Xuyi Wang
/
wolfSSL
Important changes to repositories hosted on mbed.com
Mbed hosted mercurial repositories are deprecated and are due to be permanently deleted in July 2026.
To keep a copy of this software download the repository Zip archive or clone locally using Mercurial.
It is also possible to export all your personal repositories from the account settings page.
wolfcrypt/src/hc128.c@0:d92f9d21154c, 2015-06-26 (annotated)
- Committer:
- wolfSSL
- Date:
- Fri Jun 26 00:39:20 2015 +0000
- Revision:
- 0:d92f9d21154c
wolfSSL 3.6.0
Who changed what in which revision?
| User | Revision | Line number | New contents of line |
|---|---|---|---|
| wolfSSL | 0:d92f9d21154c | 1 | /* hc128.c |
| wolfSSL | 0:d92f9d21154c | 2 | * |
| wolfSSL | 0:d92f9d21154c | 3 | * Copyright (C) 2006-2015 wolfSSL Inc. |
| wolfSSL | 0:d92f9d21154c | 4 | * |
| wolfSSL | 0:d92f9d21154c | 5 | * This file is part of wolfSSL. (formerly known as CyaSSL) |
| wolfSSL | 0:d92f9d21154c | 6 | * |
| wolfSSL | 0:d92f9d21154c | 7 | * wolfSSL is free software; you can redistribute it and/or modify |
| wolfSSL | 0:d92f9d21154c | 8 | * it under the terms of the GNU General Public License as published by |
| wolfSSL | 0:d92f9d21154c | 9 | * the Free Software Foundation; either version 2 of the License, or |
| wolfSSL | 0:d92f9d21154c | 10 | * (at your option) any later version. |
| wolfSSL | 0:d92f9d21154c | 11 | * |
| wolfSSL | 0:d92f9d21154c | 12 | * wolfSSL is distributed in the hope that it will be useful, |
| wolfSSL | 0:d92f9d21154c | 13 | * but WITHOUT ANY WARRANTY; without even the implied warranty of |
| wolfSSL | 0:d92f9d21154c | 14 | * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the |
| wolfSSL | 0:d92f9d21154c | 15 | * GNU General Public License for more details. |
| wolfSSL | 0:d92f9d21154c | 16 | * |
| wolfSSL | 0:d92f9d21154c | 17 | * You should have received a copy of the GNU General Public License |
| wolfSSL | 0:d92f9d21154c | 18 | * along with this program; if not, write to the Free Software |
| wolfSSL | 0:d92f9d21154c | 19 | * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA |
| wolfSSL | 0:d92f9d21154c | 20 | */ |
| wolfSSL | 0:d92f9d21154c | 21 | |
| wolfSSL | 0:d92f9d21154c | 22 | #ifdef HAVE_CONFIG_H |
| wolfSSL | 0:d92f9d21154c | 23 | #include <config.h> |
| wolfSSL | 0:d92f9d21154c | 24 | #endif |
| wolfSSL | 0:d92f9d21154c | 25 | |
| wolfSSL | 0:d92f9d21154c | 26 | #include <wolfssl/wolfcrypt/settings.h> |
| wolfSSL | 0:d92f9d21154c | 27 | |
| wolfSSL | 0:d92f9d21154c | 28 | #ifdef HAVE_HC128 |
| wolfSSL | 0:d92f9d21154c | 29 | |
| wolfSSL | 0:d92f9d21154c | 30 | #include <wolfssl/wolfcrypt/hc128.h> |
| wolfSSL | 0:d92f9d21154c | 31 | #include <wolfssl/wolfcrypt/error-crypt.h> |
| wolfSSL | 0:d92f9d21154c | 32 | #include <wolfssl/wolfcrypt/logging.h> |
| wolfSSL | 0:d92f9d21154c | 33 | #ifdef NO_INLINE |
| wolfSSL | 0:d92f9d21154c | 34 | #include <wolfssl/wolfcrypt/hc128.h> |
| wolfSSL | 0:d92f9d21154c | 35 | #include <wolfssl/wolfcrypt/misc.h> |
| wolfSSL | 0:d92f9d21154c | 36 | #else |
| wolfSSL | 0:d92f9d21154c | 37 | #include <wolfcrypt/src/misc.c> |
| wolfSSL | 0:d92f9d21154c | 38 | #endif |
| wolfSSL | 0:d92f9d21154c | 39 | |
| wolfSSL | 0:d92f9d21154c | 40 | |
| wolfSSL | 0:d92f9d21154c | 41 | #ifdef BIG_ENDIAN_ORDER |
| wolfSSL | 0:d92f9d21154c | 42 | #define LITTLE32(x) ByteReverseWord32(x) |
| wolfSSL | 0:d92f9d21154c | 43 | #else |
