195c29f3cd1f6c08c6c0927868683392eea727ccAdam Langley/* ====================================================================
295c29f3cd1f6c08c6c0927868683392eea727ccAdam Langley * Copyright (c) 2008 The OpenSSL Project.  All rights reserved.
395c29f3cd1f6c08c6c0927868683392eea727ccAdam Langley *
495c29f3cd1f6c08c6c0927868683392eea727ccAdam Langley * Redistribution and use in source and binary forms, with or without
595c29f3cd1f6c08c6c0927868683392eea727ccAdam Langley * modification, are permitted provided that the following conditions
695c29f3cd1f6c08c6c0927868683392eea727ccAdam Langley * are met:
795c29f3cd1f6c08c6c0927868683392eea727ccAdam Langley *
895c29f3cd1f6c08c6c0927868683392eea727ccAdam Langley * 1. Redistributions of source code must retain the above copyright
995c29f3cd1f6c08c6c0927868683392eea727ccAdam Langley *    notice, this list of conditions and the following disclaimer.
1095c29f3cd1f6c08c6c0927868683392eea727ccAdam Langley *
1195c29f3cd1f6c08c6c0927868683392eea727ccAdam Langley * 2. Redistributions in binary form must reproduce the above copyright
1295c29f3cd1f6c08c6c0927868683392eea727ccAdam Langley *    notice, this list of conditions and the following disclaimer in
1395c29f3cd1f6c08c6c0927868683392eea727ccAdam Langley *    the documentation and/or other materials provided with the
1495c29f3cd1f6c08c6c0927868683392eea727ccAdam Langley *    distribution.
1595c29f3cd1f6c08c6c0927868683392eea727ccAdam Langley *
1695c29f3cd1f6c08c6c0927868683392eea727ccAdam Langley * 3. All advertising materials mentioning features or use of this
1795c29f3cd1f6c08c6c0927868683392eea727ccAdam Langley *    software must display the following acknowledgment:
1895c29f3cd1f6c08c6c0927868683392eea727ccAdam Langley *    "This product includes software developed by the OpenSSL Project
1995c29f3cd1f6c08c6c0927868683392eea727ccAdam Langley *    for use in the OpenSSL Toolkit. (http://www.openssl.org/)"
2095c29f3cd1f6c08c6c0927868683392eea727ccAdam Langley *
2195c29f3cd1f6c08c6c0927868683392eea727ccAdam Langley * 4. The names "OpenSSL Toolkit" and "OpenSSL Project" must not be used to
2295c29f3cd1f6c08c6c0927868683392eea727ccAdam Langley *    endorse or promote products derived from this software without
2395c29f3cd1f6c08c6c0927868683392eea727ccAdam Langley *    prior written permission. For written permission, please contact
2495c29f3cd1f6c08c6c0927868683392eea727ccAdam Langley *    openssl-core@openssl.org.
2595c29f3cd1f6c08c6c0927868683392eea727ccAdam Langley *
2695c29f3cd1f6c08c6c0927868683392eea727ccAdam Langley * 5. Products derived from this software may not be called "OpenSSL"
2795c29f3cd1f6c08c6c0927868683392eea727ccAdam Langley *    nor may "OpenSSL" appear in their names without prior written
2895c29f3cd1f6c08c6c0927868683392eea727ccAdam Langley *    permission of the OpenSSL Project.
