![](/media/cache/profiles/debfdc81854eac26ec993b55a659c6e1.jpg.50x50_q85.jpg)
mbed client lightswitch demo
Dependencies: mbed Socket lwip-eth lwip-sys lwip
Fork of mbed-client-classic-example-lwip by
mbedtls/source/camellia.c@11:cada08fc8a70, 2016-06-09 (annotated)
- Committer:
- mbedAustin
- Date:
- Thu Jun 09 17:08:36 2016 +0000
- Revision:
- 11:cada08fc8a70
Commit for public Consumption
Who changed what in which revision?
User | Revision | Line number | New contents of line |
---|---|---|---|
mbedAustin | 11:cada08fc8a70 | 1 | /* |
mbedAustin | 11:cada08fc8a70 | 2 | * Camellia implementation |
mbedAustin | 11:cada08fc8a70 | 3 | * |
mbedAustin | 11:cada08fc8a70 | 4 | * Copyright (C) 2006-2015, ARM Limited, All Rights Reserved |
mbedAustin | 11:cada08fc8a70 | 5 | * SPDX-License-Identifier: Apache-2.0 |
mbedAustin | 11:cada08fc8a70 | 6 | * |
mbedAustin | 11:cada08fc8a70 | 7 | * Licensed under the Apache License, Version 2.0 (the "License"); you may |
mbedAustin | 11:cada08fc8a70 | 8 | * not use this file except in compliance with the License. |
mbedAustin | 11:cada08fc8a70 | 9 | * You may obtain a copy of the License at |
mbedAustin | 11:cada08fc8a70 | 10 | * |
mbedAustin | 11:cada08fc8a70 | 11 | * http://www.apache.org/licenses/LICENSE-2.0 |
mbedAustin | 11:cada08fc8a70 | 12 | * |
mbedAustin | 11:cada08fc8a70 | 13 | * Unless required by applicable law or agreed to in writing, software |
mbedAustin | 11:cada08fc8a70 | 14 | * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT |
mbedAustin | 11:cada08fc8a70 | 15 | * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
mbedAustin | 11:cada08fc8a70 | 16 | * See the License for the specific language governing permissions and |
mbedAustin | 11:cada08fc8a70 | 17 | * limitations under the License. |
mbedAustin | 11:cada08fc8a70 | 18 | * |
mbedAustin | 11:cada08fc8a70 | 19 | * This file is part of mbed TLS (https://tls.mbed.org) |
mbedAustin | 11:cada08fc8a70 | 20 | */ |
mbedAustin | 11:cada08fc8a70 | 21 | /* |
mbedAustin | 11:cada08fc8a70 | 22 | * The Camellia block cipher was designed by NTT and Mitsubishi Electric |
mbedAustin | 11:cada08fc8a70 | 23 | * Corporation. |
mbedAustin | 11:cada08fc8a70 | 24 | * |
mbedAustin | 11:cada08fc8a70 | 25 | * http://info.isl.ntt.co.jp/crypt/eng/camellia/dl/01espec.pdf |
mbedAustin | 11:cada08fc8a70 | 26 | */ |
mbedAustin | 11:cada08fc8a70 | 27 | |
mbedAustin | 11:cada08fc8a70 | 28 | #if !defined(MBEDTLS_CONFIG_FILE) |
mbedAustin | 11:cada08fc8a70 | 29 | #include "mbedtls/config.h" |
mbedAustin | 11:cada08fc8a70 | 30 | #else |
mbedAustin | 11:cada08fc8a70 | 31 | #include MBEDTLS_CONFIG_FILE |
mbedAustin | 11:cada08fc8a70 | 32 | #endif |
mbedAustin | 11:cada08fc8a70 | 33 | |
mbedAustin | 11:cada08fc8a70 | 34 | #if defined(MBEDTLS_CAMELLIA_C) |
mbedAustin | 11:cada08fc8a70 | 35 | |
mbedAustin | 11:cada08fc8a70 | 36 | #include "mbedtls/camellia.h" |
mbedAustin | 11:cada08fc8a70 | 37 | |
mbedAustin | 11:cada08fc8a70 | 38 | #include <string.h> |
mbedAustin | 11:cada08fc8a70 | 39 | |
mbedAustin | 11:cada08fc8a70 | 40 | #if defined(MBEDTLS_SELF_TEST) |
mbedAustin | 11:cada08fc8a70 | 41 | #if defined(MBEDTLS_PLATFORM_C) |
mbedAustin | 11:cada08fc8a70 | 42 | #include "mbedtls/platform.h" |
mbedAustin | 11:cada08fc8a70 | 43 | #else |
mbedAustin | 11:cada08fc8a70 | 44 | #include <stdio.h> |
mbedAustin | 11:cada08fc8a70 | 45 | #define mbedtls_printf printf |
mbedAustin | 11:cada08fc8a70 | 46 | #endif /* MBEDTLS_PLATFORM_C */ |
mbedAustin | 11:cada08fc8a70 | 47 | #endif /* MBEDTLS_SELF_TEST */ |
mbedAustin | 11:cada08fc8a70 | 48 | |
mbedAustin | 11:cada08fc8a70 | 49 | #if !defined(MBEDTLS_CAMELLIA_ALT) |
mbedAustin | 11:cada08fc8a70 | 50 | |
mbedAustin | 11:cada08fc8a70 | 51 | /* Implementation that should never be optimized out by the compiler */ |
mbedAustin | 11:cada08fc8a70 | 52 | static void mbedtls_zeroize( void *v, size_t n ) { |
mbedAustin | 11:cada08fc8a70 | 53 | volatile unsigned char *p = v; while( n-- ) *p++ = 0; |
mbedAustin | 11:cada08fc8a70 | 54 | } |
mbedAustin | 11:cada08fc8a70 | 55 | |
mbedAustin | 11:cada08fc8a70 | 56 | /* |
mbedAustin | 11:cada08fc8a70 | 57 | * 32-bit integer manipulation macros (big endian) |
mbedAustin | 11:cada08fc8a70 | 58 | */ |
mbedAustin | 11:cada08fc8a70 | 59 | #ifndef GET_UINT32_BE |
mbedAustin | 11:cada08fc8a70 | 60 | #define GET_UINT32_BE(n,b,i) \ |
mbedAustin | 11:cada08fc8a70 | 61 | { \ |
mbedAustin | 11:cada08fc8a70 | 62 | (n) = ( (uint32_t) (b)[(i) ] << 24 ) \ |
mbedAustin | 11:cada08fc8a70 | 63 | | ( (uint32_t) (b)[(i) + 1] << 16 ) \ |
mbedAustin | 11:cada08fc8a70 | 64 | | ( (uint32_t) (b)[(i) + 2] << 8 ) \ |
mbedAustin | 11:cada08fc8a70 | 65 | | ( (uint32_t) (b)[(i) + 3] ); \ |
mbedAustin | 11:cada08fc8a70 | 66 | } |
mbedAustin | 11:cada08fc8a70 | 67 | #endif |
mbedAustin | 11:cada08fc8a70 | 68 | |
mbedAustin | 11:cada08fc8a70 | 69 | #ifndef PUT_UINT32_BE |
mbedAustin | 11:cada08fc8a70 | 70 | #define PUT_UINT32_BE(n,b,i) \ |
mbedAustin | 11:cada08fc8a70 | 71 | { \ |
mbedAustin | 11:cada08fc8a70 | 72 | (b)[(i) ] = (unsigned char) ( (n) >> 24 ); \ |
mbedAustin | 11:cada08fc8a70 | 73 | (b)[(i) + 1] = (unsigned char) ( (n) >> 16 ); \ |
mbedAustin | 11:cada08fc8a70 | 74 | (b)[(i) + 2] = (unsigned char) ( (n) >> 8 ); \ |
mbedAustin | 11:cada08fc8a70 | 75 | (b)[(i) + 3] = (unsigned char) ( (n) ); \ |
mbedAustin | 11:cada08fc8a70 | 76 | } |
mbedAustin | 11:cada08fc8a70 | 77 | #endif |
mbedAustin | 11:cada08fc8a70 | 78 | |
mbedAustin | 11:cada08fc8a70 | 79 | static const unsigned char SIGMA_CHARS[6][8] = |
mbedAustin | 11:cada08fc8a70 | 80 | { |
mbedAustin | 11:cada08fc8a70 | 81 | { 0xa0, 0x9e, 0x66, 0x7f, 0x3b, 0xcc, 0x90, 0x8b }, |
mbedAustin | 11:cada08fc8a70 | 82 | { 0xb6, 0x7a, 0xe8, 0x58, 0x4c, 0xaa, 0x73, 0xb2 }, |
mbedAustin | 11:cada08fc8a70 | 83 | { 0xc6, 0xef, 0x37, 0x2f, 0xe9, 0x4f, 0x82, 0xbe }, |
mbedAustin | 11:cada08fc8a70 | 84 | { 0x54, 0xff, 0x53, 0xa5, 0xf1, 0xd3, 0x6f, 0x1c }, |
mbedAustin | 11:cada08fc8a70 | 85 | { 0x10, 0xe5, 0x27, 0xfa, 0xde, 0x68, 0x2d, 0x1d }, |
mbedAustin | 11:cada08fc8a70 | 86 | { 0xb0, 0x56, 0x88, 0xc2, 0xb3, 0xe6, 0xc1, 0xfd } |
mbedAustin | 11:cada08fc8a70 | 87 | }; |
mbedAustin | 11:cada08fc8a70 | 88 | |
mbedAustin | 11:cada08fc8a70 | 89 | #if defined(MBEDTLS_CAMELLIA_SMALL_MEMORY) |
mbedAustin | 11:cada08fc8a70 | 90 | |
mbedAustin | 11:cada08fc8a70 | 91 | static const unsigned char FSb[256] = |
mbedAustin | 11:cada08fc8a70 | 92 | { |
mbedAustin | 11:cada08fc8a70 | 93 | 112,130, 44,236,179, 39,192,229,228,133, 87, 53,234, 12,174, 65, |
mbedAustin | 11:cada08fc8a70 | 94 | 35,239,107,147, 69, 25,165, 33,237, 14, 79, 78, 29,101,146,189, |
mbedAustin | 11:cada08fc8a70 | 95 | 134,184,175,143,124,235, 31,206, 62, 48,220, 95, 94,197, 11, 26, |
mbedAustin | 11:cada08fc8a70 | 96 | 166,225, 57,202,213, 71, 93, 61,217, 1, 90,214, 81, 86,108, 77, |
mbedAustin | 11:cada08fc8a70 | 97 | 139, 13,154,102,251,204,176, 45,116, 18, 43, 32,240,177,132,153, |
mbedAustin | 11:cada08fc8a70 | 98 | 223, 76,203,194, 52,126,118, 5,109,183,169, 49,209, 23, 4,215, |
mbedAustin | 11:cada08fc8a70 | 99 | 20, 88, 58, 97,222, 27, 17, 28, 50, 15,156, 22, 83, 24,242, 34, |
mbedAustin | 11:cada08fc8a70 | 100 | 254, 68,207,178,195,181,122,145, 36, 8,232,168, 96,252,105, 80, |
mbedAustin | 11:cada08fc8a70 | 101 | 170,208,160,125,161,137, 98,151, 84, 91, 30,149,224,255,100,210, |
mbedAustin | 11:cada08fc8a70 | 102 | 16,196, 0, 72,163,247,117,219,138, 3,230,218, 9, 63,221,148, |
mbedAustin | 11:cada08fc8a70 | 103 | 135, 92,131, 2,205, 74,144, 51,115,103,246,243,157,127,191,226, |
mbedAustin | 11:cada08fc8a70 | 104 | 82,155,216, 38,200, 55,198, 59,129,150,111, 75, 19,190, 99, 46, |
mbedAustin | 11:cada08fc8a70 | 105 | 233,121,167,140,159,110,188,142, 41,245,249,182, 47,253,180, 89, |
mbedAustin | 11:cada08fc8a70 | 106 | 120,152, 6,106,231, 70,113,186,212, 37,171, 66,136,162,141,250, |
mbedAustin | 11:cada08fc8a70 | 107 | 114, 7,185, 85,248,238,172, 10, 54, 73, 42,104, 60, 56,241,164, |
mbedAustin | 11:cada08fc8a70 | 108 | 64, 40,211,123,187,201, 67,193, 21,227,173,244,119,199,128,158 |
mbedAustin | 11:cada08fc8a70 | 109 | }; |
mbedAustin | 11:cada08fc8a70 | 110 | |
mbedAustin | 11:cada08fc8a70 | 111 | #define SBOX1(n) FSb[(n)] |
mbedAustin | 11:cada08fc8a70 | 112 | #define SBOX2(n) (unsigned char)((FSb[(n)] >> 7 ^ FSb[(n)] << 1) & 0xff) |
mbedAustin | 11:cada08fc8a70 | 113 | #define SBOX3(n) (unsigned char)((FSb[(n)] >> 1 ^ FSb[(n)] << 7) & 0xff) |
mbedAustin | 11:cada08fc8a70 | 114 | #define SBOX4(n) FSb[((n) << 1 ^ (n) >> 7) &0xff] |
mbedAustin | 11:cada08fc8a70 | 115 | |
mbedAustin | 11:cada08fc8a70 | 116 | #else /* MBEDTLS_CAMELLIA_SMALL_MEMORY */ |
mbedAustin | 11:cada08fc8a70 | 117 | |
mbedAustin | 11:cada08fc8a70 | 118 | static const unsigned char FSb[256] = |
mbedAustin | 11:cada08fc8a70 | 119 | { |
mbedAustin | 11:cada08fc8a70 | 120 | 112, 130, 44, 236, 179, 39, 192, 229, 228, 133, 87, 53, 234, 12, 174, 65, |
