xref: /minix3/crypto/external/bsd/heimdal/dist/lib/hcrypto/camellia.c (revision ebfedea0ce5bbe81e252ddf32d732e40fb633fae)
1*ebfedea0SLionel Sambuc /*	$NetBSD: camellia.c,v 1.1.1.1 2011/04/13 18:14:49 elric Exp $	*/
2*ebfedea0SLionel Sambuc 
3*ebfedea0SLionel Sambuc /*
4*ebfedea0SLionel Sambuc  * Copyright (c) 2007 Kungliga Tekniska Högskolan
5*ebfedea0SLionel Sambuc  * (Royal Institute of Technology, Stockholm, Sweden).
6*ebfedea0SLionel Sambuc  * All rights reserved.
7*ebfedea0SLionel Sambuc  *
8*ebfedea0SLionel Sambuc  * Redistribution and use in source and binary forms, with or without
9*ebfedea0SLionel Sambuc  * modification, are permitted provided that the following conditions
10*ebfedea0SLionel Sambuc  * are met:
11*ebfedea0SLionel Sambuc  *
12*ebfedea0SLionel Sambuc  * 1. Redistributions of source code must retain the above copyright
13*ebfedea0SLionel Sambuc  *    notice, this list of conditions and the following disclaimer.
14*ebfedea0SLionel Sambuc  *
15*ebfedea0SLionel Sambuc  * 2. Redistributions in binary form must reproduce the above copyright
16*ebfedea0SLionel Sambuc  *    notice, this list of conditions and the following disclaimer in the
17*ebfedea0SLionel Sambuc  *    documentation and/or other materials provided with the distribution.
18*ebfedea0SLionel Sambuc  *
19*ebfedea0SLionel Sambuc  * 3. Neither the name of the Institute nor the names of its contributors
20*ebfedea0SLionel Sambuc  *    may be used to endorse or promote products derived from this software
21*ebfedea0SLionel Sambuc  *    without specific prior written permission.
22*ebfedea0SLionel Sambuc  *
23*ebfedea0SLionel Sambuc  * THIS SOFTWARE IS PROVIDED BY THE INSTITUTE AND CONTRIBUTORS ``AS IS'' AND
24*ebfedea0SLionel Sambuc  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
25*ebfedea0SLionel Sambuc  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
26*ebfedea0SLionel Sambuc  * ARE DISCLAIMED.  IN NO EVENT SHALL THE INSTITUTE OR CONTRIBUTORS BE LIABLE
27*ebfedea0SLionel Sambuc  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
28*ebfedea0SLionel Sambuc  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
29*ebfedea0SLionel Sambuc  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
30*ebfedea0SLionel Sambuc  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
31*ebfedea0SLionel Sambuc  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
32*ebfedea0SLionel Sambuc  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
33*ebfedea0SLionel Sambuc  * SUCH DAMAGE.
34*ebfedea0SLionel Sambuc  */
35*ebfedea0SLionel Sambuc 
36*ebfedea0SLionel Sambuc #include "config.h"
37*ebfedea0SLionel Sambuc 
38*ebfedea0SLionel Sambuc #ifdef KRB5
39*ebfedea0SLionel Sambuc #include <krb5/krb5-types.h>
40*ebfedea0SLionel Sambuc #endif
41*ebfedea0SLionel Sambuc 
42*ebfedea0SLionel Sambuc #include <string.h>
43*ebfedea0SLionel Sambuc 
44*ebfedea0SLionel Sambuc #include "camellia-ntt.h"
45*ebfedea0SLionel Sambuc #include "camellia.h"
46*ebfedea0SLionel Sambuc 
47*ebfedea0SLionel Sambuc #include <krb5/roken.h>
48*ebfedea0SLionel Sambuc 
49*ebfedea0SLionel Sambuc int
CAMELLIA_set_key(const unsigned char * userkey,const int bits,CAMELLIA_KEY * key)50*ebfedea0SLionel Sambuc CAMELLIA_set_key(const unsigned char *userkey,
51*ebfedea0SLionel Sambuc 		 const int bits, CAMELLIA_KEY *key)
52*ebfedea0SLionel Sambuc {
53*ebfedea0SLionel Sambuc     key->bits = bits;
54*ebfedea0SLionel Sambuc     Camellia_Ekeygen(bits, userkey, key->key);
55*ebfedea0SLionel Sambuc     return 1;
56*ebfedea0SLionel Sambuc }
57*ebfedea0SLionel Sambuc 
