe0; a >>= 4; a |= k[7] & 0xf0; a = pc1[a + 1];
749
-
750
- pe[ 0 * 2 + 1] = DES_PC2(a, b, c, d); d = rs[d];
751
- pe[ 1 * 2 + 1] = DES_PC2(d, a, b, c); c = rs[c]; b = rs[b];
752
- pe[ 2 * 2 + 1] = DES_PC2(b, c, d, a); a = rs[a]; d = rs[d];
753
- pe[ 3 * 2 + 1] = DES_PC2(d, a, b, c); c = rs[c]; b = rs[b];
754
- pe[ 4 * 2 + 1] = DES_PC2(b, c, d, a); a = rs[a]; d = rs[d];
755
- pe[ 5 * 2 + 1] = DES_PC2(d, a, b, c); c = rs[c]; b = rs[b];
756
- pe[ 6 * 2 + 1] = DES_PC2(b, c, d, a); a = rs[a]; d = rs[d];
757
- pe[ 7 * 2 + 1] = DES_PC2(d, a, b, c); c = rs[c];
758
- pe[ 8 * 2 + 1] = DES_PC2(c, d, a, b); b = rs[b]; a = rs[a];
759
- pe[ 9 * 2 + 1] = DES_PC2(a, b, c, d); d = rs[d]; c = rs[c];
760
- pe[10 * 2 + 1] = DES_PC2(c, d, a, b); b = rs[b]; a = rs[a];
761
- pe[11 * 2 + 1] = DES_PC2(a, b, c, d); d = rs[d]; c = rs[c];
762
- pe[12 * 2 + 1] = DES_PC2(c, d, a, b); b = rs[b]; a = rs[a];
763
- pe[13 * 2 + 1] = DES_PC2(a, b, c, d); d = rs[d]; c = rs[c];
764
- pe[14 * 2 + 1] = DES_PC2(c, d, a, b); b = rs[b];
765
- pe[15 * 2 + 1] = DES_PC2(b, c, d, a);
766
-
767
- /* Fixup: 2413 5768 -> 1357 2468 */
768
- for (d = 0; d < 16; ++d) {
769
- a = pe[2 * d];
770
- b = pe[2 * d + 1];
771
- c = a ^ b;
772
- c &= 0xffff0000;
773
- a ^= c;
774
- b ^= c;
775
- ROL(b, 18);
776
- pe[2 * d] = a;
777
- pe[2 * d + 1] = b;
778
- }
779
-}
17
+#include <crypto/internal/des.h>
78018
78119 static int des_setkey(struct crypto_tfm *tfm, const u8 *key,
78220 unsigned int keylen)
78321 {
78422 struct des_ctx *dctx = crypto_tfm_ctx(tfm);
785
- u32 *flags = &tfm->crt_flags;
786
- u32 tmp[DES_EXPKEY_WORDS];
787
- int ret;
23
+ int err;
78824
789
- /* Expand to tmp */
790
- ret = des_ekey(tmp, key);
791
-
792
- if (unlikely(ret == 0) && (*flags & CRYPTO_TFM_REQ_WEAK_KEY)) {
793
- *flags |= CRYPTO_TFM_RES_WEAK_KEY;
794
- return -EINVAL;
25
+ err = des_expand_key(dctx, key, keylen);
26
+ if (err == -ENOKEY) {
27
+ if (crypto_tfm_get_flags(tfm) & CRYPTO_TFM_REQ_FORBID_WEAK_KEYS)
28
+ err = -EINVAL;
29
+ else
30
+ err = 0;
79531 }
796
-
797
- /* Copy to output */
798
- memcpy(dctx->expkey, tmp, sizeof(dctx->expkey));
799
-
800
- return 0;
32
+ if (err)
33
+ memset(dctx, 0, sizeof(*dctx));
34
+ return err;
80135 }
80236
803
-static void des_encrypt(struct crypto_tfm *tfm, u8 *dst, const u8 *src)
37
+static void crypto_des_encrypt(struct crypto_tfm *tfm, u8 *dst, const u8 *src)
80438 {
805
- struct des_ctx *ctx = crypto_tfm_ctx(tfm);
806
- const u32 *K = ctx->expkey;
807
- const __le32 *s = (const __le32 *)src;
808
- __le32 *d = (__le32 *)dst;
809
- u32 L, R, A, B;
810
- int i;
39
+ const struct des_ctx *dctx = crypto_tfm_ctx(tfm);
81140
812
- L = le32_to_cpu(s[0]);
813
- R = le32_to_cpu(s[1]);
814
-
815
- IP(L, R, A);
816
- for (i = 0; i < 8; i++) {
817
- ROUND(L, R, A, B, K, 2);
818
