[thirdparty/openssl.git] / crypto / des / des_enc.c

/* crypto/des/des_enc.c */
/* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
 * All rights reserved.
 *
 * This package is an SSL implementation written
 * by Eric Young (eay@cryptsoft.com).
 * The implementation was written so as to conform with Netscapes SSL.
 * 
 * This library is free for commercial and non-commercial use as long as
 * the following conditions are aheared to.  The following conditions
 * apply to all code found in this distribution, be it the RC4, RSA,
 * lhash, DES, etc., code; not just the SSL code.  The SSL documentation
 * included with this distribution is covered by the same copyright terms
 * except that the holder is Tim Hudson (tjh@cryptsoft.com).
 * 
 * Copyright remains Eric Young's, and as such any Copyright notices in
 * the code are not to be removed.
 * If this package is used in a product, Eric Young should be given attribution
 * as the author of the parts of the library used.
 * This can be in the form of a textual message at program startup or
 * in documentation (online or textual) provided with the package.
 * 
 * Redistribution and use in source and binary forms, with or without
 * modification, are permitted provided that the following conditions
 * are met:
 * 1. Redistributions of source code must retain the copyright
 *    notice, this list of conditions and the following disclaimer.
 * 2. Redistributions in binary form must reproduce the above copyright
 *    notice, this list of conditions and the following disclaimer in the
 *    documentation and/or other materials provided with the distribution.
 * 3. All advertising materials mentioning features or use of this software
 *    must display the following acknowledgement:
 *    "This product includes cryptographic software written by
 *     Eric Young (eay@cryptsoft.com)"
 *    The word 'cryptographic' can be left out if the rouines from the library
 *    being used are not cryptographic related :-).
 * 4. If you include any Windows specific code (or a derivative thereof) from 
 *    the apps directory (application code) you must include an acknowledgement:
 *    "This product includes software written by Tim Hudson (tjh@cryptsoft.com)"
 * 
 * THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND
 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
 * ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
 * SUCH DAMAGE.
 * 
 * The licence and distribution terms for any publically available version or
 * derivative of this code cannot be changed.  i.e. this code cannot simply be
 * copied and put under another distribution licence
 * [including the GNU Public Licence.]
 */

#include "des_locl.h"

void des_encrypt(DES_LONG *data, des_key_schedule ks, int enc)
	{
	register DES_LONG l,r,t,u;
#ifdef DES_PTR
	register const unsigned char *des_SP=(const unsigned char *)des_SPtrans;
#endif
#ifndef DES_UNROLL
	register int i;
#endif
	register DES_LONG *s;

	r=data[0];
	l=data[1];

	IP(r,l);
	/* Things have been modified so that the initial rotate is
	 * done outside the loop.  This required the
	 * des_SPtrans values in sp.h to be rotated 1 bit to the right.
	 * One perl script later and things have a 5% speed up on a sparc2.
	 * Thanks to Richard Outerbridge <71755.204@CompuServe.COM>
	 * for pointing this out. */
	/* clear the top bits on machines with 8byte longs */
	/* shift left by 2 */
	r=ROTATE(r,29)&0xffffffffL;
	l=ROTATE(l,29)&0xffffffffL;

