SSL/TLS Library
CyaSSL is SSL/TLS library for embedded systems.
ctaocrypt/src/rabbit.c@0:9d17e4342598, 2014-04-20 (annotated)
- Committer:
- wolfSSL
- Date:
- Sun Apr 20 12:40:57 2014 +0000
- Revision:
- 0:9d17e4342598
CyaSSL SSL/TLS Library 2.9.4;
Who changed what in which revision?
User | Revision | Line number | New contents of line |
---|---|---|---|
wolfSSL | 0:9d17e4342598 | 1 | /* rabbit.c |
wolfSSL | 0:9d17e4342598 | 2 | * |
wolfSSL | 0:9d17e4342598 | 3 | * Copyright (C) 2006-2013 wolfSSL Inc. |
wolfSSL | 0:9d17e4342598 | 4 | * |
wolfSSL | 0:9d17e4342598 | 5 | * This file is part of CyaSSL. |
wolfSSL | 0:9d17e4342598 | 6 | * |
wolfSSL | 0:9d17e4342598 | 7 | * CyaSSL is free software; you can redistribute it and/or modify |
wolfSSL | 0:9d17e4342598 | 8 | * it under the terms of the GNU General Public License as published by |
wolfSSL | 0:9d17e4342598 | 9 | * the Free Software Foundation; either version 2 of the License, or |
wolfSSL | 0:9d17e4342598 | 10 | * (at your option) any later version. |
wolfSSL | 0:9d17e4342598 | 11 | * |
wolfSSL | 0:9d17e4342598 | 12 | * CyaSSL is distributed in the hope that it will be useful, |
wolfSSL | 0:9d17e4342598 | 13 | * but WITHOUT ANY WARRANTY; without even the implied warranty of |
wolfSSL | 0:9d17e4342598 | 14 | * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the |
wolfSSL | 0:9d17e4342598 | 15 | * GNU General Public License for more details. |
wolfSSL | 0:9d17e4342598 | 16 | * |
wolfSSL | 0:9d17e4342598 | 17 | * You should have received a copy of the GNU General Public License |
wolfSSL | 0:9d17e4342598 | 18 | * along with this program; if not, write to the Free Software |
wolfSSL | 0:9d17e4342598 | 19 | * Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA |
wolfSSL | 0:9d17e4342598 | 20 | */ |
wolfSSL | 0:9d17e4342598 | 21 | |
wolfSSL | 0:9d17e4342598 | 22 | #ifdef HAVE_CONFIG_H |
wolfSSL | 0:9d17e4342598 | 23 | #include <config.h> |
wolfSSL | 0:9d17e4342598 | 24 | #endif |
wolfSSL | 0:9d17e4342598 | 25 | |
wolfSSL | 0:9d17e4342598 | 26 | #include <cyassl/ctaocrypt/settings.h> |
wolfSSL | 0:9d17e4342598 | 27 | |
wolfSSL | 0:9d17e4342598 | 28 | #ifndef NO_RABBIT |
wolfSSL | 0:9d17e4342598 | 29 | |
wolfSSL | 0:9d17e4342598 | 30 | #include <cyassl/ctaocrypt/rabbit.h> |
wolfSSL | 0:9d17e4342598 | 31 | #include <cyassl/ctaocrypt/error-crypt.h> |
wolfSSL | 0:9d17e4342598 | 32 | #include <cyassl/ctaocrypt/logging.h> |