| wolfSSL | 0:d92f9d21154c | 44 | #define LITTLE32(x) (x) |
| wolfSSL | 0:d92f9d21154c | 45 | #endif |
| wolfSSL | 0:d92f9d21154c | 46 | |
| wolfSSL | 0:d92f9d21154c | 47 | |
| wolfSSL | 0:d92f9d21154c | 48 | /*h1 function*/ |
| wolfSSL | 0:d92f9d21154c | 49 | #define h1(ctx, x, y) { \ |
| wolfSSL | 0:d92f9d21154c | 50 | byte a,c; \ |
| wolfSSL | 0:d92f9d21154c | 51 | a = (byte) (x); \ |
| wolfSSL | 0:d92f9d21154c | 52 | c = (byte) ((x) >> 16); \ |
| wolfSSL | 0:d92f9d21154c | 53 | y = (ctx->T[512+a])+(ctx->T[512+256+c]); \ |
| wolfSSL | 0:d92f9d21154c | 54 | } |
| wolfSSL | 0:d92f9d21154c | 55 | |
| wolfSSL | 0:d92f9d21154c | 56 | /*h2 function*/ |
| wolfSSL | 0:d92f9d21154c | 57 | #define h2(ctx, x, y) { \ |
| wolfSSL | 0:d92f9d21154c | 58 | byte a,c; \ |
| wolfSSL | 0:d92f9d21154c | 59 | a = (byte) (x); \ |
| wolfSSL | 0:d92f9d21154c | 60 | c = (byte) ((x) >> 16); \ |
| wolfSSL | 0:d92f9d21154c | 61 | y = (ctx->T[a])+(ctx->T[256+c]); \ |
| wolfSSL | 0:d92f9d21154c | 62 | } |
| wolfSSL | 0:d92f9d21154c | 63 | |
| wolfSSL | 0:d92f9d21154c | 64 | /*one step of HC-128, update P and generate 32 bits keystream*/ |
| wolfSSL | 0:d92f9d21154c | 65 | #define step_P(ctx,u,v,a,b,c,d,n){ \ |
| wolfSSL | 0:d92f9d21154c | 66 | word32 tem0,tem1,tem2,tem3; \ |
| wolfSSL | 0:d92f9d21154c | 67 | h1((ctx),(ctx->X[(d)]),tem3); \ |
| wolfSSL | 0:d92f9d21154c | 68 | tem0 = rotrFixed((ctx->T[(v)]),23); \ |
| wolfSSL | 0:d92f9d21154c | 69 | tem1 = rotrFixed((ctx->X[(c)]),10); \ |
| wolfSSL | 0:d92f9d21154c | 70 | tem2 = rotrFixed((ctx->X[(b)]),8); \ |
| wolfSSL | 0:d92f9d21154c | 71 | (ctx->T[(u)]) += tem2+(tem0 ^ tem1); \ |
| wolfSSL | 0:d92f9d21154c | 72 | (ctx->X[(a)]) = (ctx->T[(u)]); \ |
| wolfSSL | 0:d92f9d21154c | 73 | (n) = tem3 ^ (ctx->T[(u)]) ; \ |
| wolfSSL | 0:d92f9d21154c | 74 | } |
| wolfSSL | 0:d92f9d21154c | 75 | |
| wolfSSL | 0:d92f9d21154c | 76 | /*one step of HC-128, update Q and generate 32 bits keystream*/ |
| wolfSSL | 0:d92f9d21154c | 77 | #define step_Q(ctx,u,v,a,b,c,d,n){ \ |
| wolfSSL | 0:d92f9d21154c | 78 | word32 tem0,tem1,tem2,tem3; \ |
| wolfSSL | 0:d92f9d21154c | 79 | h2((ctx),(ctx->Y[(d)]),tem3); \ |
| wolfSSL | 0:d92f9d21154c | 80 | tem0 = rotrFixed((ctx->T[(v)]),(32-23)); \ |
| wolfSSL | 0:d92f9d21154c | 81 | tem1 = rotrFixed((ctx->Y[(c)]),(32-10)); \ |
| wolfSSL | 0:d92f9d21154c | 82 | tem2 = rotrFixed((ctx->Y[(b)]),(32-8)); \ |
| wolfSSL | 0:d92f9d21154c | 83 | (ctx->T[(u)]) += tem2 + (tem0 ^ tem1); \ |
| wolfSSL | 0:d92f9d21154c | 84 | (ctx->Y[(a)]) = (ctx->T[(u)]); \ |
| wolfSSL | 0:d92f9d21154c | 85 | (n) = tem3 ^ (ctx->T[(u)]) ; \ |
| wolfSSL | 0:d92f9d21154c | 86 | } |
| wolfSSL | 0:d92f9d21154c | 87 | |
| wolfSSL | 0:d92f9d21154c | 88 | /*16 steps of HC-128, generate 512 bits keystream*/ |
| wolfSSL | 0:d92f9d21154c | 89 | static void generate_keystream(HC128* ctx, word32* keystream) |
| wolfSSL | 0:d92f9d21154c | 90 | { |
| wolfSSL | 0:d92f9d21154c | 91 | word32 cc,dd; |
| wolfSSL | 0:d92f9d21154c | 92 | cc = ctx->counter1024 & 0x1ff; |
| wolfSSL | 0:d92f9d21154c | 93 | dd = (cc+16)&0x1ff; |
| wolfSSL | 0:d92f9d21154c | 94 | |
| wolfSSL | 0:d92f9d21154c | 95 | if (ctx->counter1024 < 512) |
| wolfSSL | 0:d92f9d21154c | 96 | { |
| wolfSSL | 0:d92f9d21154c | 97 | ctx->counter1024 = (ctx->counter1024 + 16) & 0x3ff; |
| wolfSSL | 0:d92f9d21154c | 98 | step_P(ctx, cc+0, cc+1, 0, 6, 13,4, keystream[0]); |
