1f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project/* LibTomCrypt, modular cryptographic library -- Tom St Denis 2f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project * 3f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project * LibTomCrypt is a library that provides various cryptographic 4f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project * algorithms in a highly modular and flexible manner. 5f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project * 6f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project * The library is free for all purposes without any express 7f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project * guarantee it works. 8f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project * 9f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.com 10f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project */ 11f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project 12f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project/******************************************************************************* 13f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project* 14f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project* FILE: safer.c 15f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project* 16f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project* DESCRIPTION: block-cipher algorithm SAFER (Secure And Fast Encryption 17f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project* Routine) in its four versions: SAFER K-64, SAFER K-128, 18f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project* SAFER SK-64 and SAFER SK-128. 19f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project* 20f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project* AUTHOR: Richard De Moliner (demoliner@isi.ee.ethz.ch) 21f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project* Signal and Information Processing Laboratory 22f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project* Swiss Federal Institute of Technology 23f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project* CH-8092 Zuerich, Switzerland 24f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project* 25f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project* DATE: September 9, 1995 26f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project* 27f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project* CHANGE HISTORY: 28f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project* 29f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project*******************************************************************************/ 30f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project 31f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project#include <tomcrypt.h> 32f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project 33f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project#ifdef SAFER 34f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project 35f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Projectconst struct ltc_cipher_descriptor 36f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project safer_k64_desc = { 37f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project "safer-k64", 38f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project 8, 8, 8, 8, SAFER_K64_DEFAULT_NOF_ROUNDS, 39f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project &safer_k64_setup, 40f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project &safer_ecb_encrypt, 41f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project &safer_ecb_decrypt, 42f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project &safer_k64_test, 43f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project &safer_done, 44f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project &safer_64_keysize, 45f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL 46f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project }, 47f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project 48f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project safer_sk64_desc = { 49f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project "safer-sk64", 50f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project 9, 8, 8, 8, SAFER_SK64_DEFAULT_NOF_ROUNDS, 51f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project &safer_sk64_setup, 52f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project &safer_ecb_encrypt, 53f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project &safer_ecb_decrypt, 54f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project &safer_sk64_test, 55f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project &safer_done, 56f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project &safer_64_keysize, 57f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL 58f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project }, 59f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project 60f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project safer_k128_desc = { 61f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project "safer-k128", 62f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project 10, 16, 16, 8, SAFER_K128_DEFAULT_NOF_ROUNDS, 63f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project &safer_k128_setup, 64f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project &safer_ecb_encrypt, 65f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project &safer_ecb_decrypt, 66f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project &safer_sk128_test, 67f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project &safer_done, 68f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project &safer_128_keysize, 69f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL 70f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project }, 71f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project 72f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project safer_sk128_desc = { 73f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project "safer-sk128", 74f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project 11, 16, 16, 8, SAFER_SK128_DEFAULT_NOF_ROUNDS, 75f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project &safer_sk128_setup, 76f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project &safer_ecb_encrypt, 77f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project &safer_ecb_decrypt, 78f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project &safer_sk128_test, 79f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project &safer_done, 80f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project &safer_128_keysize, 81f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL 82f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project }; 83f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project 84f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project/******************* Constants ************************************************/ 85f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project/* #define TAB_LEN 256 */ 86f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project 87f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project/******************* Assertions ***********************************************/ 88f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project 