1 /* crypto/des/des_enc.c */
2 /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
5 * This package is an SSL implementation written
6 * by Eric Young (eay@cryptsoft.com).
7 * The implementation was written so as to conform with Netscapes SSL.
9 * This library is free for commercial and non-commercial use as long as
10 * the following conditions are aheared to. The following conditions
11 * apply to all code found in this distribution, be it the RC4, RSA,
12 * lhash, DES, etc., code; not just the SSL code. The SSL documentation
13 * included with this distribution is covered by the same copyright terms
14 * except that the holder is Tim Hudson (tjh@cryptsoft.com).
16 * Copyright remains Eric Young's, and as such any Copyright notices in
17 * the code are not to be removed.
18 * If this package is used in a product, Eric Young should be given attribution
19 * as the author of the parts of the library used.
20 * This can be in the form of a textual message at program startup or
21 * in documentation (online or textual) provided with the package.
23 * Redistribution and use in source and binary forms, with or without
24 * modification, are permitted provided that the following conditions
26 * 1. Redistributions of source code must retain the copyright
27 * notice, this list of conditions and the following disclaimer.
28 * 2. Redistributions in binary form must reproduce the above copyright
29 * notice, this list of conditions and the following disclaimer in the
30 * documentation and/or other materials provided with the distribution.
31 * 3. All advertising materials mentioning features or use of this software
32 * must display the following acknowledgement:
33 * "This product includes cryptographic software written by
34 * Eric Young (eay@cryptsoft.com)"
35 * The word 'cryptographic' can be left out if the rouines from the library
36 * being used are not cryptographic related :-).
37 * 4. If you include any Windows specific code (or a derivative thereof) from
38 * the apps directory (application code) you must include an acknowledgement:
39 * "This product includes software written by Tim Hudson (tjh@cryptsoft.com)"
41 * THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND
42 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
43 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
44 * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
45 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
46 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
47 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
48 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
49 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
50 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
53 * The licence and distribution terms for any publically available version or
54 * derivative of this code cannot be changed. i.e. this code cannot simply be
55 * copied and put under another distribution licence
56 * [including the GNU Public Licence.]
61 void des_encrypt(data
, ks
, enc
)
66 register DES_LONG l
,r
,t
,u
;
68 register unsigned char *des_SP
=(unsigned char *)des_SPtrans
;
79 /* Things have been modified so that the initial rotate is
80 * done outside the loop. This required the
81 * des_SPtrans values in sp.h to be rotated 1 bit to the right.
82 * One perl script later and things have a 5% speed up on a sparc2.
83 * Thanks to Richard Outerbridge <71755.204@CompuServe.COM>
84 * for pointing this out. */
