Linux Kernel  3.7.1
 All Data Structures Namespaces Files Functions Variables Typedefs Enumerations Enumerator Macros Groups Pages
seed.c
Go to the documentation of this file.
1 /*
2  * Cryptographic API.
3  *
4  * SEED Cipher Algorithm.
5  *
6  * This program is free software; you can redistribute it and/or modify
7  * it under the terms of the GNU General Public License as published by
8  * the Free Software Foundation; either version 2 of the License, or
9  * (at your option) any later version.
10  *
11  * Documentation of SEED can be found in RFC 4269.
12  * Copyright (C) 2007 Korea Information Security Agency (KISA).
13  */
14 
15 #include <linux/module.h>
16 #include <linux/init.h>
17 #include <linux/types.h>
18 #include <linux/errno.h>
19 #include <linux/crypto.h>
20 #include <asm/byteorder.h>
21 
22 #define SEED_NUM_KCONSTANTS 16
23 #define SEED_KEY_SIZE 16
24 #define SEED_BLOCK_SIZE 16
25 #define SEED_KEYSCHED_LEN 32
26 
27 /*
28  * #define byte(x, nr) ((unsigned char)((x) >> (nr*8)))
29  */
30 static inline u8
31 byte(const u32 x, const unsigned n)
32 {
33  return x >> (n << 3);
34 }
35 
36 struct seed_ctx {
37  u32 keysched[SEED_KEYSCHED_LEN];
38 };
39 
40 static const u32 SS0[256] = {
41  0x2989a1a8, 0x05858184, 0x16c6d2d4, 0x13c3d3d0,
42  0x14445054, 0x1d0d111c, 0x2c8ca0ac, 0x25052124,
43  0x1d4d515c, 0x03434340, 0x18081018, 0x1e0e121c,
44  0x11415150, 0x3cccf0fc, 0x0acac2c8, 0x23436360,
45  0x28082028, 0x04444044, 0x20002020, 0x1d8d919c,
46  0x20c0e0e0, 0x22c2e2e0, 0x08c8c0c8, 0x17071314,
47  0x2585a1a4, 0x0f8f838c, 0x03030300, 0x3b4b7378,
48  0x3b8bb3b8, 0x13031310, 0x12c2d2d0, 0x2ecee2ec,
49  0x30407070, 0x0c8c808c, 0x3f0f333c, 0x2888a0a8,
50  0x32023230, 0x1dcdd1dc, 0x36c6f2f4, 0x34447074,
51  0x2ccce0ec, 0x15859194, 0x0b0b0308, 0x17475354,
52  0x1c4c505c, 0x1b4b5358, 0x3d8db1bc, 0x01010100,
53  0x24042024, 0x1c0c101c, 0x33437370, 0x18889098,
54  0x10001010, 0x0cccc0cc, 0x32c2f2f0, 0x19c9d1d8,
55  0x2c0c202c, 0x27c7e3e4, 0x32427270, 0x03838380,
56  0x1b8b9398, 0x11c1d1d0, 0x06868284, 0x09c9c1c8,
57  0x20406060, 0x10405050, 0x2383a3a0, 0x2bcbe3e8,
58  0x0d0d010c, 0x3686b2b4, 0x1e8e929c, 0x0f4f434c,
59  0x3787b3b4, 0x1a4a5258, 0x06c6c2c4, 0x38487078,
60  0x2686a2a4, 0x12021210, 0x2f8fa3ac, 0x15c5d1d4,
61  0x21416160, 0x03c3c3c0, 0x3484b0b4, 0x01414140,
62  0x12425250, 0x3d4d717c, 0x0d8d818c, 0x08080008,
63  0x1f0f131c, 0x19899198, 0x00000000, 0x19091118,
64  0x04040004, 0x13435350, 0x37c7f3f4, 0x21c1e1e0,
