1e1051a39Sopenharmony_ci/* 2e1051a39Sopenharmony_ci * Copyright 1995-2020 The OpenSSL Project Authors. All Rights Reserved. 3e1051a39Sopenharmony_ci * 4e1051a39Sopenharmony_ci * Licensed under the Apache License 2.0 (the "License"). You may not use 5e1051a39Sopenharmony_ci * this file except in compliance with the License. You can obtain a copy 6e1051a39Sopenharmony_ci * in the file LICENSE in the source distribution or at 7e1051a39Sopenharmony_ci * https://www.openssl.org/source/license.html 8e1051a39Sopenharmony_ci */ 9e1051a39Sopenharmony_ci 10e1051a39Sopenharmony_ci/* 11e1051a39Sopenharmony_ci * RC5 low level APIs are deprecated for public use, but still ok for internal 12e1051a39Sopenharmony_ci * use. 13e1051a39Sopenharmony_ci */ 14e1051a39Sopenharmony_ci#include "internal/deprecated.h" 15e1051a39Sopenharmony_ci 16e1051a39Sopenharmony_ci#include <stdio.h> 17e1051a39Sopenharmony_ci#include <openssl/rc5.h> 18e1051a39Sopenharmony_ci#include "rc5_local.h" 19e1051a39Sopenharmony_ci 20e1051a39Sopenharmony_civoid RC5_32_cbc_encrypt(const unsigned char *in, unsigned char *out, 21e1051a39Sopenharmony_ci long length, RC5_32_KEY *ks, unsigned char *iv, 22e1051a39Sopenharmony_ci int encrypt) 23e1051a39Sopenharmony_ci{ 24e1051a39Sopenharmony_ci register unsigned long tin0, tin1; 25e1051a39Sopenharmony_ci register unsigned long tout0, tout1, xor0, xor1; 26e1051a39Sopenharmony_ci register long l = length; 27e1051a39Sopenharmony_ci unsigned long tin[2]; 28e1051a39Sopenharmony_ci 29e1051a39Sopenharmony_ci if (encrypt) { 30e1051a39Sopenharmony_ci c2l(iv, tout0); 31e1051a39Sopenharmony_ci c2l(iv, tout1); 32e1051a39Sopenharmony_ci iv -= 8; 33e1051a39Sopenharmony_ci for (l -= 8; l >= 0; l -= 8) { 34e1051a39Sopenharmony_ci c2l(in, tin0); 35e1051a39Sopenharmony_ci c2l(in, tin1); 36e1051a39Sopenharmony_ci tin0 ^= tout0; 37e1051a39Sopenharmony_ci tin1 ^= tout1; 38e1051a39Sopenharmony_ci tin[0] = tin0; 39e1051a39Sopenharmony_ci tin[1] = tin1; 40e1051a39Sopenharmony_ci RC5_32_encrypt(tin, ks); 41e1051a39Sopenharmony_ci tout0 = tin[0]; 42e1051a39Sopenharmony_ci l2c(tout0, out); 43e1051a39Sopenharmony_ci tout1 = tin[1]; 44e1051a39Sopenharmony_ci l2c(tout1, out); 45e1051a39Sopenharmony_ci } 46e1051a39Sopenharmony_ci if (l != -8) { 47e1051a39Sopenharmony_ci c2ln(in, tin0, tin1, l + 8); 48e1051a39Sopenharmony_ci tin0 ^= tout0; 49e1051a39Sopenharmony_ci tin1 ^= tout1; 50e1051a39Sopenharmony_ci tin[0] = tin0; 51e1051a39Sopenharmony_ci tin[1] = tin1; 52e1051a39Sopenharmony_ci RC5_32_encrypt(tin, ks); 53e1051a39Sopenharmony_ci