wolfSSL | 0:9d17e4342598 | 33 | #ifdef NO_INLINE |
wolfSSL | 0:9d17e4342598 | 34 | #include <cyassl/ctaocrypt/misc.h> |
wolfSSL | 0:9d17e4342598 | 35 | #else |
wolfSSL | 0:9d17e4342598 | 36 | #include <ctaocrypt/src/misc.c> |
wolfSSL | 0:9d17e4342598 | 37 | #endif |
wolfSSL | 0:9d17e4342598 | 38 | |
wolfSSL | 0:9d17e4342598 | 39 | |
wolfSSL | 0:9d17e4342598 | 40 | #ifdef BIG_ENDIAN_ORDER |
wolfSSL | 0:9d17e4342598 | 41 | #define LITTLE32(x) ByteReverseWord32(x) |
wolfSSL | 0:9d17e4342598 | 42 | #else |
wolfSSL | 0:9d17e4342598 | 43 | #define LITTLE32(x) (x) |
wolfSSL | 0:9d17e4342598 | 44 | #endif |
wolfSSL | 0:9d17e4342598 | 45 | |
wolfSSL | 0:9d17e4342598 | 46 | #define U32V(x) ((word32)(x) & 0xFFFFFFFFU) |
wolfSSL | 0:9d17e4342598 | 47 | |
wolfSSL | 0:9d17e4342598 | 48 | |
wolfSSL | 0:9d17e4342598 | 49 | /* Square a 32-bit unsigned integer to obtain the 64-bit result and return */ |
wolfSSL | 0:9d17e4342598 | 50 | /* the upper 32 bits XOR the lower 32 bits */ |
wolfSSL | 0:9d17e4342598 | 51 | static word32 RABBIT_g_func(word32 x) |
wolfSSL | 0:9d17e4342598 | 52 | { |
wolfSSL | 0:9d17e4342598 | 53 | /* Temporary variables */ |
wolfSSL | 0:9d17e4342598 | 54 | word32 a, b, h, l; |
wolfSSL | 0:9d17e4342598 | 55 | |
wolfSSL | 0:9d17e4342598 | 56 | /* Construct high and low argument for squaring */ |
wolfSSL | 0:9d17e4342598 | 57 | a = x&0xFFFF; |
wolfSSL | 0:9d17e4342598 | 58 | b = x>>16; |
wolfSSL | 0:9d17e4342598 | 59 | |
wolfSSL | 0:9d17e4342598 | 60 | /* Calculate high and low result of squaring */ |
wolfSSL | 0:9d17e4342598 | 61 | h = (((U32V(a*a)>>17) + U32V(a*b))>>15) + b*b; |
wolfSSL | 0:9d17e4342598 | 62 | l = x*x; |
wolfSSL | 0:9d17e4342598 | 63 | |
wolfSSL | 0:9d17e4342598 | 64 | /* Return high XOR low */ |
wolfSSL | 0:9d17e4342598 | 65 | return U32V(h^l); |
wolfSSL | 0:9d17e4342598 | 66 | } |
wolfSSL | 0:9d17e4342598 | 67 | |
wolfSSL | 0:9d17e4342598 | 68 | |
wolfSSL | 0:9d17e4342598 | 69 | /* Calculate the next internal state */ |
wolfSSL | 0:9d17e4342598 | 70 | static void RABBIT_next_state(RabbitCtx* ctx) |
wolfSSL | 0:9d17e4342598 | 71 | { |
wolfSSL | 0:9d17e4342598 | 72 | /* Temporary variables */ |
wolfSSL | 0:9d17e4342598 | 73 | word32 g[8], c_old[8], i; |
wolfSSL | 0:9d17e4342598 | 74 | |
wolfSSL | 0:9d17e4342598 | 75 | /* Save old counter values */ |
wolfSSL | 0:9d17e4342598 | 76 | for (i=0; i<8; i++) |
wolfSSL | 0:9d17e4342598 | 77 | c_old[i] = ctx->c[i]; |