| wolfSSL | 0:d92f9d21154c | 99 | step_P(ctx, cc+1, cc+2, 1, 7, 14,5, keystream[1]); |
| wolfSSL | 0:d92f9d21154c | 100 | step_P(ctx, cc+2, cc+3, 2, 8, 15,6, keystream[2]); |
| wolfSSL | 0:d92f9d21154c | 101 | step_P(ctx, cc+3, cc+4, 3, 9, 0, 7, keystream[3]); |
| wolfSSL | 0:d92f9d21154c | 102 | step_P(ctx, cc+4, cc+5, 4, 10,1, 8, keystream[4]); |
| wolfSSL | 0:d92f9d21154c | 103 | step_P(ctx, cc+5, cc+6, 5, 11,2, 9, keystream[5]); |
| wolfSSL | 0:d92f9d21154c | 104 | step_P(ctx, cc+6, cc+7, 6, 12,3, 10,keystream[6]); |
| wolfSSL | 0:d92f9d21154c | 105 | step_P(ctx, cc+7, cc+8, 7, 13,4, 11,keystream[7]); |
| wolfSSL | 0:d92f9d21154c | 106 | step_P(ctx, cc+8, cc+9, 8, 14,5, 12,keystream[8]); |
| wolfSSL | 0:d92f9d21154c | 107 | step_P(ctx, cc+9, cc+10,9, 15,6, 13,keystream[9]); |
| wolfSSL | 0:d92f9d21154c | 108 | step_P(ctx, cc+10,cc+11,10,0, 7, 14,keystream[10]); |
| wolfSSL | 0:d92f9d21154c | 109 | step_P(ctx, cc+11,cc+12,11,1, 8, 15,keystream[11]); |
| wolfSSL | 0:d92f9d21154c | 110 | step_P(ctx, cc+12,cc+13,12,2, 9, 0, keystream[12]); |
| wolfSSL | 0:d92f9d21154c | 111 | step_P(ctx, cc+13,cc+14,13,3, 10,1, keystream[13]); |
| wolfSSL | 0:d92f9d21154c | 112 | step_P(ctx, cc+14,cc+15,14,4, 11,2, keystream[14]); |
| wolfSSL | 0:d92f9d21154c | 113 | step_P(ctx, cc+15,dd+0, 15,5, 12,3, keystream[15]); |
| wolfSSL | 0:d92f9d21154c | 114 | } |
| wolfSSL | 0:d92f9d21154c | 115 | else |
| wolfSSL | 0:d92f9d21154c | 116 | { |
| wolfSSL | 0:d92f9d21154c | 117 | ctx->counter1024 = (ctx->counter1024 + 16) & 0x3ff; |
| wolfSSL | 0:d92f9d21154c | 118 | step_Q(ctx, 512+cc+0, 512+cc+1, 0, 6, 13,4, keystream[0]); |
| wolfSSL | 0:d92f9d21154c | 119 | step_Q(ctx, 512+cc+1, 512+cc+2, 1, 7, 14,5, keystream[1]); |
| wolfSSL | 0:d92f9d21154c | 120 | step_Q(ctx, 512+cc+2, 512+cc+3, 2, 8, 15,6, keystream[2]); |
| wolfSSL | 0:d92f9d21154c | 121 | step_Q(ctx, 512+cc+3, 512+cc+4, 3, 9, 0, 7, keystream[3]); |
| wolfSSL | 0:d92f9d21154c | 122 | step_Q(ctx, 512+cc+4, 512+cc+5, 4, 10,1, 8, keystream[4]); |
| wolfSSL | 0:d92f9d21154c | 123 | step_Q(ctx, 512+cc+5, 512+cc+6, 5, 11,2, 9, keystream[5]); |
| wolfSSL | 0:d92f9d21154c | 124 | step_Q(ctx, 512+cc+6, 512+cc+7, 6, 12,3, 10,keystream[6]); |
| wolfSSL | 0:d92f9d21154c | 125 | step_Q(ctx, 512+cc+7, 512+cc+8, 7, 13,4, 11,keystream[7]); |
| wolfSSL | 0:d92f9d21154c | 126 | step_Q(ctx, 512+cc+8, 512+cc+9, 8, 14,5, 12,keystream[8]); |
| wolfSSL | 0:d92f9d21154c | 127 | step_Q(ctx, 512+cc+9, 512+cc+10,9, 15,6, 13,keystream[9]); |
| wolfSSL | 0:d92f9d21154c | 128 | step_Q(ctx, 512+cc+10,512+cc+11,10,0, 7, 14,keystream[10]); |
| wolfSSL | 0:d92f9d21154c | 129 | step_Q(ctx, 512+cc+11,512+cc+12,11,1, 8, 15,keystream[11]); |
| wolfSSL | 0:d92f9d21154c | 130 | step_Q(ctx, 512+cc+12,512+cc+13,12,2, 9, 0, keystream[12]); |
| wolfSSL | 0:d92f9d21154c | 131 | step_Q(ctx, 512+cc+13,512+cc+14,13,3, 10,1, keystream[13]); |
| wolfSSL | 0:d92f9d21154c | 132 | step_Q(ctx, 512+cc+14,512+cc+15,14,4, 11,2, keystream[14]); |
| wolfSSL | 0:d92f9d21154c | 133 | step_Q(ctx, 512+cc+15,512+dd+0, 15,5, 12,3, keystream[15]); |
| wolfSSL | 0:d92f9d21154c | 134 | } |
| wolfSSL | 0:d92f9d21154c | 135 | } |
| wolfSSL | 0:d92f9d21154c | 136 | |
| wolfSSL | 0:d92f9d21154c | 137 | |
| wolfSSL | 0:d92f9d21154c | 138 | /* The following defines the initialization functions */ |
| wolfSSL | 0:d92f9d21154c | 139 | #define f1(x) (rotrFixed((x),7) ^ rotrFixed((x),18) ^ ((x) >> 3)) |