mbedAustin | 11:cada08fc8a70 | 121 | 35, 239, 107, 147, 69, 25, 165, 33, 237, 14, 79, 78, 29, 101, 146, 189, |
mbedAustin | 11:cada08fc8a70 | 122 | 134, 184, 175, 143, 124, 235, 31, 206, 62, 48, 220, 95, 94, 197, 11, 26, |
mbedAustin | 11:cada08fc8a70 | 123 | 166, 225, 57, 202, 213, 71, 93, 61, 217, 1, 90, 214, 81, 86, 108, 77, |
mbedAustin | 11:cada08fc8a70 | 124 | 139, 13, 154, 102, 251, 204, 176, 45, 116, 18, 43, 32, 240, 177, 132, 153, |
mbedAustin | 11:cada08fc8a70 | 125 | 223, 76, 203, 194, 52, 126, 118, 5, 109, 183, 169, 49, 209, 23, 4, 215, |
mbedAustin | 11:cada08fc8a70 | 126 | 20, 88, 58, 97, 222, 27, 17, 28, 50, 15, 156, 22, 83, 24, 242, 34, |
mbedAustin | 11:cada08fc8a70 | 127 | 254, 68, 207, 178, 195, 181, 122, 145, 36, 8, 232, 168, 96, 252, 105, 80, |
mbedAustin | 11:cada08fc8a70 | 128 | 170, 208, 160, 125, 161, 137, 98, 151, 84, 91, 30, 149, 224, 255, 100, 210, |
mbedAustin | 11:cada08fc8a70 | 129 | 16, 196, 0, 72, 163, 247, 117, 219, 138, 3, 230, 218, 9, 63, 221, 148, |
mbedAustin | 11:cada08fc8a70 | 130 | 135, 92, 131, 2, 205, 74, 144, 51, 115, 103, 246, 243, 157, 127, 191, 226, |
mbedAustin | 11:cada08fc8a70 | 131 | 82, 155, 216, 38, 200, 55, 198, 59, 129, 150, 111, 75, 19, 190, 99, 46, |
mbedAustin | 11:cada08fc8a70 | 132 | 233, 121, 167, 140, 159, 110, 188, 142, 41, 245, 249, 182, 47, 253, 180, 89, |
mbedAustin | 11:cada08fc8a70 | 133 | 120, 152, 6, 106, 231, 70, 113, 186, 212, 37, 171, 66, 136, 162, 141, 250, |
mbedAustin | 11:cada08fc8a70 | 134 | 114, 7, 185, 85, 248, 238, 172, 10, 54, 73, 42, 104, 60, 56, 241, 164, |
mbedAustin | 11:cada08fc8a70 | 135 | 64, 40, 211, 123, 187, 201, 67, 193, 21, 227, 173, 244, 119, 199, 128, 158 |
mbedAustin | 11:cada08fc8a70 | 136 | }; |
mbedAustin | 11:cada08fc8a70 | 137 | |
mbedAustin | 11:cada08fc8a70 | 138 | static const unsigned char FSb2[256] = |
mbedAustin | 11:cada08fc8a70 | 139 | { |
mbedAustin | 11:cada08fc8a70 | 140 | 224, 5, 88, 217, 103, 78, 129, 203, 201, 11, 174, 106, 213, 24, 93, 130, |
mbedAustin | 11:cada08fc8a70 | 141 | 70, 223, 214, 39, 138, 50, 75, 66, 219, 28, 158, 156, 58, 202, 37, 123, |
mbedAustin | 11:cada08fc8a70 | 142 | 13, 113, 95, 31, 248, 215, 62, 157, 124, 96, 185, 190, 188, 139, 22, 52, |
mbedAustin | 11:cada08fc8a70 | 143 | 77, 195, 114, 149, 171, 142, 186, 122, 179, 2, 180, 173, 162, 172, 216, 154, |
mbedAustin | 11:cada08fc8a70 | 144 | 23, 26, 53, 204, 247, 153, 97, 90, 232, 36, 86, 64, 225, 99, 9, 51, |
mbedAustin | 11:cada08fc8a70 | 145 | 191, 152, 151, 133, 104, 252, 236, 10, 218, 111, 83, 98, 163, 46, 8, 175, |
mbedAustin | 11:cada08fc8a70 | 146 | 40, 176, 116, 194, 189, 54, 34, 56, 100, 30, 57, 44, 166, 48, 229, 68, |
mbedAustin | 11:cada08fc8a70 | 147 | 253, 136, 159, 101, 135, 107, 244, 35, 72, 16, 209, 81, 192, 249, 210, 160, |
mbedAustin | 11:cada08fc8a70 | 148 | 85, 161, 65, 250, 67, 19, 196, 47, 168, 182, 60, 43, 193, 255, 200, 165, |
mbedAustin | 11:cada08fc8a70 | 149 | 32, 137, 0, 144, 71, 239, 234, 183, 21, 6, 205, 181, 18, 126, 187, 41, |
mbedAustin | 11:cada08fc8a70 | 150 | 15, 184, 7, 4, 155, 148, 33, 102, 230, 206, 237, 231, 59, 254, 127, 197, |
mbedAustin | 11:cada08fc8a70 | 151 | 164, 55, 177, 76, 145, 110, 141, 118, 3, 45, 222, 150, 38, 125, 198, 92, |
mbedAustin | 11:cada08fc8a70 | 152 | 211, 242, 79, 25, 63, 220, 121, 29, 82, 235, 243, 109, 94, 251, 105, 178, |
mbedAustin | 11:cada08fc8a70 | 153 | 240, 49, 12, 212, 207, 140, 226, 117, 169, 74, 87, 132, 17, 69, 27, 245, |
mbedAustin | 11:cada08fc8a70 | 154 | 228, 14, 115, 170, 241, 221, 89, 20, 108, 146, 84, 208, 120, 112, 227, 73, |
mbedAustin | 11:cada08fc8a70 | 155 | 128, 80, 167, 246, 119, 147, 134, 131, 42, 199, 91, 233, 238, 143, 1, 61 |
mbedAustin | 11:cada08fc8a70 | 156 | }; |
mbedAustin | 11:cada08fc8a70 | 157 | |
mbedAustin | 11:cada08fc8a70 | 158 | static const unsigned char FSb3[256] = |
mbedAustin | 11:cada08fc8a70 | 159 | { |
mbedAustin | 11:cada08fc8a70 | 160 | 56, 65, 22, 118, 217, 147, 96, 242, 114, 194, 171, 154, 117, 6, 87, 160, |
mbedAustin | 11:cada08fc8a70 | 161 | 145, 247, 181, 201, 162, 140, 210, 144, 246, 7, 167, 39, 142, 178, 73, 222, |
mbedAustin | 11:cada08fc8a70 | 162 | 67, 92, 215, 199, 62, 245, 143, 103, 31, 24, 110, 175, 47, 226, 133, 13, |
mbedAustin | 11:cada08fc8a70 | 163 | 83, 240, 156, 101, 234, 163, 174, 158, 236, 128, 45, 107, 168, 43, 54, 166, |
mbedAustin | 11:cada08fc8a70 | 164 | 197, 134, 77, 51, 253, 102, 88, 150, 58, 9, 149, 16, 120, 216, 66, 204, |
mbedAustin | 11:cada08fc8a70 | 165 | 239, 38, 229, 97, 26, 63, 59, 130, 182, 219, 212, 152, 232, 139, 2, 235, |
mbedAustin | 11:cada08fc8a70 | 166 | 10, 44, 29, 176, 111, 141, 136, 14, 25, 135, 78, 11, 169, 12, 121, 17, |
mbedAustin | 11:cada08fc8a70 | 167 | 127, 34, 231, 89, 225, 218, 61, 200, 18, 4, 116, 84, 48, 126, 180, 40, |
mbedAustin | 11:cada08fc8a70 | 168 | 85, 104, 80, 190, 208, 196, 49, 203, 42, 173, 15, 202, 112, 255, 50, 105, |
mbedAustin | 11:cada08fc8a70 | 169 | 8, 98, 0, 36, 209, 251, 186, 237, 69, 129, 115, 109, 132, 159, 238, 74, |
mbedAustin | 11:cada08fc8a70 | 170 | 195, 46, 193, 1, 230, 37, 72, 153, 185, 179, 123, 249, 206, 191, 223, 113, |
mbedAustin | 11:cada08fc8a70 | 171 | 41, 205, 108, 19, 100, 155, 99, 157, 192, 75, 183, 165, 137, 95, 177, 23, |
mbedAustin | 11:cada08fc8a70 | 172 | 244, 188, 211, 70, 207, 55, 94, 71, 148, 250, 252, 91, 151, 254, 90, 172, |
mbedAustin | 11:cada08fc8a70 | 173 | 60, 76, 3, 53, 243, 35, 184, 93, 106, 146, 213, 33, 68, 81, 198, 125, |
mbedAustin | 11:cada08fc8a70 | 174 | 57, 131, 220, 170, 124, 119, 86, 5, 27, 164, 21, 52, 30, 28, 248, 82, |
mbedAustin | 11:cada08fc8a70 | 175 | 32, 20, 233, 189, 221, 228, 161, 224, 138, 241, 214, 122, 187, 227, 64, 79 |
mbedAustin | 11:cada08fc8a70 | 176 | }; |
mbedAustin | 11:cada08fc8a70 | 177 | |
mbedAustin | 11:cada08fc8a70 | 178 | static const unsigned char FSb4[256] = |
mbedAustin | 11:cada08fc8a70 | 179 | { |
mbedAustin | 11:cada08fc8a70 | 180 | 112, 44, 179, 192, 228, 87, 234, 174, 35, 107, 69, 165, 237, 79, 29, 146, |
mbedAustin | 11:cada08fc8a70 | 181 | 134, 175, 124, 31, 62, 220, 94, 11, 166, 57, 213, 93, 217, 90, 81, 108, |
mbedAustin | 11:cada08fc8a70 | 182 | 139, 154, 251, 176, 116, 43, 240, 132, 223, 203, 52, 118, 109, 169, 209, 4, |
mbedAustin | 11:cada08fc8a70 | 183 | 20, 58, 222, 17, 50, 156, 83, 242, 254, 207, 195, 122, 36, 232, 96, 105, |
mbedAustin | 11:cada08fc8a70 | 184 | 170, 160, 161, 98, 84, 30, 224, 100, 16, 0, 163, 117, 138, 230, 9, 221, |
mbedAustin | 11:cada08fc8a70 | 185 | 135, 131, 205, 144, 115, 246, 157, 191, 82, 216, 200, 198, 129, 111, 19, 99, |
mbedAustin | 11:cada08fc8a70 | 186 | 233, 167, 159, 188, 41, 249, 47, 180, 120, 6, 231, 113, 212, 171, 136, 141, |
mbedAustin | 11:cada08fc8a70 | 187 | 114, 185, 248, 172, 54, 42, 60, 241, 64, 211, 187, 67, 21, 173, 119, 128, |
mbedAustin | 11:cada08fc8a70 | 188 | 130, 236, 39, 229, 133, 53, 12, 65, 239, 147, 25, 33, 14, 78, 101, 189, |
mbedAustin | 11:cada08fc8a70 | 189 | 184, 143, 235, 206, 48, 95, 197, 26, 225, 202, 71, 61, 1, 214, 86, 77, |
mbedAustin | 11:cada08fc8a70 | 190 | 13, 102, 204, 45, 18, 32, 177, 153, 76, 194, 126, 5, 183, 49, 23, 215, |
mbedAustin | 11:cada08fc8a70 | 191 | 88, 97, 27, 28, 15, 22, 24, 34, 68, 178, 181, 145, 8, 168, 252, 80, |
mbedAustin | 11:cada08fc8a70 | 192 | 208, 125, 137, 151, 91, 149, 255, 210, 196, 72, 247, 219, 3, 218, 63, 148, |
mbedAustin | 11:cada08fc8a70 | 193 | 92, 2, 74, 51, 103, 243, 127, 226, 155, 38, 55, 59, 150, 75, 190, 46, |
mbedAustin | 11:cada08fc8a70 | 194 | 121, 140, 110, 142, 245, 182, 253, 89, 152, 106, 70, 186, 37, 66, 162, 250, |
mbedAustin | 11:cada08fc8a70 | 195 | 7, 85, 238, 10, 73, 104, 56, 164, 40, 123, 201, 193, 227, 244, 199, 158 |
mbedAustin | 11:cada08fc8a70 | 196 | }; |
mbedAustin | 11:cada08fc8a70 | 197 | |
mbedAustin | 11:cada08fc8a70 | 198 | #define SBOX1(n) FSb[(n)] |
mbedAustin | 11:cada08fc8a70 | 199 | #define SBOX2(n) FSb2[(n)] |
mbedAustin | 11:cada08fc8a70 | 200 | #define SBOX3(n) FSb3[(n)] |
mbedAustin | 11:cada08fc8a70 | 201 | #define SBOX4(n) FSb4[(n)] |
mbedAustin | 11:cada08fc8a70 | 202 | |
mbedAustin | 11:cada08fc8a70 | 203 | #endif /* MBEDTLS_CAMELLIA_SMALL_MEMORY */ |
mbedAustin | 11:cada08fc8a70 | 204 | |
mbedAustin | 11:cada08fc8a70 | 205 | static const unsigned char shifts[2][4][4] = |
mbedAustin | 11:cada08fc8a70 | 206 | { |
mbedAustin | 11:cada08fc8a70 | 207 | { |
mbedAustin | 11:cada08fc8a70 | 208 | { 1, 1, 1, 1 }, /* KL */ |
mbedAustin | 11:cada08fc8a70 | 209 | { 0, 0, 0, 0 }, /* KR */ |
mbedAustin | 11:cada08fc8a70 | 210 | { 1, 1, 1, 1 }, /* KA */ |
mbedAustin | 11:cada08fc8a70 | 211 | { 0, 0, 0, 0 } /* KB */ |
mbedAustin | 11:cada08fc8a70 | 212 | }, |
mbedAustin | 11:cada08fc8a70 | 213 | { |
mbedAustin | 11:cada08fc8a70 | 214 | { 1, 0, 1, 1 }, /* KL */ |
mbedAustin | 11:cada08fc8a70 | 215 | { 1, 1, 0, 1 }, /* KR */ |