65  0x3dcdf1fc, 0x36467274, 0x2f0f232c, 0x27072324,
66  0x3080b0b0, 0x0b8b8388, 0x0e0e020c, 0x2b8ba3a8,
67  0x2282a2a0, 0x2e4e626c, 0x13839390, 0x0d4d414c,
68  0x29496168, 0x3c4c707c, 0x09090108, 0x0a0a0208,
69  0x3f8fb3bc, 0x2fcfe3ec, 0x33c3f3f0, 0x05c5c1c4,
70  0x07878384, 0x14041014, 0x3ecef2fc, 0x24446064,
71  0x1eced2dc, 0x2e0e222c, 0x0b4b4348, 0x1a0a1218,
72  0x06060204, 0x21012120, 0x2b4b6368, 0x26466264,
73  0x02020200, 0x35c5f1f4, 0x12829290, 0x0a8a8288,
74  0x0c0c000c, 0x3383b3b0, 0x3e4e727c, 0x10c0d0d0,
75  0x3a4a7278, 0x07474344, 0x16869294, 0x25c5e1e4,
76  0x26062224, 0x00808080, 0x2d8da1ac, 0x1fcfd3dc,
77  0x2181a1a0, 0x30003030, 0x37073334, 0x2e8ea2ac,
78  0x36063234, 0x15051114, 0x22022220, 0x38083038,
79  0x34c4f0f4, 0x2787a3a4, 0x05454144, 0x0c4c404c,
80  0x01818180, 0x29c9e1e8, 0x04848084, 0x17879394,
81  0x35053134, 0x0bcbc3c8, 0x0ecec2cc, 0x3c0c303c,
82  0x31417170, 0x11011110, 0x07c7c3c4, 0x09898188,
83  0x35457174, 0x3bcbf3f8, 0x1acad2d8, 0x38c8f0f8,
84  0x14849094, 0x19495158, 0x02828280, 0x04c4c0c4,
85  0x3fcff3fc, 0x09494148, 0x39093138, 0x27476364,
86  0x00c0c0c0, 0x0fcfc3cc, 0x17c7d3d4, 0x3888b0b8,
87  0x0f0f030c, 0x0e8e828c, 0x02424240, 0x23032320,
88  0x11819190, 0x2c4c606c, 0x1bcbd3d8, 0x2484a0a4,
89  0x34043034, 0x31c1f1f0, 0x08484048, 0x02c2c2c0,
90  0x2f4f636c, 0x3d0d313c, 0x2d0d212c, 0x00404040,
91  0x3e8eb2bc, 0x3e0e323c, 0x3c8cb0bc, 0x01c1c1c0,
92  0x2a8aa2a8, 0x3a8ab2b8, 0x0e4e424c, 0x15455154,
93  0x3b0b3338, 0x1cccd0dc, 0x28486068, 0x3f4f737c,
94  0x1c8c909c, 0x18c8d0d8, 0x0a4a4248, 0x16465254,
95  0x37477374, 0x2080a0a0, 0x2dcde1ec, 0x06464244,
96  0x3585b1b4, 0x2b0b2328, 0x25456164, 0x3acaf2f8,
97  0x23c3e3e0, 0x3989b1b8, 0x3181b1b0, 0x1f8f939c,
98  0x1e4e525c, 0x39c9f1f8, 0x26c6e2e4, 0x3282b2b0,
99  0x31013130, 0x2acae2e8, 0x2d4d616c, 0x1f4f535c,
100  0x24c4e0e4, 0x30c0f0f0, 0x0dcdc1cc, 0x08888088,
101  0x16061214, 0x3a0a3238, 0x18485058, 0x14c4d0d4,
102  0x22426260, 0x29092128, 0x07070304, 0x33033330,
103  0x28c8e0e8, 0x1b0b1318, 0x05050104, 0x39497178,
104  0x10809090, 0x2a4a6268, 0x2a0a2228, 0x1a8a9298,
105 };
106 
107 static const u32 SS1[256] = {
108  0x38380830, 0xe828c8e0, 0x2c2d0d21, 0xa42686a2,
109  0xcc0fcfc3, 0xdc1eced2, 0xb03383b3, 0xb83888b0,
110  0xac2f8fa3, 0x60204060, 0x54154551, 0xc407c7c3,
111  0x44044440, 0x6c2f4f63, 0x682b4b63, 0x581b4b53,
112  0xc003c3c3, 0x60224262, 0x30330333, 0xb43585b1,
113  0x28290921, 0xa02080a0, 0xe022c2e2, 0xa42787a3,