89f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project/******************* Macros ***************************************************/ 90f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project#define ROL8(x, n) ((unsigned char)((unsigned int)(x) << (n)\ 91f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project |(unsigned int)((x) & 0xFF) >> (8 - (n)))) 92f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project#define EXP(x) safer_ebox[(x) & 0xFF] 93f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project#define LOG(x) safer_lbox[(x) & 0xFF] 94f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project#define PHT(x, y) { y += x; x += y; } 95f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project#define IPHT(x, y) { x -= y; y -= x; } 96f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project 97f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project/******************* Types ****************************************************/ 98f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Projectextern const unsigned char safer_ebox[], safer_lbox[]; 99f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project 100f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project#ifdef LTC_CLEAN_STACK 101f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Projectstatic void _Safer_Expand_Userkey(const unsigned char *userkey_1, 102f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project const unsigned char *userkey_2, 103f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project unsigned int nof_rounds, 104f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project int strengthened, 105f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project safer_key_t key) 106f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project#else 107f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Projectstatic void Safer_Expand_Userkey(const unsigned char *userkey_1, 108f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project const unsigned char *userkey_2, 109f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project unsigned int nof_rounds, 110f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project int strengthened, 111f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project safer_key_t key) 112f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project#endif 113f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project{ unsigned int i, j, k; 114f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project unsigned char ka[SAFER_BLOCK_LEN + 1]; 115f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project unsigned char kb[SAFER_BLOCK_LEN + 1]; 116f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project 117f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project if (SAFER_MAX_NOF_ROUNDS < nof_rounds) 118f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project nof_rounds = SAFER_MAX_NOF_ROUNDS; 119f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project *key++ = (unsigned char)nof_rounds; 120f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project ka[SAFER_BLOCK_LEN] = (unsigned char)0; 121f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project kb[SAFER_BLOCK_LEN] = (unsigned char)0; 122f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project k = 0; 123f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project for (j = 0; j < SAFER_BLOCK_LEN; j++) { 124f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project ka[j] = ROL8(userkey_1[j], 5); 125f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project ka[SAFER_BLOCK_LEN] ^= ka[j]; 126f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project kb[j] = *key++ = userkey_2[j]; 127f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project kb[SAFER_BLOCK_LEN] ^= kb[j]; 128f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project } 129f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project for (i = 1; i <= nof_rounds; i++) { 130f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project for (j = 0; j < SAFER_BLOCK_LEN + 1; j++) { 131f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project ka[j] = ROL8(ka[j], 6); 132f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project kb[j] = ROL8(kb[j], 6); 133f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project } 134f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project if (strengthened) { 135f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project k = 2 * i - 1; 136f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project while (k >= (SAFER_BLOCK_LEN + 1)) { k -= SAFER_BLOCK_LEN + 1; } 137f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project } 138f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project for (j = 0; j < SAFER_BLOCK_LEN; j++) { 139f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project if (strengthened) { 140f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project *key++ = (ka[k] 141f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project + safer_ebox[(int)safer_ebox[(int)((18 * i + j + 1)&0xFF)]]) & 0xFF; 142f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project if (++k == (SAFER_BLOCK_LEN + 1)) { k = 0; } 143f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project } else { 144f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project *key++ = (ka[j] + safer_ebox[(int)safer_ebox[(int)((18 * i + j + 1)&0xFF)]]) & 0xFF; 145f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project } 146f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project } 147f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project if (strengthened) { 148f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project k = 2 * i; 149f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project while (k >= (SAFER_BLOCK_LEN + 1)) { k -= SAFER_BLOCK_LEN + 1; } 150f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project } 151f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project for (j = 0; j < SAFER_BLOCK_LEN; j++) { 152f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project if (strengthened) { 153f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project *key++ = (kb[k] 154f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project + safer_ebox[(int)safer_ebox[(int)((18 * i + j + 10)&0xFF)]]) & 0xFF; 155f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project if (++k == (SAFER_BLOCK_LEN + 1)) { k = 0; } 156f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project } else { 157f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project *key++ = (kb[j] + safer_ebox[(int)safer_ebox[(int)((18 * i + j + 10)&0xFF)]]) & 0xFF; 158f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project } 159f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project } 160f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project } 161f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project 162f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project#ifdef LTC_CLEAN_STACK 163f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project zeromem(ka, sizeof(ka)); 164f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project zeromem(kb, sizeof(kb)); 165f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project#endif 166f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project} 167f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project 168f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project#ifdef