wolfSSL | 0:9d17e4342598 | 78 | |
wolfSSL | 0:9d17e4342598 | 79 | /* Calculate new counter values */ |
wolfSSL | 0:9d17e4342598 | 80 | ctx->c[0] = U32V(ctx->c[0] + 0x4D34D34D + ctx->carry); |
wolfSSL | 0:9d17e4342598 | 81 | ctx->c[1] = U32V(ctx->c[1] + 0xD34D34D3 + (ctx->c[0] < c_old[0])); |
wolfSSL | 0:9d17e4342598 | 82 | ctx->c[2] = U32V(ctx->c[2] + 0x34D34D34 + (ctx->c[1] < c_old[1])); |
wolfSSL | 0:9d17e4342598 | 83 | ctx->c[3] = U32V(ctx->c[3] + 0x4D34D34D + (ctx->c[2] < c_old[2])); |
wolfSSL | 0:9d17e4342598 | 84 | ctx->c[4] = U32V(ctx->c[4] + 0xD34D34D3 + (ctx->c[3] < c_old[3])); |
wolfSSL | 0:9d17e4342598 | 85 | ctx->c[5] = U32V(ctx->c[5] + 0x34D34D34 + (ctx->c[4] < c_old[4])); |
wolfSSL | 0:9d17e4342598 | 86 | ctx->c[6] = U32V(ctx->c[6] + 0x4D34D34D + (ctx->c[5] < c_old[5])); |
wolfSSL | 0:9d17e4342598 | 87 | ctx->c[7] = U32V(ctx->c[7] + 0xD34D34D3 + (ctx->c[6] < c_old[6])); |
wolfSSL | 0:9d17e4342598 | 88 | ctx->carry = (ctx->c[7] < c_old[7]); |
wolfSSL | 0:9d17e4342598 | 89 | |
wolfSSL | 0:9d17e4342598 | 90 | /* Calculate the g-values */ |
wolfSSL | 0:9d17e4342598 | 91 | for (i=0;i<8;i++) |
wolfSSL | 0:9d17e4342598 | 92 | g[i] = RABBIT_g_func(U32V(ctx->x[i] + ctx->c[i])); |
wolfSSL | 0:9d17e4342598 | 93 | |
wolfSSL | 0:9d17e4342598 | 94 | /* Calculate new state values */ |
wolfSSL | 0:9d17e4342598 | 95 | ctx->x[0] = U32V(g[0] + rotlFixed(g[7],16) + rotlFixed(g[6], 16)); |
wolfSSL | 0:9d17e4342598 | 96 | ctx->x[1] = U32V(g[1] + rotlFixed(g[0], 8) + g[7]); |
wolfSSL | 0:9d17e4342598 | 97 | ctx->x[2] = U32V(g[2] + rotlFixed(g[1],16) + rotlFixed(g[0], 16)); |
wolfSSL | 0:9d17e4342598 | 98 | ctx->x[3] = U32V(g[3] + rotlFixed(g[2], 8) + g[1]); |
wolfSSL | 0:9d17e4342598 | 99 | ctx->x[4] = U32V(g[4] + rotlFixed(g[3],16) + rotlFixed(g[2], 16)); |
wolfSSL | 0:9d17e4342598 | 100 | ctx->x[5] = U32V(g[5] + rotlFixed(g[4], 8) + g[3]); |
wolfSSL | 0:9d17e4342598 | 101 | ctx->x[6] = U32V(g[6] + rotlFixed(g[5],16) + rotlFixed(g[4], 16)); |
wolfSSL | 0:9d17e4342598 | 102 | ctx->x[7] = U32V(g[7] + rotlFixed(g[6], 8) + g[5]); |
wolfSSL | 0:9d17e4342598 | 103 | } |
wolfSSL | 0:9d17e4342598 | 104 | |
wolfSSL | 0:9d17e4342598 | 105 | |
wolfSSL | 0:9d17e4342598 | 106 | /* IV setup */ |
wolfSSL | 0:9d17e4342598 | 107 | static void RabbitSetIV(Rabbit* ctx, const byte* inIv) |
wolfSSL | 0:9d17e4342598 | 108 | { |
wolfSSL | 0:9d17e4342598 | 109 | /* Temporary variables */ |