114  0xd013c3d3, 0x90118191, 0x10110111, 0x04060602,
115  0x1c1c0c10, 0xbc3c8cb0, 0x34360632, 0x480b4b43,
116  0xec2fcfe3, 0x88088880, 0x6c2c4c60, 0xa82888a0,
117  0x14170713, 0xc404c4c0, 0x14160612, 0xf434c4f0,
118  0xc002c2c2, 0x44054541, 0xe021c1e1, 0xd416c6d2,
119  0x3c3f0f33, 0x3c3d0d31, 0x8c0e8e82, 0x98188890,
120  0x28280820, 0x4c0e4e42, 0xf436c6f2, 0x3c3e0e32,
121  0xa42585a1, 0xf839c9f1, 0x0c0d0d01, 0xdc1fcfd3,
122  0xd818c8d0, 0x282b0b23, 0x64264662, 0x783a4a72,
123  0x24270723, 0x2c2f0f23, 0xf031c1f1, 0x70324272,
124  0x40024242, 0xd414c4d0, 0x40014141, 0xc000c0c0,
125  0x70334373, 0x64274763, 0xac2c8ca0, 0x880b8b83,
126  0xf437c7f3, 0xac2d8da1, 0x80008080, 0x1c1f0f13,
127  0xc80acac2, 0x2c2c0c20, 0xa82a8aa2, 0x34340430,
128  0xd012c2d2, 0x080b0b03, 0xec2ecee2, 0xe829c9e1,
129  0x5c1d4d51, 0x94148490, 0x18180810, 0xf838c8f0,
130  0x54174753, 0xac2e8ea2, 0x08080800, 0xc405c5c1,
131  0x10130313, 0xcc0dcdc1, 0x84068682, 0xb83989b1,
132  0xfc3fcff3, 0x7c3d4d71, 0xc001c1c1, 0x30310131,
133  0xf435c5f1, 0x880a8a82, 0x682a4a62, 0xb03181b1,
134  0xd011c1d1, 0x20200020, 0xd417c7d3, 0x00020202,
135  0x20220222, 0x04040400, 0x68284860, 0x70314171,
136  0x04070703, 0xd81bcbd3, 0x9c1d8d91, 0x98198991,
137  0x60214161, 0xbc3e8eb2, 0xe426c6e2, 0x58194951,
138  0xdc1dcdd1, 0x50114151, 0x90108090, 0xdc1cccd0,
139  0x981a8a92, 0xa02383a3, 0xa82b8ba3, 0xd010c0d0,
140  0x80018181, 0x0c0f0f03, 0x44074743, 0x181a0a12,
141  0xe023c3e3, 0xec2ccce0, 0x8c0d8d81, 0xbc3f8fb3,
142  0x94168692, 0x783b4b73, 0x5c1c4c50, 0xa02282a2,
143  0xa02181a1, 0x60234363, 0x20230323, 0x4c0d4d41,
144  0xc808c8c0, 0x9c1e8e92, 0x9c1c8c90, 0x383a0a32,
145  0x0c0c0c00, 0x2c2e0e22, 0xb83a8ab2, 0x6c2e4e62,
146  0x9c1f8f93, 0x581a4a52, 0xf032c2f2, 0x90128292,
147  0xf033c3f3, 0x48094941, 0x78384870, 0xcc0cccc0,
148  0x14150511, 0xf83bcbf3, 0x70304070, 0x74354571,
149  0x7c3f4f73, 0x34350531, 0x10100010, 0x00030303,
150  0x64244460, 0x6c2d4d61, 0xc406c6c2, 0x74344470,
151  0xd415c5d1, 0xb43484b0, 0xe82acae2, 0x08090901,
152  0x74364672, 0x18190911, 0xfc3ecef2, 0x40004040,
153  0x10120212, 0xe020c0e0, 0xbc3d8db1, 0x04050501,
154  0xf83acaf2, 0x00010101, 0xf030c0f0, 0x282a0a22,
155  0x5c1e4e52, 0xa82989a1, 0x54164652, 0x40034343,
156  0x84058581, 0x14140410, 0x88098981, 0x981b8b93,
157  0xb03080b0, 0xe425c5e1, 0x48084840, 0x78394971,
158  0x94178793, 0xfc3cccf0, 0x1c1e0e12, 0x80028282,
159  0x20210121, 0x8c0c8c80, 0x181b0b13, 0x5c1f4f53,
160  0x74374773, 0x54144450, 0xb03282b2, 0x1c1d0d11,