| wolfSSL | 0:d92f9d21154c | 140 | #define f2(x) (rotrFixed((x),17) ^ rotrFixed((x),19) ^ ((x) >> 10)) |
| wolfSSL | 0:d92f9d21154c | 141 | |
| wolfSSL | 0:d92f9d21154c | 142 | /*update table P*/ |
| wolfSSL | 0:d92f9d21154c | 143 | #define update_P(ctx,u,v,a,b,c,d){ \ |
| wolfSSL | 0:d92f9d21154c | 144 | word32 tem0,tem1,tem2,tem3; \ |
| wolfSSL | 0:d92f9d21154c | 145 | tem0 = rotrFixed((ctx->T[(v)]),23); \ |
| wolfSSL | 0:d92f9d21154c | 146 | tem1 = rotrFixed((ctx->X[(c)]),10); \ |
| wolfSSL | 0:d92f9d21154c | 147 | tem2 = rotrFixed((ctx->X[(b)]),8); \ |
| wolfSSL | 0:d92f9d21154c | 148 | h1((ctx),(ctx->X[(d)]),tem3); \ |
| wolfSSL | 0:d92f9d21154c | 149 | (ctx->T[(u)]) = ((ctx->T[(u)]) + tem2+(tem0^tem1)) ^ tem3; \ |
| wolfSSL | 0:d92f9d21154c | 150 | (ctx->X[(a)]) = (ctx->T[(u)]); \ |
| wolfSSL | 0:d92f9d21154c | 151 | } |
| wolfSSL | 0:d92f9d21154c | 152 | |
| wolfSSL | 0:d92f9d21154c | 153 | /*update table Q*/ |
| wolfSSL | 0:d92f9d21154c | 154 | #define update_Q(ctx,u,v,a,b,c,d){ \ |
| wolfSSL | 0:d92f9d21154c | 155 | word32 tem0,tem1,tem2,tem3; \ |
| wolfSSL | 0:d92f9d21154c | 156 | tem0 = rotrFixed((ctx->T[(v)]),(32-23)); \ |
| wolfSSL | 0:d92f9d21154c | 157 | tem1 = rotrFixed((ctx->Y[(c)]),(32-10)); \ |
| wolfSSL | 0:d92f9d21154c | 158 | tem2 = rotrFixed((ctx->Y[(b)]),(32-8)); \ |
| wolfSSL | 0:d92f9d21154c | 159 | h2((ctx),(ctx->Y[(d)]),tem3); \ |
| wolfSSL | 0:d92f9d21154c | 160 | (ctx->T[(u)]) = ((ctx->T[(u)]) + tem2+(tem0^tem1)) ^ tem3; \ |
| wolfSSL | 0:d92f9d21154c | 161 | (ctx->Y[(a)]) = (ctx->T[(u)]); \ |
| wolfSSL | 0:d92f9d21154c | 162 | } |
| wolfSSL | 0:d92f9d21154c | 163 | |
| wolfSSL | 0:d92f9d21154c | 164 | /*16 steps of HC-128, without generating keystream, */ |
| wolfSSL | 0:d92f9d21154c | 165 | /*but use the outputs to update P and Q*/ |
| wolfSSL | 0:d92f9d21154c | 166 | static void setup_update(HC128* ctx) /*each time 16 steps*/ |
| wolfSSL | 0:d92f9d21154c | 167 | { |
| wolfSSL | 0:d92f9d21154c | 168 | word32 cc,dd; |
| wolfSSL | 0:d92f9d21154c | 169 | cc = ctx->counter1024 & 0x1ff; |
| wolfSSL | 0:d92f9d21154c | 170 | dd = (cc+16)&0x1ff; |
| wolfSSL | 0:d92f9d21154c | 171 | |
| wolfSSL | 0:d92f9d21154c | 172 | if (ctx->counter1024 < 512) |
| wolfSSL | 0:d92f9d21154c | 173 | { |
| wolfSSL | 0:d92f9d21154c | 174 | ctx->counter1024 = (ctx->counter1024 + 16) & 0x3ff; |
| wolfSSL | 0:d92f9d21154c | 175 | update_P(ctx, cc+0, cc+1, 0, 6, 13, 4); |
| wolfSSL | 0:d92f9d21154c | 176 | update_P(ctx, cc+1, cc+2, 1, 7, 14, 5); |
| wolfSSL | 0:d92f9d21154c | 177 | update_P(ctx, cc+2, cc+3, 2, 8, 15, 6); |
| wolfSSL | 0:d92f9d21154c | 178 | update_P(ctx, cc+3, cc+4, 3, 9, 0, 7); |
| wolfSSL | 0:d92f9d21154c | 179 | update_P(ctx, cc+4, cc+5, 4, 10,1, 8); |
| wolfSSL | 0:d92f9d21154c | 180 | update_P(ctx, cc+5, cc+6, 5, 11,2, 9); |
| wolfSSL | 0:d92f9d21154c | 181 | update_P(ctx, cc+6, cc+7, 6, 12,3, 10); |
| wolfSSL | 0:d92f9d21154c | 182 | update_P(ctx, cc+7, cc+8, 7, 13,4, 11); |
| wolfSSL | 0:d92f9d21154c | 183 | update_P(ctx, cc+8, cc+9, 8, 14,5, 12); |
| wolfSSL | 0:d92f9d21154c | 184 | update_P(ctx, cc+9, cc+10,9, 15,6, 13); |
| wolfSSL | 0:d92f9d21154c | 185 | update_P(ctx, cc+10,cc+11,10,0, 7, 14); |
| wolfSSL | 0:d92f9d21154c | 186 | update_P(ctx, cc+11,cc+12,11,1, 8, 15); |
| wolfSSL | 0:d92f9d21154c | 187 | update_P(ctx, cc+12,cc+13,12,2, 9, 0); |
| wolfSSL | 0:d92f9d21154c | 188 | update_P(ctx, cc+13,cc+14,13,3, 10, 1); |