85 /* clear the top bits on machines with 8byte longs */
87 r
=ROTATE(r
,29)&0xffffffffL
;
88 l
=ROTATE(l
,29)&0xffffffffL
;
91 /* I don't know if it is worth the effort of loop unrolling the
96 D_ENCRYPT(l
,r
, 0); /* 1 */
97 D_ENCRYPT(r
,l
, 2); /* 2 */
98 D_ENCRYPT(l
,r
, 4); /* 3 */
99 D_ENCRYPT(r
,l
, 6); /* 4 */
100 D_ENCRYPT(l
,r
, 8); /* 5 */
101 D_ENCRYPT(r
,l
,10); /* 6 */
102 D_ENCRYPT(l
,r
,12); /* 7 */
103 D_ENCRYPT(r
,l
,14); /* 8 */
104 D_ENCRYPT(l
,r
,16); /* 9 */
105 D_ENCRYPT(r
,l
,18); /* 10 */
106 D_ENCRYPT(l
,r
,20); /* 11 */
107 D_ENCRYPT(r
,l
,22); /* 12 */
108 D_ENCRYPT(l
,r
,24); /* 13 */
109 D_ENCRYPT(r
,l
,26); /* 14 */
110 D_ENCRYPT(l
,r
,28); /* 15 */
111 D_ENCRYPT(r
,l
,30); /* 16 */
113 for (i
=0; i
<32; i
+=8)
115 D_ENCRYPT(l
,r
,i
+0); /* 1 */
116 D_ENCRYPT(r
,l
,i
+2); /* 2 */
117 D_ENCRYPT(l
,r
,i
+4); /* 3 */
118 D_ENCRYPT(r
,l
,i
+6); /* 4 */
125 D_ENCRYPT(l
,r
,30); /* 16 */
126 D_ENCRYPT(r
,l
,28); /* 15 */
127 D_ENCRYPT(l
,r
,26); /* 14 */
128 D_ENCRYPT(r
,l
,24); /* 13 */
129 D_ENCRYPT(l
,r
,22); /* 12 */
130 D_ENCRYPT(r
,l
,20); /* 11 */
131 D_ENCRYPT(l
,r
,18); /* 10 */
132 D_ENCRYPT(r
,l
,16); /* 9 */
133 D_ENCRYPT(l
,r
,14); /* 8 */
134 D_ENCRYPT(r
,l
,12); /* 7 */
135 D_ENCRYPT(l
,r
,10); /* 6 */
136 D_ENCRYPT(r
,l
, 8); /* 5 */
137 D_ENCRYPT(l
,r
, 6); /* 4 */
138 D_ENCRYPT(r
,l
, 4); /* 3 */
139 D_ENCRYPT(l
,r
, 2); /* 2 */
140 D_ENCRYPT(r
,l
, 0); /* 1 */
142 for (i
=30; i
>0; i
-=8)
144 D_ENCRYPT(l
,r
,i
-0); /* 16 */
145 D_ENCRYPT(r
,l
,i
-2); /* 15 */
146 D_ENCRYPT(l
,r
,i
-4); /* 14 */
147 D_ENCRYPT(r
,l
,i
-6); /* 13 */
152 /* rotate and clear the top bits on machines with 8byte longs */
153 l
=ROTATE(l
,3)&0xffffffffL
;
154 r
=ROTATE(r
,3)&0xffffffffL
;
162 void des_encrypt2(data
, ks
, enc
)
167 register DES_LONG l
,r
,t
,u
;
169 register unsigned char *des_SP
=(unsigned char *)des_SPtrans
;
174 register DES_LONG
*s
;
179 /* Things have been modified so that the initial rotate is
180 * done outside the loop. This required the
181 * des_SPtrans values in sp.h to be rotated 1 bit to the right.
182 * One perl script later and things have a 5% speed up on a sparc2.
183 * Thanks to Richard Outerbridge <71755.204@CompuServe.COM>
184 * for pointing this out. */
185 /* clear the top bits on machines with 8byte longs */
186 r
=ROTATE(r
,29)&0xffffffffL
;
187 l
=ROTATE(l
,29)&0xffffffffL
;
190 /* I don't know if it is worth the effort of loop unrolling the
195 D_ENCRYPT(l
,r
, 0); /* 1 */
196 D_ENCRYPT(r
,l
, 2); /* 2 */
197 D_ENCRYPT(l
,r
, 4); /* 3 */
198 D_ENCRYPT(r
,l
, 6); /* 4 */
199 D_ENCRYPT(l
,r
, 8); /* 5 */
200 D_ENCRYPT(r
,l
,10); /* 6 */
201 D_ENCRYPT(l
,r
,12); /* 7 */
202 D_ENCRYPT(r
,l
,14); /* 8 */
203 D_ENCRYPT(l
,r
,16); /* 9 */
204 D_ENCRYPT(r
,l
,18); /* 10 */
205 D_ENCRYPT(l
,r
,20); /* 11 */
206 D_ENCRYPT(r
,l
,22); /* 12 */
207 D_ENCRYPT(l
,r
,24); /* 13 */
208 D_ENCRYPT(r
,l
,26); /* 14 */
209 D_ENCRYPT(l
,r
,28); /* 15 */
210 D_ENCRYPT(r
,l
,30); /* 16 */
212 for (i
=0; i
<32; i
+=8)
214 D_ENCRYPT(l
,r
,i
+0); /* 1 */
215 D_ENCRYPT(r
,l
,i
+2); /* 2 */
216 D_ENCRYPT(l
,r
,i
+4); /* 3 */
217 D_ENCRYPT(r
,l
,i
+6); /* 4 */
224 D_ENCRYPT(l
,r
,30); /* 16 */
225 D_ENCRYPT(r
,l
,28); /* 15 */
226 D_ENCRYPT(l
,r
,26); /* 14 */
227 D_ENCRYPT(r
,l
,24); /* 13 */
228 D_ENCRYPT(l
,r
,22); /* 12 */
229 D_ENCRYPT(r
,l
,20); /* 11 */
230 D_ENCRYPT(l
,r
,18); /* 10 */
231 D_ENCRYPT(r
,l
,16); /* 9 */
232 D_ENCRYPT(l
,r
,14); /* 8 */