wolfSSL | 0:9d17e4342598 | 110 | word32 i0, i1, i2, i3, i; |
wolfSSL | 0:9d17e4342598 | 111 | word32 iv[2]; |
wolfSSL | 0:9d17e4342598 | 112 | |
wolfSSL | 0:9d17e4342598 | 113 | if (inIv) |
wolfSSL | 0:9d17e4342598 | 114 | XMEMCPY(iv, inIv, sizeof(iv)); |
wolfSSL | 0:9d17e4342598 | 115 | else |
wolfSSL | 0:9d17e4342598 | 116 | XMEMSET(iv, 0, sizeof(iv)); |
wolfSSL | 0:9d17e4342598 | 117 | |
wolfSSL | 0:9d17e4342598 | 118 | /* Generate four subvectors */ |
wolfSSL | 0:9d17e4342598 | 119 | i0 = LITTLE32(iv[0]); |
wolfSSL | 0:9d17e4342598 | 120 | i2 = LITTLE32(iv[1]); |
wolfSSL | 0:9d17e4342598 | 121 | i1 = (i0>>16) | (i2&0xFFFF0000); |
wolfSSL | 0:9d17e4342598 | 122 | i3 = (i2<<16) | (i0&0x0000FFFF); |
wolfSSL | 0:9d17e4342598 | 123 | |
wolfSSL | 0:9d17e4342598 | 124 | /* Modify counter values */ |
wolfSSL | 0:9d17e4342598 | 125 | ctx->workCtx.c[0] = ctx->masterCtx.c[0] ^ i0; |
wolfSSL | 0:9d17e4342598 | 126 | ctx->workCtx.c[1] = ctx->masterCtx.c[1] ^ i1; |
wolfSSL | 0:9d17e4342598 | 127 | ctx->workCtx.c[2] = ctx->masterCtx.c[2] ^ i2; |
wolfSSL | 0:9d17e4342598 | 128 | ctx->workCtx.c[3] = ctx->masterCtx.c[3] ^ i3; |
wolfSSL | 0:9d17e4342598 | 129 | ctx->workCtx.c[4] = ctx->masterCtx.c[4] ^ i0; |
wolfSSL | 0:9d17e4342598 | 130 | ctx->workCtx.c[5] = ctx->masterCtx.c[5] ^ i1; |
wolfSSL | 0:9d17e4342598 | 131 | ctx->workCtx.c[6] = ctx->masterCtx.c[6] ^ i2; |
wolfSSL | 0:9d17e4342598 | 132 | ctx->workCtx.c[7] = ctx->masterCtx.c[7] ^ i3; |
wolfSSL | 0:9d17e4342598 | 133 | |
wolfSSL | 0:9d17e4342598 | 134 | /* Copy state variables */ |
wolfSSL | 0:9d17e4342598 | 135 | for (i=0; i<8; i++) |
wolfSSL | 0:9d17e4342598 | 136 | ctx->workCtx.x[i] = ctx->masterCtx.x[i]; |
wolfSSL | 0:9d17e4342598 | 137 | ctx->workCtx.carry = ctx->masterCtx.carry; |
wolfSSL | 0:9d17e4342598 | 138 | |
wolfSSL | 0:9d17e4342598 | 139 | /* Iterate the system four times */ |
wolfSSL | 0:9d17e4342598 | 140 | for (i=0; i<4; i++) |
wolfSSL | 0:9d17e4342598 | 141 | RABBIT_next_state(&(ctx->workCtx)); |
wolfSSL | 0:9d17e4342598 | 142 | } |
wolfSSL | 0:9d17e4342598 | 143 | |
wolfSSL | 0:9d17e4342598 | 144 | |
wolfSSL | 0:9d17e4342598 | 145 | /* Key setup */ |
wolfSSL | 0:9d17e4342598 | 146 | static INLINE int DoKey(Rabbit* ctx, const byte* key, const byte* iv) |
wolfSSL | 0:9d17e4342598 | 147 | { |
wolfSSL | 0:9d17e4342598 | 148 | /* Temporary variables */ |
wolfSSL | 0:9d17e4342598 | 149 | word32 k0, k1, k2, k3, i; |