| wolfSSL | 0:d92f9d21154c | 189 | update_P(ctx, cc+14,cc+15,14,4, 11, 2); |
| wolfSSL | 0:d92f9d21154c | 190 | update_P(ctx, cc+15,dd+0, 15,5, 12, 3); |
| wolfSSL | 0:d92f9d21154c | 191 | } |
| wolfSSL | 0:d92f9d21154c | 192 | else |
| wolfSSL | 0:d92f9d21154c | 193 | { |
| wolfSSL | 0:d92f9d21154c | 194 | ctx->counter1024 = (ctx->counter1024 + 16) & 0x3ff; |
| wolfSSL | 0:d92f9d21154c | 195 | update_Q(ctx, 512+cc+0, 512+cc+1, 0, 6, 13, 4); |
| wolfSSL | 0:d92f9d21154c | 196 | update_Q(ctx, 512+cc+1, 512+cc+2, 1, 7, 14, 5); |
| wolfSSL | 0:d92f9d21154c | 197 | update_Q(ctx, 512+cc+2, 512+cc+3, 2, 8, 15, 6); |
| wolfSSL | 0:d92f9d21154c | 198 | update_Q(ctx, 512+cc+3, 512+cc+4, 3, 9, 0, 7); |
| wolfSSL | 0:d92f9d21154c | 199 | update_Q(ctx, 512+cc+4, 512+cc+5, 4, 10,1, 8); |
| wolfSSL | 0:d92f9d21154c | 200 | update_Q(ctx, 512+cc+5, 512+cc+6, 5, 11,2, 9); |
| wolfSSL | 0:d92f9d21154c | 201 | update_Q(ctx, 512+cc+6, 512+cc+7, 6, 12,3, 10); |
| wolfSSL | 0:d92f9d21154c | 202 | update_Q(ctx, 512+cc+7, 512+cc+8, 7, 13,4, 11); |
| wolfSSL | 0:d92f9d21154c | 203 | update_Q(ctx, 512+cc+8, 512+cc+9, 8, 14,5, 12); |
| wolfSSL | 0:d92f9d21154c | 204 | update_Q(ctx, 512+cc+9, 512+cc+10,9, 15,6, 13); |
| wolfSSL | 0:d92f9d21154c | 205 | update_Q(ctx, 512+cc+10,512+cc+11,10,0, 7, 14); |
| wolfSSL | 0:d92f9d21154c | 206 | update_Q(ctx, 512+cc+11,512+cc+12,11,1, 8, 15); |
| wolfSSL | 0:d92f9d21154c | 207 | update_Q(ctx, 512+cc+12,512+cc+13,12,2, 9, 0); |
| wolfSSL | 0:d92f9d21154c | 208 | update_Q(ctx, 512+cc+13,512+cc+14,13,3, 10, 1); |
| wolfSSL | 0:d92f9d21154c | 209 | update_Q(ctx, 512+cc+14,512+cc+15,14,4, 11, 2); |
| wolfSSL | 0:d92f9d21154c | 210 | update_Q(ctx, 512+cc+15,512+dd+0, 15,5, 12, 3); |
| wolfSSL | 0:d92f9d21154c | 211 | } |
| wolfSSL | 0:d92f9d21154c | 212 | } |
| wolfSSL | 0:d92f9d21154c | 213 | |
| wolfSSL | 0:d92f9d21154c | 214 | |
| wolfSSL | 0:d92f9d21154c | 215 | /* for the 128-bit key: key[0]...key[15] |
| wolfSSL | 0:d92f9d21154c | 216 | * key[0] is the least significant byte of ctx->key[0] (K_0); |
| wolfSSL | 0:d92f9d21154c | 217 | * key[3] is the most significant byte of ctx->key[0] (K_0); |
| wolfSSL | 0:d92f9d21154c | 218 | * ... |
| wolfSSL | 0:d92f9d21154c | 219 | * key[12] is the least significant byte of ctx->key[3] (K_3) |
| wolfSSL | 0:d92f9d21154c | 220 | * key[15] is the most significant byte of ctx->key[3] (K_3) |
| wolfSSL | 0:d92f9d21154c | 221 | * |
| wolfSSL | 0:d92f9d21154c | 222 | * for the 128-bit iv: iv[0]...iv[15] |
| wolfSSL | 0:d92f9d21154c | 223 | * iv[0] is the least significant byte of ctx->iv[0] (IV_0); |
| wolfSSL | 0:d92f9d21154c | 224 | * iv[3] is the most significant byte of ctx->iv[0] (IV_0); |
| wolfSSL | 0:d92f9d21154c | 225 | * ... |
| wolfSSL | 0:d92f9d21154c | 226 | * iv[12] is the least significant byte of ctx->iv[3] (IV_3) |
| wolfSSL | 0:d92f9d21154c | 227 | * iv[15] is the most significant byte of ctx->iv[3] (IV_3) |
| wolfSSL | 0:d92f9d21154c | 228 | */ |
| wolfSSL | 0:d92f9d21154c | 229 | |
| wolfSSL | 0:d92f9d21154c | 230 | |
| wolfSSL | 0:d92f9d21154c | 231 | |
| wolfSSL | 0:d92f9d21154c | 232 | static void Hc128_SetIV(HC128* ctx, const byte* inIv) |
| wolfSSL | 0:d92f9d21154c | 233 | { |
| wolfSSL | 0:d92f9d21154c | 234 | word32 i; |
| wolfSSL | 0:d92f9d21154c | 235 | word32 iv[4]; |
| wolfSSL | 0:d92f9d21154c | 236 | |
| wolfSSL | 0:d92f9d21154c | 237 | if (inIv) |
