[u/mdw/catacomb] / noekeon.c

/* -*-c-*-
 *
 * $Id: noekeon.c,v 1.2 2001/06/16 23:42:17 mdw Exp $
 *
 * The Noekeon block cipher
 *
 * (c) 2001 Straylight/Edgeware
 */

/*----- Licensing notice --------------------------------------------------* 
 *
 * This file is part of Catacomb.
 *
 * Catacomb is free software; you can redistribute it and/or modify
 * it under the terms of the GNU Library General Public License as
 * published by the Free Software Foundation; either version 2 of the
 * License, or (at your option) any later version.
 * 
 * Catacomb is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 * GNU Library General Public License for more details.
 * 
 * You should have received a copy of the GNU Library General Public
 * License along with Catacomb; if not, write to the Free
 * Software Foundation, Inc., 59 Temple Place - Suite 330, Boston,
 * MA 02111-1307, USA.
 */

/*----- Revision history --------------------------------------------------* 
 *
 * $Log: noekeon.c,v $
 * Revision 1.2  2001/06/16 23:42:17  mdw
 * Typesetting fixes.
 *
 * Revision 1.1  2001/05/08 22:17:41  mdw
 * New cipher Noekeon added.
 *
 */

/*----- Header files ------------------------------------------------------*/

#include <assert.h>
#include <stdio.h>

#include <mLib/bits.h>

#include "blkc.h"
#include "gcipher.h"
#include "noekeon.h"

/*----- Global variables --------------------------------------------------*/

const octet noekeon_keysz[] = { KSZ_SET, NOEKEON_KEYSZ, 0 };

/*----- Magic constants ---------------------------------------------------*/

/* --- To generate the magic --- *
 *
 * perl -e'@@r=();$x=0x80;for(0..16){push(@@r,$x);$x<<=1;$x^=0x11b
 * if$x&0x100;};print join(", ",map{sprintf"0x%02x",$_}@@r),"\n";'
 */

static const octet rcon[17] = {
  0x80, 0x1b, 0x36, 0x6c, 0xd8, 0xab, 0x4d, 0x9a,
  0x2f, 0x5e, 0xbc, 0x63, 0xc6, 0x97, 0x35, 0x6a,
  0xd4
};

/*----- Main code ---------------------------------------------------------*/

/* --- @noekeon_init@--- *
 *
 * Arguments:	@noekeon_ctx *k@ = pointer to key block to fill in
 *		@const void *buf@ = pointer to buffer of key material
 *		@size_t sz@ = size of key material
 *
 * Returns:	---
 *
 * Use:		Initializes a Noekeon key buffer.  Noekeon accepts a 128-bit
 *		key.
 */

void noekeon_init(noekeon_ctx *k, const void *buf, size_t sz)
{
  const octet *p = buf;
  static const noekeon_ctx nullkey = { { 0, 0, 0, 0 } };

  KSZ_ASSERT(noekeon, sz);
  k->k[0] = LOAD32(p +  0);
  k->k[1] = LOAD32(p +  4);
  k->k[2] = LOAD32(p +  8);
  k->k[3] = LOAD32(p + 12);
  noekeon_eblk(&nullkey, k->k, k->k);
}

/* --- @noekeon_eblk@, @noekeon_dblk@ --- *
 *
 * Arguments:	@const noekeon_ctx *k@ = pointer to key block
 *		@const uint32 s[2]@ = pointer to source block
 *		@uint32 d[2]@ = pointer to destination block
 *
 * Returns:	---
 *
 * Use:		Low-level block encryption and decryption.
 */

#define GAMMA(a, b, c, d) do {						\
  uint32 _x;								\
  b ^= ~(c | d); a ^= b & c;						\
  _x = d; d = a; a = _x;						\
  c ^= a ^ b ^ d;							\
  b ^= ~(c | d); a ^= b & c;						\
} while (0)