233 D_ENCRYPT(r
,l
,12); /* 7 */
234 D_ENCRYPT(l
,r
,10); /* 6 */
235 D_ENCRYPT(r
,l
, 8); /* 5 */
236 D_ENCRYPT(l
,r
, 6); /* 4 */
237 D_ENCRYPT(r
,l
, 4); /* 3 */
238 D_ENCRYPT(l
,r
, 2); /* 2 */
239 D_ENCRYPT(r
,l
, 0); /* 1 */
241 for (i
=30; i
>0; i
-=8)
243 D_ENCRYPT(l
,r
,i
-0); /* 16 */
244 D_ENCRYPT(r
,l
,i
-2); /* 15 */
245 D_ENCRYPT(l
,r
,i
-4); /* 14 */
246 D_ENCRYPT(r
,l
,i
-6); /* 13 */
250 /* rotate and clear the top bits on machines with 8byte longs */
251 data
[0]=ROTATE(l
,3)&0xffffffffL
;
252 data
[1]=ROTATE(r
,3)&0xffffffffL
;
256 void des_encrypt3(data
,ks1
,ks2
,ks3
)
258 des_key_schedule ks1
;
259 des_key_schedule ks2
;
260 des_key_schedule ks3
;
262 register DES_LONG l
,r
;
269 des_encrypt2((DES_LONG
*)data
,ks1
,DES_ENCRYPT
);
270 des_encrypt2((DES_LONG
*)data
,ks2
,DES_DECRYPT
);
271 des_encrypt2((DES_LONG
*)data
,ks3
,DES_ENCRYPT
);
279 void des_decrypt3(data
,ks1
,ks2
,ks3
)
281 des_key_schedule ks1
;
282 des_key_schedule ks2
;
283 des_key_schedule ks3
;
285 register DES_LONG l
,r
;
292 des_encrypt2((DES_LONG
*)data
,ks3
,DES_DECRYPT
);
293 des_encrypt2((DES_LONG
*)data
,ks2
,DES_ENCRYPT
);
294 des_encrypt2((DES_LONG
*)data
,ks1
,DES_DECRYPT
);
302 #ifndef DES_DEFAULT_OPTIONS
304 void des_ncbc_encrypt(input
, output
, length
, schedule
, ivec
, enc
)
306 des_cblock (*output
);
308 des_key_schedule schedule
;
312 register DES_LONG tin0
,tin1
;
313 register DES_LONG tout0
,tout1
,xor0
,xor1
;
314 register unsigned char *in
,*out
;
315 register long l
=length
;
319 in
=(unsigned char *)input
;
320 out
=(unsigned char *)output
;
321 iv
=(unsigned char *)ivec
;
327 for (l
-=8; l
>=0; l
-=8)
331 tin0
^=tout0
; tin
[0]=tin0
;
332 tin1
^=tout1
; tin
[1]=tin1
;
333 des_encrypt((DES_LONG
*)tin
,schedule
,DES_ENCRYPT
);
334 tout0
=tin
[0]; l2c(tout0
,out
);
335 tout1
=tin
[1]; l2c(tout1
,out
);
339 c2ln(in
,tin0
,tin1
,l
+8);
340 tin0
^=tout0
; tin
[0]=tin0
;
341 tin1
^=tout1
; tin
[1]=tin1
;
342 des_encrypt((DES_LONG
*)tin
,schedule
,DES_ENCRYPT
);
343 tout0
=tin
[0]; l2c(tout0
,out
);
344 tout1
=tin
[1]; l2c(tout1
,out
);
346 iv
=(unsigned char *)ivec
;
354 for (l
-=8; l
>=0; l
-=8)
356 c2l(in
,tin0
); tin
[0]=tin0
;
357 c2l(in
,tin1
); tin
[1]=tin1
;
358 des_encrypt((DES_LONG
*)tin
,schedule
,DES_DECRYPT
);
368 c2l(in
,tin0
); tin
[0]=tin0
;
369 c2l(in
,tin1
); tin
[1]=tin1
;
370 des_encrypt((DES_LONG
*)tin
,schedule
,DES_DECRYPT
);
373 l2cn(tout0
,tout1
,out
,l
+8);
378 iv
=(unsigned char *)ivec
;
382 tin0
=tin1
=tout0
=tout1
=xor0
=xor1
=0;
386 void des_ede3_cbc_encrypt(input
, output
, length
, ks1
, ks2
, ks3
, ivec
, enc
)
388 des_cblock (*output
);
390 des_key_schedule ks1
;
391 des_key_schedule ks2
;
392 des_key_schedule ks3
;
396 register DES_LONG tin0
,tin1
;
397 register DES_LONG tout0
,tout1
,xor0
,xor1
;
398 register unsigned char *in
,*out
;
399 register long l
=length
;
403 in
=(unsigned char *)input
;
404 out
=(unsigned char *)output
;
405 iv
=(unsigned char *)ivec
;
411 for (l
-=8; l
>=0; l
-=8)
420 des_encrypt3((DES_LONG
*)tin
,ks1
,ks2
,ks3
);
429 c2ln(in
,tin0
,tin1
,l
+8);
435 des_encrypt3((DES_LONG
*)tin
,ks1
,ks2
,ks3
);
442 iv
=(unsigned char *)ivec
;
448 register DES_LONG t0
,t1
;
452 for (l
-=8; l
>=0; l
-=8)
462 des_decrypt3((DES_LONG
*)tin
,ks1
,ks2
,ks3
);
483 des_decrypt3((DES_LONG
*)tin
,ks1
,ks2
,ks3
);
489 l2cn(tout0
,tout1
,out
,l
+8);
494 iv
=(unsigned char *)ivec
;
498 tin0
=tin1
=tout0
=tout1
=xor0
=xor1
=0;
502 #endif /* DES_DEFAULT_OPTIONS */