	s=ks->ks.deslong;
	/* I don't know if it is worth the effort of loop unrolling the
	 * inner loop */
	if (enc)
		{
#ifdef DES_UNROLL
		D_ENCRYPT(l,r, 0); /*  1 */
		D_ENCRYPT(r,l, 2); /*  2 */
		D_ENCRYPT(l,r, 4); /*  3 */
		D_ENCRYPT(r,l, 6); /*  4 */
		D_ENCRYPT(l,r, 8); /*  5 */
		D_ENCRYPT(r,l,10); /*  6 */
		D_ENCRYPT(l,r,12); /*  7 */
		D_ENCRYPT(r,l,14); /*  8 */
		D_ENCRYPT(l,r,16); /*  9 */
		D_ENCRYPT(r,l,18); /*  10 */
		D_ENCRYPT(l,r,20); /*  11 */
		D_ENCRYPT(r,l,22); /*  12 */
		D_ENCRYPT(l,r,24); /*  13 */
		D_ENCRYPT(r,l,26); /*  14 */
		D_ENCRYPT(l,r,28); /*  15 */
		D_ENCRYPT(r,l,30); /*  16 */
#else
		for (i=0; i<32; i+=8)
			{
			D_ENCRYPT(l,r,i+0); /*  1 */
			D_ENCRYPT(r,l,i+2); /*  2 */
			D_ENCRYPT(l,r,i+4); /*  3 */
			D_ENCRYPT(r,l,i+6); /*  4 */
			}
#endif
		}
	else
		{
#ifdef DES_UNROLL
		D_ENCRYPT(l,r,30); /* 16 */
		D_ENCRYPT(r,l,28); /* 15 */
		D_ENCRYPT(l,r,26); /* 14 */
		D_ENCRYPT(r,l,24); /* 13 */
		D_ENCRYPT(l,r,22); /* 12 */
		D_ENCRYPT(r,l,20); /* 11 */
		D_ENCRYPT(l,r,18); /* 10 */
		D_ENCRYPT(r,l,16); /*  9 */
		D_ENCRYPT(l,r,14); /*  8 */
		D_ENCRYPT(r,l,12); /*  7 */
		D_ENCRYPT(l,r,10); /*  6 */
		D_ENCRYPT(r,l, 8); /*  5 */
		D_ENCRYPT(l,r, 6); /*  4 */
		D_ENCRYPT(r,l, 4); /*  3 */
		D_ENCRYPT(l,r, 2); /*  2 */
		D_ENCRYPT(r,l, 0); /*  1 */
#else
		for (i=30; i>0; i-=8)
			{
			D_ENCRYPT(l,r,i-0); /* 16 */
			D_ENCRYPT(r,l,i-2); /* 15 */
			D_ENCRYPT(l,r,i-4); /* 14 */
			D_ENCRYPT(r,l,i-6); /* 13 */
			}
#endif
		}

	/* rotate and clear the top bits on machines with 8byte longs */
	l=ROTATE(l,3)&0xffffffffL;
	r=ROTATE(r,3)&0xffffffffL;

	FP(r,l);
	data[0]=l;
	data[1]=r;
	l=r=t=u=0;
	}

void des_encrypt2(DES_LONG *data, des_key_schedule ks, int enc)
	{
	register DES_LONG l,r,t,u;
#ifdef DES_PTR
	register const unsigned char *des_SP=(const unsigned char *)des_SPtrans;
#endif
#ifndef DES_UNROLL
	register int i;
#endif
	register DES_LONG *s;

	r=data[0];
	l=data[1];

	/* Things have been modified so that the initial rotate is
	 * done outside the loop.  This required the
	 * des_SPtrans values in sp.h to be rotated 1 bit to the right.
	 * One perl script later and things have a 5% speed up on a sparc2.
	 * Thanks to Richard Outerbridge <71755.204@CompuServe.COM>
	 * for pointing this out. */
	/* clear the top bits on machines with 8byte longs */
	r=ROTATE(r,29)&0xffffffffL;
	l=ROTATE(l,29)&0xffffffffL;

