1 /* $OpenBSD: blowfish.c,v 1.15 2001/01/04 21:45:30 todd Exp $ */ 2 /* 3 * Blowfish block cipher for OpenBSD 4 * Copyright 1997 Niels Provos <provos@physnet.uni-hamburg.de> 5 * All rights reserved. 6 * 7 * Implementation advice by David Mazieres <dm@lcs.mit.edu>. 8 * 9 * Redistribution and use in source and binary forms, with or without 10 * modification, are permitted provided that the following conditions 11 * are met: 12 * 1. Redistributions of source code must retain the above copyright 13 * notice, this list of conditions and the following disclaimer. 14 * 2. Redistributions in binary form must reproduce the above copyright 15 * notice, this list of conditions and the following disclaimer in the 16 * documentation and/or other materials provided with the distribution. 17 * 3. All advertising materials mentioning features or use of this software 18 * must display the following acknowledgement: 19 * This product includes software developed by Niels Provos. 20 * 4. The name of the author may not be used to endorse or promote products 21 * derived from this software without specific prior written permission. 22 * 23 * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR 24 * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES 25 * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. 26 * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT, 27 * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT 28 * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, 29 * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY 30 * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT 31 * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF 32 * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. 33 */ 34 35 /* 36 * This code is derived from section 14.3 and the given source 37 * in section V of Applied Cryptography, second edition. 38 * Blowfish is an unpatented fast block cipher designed by 39 * Bruce Schneier. 40 */ 41 42 #if 0 43 #include <stdio.h> /* used for debugging */ 44 #include <string.h> 45 #endif 46 47 #include <sys/types.h> 48 #include <blf.h> 49 50 #undef inline 51 #ifdef __GNUC__ 52 #define inline __inline 53 #else /* !__GNUC__ */ 54 #define inline 55 #endif /* !__GNUC__ */ 56 57 /* Function for Feistel Networks */ 58 59 #define F(s, x) ((((s)[ (((x)>>24)&0xFF)] \ 60 + (s)[0x100 + (((x)>>16)&0xFF)]) \ 61 ^ (s)[0x200 + (((x)>> 8)&0xFF)]) \ 62 + (s)[0x300 + ( (x) &0xFF)]) 63 64 #define BLFRND(s,p,i,j,n) (i ^= F(s,j) ^ (p)[n]) 65 66 void 67 Blowfish_encipher(c, xl, xr) 68 blf_ctx *c; 69 u_int32_t *xl; 70 u_int32_t *xr; 71 { 72 u_int32_t Xl; 73 u_int32_t Xr; 74 u_int32_t *s = c->S[0]; 75 u_int32_t *p = c->P; 76 77 Xl = *xl; 78 Xr = *xr; 79 80 Xl ^= p[0]; 81 BLFRND(s, p, Xr, Xl, 1); BLFRND(s, p, Xl, Xr, 2); 82 BLFRND(s, p, Xr, Xl, 3); BLFRND(s, p, Xl, Xr, 4); 83 BLFRND(s, p, Xr, Xl, 5); BLFRND(s, p, Xl, Xr, 6); 84 BLFRND(s, p, Xr, Xl, 7); BLFRND(s, p, Xl, Xr, 8); 85 BLFRND(s, p, Xr, Xl, 9); BLFRND(s, p, Xl, Xr, 10); 86 BLFRND(s, p, Xr, Xl, 11); BLFRND(s, p, Xl, Xr, 12); 87 BLFRND(s, p, Xr, Xl, 13); BLFRND(s, p, Xl, Xr, 14); 88 BLFRND(s, p, Xr, Xl, 15); BLFRND(s, p, Xl, Xr, 16); 89 90 *xl = Xr ^ p[17]; 91 *xr = Xl; 92 } 93 94 void 95 Blowfish_decipher(c, xl, xr) 96 blf_ctx *c; 97 u_int32_t *xl; 