mbedAustin | 11:cada08fc8a70 | 216 | { 1, 1, 1, 0 }, /* KA */ |
mbedAustin | 11:cada08fc8a70 | 217 | { 1, 1, 0, 1 } /* KB */ |
mbedAustin | 11:cada08fc8a70 | 218 | } |
mbedAustin | 11:cada08fc8a70 | 219 | }; |
mbedAustin | 11:cada08fc8a70 | 220 | |
mbedAustin | 11:cada08fc8a70 | 221 | static const signed char indexes[2][4][20] = |
mbedAustin | 11:cada08fc8a70 | 222 | { |
mbedAustin | 11:cada08fc8a70 | 223 | { |
mbedAustin | 11:cada08fc8a70 | 224 | { 0, 1, 2, 3, 8, 9, 10, 11, 38, 39, |
mbedAustin | 11:cada08fc8a70 | 225 | 36, 37, 23, 20, 21, 22, 27, -1, -1, 26 }, /* KL -> RK */ |
mbedAustin | 11:cada08fc8a70 | 226 | { -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, |
mbedAustin | 11:cada08fc8a70 | 227 | -1, -1, -1, -1, -1, -1, -1, -1, -1, -1 }, /* KR -> RK */ |
mbedAustin | 11:cada08fc8a70 | 228 | { 4, 5, 6, 7, 12, 13, 14, 15, 16, 17, |
mbedAustin | 11:cada08fc8a70 | 229 | 18, 19, -1, 24, 25, -1, 31, 28, 29, 30 }, /* KA -> RK */ |
mbedAustin | 11:cada08fc8a70 | 230 | { -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, |
mbedAustin | 11:cada08fc8a70 | 231 | -1, -1, -1, -1, -1, -1, -1, -1, -1, -1 } /* KB -> RK */ |
mbedAustin | 11:cada08fc8a70 | 232 | }, |
mbedAustin | 11:cada08fc8a70 | 233 | { |
mbedAustin | 11:cada08fc8a70 | 234 | { 0, 1, 2, 3, 61, 62, 63, 60, -1, -1, |
mbedAustin | 11:cada08fc8a70 | 235 | -1, -1, 27, 24, 25, 26, 35, 32, 33, 34 }, /* KL -> RK */ |
mbedAustin | 11:cada08fc8a70 | 236 | { -1, -1, -1, -1, 8, 9, 10, 11, 16, 17, |
mbedAustin | 11:cada08fc8a70 | 237 | 18, 19, -1, -1, -1, -1, 39, 36, 37, 38 }, /* KR -> RK */ |
mbedAustin | 11:cada08fc8a70 | 238 | { -1, -1, -1, -1, 12, 13, 14, 15, 58, 59, |
mbedAustin | 11:cada08fc8a70 | 239 | 56, 57, 31, 28, 29, 30, -1, -1, -1, -1 }, /* KA -> RK */ |
mbedAustin | 11:cada08fc8a70 | 240 | { 4, 5, 6, 7, 65, 66, 67, 64, 20, 21, |
mbedAustin | 11:cada08fc8a70 | 241 | 22, 23, -1, -1, -1, -1, 43, 40, 41, 42 } /* KB -> RK */ |
mbedAustin | 11:cada08fc8a70 | 242 | } |
mbedAustin | 11:cada08fc8a70 | 243 | }; |
mbedAustin | 11:cada08fc8a70 | 244 | |
mbedAustin | 11:cada08fc8a70 | 245 | static const signed char transposes[2][20] = |
mbedAustin | 11:cada08fc8a70 | 246 | { |
mbedAustin | 11:cada08fc8a70 | 247 | { |
mbedAustin | 11:cada08fc8a70 | 248 | 21, 22, 23, 20, |
mbedAustin | 11:cada08fc8a70 | 249 | -1, -1, -1, -1, |
mbedAustin | 11:cada08fc8a70 | 250 | 18, 19, 16, 17, |
mbedAustin | 11:cada08fc8a70 | 251 | 11, 8, 9, 10, |
mbedAustin | 11:cada08fc8a70 | 252 | 15, 12, 13, 14 |
mbedAustin | 11:cada08fc8a70 | 253 | }, |
mbedAustin | 11:cada08fc8a70 | 254 | { |
mbedAustin | 11:cada08fc8a70 | 255 | 25, 26, 27, 24, |
mbedAustin | 11:cada08fc8a70 | 256 | 29, 30, 31, 28, |
mbedAustin | 11:cada08fc8a70 | 257 | 18, 19, 16, 17, |
mbedAustin | 11:cada08fc8a70 | 258 | -1, -1, -1, -1, |
mbedAustin | 11:cada08fc8a70 | 259 | -1, -1, -1, -1 |
mbedAustin | 11:cada08fc8a70 | 260 | } |
mbedAustin | 11:cada08fc8a70 | 261 | }; |
mbedAustin | 11:cada08fc8a70 | 262 | |
mbedAustin | 11:cada08fc8a70 | 263 | /* Shift macro for 128 bit strings with rotation smaller than 32 bits (!) */ |
mbedAustin | 11:cada08fc8a70 | 264 | #define ROTL(DEST, SRC, SHIFT) \ |
mbedAustin | 11:cada08fc8a70 | 265 | { \ |
mbedAustin | 11:cada08fc8a70 | 266 | (DEST)[0] = (SRC)[0] << (SHIFT) ^ (SRC)[1] >> (32 - (SHIFT)); \ |
mbedAustin | 11:cada08fc8a70 | 267 | (DEST)[1] = (SRC)[1] << (SHIFT) ^ (SRC)[2] >> (32 - (SHIFT)); \ |
mbedAustin | 11:cada08fc8a70 | 268 | (DEST)[2] = (SRC)[2] << (SHIFT) ^ (SRC)[3] >> (32 - (SHIFT)); \ |
mbedAustin | 11:cada08fc8a70 | 269 | (DEST)[3] = (SRC)[3] << (SHIFT) ^ (SRC)[0] >> (32 - (SHIFT)); \ |
mbedAustin | 11:cada08fc8a70 | 270 | } |
mbedAustin | 11:cada08fc8a70 | 271 | |
mbedAustin | 11:cada08fc8a70 | 272 | #define FL(XL, XR, KL, KR) \ |
mbedAustin | 11:cada08fc8a70 | 273 | { \ |
mbedAustin | 11:cada08fc8a70 | 274 | (XR) = ((((XL) & (KL)) << 1) | (((XL) & (KL)) >> 31)) ^ (XR); \ |
mbedAustin | 11:cada08fc8a70 | 275 | (XL) = ((XR) | (KR)) ^ (XL); \ |
mbedAustin | 11:cada08fc8a70 | 276 | } |
mbedAustin | 11:cada08fc8a70 | 277 | |
mbedAustin | 11:cada08fc8a70 | 278 | #define FLInv(YL, YR, KL, KR) \ |
mbedAustin | 11:cada08fc8a70 | 279 | { \ |
mbedAustin | 11:cada08fc8a70 | 280 | (YL) = ((YR) | (KR)) ^ (YL); \ |
mbedAustin | 11:cada08fc8a70 | 281 | (YR) = ((((YL) & (KL)) << 1) | (((YL) & (KL)) >> 31)) ^ (YR); \ |
mbedAustin | 11:cada08fc8a70 | 282 | } |
mbedAustin | 11:cada08fc8a70 | 283 | |
mbedAustin | 11:cada08fc8a70 | 284 | #define SHIFT_AND_PLACE(INDEX, OFFSET) \ |
mbedAustin | 11:cada08fc8a70 | 285 | { \ |
mbedAustin | 11:cada08fc8a70 | 286 | TK[0] = KC[(OFFSET) * 4 + 0]; \ |
mbedAustin | 11:cada08fc8a70 | 287 | TK[1] = KC[(OFFSET) * 4 + 1]; \ |
mbedAustin | 11:cada08fc8a70 | 288 | TK[2] = KC[(OFFSET) * 4 + 2]; \ |
mbedAustin | 11:cada08fc8a70 | 289 | TK[3] = KC[(OFFSET) * 4 + 3]; \ |
mbedAustin | 11:cada08fc8a70 | 290 | \ |
mbedAustin | 11:cada08fc8a70 | 291 | for( i = 1; i <= 4; i++ ) \ |
mbedAustin | 11:cada08fc8a70 | 292 | if( shifts[(INDEX)][(OFFSET)][i -1] ) \ |
mbedAustin | 11:cada08fc8a70 | 293 | ROTL(TK + i * 4, TK, ( 15 * i ) % 32); \ |
mbedAustin | 11:cada08fc8a70 | 294 | \ |
mbedAustin | 11:cada08fc8a70 | 295 | for( i = 0; i < 20; i++ ) \ |
mbedAustin | 11:cada08fc8a70 | 296 | if( indexes[(INDEX)][(OFFSET)][i] != -1 ) { \ |
mbedAustin | 11:cada08fc8a70 | 297 | RK[indexes[(INDEX)][(OFFSET)][i]] = TK[ i ]; \ |
mbedAustin | 11:cada08fc8a70 | 298 | } \ |
mbedAustin | 11:cada08fc8a70 | 299 | } |
mbedAustin | 11:cada08fc8a70 | 300 | |
mbedAustin | 11:cada08fc8a70 | 301 | static void camellia_feistel( const uint32_t x[2], const uint32_t k[2], |
mbedAustin | 11:cada08fc8a70 | 302 | uint32_t z[2]) |
mbedAustin | 11:cada08fc8a70 | 303 | { |
mbedAustin | 11:cada08fc8a70 | 304 | uint32_t I0, I1; |
mbedAustin | 11:cada08fc8a70 | 305 | I0 = x[0] ^ k[0]; |
mbedAustin | 11:cada08fc8a70 | 306 | I1 = x[1] ^ k[1]; |
mbedAustin | 11:cada08fc8a70 | 307 | |
mbedAustin | 11:cada08fc8a70 | 308 | I0 = ((uint32_t) SBOX1((I0 >> 24) & 0xFF) << 24) | |
mbedAustin | 11:cada08fc8a70 | 309 | ((uint32_t) SBOX2((I0 >> 16) & 0xFF) << 16) | |
mbedAustin | 11:cada08fc8a70 | 310 | ((uint32_t) SBOX3((I0 >> 8) & 0xFF) << 8) | |
mbedAustin | 11:cada08fc8a70 | 311 | ((uint32_t) SBOX4((I0 ) & 0xFF) ); |
mbedAustin | 11:cada08fc8a70 | 312 | I1 = ((uint32_t) SBOX2((I1 >> 24) & 0xFF) << 24) | |
mbedAustin | 11:cada08fc8a70 | 313 | ((uint32_t) SBOX3((I1 >> 16) & 0xFF) << 16) | |
mbedAustin | 11:cada08fc8a70 | 314 | ((uint32_t) SBOX4((I1 >> 8) & 0xFF) << 8) | |
mbedAustin | 11:cada08fc8a70 | 315 | ((uint32_t) SBOX1((I1 ) & 0xFF) ); |
mbedAustin | 11:cada08fc8a70 | 316 | |
mbedAustin | 11:cada08fc8a70 | 317 | I0 ^= (I1 << 8) | (I1 >> 24); |
mbedAustin | 11:cada08fc8a70 | 318 | I1 ^= (I0 << 16) | (I0 >> 16); |
mbedAustin | 11:cada08fc8a70 | 319 | I0 ^= (I1 >> 8) | (I1 << 24); |
mbedAustin | 11:cada08fc8a70 | 320 | I1 ^= (I0 >> 8) | (I0 << 24); |
mbedAustin | 11:cada08fc8a70 | 321 | |
mbedAustin | 11:cada08fc8a70 | 322 | z[0] ^= I1; |
mbedAustin | 11:cada08fc8a70 | 323 | z[1] ^= I0; |
mbedAustin | 11:cada08fc8a70 | 324 | } |
mbedAustin | 11:cada08fc8a70 | 325 | |
mbedAustin | 11:cada08fc8a70 | 326 | void mbedtls_camellia_init( mbedtls_camellia_context *ctx ) |
mbedAustin | 11:cada08fc8a70 | 327 | { |
mbedAustin | 11:cada08fc8a70 | 328 | memset( ctx, 0, sizeof( mbedtls_camellia_context ) ); |
mbedAustin | 11:cada08fc8a70 | 329 | } |
mbedAustin | 11:cada08fc8a70 | 330 | |
mbedAustin | 11:cada08fc8a70 | 331 | void mbedtls_camellia_free( mbedtls_camellia_context *ctx ) |
mbedAustin | 11:cada08fc8a70 | 332 | { |
mbedAustin | 11:cada08fc8a70 | 333 | if( ctx == NULL ) |
mbedAustin | 11:cada08fc8a70 | 334 | return; |
mbedAustin | 11:cada08fc8a70 | 335 | |
mbedAustin | 11:cada08fc8a70 | 336 | mbedtls_zeroize( ctx, sizeof( mbedtls_camellia_context ) ); |
mbedAustin | 11:cada08fc8a70 | 337 | } |
mbedAustin | 11:cada08fc8a70 | 338 | |
mbedAustin | 11:cada08fc8a70 | 339 | /* |
mbedAustin | 11:cada08fc8a70 | 340 | * Camellia key schedule (encryption) |
mbedAustin | 11:cada08fc8a70 | 341 | */ |
mbedAustin | 11:cada08fc8a70 | 342 | int mbedtls_camellia_setkey_enc( mbedtls_camellia_context *ctx, const unsigned char *key, |
mbedAustin | 11:cada08fc8a70 | 343 | unsigned int keybits ) |
mbedAustin | 11:cada08fc8a70 | 344 | { |
mbedAustin | 11:cada08fc8a70 | 345 | int idx; |
mbedAustin | 11:cada08fc8a70 | 346 | size_t i; |
mbedAustin | 11:cada08fc8a70 | 347 | uint32_t *RK; |
mbedAustin | 11:cada08fc8a70 | 348 | unsigned char t[64]; |
mbedAustin | 11:cada08fc8a70 | 349 | uint32_t SIGMA[6][2]; |
mbedAustin | 11:cada08fc8a70 | 350 | uint32_t KC[16]; |
mbedAustin | 11:cada08fc8a70 | 351 | uint32_t TK[20]; |
mbedAustin | 11:cada08fc8a70 | 352 | |
mbedAustin | 11:cada08fc8a70 | 353 | RK = ctx->rk; |
mbedAustin | 11:cada08fc8a70 | 354 | |
mbedAustin | 11:cada08fc8a70 | 355 | memset( t, 0, 64 ); |