	s=ks->ks.deslong;
	/* I don't know if it is worth the effort of loop unrolling the
	 * inner loop */
	if (enc)
		{
#ifdef DES_UNROLL
		D_ENCRYPT(l,r, 0); /*  1 */
		D_ENCRYPT(r,l, 2); /*  2 */
		D_ENCRYPT(l,r, 4); /*  3 */
		D_ENCRYPT(r,l, 6); /*  4 */
		D_ENCRYPT(l,r, 8); /*  5 */
		D_ENCRYPT(r,l,10); /*  6 */
		D_ENCRYPT(l,r,12); /*  7 */
		D_ENCRYPT(r,l,14); /*  8 */
		D_ENCRYPT(l,r,16); /*  9 */
		D_ENCRYPT(r,l,18); /*  10 */
		D_ENCRYPT(l,r,20); /*  11 */
		D_ENCRYPT(r,l,22); /*  12 */
		D_ENCRYPT(l,r,24); /*  13 */
		D_ENCRYPT(r,l,26); /*  14 */
		D_ENCRYPT(l,r,28); /*  15 */
		D_ENCRYPT(r,l,30); /*  16 */
#else
		for (i=0; i<32; i+=8)
			{
			D_ENCRYPT(l,r,i+0); /*  1 */
			D_ENCRYPT(r,l,i+2); /*  2 */
			D_ENCRYPT(l,r,i+4); /*  3 */
			D_ENCRYPT(r,l,i+6); /*  4 */
			}
#endif
		}
	else
		{
#ifdef DES_UNROLL
		D_ENCRYPT(l,r,30); /* 16 */
		D_ENCRYPT(r,l,28); /* 15 */
		D_ENCRYPT(l,r,26); /* 14 */
		D_ENCRYPT(r,l,24); /* 13 */
		D_ENCRYPT(l,r,22); /* 12 */
		D_ENCRYPT(r,l,20); /* 11 */
		D_ENCRYPT(l,r,18); /* 10 */
		D_ENCRYPT(r,l,16); /*  9 */
		D_ENCRYPT(l,r,14); /*  8 */
		D_ENCRYPT(r,l,12); /*  7 */
		D_ENCRYPT(l,r,10); /*  6 */
		D_ENCRYPT(r,l, 8); /*  5 */
		D_ENCRYPT(l,r, 6); /*  4 */
		D_ENCRYPT(r,l, 4); /*  3 */
		D_ENCRYPT(l,r, 2); /*  2 */
		D_ENCRYPT(r,l, 0); /*  1 */
#else
		for (i=30; i>0; i-=8)
			{
			D_ENCRYPT(l,r,i-0); /* 16 */
			D_ENCRYPT(r,l,i-2); /* 15 */
			D_ENCRYPT(l,r,i-4); /* 14 */
			D_ENCRYPT(r,l,i-6); /* 13 */
			}
#endif
		}
	/* rotate and clear the top bits on machines with 8byte longs */
	data[0]=ROTATE(l,3)&0xffffffffL;
	data[1]=ROTATE(r,3)&0xffffffffL;
	l=r=t=u=0;
	}

void des_encrypt3(DES_LONG *data, des_key_schedule ks1, des_key_schedule ks2,
	     des_key_schedule ks3)
	{
	register DES_LONG l,r;

	l=data[0];
	r=data[1];
	IP(l,r);
	data[0]=l;
	data[1]=r;
	des_encrypt2((DES_LONG *)data,ks1,DES_ENCRYPT);
	des_encrypt2((DES_LONG *)data,ks2,DES_DECRYPT);
	des_encrypt2((DES_LONG *)data,ks3,DES_ENCRYPT);
	l=data[0];
	r=data[1];
	FP(r,l);
	data[0]=l;
	data[1]=r;
	}

void des_decrypt3(DES_LONG *data, des_key_schedule ks1, des_key_schedule ks2,
	     des_key_schedule ks3)
	{
	register DES_LONG l,r;

	l=data[0];
	r=data[1];
	IP(l,r);
	data[0]=l;
	data[1]=r;
	des_encrypt2((DES_LONG *)data,ks3,DES_DECRYPT);
	des_encrypt2((DES_LONG *)data,ks2,DES_ENCRYPT);
	des_encrypt2((DES_LONG *)data,ks1,DES_DECRYPT);
	l=data[0];
	r=data[1];
	FP(r,l);
	data[0]=l;
	data[1]=r;
	}