98 u_int32_t *xr; 99 { 100 u_int32_t Xl; 101 u_int32_t Xr; 102 u_int32_t *s = c->S[0]; 103 u_int32_t *p = c->P; 104 105 Xl = *xl; 106 Xr = *xr; 107 108 Xl ^= p[17]; 109 BLFRND(s, p, Xr, Xl, 16); BLFRND(s, p, Xl, Xr, 15); 110 BLFRND(s, p, Xr, Xl, 14); BLFRND(s, p, Xl, Xr, 13); 111 BLFRND(s, p, Xr, Xl, 12); BLFRND(s, p, Xl, Xr, 11); 112 BLFRND(s, p, Xr, Xl, 10); BLFRND(s, p, Xl, Xr, 9); 113 BLFRND(s, p, Xr, Xl, 8); BLFRND(s, p, Xl, Xr, 7); 114 BLFRND(s, p, Xr, Xl, 6); BLFRND(s, p, Xl, Xr, 5); 115 BLFRND(s, p, Xr, Xl, 4); BLFRND(s, p, Xl, Xr, 3); 116 BLFRND(s, p, Xr, Xl, 2); BLFRND(s, p, Xl, Xr, 1); 117 118 *xl = Xr ^ p[0]; 119 *xr = Xl; 120 } 121 122 void 123 Blowfish_initstate(c) 124 blf_ctx *c; 125 { 126 127 /* P-box and S-box tables initialized with digits of Pi */ 128 129 const blf_ctx initstate = 130 131 { { 132 { 133 0xd1310ba6, 0x98dfb5ac, 0x2ffd72db, 0xd01adfb7, 134 0xb8e1afed, 0x6a267e96, 0xba7c9045, 0xf12c7f99, 135 0x24a19947, 0xb3916cf7, 0x0801f2e2, 0x858efc16, 136 0x636920d8, 0x71574e69, 0xa458fea3, 0xf4933d7e, 137 0x0d95748f, 0x728eb658, 0x718bcd58, 0x82154aee, 138 0x7b54a41d, 0xc25a59b5, 0x9c30d539, 0x2af26013, 139 0xc5d1b023, 0x286085f0, 0xca417918, 0xb8db38ef, 140 0x8e79dcb0, 0x603a180e, 0x6c9e0e8b, 0xb01e8a3e, 141 0xd71577c1, 0xbd314b27, 0x78af2fda, 0x55605c60, 142 0xe65525f3, 0xaa55ab94, 0x57489862, 0x63e81440, 143 0x55ca396a, 0x2aab10b6, 0xb4cc5c34, 0x1141e8ce, 144 0xa15486af, 0x7c72e993, 0xb3ee1411, 0x636fbc2a, 145 0x2ba9c55d, 0x741831f6, 0xce5c3e16, 0x9b87931e, 146 0xafd6ba33, 0x6c24cf5c, 0x7a325381, 0x28958677, 147 0x3b8f4898, 0x6b4bb9af, 0xc4bfe81b, 0x66282193, 148 0x61d809cc, 0xfb21a991, 0x487cac60, 0x5dec8032, 149 0xef845d5d, 0xe98575b1, 0xdc262302, 0xeb651b88, 150 0x23893e81, 0xd396acc5, 0x0f6d6ff3, 0x83f44239, 151 0x2e0b4482, 0xa4842004, 0x69c8f04a, 0x9e1f9b5e, 152 0x21c66842, 0xf6e96c9a, 0x670c9c61, 0xabd388f0, 153 0x6a51a0d2, 0xd8542f68, 0x960fa728, 0xab5133a3, 154 0x6eef0b6c, 0x137a3be4, 0xba3bf050, 0x7efb2a98, 155 0xa1f1651d, 0x39af0176, 0x66ca593e, 0x82430e88, 156 0x8cee8619, 0x456f9fb4, 0x7d84a5c3, 0x3b8b5ebe, 157 0xe06f75d8, 0x85c12073, 0x401a449f, 0x56c16aa6, 158 0x4ed3aa62, 0x363f7706, 0x1bfedf72, 0x429b023d, 159 0x37d0d724, 0xd00a1248, 0xdb0fead3, 0x49f1c09b, 160 0x075372c9, 0x80991b7b, 0x25d479d8, 0xf6e8def7, 161 0xe3fe501a, 0xb6794c3b, 0x976ce0bd, 0x04c006ba, 162 0xc1a94fb6, 0x409f60c4, 0x5e5c9ec2, 0x196a2463, 163 0x68fb6faf, 0x3e6c53b5, 0x1339b2eb, 0x3b52ec6f, 164 0x6dfc511f, 0x9b30952c, 0xcc814544, 0xaf5ebd09, 165 0xbee3d004, 0xde334afd, 0x660f2807, 0x192e4bb3, 166 0xc0cba857, 0x45c8740f, 0xd20b5f39, 0xb9d3fbdb, 167 0x5579c0bd, 0x1a60320a, 0xd6a100c6, 0x402c7279, 168 0x679f25fe, 0xfb1fa3cc, 0x8ea5e9f8, 0xdb3222f8, 169 0x3c7516df, 0xfd616b15, 0x2f501ec8, 0xad0552ab, 170 0x323db5fa, 0xfd238760, 0x53317b48, 0x3e00df82, 171 0x9e5c57bb, 0xca6f8ca0, 0x1a87562e, 0xdf1769db, 172 0xd542a8f6, 0x287effc3, 0xac6732c6, 0x8c4f5573, 173 0x695b27b0, 0xbbca58c8, 0xe1ffa35d, 0xb8f011a0, 174 0x10fa3d98, 0xfd2183b8, 0x4afcb56c, 0x2dd1d35b, 175 0x9a53e479, 0xb6f84565, 0xd28e49bc, 0x4bfb9790, 176 0xe1ddf2da, 0xa4cb7e33, 0x62fb1341, 0xcee4c6e8, 177 0xef20cada, 0x36774c01, 0xd07e9efe, 0x2bf11fb4, 178 0x95dbda4d, 0xae909198, 0xeaad8e71, 0x6b93d5a0, 179 0xd08ed1d0, 0xafc725e0, 0x8e3c5b2f, 