161  0x24250521, 0x4c0f4f43, 0x00000000, 0x44064642,
162  0xec2dcde1, 0x58184850, 0x50124252, 0xe82bcbe3,
163  0x7c3e4e72, 0xd81acad2, 0xc809c9c1, 0xfc3dcdf1,
164  0x30300030, 0x94158591, 0x64254561, 0x3c3c0c30,
165  0xb43686b2, 0xe424c4e0, 0xb83b8bb3, 0x7c3c4c70,
166  0x0c0e0e02, 0x50104050, 0x38390931, 0x24260622,
167  0x30320232, 0x84048480, 0x68294961, 0x90138393,
168  0x34370733, 0xe427c7e3, 0x24240420, 0xa42484a0,
169  0xc80bcbc3, 0x50134353, 0x080a0a02, 0x84078783,
170  0xd819c9d1, 0x4c0c4c40, 0x80038383, 0x8c0f8f83,
171  0xcc0ecec2, 0x383b0b33, 0x480a4a42, 0xb43787b3,
172 };
173 
174 static const u32 SS2[256] = {
175  0xa1a82989, 0x81840585, 0xd2d416c6, 0xd3d013c3,
176  0x50541444, 0x111c1d0d, 0xa0ac2c8c, 0x21242505,
177  0x515c1d4d, 0x43400343, 0x10181808, 0x121c1e0e,
178  0x51501141, 0xf0fc3ccc, 0xc2c80aca, 0x63602343,
179  0x20282808, 0x40440444, 0x20202000, 0x919c1d8d,
180  0xe0e020c0, 0xe2e022c2, 0xc0c808c8, 0x13141707,
181  0xa1a42585, 0x838c0f8f, 0x03000303, 0x73783b4b,
182  0xb3b83b8b, 0x13101303, 0xd2d012c2, 0xe2ec2ece,
183  0x70703040, 0x808c0c8c, 0x333c3f0f, 0xa0a82888,
184  0x32303202, 0xd1dc1dcd, 0xf2f436c6, 0x70743444,
185  0xe0ec2ccc, 0x91941585, 0x03080b0b, 0x53541747,
186  0x505c1c4c, 0x53581b4b, 0xb1bc3d8d, 0x01000101,
187  0x20242404, 0x101c1c0c, 0x73703343, 0x90981888,
188  0x10101000, 0xc0cc0ccc, 0xf2f032c2, 0xd1d819c9,
189  0x202c2c0c, 0xe3e427c7, 0x72703242, 0x83800383,
190  0x93981b8b, 0xd1d011c1, 0x82840686, 0xc1c809c9,
191  0x60602040, 0x50501040, 0xa3a02383, 0xe3e82bcb,
192  0x010c0d0d, 0xb2b43686, 0x929c1e8e, 0x434c0f4f,
193  0xb3b43787, 0x52581a4a, 0xc2c406c6, 0x70783848,
194  0xa2a42686, 0x12101202, 0xa3ac2f8f, 0xd1d415c5,
195  0x61602141, 0xc3c003c3, 0xb0b43484, 0x41400141,
196  0x52501242, 0x717c3d4d, 0x818c0d8d, 0x00080808,
197  0x131c1f0f, 0x91981989, 0x00000000, 0x11181909,
198  0x00040404, 0x53501343, 0xf3f437c7, 0xe1e021c1,
199  0xf1fc3dcd, 0x72743646, 0x232c2f0f, 0x23242707,
200  0xb0b03080, 0x83880b8b, 0x020c0e0e, 0xa3a82b8b,
201  0xa2a02282, 0x626c2e4e, 0x93901383, 0x414c0d4d,
202  0x61682949, 0x707c3c4c, 0x01080909, 0x02080a0a,
203  0xb3bc3f8f, 0xe3ec2fcf, 0xf3f033c3, 0xc1c405c5,
204  0x83840787, 0x10141404, 0xf2fc3ece, 0x60642444,
205  0xd2dc1ece, 0x222c2e0e, 0x43480b4b, 0x12181a0a,
206  0x02040606, 0x21202101, 0x63682b4b, 0x62642646,
207  0x02000202, 0xf1f435c5, 0x92901282, 0x82880a8a,
208  0x000c0c0c, 0xb3b03383, 0x727c3e4e, 0xd0d010c0,
209  0x72783a4a, 0x43440747, 0x92941686, 0xe1e425c5,