tout0 = tin[0]; 54e1051a39Sopenharmony_ci l2c(tout0, out); 55e1051a39Sopenharmony_ci tout1 = tin[1]; 56e1051a39Sopenharmony_ci l2c(tout1, out); 57e1051a39Sopenharmony_ci } 58e1051a39Sopenharmony_ci l2c(tout0, iv); 59e1051a39Sopenharmony_ci l2c(tout1, iv); 60e1051a39Sopenharmony_ci } else { 61e1051a39Sopenharmony_ci c2l(iv, xor0); 62e1051a39Sopenharmony_ci c2l(iv, xor1); 63e1051a39Sopenharmony_ci iv -= 8; 64e1051a39Sopenharmony_ci for (l -= 8; l >= 0; l -= 8) { 65e1051a39Sopenharmony_ci c2l(in, tin0); 66e1051a39Sopenharmony_ci tin[0] = tin0; 67e1051a39Sopenharmony_ci c2l(in, tin1); 68e1051a39Sopenharmony_ci tin[1] = tin1; 69e1051a39Sopenharmony_ci RC5_32_decrypt(tin, ks); 70e1051a39Sopenharmony_ci tout0 = tin[0] ^ xor0; 71e1051a39Sopenharmony_ci tout1 = tin[1] ^ xor1; 72e1051a39Sopenharmony_ci l2c(tout0, out); 73e1051a39Sopenharmony_ci l2c(tout1, out); 74e1051a39Sopenharmony_ci xor0 = tin0; 75e1051a39Sopenharmony_ci xor1 = tin1; 76e1051a39Sopenharmony_ci } 77e1051a39Sopenharmony_ci if (l != -8) { 78e1051a39Sopenharmony_ci c2l(in, tin0); 79e1051a39Sopenharmony_ci tin[0] = tin0; 80e1051a39Sopenharmony_ci c2l(in, tin1); 81e1051a39Sopenharmony_ci tin[1] = tin1; 82e1051a39Sopenharmony_ci RC5_32_decrypt(tin, ks); 83e1051a39Sopenharmony_ci tout0 = tin[0] ^ xor0; 84e1051a39Sopenharmony_ci tout1 = tin[1] ^ xor1; 85e1051a39Sopenharmony_ci l2cn(tout0, tout1, out, l + 8); 86e1051a39Sopenharmony_ci xor0 = tin0; 87e1051a39Sopenharmony_ci xor1 = tin1; 88e1051a39Sopenharmony_ci } 89e1051a39Sopenharmony_ci l2c(xor0, iv); 90e1051a39Sopenharmony_ci l2c(xor1, iv); 91e1051a39Sopenharmony_ci } 92e1051a39Sopenharmony_ci tin0 = tin1 = tout0 = tout1 = xor0 = xor1 = 0; 93e1051a39Sopenharmony_ci tin[0] = tin[1] = 0; 94e1051a39Sopenharmony_ci} 95e1051a39Sopenharmony_ci 96e1051a39Sopenharmony_civoid RC5_32_encrypt(unsigned long *d, RC5_32_KEY *key) 97e1051a39Sopenharmony_ci{ 98e1051a39Sopenharmony_ci RC5_32_INT a, b, *s; 99e1051a39Sopenharmony_ci 100e1051a39Sopenharmony_ci s = key->data; 101e1051a39Sopenharmony_ci 102e1051a39Sopenharmony_ci a = d[0] + s[0]; 103e1051a39Sopenharmony_ci b = d[1] + s[1]; 104e1051a39Sopenharmony_ci E_RC5_32(a, b, s, 2); 105e1051a39Sopenharmony_ci E_RC5_32(a, b, s, 4); 106e1051a39Sopenharmony_ci E_RC5_32(a, b, s, 6); 107e1051a39Sopenharmony_ci E_RC5_32(a, b, s, 8); 108e1051a39Sopenharmony_ci E_RC5_32(a, b, s, 10); 109e1051a39Sopenharmony_ci E_RC5_32(a, b, s, 12); 110e1051a39Sopenharmony_ci E_RC5_32(a, b, s, 14); 111e1051a39Sopenharmony_ci E_RC5_32(a, b, s, 16); 112e1051a39Sopenharmony_ci if (key->rounds == 12) { 113e1051a39Sopenharmony_ci E_RC5_32(a, b, s, 18); 114e1051a39Sopenharmony_ci E_RC5_32(a, b, s, 20); 115e1051a39Sopenharmony_ci E_RC5_32(a, b, s, 22); 116e1051a39Sopenharmony_ci E_RC5_32(a, b, s, 24); 117e1051a39Sopenharmony_ci } else if (key->rounds == 16) { 118e1051a39Sopenharmony_ci /* Do a full expansion to avoid a jump */ 119e1051a39Sopenharmony_ci E_RC5_32(a, b, s, 18); 120e1051a39Sopenharmony_ci E_RC5_32(a, b, s, 20); 121e1051a39Sopenharmony_ci E_RC5_32(a, b, s, 22); 122e1051a39Sopenharmony_ci E_RC5_32(a, b, s, 24); 123e1051a39Sopenharmony_ci E_RC5_32(a, b, s, 26); 124e1051a39Sopenharmony_ci E_RC5_32(a, b, s, 28); 125e1051a39Sopenharmony_ci E_RC5_32(a, b, s, 30); 126e1051a39Sopenharmony_ci E_RC5_32(a, b, s, 32); 127e1051a39Sopenharmony_ci } 128e1051a39Sopenharmony_ci d[0] = a; 129e1051a39Sopenharmony_ci d[1] = b; 130e1051a39Sopenharmony_ci} 131e1051a39Sopenharmony_ci 132e1051a39Sopenharmony_civoid RC5_32_decrypt(unsigned long *d, RC5_32_KEY *key) 133e1051a39Sopenharmony_ci{ 134e1051a39Sopenharmony_ci RC5_32_INT a, b, *s; 135e1051a39Sopenharmony_ci 136e1051a39Sopenharmony_ci s = key->data; 137e1051a39Sopenharmony_ci 138e1051a39Sopenharmony_ci a = d[0]; 139e1051a39Sopenharmony_ci b = d[1]; 140e1051a39Sopenharmony_ci if (key->rounds == 16) { 141e1051a39Sopenharmony_ci D_RC5_32(a, b, s, 32); 142e1051a39Sopenharmony_ci D_RC5_32(a, b, s, 30); 143e1051a39Sopenharmony_ci D_RC5_32(a, b, s, 28); 144e1051a39Sopenharmony_ci D_RC5_32(a, b, s, 26); 145e1051a39Sopenharmony_ci /* Do a full expansion to avoid a jump */ 146e1051a39Sopenharmony_ci D_RC5_32(a, b, s, 24); 147e1051a39Sopenharmony_ci D_RC5_32(a, b, s, 22); 148e1051a39Sopenharmony_ci D_RC5_32(a, b, s, 20); 149e1051a39Sopenharmony_ci D_RC5_32(a, b, s, 18); 150e1051a39Sopenharmony_ci } else if (key->rounds == 12) { 151e1051a39Sopenharmony_ci D_RC5_32(a, b, s, 24); 152e1051a39Sopenharmony_ci D_RC5_32(a, b, s, 22); 153e1051a39Sopenharmony_ci D_RC5_32(a, b, s, 20); 154e1051a39Sopenharmony_ci D_RC5_32(a, b, s, 18); 155e1051a39Sopenharmony_ci } 156e1051a39Sopenharmony_ci D_RC5_32(a, b, s, 16); 157e1051a39Sopenharmony_ci D_RC5_32(a, b, s, 14); 158e1051a39Sopenharmony_ci D_RC5_32(a, b, s, 12); 159e1051a39Sopenharmony_ci D_RC5_32(a, b, s, 10); 160e1051a39Sopenharmony_ci D_RC5_32(a, b, s, 8); 161e1051a39Sopenharmony_ci D_RC5_32(a, b, s, 6); 162e1051a39Sopenharmony_ci D_RC5_32(a, b, s, 4); 163e1051a39Sopenharmony_ci D_RC5_32(a, b, s, 2); 164e1051a39Sopenharmony_ci d[0] = a - s[0]; 165e1051a39Sopenharmony_ci d[1] = b - s[1]; 166e1051a39Sopenharmony_ci} 167