0x8e7594b7, 180 0x8ff6e2fb, 0xf2122b64, 0x8888b812, 0x900df01c, 181 0x4fad5ea0, 0x688fc31c, 0xd1cff191, 0xb3a8c1ad, 182 0x2f2f2218, 0xbe0e1777, 0xea752dfe, 0x8b021fa1, 183 0xe5a0cc0f, 0xb56f74e8, 0x18acf3d6, 0xce89e299, 184 0xb4a84fe0, 0xfd13e0b7, 0x7cc43b81, 0xd2ada8d9, 185 0x165fa266, 0x80957705, 0x93cc7314, 0x211a1477, 186 0xe6ad2065, 0x77b5fa86, 0xc75442f5, 0xfb9d35cf, 187 0xebcdaf0c, 0x7b3e89a0, 0xd6411bd3, 0xae1e7e49, 188 0x00250e2d, 0x2071b35e, 0x226800bb, 0x57b8e0af, 189 0x2464369b, 0xf009b91e, 0x5563911d, 0x59dfa6aa, 190 0x78c14389, 0xd95a537f, 0x207d5ba2, 0x02e5b9c5, 191 0x83260376, 0x6295cfa9, 0x11c81968, 0x4e734a41, 192 0xb3472dca, 0x7b14a94a, 0x1b510052, 0x9a532915, 193 0xd60f573f, 0xbc9bc6e4, 0x2b60a476, 0x81e67400, 194 0x08ba6fb5, 0x571be91f, 0xf296ec6b, 0x2a0dd915, 195 0xb6636521, 0xe7b9f9b6, 0xff34052e, 0xc5855664, 196 0x53b02d5d, 0xa99f8fa1, 0x08ba4799, 0x6e85076a}, 197 { 198 0x4b7a70e9, 0xb5b32944, 0xdb75092e, 0xc4192623, 199 0xad6ea6b0, 0x49a7df7d, 0x9cee60b8, 0x8fedb266, 200 0xecaa8c71, 0x699a17ff, 0x5664526c, 0xc2b19ee1, 201 0x193602a5, 0x75094c29, 0xa0591340, 0xe4183a3e, 202 0x3f54989a, 0x5b429d65, 0x6b8fe4d6, 0x99f73fd6, 203 0xa1d29c07, 0xefe830f5, 0x4d2d38e6, 0xf0255dc1, 204 0x4cdd2086, 0x8470eb26, 0x6382e9c6, 0x021ecc5e, 205 0x09686b3f, 0x3ebaefc9, 0x3c971814, 0x6b6a70a1, 206 0x687f3584, 0x52a0e286, 0xb79c5305, 0xaa500737, 207 0x3e07841c, 0x7fdeae5c, 0x8e7d44ec, 0x5716f2b8, 208 0xb03ada37, 0xf0500c0d, 0xf01c1f04, 0x0200b3ff, 209 0xae0cf51a, 0x3cb574b2, 0x25837a58, 0xdc0921bd, 210 0xd19113f9, 0x7ca92ff6, 0x94324773, 0x22f54701, 211 0x3ae5e581, 0x37c2dadc, 0xc8b57634, 0x9af3dda7, 212 0xa9446146, 0x0fd0030e, 0xecc8c73e, 0xa4751e41, 213 0xe238cd99, 0x3bea0e2f, 0x3280bba1, 0x183eb331, 214 0x4e548b38, 0x4f6db908, 0x6f420d03, 0xf60a04bf, 215 0x2cb81290, 0x24977c79, 0x5679b072, 0xbcaf89af, 216 0xde9a771f, 0xd9930810, 0xb38bae12, 0xdccf3f2e, 217 0x5512721f, 0x2e6b7124, 0x501adde6, 0x9f84cd87, 218 0x7a584718, 0x7408da17, 0xbc9f9abc, 0xe94b7d8c, 219 0xec7aec3a, 0xdb851dfa, 0x63094366, 0xc464c3d2, 220 0xef1c1847, 0x3215d908, 0xdd433b37, 0x24c2ba16, 221 0x12a14d43, 0x2a65c451, 0x50940002, 0x133ae4dd, 222 0x71dff89e, 0x10314e55, 0x81ac77d6, 0x5f11199b, 223 0x043556f1, 0xd7a3c76b, 0x3c11183b, 0x5924a509, 224 0xf28fe6ed, 0x97f1fbfa, 0x9ebabf2c, 0x1e153c6e, 225 0x86e34570, 0xeae96fb1, 0x860e5e0a, 0x5a3e2ab3, 226 0x771fe71c, 0x4e3d06fa, 0x2965dcb9, 0x99e71d0f, 227 0x803e89d6, 0x5266c825, 0x2e4cc978, 0x9c10b36a, 228 0xc6150eba, 0x94e2ea78, 0xa5fc3c53, 0x1e0a2df4, 229 0xf2f74ea7, 0x361d2b3d, 0x1939260f, 0x19c27960, 230 0x5223a708, 0xf71312b6, 0xebadfe6e, 0xeac31f66, 231 0xe3bc4595, 0xa67bc883, 0xb17f37d1, 0x018cff28, 232 0xc332ddef, 0xbe6c5aa5, 0x65582185, 0x68ab9802, 233 0xeecea50f, 0xdb2f953b, 0x2aef7dad, 0x5b6e2f84, 234 0x1521b628, 0x29076170, 0xecdd4775, 0x619f1510, 235 0x13cca830, 0xeb61bd96, 0x0334fe1e, 0xaa0363cf, 236 0xb5735c90, 0x4c70a239, 0xd59e9e0b, 0xcbaade14, 237 0xeecc86bc, 0x60622ca7, 0x9cab5cab, 0xb2f3846e, 238 0x648b1eaf, 0x19bdf0ca, 0xa02369b9, 0x655abb50, 239 0x40685a32, 0x3c2ab4b3, 0x319ee9d5, 0xc021b8f7, 240 0x9b540b19, 0x875fa099, 0x95f7997e, 0x623d7da8, 241 0xf837889a, 0x97e32d77, 0x11ed935f, 0x16681281, 242 0x0e358829, 0xc7e61fd6, 0x96dedfa1, 0x7858ba99, 243 0x57f584a5, 