210  0x22242606, 0x80800080, 0xa1ac2d8d, 0xd3dc1fcf,
211  0xa1a02181, 0x30303000, 0x33343707, 0xa2ac2e8e,
212  0x32343606, 0x11141505, 0x22202202, 0x30383808,
213  0xf0f434c4, 0xa3a42787, 0x41440545, 0x404c0c4c,
214  0x81800181, 0xe1e829c9, 0x80840484, 0x93941787,
215  0x31343505, 0xc3c80bcb, 0xc2cc0ece, 0x303c3c0c,
216  0x71703141, 0x11101101, 0xc3c407c7, 0x81880989,
217  0x71743545, 0xf3f83bcb, 0xd2d81aca, 0xf0f838c8,
218  0x90941484, 0x51581949, 0x82800282, 0xc0c404c4,
219  0xf3fc3fcf, 0x41480949, 0x31383909, 0x63642747,
220  0xc0c000c0, 0xc3cc0fcf, 0xd3d417c7, 0xb0b83888,
221  0x030c0f0f, 0x828c0e8e, 0x42400242, 0x23202303,
222  0x91901181, 0x606c2c4c, 0xd3d81bcb, 0xa0a42484,
223  0x30343404, 0xf1f031c1, 0x40480848, 0xc2c002c2,
224  0x636c2f4f, 0x313c3d0d, 0x212c2d0d, 0x40400040,
225  0xb2bc3e8e, 0x323c3e0e, 0xb0bc3c8c, 0xc1c001c1,
226  0xa2a82a8a, 0xb2b83a8a, 0x424c0e4e, 0x51541545,
227  0x33383b0b, 0xd0dc1ccc, 0x60682848, 0x737c3f4f,
228  0x909c1c8c, 0xd0d818c8, 0x42480a4a, 0x52541646,
229  0x73743747, 0xa0a02080, 0xe1ec2dcd, 0x42440646,
230  0xb1b43585, 0x23282b0b, 0x61642545, 0xf2f83aca,
231  0xe3e023c3, 0xb1b83989, 0xb1b03181, 0x939c1f8f,
232  0x525c1e4e, 0xf1f839c9, 0xe2e426c6, 0xb2b03282,
233  0x31303101, 0xe2e82aca, 0x616c2d4d, 0x535c1f4f,
234  0xe0e424c4, 0xf0f030c0, 0xc1cc0dcd, 0x80880888,
235  0x12141606, 0x32383a0a, 0x50581848, 0xd0d414c4,
236  0x62602242, 0x21282909, 0x03040707, 0x33303303,
237  0xe0e828c8, 0x13181b0b, 0x01040505, 0x71783949,
238  0x90901080, 0x62682a4a, 0x22282a0a, 0x92981a8a,
239 };
240 
241 static const u32 SS3[256] = {
242  0x08303838, 0xc8e0e828, 0x0d212c2d, 0x86a2a426,
243  0xcfc3cc0f, 0xced2dc1e, 0x83b3b033, 0x88b0b838,
244  0x8fa3ac2f, 0x40606020, 0x45515415, 0xc7c3c407,
245  0x44404404, 0x4f636c2f, 0x4b63682b, 0x4b53581b,
246  0xc3c3c003, 0x42626022, 0x03333033, 0x85b1b435,
247  0x09212829, 0x80a0a020, 0xc2e2e022, 0x87a3a427,
248  0xc3d3d013, 0x81919011, 0x01111011, 0x06020406,
249  0x0c101c1c, 0x8cb0bc3c, 0x06323436, 0x4b43480b,
250  0xcfe3ec2f, 0x88808808, 0x4c606c2c, 0x88a0a828,
251  0x07131417, 0xc4c0c404, 0x06121416, 0xc4f0f434,
252  0xc2c2c002, 0x45414405, 0xc1e1e021, 0xc6d2d416,
253  0x0f333c3f, 0x0d313c3d, 0x8e828c0e, 0x88909818,
254  0x08202828, 0x4e424c0e, 0xc6f2f436, 0x0e323c3e,
255  0x85a1a425, 0xc9f1f839, 0x0d010c0d, 0xcfd3dc1f,
256  0xc8d0d818, 0x0b23282b, 0x46626426, 0x4a72783a,
257  0x07232427, 0x0f232c2f, 0xc1f1f031, 0x42727032,
258  0x42424002, 0xc4d0d414, 0x41414001, 0xc0c0c000,