#ifndef DES_DEFAULT_OPTIONS

#undef CBC_ENC_C__DONT_UPDATE_IV
#include "ncbc_enc.c" /* des_ncbc_encrypt */

void des_ede3_cbc_encrypt(const unsigned char *input, unsigned char *output,
	     long length, des_key_schedule ks1, des_key_schedule ks2,
	     des_key_schedule ks3, des_cblock *ivec, int enc)
	{
	register DES_LONG tin0,tin1;
	register DES_LONG tout0,tout1,xor0,xor1;
	register const unsigned char *in;
	unsigned char *out;
	register long l=length;
	DES_LONG tin[2];
	unsigned char *iv;

	in=input;
	out=output;
	iv = &(*ivec)[0];

	if (enc)
		{
		c2l(iv,tout0);
		c2l(iv,tout1);
		for (l-=8; l>=0; l-=8)
			{
			c2l(in,tin0);
			c2l(in,tin1);
			tin0^=tout0;
			tin1^=tout1;

			tin[0]=tin0;
			tin[1]=tin1;
			des_encrypt3((DES_LONG *)tin,ks1,ks2,ks3);
			tout0=tin[0];
			tout1=tin[1];

			l2c(tout0,out);
			l2c(tout1,out);
			}
		if (l != -8)
			{
			c2ln(in,tin0,tin1,l+8);
			tin0^=tout0;
			tin1^=tout1;

			tin[0]=tin0;
			tin[1]=tin1;
			des_encrypt3((DES_LONG *)tin,ks1,ks2,ks3);
			tout0=tin[0];
			tout1=tin[1];

			l2c(tout0,out);
			l2c(tout1,out);
			}
		iv = &(*ivec)[0];
		l2c(tout0,iv);
		l2c(tout1,iv);
		}
	else
		{
		register DES_LONG t0,t1;

		c2l(iv,xor0);
		c2l(iv,xor1);
		for (l-=8; l>=0; l-=8)
			{
			c2l(in,tin0);
			c2l(in,tin1);

			t0=tin0;
			t1=tin1;

			tin[0]=tin0;
			tin[1]=tin1;
			des_decrypt3((DES_LONG *)tin,ks1,ks2,ks3);
			tout0=tin[0];
			tout1=tin[1];

			tout0^=xor0;
			tout1^=xor1;
			l2c(tout0,out);
			l2c(tout1,out);
			xor0=t0;
			xor1=t1;
			}
		if (l != -8)
			{
			c2l(in,tin0);
			c2l(in,tin1);
			
			t0=tin0;
			t1=tin1;

			tin[0]=tin0;
			tin[1]=tin1;
			des_decrypt3((DES_LONG *)tin,ks1,ks2,ks3);
			tout0=tin[0];
			tout1=tin[1];
		
			tout0^=xor0;
			tout1^=xor1;
			l2cn(tout0,tout1,out,l+8);
			xor0=t0;
			xor1=t1;
			}

		iv = &(*ivec)[0];
		l2c(xor0,iv);
		l2c(xor1,iv);
		}
	tin0=tin1=tout0=tout1=xor0=xor1=0;
	tin[0]=tin[1]=0;
	}