58*ebfedea0SLionel Sambuc void
CAMELLIA_encrypt(const unsigned char * in,unsigned char * out,const CAMELLIA_KEY * key)59*ebfedea0SLionel Sambuc CAMELLIA_encrypt(const unsigned char *in, unsigned char *out,
60*ebfedea0SLionel Sambuc 		 const CAMELLIA_KEY *key)
61*ebfedea0SLionel Sambuc {
62*ebfedea0SLionel Sambuc     Camellia_EncryptBlock(key->bits, in, key->key, out);
63*ebfedea0SLionel Sambuc 
64*ebfedea0SLionel Sambuc }
65*ebfedea0SLionel Sambuc 
66*ebfedea0SLionel Sambuc void
CAMELLIA_decrypt(const unsigned char * in,unsigned char * out,const CAMELLIA_KEY * key)67*ebfedea0SLionel Sambuc CAMELLIA_decrypt(const unsigned char *in, unsigned char *out,
68*ebfedea0SLionel Sambuc 		 const CAMELLIA_KEY *key)
69*ebfedea0SLionel Sambuc {
70*ebfedea0SLionel Sambuc     Camellia_DecryptBlock(key->bits, in, key->key, out);
71*ebfedea0SLionel Sambuc }
72*ebfedea0SLionel Sambuc 
73*ebfedea0SLionel Sambuc void
CAMELLIA_cbc_encrypt(const unsigned char * in,unsigned char * out,unsigned long size,const CAMELLIA_KEY * key,unsigned char * iv,int mode_encrypt)74*ebfedea0SLionel Sambuc CAMELLIA_cbc_encrypt(const unsigned char *in, unsigned char *out,
75*ebfedea0SLionel Sambuc 		     unsigned long size, const CAMELLIA_KEY *key,
76*ebfedea0SLionel Sambuc 		     unsigned char *iv, int mode_encrypt)
77*ebfedea0SLionel Sambuc {
78*ebfedea0SLionel Sambuc     unsigned char tmp[CAMELLIA_BLOCK_SIZE];
79*ebfedea0SLionel Sambuc     int i;
80*ebfedea0SLionel Sambuc 
81*ebfedea0SLionel Sambuc     if (mode_encrypt) {
82*ebfedea0SLionel Sambuc 	while (size >= CAMELLIA_BLOCK_SIZE) {
83*ebfedea0SLionel Sambuc 	    for (i = 0; i < CAMELLIA_BLOCK_SIZE; i++)
84*ebfedea0SLionel Sambuc 		tmp[i] = in[i] ^ iv[i];
85*ebfedea0SLionel Sambuc 	    CAMELLIA_encrypt(tmp, out, key);
86*ebfedea0SLionel Sambuc 	    memcpy(iv, out, CAMELLIA_BLOCK_SIZE);
87*ebfedea0SLionel Sambuc 	    size -= CAMELLIA_BLOCK_SIZE;
88*ebfedea0SLionel Sambuc 	    in += CAMELLIA_BLOCK_SIZE;
89*ebfedea0SLionel Sambuc 	    out += CAMELLIA_BLOCK_SIZE;
90*ebfedea0SLionel Sambuc 	}
91*ebfedea0SLionel Sambuc 	if (size) {
92*ebfedea0SLionel Sambuc 	    for (i = 0; i < size; i++)
93*ebfedea0SLionel Sambuc 		tmp[i] = in[i] ^ iv[i];
94*ebfedea0SLionel Sambuc 	    for (i = size; i < CAMELLIA_BLOCK_SIZE; i++)
95*ebfedea0SLionel Sambuc 		tmp[i] = iv[i];
96*ebfedea0SLionel Sambuc 	    CAMELLIA_encrypt(tmp, out, key);
97*ebfedea0SLionel Sambuc 	    memcpy(iv, out, CAMELLIA_BLOCK_SIZE);
98*ebfedea0SLionel Sambuc 	}
99*ebfedea0SLionel Sambuc     } else {
100*ebfedea0SLionel Sambuc 	while (size >= CAMELLIA_BLOCK_SIZE) {
101*ebfedea0SLionel Sambuc 	    memcpy(tmp, in, CAMELLIA_BLOCK_SIZE);
102*ebfedea0SLionel Sambuc 	    CAMELLIA_decrypt(tmp, out, key);
103*ebfedea0SLionel Sambuc 	    for (i = 0; i < CAMELLIA_BLOCK_SIZE; i++)
104*ebfedea0SLionel Sambuc 		out[i] ^= iv[i];
105*ebfedea0SLionel Sambuc 	    memcpy(iv, tmp, CAMELLIA_BLOCK_SIZE);
106*ebfedea0SLionel Sambuc 	    size -= CAMELLIA_BLOCK_SIZE;
107*ebfedea0SLionel Sambuc 	    in += CAMELLIA_BLOCK_SIZE;
108*ebfedea0SLionel Sambuc 	    out += CAMELLIA_BLOCK_SIZE;
109*ebfedea0SLionel Sambuc 	}
110*ebfedea0SLionel Sambuc 	if (size) {
111*ebfedea0SLionel Sambuc 	    memcpy(tmp, in, CAMELLIA_BLOCK_SIZE);
112*ebfedea0SLionel Sambuc 	    CAMELLIA_decrypt(tmp, out, key);
113*ebfedea0SLionel Sambuc 	    for (i = 0; i < size; i++)
114*ebfedea0SLionel Sambuc 		out[i] ^= iv[i];
115*ebfedea0SLionel Sambuc 	    memcpy(iv, tmp, CAMELLIA_BLOCK_SIZE);
116*ebfedea0SLionel Sambuc 	}
117*ebfedea0SLionel Sambuc     }
118*ebfedea0SLionel Sambuc }
119