259  0x43737033, 0x47636427, 0x8ca0ac2c, 0x8b83880b,
260  0xc7f3f437, 0x8da1ac2d, 0x80808000, 0x0f131c1f,
261  0xcac2c80a, 0x0c202c2c, 0x8aa2a82a, 0x04303434,
262  0xc2d2d012, 0x0b03080b, 0xcee2ec2e, 0xc9e1e829,
263  0x4d515c1d, 0x84909414, 0x08101818, 0xc8f0f838,
264  0x47535417, 0x8ea2ac2e, 0x08000808, 0xc5c1c405,
265  0x03131013, 0xcdc1cc0d, 0x86828406, 0x89b1b839,
266  0xcff3fc3f, 0x4d717c3d, 0xc1c1c001, 0x01313031,
267  0xc5f1f435, 0x8a82880a, 0x4a62682a, 0x81b1b031,
268  0xc1d1d011, 0x00202020, 0xc7d3d417, 0x02020002,
269  0x02222022, 0x04000404, 0x48606828, 0x41717031,
270  0x07030407, 0xcbd3d81b, 0x8d919c1d, 0x89919819,
271  0x41616021, 0x8eb2bc3e, 0xc6e2e426, 0x49515819,
272  0xcdd1dc1d, 0x41515011, 0x80909010, 0xccd0dc1c,
273  0x8a92981a, 0x83a3a023, 0x8ba3a82b, 0xc0d0d010,
274  0x81818001, 0x0f030c0f, 0x47434407, 0x0a12181a,
275  0xc3e3e023, 0xcce0ec2c, 0x8d818c0d, 0x8fb3bc3f,
276  0x86929416, 0x4b73783b, 0x4c505c1c, 0x82a2a022,
277  0x81a1a021, 0x43636023, 0x03232023, 0x4d414c0d,
278  0xc8c0c808, 0x8e929c1e, 0x8c909c1c, 0x0a32383a,
279  0x0c000c0c, 0x0e222c2e, 0x8ab2b83a, 0x4e626c2e,
280  0x8f939c1f, 0x4a52581a, 0xc2f2f032, 0x82929012,
281  0xc3f3f033, 0x49414809, 0x48707838, 0xccc0cc0c,
282  0x05111415, 0xcbf3f83b, 0x40707030, 0x45717435,
283  0x4f737c3f, 0x05313435, 0x00101010, 0x03030003,
284  0x44606424, 0x4d616c2d, 0xc6c2c406, 0x44707434,
285  0xc5d1d415, 0x84b0b434, 0xcae2e82a, 0x09010809,
286  0x46727436, 0x09111819, 0xcef2fc3e, 0x40404000,
287  0x02121012, 0xc0e0e020, 0x8db1bc3d, 0x05010405,
288  0xcaf2f83a, 0x01010001, 0xc0f0f030, 0x0a22282a,
289  0x4e525c1e, 0x89a1a829, 0x46525416, 0x43434003,
290  0x85818405, 0x04101414, 0x89818809, 0x8b93981b,
291  0x80b0b030, 0xc5e1e425, 0x48404808, 0x49717839,
292  0x87939417, 0xccf0fc3c, 0x0e121c1e, 0x82828002,
293  0x01212021, 0x8c808c0c, 0x0b13181b, 0x4f535c1f,
294  0x47737437, 0x44505414, 0x82b2b032, 0x0d111c1d,
295  0x05212425, 0x4f434c0f, 0x00000000, 0x46424406,
296  0xcde1ec2d, 0x48505818, 0x42525012, 0xcbe3e82b,
297  0x4e727c3e, 0xcad2d81a, 0xc9c1c809, 0xcdf1fc3d,
298  0x00303030, 0x85919415, 0x45616425, 0x0c303c3c,
299  0x86b2b436, 0xc4e0e424, 0x8bb3b83b, 0x4c707c3c,
300  0x0e020c0e, 0x40505010, 0x09313839, 0x06222426,
301  0x02323032, 0x84808404, 0x49616829, 0x83939013,
302  0x07333437, 0xc7e3e427, 0x04202424, 0x84a0a424,
303  0xcbc3c80b, 0x43535013, 0x0a02080a, 0x87838407,
304  0xc9d1d819, 0x4c404c0c, 0x83838003, 0x8f838c0f,