#endif /* DES_DEFAULT_OPTIONS */
Commit	Line	Data
d02b48c6	1	/* crypto/des/des_enc.c */
58964a49	2	/* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
d02b48c6 RE	3	* All rights reserved.
	4	*
	5	* This package is an SSL implementation written
	6	* by Eric Young (eay@cryptsoft.com).
	7	* The implementation was written so as to conform with Netscapes SSL.
	8	*
	9	* This library is free for commercial and non-commercial use as long as
	10	* the following conditions are aheared to. The following conditions
	11	* apply to all code found in this distribution, be it the RC4, RSA,
	12	* lhash, DES, etc., code; not just the SSL code. The SSL documentation
	13	* included with this distribution is covered by the same copyright terms
	14	* except that the holder is Tim Hudson (tjh@cryptsoft.com).
	15	*
	16	* Copyright remains Eric Young's, and as such any Copyright notices in
	17	* the code are not to be removed.
	18	* If this package is used in a product, Eric Young should be given attribution
	19	* as the author of the parts of the library used.
	20	* This can be in the form of a textual message at program startup or
	21	* in documentation (online or textual) provided with the package.
	22	*
	23	* Redistribution and use in source and binary forms, with or without
	24	* modification, are permitted provided that the following conditions
	25	* are met:
	26	* 1. Redistributions of source code must retain the copyright
	27	* notice, this list of conditions and the following disclaimer.
	28	* 2. Redistributions in binary form must reproduce the above copyright
	29	* notice, this list of conditions and the following disclaimer in the
	30	* documentation and/or other materials provided with the distribution.
	31	* 3. All advertising materials mentioning features or use of this software
	32	* must display the following acknowledgement:
	33	* "This product includes cryptographic software written by
	34	* Eric Young (eay@cryptsoft.com)"
	35	* The word 'cryptographic' can be left out if the rouines from the library
	36	* being used are not cryptographic related :-).
	37	* 4. If you include any Windows specific code (or a derivative thereof) from
	38	* the apps directory (application code) you must include an acknowledgement:
	39	* "This product includes software written by Tim Hudson (tjh@cryptsoft.com)"
	40	*
	41	* THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND
	42	* ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
	43	* IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
	44	* ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
	45	* FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
	46	* DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
	47	* OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
	48	* HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
	49	* LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
	50	* OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
	51	* SUCH DAMAGE.
	52	*
	53	* The licence and distribution terms for any publically available version or