0x1b227263, 0x9b83c3ff, 0x1ac24696, 244 0xcdb30aeb, 0x532e3054, 0x8fd948e4, 0x6dbc3128, 245 0x58ebf2ef, 0x34c6ffea, 0xfe28ed61, 0xee7c3c73, 246 0x5d4a14d9, 0xe864b7e3, 0x42105d14, 0x203e13e0, 247 0x45eee2b6, 0xa3aaabea, 0xdb6c4f15, 0xfacb4fd0, 248 0xc742f442, 0xef6abbb5, 0x654f3b1d, 0x41cd2105, 249 0xd81e799e, 0x86854dc7, 0xe44b476a, 0x3d816250, 250 0xcf62a1f2, 0x5b8d2646, 0xfc8883a0, 0xc1c7b6a3, 251 0x7f1524c3, 0x69cb7492, 0x47848a0b, 0x5692b285, 252 0x095bbf00, 0xad19489d, 0x1462b174, 0x23820e00, 253 0x58428d2a, 0x0c55f5ea, 0x1dadf43e, 0x233f7061, 254 0x3372f092, 0x8d937e41, 0xd65fecf1, 0x6c223bdb, 255 0x7cde3759, 0xcbee7460, 0x4085f2a7, 0xce77326e, 256 0xa6078084, 0x19f8509e, 0xe8efd855, 0x61d99735, 257 0xa969a7aa, 0xc50c06c2, 0x5a04abfc, 0x800bcadc, 258 0x9e447a2e, 0xc3453484, 0xfdd56705, 0x0e1e9ec9, 259 0xdb73dbd3, 0x105588cd, 0x675fda79, 0xe3674340, 260 0xc5c43465, 0x713e38d8, 0x3d28f89e, 0xf16dff20, 261 0x153e21e7, 0x8fb03d4a, 0xe6e39f2b, 0xdb83adf7}, 262 { 263 0xe93d5a68, 0x948140f7, 0xf64c261c, 0x94692934, 264 0x411520f7, 0x7602d4f7, 0xbcf46b2e, 0xd4a20068, 265 0xd4082471, 0x3320f46a, 0x43b7d4b7, 0x500061af, 266 0x1e39f62e, 0x97244546, 0x14214f74, 0xbf8b8840, 267 0x4d95fc1d, 0x96b591af, 0x70f4ddd3, 0x66a02f45, 268 0xbfbc09ec, 0x03bd9785, 0x7fac6dd0, 0x31cb8504, 269 0x96eb27b3, 0x55fd3941, 0xda2547e6, 0xabca0a9a, 270 0x28507825, 0x530429f4, 0x0a2c86da, 0xe9b66dfb, 271 0x68dc1462, 0xd7486900, 0x680ec0a4, 0x27a18dee, 272 0x4f3ffea2, 0xe887ad8c, 0xb58ce006, 0x7af4d6b6, 273 0xaace1e7c, 0xd3375fec, 0xce78a399, 0x406b2a42, 274 0x20fe9e35, 0xd9f385b9, 0xee39d7ab, 0x3b124e8b, 275 0x1dc9faf7, 0x4b6d1856, 0x26a36631, 0xeae397b2, 276 0x3a6efa74, 0xdd5b4332, 0x6841e7f7, 0xca7820fb, 277 0xfb0af54e, 0xd8feb397, 0x454056ac, 0xba489527, 278 0x55533a3a, 0x20838d87, 0xfe6ba9b7, 0xd096954b, 279 0x55a867bc, 0xa1159a58, 0xcca92963, 0x99e1db33, 280 0xa62a4a56, 0x3f3125f9, 0x5ef47e1c, 0x9029317c, 281 0xfdf8e802, 0x04272f70, 0x80bb155c, 0x05282ce3, 282 0x95c11548, 0xe4c66d22, 0x48c1133f, 0xc70f86dc, 283 0x07f9c9ee, 0x41041f0f, 0x404779a4, 0x5d886e17, 284 0x325f51eb, 0xd59bc0d1, 0xf2bcc18f, 0x41113564, 285 0x257b7834, 0x602a9c60, 0xdff8e8a3, 0x1f636c1b, 286 0x0e12b4c2, 0x02e1329e, 0xaf664fd1, 0xcad18115, 287 0x6b2395e0, 0x333e92e1, 0x3b240b62, 0xeebeb922, 288 0x85b2a20e, 0xe6ba0d99, 0xde720c8c, 0x2da2f728, 289 0xd0127845, 0x95b794fd, 0x647d0862, 0xe7ccf5f0, 290 0x5449a36f, 0x877d48fa, 0xc39dfd27, 0xf33e8d1e, 291 0x0a476341, 0x992eff74, 0x3a6f6eab, 0xf4f8fd37, 292 0xa812dc60, 0xa1ebddf8, 0x991be14c, 0xdb6e6b0d, 293 0xc67b5510, 0x6d672c37, 0x2765d43b, 0xdcd0e804, 294 0xf1290dc7, 0xcc00ffa3, 0xb5390f92, 0x690fed0b, 295 0x667b9ffb, 0xcedb7d9c, 0xa091cf0b, 0xd9155ea3, 296 0xbb132f88, 0x515bad24, 0x7b9479bf, 0x763bd6eb, 297 0x37392eb3, 0xcc115979, 0x8026e297, 0xf42e312d, 298 0x6842ada7, 0xc66a2b3b, 0x12754ccc, 0x782ef11c, 299 0x6a124237, 0xb79251e7, 0x06a1bbe6, 0x4bfb6350, 300 0x1a6b1018, 0x11caedfa, 0x3d25bdd8, 0xe2e1c3c9, 301 0x44421659, 0x0a121386, 0xd90cec6e, 0xd5abea2a, 302 0x64af674e, 0xda86a85f, 0xbebfe988, 0x64e4c3fe, 303 0x9dbc8057, 0xf0f7c086, 0x60787bf8, 0x6003604d, 304 0xd1fd8346, 0xf6381fb0, 0x7745ae04, 0xd736fccc, 305 0x83426b33, 0xf01eab71, 0xb0804187, 0x3c005e5f, 306 0x77a057be, 0xbde8ae24, 0x55464299, 0xbf582e61, 