#define THETA(ka, kb, kc, kd, a, b, c, d) do {				\
  uint32 _x;								\
  _x = a ^ c; _x ^= ROR32(_x, 8) ^ ROL32(_x, 8); b ^= _x; d ^= _x;	\
  a ^= ka; b ^= kb; c ^= kc; d ^= kd;					\
  _x = b ^ d; _x ^= ROR32(_x, 8) ^ ROL32(_x, 8); a ^= _x; c ^= _x;	\
} while (0)
  
#define ITHETA(ka, kb, kc, kd, a, b, c, d) do {				\
  uint32 _x;								\
  _x = b ^ d; _x ^= ROR32(_x, 8) ^ ROL32(_x, 8); a ^= _x; c ^= _x;	\
  a ^= ka; b ^= kb; c ^= kc; d ^= kd;					\
  _x = a ^ c; _x ^= ROR32(_x, 8) ^ ROL32(_x, 8); b ^= _x; d ^= _x;	\
} while (0)

#define PI1(a, b, c, d) do {						\
  b = ROL32(b, 1); c = ROL32(c, 5); d = ROL32(d, 2);			\
} while (0)

#define PI2(a, b, c, d) do {						\
  b = ROR32(b, 1); c = ROR32(c, 5); d = ROR32(d, 2);			\
} while (0)

#define ROUND(r, ka, kb, kc, kd, a, b, c, d) do {			\
  a ^= *r++; THETA(ka, kb, kc, kd, a, b, c, d);				\
  PI1(a, b, c, d); GAMMA(a, b, c, d); PI2(a, b, c, d);			\
} while (0)

#define IROUND(r, ka, kb, kc, kd, a, b, c, d) do {			\
  ITHETA(ka, kb, kc, kd, a, b, c, d); a ^= *--r;			\
  PI1(a, b, c, d); GAMMA(a, b, c, d); PI2(a, b, c, d);			\
} while (0)

void noekeon_eblk(const noekeon_ctx *k, const uint32 *src, uint32 *dst)
{
  uint32 ka = k->k[0], kb = k->k[1], kc = k->k[2], kd = k->k[3];
  uint32 a = src[0], b = src[1], c = src[2], d = src[3];
  const octet *r = rcon;

  ROUND(r, ka, kb, kc, kd, a, b, c, d);
  ROUND(r, ka, kb, kc, kd, a, b, c, d);
  ROUND(r, ka, kb, kc, kd, a, b, c, d);
  ROUND(r, ka, kb, kc, kd, a, b, c, d);
  ROUND(r, ka, kb, kc, kd, a, b, c, d);
  ROUND(r, ka, kb, kc, kd, a, b, c, d);
  ROUND(r, ka, kb, kc, kd, a, b, c, d);
  ROUND(r, ka, kb, kc, kd, a, b, c, d);
  ROUND(r, ka, kb, kc, kd, a, b, c, d);
  ROUND(r, ka, kb, kc, kd, a, b, c, d);
  ROUND(r, ka, kb, kc, kd, a, b, c, d);
  ROUND(r, ka, kb, kc, kd, a, b, c, d);
  ROUND(r, ka, kb, kc, kd, a, b, c, d);
  ROUND(r, ka, kb, kc, kd, a, b, c, d);
  ROUND(r, ka, kb, kc, kd, a, b, c, d);
  ROUND(r, ka, kb, kc, kd, a, b, c, d);

  a ^= *r++; THETA(ka, kb, kc, kd, a, b, c, d);

  dst[0] = a; dst[1] = b; dst[2] = c; dst[3] = d;
}

void noekeon_dblk(const noekeon_ctx *k, const uint32 *src, uint32 *dst)
{
  uint32 ka = k->k[0], kb = k->k[1], kc = k->k[2], kd = k->k[3];
  uint32 a = src[0], b = src[1], c = src[2], d = src[3];
  const octet *r = rcon + sizeof(rcon);