2995c29f3cd1f6c08c6c0927868683392eea727ccAdam Langley *
3095c29f3cd1f6c08c6c0927868683392eea727ccAdam Langley * 6. Redistributions of any form whatsoever must retain the following
3195c29f3cd1f6c08c6c0927868683392eea727ccAdam Langley *    acknowledgment:
3295c29f3cd1f6c08c6c0927868683392eea727ccAdam Langley *    "This product includes software developed by the OpenSSL Project
3395c29f3cd1f6c08c6c0927868683392eea727ccAdam Langley *    for use in the OpenSSL Toolkit (http://www.openssl.org/)"
3495c29f3cd1f6c08c6c0927868683392eea727ccAdam Langley *
3595c29f3cd1f6c08c6c0927868683392eea727ccAdam Langley * THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT ``AS IS'' AND ANY
3695c29f3cd1f6c08c6c0927868683392eea727ccAdam Langley * EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
3795c29f3cd1f6c08c6c0927868683392eea727ccAdam Langley * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
3895c29f3cd1f6c08c6c0927868683392eea727ccAdam Langley * PURPOSE ARE DISCLAIMED.  IN NO EVENT SHALL THE OpenSSL PROJECT OR
3995c29f3cd1f6c08c6c0927868683392eea727ccAdam Langley * ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
4095c29f3cd1f6c08c6c0927868683392eea727ccAdam Langley * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
4195c29f3cd1f6c08c6c0927868683392eea727ccAdam Langley * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
4295c29f3cd1f6c08c6c0927868683392eea727ccAdam Langley * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
4395c29f3cd1f6c08c6c0927868683392eea727ccAdam Langley * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
4495c29f3cd1f6c08c6c0927868683392eea727ccAdam Langley * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
4595c29f3cd1f6c08c6c0927868683392eea727ccAdam Langley * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
4695c29f3cd1f6c08c6c0927868683392eea727ccAdam Langley * OF THE POSSIBILITY OF SUCH DAMAGE.
4795c29f3cd1f6c08c6c0927868683392eea727ccAdam Langley * ==================================================================== */
4895c29f3cd1f6c08c6c0927868683392eea727ccAdam Langley
4995c29f3cd1f6c08c6c0927868683392eea727ccAdam Langley#include <openssl/modes.h>
5095c29f3cd1f6c08c6c0927868683392eea727ccAdam Langley
5195c29f3cd1f6c08c6c0927868683392eea727ccAdam Langley#include <assert.h>
5295c29f3cd1f6c08c6c0927868683392eea727ccAdam Langley
5395c29f3cd1f6c08c6c0927868683392eea727ccAdam Langley#include "internal.h"
5495c29f3cd1f6c08c6c0927868683392eea727ccAdam Langley
5595c29f3cd1f6c08c6c0927868683392eea727ccAdam Langley
5695c29f3cd1f6c08c6c0927868683392eea727ccAdam Langleyvoid CRYPTO_ofb128_encrypt(const uint8_t *in, uint8_t *out, size_t len,
5795c29f3cd1f6c08c6c0927868683392eea727ccAdam Langley                           const void *key, uint8_t ivec[16], int *num,
5895c29f3cd1f6c08c6c0927868683392eea727ccAdam Langley                           block128_f block) {
5995c29f3cd1f6c08c6c0927868683392eea727ccAdam Langley  unsigned int n;
6095c29f3cd1f6c08c6c0927868683392eea727ccAdam Langley  size_t l=0;
6195c29f3cd1f6c08c6c0927868683392eea727ccAdam Langley
6295c29f3cd1f6c08c6c0927868683392eea727ccAdam Langley  assert(in && out && key && ivec && num);