307 0x4e58f48f, 0xf2ddfda2, 0xf474ef38, 0x8789bdc2, 308 0x5366f9c3, 0xc8b38e74, 0xb475f255, 0x46fcd9b9, 309 0x7aeb2661, 0x8b1ddf84, 0x846a0e79, 0x915f95e2, 310 0x466e598e, 0x20b45770, 0x8cd55591, 0xc902de4c, 311 0xb90bace1, 0xbb8205d0, 0x11a86248, 0x7574a99e, 312 0xb77f19b6, 0xe0a9dc09, 0x662d09a1, 0xc4324633, 313 0xe85a1f02, 0x09f0be8c, 0x4a99a025, 0x1d6efe10, 314 0x1ab93d1d, 0x0ba5a4df, 0xa186f20f, 0x2868f169, 315 0xdcb7da83, 0x573906fe, 0xa1e2ce9b, 0x4fcd7f52, 316 0x50115e01, 0xa70683fa, 0xa002b5c4, 0x0de6d027, 317 0x9af88c27, 0x773f8641, 0xc3604c06, 0x61a806b5, 318 0xf0177a28, 0xc0f586e0, 0x006058aa, 0x30dc7d62, 319 0x11e69ed7, 0x2338ea63, 0x53c2dd94, 0xc2c21634, 320 0xbbcbee56, 0x90bcb6de, 0xebfc7da1, 0xce591d76, 321 0x6f05e409, 0x4b7c0188, 0x39720a3d, 0x7c927c24, 322 0x86e3725f, 0x724d9db9, 0x1ac15bb4, 0xd39eb8fc, 323 0xed545578, 0x08fca5b5, 0xd83d7cd3, 0x4dad0fc4, 324 0x1e50ef5e, 0xb161e6f8, 0xa28514d9, 0x6c51133c, 325 0x6fd5c7e7, 0x56e14ec4, 0x362abfce, 0xddc6c837, 326 0xd79a3234, 0x92638212, 0x670efa8e, 0x406000e0}, 327 { 328 0x3a39ce37, 0xd3faf5cf, 0xabc27737, 0x5ac52d1b, 329 0x5cb0679e, 0x4fa33742, 0xd3822740, 0x99bc9bbe, 330 0xd5118e9d, 0xbf0f7315, 0xd62d1c7e, 0xc700c47b, 331 0xb78c1b6b, 0x21a19045, 0xb26eb1be, 0x6a366eb4, 332 0x5748ab2f, 0xbc946e79, 0xc6a376d2, 0x6549c2c8, 333 0x530ff8ee, 0x468dde7d, 0xd5730a1d, 0x4cd04dc6, 334 0x2939bbdb, 0xa9ba4650, 0xac9526e8, 0xbe5ee304, 335 0xa1fad5f0, 0x6a2d519a, 0x63ef8ce2, 0x9a86ee22, 336 0xc089c2b8, 0x43242ef6, 0xa51e03aa, 0x9cf2d0a4, 337 0x83c061ba, 0x9be96a4d, 0x8fe51550, 0xba645bd6, 338 0x2826a2f9, 0xa73a3ae1, 0x4ba99586, 0xef5562e9, 339 0xc72fefd3, 0xf752f7da, 0x3f046f69, 0x77fa0a59, 340 0x80e4a915, 0x87b08601, 0x9b09e6ad, 0x3b3ee593, 341 0xe990fd5a, 0x9e34d797, 0x2cf0b7d9, 0x022b8b51, 342 0x96d5ac3a, 0x017da67d, 0xd1cf3ed6, 0x7c7d2d28, 343 0x1f9f25cf, 0xadf2b89b, 0x5ad6b472, 0x5a88f54c, 344 0xe029ac71, 0xe019a5e6, 0x47b0acfd, 0xed93fa9b, 345 0xe8d3c48d, 0x283b57cc, 0xf8d56629, 0x79132e28, 346 0x785f0191, 0xed756055, 0xf7960e44, 0xe3d35e8c, 347 0x15056dd4, 0x88f46dba, 0x03a16125, 0x0564f0bd, 348 0xc3eb9e15, 0x3c9057a2, 0x97271aec, 0xa93a072a, 349 0x1b3f6d9b, 0x1e6321f5, 0xf59c66fb, 0x26dcf319, 350 0x7533d928, 0xb155fdf5, 0x03563482, 0x8aba3cbb, 351 0x28517711, 0xc20ad9f8, 0xabcc5167, 0xccad925f, 352 0x4de81751, 0x3830dc8e, 0x379d5862, 0x9320f991, 353 0xea7a90c2, 0xfb3e7bce, 0x5121ce64, 0x774fbe32, 354 0xa8b6e37e, 0xc3293d46, 0x48de5369, 0x6413e680, 355 0xa2ae0810, 0xdd6db224, 0x69852dfd, 0x09072166, 356 0xb39a460a, 0x6445c0dd, 0x586cdecf, 0x1c20c8ae, 357 0x5bbef7dd, 0x1b588d40, 0xccd2017f, 0x6bb4e3bb, 358 0xdda26a7e, 0x3a59ff45, 0x3e350a44, 0xbcb4cdd5, 359 0x72eacea8, 0xfa6484bb, 0x8d6612ae, 0xbf3c6f47, 360 0xd29be463, 0x542f5d9e, 0xaec2771b, 0xf64e6370, 361 0x740e0d8d, 0xe75b1357, 0xf8721671, 0xaf537d5d, 362 0x4040cb08, 0x4eb4e2cc, 0x34d2466a, 0x0115af84, 363 0xe1b00428, 0x95983a1d, 0x06b89fb4, 0xce6ea048, 364 0x6f3f3b82, 0x3520ab82, 0x011a1d4b, 0x277227f8, 365 0x611560b1, 0xe7933fdc, 0xbb3a792b, 0x344525bd, 366 0xa08839e1, 0x51ce794b, 0x2f32c9b7, 0xa01fbac9, 367 0xe01cc87e, 0xbcc7d1f6, 0xcf0111c3, 0xa1e8aac7, 368 0x1a908749, 0xd44fbd9a, 0xd0dadecb, 0xd50ada38, 369 0x0339c32a, 0xc6913667, 0x8df9317c, 0xe0b12b4f, 370 0xf79e59b7, 0x43f5bb3a, 