LTC_CLEAN_STACK 169f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Projectstatic void Safer_Expand_Userkey(const unsigned char *userkey_1, 170f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project const unsigned char *userkey_2, 171f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project unsigned int nof_rounds, 172f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project int strengthened, 173f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project safer_key_t key) 174f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project{ 175f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project _Safer_Expand_Userkey(userkey_1, userkey_2, nof_rounds, strengthened, key); 176f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project burn_stack(sizeof(unsigned char) * (2 * (SAFER_BLOCK_LEN + 1)) + sizeof(unsigned int)*2); 177f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project} 178f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project#endif 179f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project 180f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Projectint safer_k64_setup(const unsigned char *key, int keylen, int numrounds, symmetric_key *skey) 181f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project{ 182f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project LTC_ARGCHK(key != NULL); 183f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project LTC_ARGCHK(skey != NULL); 184f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project 185f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project if (numrounds != 0 && (numrounds < 6 || numrounds > SAFER_MAX_NOF_ROUNDS)) { 186f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project return CRYPT_INVALID_ROUNDS; 187f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project } 188f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project 189f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project if (keylen != 8) { 190f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project return CRYPT_INVALID_KEYSIZE; 191f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project } 192f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project 193f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project Safer_Expand_Userkey(key, key, (unsigned int)(numrounds != 0 ?numrounds:SAFER_K64_DEFAULT_NOF_ROUNDS), 0, skey->safer.key); 194f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project return CRYPT_OK; 195f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project} 196f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project 197f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Projectint safer_sk64_setup(const unsigned char *key, int keylen, int numrounds, symmetric_key *skey) 198f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project{ 199f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project LTC_ARGCHK(key != NULL); 200f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project LTC_ARGCHK(skey != NULL); 201f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project 202f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project if (numrounds != 0 && (numrounds < 6 || numrounds > SAFER_MAX_NOF_ROUNDS)) { 203f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project return CRYPT_INVALID_ROUNDS; 204f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project } 205f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project 206f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project if (keylen != 8) { 207f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project return CRYPT_INVALID_KEYSIZE; 208f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project } 209f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project 210f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project Safer_Expand_Userkey(key, key, (unsigned int)(numrounds != 0 ?numrounds:SAFER_SK64_DEFAULT_NOF_ROUNDS), 1, skey->safer.key); 211f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project return CRYPT_OK; 212f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project} 213f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project 214f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Projectint safer_k128_setup(const unsigned char *key, int keylen, int numrounds, symmetric_key *skey) 215f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project{ 216f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project LTC_ARGCHK(key != NULL); 217f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project LTC_ARGCHK(skey != NULL); 218f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project 219f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project if (numrounds != 0 && (numrounds < 6 || numrounds > SAFER_MAX_NOF_ROUNDS)) { 220f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project return CRYPT_INVALID_ROUNDS; 221f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project } 222f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project 223f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project if (keylen != 16) { 224f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project return CRYPT_INVALID_KEYSIZE; 225f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project } 226f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project 227f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project Safer_Expand_Userkey(key, key+8, (unsigned int)(numrounds != 0 ?numrounds:SAFER_K128_DEFAULT_NOF_ROUNDS), 0, skey->safer.key); 228f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project return CRYPT_OK; 229f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project} 230f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project 231f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Projectint safer_sk128_setup(const unsigned char *key, int keylen, int numrounds, symmetric_key *skey) 232f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project{ 233f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project LTC_ARGCHK(key != NULL); 234f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project LTC_ARGCHK(skey != NULL); 235f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project 236f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project if (numrounds != 0 && (numrounds < 6 || numrounds > SAFER_MAX_NOF_ROUNDS)) { 237f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project return CRYPT_INVALID_ROUNDS; 238f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project } 239f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project 240f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project if (keylen != 16) { 241f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project return CRYPT_INVALID_KEYSIZE; 242f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project } 243f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project 244f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project Safer_Expand_Userkey(key, key+8, (unsigned int)(numrounds != 0?numrounds:SAFER_SK128_DEFAULT_NOF_ROUNDS), 1, skey->safer.key); 245f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project return CRYPT_OK; 246f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project} 247f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project 248f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project#ifdef LTC_CLEAN_STACK 249f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Projectstatic