Rearrange the file tree.
[u/mdw/catacomb] / symm / rijndael192.c
1 /* -*-c-*-
2 *
3 * The Rijndael block cipher, 192-bit version
4 *
5 * (c) 2001 Straylight/Edgeware
6 */
7
8 /*----- Licensing notice --------------------------------------------------*
9 *
10 * This file is part of Catacomb.
11 *
12 * Catacomb is free software; you can redistribute it and/or modify
13 * it under the terms of the GNU Library General Public License as
14 * published by the Free Software Foundation; either version 2 of the
15 * License, or (at your option) any later version.
16 *
17 * Catacomb is distributed in the hope that it will be useful,
18 * but WITHOUT ANY WARRANTY; without even the implied warranty of
19 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
20 * GNU Library General Public License for more details.
21 *
22 * You should have received a copy of the GNU Library General Public
23 * License along with Catacomb; if not, write to the Free
24 * Software Foundation, Inc., 59 Temple Place - Suite 330, Boston,
25 * MA 02111-1307, USA.
26 */
27
28 /*----- Header files ------------------------------------------------------*/
29
30 #include <assert.h>
31 #include <stdio.h>
32
33 #include <mLib/bits.h>
34
35 #include "blkc.h"
36 #include "gcipher.h"
37 #include "rijndael.h"
38 #include "rijndael192.h"
39 #include "rijndael-base.h"
40
41 /*----- Main code ---------------------------------------------------------*/
42
43 /* --- @rijndael192_init@ --- *
44 *
45 * Arguments: @rijndael_ctx *k@ = pointer to context to initialize
46 * @const void *buf@ = pointer to buffer of key material
47 * @size_t sz@ = size of the key material
48 *
49 * Returns: ---
50 *
51 * Use: Initializes a Rijndael context with a particular key. This
52 * implementation of Rijndael doesn't impose any particular
53 * limits on the key size except that it must be multiple of 4
54 * bytes long. 256 bits seems sensible, though.
55 */
56
57 void rijndael192_init(rijndael_ctx *k, const void *buf, size_t sz)
58 {
59 rijndael_setup(k, RIJNDAEL192_BLKSZ / 4, buf, sz);
60 }
61
62 /* --- @rijndael192_eblk@, @rijndael192_dblk@ --- *
63 *
64 * Arguments: @const rijndael_ctx *k@ = pointer to Rijndael context
65 * @const uint32 s[4]@ = pointer to source block
66 * @uint32 d[4]@ = pointer to destination block
67 *
68 * Returns: ---
69 *
70 * Use: Low-level block encryption and decryption.
71 */
72
73 #define DO(what, t, aa, bb, cc, dd, ee, ff, a, b, c, d, e, f, w) do { \
74 aa = what(t, a, b, c, d) ^ *w++; \
75 bb = what(t, b, c, d, e) ^ *w++; \
76 cc = what(t, c, d, e, f) ^ *w++; \
77 dd = what(t, d, e, f, a) ^ *w++; \
78 ee = what(t, e, f, a, b) ^ *w++; \
79 ff = what(t, f, a, b, c) ^ *w++; \
80 } while (0)
81
82 #define UNDO(what, t, aa, bb, cc, dd, ee, ff, a, b, c, d, e, f, w) do { \
83 aa = what(t, a, f, e, d) ^ *w++; \
84 bb = what(t, b, a, f, e) ^ *w++; \
85 cc = what(t, c, b, a, f) ^ *w++; \
86 dd = what(t, d, c, b, a) ^ *w++; \
87 ee = what(t, e, d, c, b) ^ *w++; \