  IROUND(r, ka, kb, kc, kd, a, b, c, d);
  IROUND(r, ka, kb, kc, kd, a, b, c, d);
  IROUND(r, ka, kb, kc, kd, a, b, c, d);
  IROUND(r, ka, kb, kc, kd, a, b, c, d);
  IROUND(r, ka, kb, kc, kd, a, b, c, d);
  IROUND(r, ka, kb, kc, kd, a, b, c, d);
  IROUND(r, ka, kb, kc, kd, a, b, c, d);
  IROUND(r, ka, kb, kc, kd, a, b, c, d);
  IROUND(r, ka, kb, kc, kd, a, b, c, d);
  IROUND(r, ka, kb, kc, kd, a, b, c, d);
  IROUND(r, ka, kb, kc, kd, a, b, c, d);
  IROUND(r, ka, kb, kc, kd, a, b, c, d);
  IROUND(r, ka, kb, kc, kd, a, b, c, d);
  IROUND(r, ka, kb, kc, kd, a, b, c, d);
  IROUND(r, ka, kb, kc, kd, a, b, c, d);
  IROUND(r, ka, kb, kc, kd, a, b, c, d);

  ITHETA(ka, kb, kc, kd, a, b, c, d); a ^= *--r;

  dst[0] = a; dst[1] = b; dst[2] = c; dst[3] = d;
}

BLKC_TEST(NOEKEON, noekeon)