wolfSSL | 0:9d17e4342598 | 150 | |
wolfSSL | 0:9d17e4342598 | 151 | /* Generate four subkeys */ |
wolfSSL | 0:9d17e4342598 | 152 | k0 = LITTLE32(*(word32*)(key+ 0)); |
wolfSSL | 0:9d17e4342598 | 153 | k1 = LITTLE32(*(word32*)(key+ 4)); |
wolfSSL | 0:9d17e4342598 | 154 | k2 = LITTLE32(*(word32*)(key+ 8)); |
wolfSSL | 0:9d17e4342598 | 155 | k3 = LITTLE32(*(word32*)(key+12)); |
wolfSSL | 0:9d17e4342598 | 156 | |
wolfSSL | 0:9d17e4342598 | 157 | /* Generate initial state variables */ |
wolfSSL | 0:9d17e4342598 | 158 | ctx->masterCtx.x[0] = k0; |
wolfSSL | 0:9d17e4342598 | 159 | ctx->masterCtx.x[2] = k1; |
wolfSSL | 0:9d17e4342598 | 160 | ctx->masterCtx.x[4] = k2; |
wolfSSL | 0:9d17e4342598 | 161 | ctx->masterCtx.x[6] = k3; |
wolfSSL | 0:9d17e4342598 | 162 | ctx->masterCtx.x[1] = U32V(k3<<16) | (k2>>16); |
wolfSSL | 0:9d17e4342598 | 163 | ctx->masterCtx.x[3] = U32V(k0<<16) | (k3>>16); |
wolfSSL | 0:9d17e4342598 | 164 | ctx->masterCtx.x[5] = U32V(k1<<16) | (k0>>16); |
wolfSSL | 0:9d17e4342598 | 165 | ctx->masterCtx.x[7] = U32V(k2<<16) | (k1>>16); |
wolfSSL | 0:9d17e4342598 | 166 | |
wolfSSL | 0:9d17e4342598 | 167 | /* Generate initial counter values */ |
wolfSSL | 0:9d17e4342598 | 168 | ctx->masterCtx.c[0] = rotlFixed(k2, 16); |
wolfSSL | 0:9d17e4342598 | 169 | ctx->masterCtx.c[2] = rotlFixed(k3, 16); |
wolfSSL | 0:9d17e4342598 | 170 | ctx->masterCtx.c[4] = rotlFixed(k0, 16); |
wolfSSL | 0:9d17e4342598 | 171 | ctx->masterCtx.c[6] = rotlFixed(k1, 16); |
wolfSSL | 0:9d17e4342598 | 172 | ctx->masterCtx.c[1] = (k0&0xFFFF0000) | (k1&0xFFFF); |
wolfSSL | 0:9d17e4342598 | 173 | ctx->masterCtx.c[3] = (k1&0xFFFF0000) | (k2&0xFFFF); |
wolfSSL | 0:9d17e4342598 | 174 | ctx->masterCtx.c[5] = (k2&0xFFFF0000) | (k3&0xFFFF); |
wolfSSL | 0:9d17e4342598 | 175 | ctx->masterCtx.c[7] = (k3&0xFFFF0000) | (k0&0xFFFF); |
wolfSSL | 0:9d17e4342598 | 176 | |
wolfSSL | 0:9d17e4342598 | 177 | /* Clear carry bit */ |
wolfSSL | 0:9d17e4342598 | 178 | ctx->masterCtx.carry = 0; |
wolfSSL | 0:9d17e4342598 | 179 | |
wolfSSL | 0:9d17e4342598 | 180 | /* Iterate the system four times */ |
wolfSSL | 0:9d17e4342598 | 181 | for (i=0; i<4; i++) |
wolfSSL | 0:9d17e4342598 | 182 | RABBIT_next_state(&(ctx->masterCtx)); |
wolfSSL | 0:9d17e4342598 | 183 | |
wolfSSL | 0:9d17e4342598 | 184 | /* Modify the counters */ |
wolfSSL | 0:9d17e4342598 | 185 | for (i=0; i<8; i++) |
wolfSSL | 0:9d17e4342598 | 186 | ctx->masterCtx.c[i] ^= ctx->masterCtx.x[(i+4)&0x7]; |