- ROUND(R, L, A, B, K, 2);
819
- }
820
- FP(R, L, A);
821
-
822
- d[0] = cpu_to_le32(R);
823
- d[1] = cpu_to_le32(L);
41
+ des_encrypt(dctx, dst, src);
82442 }
82543
826
-static void des_decrypt(struct crypto_tfm *tfm, u8 *dst, const u8 *src)
44
+static void crypto_des_decrypt(struct crypto_tfm *tfm, u8 *dst, const u8 *src)
82745 {
828
- struct des_ctx *ctx = crypto_tfm_ctx(tfm);
829
- const u32 *K = ctx->expkey + DES_EXPKEY_WORDS - 2;
830
- const __le32 *s = (const __le32 *)src;
831
- __le32 *d = (__le32 *)dst;
832
- u32 L, R, A, B;
833
- int i;
46
+ const struct des_ctx *dctx = crypto_tfm_ctx(tfm);
83447
835
- L = le32_to_cpu(s[0]);
836
- R = le32_to_cpu(s[1]);
837
-
838
- IP(L, R, A);
839
- for (i = 0; i < 8; i++) {
840
- ROUND(L, R, A, B, K, -2);
841
- ROUND(R, L, A, B, K, -2);
842
- }
843
- FP(R, L, A);
844
-
845
- d[0] = cpu_to_le32(R);
846
- d[1] = cpu_to_le32(L);
48
+ des_decrypt(dctx, dst, src);
84749 }
848
-
849
-int __des3_ede_setkey(u32 *expkey, u32 *flags, const u8 *key,
850
- unsigned int keylen)
851
-{
852
- const u32 *K = (const u32 *)key;
853
-
854
- if (unlikely(!((K[0] ^ K[2]) | (K[1] ^ K[3])) ||
855
- !((K[2] ^ K[4]) | (K[3] ^ K[5]))) &&
856
- (*flags & CRYPTO_TFM_REQ_WEAK_KEY)) {
857
- *flags |= CRYPTO_TFM_RES_WEAK_KEY;
858
- return -EINVAL;
859
- }
860
-
861
- des_ekey(expkey, key); expkey += DES_EXPKEY_WORDS; key += DES_KEY_SIZE;
862
- dkey(expkey, key); expkey += DES_EXPKEY_WORDS; key += DES_KEY_SIZE;
863
- des_ekey(expkey, key);
864
-
865
- return 0;
866
-}
867
-EXPORT_SYMBOL_GPL(__des3_ede_setkey);
86850
86951 static int des3_ede_setkey(struct crypto_tfm *tfm, const u8 *key,
87052 unsigned int keylen)
87153 {
87254 struct des3_ede_ctx *dctx = crypto_tfm_ctx(tfm);
873
- u32 *flags = &tfm->crt_flags;
874
- u32 *expkey = dctx->expkey;
55
+ int err;
87556
876
- return __des3_ede_setkey(expkey, flags, key, keylen);
57
+ err = des3_ede_expand_key(dctx, key, keylen);
58
+ if (err == -ENOKEY) {
59
+ if (crypto_tfm_get_flags(tfm) & CRYPTO_TFM_REQ_FORBID_WEAK_KEYS)
60
+ err = -EINVAL;
61
+ else
62
+ err = 0;
63
+ }
64
+ if (err)
65
+ memset(dctx, 0, sizeof(*dctx));
66
+ return err;
87767 }
87868
879
-static void des3_ede_encrypt(struct crypto_tfm *tfm, u8 *dst, const u8 *src)
69
+static void crypto_des3_ede_encrypt(struct crypto_tfm *tfm, u8 *dst,
70
+ const u8 *src)
88071 {
881
- struct des3_ede_ctx *dctx = crypto_tfm_ctx(tfm);
882
- const u32 *K = dctx->expkey;
883
- const __le32 *s = (const __le32 *)src;
884
- __le32 *d = (__le32 *)dst;
885
- u32 L, R, A, B;
886
- int i;
72
+ const struct des3_ede_ctx *dctx = crypto_tfm_ctx(tfm);
88773
888
- L = le32_to_cpu(s[0]);
889
- R = le32_to_cpu(s[1]);
890
-
891
- IP(L, R, A);
892
- for (i = 0; i < 8; i++) {
893
- ROUND(L, R, A, B, K, 2);
894
- ROUND(R, L, A, B, K, 2);
895
- }
896