mbedAustin | 11:cada08fc8a70 | 356 | memset( RK, 0, sizeof(ctx->rk) ); |
mbedAustin | 11:cada08fc8a70 | 357 | |
mbedAustin | 11:cada08fc8a70 | 358 | switch( keybits ) |
mbedAustin | 11:cada08fc8a70 | 359 | { |
mbedAustin | 11:cada08fc8a70 | 360 | case 128: ctx->nr = 3; idx = 0; break; |
mbedAustin | 11:cada08fc8a70 | 361 | case 192: |
mbedAustin | 11:cada08fc8a70 | 362 | case 256: ctx->nr = 4; idx = 1; break; |
mbedAustin | 11:cada08fc8a70 | 363 | default : return( MBEDTLS_ERR_CAMELLIA_INVALID_KEY_LENGTH ); |
mbedAustin | 11:cada08fc8a70 | 364 | } |
mbedAustin | 11:cada08fc8a70 | 365 | |
mbedAustin | 11:cada08fc8a70 | 366 | for( i = 0; i < keybits / 8; ++i ) |
mbedAustin | 11:cada08fc8a70 | 367 | t[i] = key[i]; |
mbedAustin | 11:cada08fc8a70 | 368 | |
mbedAustin | 11:cada08fc8a70 | 369 | if( keybits == 192 ) { |
mbedAustin | 11:cada08fc8a70 | 370 | for( i = 0; i < 8; i++ ) |
mbedAustin | 11:cada08fc8a70 | 371 | t[24 + i] = ~t[16 + i]; |
mbedAustin | 11:cada08fc8a70 | 372 | } |
mbedAustin | 11:cada08fc8a70 | 373 | |
mbedAustin | 11:cada08fc8a70 | 374 | /* |
mbedAustin | 11:cada08fc8a70 | 375 | * Prepare SIGMA values |
mbedAustin | 11:cada08fc8a70 | 376 | */ |
mbedAustin | 11:cada08fc8a70 | 377 | for( i = 0; i < 6; i++ ) { |
mbedAustin | 11:cada08fc8a70 | 378 | GET_UINT32_BE( SIGMA[i][0], SIGMA_CHARS[i], 0 ); |
mbedAustin | 11:cada08fc8a70 | 379 | GET_UINT32_BE( SIGMA[i][1], SIGMA_CHARS[i], 4 ); |
mbedAustin | 11:cada08fc8a70 | 380 | } |
mbedAustin | 11:cada08fc8a70 | 381 | |
mbedAustin | 11:cada08fc8a70 | 382 | /* |
mbedAustin | 11:cada08fc8a70 | 383 | * Key storage in KC |
mbedAustin | 11:cada08fc8a70 | 384 | * Order: KL, KR, KA, KB |
mbedAustin | 11:cada08fc8a70 | 385 | */ |
mbedAustin | 11:cada08fc8a70 | 386 | memset( KC, 0, sizeof(KC) ); |
mbedAustin | 11:cada08fc8a70 | 387 | |
mbedAustin | 11:cada08fc8a70 | 388 | /* Store KL, KR */ |
mbedAustin | 11:cada08fc8a70 | 389 | for( i = 0; i < 8; i++ ) |
mbedAustin | 11:cada08fc8a70 | 390 | GET_UINT32_BE( KC[i], t, i * 4 ); |
mbedAustin | 11:cada08fc8a70 | 391 | |
mbedAustin | 11:cada08fc8a70 | 392 | /* Generate KA */ |
mbedAustin | 11:cada08fc8a70 | 393 | for( i = 0; i < 4; ++i ) |
mbedAustin | 11:cada08fc8a70 | 394 | KC[8 + i] = KC[i] ^ KC[4 + i]; |
mbedAustin | 11:cada08fc8a70 | 395 | |
mbedAustin | 11:cada08fc8a70 | 396 | camellia_feistel( KC + 8, SIGMA[0], KC + 10 ); |
mbedAustin | 11:cada08fc8a70 | 397 | camellia_feistel( KC + 10, SIGMA[1], KC + 8 ); |
mbedAustin | 11:cada08fc8a70 | 398 | |
mbedAustin | 11:cada08fc8a70 | 399 | for( i = 0; i < 4; ++i ) |
mbedAustin | 11:cada08fc8a70 | 400 | KC[8 + i] ^= KC[i]; |
mbedAustin | 11:cada08fc8a70 | 401 | |
mbedAustin | 11:cada08fc8a70 | 402 | camellia_feistel( KC + 8, SIGMA[2], KC + 10 ); |
mbedAustin | 11:cada08fc8a70 | 403 | camellia_feistel( KC + 10, SIGMA[3], KC + 8 ); |
mbedAustin | 11:cada08fc8a70 | 404 | |
mbedAustin | 11:cada08fc8a70 | 405 | if( keybits > 128 ) { |
mbedAustin | 11:cada08fc8a70 | 406 | /* Generate KB */ |
mbedAustin | 11:cada08fc8a70 | 407 | for( i = 0; i < 4; ++i ) |
mbedAustin | 11:cada08fc8a70 | 408 | KC[12 + i] = KC[4 + i] ^ KC[8 + i]; |
mbedAustin | 11:cada08fc8a70 | 409 | |
mbedAustin | 11:cada08fc8a70 | 410 | camellia_feistel( KC + 12, SIGMA[4], KC + 14 ); |
mbedAustin | 11:cada08fc8a70 | 411 | camellia_feistel( KC + 14, SIGMA[5], KC + 12 ); |
mbedAustin | 11:cada08fc8a70 | 412 | } |
mbedAustin | 11:cada08fc8a70 | 413 | |
mbedAustin | 11:cada08fc8a70 | 414 | /* |
mbedAustin | 11:cada08fc8a70 | 415 | * Generating subkeys |
mbedAustin | 11:cada08fc8a70 | 416 | */ |
mbedAustin | 11:cada08fc8a70 | 417 | |
mbedAustin | 11:cada08fc8a70 | 418 | /* Manipulating KL */ |
mbedAustin | 11:cada08fc8a70 | 419 | SHIFT_AND_PLACE( idx, 0 ); |
mbedAustin | 11:cada08fc8a70 | 420 | |
mbedAustin | 11:cada08fc8a70 | 421 | /* Manipulating KR */ |
mbedAustin | 11:cada08fc8a70 | 422 | if( keybits > 128 ) { |
mbedAustin | 11:cada08fc8a70 | 423 | SHIFT_AND_PLACE( idx, 1 ); |
mbedAustin | 11:cada08fc8a70 | 424 | } |
mbedAustin | 11:cada08fc8a70 | 425 | |
mbedAustin | 11:cada08fc8a70 | 426 | /* Manipulating KA */ |
mbedAustin | 11:cada08fc8a70 | 427 | SHIFT_AND_PLACE( idx, 2 ); |
mbedAustin | 11:cada08fc8a70 | 428 | |
mbedAustin | 11:cada08fc8a70 | 429 | /* Manipulating KB */ |
mbedAustin | 11:cada08fc8a70 | 430 | if( keybits > 128 ) { |
mbedAustin | 11:cada08fc8a70 | 431 | SHIFT_AND_PLACE( idx, 3 ); |
mbedAustin | 11:cada08fc8a70 | 432 | } |
mbedAustin | 11:cada08fc8a70 | 433 | |
mbedAustin | 11:cada08fc8a70 | 434 | /* Do transpositions */ |
mbedAustin | 11:cada08fc8a70 | 435 | for( i = 0; i < 20; i++ ) { |
mbedAustin | 11:cada08fc8a70 | 436 | if( transposes[idx][i] != -1 ) { |
mbedAustin | 11:cada08fc8a70 | 437 | RK[32 + 12 * idx + i] = RK[transposes[idx][i]]; |
mbedAustin | 11:cada08fc8a70 | 438 | } |
mbedAustin | 11:cada08fc8a70 | 439 | } |
mbedAustin | 11:cada08fc8a70 | 440 | |
mbedAustin | 11:cada08fc8a70 | 441 | return( 0 ); |
mbedAustin | 11:cada08fc8a70 | 442 | } |
mbedAustin | 11:cada08fc8a70 | 443 | |
mbedAustin | 11:cada08fc8a70 | 444 | /* |
mbedAustin | 11:cada08fc8a70 | 445 | * Camellia key schedule (decryption) |
mbedAustin | 11:cada08fc8a70 | 446 | */ |
mbedAustin | 11:cada08fc8a70 | 447 | int mbedtls_camellia_setkey_dec( mbedtls_camellia_context *ctx, const unsigned char *key, |
mbedAustin | 11:cada08fc8a70 | 448 | unsigned int keybits ) |
mbedAustin | 11:cada08fc8a70 | 449 | { |
mbedAustin | 11:cada08fc8a70 | 450 | int idx, ret; |
mbedAustin | 11:cada08fc8a70 | 451 | size_t i; |
mbedAustin | 11:cada08fc8a70 | 452 | mbedtls_camellia_context cty; |
mbedAustin | 11:cada08fc8a70 | 453 | uint32_t *RK; |
mbedAustin | 11:cada08fc8a70 | 454 | uint32_t *SK; |
mbedAustin | 11:cada08fc8a70 | 455 | |
mbedAustin | 11:cada08fc8a70 | 456 | mbedtls_camellia_init( &cty ); |
mbedAustin | 11:cada08fc8a70 | 457 | |
mbedAustin | 11:cada08fc8a70 | 458 | /* Also checks keybits */ |
mbedAustin | 11:cada08fc8a70 | 459 | if( ( ret = mbedtls_camellia_setkey_enc( &cty, key, keybits ) ) != 0 ) |
mbedAustin | 11:cada08fc8a70 | 460 | goto exit; |
mbedAustin | 11:cada08fc8a70 | 461 | |
mbedAustin | 11:cada08fc8a70 | 462 | ctx->nr = cty.nr; |
mbedAustin | 11:cada08fc8a70 | 463 | idx = ( ctx->nr == 4 ); |
mbedAustin | 11:cada08fc8a70 | 464 | |
mbedAustin | 11:cada08fc8a70 | 465 | RK = ctx->rk; |
mbedAustin | 11:cada08fc8a70 | 466 | SK = cty.rk + 24 * 2 + 8 * idx * 2; |
mbedAustin | 11:cada08fc8a70 | 467 | |
mbedAustin | 11:cada08fc8a70 | 468 | *RK++ = *SK++; |
mbedAustin | 11:cada08fc8a70 | 469 | *RK++ = *SK++; |
mbedAustin | 11:cada08fc8a70 | 470 | *RK++ = *SK++; |
mbedAustin | 11:cada08fc8a70 | 471 | *RK++ = *SK++; |
mbedAustin | 11:cada08fc8a70 | 472 | |
mbedAustin | 11:cada08fc8a70 | 473 | for( i = 22 + 8 * idx, SK -= 6; i > 0; i--, SK -= 4 ) |
mbedAustin | 11:cada08fc8a70 | 474 | { |
mbedAustin | 11:cada08fc8a70 | 475 | *RK++ = *SK++; |
mbedAustin | 11:cada08fc8a70 | 476 | *RK++ = *SK++; |
mbedAustin | 11:cada08fc8a70 | 477 | } |
mbedAustin | 11:cada08fc8a70 | 478 | |
mbedAustin | 11:cada08fc8a70 | 479 | SK -= 2; |
mbedAustin | 11:cada08fc8a70 | 480 | |
mbedAustin | 11:cada08fc8a70 | 481 | *RK++ = *SK++; |
mbedAustin | 11:cada08fc8a70 | 482 | *RK++ = *SK++; |
mbedAustin | 11:cada08fc8a70 | 483 | *RK++ = *SK++; |
mbedAustin | 11:cada08fc8a70 | 484 | *RK++ = *SK++; |
mbedAustin | 11:cada08fc8a70 | 485 | |
mbedAustin | 11:cada08fc8a70 | 486 | exit: |
mbedAustin | 11:cada08fc8a70 | 487 | mbedtls_camellia_free( &cty ); |
mbedAustin | 11:cada08fc8a70 | 488 | |
mbedAustin | 11:cada08fc8a70 | 489 | return( ret ); |
mbedAustin | 11:cada08fc8a70 | 490 | } |
mbedAustin | 11:cada08fc8a70 | 491 | |
mbedAustin | 11:cada08fc8a70 | 492 | /* |
mbedAustin | 11:cada08fc8a70 | 493 | * Camellia-ECB block encryption/decryption |
mbedAustin | 11:cada08fc8a70 | 494 | */ |
mbedAustin | 11:cada08fc8a70 | 495 | int mbedtls_camellia_crypt_ecb( mbedtls_camellia_context *ctx, |
mbedAustin | 11:cada08fc8a70 | 496 | int mode, |
mbedAustin | 11:cada08fc8a70 | 497 | const unsigned char input[16], |
mbedAustin | 11:cada08fc8a70 | 498 | unsigned char output[16] ) |
mbedAustin | 11:cada08fc8a70 | 499 | { |
mbedAustin | 11:cada08fc8a70 | 500 | int NR; |
mbedAustin | 11:cada08fc8a70 | 501 | uint32_t *RK, X[4]; |
mbedAustin | 11:cada08fc8a70 | 502 | |
mbedAustin | 11:cada08fc8a70 | 503 | ( (void) mode ); |
mbedAustin | 11:cada08fc8a70 | 504 | |
mbedAustin | 11:cada08fc8a70 | 505 | NR = ctx->nr; |
mbedAustin | 11:cada08fc8a70 | 506 | RK = ctx->rk; |
mbedAustin | 11:cada08fc8a70 | 507 | |
mbedAustin | 11:cada08fc8a70 | 508 | GET_UINT32_BE( X[0], input, 0 ); |
mbedAustin | 11:cada08fc8a70 | 509 | GET_UINT32_BE( X[1], input, 4 ); |
mbedAustin | 11:cada08fc8a70 | 510 | GET_UINT32_BE( X[2], input, 8 ); |
mbedAustin | 11:cada08fc8a70 | 511 | GET_UINT32_BE( X[3], input, 12 ); |
mbedAustin | 11:cada08fc8a70 | 512 | |
mbedAustin | 11:cada08fc8a70 | 513 | X[0] ^= *RK++; |