0xf2d519ff, 0x27d9459c, 371 0xbf97222c, 0x15e6fc2a, 0x0f91fc71, 0x9b941525, 372 0xfae59361, 0xceb69ceb, 0xc2a86459, 0x12baa8d1, 373 0xb6c1075e, 0xe3056a0c, 0x10d25065, 0xcb03a442, 374 0xe0ec6e0e, 0x1698db3b, 0x4c98a0be, 0x3278e964, 375 0x9f1f9532, 0xe0d392df, 0xd3a0342b, 0x8971f21e, 376 0x1b0a7441, 0x4ba3348c, 0xc5be7120, 0xc37632d8, 377 0xdf359f8d, 0x9b992f2e, 0xe60b6f47, 0x0fe3f11d, 378 0xe54cda54, 0x1edad891, 0xce6279cf, 0xcd3e7e6f, 379 0x1618b166, 0xfd2c1d05, 0x848fd2c5, 0xf6fb2299, 380 0xf523f357, 0xa6327623, 0x93a83531, 0x56cccd02, 381 0xacf08162, 0x5a75ebb5, 0x6e163697, 0x88d273cc, 382 0xde966292, 0x81b949d0, 0x4c50901b, 0x71c65614, 383 0xe6c6c7bd, 0x327a140a, 0x45e1d006, 0xc3f27b9a, 384 0xc9aa53fd, 0x62a80f00, 0xbb25bfe2, 0x35bdd2f6, 385 0x71126905, 0xb2040222, 0xb6cbcf7c, 0xcd769c2b, 386 0x53113ec0, 0x1640e3d3, 0x38abbd60, 0x2547adf0, 387 0xba38209c, 0xf746ce76, 0x77afa1c5, 0x20756060, 388 0x85cbfe4e, 0x8ae88dd8, 0x7aaaf9b0, 0x4cf9aa7e, 389 0x1948c25c, 0x02fb8a8c, 0x01c36ae4, 0xd6ebe1f9, 390 0x90d4f869, 0xa65cdea0, 0x3f09252d, 0xc208e69f, 391 0xb74e6132, 0xce77e25b, 0x578fdfe3, 0x3ac372e6} 392 }, 393 { 394 0x243f6a88, 0x85a308d3, 0x13198a2e, 0x03707344, 395 0xa4093822, 0x299f31d0, 0x082efa98, 0xec4e6c89, 396 0x452821e6, 0x38d01377, 0xbe5466cf, 0x34e90c6c, 397 0xc0ac29b7, 0xc97c50dd, 0x3f84d5b5, 0xb5470917, 398 0x9216d5d9, 0x8979fb1b 399 } }; 400 401 *c = initstate; 402 403 } 404 405 #ifdef __STDC__ 406 u_int32_t 407 Blowfish_stream2word(const u_int8_t *data, u_int16_t databytes, u_int16_t *current) 408 #else 409 u_int32_t 410 Blowfish_stream2word(data, databytes, current) 411 const u_int8_t *data; 412 u_int16_t databytes; 413 u_int16_t *current; 414 #endif 415 { 416 u_int8_t i; 417 u_int16_t j; 418 u_int32_t temp; 419 420 temp = 0x00000000; 421 j = *current; 422 423 for (i = 0; i < 4; i++, j++) { 424 if (j >= databytes) 425 j = 0; 426 temp = (temp << 8) | data[j]; 427 } 428 429 *current = j; 430 return temp; 431 } 432 433 #if __STDC__ 434 void 435 Blowfish_expand0state(blf_ctx *c, const u_int8_t *key, u_int16_t keybytes) 436 #else 437 void 438 Blowfish_expand0state(c, key, keybytes) 439 blf_ctx *c; 440 const u_int8_t *key; 441 u_int16_t keybytes; 442 #endif 443 { 444 u_int16_t i; 445 u_int16_t j; 446 u_int16_t k; 447 u_int32_t temp; 448 u_int32_t datal; 449 u_int32_t datar; 450 451 j = 0; 452 for (i = 0; i < BLF_N + 2; i++) { 453 /* Extract 4 int8 to 1 int32 from keystream */ 454 temp = Blowfish_stream2word(key, keybytes, &j); 455 c->P[i] = c->P[i] ^ temp; 456 } 457 458 j = 0; 459 datal = 0x00000000; 460 datar = 0x00000000; 461 for (i = 0; i < BLF_N + 2; i += 2) { 462 Blowfish_encipher(c, &datal, &datar); 463 464 c->P[i] = datal; 465 c->P[i + 1] = datar; 466 } 467 468 for (i = 0; i < 4; i++) { 469 for (k = 0; k < 256; k += 2) { 470 Blowfish_encipher(c, &datal, &datar); 471 472 c->S[i][k] = datal; 473 c->S[i][k + 1] = datar; 474 } 475 } 476 } 477 478 479 #if __STDC__ 480 void 481 Blowfish_expandstate(blf_ctx *c, const u_int8_t *data, u_int16_t databytes, 482 const u_int8_t *key, u_int16_t keybytes) 483 #else 484 void 485 Blowfish_expandstate(c, data, databytes, key, keybytes) 486 blf_ctx *c; 487 const u_int8_t *data; 488 u_int16_t databytes; 489 const u_int8_t *key; 490 u_int16_t keybytes; 491 #endif 