wolfSSL | 0:9d17e4342598 | 187 | |
wolfSSL | 0:9d17e4342598 | 188 | /* Copy master instance to work instance */ |
wolfSSL | 0:9d17e4342598 | 189 | for (i=0; i<8; i++) { |
wolfSSL | 0:9d17e4342598 | 190 | ctx->workCtx.x[i] = ctx->masterCtx.x[i]; |
wolfSSL | 0:9d17e4342598 | 191 | ctx->workCtx.c[i] = ctx->masterCtx.c[i]; |
wolfSSL | 0:9d17e4342598 | 192 | } |
wolfSSL | 0:9d17e4342598 | 193 | ctx->workCtx.carry = ctx->masterCtx.carry; |
wolfSSL | 0:9d17e4342598 | 194 | |
wolfSSL | 0:9d17e4342598 | 195 | RabbitSetIV(ctx, iv); |
wolfSSL | 0:9d17e4342598 | 196 | |
wolfSSL | 0:9d17e4342598 | 197 | return 0; |
wolfSSL | 0:9d17e4342598 | 198 | } |
wolfSSL | 0:9d17e4342598 | 199 | |
wolfSSL | 0:9d17e4342598 | 200 | |
wolfSSL | 0:9d17e4342598 | 201 | /* Key setup */ |
wolfSSL | 0:9d17e4342598 | 202 | int RabbitSetKey(Rabbit* ctx, const byte* key, const byte* iv) |
wolfSSL | 0:9d17e4342598 | 203 | { |
wolfSSL | 0:9d17e4342598 | 204 | #ifdef XSTREAM_ALIGN |
wolfSSL | 0:9d17e4342598 | 205 | if ((word)key % 4) { |
wolfSSL | 0:9d17e4342598 | 206 | int alignKey[4]; |
wolfSSL | 0:9d17e4342598 | 207 | |
wolfSSL | 0:9d17e4342598 | 208 | /* iv aligned in SetIV */ |
wolfSSL | 0:9d17e4342598 | 209 | CYASSL_MSG("RabbitSetKey unaligned key"); |
wolfSSL | 0:9d17e4342598 | 210 | |
wolfSSL | 0:9d17e4342598 | 211 | XMEMCPY(alignKey, key, sizeof(alignKey)); |
wolfSSL | 0:9d17e4342598 | 212 | |
wolfSSL | 0:9d17e4342598 | 213 | return DoKey(ctx, (const byte*)alignKey, iv); |
wolfSSL | 0:9d17e4342598 | 214 | } |
wolfSSL | 0:9d17e4342598 | 215 | #endif /* XSTREAM_ALIGN */ |
wolfSSL | 0:9d17e4342598 | 216 | |
wolfSSL | 0:9d17e4342598 | 217 | return DoKey(ctx, key, iv); |
wolfSSL | 0:9d17e4342598 | 218 | } |
wolfSSL | 0:9d17e4342598 | 219 | |
wolfSSL | 0:9d17e4342598 | 220 | |
wolfSSL | 0:9d17e4342598 | 221 | /* Encrypt/decrypt a message of any size */ |
wolfSSL | 0:9d17e4342598 | 222 | static INLINE int DoProcess(Rabbit* ctx, byte* output, const byte* input, |
wolfSSL | 0:9d17e4342598 | 223 | word32 msglen) |
wolfSSL | 0:9d17e4342598 | 224 | { |
wolfSSL | 0:9d17e4342598 | 225 | /* Encrypt/decrypt all full blocks */ |
wolfSSL | 0:9d17e4342598 | 226 | while (msglen >= 16) { |
wolfSSL | 0:9d17e4342598 | 227 | /* Iterate the system */ |
wolfSSL | 0:9d17e4342598 | 228 | RABBIT_next_state(&(ctx->workCtx)); |
wolfSSL | 0:9d17e4342598 | 229 | |
wolfSSL | 0:9d17e4342598 | 230 | /* Encrypt/decrypt 16 bytes of data */ |