mbedAustin | 11:cada08fc8a70 | 514 | X[1] ^= *RK++; |
mbedAustin | 11:cada08fc8a70 | 515 | X[2] ^= *RK++; |
mbedAustin | 11:cada08fc8a70 | 516 | X[3] ^= *RK++; |
mbedAustin | 11:cada08fc8a70 | 517 | |
mbedAustin | 11:cada08fc8a70 | 518 | while( NR ) { |
mbedAustin | 11:cada08fc8a70 | 519 | --NR; |
mbedAustin | 11:cada08fc8a70 | 520 | camellia_feistel( X, RK, X + 2 ); |
mbedAustin | 11:cada08fc8a70 | 521 | RK += 2; |
mbedAustin | 11:cada08fc8a70 | 522 | camellia_feistel( X + 2, RK, X ); |
mbedAustin | 11:cada08fc8a70 | 523 | RK += 2; |
mbedAustin | 11:cada08fc8a70 | 524 | camellia_feistel( X, RK, X + 2 ); |
mbedAustin | 11:cada08fc8a70 | 525 | RK += 2; |
mbedAustin | 11:cada08fc8a70 | 526 | camellia_feistel( X + 2, RK, X ); |
mbedAustin | 11:cada08fc8a70 | 527 | RK += 2; |
mbedAustin | 11:cada08fc8a70 | 528 | camellia_feistel( X, RK, X + 2 ); |
mbedAustin | 11:cada08fc8a70 | 529 | RK += 2; |
mbedAustin | 11:cada08fc8a70 | 530 | camellia_feistel( X + 2, RK, X ); |
mbedAustin | 11:cada08fc8a70 | 531 | RK += 2; |
mbedAustin | 11:cada08fc8a70 | 532 | |
mbedAustin | 11:cada08fc8a70 | 533 | if( NR ) { |
mbedAustin | 11:cada08fc8a70 | 534 | FL(X[0], X[1], RK[0], RK[1]); |
mbedAustin | 11:cada08fc8a70 | 535 | RK += 2; |
mbedAustin | 11:cada08fc8a70 | 536 | FLInv(X[2], X[3], RK[0], RK[1]); |
mbedAustin | 11:cada08fc8a70 | 537 | RK += 2; |
mbedAustin | 11:cada08fc8a70 | 538 | } |
mbedAustin | 11:cada08fc8a70 | 539 | } |
mbedAustin | 11:cada08fc8a70 | 540 | |
mbedAustin | 11:cada08fc8a70 | 541 | X[2] ^= *RK++; |
mbedAustin | 11:cada08fc8a70 | 542 | X[3] ^= *RK++; |
mbedAustin | 11:cada08fc8a70 | 543 | X[0] ^= *RK++; |
mbedAustin | 11:cada08fc8a70 | 544 | X[1] ^= *RK++; |
mbedAustin | 11:cada08fc8a70 | 545 | |
mbedAustin | 11:cada08fc8a70 | 546 | PUT_UINT32_BE( X[2], output, 0 ); |
mbedAustin | 11:cada08fc8a70 | 547 | PUT_UINT32_BE( X[3], output, 4 ); |
mbedAustin | 11:cada08fc8a70 | 548 | PUT_UINT32_BE( X[0], output, 8 ); |
mbedAustin | 11:cada08fc8a70 | 549 | PUT_UINT32_BE( X[1], output, 12 ); |
mbedAustin | 11:cada08fc8a70 | 550 | |
mbedAustin | 11:cada08fc8a70 | 551 | return( 0 ); |
mbedAustin | 11:cada08fc8a70 | 552 | } |
mbedAustin | 11:cada08fc8a70 | 553 | |
mbedAustin | 11:cada08fc8a70 | 554 | #if defined(MBEDTLS_CIPHER_MODE_CBC) |
mbedAustin | 11:cada08fc8a70 | 555 | /* |
mbedAustin | 11:cada08fc8a70 | 556 | * Camellia-CBC buffer encryption/decryption |
mbedAustin | 11:cada08fc8a70 | 557 | */ |
mbedAustin | 11:cada08fc8a70 | 558 | int mbedtls_camellia_crypt_cbc( mbedtls_camellia_context *ctx, |
mbedAustin | 11:cada08fc8a70 | 559 | int mode, |
mbedAustin | 11:cada08fc8a70 | 560 | size_t length, |
mbedAustin | 11:cada08fc8a70 | 561 | unsigned char iv[16], |
mbedAustin | 11:cada08fc8a70 | 562 | const unsigned char *input, |
mbedAustin | 11:cada08fc8a70 | 563 | unsigned char *output ) |
mbedAustin | 11:cada08fc8a70 | 564 | { |
mbedAustin | 11:cada08fc8a70 | 565 | int i; |
mbedAustin | 11:cada08fc8a70 | 566 | unsigned char temp[16]; |
mbedAustin | 11:cada08fc8a70 | 567 | |
mbedAustin | 11:cada08fc8a70 | 568 | if( length % 16 ) |
mbedAustin | 11:cada08fc8a70 | 569 | return( MBEDTLS_ERR_CAMELLIA_INVALID_INPUT_LENGTH ); |
mbedAustin | 11:cada08fc8a70 | 570 | |
mbedAustin | 11:cada08fc8a70 | 571 | if( mode == MBEDTLS_CAMELLIA_DECRYPT ) |
mbedAustin | 11:cada08fc8a70 | 572 | { |
mbedAustin | 11:cada08fc8a70 | 573 | while( length > 0 ) |
mbedAustin | 11:cada08fc8a70 | 574 | { |
mbedAustin | 11:cada08fc8a70 | 575 | memcpy( temp, input, 16 ); |
mbedAustin | 11:cada08fc8a70 | 576 | mbedtls_camellia_crypt_ecb( ctx, mode, input, output ); |
mbedAustin | 11:cada08fc8a70 | 577 | |
mbedAustin | 11:cada08fc8a70 | 578 | for( i = 0; i < 16; i++ ) |
mbedAustin | 11:cada08fc8a70 | 579 | output[i] = (unsigned char)( output[i] ^ iv[i] ); |
mbedAustin | 11:cada08fc8a70 | 580 | |
mbedAustin | 11:cada08fc8a70 | 581 | memcpy( iv, temp, 16 ); |
mbedAustin | 11:cada08fc8a70 | 582 | |
mbedAustin | 11:cada08fc8a70 | 583 | input += 16; |
mbedAustin | 11:cada08fc8a70 | 584 | output += 16; |
mbedAustin | 11:cada08fc8a70 | 585 | length -= 16; |
mbedAustin | 11:cada08fc8a70 | 586 | } |
mbedAustin | 11:cada08fc8a70 | 587 | } |
mbedAustin | 11:cada08fc8a70 | 588 | else |
mbedAustin | 11:cada08fc8a70 | 589 | { |
mbedAustin | 11:cada08fc8a70 | 590 | while( length > 0 ) |
mbedAustin | 11:cada08fc8a70 | 591 | { |
mbedAustin | 11:cada08fc8a70 | 592 | for( i = 0; i < 16; i++ ) |
mbedAustin | 11:cada08fc8a70 | 593 | output[i] = (unsigned char)( input[i] ^ iv[i] ); |
mbedAustin | 11:cada08fc8a70 | 594 | |
mbedAustin | 11:cada08fc8a70 | 595 | mbedtls_camellia_crypt_ecb( ctx, mode, output, output ); |
mbedAustin | 11:cada08fc8a70 | 596 | memcpy( iv, output, 16 ); |
mbedAustin | 11:cada08fc8a70 | 597 | |
mbedAustin | 11:cada08fc8a70 | 598 | input += 16; |
mbedAustin | 11:cada08fc8a70 | 599 | output += 16; |
mbedAustin | 11:cada08fc8a70 | 600 | length -= 16; |
mbedAustin | 11:cada08fc8a70 | 601 | } |
mbedAustin | 11:cada08fc8a70 | 602 | } |
mbedAustin | 11:cada08fc8a70 | 603 | |
mbedAustin | 11:cada08fc8a70 | 604 | return( 0 ); |
mbedAustin | 11:cada08fc8a70 | 605 | } |
mbedAustin | 11:cada08fc8a70 | 606 | #endif /* MBEDTLS_CIPHER_MODE_CBC */ |
mbedAustin | 11:cada08fc8a70 | 607 | |
mbedAustin | 11:cada08fc8a70 | 608 | #if defined(MBEDTLS_CIPHER_MODE_CFB) |
mbedAustin | 11:cada08fc8a70 | 609 | /* |
mbedAustin | 11:cada08fc8a70 | 610 | * Camellia-CFB128 buffer encryption/decryption |
mbedAustin | 11:cada08fc8a70 | 611 | */ |
mbedAustin | 11:cada08fc8a70 | 612 | int mbedtls_camellia_crypt_cfb128( mbedtls_camellia_context *ctx, |
mbedAustin | 11:cada08fc8a70 | 613 | int mode, |
mbedAustin | 11:cada08fc8a70 | 614 | size_t length, |
mbedAustin | 11:cada08fc8a70 | 615 | size_t *iv_off, |
mbedAustin | 11:cada08fc8a70 | 616 | unsigned char iv[16], |
mbedAustin | 11:cada08fc8a70 | 617 | const unsigned char *input, |
mbedAustin | 11:cada08fc8a70 | 618 | unsigned char *output ) |
mbedAustin | 11:cada08fc8a70 | 619 | { |
mbedAustin | 11:cada08fc8a70 | 620 | int c; |
mbedAustin | 11:cada08fc8a70 | 621 | size_t n = *iv_off; |
mbedAustin | 11:cada08fc8a70 | 622 | |
mbedAustin | 11:cada08fc8a70 | 623 | if( mode == MBEDTLS_CAMELLIA_DECRYPT ) |
mbedAustin | 11:cada08fc8a70 | 624 | { |
mbedAustin | 11:cada08fc8a70 | 625 | while( length-- ) |
mbedAustin | 11:cada08fc8a70 | 626 | { |
mbedAustin | 11:cada08fc8a70 | 627 | if( n == 0 ) |
mbedAustin | 11:cada08fc8a70 | 628 | mbedtls_camellia_crypt_ecb( ctx, MBEDTLS_CAMELLIA_ENCRYPT, iv, iv ); |
mbedAustin | 11:cada08fc8a70 | 629 | |
mbedAustin | 11:cada08fc8a70 | 630 | c = *input++; |
mbedAustin | 11:cada08fc8a70 | 631 | *output++ = (unsigned char)( c ^ iv[n] ); |
mbedAustin | 11:cada08fc8a70 | 632 | iv[n] = (unsigned char) c; |
mbedAustin | 11:cada08fc8a70 | 633 | |
mbedAustin | 11:cada08fc8a70 | 634 | n = ( n + 1 ) & 0x0F; |
mbedAustin | 11:cada08fc8a70 | 635 | } |
mbedAustin | 11:cada08fc8a70 | 636 | } |
mbedAustin | 11:cada08fc8a70 | 637 | else |
mbedAustin | 11:cada08fc8a70 | 638 | { |
mbedAustin | 11:cada08fc8a70 | 639 | while( length-- ) |
mbedAustin | 11:cada08fc8a70 | 640 | { |
mbedAustin | 11:cada08fc8a70 | 641 | if( n == 0 ) |
mbedAustin | 11:cada08fc8a70 | 642 | mbedtls_camellia_crypt_ecb( ctx, MBEDTLS_CAMELLIA_ENCRYPT, iv, iv ); |
mbedAustin | 11:cada08fc8a70 | 643 | |
mbedAustin | 11:cada08fc8a70 | 644 | iv[n] = *output++ = (unsigned char)( iv[n] ^ *input++ ); |
mbedAustin | 11:cada08fc8a70 | 645 | |
mbedAustin | 11:cada08fc8a70 | 646 | n = ( n + 1 ) & 0x0F; |
mbedAustin | 11:cada08fc8a70 | 647 | } |
mbedAustin | 11:cada08fc8a70 | 648 | } |
mbedAustin | 11:cada08fc8a70 | 649 | |
mbedAustin | 11:cada08fc8a70 | 650 | *iv_off = n; |
mbedAustin | 11:cada08fc8a70 | 651 | |
mbedAustin | 11:cada08fc8a70 | 652 | return( 0 ); |
mbedAustin | 11:cada08fc8a70 | 653 | } |
mbedAustin | 11:cada08fc8a70 | 654 | #endif /* MBEDTLS_CIPHER_MODE_CFB */ |
mbedAustin | 11:cada08fc8a70 | 655 | |
mbedAustin | 11:cada08fc8a70 | 656 | #if defined(MBEDTLS_CIPHER_MODE_CTR) |
mbedAustin | 11:cada08fc8a70 | 657 | /* |
mbedAustin | 11:cada08fc8a70 | 658 | * Camellia-CTR buffer encryption/decryption |
mbedAustin | 11:cada08fc8a70 | 659 | */ |
mbedAustin | 11:cada08fc8a70 | 660 | int mbedtls_camellia_crypt_ctr( mbedtls_camellia_context *ctx, |
mbedAustin | 11:cada08fc8a70 | 661 | size_t length, |
mbedAustin | 11:cada08fc8a70 | 662 | size_t *nc_off, |
mbedAustin | 11:cada08fc8a70 | 663 | unsigned char nonce_counter[16], |
mbedAustin | 11:cada08fc8a70 | 664 | unsigned char stream_block[16], |
mbedAustin | 11:cada08fc8a70 | 665 | const unsigned char *input, |
mbedAustin | 11:cada08fc8a70 | 666 | unsigned char *output ) |
mbedAustin | 11:cada08fc8a70 | 667 | { |
mbedAustin | 11:cada08fc8a70 | 668 | int c, i; |
mbedAustin | 11:cada08fc8a70 | 669 | size_t n = *nc_off; |
mbedAustin | 11:cada08fc8a70 | 670 | |
mbedAustin | 11:cada08fc8a70 | 671 | while( length-- ) |