	54	* derivative of this code cannot be changed. i.e. this code cannot simply be
	55	* copied and put under another distribution licence
	56	* [including the GNU Public Licence.]
	57	*/
	58
	59	#include "des_locl.h"
	60
6b691a5c	61	void des_encrypt(DES_LONG *data, des_key_schedule ks, int enc)
d02b48c6 RE	62	{
	63	register DES_LONG l,r,t,u;
	64	#ifdef DES_PTR
e778802f	65	register const unsigned char des_SP=(const unsigned char )des_SPtrans;
d02b48c6 RE	66	#endif
	67	#ifndef DES_UNROLL
	68	register int i;
	69	#endif
	70	register DES_LONG *s;
	71
	72	r=data[0];
	73	l=data[1];
	74
	75	IP(r,l);
	76	/* Things have been modified so that the initial rotate is
	77	* done outside the loop. This required the
	78	* des_SPtrans values in sp.h to be rotated 1 bit to the right.
	79	* One perl script later and things have a 5% speed up on a sparc2.
	80	* Thanks to Richard Outerbridge <71755.204@CompuServe.COM>
	81	* for pointing this out. */
	82	/* clear the top bits on machines with 8byte longs */
	83	/* shift left by 2 */
	84	r=ROTATE(r,29)&0xffffffffL;
	85	l=ROTATE(l,29)&0xffffffffL;
	86
93fd0fd6	87	s=ks->ks.deslong;
d02b48c6 RE	88	/* I don't know if it is worth the effort of loop unrolling the
	89	* inner loop */
	90	if (enc)
	91	{
	92	#ifdef DES_UNROLL
	93	D_ENCRYPT(l,r, 0); /* 1 */
	94	D_ENCRYPT(r,l, 2); /* 2 */
	95	D_ENCRYPT(l,r, 4); /* 3 */
	96	D_ENCRYPT(r,l, 6); /* 4 */
	97	D_ENCRYPT(l,r, 8); /* 5 */
	98	D_ENCRYPT(r,l,10); /* 6 */
	99	D_ENCRYPT(l,r,12); /* 7 */
	100	D_ENCRYPT(r,l,14); /* 8 */
	101	D_ENCRYPT(l,r,16); /* 9 */
	102	D_ENCRYPT(r,l,18); /* 10 */
	103	D_ENCRYPT(l,r,20); /* 11 */
	104	D_ENCRYPT(r,l,22); /* 12 */
	105	D_ENCRYPT(l,r,24); /* 13 */
	106	D_ENCRYPT(r,l,26); /* 14 */
	107	D_ENCRYPT(l,r,28); /* 15 */
	108	D_ENCRYPT(r,l,30); /* 16 */
	109	#else
	110	for (i=0; i<32; i+=8)
	111	{
	112	D_ENCRYPT(l,r,i+0); /* 1 */
	113	D_ENCRYPT(r,l,i+2); /* 2 */
	114	D_ENCRYPT(l,r,i+4); /* 3 */
	115	D_ENCRYPT(r,l,i+6); /* 4 */
	116	}
	117	#endif
	118	}
	119	else
	120	{
	121	#ifdef DES_UNROLL
	122	D_ENCRYPT(l,r,30); /* 16 */
	123	D_ENCRYPT(r,l,28); /* 15 */
	124	D_ENCRYPT(l,r,26); /* 14 */
	125	D_ENCRYPT(r,l,24); /* 13 */
	126	D_ENCRYPT(l,r,22); /* 12 */
	127	D_ENCRYPT(r,l,20); /* 11 */
	128	D_ENCRYPT(l,r,18); /* 10 */
	129	D_ENCRYPT(r,l,16); /* 9 */
	130	D_ENCRYPT(l,r,14); /* 8 */
	131	D_ENCRYPT(r,l,12); /* 7 */
	132	D_ENCRYPT(l,r,10); /* 6 */
	133	D_ENCRYPT(r,l, 8); /* 5 */
	134	D_ENCRYPT(l,r, 6); /* 4 */
	135	D_ENCRYPT(r,l, 4); /* 3 */
	136	D_ENCRYPT(l,r, 2); /* 2 */
	137	D_ENCRYPT(r,l, 0); /* 1 */
	138	#else
	139	for (i=30; i>0; i-=8)
	140	{
	141	D_ENCRYPT(l,r,i-0); /* 16 */
	142	D_ENCRYPT(r,l,i-2); /* 15 */
	143	D_ENCRYPT(l,r,i-4); /* 14 */
	144	D_ENCRYPT(r,l,i-6); /* 13 */
	145	}
	146	#endif
	147	}
	148
	149	/* rotate and clear the top bits on machines with 8byte longs */
	150	l=ROTATE(l,3)&0xffffffffL;
	151	r=ROTATE(r,3)&0xffffffffL;
152
153	FP(r,l);
154	data[0]=l;
155	data[1]=r;
156	l=r=t=u=0;
157	}
158
6b691a5c	159	void des_encrypt2(DES_LONG *data, des_key_schedule ks, int enc)
d02b48c6 RE	160	{
	161	register DES_LONG l,r,t,u;