| wolfSSL | 0:d92f9d21154c | 238 | XMEMCPY(iv, inIv, sizeof(iv)); |
| wolfSSL | 0:d92f9d21154c | 239 | else |
| wolfSSL | 0:d92f9d21154c | 240 | XMEMSET(iv, 0, sizeof(iv)); |
| wolfSSL | 0:d92f9d21154c | 241 | |
| wolfSSL | 0:d92f9d21154c | 242 | for (i = 0; i < (128 >> 5); i++) |
| wolfSSL | 0:d92f9d21154c | 243 | ctx->iv[i] = LITTLE32(iv[i]); |
| wolfSSL | 0:d92f9d21154c | 244 | |
| wolfSSL | 0:d92f9d21154c | 245 | for (; i < 8; i++) ctx->iv[i] = ctx->iv[i-4]; |
| wolfSSL | 0:d92f9d21154c | 246 | |
| wolfSSL | 0:d92f9d21154c | 247 | /* expand the key and IV into the table T */ |
| wolfSSL | 0:d92f9d21154c | 248 | /* (expand the key and IV into the table P and Q) */ |
| wolfSSL | 0:d92f9d21154c | 249 | |
| wolfSSL | 0:d92f9d21154c | 250 | for (i = 0; i < 8; i++) ctx->T[i] = ctx->key[i]; |
| wolfSSL | 0:d92f9d21154c | 251 | for (i = 8; i < 16; i++) ctx->T[i] = ctx->iv[i-8]; |
| wolfSSL | 0:d92f9d21154c | 252 | |
| wolfSSL | 0:d92f9d21154c | 253 | for (i = 16; i < (256+16); i++) |
| wolfSSL | 0:d92f9d21154c | 254 | ctx->T[i] = f2(ctx->T[i-2]) + ctx->T[i-7] + f1(ctx->T[i-15]) + |
| wolfSSL | 0:d92f9d21154c | 255 | ctx->T[i-16]+i; |
| wolfSSL | 0:d92f9d21154c | 256 | |
| wolfSSL | 0:d92f9d21154c | 257 | for (i = 0; i < 16; i++) ctx->T[i] = ctx->T[256+i]; |
| wolfSSL | 0:d92f9d21154c | 258 | |
| wolfSSL | 0:d92f9d21154c | 259 | for (i = 16; i < 1024; i++) |
| wolfSSL | 0:d92f9d21154c | 260 | ctx->T[i] = f2(ctx->T[i-2]) + ctx->T[i-7] + f1(ctx->T[i-15]) + |
| wolfSSL | 0:d92f9d21154c | 261 | ctx->T[i-16]+256+i; |
| wolfSSL | 0:d92f9d21154c | 262 | |
| wolfSSL | 0:d92f9d21154c | 263 | /* initialize counter1024, X and Y */ |
| wolfSSL | 0:d92f9d21154c | 264 | ctx->counter1024 = 0; |
| wolfSSL | 0:d92f9d21154c | 265 | for (i = 0; i < 16; i++) ctx->X[i] = ctx->T[512-16+i]; |
| wolfSSL | 0:d92f9d21154c | 266 | for (i = 0; i < 16; i++) ctx->Y[i] = ctx->T[512+512-16+i]; |
| wolfSSL | 0:d92f9d21154c | 267 | |
| wolfSSL | 0:d92f9d21154c | 268 | /* run the cipher 1024 steps before generating the output */ |
| wolfSSL | 0:d92f9d21154c | 269 | for (i = 0; i < 64; i++) setup_update(ctx); |
| wolfSSL | 0:d92f9d21154c | 270 | } |
| wolfSSL | 0:d92f9d21154c | 271 | |
| wolfSSL | 0:d92f9d21154c | 272 | |
| wolfSSL | 0:d92f9d21154c | 273 | static INLINE int DoKey(HC128* ctx, const byte* key, const byte* iv) |
| wolfSSL | 0:d92f9d21154c | 274 | { |
| wolfSSL | 0:d92f9d21154c | 275 | word32 i; |
| wolfSSL | 0:d92f9d21154c | 276 | |
| wolfSSL | 0:d92f9d21154c | 277 | /* Key size in bits 128 */ |
| wolfSSL | 0:d92f9d21154c | 278 | for (i = 0; i < (128 >> 5); i++) |
| wolfSSL | 0:d92f9d21154c | 279 | ctx->key[i] = LITTLE32(((word32*)key)[i]); |
| wolfSSL | 0:d92f9d21154c | 280 | |
| wolfSSL | 0:d92f9d21154c | 281 | for ( ; i < 8 ; i++) ctx->key[i] = ctx->key[i-4]; |
| wolfSSL | 0:d92f9d21154c | 282 | |
| wolfSSL | 0:d92f9d21154c | 283 | Hc128_SetIV(ctx, iv); |
| wolfSSL | 0:d92f9d21154c | 284 | |
| wolfSSL | 0:d92f9d21154c | 285 | return 0; |
| wolfSSL | 0:d92f9d21154c | 286 | } |
| wolfSSL | 0:d92f9d21154c | 287 | |
| wolfSSL | 0:d92f9d21154c | 288 | |
| wolfSSL | 0:d92f9d21154c | 289 | /* Key setup */ |
| wolfSSL | 0:d92f9d21154c | 290 | int wc_Hc128_SetKey(HC128* ctx, const byte* key, const byte* iv) |
| wolfSSL | 0:d92f9d21154c | 291 | { |
| wolfSSL | 0:d92f9d21154c | 292 | #ifdef XSTREAM_ALIGN |
| wolfSSL | 0:d92f9d21154c | 293 | if ((wolfssl_word)key % 4) { |