mbedAustin | 11:cada08fc8a70 | 672 | { |
mbedAustin | 11:cada08fc8a70 | 673 | if( n == 0 ) { |
mbedAustin | 11:cada08fc8a70 | 674 | mbedtls_camellia_crypt_ecb( ctx, MBEDTLS_CAMELLIA_ENCRYPT, nonce_counter, |
mbedAustin | 11:cada08fc8a70 | 675 | stream_block ); |
mbedAustin | 11:cada08fc8a70 | 676 | |
mbedAustin | 11:cada08fc8a70 | 677 | for( i = 16; i > 0; i-- ) |
mbedAustin | 11:cada08fc8a70 | 678 | if( ++nonce_counter[i - 1] != 0 ) |
mbedAustin | 11:cada08fc8a70 | 679 | break; |
mbedAustin | 11:cada08fc8a70 | 680 | } |
mbedAustin | 11:cada08fc8a70 | 681 | c = *input++; |
mbedAustin | 11:cada08fc8a70 | 682 | *output++ = (unsigned char)( c ^ stream_block[n] ); |
mbedAustin | 11:cada08fc8a70 | 683 | |
mbedAustin | 11:cada08fc8a70 | 684 | n = ( n + 1 ) & 0x0F; |
mbedAustin | 11:cada08fc8a70 | 685 | } |
mbedAustin | 11:cada08fc8a70 | 686 | |
mbedAustin | 11:cada08fc8a70 | 687 | *nc_off = n; |
mbedAustin | 11:cada08fc8a70 | 688 | |
mbedAustin | 11:cada08fc8a70 | 689 | return( 0 ); |
mbedAustin | 11:cada08fc8a70 | 690 | } |
mbedAustin | 11:cada08fc8a70 | 691 | #endif /* MBEDTLS_CIPHER_MODE_CTR */ |
mbedAustin | 11:cada08fc8a70 | 692 | #endif /* !MBEDTLS_CAMELLIA_ALT */ |
mbedAustin | 11:cada08fc8a70 | 693 | |
mbedAustin | 11:cada08fc8a70 | 694 | #if defined(MBEDTLS_SELF_TEST) |
mbedAustin | 11:cada08fc8a70 | 695 | |
mbedAustin | 11:cada08fc8a70 | 696 | /* |
mbedAustin | 11:cada08fc8a70 | 697 | * Camellia test vectors from: |
mbedAustin | 11:cada08fc8a70 | 698 | * |
mbedAustin | 11:cada08fc8a70 | 699 | * http://info.isl.ntt.co.jp/crypt/eng/camellia/technology.html: |
mbedAustin | 11:cada08fc8a70 | 700 | * http://info.isl.ntt.co.jp/crypt/eng/camellia/dl/cryptrec/intermediate.txt |
mbedAustin | 11:cada08fc8a70 | 701 | * http://info.isl.ntt.co.jp/crypt/eng/camellia/dl/cryptrec/t_camellia.txt |
mbedAustin | 11:cada08fc8a70 | 702 | * (For each bitlength: Key 0, Nr 39) |
mbedAustin | 11:cada08fc8a70 | 703 | */ |
mbedAustin | 11:cada08fc8a70 | 704 | #define CAMELLIA_TESTS_ECB 2 |
mbedAustin | 11:cada08fc8a70 | 705 | |
mbedAustin | 11:cada08fc8a70 | 706 | static const unsigned char camellia_test_ecb_key[3][CAMELLIA_TESTS_ECB][32] = |
mbedAustin | 11:cada08fc8a70 | 707 | { |
mbedAustin | 11:cada08fc8a70 | 708 | { |
mbedAustin | 11:cada08fc8a70 | 709 | { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef, |
mbedAustin | 11:cada08fc8a70 | 710 | 0xfe, 0xdc, 0xba, 0x98, 0x76, 0x54, 0x32, 0x10 }, |
mbedAustin | 11:cada08fc8a70 | 711 | { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, |
mbedAustin | 11:cada08fc8a70 | 712 | 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 } |
mbedAustin | 11:cada08fc8a70 | 713 | }, |
mbedAustin | 11:cada08fc8a70 | 714 | { |
mbedAustin | 11:cada08fc8a70 | 715 | { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef, |
mbedAustin | 11:cada08fc8a70 | 716 | 0xfe, 0xdc, 0xba, 0x98, 0x76, 0x54, 0x32, 0x10, |
mbedAustin | 11:cada08fc8a70 | 717 | 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77 }, |
mbedAustin | 11:cada08fc8a70 | 718 | { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, |
mbedAustin | 11:cada08fc8a70 | 719 | 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, |
mbedAustin | 11:cada08fc8a70 | 720 | 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 } |
mbedAustin | 11:cada08fc8a70 | 721 | }, |
mbedAustin | 11:cada08fc8a70 | 722 | { |
mbedAustin | 11:cada08fc8a70 | 723 | { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef, |
mbedAustin | 11:cada08fc8a70 | 724 | 0xfe, 0xdc, 0xba, 0x98, 0x76, 0x54, 0x32, 0x10, |
mbedAustin | 11:cada08fc8a70 | 725 | 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, |
mbedAustin | 11:cada08fc8a70 | 726 | 0x88, 0x99, 0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff }, |
mbedAustin | 11:cada08fc8a70 | 727 | { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, |
mbedAustin | 11:cada08fc8a70 | 728 | 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, |
mbedAustin | 11:cada08fc8a70 | 729 | 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, |
mbedAustin | 11:cada08fc8a70 | 730 | 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 } |
mbedAustin | 11:cada08fc8a70 | 731 | }, |
mbedAustin | 11:cada08fc8a70 | 732 | }; |
mbedAustin | 11:cada08fc8a70 | 733 | |
mbedAustin | 11:cada08fc8a70 | 734 | static const unsigned char camellia_test_ecb_plain[CAMELLIA_TESTS_ECB][16] = |
mbedAustin | 11:cada08fc8a70 | 735 | { |
mbedAustin | 11:cada08fc8a70 | 736 | { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef, |
mbedAustin | 11:cada08fc8a70 | 737 | 0xfe, 0xdc, 0xba, 0x98, 0x76, 0x54, 0x32, 0x10 }, |
mbedAustin | 11:cada08fc8a70 | 738 | { 0x00, 0x00, 0x00, 0x00, 0x02, 0x00, 0x00, 0x00, |
mbedAustin | 11:cada08fc8a70 | 739 | 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 } |
mbedAustin | 11:cada08fc8a70 | 740 | }; |
mbedAustin | 11:cada08fc8a70 | 741 | |
mbedAustin | 11:cada08fc8a70 | 742 | static const unsigned char camellia_test_ecb_cipher[3][CAMELLIA_TESTS_ECB][16] = |
mbedAustin | 11:cada08fc8a70 | 743 | { |
mbedAustin | 11:cada08fc8a70 | 744 | { |
mbedAustin | 11:cada08fc8a70 | 745 | { 0x67, 0x67, 0x31, 0x38, 0x54, 0x96, 0x69, 0x73, |
mbedAustin | 11:cada08fc8a70 | 746 | 0x08, 0x57, 0x06, 0x56, 0x48, 0xea, 0xbe, 0x43 }, |
mbedAustin | 11:cada08fc8a70 | 747 | { 0x38, 0x3C, 0x6C, 0x2A, 0xAB, 0xEF, 0x7F, 0xDE, |
mbedAustin | 11:cada08fc8a70 | 748 | 0x25, 0xCD, 0x47, 0x0B, 0xF7, 0x74, 0xA3, 0x31 } |
mbedAustin | 11:cada08fc8a70 | 749 | }, |
mbedAustin | 11:cada08fc8a70 | 750 | { |
mbedAustin | 11:cada08fc8a70 | 751 | { 0xb4, 0x99, 0x34, 0x01, 0xb3, 0xe9, 0x96, 0xf8, |
mbedAustin | 11:cada08fc8a70 | 752 | 0x4e, 0xe5, 0xce, 0xe7, 0xd7, 0x9b, 0x09, 0xb9 }, |
mbedAustin | 11:cada08fc8a70 | 753 | { 0xD1, 0x76, 0x3F, 0xC0, 0x19, 0xD7, 0x7C, 0xC9, |
mbedAustin | 11:cada08fc8a70 | 754 | 0x30, 0xBF, 0xF2, 0xA5, 0x6F, 0x7C, 0x93, 0x64 } |
mbedAustin | 11:cada08fc8a70 | 755 | }, |
mbedAustin | 11:cada08fc8a70 | 756 | { |
mbedAustin | 11:cada08fc8a70 | 757 | { 0x9a, 0xcc, 0x23, 0x7d, 0xff, 0x16, 0xd7, 0x6c, |
mbedAustin | 11:cada08fc8a70 | 758 | 0x20, 0xef, 0x7c, 0x91, 0x9e, 0x3a, 0x75, 0x09 }, |
mbedAustin | 11:cada08fc8a70 | 759 | { 0x05, 0x03, 0xFB, 0x10, 0xAB, 0x24, 0x1E, 0x7C, |
mbedAustin | 11:cada08fc8a70 | 760 | 0xF4, 0x5D, 0x8C, 0xDE, 0xEE, 0x47, 0x43, 0x35 } |
mbedAustin | 11:cada08fc8a70 | 761 | } |
mbedAustin | 11:cada08fc8a70 | 762 | }; |
mbedAustin | 11:cada08fc8a70 | 763 | |
mbedAustin | 11:cada08fc8a70 | 764 | #if defined(MBEDTLS_CIPHER_MODE_CBC) |
mbedAustin | 11:cada08fc8a70 | 765 | #define CAMELLIA_TESTS_CBC 3 |
mbedAustin | 11:cada08fc8a70 | 766 | |
mbedAustin | 11:cada08fc8a70 | 767 | static const unsigned char camellia_test_cbc_key[3][32] = |
mbedAustin | 11:cada08fc8a70 | 768 | { |
mbedAustin | 11:cada08fc8a70 | 769 | { 0x2B, 0x7E, 0x15, 0x16, 0x28, 0xAE, 0xD2, 0xA6, |
mbedAustin | 11:cada08fc8a70 | 770 | 0xAB, 0xF7, 0x15, 0x88, 0x09, 0xCF, 0x4F, 0x3C } |
mbedAustin | 11:cada08fc8a70 | 771 | , |
mbedAustin | 11:cada08fc8a70 | 772 | { 0x8E, 0x73, 0xB0, 0xF7, 0xDA, 0x0E, 0x64, 0x52, |
mbedAustin | 11:cada08fc8a70 | 773 | 0xC8, 0x10, 0xF3, 0x2B, 0x80, 0x90, 0x79, 0xE5, |
mbedAustin | 11:cada08fc8a70 | 774 | 0x62, 0xF8, 0xEA, 0xD2, 0x52, 0x2C, 0x6B, 0x7B } |
mbedAustin | 11:cada08fc8a70 | 775 | , |
mbedAustin | 11:cada08fc8a70 | 776 | { 0x60, 0x3D, 0xEB, 0x10, 0x15, 0xCA, 0x71, 0xBE, |
mbedAustin | 11:cada08fc8a70 | 777 | 0x2B, 0x73, 0xAE, 0xF0, 0x85, 0x7D, 0x77, 0x81, |
mbedAustin | 11:cada08fc8a70 | 778 | 0x1F, 0x35, 0x2C, 0x07, 0x3B, 0x61, 0x08, 0xD7, |
mbedAustin | 11:cada08fc8a70 | 779 | 0x2D, 0x98, 0x10, 0xA3, 0x09, 0x14, 0xDF, 0xF4 } |
mbedAustin | 11:cada08fc8a70 | 780 | }; |
mbedAustin | 11:cada08fc8a70 | 781 | |
mbedAustin | 11:cada08fc8a70 | 782 | static const unsigned char camellia_test_cbc_iv[16] = |
mbedAustin | 11:cada08fc8a70 | 783 | |
mbedAustin | 11:cada08fc8a70 | 784 | { 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07, |
mbedAustin | 11:cada08fc8a70 | 785 | 0x08, 0x09, 0x0A, 0x0B, 0x0C, 0x0D, 0x0E, 0x0F } |
mbedAustin | 11:cada08fc8a70 | 786 | ; |
mbedAustin | 11:cada08fc8a70 | 787 | |
mbedAustin | 11:cada08fc8a70 | 788 | static const unsigned char camellia_test_cbc_plain[CAMELLIA_TESTS_CBC][16] = |
mbedAustin | 11:cada08fc8a70 | 789 | { |
mbedAustin | 11:cada08fc8a70 | 790 | { 0x6B, 0xC1, 0xBE, 0xE2, 0x2E, 0x40, 0x9F, 0x96, |
mbedAustin | 11:cada08fc8a70 | 791 | 0xE9, 0x3D, 0x7E, 0x11, 0x73, 0x93, 0x17, 0x2A }, |
mbedAustin | 11:cada08fc8a70 | 792 | { 0xAE, 0x2D, 0x8A, 0x57, 0x1E, 0x03, 0xAC, 0x9C, |
mbedAustin | 11:cada08fc8a70 | 793 | 0x9E, 0xB7, 0x6F, 0xAC, 0x45, 0xAF, 0x8E, 0x51 }, |
mbedAustin | 11:cada08fc8a70 | 794 | { 0x30, 0xC8, 0x1C, 0x46, 0xA3, 0x5C, 0xE4, 0x11, |
mbedAustin | 11:cada08fc8a70 | 795 | 0xE5, 0xFB, 0xC1, 0x19, 0x1A, 0x0A, 0x52, 0xEF } |
mbedAustin | 11:cada08fc8a70 | 796 | |
mbedAustin | 11:cada08fc8a70 | 797 | }; |