/*----- That's all, folks -------------------------------------------------*/
Commit	Line	Data
0ba18b90	1	/* --c--
0ba18b90	2	*
eaa515d8	3	* $Id: noekeon.c,v 1.2 2001/06/16 23:42:17 mdw Exp $
0ba18b90	4	*
	5	* The Noekeon block cipher
	6	*
	7	* (c) 2001 Straylight/Edgeware
	8	*/
	9
	10	/----- Licensing notice --------------------------------------------------
	11	*
	12	* This file is part of Catacomb.
	13	*
	14	* Catacomb is free software; you can redistribute it and/or modify
	15	* it under the terms of the GNU Library General Public License as
	16	* published by the Free Software Foundation; either version 2 of the
	17	* License, or (at your option) any later version.
	18	*
	19	* Catacomb is distributed in the hope that it will be useful,
	20	* but WITHOUT ANY WARRANTY; without even the implied warranty of
	21	* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
	22	* GNU Library General Public License for more details.
	23	*
	24	* You should have received a copy of the GNU Library General Public
	25	* License along with Catacomb; if not, write to the Free
	26	* Software Foundation, Inc., 59 Temple Place - Suite 330, Boston,
	27	* MA 02111-1307, USA.
	28	*/
	29
	30	/----- Revision history --------------------------------------------------
	31	*
	32	* $Log: noekeon.c,v $
eaa515d8	33	* Revision 1.2 2001/06/16 23:42:17 mdw
	34	* Typesetting fixes.
	35	*
0ba18b90	36	* Revision 1.1 2001/05/08 22:17:41 mdw
	37	* New cipher Noekeon added.
	38	*
	39	*/
	40
	41	/----- Header files ------------------------------------------------------/
	42
	43	#include <assert.h>
	44	#include <stdio.h>
	45
	46	#include <mLib/bits.h>
	47
	48	#include "blkc.h"
	49	#include "gcipher.h"
	50	#include "noekeon.h"
	51
	52	/----- Global variables --------------------------------------------------/
	53
	54	const octet noekeon_keysz[] = { KSZ_SET, NOEKEON_KEYSZ, 0 };
	55
	56	/----- Magic constants ---------------------------------------------------/
	57
	58	/* --- To generate the magic --- *
	59	*
eaa515d8	60	* perl -e'@@r=();$x=0x80;for(0..16){push(@@r,$x);$x<<=1;$x^=0x11b
eaa515d8	61	* if$x&0x100;};print join(", ",map{sprintf"0x%02x",$_}@@r),"\n";'
0ba18b90	62	*/
	63
	64	static const octet rcon[17] = {
	65	0x80, 0x1b, 0x36, 0x6c, 0xd8, 0xab, 0x4d, 0x9a,
	66	0x2f, 0x5e, 0xbc, 0x63, 0xc6, 0x97, 0x35, 0x6a,
	67	0xd4
	68	};
	69
	70	/----- Main code ---------------------------------------------------------/
	71
	72	/* --- @noekeon_init@--- *
	73	*
	74	* Arguments: @noekeon_ctx *k@ = pointer to key block to fill in
	75	* @const void *buf@ = pointer to buffer of key material
	76	* @size_t sz@ = size of key material
	77	*
	78	* Returns: ---
	79	*
	80	* Use: Initializes a Noekeon key buffer. Noekeon accepts a 128-bit
	81	* key.
	82	*/
	83
	84	void noekeon_init(noekeon_ctx k, const void buf, size_t sz)
	85	{
	86	const octet *p = buf;
	87	static const noekeon_ctx nullkey = { { 0, 0, 0, 0 } };
	88
	89	KSZ_ASSERT(noekeon, sz);
	90	k->k[0] = LOAD32(p + 0);
	91	k->k[1] = LOAD32(p + 4);
	92	k->k[2] = LOAD32(p + 8);
	93	k->k[3] = LOAD32(p + 12);
	94	noekeon_eblk(&nullkey, k->k, k->k);
	95	}
	96
	97	/* --- @noekeon_eblk@, @noekeon_dblk@ --- *
	98	*
	99	* Arguments: @const noekeon_ctx *k@ = pointer to key block
	100	* @const uint32 s[2]@ = pointer to source block
	101	* @uint32 d[2]@ = pointer to destination block
	102	*
	103	* Returns: ---
	104	*
	105	* Use: Low-level block encryption and decryption.
	106	*/
	107
	108	#define GAMMA(a, b, c, d) do { \
	109	uint32 _x; \