wolfSSL | 0:9d17e4342598 | 231 | *(word32*)(output+ 0) = *(word32*)(input+ 0) ^ |
wolfSSL | 0:9d17e4342598 | 232 | LITTLE32(ctx->workCtx.x[0] ^ (ctx->workCtx.x[5]>>16) ^ |
wolfSSL | 0:9d17e4342598 | 233 | U32V(ctx->workCtx.x[3]<<16)); |
wolfSSL | 0:9d17e4342598 | 234 | *(word32*)(output+ 4) = *(word32*)(input+ 4) ^ |
wolfSSL | 0:9d17e4342598 | 235 | LITTLE32(ctx->workCtx.x[2] ^ (ctx->workCtx.x[7]>>16) ^ |
wolfSSL | 0:9d17e4342598 | 236 | U32V(ctx->workCtx.x[5]<<16)); |
wolfSSL | 0:9d17e4342598 | 237 | *(word32*)(output+ 8) = *(word32*)(input+ 8) ^ |
wolfSSL | 0:9d17e4342598 | 238 | LITTLE32(ctx->workCtx.x[4] ^ (ctx->workCtx.x[1]>>16) ^ |
wolfSSL | 0:9d17e4342598 | 239 | U32V(ctx->workCtx.x[7]<<16)); |
wolfSSL | 0:9d17e4342598 | 240 | *(word32*)(output+12) = *(word32*)(input+12) ^ |
wolfSSL | 0:9d17e4342598 | 241 | LITTLE32(ctx->workCtx.x[6] ^ (ctx->workCtx.x[3]>>16) ^ |
wolfSSL | 0:9d17e4342598 | 242 | U32V(ctx->workCtx.x[1]<<16)); |
wolfSSL | 0:9d17e4342598 | 243 | |
wolfSSL | 0:9d17e4342598 | 244 | /* Increment pointers and decrement length */ |
wolfSSL | 0:9d17e4342598 | 245 | input += 16; |
wolfSSL | 0:9d17e4342598 | 246 | output += 16; |
wolfSSL | 0:9d17e4342598 | 247 | msglen -= 16; |
wolfSSL | 0:9d17e4342598 | 248 | } |
wolfSSL | 0:9d17e4342598 | 249 | |
wolfSSL | 0:9d17e4342598 | 250 | /* Encrypt/decrypt remaining data */ |
wolfSSL | 0:9d17e4342598 | 251 | if (msglen) { |
wolfSSL | 0:9d17e4342598 | 252 | |
wolfSSL | 0:9d17e4342598 | 253 | word32 i; |
wolfSSL | 0:9d17e4342598 | 254 | word32 tmp[4]; |
wolfSSL | 0:9d17e4342598 | 255 | byte* buffer = (byte*)tmp; |
wolfSSL | 0:9d17e4342598 | 256 | |
wolfSSL | 0:9d17e4342598 | 257 | XMEMSET(tmp, 0, sizeof(tmp)); /* help static analysis */ |
wolfSSL | 0:9d17e4342598 | 258 | |
wolfSSL | 0:9d17e4342598 | 259 | /* Iterate the system */ |
wolfSSL | 0:9d17e4342598 | 260 | RABBIT_next_state(&(ctx->workCtx)); |
wolfSSL | 0:9d17e4342598 | 261 | |
wolfSSL | 0:9d17e4342598 | 262 | /* Generate 16 bytes of pseudo-random data */ |
wolfSSL | 0:9d17e4342598 | 263 | tmp[0] = LITTLE32(ctx->workCtx.x[0] ^ |
wolfSSL | 0:9d17e4342598 | 264 | (ctx->workCtx.x[5]>>16) ^ U32V(ctx->workCtx.x[3]<<16)); |
wolfSSL | 0:9d17e4342598 | 265 | tmp[1] = LITTLE32(ctx->workCtx.x[2] ^ |
wolfSSL | 0:9d17e4342598 | 266 | (ctx->workCtx.x[7]>>16) ^ U32V(ctx->workCtx.x[5]<<16)); |
wolfSSL | 0:9d17e4342598 | 267 | tmp[2] = LITTLE32(ctx->workCtx.x[4] ^ |