mbedAustin | 11:cada08fc8a70 | 798 | |
mbedAustin | 11:cada08fc8a70 | 799 | static const unsigned char camellia_test_cbc_cipher[3][CAMELLIA_TESTS_CBC][16] = |
mbedAustin | 11:cada08fc8a70 | 800 | { |
mbedAustin | 11:cada08fc8a70 | 801 | { |
mbedAustin | 11:cada08fc8a70 | 802 | { 0x16, 0x07, 0xCF, 0x49, 0x4B, 0x36, 0xBB, 0xF0, |
mbedAustin | 11:cada08fc8a70 | 803 | 0x0D, 0xAE, 0xB0, 0xB5, 0x03, 0xC8, 0x31, 0xAB }, |
mbedAustin | 11:cada08fc8a70 | 804 | { 0xA2, 0xF2, 0xCF, 0x67, 0x16, 0x29, 0xEF, 0x78, |
mbedAustin | 11:cada08fc8a70 | 805 | 0x40, 0xC5, 0xA5, 0xDF, 0xB5, 0x07, 0x48, 0x87 }, |
mbedAustin | 11:cada08fc8a70 | 806 | { 0x0F, 0x06, 0x16, 0x50, 0x08, 0xCF, 0x8B, 0x8B, |
mbedAustin | 11:cada08fc8a70 | 807 | 0x5A, 0x63, 0x58, 0x63, 0x62, 0x54, 0x3E, 0x54 } |
mbedAustin | 11:cada08fc8a70 | 808 | }, |
mbedAustin | 11:cada08fc8a70 | 809 | { |
mbedAustin | 11:cada08fc8a70 | 810 | { 0x2A, 0x48, 0x30, 0xAB, 0x5A, 0xC4, 0xA1, 0xA2, |
mbedAustin | 11:cada08fc8a70 | 811 | 0x40, 0x59, 0x55, 0xFD, 0x21, 0x95, 0xCF, 0x93 }, |
mbedAustin | 11:cada08fc8a70 | 812 | { 0x5D, 0x5A, 0x86, 0x9B, 0xD1, 0x4C, 0xE5, 0x42, |
mbedAustin | 11:cada08fc8a70 | 813 | 0x64, 0xF8, 0x92, 0xA6, 0xDD, 0x2E, 0xC3, 0xD5 }, |
mbedAustin | 11:cada08fc8a70 | 814 | { 0x37, 0xD3, 0x59, 0xC3, 0x34, 0x98, 0x36, 0xD8, |
mbedAustin | 11:cada08fc8a70 | 815 | 0x84, 0xE3, 0x10, 0xAD, 0xDF, 0x68, 0xC4, 0x49 } |
mbedAustin | 11:cada08fc8a70 | 816 | }, |
mbedAustin | 11:cada08fc8a70 | 817 | { |
mbedAustin | 11:cada08fc8a70 | 818 | { 0xE6, 0xCF, 0xA3, 0x5F, 0xC0, 0x2B, 0x13, 0x4A, |
mbedAustin | 11:cada08fc8a70 | 819 | 0x4D, 0x2C, 0x0B, 0x67, 0x37, 0xAC, 0x3E, 0xDA }, |
mbedAustin | 11:cada08fc8a70 | 820 | { 0x36, 0xCB, 0xEB, 0x73, 0xBD, 0x50, 0x4B, 0x40, |
mbedAustin | 11:cada08fc8a70 | 821 | 0x70, 0xB1, 0xB7, 0xDE, 0x2B, 0x21, 0xEB, 0x50 }, |
mbedAustin | 11:cada08fc8a70 | 822 | { 0xE3, 0x1A, 0x60, 0x55, 0x29, 0x7D, 0x96, 0xCA, |
mbedAustin | 11:cada08fc8a70 | 823 | 0x33, 0x30, 0xCD, 0xF1, 0xB1, 0x86, 0x0A, 0x83 } |
mbedAustin | 11:cada08fc8a70 | 824 | } |
mbedAustin | 11:cada08fc8a70 | 825 | }; |
mbedAustin | 11:cada08fc8a70 | 826 | #endif /* MBEDTLS_CIPHER_MODE_CBC */ |
mbedAustin | 11:cada08fc8a70 | 827 | |
mbedAustin | 11:cada08fc8a70 | 828 | #if defined(MBEDTLS_CIPHER_MODE_CTR) |
mbedAustin | 11:cada08fc8a70 | 829 | /* |
mbedAustin | 11:cada08fc8a70 | 830 | * Camellia-CTR test vectors from: |
mbedAustin | 11:cada08fc8a70 | 831 | * |
mbedAustin | 11:cada08fc8a70 | 832 | * http://www.faqs.org/rfcs/rfc5528.html |
mbedAustin | 11:cada08fc8a70 | 833 | */ |
mbedAustin | 11:cada08fc8a70 | 834 | |
mbedAustin | 11:cada08fc8a70 | 835 | static const unsigned char camellia_test_ctr_key[3][16] = |
mbedAustin | 11:cada08fc8a70 | 836 | { |
mbedAustin | 11:cada08fc8a70 | 837 | { 0xAE, 0x68, 0x52, 0xF8, 0x12, 0x10, 0x67, 0xCC, |
mbedAustin | 11:cada08fc8a70 | 838 | 0x4B, 0xF7, 0xA5, 0x76, 0x55, 0x77, 0xF3, 0x9E }, |
mbedAustin | 11:cada08fc8a70 | 839 | { 0x7E, 0x24, 0x06, 0x78, 0x17, 0xFA, 0xE0, 0xD7, |
mbedAustin | 11:cada08fc8a70 | 840 | 0x43, 0xD6, 0xCE, 0x1F, 0x32, 0x53, 0x91, 0x63 }, |
mbedAustin | 11:cada08fc8a70 | 841 | { 0x76, 0x91, 0xBE, 0x03, 0x5E, 0x50, 0x20, 0xA8, |
mbedAustin | 11:cada08fc8a70 | 842 | 0xAC, 0x6E, 0x61, 0x85, 0x29, 0xF9, 0xA0, 0xDC } |
mbedAustin | 11:cada08fc8a70 | 843 | }; |
mbedAustin | 11:cada08fc8a70 | 844 | |
mbedAustin | 11:cada08fc8a70 | 845 | static const unsigned char camellia_test_ctr_nonce_counter[3][16] = |
mbedAustin | 11:cada08fc8a70 | 846 | { |
mbedAustin | 11:cada08fc8a70 | 847 | { 0x00, 0x00, 0x00, 0x30, 0x00, 0x00, 0x00, 0x00, |
mbedAustin | 11:cada08fc8a70 | 848 | 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x01 }, |
mbedAustin | 11:cada08fc8a70 | 849 | { 0x00, 0x6C, 0xB6, 0xDB, 0xC0, 0x54, 0x3B, 0x59, |
mbedAustin | 11:cada08fc8a70 | 850 | 0xDA, 0x48, 0xD9, 0x0B, 0x00, 0x00, 0x00, 0x01 }, |
mbedAustin | 11:cada08fc8a70 | 851 | { 0x00, 0xE0, 0x01, 0x7B, 0x27, 0x77, 0x7F, 0x3F, |
mbedAustin | 11:cada08fc8a70 | 852 | 0x4A, 0x17, 0x86, 0xF0, 0x00, 0x00, 0x00, 0x01 } |
mbedAustin | 11:cada08fc8a70 | 853 | }; |
mbedAustin | 11:cada08fc8a70 | 854 | |
mbedAustin | 11:cada08fc8a70 | 855 | static const unsigned char camellia_test_ctr_pt[3][48] = |
mbedAustin | 11:cada08fc8a70 | 856 | { |
mbedAustin | 11:cada08fc8a70 | 857 | { 0x53, 0x69, 0x6E, 0x67, 0x6C, 0x65, 0x20, 0x62, |
mbedAustin | 11:cada08fc8a70 | 858 | 0x6C, 0x6F, 0x63, 0x6B, 0x20, 0x6D, 0x73, 0x67 }, |
mbedAustin | 11:cada08fc8a70 | 859 | |
mbedAustin | 11:cada08fc8a70 | 860 | { 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07, |
mbedAustin | 11:cada08fc8a70 | 861 | 0x08, 0x09, 0x0A, 0x0B, 0x0C, 0x0D, 0x0E, 0x0F, |
mbedAustin | 11:cada08fc8a70 | 862 | 0x10, 0x11, 0x12, 0x13, 0x14, 0x15, 0x16, 0x17, |
mbedAustin | 11:cada08fc8a70 | 863 | 0x18, 0x19, 0x1A, 0x1B, 0x1C, 0x1D, 0x1E, 0x1F }, |
mbedAustin | 11:cada08fc8a70 | 864 | |
mbedAustin | 11:cada08fc8a70 | 865 | { 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07, |
mbedAustin | 11:cada08fc8a70 | 866 | 0x08, 0x09, 0x0A, 0x0B, 0x0C, 0x0D, 0x0E, 0x0F, |
mbedAustin | 11:cada08fc8a70 | 867 | 0x10, 0x11, 0x12, 0x13, 0x14, 0x15, 0x16, 0x17, |
mbedAustin | 11:cada08fc8a70 | 868 | 0x18, 0x19, 0x1A, 0x1B, 0x1C, 0x1D, 0x1E, 0x1F, |
mbedAustin | 11:cada08fc8a70 | 869 | 0x20, 0x21, 0x22, 0x23 } |
mbedAustin | 11:cada08fc8a70 | 870 | }; |
mbedAustin | 11:cada08fc8a70 | 871 | |
mbedAustin | 11:cada08fc8a70 | 872 | static const unsigned char camellia_test_ctr_ct[3][48] = |
mbedAustin | 11:cada08fc8a70 | 873 | { |
mbedAustin | 11:cada08fc8a70 | 874 | { 0xD0, 0x9D, 0xC2, 0x9A, 0x82, 0x14, 0x61, 0x9A, |
mbedAustin | 11:cada08fc8a70 | 875 | 0x20, 0x87, 0x7C, 0x76, 0xDB, 0x1F, 0x0B, 0x3F }, |
mbedAustin | 11:cada08fc8a70 | 876 | { 0xDB, 0xF3, 0xC7, 0x8D, 0xC0, 0x83, 0x96, 0xD4, |
mbedAustin | 11:cada08fc8a70 | 877 | 0xDA, 0x7C, 0x90, 0x77, 0x65, 0xBB, 0xCB, 0x44, |
mbedAustin | 11:cada08fc8a70 | 878 | 0x2B, 0x8E, 0x8E, 0x0F, 0x31, 0xF0, 0xDC, 0xA7, |
mbedAustin | 11:cada08fc8a70 | 879 | 0x2C, 0x74, 0x17, 0xE3, 0x53, 0x60, 0xE0, 0x48 }, |
mbedAustin | 11:cada08fc8a70 | 880 | { 0xB1, 0x9D, 0x1F, 0xCD, 0xCB, 0x75, 0xEB, 0x88, |
mbedAustin | 11:cada08fc8a70 | 881 | 0x2F, 0x84, 0x9C, 0xE2, 0x4D, 0x85, 0xCF, 0x73, |
mbedAustin | 11:cada08fc8a70 | 882 | 0x9C, 0xE6, 0x4B, 0x2B, 0x5C, 0x9D, 0x73, 0xF1, |
mbedAustin | 11:cada08fc8a70 | 883 | 0x4F, 0x2D, 0x5D, 0x9D, 0xCE, 0x98, 0x89, 0xCD, |
mbedAustin | 11:cada08fc8a70 | 884 | 0xDF, 0x50, 0x86, 0x96 } |
mbedAustin | 11:cada08fc8a70 | 885 | }; |
mbedAustin | 11:cada08fc8a70 | 886 | |
mbedAustin | 11:cada08fc8a70 | 887 | static const int camellia_test_ctr_len[3] = |
mbedAustin | 11:cada08fc8a70 | 888 | { 16, 32, 36 }; |
mbedAustin | 11:cada08fc8a70 | 889 | #endif /* MBEDTLS_CIPHER_MODE_CTR */ |
mbedAustin | 11:cada08fc8a70 | 890 | |
mbedAustin | 11:cada08fc8a70 | 891 | /* |
mbedAustin | 11:cada08fc8a70 | 892 | * Checkup routine |
mbedAustin | 11:cada08fc8a70 | 893 | */ |
mbedAustin | 11:cada08fc8a70 | 894 | int mbedtls_camellia_self_test( int verbose ) |
mbedAustin | 11:cada08fc8a70 | 895 | { |
mbedAustin | 11:cada08fc8a70 | 896 | int i, j, u, v; |
mbedAustin | 11:cada08fc8a70 | 897 | unsigned char key[32]; |
mbedAustin | 11:cada08fc8a70 | 898 | unsigned char buf[64]; |
mbedAustin | 11:cada08fc8a70 | 899 | unsigned char src[16]; |
mbedAustin | 11:cada08fc8a70 | 900 | unsigned char dst[16]; |
mbedAustin | 11:cada08fc8a70 | 901 | #if defined(MBEDTLS_CIPHER_MODE_CBC) |
mbedAustin | 11:cada08fc8a70 | 902 | unsigned char iv[16]; |
mbedAustin | 11:cada08fc8a70 | 903 | #endif |
mbedAustin | 11:cada08fc8a70 | 904 | #if defined(MBEDTLS_CIPHER_MODE_CTR) |
mbedAustin | 11:cada08fc8a70 | 905 | size_t offset, len; |
mbedAustin | 11:cada08fc8a70 | 906 | unsigned char nonce_counter[16]; |
mbedAustin | 11:cada08fc8a70 | 907 | unsigned char stream_block[16]; |
mbedAustin | 11:cada08fc8a70 | 908 | #endif |
mbedAustin | 11:cada08fc8a70 | 909 | |
mbedAustin | 11:cada08fc8a70 | 910 | mbedtls_camellia_context ctx; |
mbedAustin | 11:cada08fc8a70 | 911 | |
mbedAustin | 11:cada08fc8a70 | 912 | memset( key, 0, 32 ); |
mbedAustin | 11:cada08fc8a70 | 913 | |
mbedAustin | 11:cada08fc8a70 | 914 | for( j = 0; j < 6; j++ ) { |
mbedAustin | 11:cada08fc8a70 | 915 | u = j >> 1; |
mbedAustin | 11:cada08fc8a70 | 916 | v = j & 1; |
mbedAustin | 11:cada08fc8a70 | 917 | |
mbedAustin | 11:cada08fc8a70 | 918 | if( verbose != 0 ) |
mbedAustin | 11:cada08fc8a70 | 919 | mbedtls_printf( " CAMELLIA-ECB-%3d (%s): ", 128 + u * 64, |
mbedAustin | 11:cada08fc8a70 | 920 | (v == MBEDTLS_CAMELLIA_DECRYPT) ? "dec" : "enc"); |
mbedAustin | 11:cada08fc8a70 | 921 | |
mbedAustin | 11:cada08fc8a70 | 922 | for( i = 0; i < CAMELLIA_TESTS_ECB; i++ ) { |
mbedAustin | 11:cada08fc8a70 | 923 | memcpy( key, camellia_test_ecb_key[u][i], 16 + 8 * u ); |
mbedAustin | 11:cada08fc8a70 | 924 | |