	110	b ^= ~(c \| d); a ^= b & c; \
	111	_x = d; d = a; a = _x; \
	112	c ^= a ^ b ^ d; \
	113	b ^= ~(c \| d); a ^= b & c; \
	114	} while (0)
	115
	116	#define THETA(ka, kb, kc, kd, a, b, c, d) do { \
	117	uint32 _x; \
	118	_x = a ^ c; _x ^= ROR32(_x, 8) ^ ROL32(_x, 8); b ^= _x; d ^= _x; \
	119	a ^= ka; b ^= kb; c ^= kc; d ^= kd; \
	120	_x = b ^ d; _x ^= ROR32(_x, 8) ^ ROL32(_x, 8); a ^= _x; c ^= _x; \
	121	} while (0)
	122
	123	#define ITHETA(ka, kb, kc, kd, a, b, c, d) do { \
	124	uint32 _x; \
	125	_x = b ^ d; _x ^= ROR32(_x, 8) ^ ROL32(_x, 8); a ^= _x; c ^= _x; \
126	a ^= ka; b ^= kb; c ^= kc; d ^= kd; \
127	_x = a ^ c; _x ^= ROR32(_x, 8) ^ ROL32(_x, 8); b ^= _x; d ^= _x; \
128	} while (0)
129
130	#define PI1(a, b, c, d) do { \
131	b = ROL32(b, 1); c = ROL32(c, 5); d = ROL32(d, 2); \
132	} while (0)
133
134	#define PI2(a, b, c, d) do { \
135	b = ROR32(b, 1); c = ROR32(c, 5); d = ROR32(d, 2); \
136	} while (0)
137
138	#define ROUND(r, ka, kb, kc, kd, a, b, c, d) do { \
139	a ^= *r++; THETA(ka, kb, kc, kd, a, b, c, d); \
140	PI1(a, b, c, d); GAMMA(a, b, c, d); PI2(a, b, c, d); \
141	} while (0)
142
143	#define IROUND(r, ka, kb, kc, kd, a, b, c, d) do { \
144	ITHETA(ka, kb, kc, kd, a, b, c, d); a ^= *--r; \
145	PI1(a, b, c, d); GAMMA(a, b, c, d); PI2(a, b, c, d); \
146	} while (0)
147
148	void noekeon_eblk(const noekeon_ctx k, const uint32 src, uint32 *dst)
149	{
150	uint32 ka = k->k[0], kb = k->k[1], kc = k->k[2], kd = k->k[3];
151	uint32 a = src[0], b = src[1], c = src[2], d = src[3];
152	const octet *r = rcon;
153
154	ROUND(r, ka, kb, kc, kd, a, b, c, d);
155	ROUND(r, ka, kb, kc, kd, a, b, c, d);
156	ROUND(r, ka, kb, kc, kd, a, b, c, d);
157	ROUND(r, ka, kb, kc, kd, a, b, c, d);
158	ROUND(r, ka, kb, kc, kd, a, b, c, d);
159	ROUND(r, ka, kb, kc, kd, a, b, c, d);
160	ROUND(r, ka, kb, kc, kd, a, b, c, d);
161	ROUND(r, ka, kb, kc, kd, a, b, c, d);
162	ROUND(r, ka, kb, kc, kd, a, b, c, d);
163	ROUND(r, ka, kb, kc, kd, a, b, c, d);
164	ROUND(r, ka, kb, kc, kd, a, b, c, d);
165	ROUND(r, ka, kb, kc, kd, a, b, c, d);
166	ROUND(r, ka, kb, kc, kd, a, b, c, d);
167	ROUND(r, ka, kb, kc, kd, a, b, c, d);
168	ROUND(r, ka, kb, kc, kd, a, b, c, d);
169	ROUND(r, ka, kb, kc, kd, a, b, c, d);
170
171	a ^= *r++; THETA(ka, kb, kc, kd, a, b, c, d);
172
173	dst[0] = a; dst[1] = b; dst[2] = c; dst[3] = d;
174	}
175
176	void noekeon_dblk(const noekeon_ctx k, const uint32 src, uint32 *dst)
177	{
178	uint32 ka = k->k[0], kb = k->k[1], kc = k->k[2], kd = k->k[3];
179	uint32 a = src[0], b = src[1], c = src[2], d = src[3];
180	const octet *r = rcon + sizeof(rcon);
181
182	IROUND(r, ka, kb, kc, kd, a, b, c, d);
183	IROUND(r, ka, kb, kc, kd, a, b, c, d);
184	IROUND(r, ka, kb, kc, kd, a, b, c, d);
185	IROUND(r, ka, kb, kc, kd, a, b, c, d);
186	IROUND(r, ka, kb, kc, kd, a, b, c, d);
187	IROUND(r, ka, kb, kc, kd, a, b, c, d);
188	IROUND(r, ka, kb, kc, kd, a, b, c, d);
189	IROUND(r, ka, kb, kc, kd, a, b, c, d);
190	IROUND(r, ka, kb, kc, kd, a, b, c, d);
191	IROUND(r, ka, kb, kc, kd, a, b, c, d);
192	IROUND(r, ka, kb, kc, kd, a, b, c, d);
193	IROUND(r, ka, kb, kc, kd, a, b, c, d);
194	IROUND(r, ka, kb, kc, kd, a, b, c, d);
195	IROUND(r, ka, kb, kc, kd, a, b, c, d);
196	IROUND(r, ka, kb, kc, kd, a, b, c, d);
197	IROUND(r, ka, kb, kc, kd, a, b, c, d);
198
199	ITHETA(ka, kb, kc, kd, a, b, c, d); a ^= *--r;
200
201	dst[0] = a; dst[1] = b; dst[2] = c; dst[3] = d;
202	}
203
204	BLKC_TEST(NOEKEON, noekeon)
205
206	/----- That's all, folks -------------------------------------------------/