- for (i = 0; i < 8; i++) {
897
- ROUND(R, L, A, B, K, 2);
898
- ROUND(L, R, A, B, K, 2);
899
- }
900
- for (i = 0; i < 8; i++) {
901
- ROUND(L, R, A, B, K, 2);
902
- ROUND(R, L, A, B, K, 2);
903
- }
904
- FP(R, L, A);
905
-
906
- d[0] = cpu_to_le32(R);
907
- d[1] = cpu_to_le32(L);
74
+ des3_ede_encrypt(dctx, dst, src);
90875 }
90976
910
-static void des3_ede_decrypt(struct crypto_tfm *tfm, u8 *dst, const u8 *src)
77
+static void crypto_des3_ede_decrypt(struct crypto_tfm *tfm, u8 *dst,
78
+ const u8 *src)
91179 {
912
- struct des3_ede_ctx *dctx = crypto_tfm_ctx(tfm);
913
- const u32 *K = dctx->expkey + DES3_EDE_EXPKEY_WORDS - 2;
914
- const __le32 *s = (const __le32 *)src;
915
- __le32 *d = (__le32 *)dst;
916
- u32 L, R, A, B;
917
- int i;
80
+ const struct des3_ede_ctx *dctx = crypto_tfm_ctx(tfm);
91881
919
- L = le32_to_cpu(s[0]);
920
- R = le32_to_cpu(s[1]);
921
-
922
- IP(L, R, A);
923
- for (i = 0; i < 8; i++) {
924
- ROUND(L, R, A, B, K, -2);
925
- ROUND(R, L, A, B, K, -2);
926
- }
927
- for (i = 0; i < 8; i++) {
928
- ROUND(R, L, A, B, K, -2);
929
- ROUND(L, R, A, B, K, -2);
930
- }
931
- for (i = 0; i < 8; i++) {
932
- ROUND(L, R, A, B, K, -2);
933
- ROUND(R, L, A, B, K, -2);
934
- }
935
- FP(R, L, A);
936
-
937
- d[0] = cpu_to_le32(R);
938
- d[1] = cpu_to_le32(L);
82
+ des3_ede_decrypt(dctx, dst, src);
93983 }
94084
94185 static struct crypto_alg des_algs[2] = { {
....@@ -946,13 +90,12 @@
94690 .cra_blocksize = DES_BLOCK_SIZE,
94791 .cra_ctxsize = sizeof(struct des_ctx),
94892 .cra_module = THIS_MODULE,
949
- .cra_alignmask = 3,
95093 .cra_u = { .cipher = {
95194 .cia_min_keysize = DES_KEY_SIZE,
95295 .cia_max_keysize = DES_KEY_SIZE,
95396 .cia_setkey = des_setkey,
954
- .cia_encrypt = des_encrypt,
955
- .cia_decrypt = des_decrypt } }
97
+ .cia_encrypt = crypto_des_encrypt,
98
+ .cia_decrypt = crypto_des_decrypt } }
95699 }, {
957100 .cra_name = "des3_ede",
958101 .cra_driver_name = "des3_ede-generic",
....@@ -961,13 +104,12 @@
961104 .cra_blocksize = DES3_EDE_BLOCK_SIZE,
962105 .cra_ctxsize = sizeof(struct des3_ede_ctx),
963106 .cra_module = THIS_MODULE,
964
- .cra_alignmask = 3,
965107 .cra_u = { .cipher = {
966108 .cia_min_keysize = DES3_EDE_KEY_SIZE,
967109 .cia_max_keysize = DES3_EDE_KEY_SIZE,
968110 .cia_setkey = des3_ede_setkey,
969
- .cia_encrypt = des3_ede_encrypt,
970
- .cia_decrypt = des3_ede_decrypt } }
111
+ .cia_encrypt = crypto_des3_ede_encrypt,
112
+ .cia_decrypt = crypto_des3_ede_decrypt } }
971113 } };
972114
973115 static int __init des_generic_mod_init(void)
....@@ -980,7 +122,7 @@
980122 crypto_unregister_algs(des_algs, ARRAY_SIZE(des_algs));
981123 }
982124
983
-module_init(des_generic_mod_init);
125
+subsys_initcall(des_generic_mod_init);
984126 module_exit(des_generic_mod_fini);
985127
986128 MODULE_LICENSE("GPL");