	162	#ifdef DES_PTR
e778802f	163	register const unsigned char des_SP=(const unsigned char )des_SPtrans;
d02b48c6 RE	164	#endif
	165	#ifndef DES_UNROLL
	166	register int i;
	167	#endif
	168	register DES_LONG *s;
	169
	170	r=data[0];
	171	l=data[1];
	172
	173	/* Things have been modified so that the initial rotate is
	174	* done outside the loop. This required the
	175	* des_SPtrans values in sp.h to be rotated 1 bit to the right.
	176	* One perl script later and things have a 5% speed up on a sparc2.
	177	* Thanks to Richard Outerbridge <71755.204@CompuServe.COM>
	178	* for pointing this out. */
	179	/* clear the top bits on machines with 8byte longs */
58964a49 RE	180	r=ROTATE(r,29)&0xffffffffL;
58964a49 RE	181	l=ROTATE(l,29)&0xffffffffL;
d02b48c6	182
93fd0fd6	183	s=ks->ks.deslong;
d02b48c6 RE	184	/* I don't know if it is worth the effort of loop unrolling the
	185	* inner loop */
	186	if (enc)
	187	{
	188	#ifdef DES_UNROLL
	189	D_ENCRYPT(l,r, 0); /* 1 */
	190	D_ENCRYPT(r,l, 2); /* 2 */
	191	D_ENCRYPT(l,r, 4); /* 3 */
	192	D_ENCRYPT(r,l, 6); /* 4 */
	193	D_ENCRYPT(l,r, 8); /* 5 */
	194	D_ENCRYPT(r,l,10); /* 6 */
	195	D_ENCRYPT(l,r,12); /* 7 */
	196	D_ENCRYPT(r,l,14); /* 8 */
	197	D_ENCRYPT(l,r,16); /* 9 */
	198	D_ENCRYPT(r,l,18); /* 10 */
	199	D_ENCRYPT(l,r,20); /* 11 */
	200	D_ENCRYPT(r,l,22); /* 12 */
	201	D_ENCRYPT(l,r,24); /* 13 */
	202	D_ENCRYPT(r,l,26); /* 14 */
	203	D_ENCRYPT(l,r,28); /* 15 */
	204	D_ENCRYPT(r,l,30); /* 16 */
	205	#else
	206	for (i=0; i<32; i+=8)
	207	{
	208	D_ENCRYPT(l,r,i+0); /* 1 */
	209	D_ENCRYPT(r,l,i+2); /* 2 */
	210	D_ENCRYPT(l,r,i+4); /* 3 */
	211	D_ENCRYPT(r,l,i+6); /* 4 */
	212	}
	213	#endif
	214	}
	215	else
	216	{
	217	#ifdef DES_UNROLL
	218	D_ENCRYPT(l,r,30); /* 16 */
	219	D_ENCRYPT(r,l,28); /* 15 */
	220	D_ENCRYPT(l,r,26); /* 14 */
	221	D_ENCRYPT(r,l,24); /* 13 */
	222	D_ENCRYPT(l,r,22); /* 12 */
	223	D_ENCRYPT(r,l,20); /* 11 */
	224	D_ENCRYPT(l,r,18); /* 10 */
	225	D_ENCRYPT(r,l,16); /* 9 */
	226	D_ENCRYPT(l,r,14); /* 8 */
	227	D_ENCRYPT(r,l,12); /* 7 */
	228	D_ENCRYPT(l,r,10); /* 6 */
	229	D_ENCRYPT(r,l, 8); /* 5 */
	230	D_ENCRYPT(l,r, 6); /* 4 */
	231	D_ENCRYPT(r,l, 4); /* 3 */
	232	D_ENCRYPT(l,r, 2); /* 2 */
	233	D_ENCRYPT(r,l, 0); /* 1 */
	234	#else
	235	for (i=30; i>0; i-=8)
	236	{
	237	D_ENCRYPT(l,r,i-0); /* 16 */
	238	D_ENCRYPT(r,l,i-2); /* 15 */
	239	D_ENCRYPT(l,r,i-4); /* 14 */
	240	D_ENCRYPT(r,l,i-6); /* 13 */
	241	}
	242	#endif
	243	}
	244	/* rotate and clear the top bits on machines with 8byte longs */
58964a49 RE	245	data[0]=ROTATE(l,3)&0xffffffffL;
58964a49 RE	246	data[1]=ROTATE(r,3)&0xffffffffL;
d02b48c6 RE	247	l=r=t=u=0;
	248	}
	249
6b691a5c UM	250	void des_encrypt3(DES_LONG *data, des_key_schedule ks1, des_key_schedule ks2,
6b691a5c UM	251	des_key_schedule ks3)
d02b48c6 RE	252	{
	253	register DES_LONG l,r;
	254
	255	l=data[0];
	256	r=data[1];
	257	IP(l,r);
	258	data[0]=l;
	259	data[1]=r;
	260	des_encrypt2((DES_LONG *)data,ks1,DES_ENCRYPT);
	261	des_encrypt2((DES_LONG *)data,ks2,DES_DECRYPT);
	262	des_encrypt2((DES_LONG *)data,ks3,DES_ENCRYPT);