| wolfSSL | 0:d92f9d21154c | 294 | int alignKey[4]; |
| wolfSSL | 0:d92f9d21154c | 295 | |
| wolfSSL | 0:d92f9d21154c | 296 | /* iv gets aligned in SetIV */ |
| wolfSSL | 0:d92f9d21154c | 297 | WOLFSSL_MSG("Hc128SetKey unaligned key"); |
| wolfSSL | 0:d92f9d21154c | 298 | |
| wolfSSL | 0:d92f9d21154c | 299 | XMEMCPY(alignKey, key, sizeof(alignKey)); |
| wolfSSL | 0:d92f9d21154c | 300 | |
| wolfSSL | 0:d92f9d21154c | 301 | return DoKey(ctx, (const byte*)alignKey, iv); |
| wolfSSL | 0:d92f9d21154c | 302 | } |
| wolfSSL | 0:d92f9d21154c | 303 | #endif /* XSTREAM_ALIGN */ |
| wolfSSL | 0:d92f9d21154c | 304 | |
| wolfSSL | 0:d92f9d21154c | 305 | return DoKey(ctx, key, iv); |
| wolfSSL | 0:d92f9d21154c | 306 | } |
| wolfSSL | 0:d92f9d21154c | 307 | |
| wolfSSL | 0:d92f9d21154c | 308 | |
| wolfSSL | 0:d92f9d21154c | 309 | |
| wolfSSL | 0:d92f9d21154c | 310 | /* The following defines the encryption of data stream */ |
| wolfSSL | 0:d92f9d21154c | 311 | static INLINE int DoProcess(HC128* ctx, byte* output, const byte* input, |
| wolfSSL | 0:d92f9d21154c | 312 | word32 msglen) |
| wolfSSL | 0:d92f9d21154c | 313 | { |
| wolfSSL | 0:d92f9d21154c | 314 | word32 i, keystream[16]; |
| wolfSSL | 0:d92f9d21154c | 315 | |
| wolfSSL | 0:d92f9d21154c | 316 | for ( ; msglen >= 64; msglen -= 64, input += 64, output += 64) |
| wolfSSL | 0:d92f9d21154c | 317 | { |
| wolfSSL | 0:d92f9d21154c | 318 | generate_keystream(ctx, keystream); |
| wolfSSL | 0:d92f9d21154c | 319 | |
| wolfSSL | 0:d92f9d21154c | 320 | /* unroll loop */ |
| wolfSSL | 0:d92f9d21154c | 321 | ((word32*)output)[0] = ((word32*)input)[0] ^ LITTLE32(keystream[0]); |
| wolfSSL | 0:d92f9d21154c | 322 | ((word32*)output)[1] = ((word32*)input)[1] ^ LITTLE32(keystream[1]); |
| wolfSSL | 0:d92f9d21154c | 323 | ((word32*)output)[2] = ((word32*)input)[2] ^ LITTLE32(keystream[2]); |
| wolfSSL | 0:d92f9d21154c | 324 | ((word32*)output)[3] = ((word32*)input)[3] ^ LITTLE32(keystream[3]); |
| wolfSSL | 0:d92f9d21154c | 325 | ((word32*)output)[4] = ((word32*)input)[4] ^ LITTLE32(keystream[4]); |
| wolfSSL | 0:d92f9d21154c | 326 | ((word32*)output)[5] = ((word32*)input)[5] ^ LITTLE32(keystream[5]); |
| wolfSSL | 0:d92f9d21154c | 327 | ((word32*)output)[6] = ((word32*)input)[6] ^ LITTLE32(keystream[6]); |
| wolfSSL | 0:d92f9d21154c | 328 | ((word32*)output)[7] = ((word32*)input)[7] ^ LITTLE32(keystream[7]); |
| wolfSSL | 0:d92f9d21154c | 329 | ((word32*)output)[8] = ((word32*)input)[8] ^ LITTLE32(keystream[8]); |
| wolfSSL | 0:d92f9d21154c | 330 | ((word32*)output)[9] = ((word32*)input)[9] ^ LITTLE32(keystream[9]); |
| wolfSSL | 0:d92f9d21154c | 331 | ((word32*)output)[10] = ((word32*)input)[10] ^ LITTLE32(keystream[10]); |
| wolfSSL | 0:d92f9d21154c | 332 | ((word32*)output)[11] = ((word32*)input)[11] ^ LITTLE32(keystream[11]); |
| wolfSSL | 0:d92f9d21154c | 333 | ((word32*)output)[12] = ((word32*)input)[12] ^ LITTLE32(keystream[12]); |
| wolfSSL | 0:d92f9d21154c | 334 | ((word32*)output)[13] = ((word32*)input)[13] ^ LITTLE32(keystream[13]); |
| wolfSSL | 0:d92f9d21154c | 335 | ((word32*)output)[14] = ((word32*)input)[14] ^ LITTLE32(keystream[14]); |
| wolfSSL | 0:d92f9d21154c | 336 | ((word32*)output)[15] = ((word32*)input)[15] ^ LITTLE32(keystream[15]); |
| wolfSSL | 0:d92f9d21154c | 337 | } |
| wolfSSL | 0:d92f9d21154c | 338 | |
| wolfSSL | 0:d92f9d21154c | 339 | if (msglen > 0) |