mbedAustin | 11:cada08fc8a70 | 925 | if( v == MBEDTLS_CAMELLIA_DECRYPT ) { |
mbedAustin | 11:cada08fc8a70 | 926 | mbedtls_camellia_setkey_dec( &ctx, key, 128 + u * 64 ); |
mbedAustin | 11:cada08fc8a70 | 927 | memcpy( src, camellia_test_ecb_cipher[u][i], 16 ); |
mbedAustin | 11:cada08fc8a70 | 928 | memcpy( dst, camellia_test_ecb_plain[i], 16 ); |
mbedAustin | 11:cada08fc8a70 | 929 | } else { /* MBEDTLS_CAMELLIA_ENCRYPT */ |
mbedAustin | 11:cada08fc8a70 | 930 | mbedtls_camellia_setkey_enc( &ctx, key, 128 + u * 64 ); |
mbedAustin | 11:cada08fc8a70 | 931 | memcpy( src, camellia_test_ecb_plain[i], 16 ); |
mbedAustin | 11:cada08fc8a70 | 932 | memcpy( dst, camellia_test_ecb_cipher[u][i], 16 ); |
mbedAustin | 11:cada08fc8a70 | 933 | } |
mbedAustin | 11:cada08fc8a70 | 934 | |
mbedAustin | 11:cada08fc8a70 | 935 | mbedtls_camellia_crypt_ecb( &ctx, v, src, buf ); |
mbedAustin | 11:cada08fc8a70 | 936 | |
mbedAustin | 11:cada08fc8a70 | 937 | if( memcmp( buf, dst, 16 ) != 0 ) |
mbedAustin | 11:cada08fc8a70 | 938 | { |
mbedAustin | 11:cada08fc8a70 | 939 | if( verbose != 0 ) |
mbedAustin | 11:cada08fc8a70 | 940 | mbedtls_printf( "failed\n" ); |
mbedAustin | 11:cada08fc8a70 | 941 | |
mbedAustin | 11:cada08fc8a70 | 942 | return( 1 ); |
mbedAustin | 11:cada08fc8a70 | 943 | } |
mbedAustin | 11:cada08fc8a70 | 944 | } |
mbedAustin | 11:cada08fc8a70 | 945 | |
mbedAustin | 11:cada08fc8a70 | 946 | if( verbose != 0 ) |
mbedAustin | 11:cada08fc8a70 | 947 | mbedtls_printf( "passed\n" ); |
mbedAustin | 11:cada08fc8a70 | 948 | } |
mbedAustin | 11:cada08fc8a70 | 949 | |
mbedAustin | 11:cada08fc8a70 | 950 | if( verbose != 0 ) |
mbedAustin | 11:cada08fc8a70 | 951 | mbedtls_printf( "\n" ); |
mbedAustin | 11:cada08fc8a70 | 952 | |
mbedAustin | 11:cada08fc8a70 | 953 | #if defined(MBEDTLS_CIPHER_MODE_CBC) |
mbedAustin | 11:cada08fc8a70 | 954 | /* |
mbedAustin | 11:cada08fc8a70 | 955 | * CBC mode |
mbedAustin | 11:cada08fc8a70 | 956 | */ |
mbedAustin | 11:cada08fc8a70 | 957 | for( j = 0; j < 6; j++ ) |
mbedAustin | 11:cada08fc8a70 | 958 | { |
mbedAustin | 11:cada08fc8a70 | 959 | u = j >> 1; |
mbedAustin | 11:cada08fc8a70 | 960 | v = j & 1; |
mbedAustin | 11:cada08fc8a70 | 961 | |
mbedAustin | 11:cada08fc8a70 | 962 | if( verbose != 0 ) |
mbedAustin | 11:cada08fc8a70 | 963 | mbedtls_printf( " CAMELLIA-CBC-%3d (%s): ", 128 + u * 64, |
mbedAustin | 11:cada08fc8a70 | 964 | ( v == MBEDTLS_CAMELLIA_DECRYPT ) ? "dec" : "enc" ); |
mbedAustin | 11:cada08fc8a70 | 965 | |
mbedAustin | 11:cada08fc8a70 | 966 | memcpy( src, camellia_test_cbc_iv, 16 ); |
mbedAustin | 11:cada08fc8a70 | 967 | memcpy( dst, camellia_test_cbc_iv, 16 ); |
mbedAustin | 11:cada08fc8a70 | 968 | memcpy( key, camellia_test_cbc_key[u], 16 + 8 * u ); |
mbedAustin | 11:cada08fc8a70 | 969 | |
mbedAustin | 11:cada08fc8a70 | 970 | if( v == MBEDTLS_CAMELLIA_DECRYPT ) { |
mbedAustin | 11:cada08fc8a70 | 971 | mbedtls_camellia_setkey_dec( &ctx, key, 128 + u * 64 ); |
mbedAustin | 11:cada08fc8a70 | 972 | } else { |
mbedAustin | 11:cada08fc8a70 | 973 | mbedtls_camellia_setkey_enc( &ctx, key, 128 + u * 64 ); |
mbedAustin | 11:cada08fc8a70 | 974 | } |
mbedAustin | 11:cada08fc8a70 | 975 | |
mbedAustin | 11:cada08fc8a70 | 976 | for( i = 0; i < CAMELLIA_TESTS_CBC; i++ ) { |
mbedAustin | 11:cada08fc8a70 | 977 | |
mbedAustin | 11:cada08fc8a70 | 978 | if( v == MBEDTLS_CAMELLIA_DECRYPT ) { |
mbedAustin | 11:cada08fc8a70 | 979 | memcpy( iv , src, 16 ); |
mbedAustin | 11:cada08fc8a70 | 980 | memcpy( src, camellia_test_cbc_cipher[u][i], 16 ); |
mbedAustin | 11:cada08fc8a70 | 981 | memcpy( dst, camellia_test_cbc_plain[i], 16 ); |
mbedAustin | 11:cada08fc8a70 | 982 | } else { /* MBEDTLS_CAMELLIA_ENCRYPT */ |
mbedAustin | 11:cada08fc8a70 | 983 | memcpy( iv , dst, 16 ); |
mbedAustin | 11:cada08fc8a70 | 984 | memcpy( src, camellia_test_cbc_plain[i], 16 ); |
mbedAustin | 11:cada08fc8a70 | 985 | memcpy( dst, camellia_test_cbc_cipher[u][i], 16 ); |
mbedAustin | 11:cada08fc8a70 | 986 | } |
mbedAustin | 11:cada08fc8a70 | 987 | |
mbedAustin | 11:cada08fc8a70 | 988 | mbedtls_camellia_crypt_cbc( &ctx, v, 16, iv, src, buf ); |
mbedAustin | 11:cada08fc8a70 | 989 | |
mbedAustin | 11:cada08fc8a70 | 990 | if( memcmp( buf, dst, 16 ) != 0 ) |
mbedAustin | 11:cada08fc8a70 | 991 | { |
mbedAustin | 11:cada08fc8a70 | 992 | if( verbose != 0 ) |
mbedAustin | 11:cada08fc8a70 | 993 | mbedtls_printf( "failed\n" ); |
mbedAustin | 11:cada08fc8a70 | 994 | |
mbedAustin | 11:cada08fc8a70 | 995 | return( 1 ); |
mbedAustin | 11:cada08fc8a70 | 996 | } |
mbedAustin | 11:cada08fc8a70 | 997 | } |
mbedAustin | 11:cada08fc8a70 | 998 | |
mbedAustin | 11:cada08fc8a70 | 999 | if( verbose != 0 ) |
mbedAustin | 11:cada08fc8a70 | 1000 | mbedtls_printf( "passed\n" ); |
mbedAustin | 11:cada08fc8a70 | 1001 | } |
mbedAustin | 11:cada08fc8a70 | 1002 | #endif /* MBEDTLS_CIPHER_MODE_CBC */ |
mbedAustin | 11:cada08fc8a70 | 1003 | |
mbedAustin | 11:cada08fc8a70 | 1004 | if( verbose != 0 ) |
mbedAustin | 11:cada08fc8a70 | 1005 | mbedtls_printf( "\n" ); |
mbedAustin | 11:cada08fc8a70 | 1006 | |
mbedAustin | 11:cada08fc8a70 | 1007 | #if defined(MBEDTLS_CIPHER_MODE_CTR) |
mbedAustin | 11:cada08fc8a70 | 1008 | /* |
mbedAustin | 11:cada08fc8a70 | 1009 | * CTR mode |
mbedAustin | 11:cada08fc8a70 | 1010 | */ |
mbedAustin | 11:cada08fc8a70 | 1011 | for( i = 0; i < 6; i++ ) |
mbedAustin | 11:cada08fc8a70 | 1012 | { |
mbedAustin | 11:cada08fc8a70 | 1013 | u = i >> 1; |
mbedAustin | 11:cada08fc8a70 | 1014 | v = i & 1; |
mbedAustin | 11:cada08fc8a70 | 1015 | |
mbedAustin | 11:cada08fc8a70 | 1016 | if( verbose != 0 ) |
mbedAustin | 11:cada08fc8a70 | 1017 | mbedtls_printf( " CAMELLIA-CTR-128 (%s): ", |
mbedAustin | 11:cada08fc8a70 | 1018 | ( v == MBEDTLS_CAMELLIA_DECRYPT ) ? "dec" : "enc" ); |
mbedAustin | 11:cada08fc8a70 | 1019 | |
mbedAustin | 11:cada08fc8a70 | 1020 | memcpy( nonce_counter, camellia_test_ctr_nonce_counter[u], 16 ); |
mbedAustin | 11:cada08fc8a70 | 1021 | memcpy( key, camellia_test_ctr_key[u], 16 ); |
mbedAustin | 11:cada08fc8a70 | 1022 | |
mbedAustin | 11:cada08fc8a70 | 1023 | offset = 0; |
mbedAustin | 11:cada08fc8a70 | 1024 | mbedtls_camellia_setkey_enc( &ctx, key, 128 ); |
mbedAustin | 11:cada08fc8a70 | 1025 | |
mbedAustin | 11:cada08fc8a70 | 1026 | if( v == MBEDTLS_CAMELLIA_DECRYPT ) |
mbedAustin | 11:cada08fc8a70 | 1027 | { |
mbedAustin | 11:cada08fc8a70 | 1028 | len = camellia_test_ctr_len[u]; |
mbedAustin | 11:cada08fc8a70 | 1029 | memcpy( buf, camellia_test_ctr_ct[u], len ); |
mbedAustin | 11:cada08fc8a70 | 1030 | |
mbedAustin | 11:cada08fc8a70 | 1031 | mbedtls_camellia_crypt_ctr( &ctx, len, &offset, nonce_counter, stream_block, |
mbedAustin | 11:cada08fc8a70 | 1032 | buf, buf ); |
mbedAustin | 11:cada08fc8a70 | 1033 | |
mbedAustin | 11:cada08fc8a70 | 1034 | if( memcmp( buf, camellia_test_ctr_pt[u], len ) != 0 ) |
mbedAustin | 11:cada08fc8a70 | 1035 | { |
mbedAustin | 11:cada08fc8a70 | 1036 | if( verbose != 0 ) |
mbedAustin | 11:cada08fc8a70 | 1037 | mbedtls_printf( "failed\n" ); |
mbedAustin | 11:cada08fc8a70 | 1038 | |
mbedAustin | 11:cada08fc8a70 | 1039 | return( 1 ); |
mbedAustin | 11:cada08fc8a70 | 1040 | } |
mbedAustin | 11:cada08fc8a70 | 1041 | } |
mbedAustin | 11:cada08fc8a70 | 1042 | else |
mbedAustin | 11:cada08fc8a70 | 1043 | { |
mbedAustin | 11:cada08fc8a70 | 1044 | len = camellia_test_ctr_len[u]; |
mbedAustin | 11:cada08fc8a70 | 1045 | memcpy( buf, camellia_test_ctr_pt[u], len ); |
mbedAustin | 11:cada08fc8a70 | 1046 | |
mbedAustin | 11:cada08fc8a70 | 1047 | mbedtls_camellia_crypt_ctr( &ctx, len, &offset, nonce_counter, stream_block, |
mbedAustin | 11:cada08fc8a70 | 1048 | buf, buf ); |
mbedAustin | 11:cada08fc8a70 | 1049 | |
mbedAustin | 11:cada08fc8a70 | 1050 | if( memcmp( buf, camellia_test_ctr_ct[u], len ) != 0 ) |
mbedAustin | 11:cada08fc8a70 | 1051 | { |
mbedAustin | 11:cada08fc8a70 | 1052 | if( verbose != 0 ) |
mbedAustin | 11:cada08fc8a70 | 1053 | mbedtls_printf( "failed\n" ); |
mbedAustin | 11:cada08fc8a70 | 1054 | |
mbedAustin | 11:cada08fc8a70 | 1055 | return( 1 ); |
mbedAustin | 11:cada08fc8a70 | 1056 | } |
mbedAustin | 11:cada08fc8a70 | 1057 | } |
mbedAustin | 11:cada08fc8a70 | 1058 | |
mbedAustin | 11:cada08fc8a70 | 1059 | if( verbose != 0 ) |
mbedAustin | 11:cada08fc8a70 | 1060 | mbedtls_printf( "passed\n" ); |
mbedAustin | 11:cada08fc8a70 | 1061 | } |
mbedAustin | 11:cada08fc8a70 | 1062 | |
mbedAustin | 11:cada08fc8a70 | 1063 | if( verbose != 0 ) |
mbedAustin | 11:cada08fc8a70 | 1064 | mbedtls_printf( "\n" ); |
mbedAustin | 11:cada08fc8a70 | 1065 | #endif /* MBEDTLS_CIPHER_MODE_CTR */ |
mbedAustin | 11:cada08fc8a70 | 1066 | |
mbedAustin | 11:cada08fc8a70 | 1067 | return( 0 ); |
mbedAustin | 11:cada08fc8a70 | 1068 | } |
mbedAustin | 11:cada08fc8a70 | 1069 | |
mbedAustin | 11:cada08fc8a70 | 1070 | #endif /* MBEDTLS_SELF_TEST */ |
mbedAustin | 11:cada08fc8a70 | 1071 | |
mbedAustin | 11:cada08fc8a70 | 1072 | #endif /* MBEDTLS_CAMELLIA_C */ |