int _safer_ecb_encrypt(const unsigned char *block_in, 250f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project unsigned char *block_out, 251f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project symmetric_key *skey) 252f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project#else 253f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Projectint safer_ecb_encrypt(const unsigned char *block_in, 254f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project unsigned char *block_out, 255f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project symmetric_key *skey) 256f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project#endif 257f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project{ unsigned char a, b, c, d, e, f, g, h, t; 258f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project unsigned int round; 259f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project unsigned char *key; 260f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project 261f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project LTC_ARGCHK(block_in != NULL); 262f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project LTC_ARGCHK(block_out != NULL); 263f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project LTC_ARGCHK(skey != NULL); 264f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project 265f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project key = skey->safer.key; 266f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project a = block_in[0]; b = block_in[1]; c = block_in[2]; d = block_in[3]; 267f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project e = block_in[4]; f = block_in[5]; g = block_in[6]; h = block_in[7]; 268f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project if (SAFER_MAX_NOF_ROUNDS < (round = *key)) round = SAFER_MAX_NOF_ROUNDS; 269f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project while(round-- > 0) 270f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project { 271f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project a ^= *++key; b += *++key; c += *++key; d ^= *++key; 272f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project e ^= *++key; f += *++key; g += *++key; h ^= *++key; 273f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project a = EXP(a) + *++key; b = LOG(b) ^ *++key; 274f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project c = LOG(c) ^ *++key; d = EXP(d) + *++key; 275f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project e = EXP(e) + *++key; f = LOG(f) ^ *++key; 276f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project g = LOG(g) ^ *++key; h = EXP(h) + *++key; 277f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project PHT(a, b); PHT(c, d); PHT(e, f); PHT(g, h); 278f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project PHT(a, c); PHT(e, g); PHT(b, d); PHT(f, h); 279f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project PHT(a, e); PHT(b, f); PHT(c, g); PHT(d, h); 280f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project t = b; b = e; e = c; c = t; t = d; d = f; f = g; g = t; 281f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project } 282f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project a ^= *++key; b += *++key; c += *++key; d ^= *++key; 283f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project e ^= *++key; f += *++key; g += *++key; h ^= *++key; 284f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project block_out[0] = a & 0xFF; block_out[1] = b & 0xFF; 285f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project block_out[2] = c & 0xFF; block_out[3] = d & 0xFF; 286f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project block_out[4] = e & 0xFF; block_out[5] = f & 0xFF; 287f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project block_out[6] = g & 0xFF; block_out[7] = h & 0xFF; 288f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project return CRYPT_OK; 289f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project} 290f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project 291f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project#ifdef LTC_CLEAN_STACK 292f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Projectint safer_ecb_encrypt(const unsigned char *block_in, 293f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project unsigned char *block_out, 294f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project symmetric_key *skey) 295f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project{ 296f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project int err = _safer_ecb_encrypt(block_in, block_out, skey); 297f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project burn_stack(sizeof(unsigned char) * 9 + sizeof(unsigned int) + sizeof(unsigned char *)); 298f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project return err; 299f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project} 300f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project#endif 301f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project 302f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project#ifdef LTC_CLEAN_STACK 303f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Projectstatic int _safer_ecb_decrypt(const unsigned char *block_in, 304f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project unsigned char *block_out, 305f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project symmetric_key *skey) 306f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project#else 307f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Projectint safer_ecb_decrypt(const unsigned char *block_in, 308f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project unsigned char *block_out, 309f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project symmetric_key *skey) 310f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project#endif 311f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project{ unsigned char a, b, c, d, e, f, g, h, t; 312f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project unsigned int round; 313f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project unsigned char *key; 314f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project 315f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project LTC_ARGCHK(block_in != NULL); 316f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project LTC_ARGCHK(block_out != NULL); 317f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project LTC_ARGCHK(skey != NULL); 318f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project 319f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project key = skey->safer.key; 320f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project a = block_in[0]; b = block_in[1]; c = block_in[2]; d = block_in[3]; 321f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project e = block_in[4]; f = block_in[5]; g = block_in[6]; h = block_in[7]; 322f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project if (SAFER_MAX_NOF_ROUNDS < (round = *key)) round = SAFER_MAX_NOF_ROUNDS; 323f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project key += SAFER_BLOCK_LEN * (1 + 2 * round); 324f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project h ^= *key; g -= *--key; f -= *--key; e ^= *--key; 325f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project d ^= *--key; c -= *--key; b -= *--key; a ^= *--key; 326f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project while (round--) 327f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project { 328f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project t = e; e = b; b = c; c = t; t = f; f = d; d = g; g = t; 329f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project IPHT(a, e); IPHT(b, f); IPHT(c, g); IPHT(d, h); 330f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project IPHT(a, c); IPHT(e, g); IPHT(b, d); IPHT(f, h); 331f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project IPHT(a, b); IPHT(c, d); IPHT(e, f); IPHT(g, h); 332f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project h -= *--key; g ^= *--key; f ^= *--key; e -= *--key; 333f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project d -= *--key; c ^= *--key; b ^= *--key; a -= *--key; 334f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project h = LOG(h) ^ *--key; g = EXP(g) - *--key; 335f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project f = EXP(f) - *--key; e = LOG(e) ^ *--key; 336f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project d = LOG(d) ^ *--key; c = EXP(c) - *--key; 337f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project b = EXP(b) - *--key; a = LOG(a) ^ *--key; 338f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project } 339f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project block_out[0] = a & 0xFF; block_out[1] = b & 0xFF; 340f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project block_out[2] = c & 0xFF; block_out[3] = d & 0xFF; 341f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project block_out[4] = e & 0xFF; block_out[5] = f & 0xFF; 342f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project block_out[6] = g & 0xFF; block_out[7] = h & 0xFF; 343f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project return CRYPT_OK; 344f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project} 345f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project 346f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project#ifdef LTC_CLEAN_STACK 347f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Projectint safer_ecb_decrypt(const unsigned char *block_in, 348f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project unsigned char *block_out, 349f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project symmetric_key *skey) 350f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project{ 351f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project int err = _safer_ecb_decrypt(block_in, block_out, skey); 352f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project burn_stack(sizeof(unsigned char) * 9 + sizeof(unsigned int) + sizeof(unsigned char *)); 353f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project return err; 354f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project} 355f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project#endif 356f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project 357f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Projectint safer_64_keysize(int *keysize) 358f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project{ 359f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project LTC_ARGCHK(keysize != NULL); 360f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project if (*keysize < 8) { 361f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project return CRYPT_INVALID_KEYSIZE; 362f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project } else { 363f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project *keysize = 8; 364f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project return CRYPT_OK; 365f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project } 366f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project} 367f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project 368f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Projectint safer_128_keysize(int *keysize) 369f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project{ 370f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project LTC_ARGCHK(keysize != NULL); 371f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project if (*keysize < 16) { 372f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project return CRYPT_INVALID_KEYSIZE; 373f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project } else { 374f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project *keysize = 16; 375f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project return CRYPT_OK; 376f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project } 377f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project} 378f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project 379f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Projectint safer_k64_test(void) 380f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project{ 381f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project #ifndef LTC_TEST 382f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project return CRYPT_NOP; 383f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project #else 384f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project static const unsigned char k64_pt[] = { 1, 2, 3, 4, 5, 6, 7, 8 }, 385f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project k64_key[] = { 8, 7, 6, 5, 4, 3, 2, 1 }, 386f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project k64_ct[] = { 200, 242, 156, 221, 135, 120, 62, 217 }; 387f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project 388f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project symmetric_key skey; 389f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project unsigned char buf[2][8]; 390f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project int err; 391f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project 392f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project /* test K64 */ 393f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project if ((err = safer_k64_setup(k64_key, 8, 6, &skey)) != CRYPT_OK) { 394f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project return err; 395f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project } 396f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project safer_ecb_encrypt(k64_pt, buf[0], &skey); 397f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project safer_ecb_decrypt(buf[0], buf[1], &skey); 398f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project 399f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project if (XMEMCMP(buf[0], k64_ct, 8) != 0 || XMEMCMP(buf[1], k64_pt, 8) != 0) { 400f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project return CRYPT_FAIL_TESTVECTOR; 401f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project } 402f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project 403f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project return CRYPT_OK; 404f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project #endif 405f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project} 406f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project 407f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project 408f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Projectint safer_sk64_test(void) 409f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project{ 410f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project #ifndef LTC_TEST 411f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project return CRYPT_NOP; 412f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project #else 413f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project static const unsigned char sk64_pt[] = { 1, 2, 3, 4, 5, 6, 7, 8 }, 414f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project sk64_key[] = { 1, 2, 3, 4, 5, 6, 7, 8 }, 415f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project sk64_ct[] = { 95, 206, 155, 162, 5, 132, 56, 199 }; 416f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project 417f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project symmetric_key skey; 418f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project unsigned char buf[2][8]; 419f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project int err, y; 420f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project 421f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project /* test SK64 */ 422f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project if ((err = safer_sk64_setup(sk64_key, 8, 6, &skey)) != CRYPT_OK) { 423f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project return err; 424f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project } 425f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project 426f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project safer_ecb_encrypt(sk64_pt, buf[0], &skey); 427f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project safer_ecb_decrypt(buf[0], buf[1], &skey); 428f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project 429f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project if (XMEMCMP(buf[0], sk64_ct, 8) != 0 || XMEMCMP(buf[1], sk64_pt, 8) != 0) { 430f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project return CRYPT_FAIL_TESTVECTOR; 431f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project } 432f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project 433f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project /* now see if we can encrypt all zero bytes 1000 times, decrypt and come back where we started */ 434f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project for (y = 0; y < 8; y++) buf[0][y] = 0; 435f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project for (y = 0; y < 1000; y++) safer_ecb_encrypt(buf[0], buf[0], &skey); 436f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project for (y = 0; y < 1000; y++) safer_ecb_decrypt(buf[0], buf[0], &skey); 437f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project for (y = 0; y < 8; y++) if (buf[0][y] != 0) return CRYPT_FAIL_TESTVECTOR; 438f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project 439f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project return CRYPT_OK; 440f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project #endif 441f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project} 442f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project 443f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project/** Terminate the context 444f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project @param skey The scheduled key 445f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project*/ 446f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Projectvoid safer_done(symmetric_key *skey) 447f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project{ 448f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project} 449f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project 450f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Projectint safer_sk128_test(void) 451f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project{ 452f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project #ifndef LTC_TEST 453f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project return CRYPT_NOP; 454f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project #else 455f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project static const unsigned char sk128_pt[] = { 1, 2, 3, 4, 5, 6, 7, 8 }, 456f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project sk128_key[] = { 1, 2, 3, 4, 5, 6, 7, 8, 457f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project 0, 0, 0, 0, 0, 0, 0, 0 }, 458f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project sk128_ct[] = { 255, 120, 17, 228, 179, 167, 46, 113 }; 459f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project 460f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project symmetric_key skey; 461f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project unsigned char buf[2][8]; 462f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project int err, y; 463f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project 464f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project /* test SK128 */ 465f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project if ((err = safer_sk128_setup(sk128_key, 16, 0, &skey)) != CRYPT_OK) { 466f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project return err; 467f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project } 468f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project safer_ecb_encrypt(sk128_pt, buf[0], &skey); 469f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project safer_ecb_decrypt(buf[0], buf[1], &skey); 470f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project 471f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project if (XMEMCMP(buf[0], sk128_ct, 8) != 0 || XMEMCMP(buf[1], sk128_pt, 8) != 0) { 472f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project return CRYPT_FAIL_TESTVECTOR; 473f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project } 474f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project 475f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project /* now see if we can encrypt all zero bytes 1000 times, decrypt and come back where we started */ 476f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project for (y = 0; y < 8; y++) buf[0][y] = 0; 477f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project for (y = 0; y < 1000; y++) safer_ecb_encrypt(buf[0], buf[0], &skey); 478f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project for (y = 0; y < 1000; y++) safer_ecb_decrypt(buf[0], buf[0], &skey); 479f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project for (y = 0; y < 8; y++) if (buf[0][y] != 0) return CRYPT_FAIL_TESTVECTOR; 480f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project return CRYPT_OK; 481f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project #endif 482f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project} 483f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project 484f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project#endif 485f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project 486f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project 487f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project 488f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project 489f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project/* $Source: /cvs/libtom/libtomcrypt/src/ciphers/safer/safer.c,v $ */ 490f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project/* $Revision: 1.13 $ */ 491f7fc46c63fdc8f39234fea409b8dbe116d73ebf8The Android Open Source Project/* $Date: 2006/11/08 23:01:06 $ */ 492