	263	l=data[0];
	264	r=data[1];
	265	FP(r,l);
	266	data[0]=l;
	267	data[1]=r;
	268	}
	269
6b691a5c UM	270	void des_decrypt3(DES_LONG *data, des_key_schedule ks1, des_key_schedule ks2,
6b691a5c UM	271	des_key_schedule ks3)
d02b48c6 RE	272	{
	273	register DES_LONG l,r;
	274
	275	l=data[0];
	276	r=data[1];
	277	IP(l,r);
	278	data[0]=l;
	279	data[1]=r;
	280	des_encrypt2((DES_LONG *)data,ks3,DES_DECRYPT);
	281	des_encrypt2((DES_LONG *)data,ks2,DES_ENCRYPT);
	282	des_encrypt2((DES_LONG *)data,ks1,DES_DECRYPT);
	283	l=data[0];
	284	r=data[1];
	285	FP(r,l);
	286	data[0]=l;
	287	data[1]=r;
	288	}
	289
58964a49 RE	290	#ifndef DES_DEFAULT_OPTIONS
58964a49 RE	291
3bcfce28	292	#undef CBC_ENC_C__DONT_UPDATE_IV
cfa3747b	293	#include "ncbc_enc.c" /* des_ncbc_encrypt */
58964a49	294
6b691a5c UM	295	void des_ede3_cbc_encrypt(const unsigned char input, unsigned char output,
6b691a5c UM	296	long length, des_key_schedule ks1, des_key_schedule ks2,
edf0bfb5	297	des_key_schedule ks3, des_cblock *ivec, int enc)
58964a49 RE	298	{
	299	register DES_LONG tin0,tin1;
	300	register DES_LONG tout0,tout1,xor0,xor1;
e778802f BL	301	register const unsigned char *in;
e778802f BL	302	unsigned char *out;
58964a49 RE	303	register long l=length;
	304	DES_LONG tin[2];
	305	unsigned char *iv;
	306
e778802f BL	307	in=input;
e778802f BL	308	out=output;
edf0bfb5	309	iv = &(*ivec)[0];
58964a49 RE	310
	311	if (enc)
	312	{
	313	c2l(iv,tout0);
	314	c2l(iv,tout1);
	315	for (l-=8; l>=0; l-=8)
	316	{
	317	c2l(in,tin0);
	318	c2l(in,tin1);
	319	tin0^=tout0;
	320	tin1^=tout1;
	321
	322	tin[0]=tin0;
	323	tin[1]=tin1;
	324	des_encrypt3((DES_LONG *)tin,ks1,ks2,ks3);
	325	tout0=tin[0];
	326	tout1=tin[1];
	327
	328	l2c(tout0,out);
	329	l2c(tout1,out);
	330	}
	331	if (l != -8)
	332	{
	333	c2ln(in,tin0,tin1,l+8);
	334	tin0^=tout0;
	335	tin1^=tout1;
	336
	337	tin[0]=tin0;
	338	tin[1]=tin1;
	339	des_encrypt3((DES_LONG *)tin,ks1,ks2,ks3);
	340	tout0=tin[0];
	341	tout1=tin[1];
	342
	343	l2c(tout0,out);
	344	l2c(tout1,out);
	345	}
edf0bfb5	346	iv = &(*ivec)[0];
58964a49 RE	347	l2c(tout0,iv);
	348	l2c(tout1,iv);
	349	}
	350	else
	351	{
	352	register DES_LONG t0,t1;
	353
	354	c2l(iv,xor0);
	355	c2l(iv,xor1);
	356	for (l-=8; l>=0; l-=8)
	357	{
	358	c2l(in,tin0);
	359	c2l(in,tin1);
	360
	361	t0=tin0;
	362	t1=tin1;
	363
	364	tin[0]=tin0;
	365	tin[1]=tin1;
	366	des_decrypt3((DES_LONG *)tin,ks1,ks2,ks3);
	367	tout0=tin[0];
	368	tout1=tin[1];
	369
	370	tout0^=xor0;
	371	tout1^=xor1;
	372	l2c(tout0,out);
	373	l2c(tout1,out);
	374	xor0=t0;
	375	xor1=t1;
	376	}
	377	if (l != -8)
	378	{
	379	c2l(in,tin0);
	380	c2l(in,tin1);
	381
	382	t0=tin0;
	383	t1=tin1;
	384
	385	tin[0]=tin0;
	386	tin[1]=tin1;
	387	des_decrypt3((DES_LONG *)tin,ks1,ks2,ks3);
	388	tout0=tin[0];
	389	tout1=tin[1];
	390
	391	tout0^=xor0;
	392	tout1^=xor1;
	393	l2cn(tout0,tout1,out,l+8);
	394	xor0=t0;
	395	xor1=t1;
	396	}
	397
edf0bfb5	398	iv = &(*ivec)[0];
58964a49 RE	399	l2c(xor0,iv);
	400	l2c(xor1,iv);
	401	}
	402	tin0=tin1=tout0=tout1=xor0=xor1=0;
	403	tin[0]=tin[1]=0;
	404	}
	405
	406	#endif /* DES_DEFAULT_OPTIONS */