wolfSSL | 0:9d17e4342598 | 268 | (ctx->workCtx.x[1]>>16) ^ U32V(ctx->workCtx.x[7]<<16)); |
wolfSSL | 0:9d17e4342598 | 269 | tmp[3] = LITTLE32(ctx->workCtx.x[6] ^ |
wolfSSL | 0:9d17e4342598 | 270 | (ctx->workCtx.x[3]>>16) ^ U32V(ctx->workCtx.x[1]<<16)); |
wolfSSL | 0:9d17e4342598 | 271 | |
wolfSSL | 0:9d17e4342598 | 272 | /* Encrypt/decrypt the data */ |
wolfSSL | 0:9d17e4342598 | 273 | for (i=0; i<msglen; i++) |
wolfSSL | 0:9d17e4342598 | 274 | output[i] = input[i] ^ buffer[i]; |
wolfSSL | 0:9d17e4342598 | 275 | } |
wolfSSL | 0:9d17e4342598 | 276 | |
wolfSSL | 0:9d17e4342598 | 277 | return 0; |
wolfSSL | 0:9d17e4342598 | 278 | } |
wolfSSL | 0:9d17e4342598 | 279 | |
wolfSSL | 0:9d17e4342598 | 280 | |
wolfSSL | 0:9d17e4342598 | 281 | /* Encrypt/decrypt a message of any size */ |
wolfSSL | 0:9d17e4342598 | 282 | int RabbitProcess(Rabbit* ctx, byte* output, const byte* input, word32 msglen) |
wolfSSL | 0:9d17e4342598 | 283 | { |
wolfSSL | 0:9d17e4342598 | 284 | #ifdef XSTREAM_ALIGN |
wolfSSL | 0:9d17e4342598 | 285 | if ((word)input % 4 || (word)output % 4) { |
wolfSSL | 0:9d17e4342598 | 286 | #ifndef NO_CYASSL_ALLOC_ALIGN |
wolfSSL | 0:9d17e4342598 | 287 | byte* tmp; |
wolfSSL | 0:9d17e4342598 | 288 | CYASSL_MSG("RabbitProcess unaligned"); |
wolfSSL | 0:9d17e4342598 | 289 | |
wolfSSL | 0:9d17e4342598 | 290 | tmp = (byte*)XMALLOC(msglen, NULL, DYNAMIC_TYPE_TMP_BUFFER); |
wolfSSL | 0:9d17e4342598 | 291 | if (tmp == NULL) return MEMORY_E; |
wolfSSL | 0:9d17e4342598 | 292 | |
wolfSSL | 0:9d17e4342598 | 293 | XMEMCPY(tmp, input, msglen); |
wolfSSL | 0:9d17e4342598 | 294 | DoProcess(ctx, tmp, tmp, msglen); |
wolfSSL | 0:9d17e4342598 | 295 | XMEMCPY(output, tmp, msglen); |
wolfSSL | 0:9d17e4342598 | 296 | |
wolfSSL | 0:9d17e4342598 | 297 | XFREE(tmp, NULL, DYNAMIC_TYPE_TMP_BUFFER); |
wolfSSL | 0:9d17e4342598 | 298 | |
wolfSSL | 0:9d17e4342598 | 299 | return 0; |
wolfSSL | 0:9d17e4342598 | 300 | #else |
wolfSSL | 0:9d17e4342598 | 301 | return BAD_ALIGN_E; |
wolfSSL | 0:9d17e4342598 | 302 | #endif |
wolfSSL | 0:9d17e4342598 | 303 | } |
wolfSSL | 0:9d17e4342598 | 304 | #endif /* XSTREAM_ALIGN */ |
wolfSSL | 0:9d17e4342598 | 305 | |
wolfSSL | 0:9d17e4342598 | 306 | return DoProcess(ctx, output, input, msglen); |
wolfSSL | 0:9d17e4342598 | 307 | } |
wolfSSL | 0:9d17e4342598 | 308 | |
wolfSSL | 0:9d17e4342598 | 309 | |
wolfSSL | 0:9d17e4342598 | 310 | #endif /* NO_RABBIT */ |