492 { 493 u_int16_t i; 494 u_int16_t j; 495 u_int16_t k; 496 u_int32_t temp; 497 u_int32_t datal; 498 u_int32_t datar; 499 500 j = 0; 501 for (i = 0; i < BLF_N + 2; i++) { 502 /* Extract 4 int8 to 1 int32 from keystream */ 503 temp = Blowfish_stream2word(key, keybytes, &j); 504 c->P[i] = c->P[i] ^ temp; 505 } 506 507 j = 0; 508 datal = 0x00000000; 509 datar = 0x00000000; 510 for (i = 0; i < BLF_N + 2; i += 2) { 511 datal ^= Blowfish_stream2word(data, databytes, &j); 512 datar ^= Blowfish_stream2word(data, databytes, &j); 513 Blowfish_encipher(c, &datal, &datar); 514 515 c->P[i] = datal; 516 c->P[i + 1] = datar; 517 } 518 519 for (i = 0; i < 4; i++) { 520 for (k = 0; k < 256; k += 2) { 521 datal ^= Blowfish_stream2word(data, databytes, &j); 522 datar ^= Blowfish_stream2word(data, databytes, &j); 523 Blowfish_encipher(c, &datal, &datar); 524 525 c->S[i][k] = datal; 526 c->S[i][k + 1] = datar; 527 } 528 } 529 530 } 531 532 #if __STDC__ 533 void 534 blf_key(blf_ctx *c, const u_int8_t *k, u_int16_t len) 535 #else 536 void 537 blf_key(c, k, len) 538 blf_ctx *c; 539 const u_int8_t *k; 540 u_int16_t len; 541 #endif 542 { 543 /* Initialize S-boxes and subkeys with Pi */ 544 Blowfish_initstate(c); 545 546 /* Transform S-boxes and subkeys with key */ 547 Blowfish_expand0state(c, k, len); 548 } 549 550 #if __STDC__ 551 void 552 blf_enc(blf_ctx *c, u_int32_t *data, u_int16_t blocks) 553 #else 554 void 555 blf_enc(c, data, blocks) 556 blf_ctx *c; 557 u_int32_t *data; 558 u_int16_t blocks; 559 #endif 560 { 561 u_int32_t *d; 562 u_int16_t i; 563 564 d = data; 565 for (i = 0; i < blocks; i++) { 566 Blowfish_encipher(c, d, d + 1); 567 d += 2; 568 } 569 } 570 571 #if __STDC__ 572 void 573 blf_dec(blf_ctx *c, u_int32_t *data, u_int16_t blocks) 574 #else 575 void 576 blf_dec(c, data, blocks) 577 blf_ctx *c; 578 u_int32_t *data; 579 u_int16_t blocks; 580 #endif 581 { 582 u_int32_t *d; 583 u_int16_t i; 584 585 d = data; 586 for (i = 0; i < blocks; i++) { 587 Blowfish_decipher(c, d, d + 1); 588 d += 2; 589 } 590 } 591 592 #if __STDC__ 593 void 594 blf_ecb_encrypt(blf_ctx *c, u_int8_t *data, u_int32_t len) 595 #else 596 void 597 blf_ecb_encrypt(c, data, len) 598 blf_ctx *c; 599 u_int8_t *data; 600 u_int32_t len; 601 #endif 602 { 603 u_int32_t l, r; 604 u_int32_t i; 605 606 for (i = 0; i < len; i += 8) { 607 l = data[0] << 24 | data[1] << 16 | data[2] << 8 | data[3]; 608 r = data[4] << 24 | data[5] << 16 | data[6] << 8 | data[7]; 609 Blowfish_encipher(c, &l, &r); 610 data[0] = l >> 24 & 0xff; 611 data[1] = l >> 16 & 0xff; 612 data[2] = l >> 8 & 0xff; 613 data[3] = l & 0xff; 614 data[4] = r >> 24 & 0xff; 615 data[5] = r >> 16 & 0xff; 616 data[6] = r >> 8 & 0xff; 617 data[7] = r & 0xff; 618 data += 8; 619 } 620 } 621 622 #if __STDC__ 623 void 624 blf_ecb_decrypt(blf_ctx *c, u_int8_t *data, u_int32_t len) 625 #else 626 void 627 blf_ecb_decrypt(c, data, len) 628 blf_ctx *c; 629 u_int8_t *data; 630 u_int32_t len; 631 #endif 632 { 633 u_int32_t l, r; 634 u_int32_t i; 635 636 for (i = 0; i < len; i += 8) { 637 l = data[0] << 24 | data[1] << 16 | data[2] << 8 | data[3]; 638 r = data[4] << 24 | data[5] << 16 | data[6] << 8 | data[7]; 639 Blowfish_decipher(c, &l, &r); 640 data[0] = l >> 24 & 0xff; 641 data[1] = l >> 16 & 0xff; 642 data[2] = l >> 8 & 0xff; 643 data[3] = l & 0xff; 644 data[4] = r >> 24 & 0xff; 645 data[5] = r >> 16 & 0xff; 646 data[6] = r >> 8 & 0xff; 647 data[7] = r & 0xff; 648 data += 8; 649 } 650 } 651 652 #if __STDC__ 653 void 654 blf_cbc_encrypt(blf_ctx *c, u_int8_t *iv, u_int8_t *data, u_int32_t len) 655 #else 656 void 657 blf_cbc_encrypt(c, iv, data, len) 658 blf_ctx *c; 659 u_int8_t *iv; 660 u_int8_t *data; 661 u_int32_t len; 662 #endif 663 { 664 u_int32_t l, r; 665 u_int32_t i, j; 666 667 for (i = 0; i < len; i += 8) { 668 for (j = 0; j < 8; j++) 669 data[j] ^= iv[j]; 670 l = data[0] << 24 | data[1] << 16 | data[2] << 8 | data[3]; 671 r = data[4] << 24 | data[5] << 16 | data[6] << 8 | data[7]; 672 Blowfish_encipher(c, &l, &r); 673 data[0] = l >> 24 & 0xff; 674 data[1] = l >> 16 & 0xff; 675 data[2] = l >> 8 & 0xff; 676 data[3] = l & 0xff; 677 data[4] = r >> 24 & 0xff; 678 data[5] = r >> 16 & 0xff; 679 data[6] = r >> 8 & 0xff; 680 data[7] = r & 0xff; 681 iv = data; 682 data += 8; 683 } 684 } 685 686 #if __STDC__ 687 void 688 blf_cbc_decrypt(blf_ctx *c, u_int8_t *iva, u_int8_t *data, u_int32_t len) 689 #else 690 void 691 blf_cbc_decrypt(c, iva, data, len) 692 blf_ctx *c; 693 u_int8_t *iva; 694 u_int8_t *data; 695 u_int32_t len; 696 #endif 697 { 698 u_int32_t l, r; 699 u_int8_t *iv; 700 u_int32_t i, j; 701 702 iv = data + len - 16; 703 data = data + len - 8; 704 for (i = len - 8; i >= 8; i -= 8) { 705 l = data[0] << 24 | data[1] << 16 | data[2] << 8 | data[3]; 706 r = data[4] << 24 | data[5] << 16 | data[6] << 8 | data[7]; 707 Blowfish_decipher(c, &l, &r); 708 data[0] = l >> 24 & 0xff; 709 data[1] = l >> 16 & 0xff; 710 data[2] = l >> 8 & 0xff; 711 data[3] = l & 0xff; 712 data[4] = r >> 24 & 0xff; 713 data[5] = r >> 16 & 0xff; 714 data[6] = r >> 8 & 0xff; 715 data[7] = r & 0xff; 716 for (j = 0; j < 8; j++) 717 data[j] ^= iv[j]; 718 iv -= 8; 719 data -= 8; 720 } 721 l = data[0] << 24 | data[1] << 16 | data[2] << 8 | data[3]; 722 r = data[4] << 24 | data[5] << 16 | data[6] << 8 | data[7]; 723 Blowfish_decipher(c, &l, &r); 724 data[0] = l >> 24 & 0xff; 725 data[1] = l >> 16 & 0xff; 726 data[2] = l >> 8 & 0xff; 727 data[3] = l & 0xff; 728 data[4] = r >> 24 & 0xff; 729 data[5] = r >> 16 & 0xff; 730 data[6] = r >> 8 & 0xff; 731 data[7] = r & 0xff; 732 for (j = 0; j < 8; j++) 733 data[j] ^= iva[j]; 734 } 735 736 #if 0 737 void 738 report(u_int32_t data[], u_int16_t len) 739 { 740 u_int16_t i; 741 for (i = 0; i < len; i += 2) 742 printf("Block %0hd: %08lx %08lx.\n", 743 i / 2, data[i], data[i + 1]); 744 } 745 void 746 main(void) 747 { 748 749 blf_ctx c; 750 char key[] = "AAAAA"; 751 char key2[] = "abcdefghijklmnopqrstuvwxyz"; 752 753 u_int32_t data[10]; 754 u_int32_t data2[] = 755 {0x424c4f57l, 0x46495348l}; 756 757 u_int16_t i; 758 759 /* First test */ 760 for (i = 0; i < 10; i++) 761 data[i] = i; 762 763 blf_key(&c, (u_int8_t *) key, 5); 764 blf_enc(&c, data, 5); 765 blf_dec(&c, data, 1); 766 blf_dec(&c, data + 2, 4); 767 printf("Should read as 0 - 9.\n"); 768 report(data, 10); 769 770 /* Second test */ 771 blf_key(&c, (u_int8_t *) key2, strlen(key2)); 772 blf_enc(&c, data2, 1); 773 printf("\nShould read as: 0x324ed0fe 0xf413a203.\n"); 774 report(data2, 2); 775 blf_dec(&c, data2, 1); 776 report(data2, 2); 777 } 778 #endif 779