| wolfSSL | 0:d92f9d21154c | 340 | { |
| wolfSSL | 0:d92f9d21154c | 341 | XMEMSET(keystream, 0, sizeof(keystream)); /* hush the static analysis */ |
| wolfSSL | 0:d92f9d21154c | 342 | generate_keystream(ctx, keystream); |
| wolfSSL | 0:d92f9d21154c | 343 | |
| wolfSSL | 0:d92f9d21154c | 344 | #ifdef BIG_ENDIAN_ORDER |
| wolfSSL | 0:d92f9d21154c | 345 | { |
| wolfSSL | 0:d92f9d21154c | 346 | word32 wordsLeft = msglen / sizeof(word32); |
| wolfSSL | 0:d92f9d21154c | 347 | if (msglen % sizeof(word32)) wordsLeft++; |
| wolfSSL | 0:d92f9d21154c | 348 | |
| wolfSSL | 0:d92f9d21154c | 349 | ByteReverseWords(keystream, keystream, wordsLeft * sizeof(word32)); |
| wolfSSL | 0:d92f9d21154c | 350 | } |
| wolfSSL | 0:d92f9d21154c | 351 | #endif |
| wolfSSL | 0:d92f9d21154c | 352 | |
| wolfSSL | 0:d92f9d21154c | 353 | for (i = 0; i < msglen; i++) |
| wolfSSL | 0:d92f9d21154c | 354 | output[i] = input[i] ^ ((byte*)keystream)[i]; |
| wolfSSL | 0:d92f9d21154c | 355 | } |
| wolfSSL | 0:d92f9d21154c | 356 | |
| wolfSSL | 0:d92f9d21154c | 357 | return 0; |
| wolfSSL | 0:d92f9d21154c | 358 | } |
| wolfSSL | 0:d92f9d21154c | 359 | |
| wolfSSL | 0:d92f9d21154c | 360 | |
| wolfSSL | 0:d92f9d21154c | 361 | /* Encrypt/decrypt a message of any size */ |
| wolfSSL | 0:d92f9d21154c | 362 | int wc_Hc128_Process(HC128* ctx, byte* output, const byte* input, word32 msglen) |
| wolfSSL | 0:d92f9d21154c | 363 | { |
| wolfSSL | 0:d92f9d21154c | 364 | #ifdef XSTREAM_ALIGN |
| wolfSSL | 0:d92f9d21154c | 365 | if ((wolfssl_word)input % 4 || (wolfssl_word)output % 4) { |
| wolfSSL | 0:d92f9d21154c | 366 | #ifndef NO_WOLFSSL_ALLOC_ALIGN |
| wolfSSL | 0:d92f9d21154c | 367 | byte* tmp; |
| wolfSSL | 0:d92f9d21154c | 368 | WOLFSSL_MSG("Hc128Process unaligned"); |
| wolfSSL | 0:d92f9d21154c | 369 | |
| wolfSSL | 0:d92f9d21154c | 370 | tmp = (byte*)XMALLOC(msglen, NULL, DYNAMIC_TYPE_TMP_BUFFER); |
| wolfSSL | 0:d92f9d21154c | 371 | if (tmp == NULL) return MEMORY_E; |
| wolfSSL | 0:d92f9d21154c | 372 | |
| wolfSSL | 0:d92f9d21154c | 373 | XMEMCPY(tmp, input, msglen); |
| wolfSSL | 0:d92f9d21154c | 374 | DoProcess(ctx, tmp, tmp, msglen); |
| wolfSSL | 0:d92f9d21154c | 375 | XMEMCPY(output, tmp, msglen); |
| wolfSSL | 0:d92f9d21154c | 376 | |
| wolfSSL | 0:d92f9d21154c | 377 | XFREE(tmp, NULL, DYNAMIC_TYPE_TMP_BUFFER); |
| wolfSSL | 0:d92f9d21154c | 378 | |
| wolfSSL | 0:d92f9d21154c | 379 | return 0; |
| wolfSSL | 0:d92f9d21154c | 380 | #else |
| wolfSSL | 0:d92f9d21154c | 381 | return BAD_ALIGN_E; |
| wolfSSL | 0:d92f9d21154c | 382 | #endif |
| wolfSSL | 0:d92f9d21154c | 383 | } |
| wolfSSL | 0:d92f9d21154c | 384 | #endif /* XSTREAM_ALIGN */ |
| wolfSSL | 0:d92f9d21154c | 385 | |
| wolfSSL | 0:d92f9d21154c | 386 | return DoProcess(ctx, output, input, msglen); |
| wolfSSL | 0:d92f9d21154c | 387 | } |
| wolfSSL | 0:d92f9d21154c | 388 | |
| wolfSSL | 0:d92f9d21154c | 389 | |
| wolfSSL | 0:d92f9d21154c | 390 | #else /* HAVE_HC128 */ |
| wolfSSL | 0:d92f9d21154c | 391 | |
| wolfSSL | 0:d92f9d21154c | 392 | |
| wolfSSL | 0:d92f9d21154c | 393 | #ifdef _MSC_VER |
| wolfSSL | 0:d92f9d21154c | 394 | /* 4206 warning for blank file */ |
| wolfSSL | 0:d92f9d21154c | 395 | #pragma warning(disable: 4206) |
| wolfSSL | 0:d92f9d21154c | 396 | #endif |
| wolfSSL | 0:d92f9d21154c | 397 | |
| wolfSSL | 0:d92f9d21154c | 398 | |
| wolfSSL | 0:d92f9d21154c | 399 | #endif /* HAVE_HC128 */ |
| wolfSSL | 0:d92f9d21154c | 400 |