6395c29f3cd1f6c08c6c0927868683392eea727ccAdam Langley  assert((16 % sizeof(size_t)) == 0);
6495c29f3cd1f6c08c6c0927868683392eea727ccAdam Langley
6595c29f3cd1f6c08c6c0927868683392eea727ccAdam Langley  n = *num;
6695c29f3cd1f6c08c6c0927868683392eea727ccAdam Langley
6795c29f3cd1f6c08c6c0927868683392eea727ccAdam Langley  while (n && len) {
6895c29f3cd1f6c08c6c0927868683392eea727ccAdam Langley    *(out++) = *(in++) ^ ivec[n];
6995c29f3cd1f6c08c6c0927868683392eea727ccAdam Langley    --len;
7095c29f3cd1f6c08c6c0927868683392eea727ccAdam Langley    n = (n + 1) % 16;
7195c29f3cd1f6c08c6c0927868683392eea727ccAdam Langley  }
7295c29f3cd1f6c08c6c0927868683392eea727ccAdam Langley
7395c29f3cd1f6c08c6c0927868683392eea727ccAdam Langley  if (STRICT_ALIGNMENT &&
7495c29f3cd1f6c08c6c0927868683392eea727ccAdam Langley      ((size_t)in | (size_t)out | (size_t)ivec) % sizeof(size_t) != 0) {
7595c29f3cd1f6c08c6c0927868683392eea727ccAdam Langley    while (l < len) {
7695c29f3cd1f6c08c6c0927868683392eea727ccAdam Langley      if (n == 0) {
7795c29f3cd1f6c08c6c0927868683392eea727ccAdam Langley        (*block)(ivec, ivec, key);
7895c29f3cd1f6c08c6c0927868683392eea727ccAdam Langley      }
7995c29f3cd1f6c08c6c0927868683392eea727ccAdam Langley      out[l] = in[l] ^ ivec[n];
8095c29f3cd1f6c08c6c0927868683392eea727ccAdam Langley      ++l;
8195c29f3cd1f6c08c6c0927868683392eea727ccAdam Langley      n = (n + 1) % 16;
8295c29f3cd1f6c08c6c0927868683392eea727ccAdam Langley    }
8395c29f3cd1f6c08c6c0927868683392eea727ccAdam Langley
8495c29f3cd1f6c08c6c0927868683392eea727ccAdam Langley    *num = n;
8595c29f3cd1f6c08c6c0927868683392eea727ccAdam Langley    return;
8695c29f3cd1f6c08c6c0927868683392eea727ccAdam Langley  }
8795c29f3cd1f6c08c6c0927868683392eea727ccAdam Langley
8895c29f3cd1f6c08c6c0927868683392eea727ccAdam Langley  while (len >= 16) {
8995c29f3cd1f6c08c6c0927868683392eea727ccAdam Langley    (*block)(ivec, ivec, key);
9095c29f3cd1f6c08c6c0927868683392eea727ccAdam Langley    for (; n < 16; n += sizeof(size_t)) {
9195c29f3cd1f6c08c6c0927868683392eea727ccAdam Langley      *(size_t *)(out + n) = *(size_t *)(in + n) ^ *(size_t *)(ivec + n);
9295c29f3cd1f6c08c6c0927868683392eea727ccAdam Langley    }
9395c29f3cd1f6c08c6c0927868683392eea727ccAdam Langley    len -= 16;
9495c29f3cd1f6c08c6c0927868683392eea727ccAdam Langley    out += 16;
9595c29f3cd1f6c08c6c0927868683392eea727ccAdam Langley    in += 16;
9695c29f3cd1f6c08c6c0927868683392eea727ccAdam Langley    n = 0;
9795c29f3cd1f6c08c6c0927868683392eea727ccAdam Langley  }
9895c29f3cd1f6c08c6c0927868683392eea727ccAdam Langley  if (len) {
9995c29f3cd1f6c08c6c0927868683392eea727ccAdam Langley    (*block)(ivec, ivec, key);
10095c29f3cd1f6c08c6c0927868683392eea727ccAdam Langley    while (len--) {
10195c29f3cd1f6c08c6c0927868683392eea727ccAdam Langley      out[n] = in[n] ^ ivec[n];
10295c29f3cd1f6c08c6c0927868683392eea727ccAdam Langley      ++n;
10395c29f3cd1f6c08c6c0927868683392eea727ccAdam Langley    }
10495c29f3cd1f6c08c6c0927868683392eea727ccAdam Langley  }
10595c29f3cd1f6c08c6c0927868683392eea727ccAdam Langley  *num = n;
10695c29f3cd1f6c08c6c0927868683392eea727ccAdam Langley}
107