305  0xcec2cc0e, 0x0b33383b, 0x4a42480a, 0x87b3b437,
306 };
307 
308 static const u32 KC[SEED_NUM_KCONSTANTS] = {
309  0x9e3779b9, 0x3c6ef373, 0x78dde6e6, 0xf1bbcdcc,
310  0xe3779b99, 0xc6ef3733, 0x8dde6e67, 0x1bbcdccf,
311  0x3779b99e, 0x6ef3733c, 0xdde6e678, 0xbbcdccf1,
312  0x779b99e3, 0xef3733c6, 0xde6e678d, 0xbcdccf1b,
313 };
314 
315 #define OP(X1, X2, X3, X4, rbase) \
316  t0 = X3 ^ ks[rbase]; \
317  t1 = X4 ^ ks[rbase+1]; \
318  t1 ^= t0; \
319  t1 = SS0[byte(t1, 0)] ^ SS1[byte(t1, 1)] ^ \
320  SS2[byte(t1, 2)] ^ SS3[byte(t1, 3)]; \
321  t0 += t1; \
322  t0 = SS0[byte(t0, 0)] ^ SS1[byte(t0, 1)] ^ \
323  SS2[byte(t0, 2)] ^ SS3[byte(t0, 3)]; \
324  t1 += t0; \
325  t1 = SS0[byte(t1, 0)] ^ SS1[byte(t1, 1)] ^ \
326  SS2[byte(t1, 2)] ^ SS3[byte(t1, 3)]; \
327  t0 += t1; \
328  X1 ^= t0; \
329  X2 ^= t1;
330 
331 static int seed_set_key(struct crypto_tfm *tfm, const u8 *in_key,
332  unsigned int key_len)
333 {
334  struct seed_ctx *ctx = crypto_tfm_ctx(tfm);
335  u32 *keyout = ctx->keysched;
336  const __be32 *key = (const __be32 *)in_key;
337  u32 i, t0, t1, x1, x2, x3, x4;
338 
339  x1 = be32_to_cpu(key[0]);
340  x2 = be32_to_cpu(key[1]);
341  x3 = be32_to_cpu(key[2]);
342  x4 = be32_to_cpu(key[3]);
343 
344  for (i = 0; i < SEED_NUM_KCONSTANTS; i++) {
345  t0 = x1 + x3 - KC[i];
346  t1 = x2 + KC[i] - x4;
347  *(keyout++) = SS0[byte(t0, 0)] ^ SS1[byte(t0, 1)] ^
348  SS2[byte(t0, 2)] ^ SS3[byte(t0, 3)];
349  *(keyout++) = SS0[byte(t1, 0)] ^ SS1[byte(t1, 1)] ^
350  SS2[byte(t1, 2)] ^ SS3[byte(t1, 3)];
351 
352  if (i % 2 == 0) {
353  t0 = x1;
354  x1 = (x1 >> 8) ^ (x2 << 24);
355  x2 = (x2 >> 8) ^ (t0 << 24);
356  } else {
357  t0 = x3;
358  x3 = (x3 << 8) ^ (x4 >> 24);
359  x4 = (x4 << 8) ^ (t0 >> 24);
360  }
361  }
362 
363  return 0;
364 }
365 
366 /* encrypt a block of text */
367 
368 static void seed_encrypt(struct crypto_tfm *tfm, u8 *out, const u8 *in)
369 {
370  const struct seed_ctx *ctx = crypto_tfm_ctx(tfm);
371  const __be32 *src = (const __be32 *)in;
372  __be32 *dst = (__be32 *)out;
373  u32 x1, x2, x3, x4, t0, t1;
374  const u32 *ks = ctx->keysched;
375 
376  x1 = be32_to_cpu(src[0]);
377  x2 = be32_to_cpu(src[1]);
378  x3 = be32_to_cpu(src[2]);
379  x4 = be32_to_cpu(src[3]);
380 
381  OP(x1, x2, x3, x4, 0);
382  OP(x3, x4, x1, x2, 2);
383  OP(x1, x2, x3, x4, 4);
384  OP(x3, x4, x1, x2, 6);
385  OP(x1, x2, x3, x4, 8);
386  OP(x3, x4, x1, x2, 10);
387  OP(x1, x2, x3, x4, 12);
388  OP(x3, x4, x1, x2, 14);