88 ff = what(t, f, e, d, c) ^ *w++; \
89 } while (0)
90
91 void rijndael192_eblk(const rijndael_ctx *k, const uint32 *s, uint32 *dst)
92 {
93 uint32 a = s[0], b = s[1], c = s[2], d = s[3], e = s[4], f = s[5];
94 uint32 aa, bb, cc, dd, ee, ff;
95 const uint32 *w = k->w;
96
97 a ^= *w++; b ^= *w++; c ^= *w++; d ^= *w++; e ^= *w++; f ^= *w++;
98 aa = a; bb = b; cc = c; dd = d; ee = e; ff = f;
99
100 switch (k->nr) {
101 case 14:
102 DO(MIX, T, aa, bb, cc, dd, ee, ff, a, b, c, d, e, f, w);
103 case 13:
104 DO(MIX, T, a, b, c, d, e, f, aa, bb, cc, dd, ee, ff, w);
105 case 12:
106 default:
107 DO(MIX, T, aa, bb, cc, dd, ee, ff, a, b, c, d, e, f, w);
108 DO(MIX, T, a, b, c, d, e, f, aa, bb, cc, dd, ee, ff, w);
109 DO(MIX, T, aa, bb, cc, dd, ee, ff, a, b, c, d, e, f, w);
110 DO(MIX, T, a, b, c, d, e, f, aa, bb, cc, dd, ee, ff, w);
111 DO(MIX, T, aa, bb, cc, dd, ee, ff, a, b, c, d, e, f, w);
112 DO(MIX, T, a, b, c, d, e, f, aa, bb, cc, dd, ee, ff, w);
113 DO(MIX, T, aa, bb, cc, dd, ee, ff, a, b, c, d, e, f, w);
114 DO(MIX, T, a, b, c, d, e, f, aa, bb, cc, dd, ee, ff, w);
115 DO(MIX, T, aa, bb, cc, dd, ee, ff, a, b, c, d, e, f, w);
116 DO(MIX, T, a, b, c, d, e, f, aa, bb, cc, dd, ee, ff, w);
117 DO(MIX, T, aa, bb, cc, dd, ee, ff, a, b, c, d, e, f, w);
118 }
119 DO(SUB, S, a, b, c, d, e, f, aa, bb, cc, dd, ee, ff, w);
120
121 dst[0] = a; dst[1] = b; dst[2] = c; dst[3] = d; dst[4] = e; dst[5] = f;
122 }
123
124 void rijndael192_dblk(const rijndael_ctx *k, const uint32 *s, uint32 *dst)
125 {
126 uint32 a = s[0], b = s[1], c = s[2], d = s[3], e = s[4], f = s[5];
127 uint32 aa, bb, cc, dd, ee, ff;
128 const uint32 *w = k->wi;
129
130 a ^= *w++; b ^= *w++; c ^= *w++; d ^= *w++; e ^= *w++; f ^= *w++;
131 aa = a; bb = b; cc = c; dd = d; ee = e; ff = f;
132
133 switch (k->nr) {
134 case 14:
135 UNDO(MIX, TI, aa, bb, cc, dd, ee, ff, a, b, c, d, e, f, w);
136 case 13:
137 UNDO(MIX, TI, a, b, c, d, e, f, aa, bb, cc, dd, ee, ff, w);
138 case 12:
139 default:
140 UNDO(MIX, TI, aa, bb, cc, dd, ee, ff, a, b, c, d, e, f, w);
141 UNDO(MIX, TI, a, b, c, d, e, f, aa, bb, cc, dd, ee, ff, w);
142 UNDO(MIX, TI, aa, bb, cc, dd, ee, ff, a, b, c, d, e, f, w);
143 UNDO(MIX, TI, a, b, c, d, e, f, aa, bb, cc, dd, ee, ff, w);
144 UNDO(MIX, TI, aa, bb, cc, dd, ee, ff, a, b, c, d, e, f, w);
145 UNDO(MIX, TI, a, b, c, d, e, f, aa, bb, cc, dd, ee, ff, w);
146 UNDO(MIX, TI, aa, bb, cc, dd, ee, ff, a, b, c, d, e, f, w);
147 UNDO(MIX, TI, a, b, c, d, e, f, aa, bb, cc, dd, ee, ff, w);
148 UNDO(MIX, TI, aa, bb, cc, dd, ee, ff, a, b, c, d, e, f, w);
149 UNDO(MIX, TI, a, b, c, d, e, f, aa, bb, cc, dd, ee, ff, w);
150 UNDO(MIX, TI, aa, bb, cc, dd, ee, ff, a, b, c, d, e, f, w);
151 }
152 UNDO(SUB, SI, a, b, c, d, e, f, aa, bb, cc, dd, ee, ff, w);
153
154 dst[0] = a; dst[1] = b; dst[2] = c; dst[3] = d; dst[4] = e; dst[5] = f;
155 }
156
157 BLKC_TEST(RIJNDAEL192, rijndael192)
158
159 /*----- That's all, folks -------------------------------------------------*/