389  OP(x1, x2, x3, x4, 16);
390  OP(x3, x4, x1, x2, 18);
391  OP(x1, x2, x3, x4, 20);
392  OP(x3, x4, x1, x2, 22);
393  OP(x1, x2, x3, x4, 24);
394  OP(x3, x4, x1, x2, 26);
395  OP(x1, x2, x3, x4, 28);
396  OP(x3, x4, x1, x2, 30);
397 
398  dst[0] = cpu_to_be32(x3);
399  dst[1] = cpu_to_be32(x4);
400  dst[2] = cpu_to_be32(x1);
401  dst[3] = cpu_to_be32(x2);
402 }
403 
404 /* decrypt a block of text */
405 
406 static void seed_decrypt(struct crypto_tfm *tfm, u8 *out, const u8 *in)
407 {
408  const struct seed_ctx *ctx = crypto_tfm_ctx(tfm);
409  const __be32 *src = (const __be32 *)in;
410  __be32 *dst = (__be32 *)out;
411  u32 x1, x2, x3, x4, t0, t1;
412  const u32 *ks = ctx->keysched;
413 
414  x1 = be32_to_cpu(src[0]);
415  x2 = be32_to_cpu(src[1]);
416  x3 = be32_to_cpu(src[2]);
417  x4 = be32_to_cpu(src[3]);
418 
419  OP(x1, x2, x3, x4, 30);
420  OP(x3, x4, x1, x2, 28);
421  OP(x1, x2, x3, x4, 26);
422  OP(x3, x4, x1, x2, 24);
423  OP(x1, x2, x3, x4, 22);
424  OP(x3, x4, x1, x2, 20);
425  OP(x1, x2, x3, x4, 18);
426  OP(x3, x4, x1, x2, 16);
427  OP(x1, x2, x3, x4, 14);
428  OP(x3, x4, x1, x2, 12);
429  OP(x1, x2, x3, x4, 10);
430  OP(x3, x4, x1, x2, 8);
431  OP(x1, x2, x3, x4, 6);
432  OP(x3, x4, x1, x2, 4);
433  OP(x1, x2, x3, x4, 2);
434  OP(x3, x4, x1, x2, 0);
435 
436  dst[0] = cpu_to_be32(x3);
437  dst[1] = cpu_to_be32(x4);
438  dst[2] = cpu_to_be32(x1);
439  dst[3] = cpu_to_be32(x2);
440 }
441 
442 
443 static struct crypto_alg seed_alg = {
444  .cra_name = "seed",
445  .cra_driver_name = "seed-generic",
446  .cra_priority = 100,
447  .cra_flags = CRYPTO_ALG_TYPE_CIPHER,
448  .cra_blocksize = SEED_BLOCK_SIZE,
449  .cra_ctxsize = sizeof(struct seed_ctx),
450  .cra_alignmask = 3,
451  .cra_module = THIS_MODULE,
452  .cra_u = {
453  .cipher = {
454  .cia_min_keysize = SEED_KEY_SIZE,
455  .cia_max_keysize = SEED_KEY_SIZE,
456  .cia_setkey = seed_set_key,
457  .cia_encrypt = seed_encrypt,
458  .cia_decrypt = seed_decrypt
459  }
460  }
461 };
462 
463 static int __init seed_init(void)
464 {
465  return crypto_register_alg(&seed_alg);
466 }
467 
468 static void __exit seed_fini(void)
469 {
470  crypto_unregister_alg(&seed_alg);
471 }
472 
473 module_init(seed_init);
474 module_exit(seed_fini);
475 
476 MODULE_DESCRIPTION("SEED Cipher Algorithm");
477 MODULE_LICENSE("GPL");
478 MODULE_AUTHOR("Hye-Shik Chang <[email protected]>, Kim Hyun <[email protected]>");
Generated on Thu Jan 10 2013 13:23:07 for Linux Kernel by   doxygen 1.8.2