crypto/camellia/camellia.c

352  * adjusting n accordingly, e.g. RotLeft128(s1,s2,s3,s0,n-32).
364 	register u32 s0,s1,s2,s3;
369 	k[3] = s3 = GETU32(rawKey+12);
378 			k[11] = s3 = ~s1;
383 			k[11] = s3 = GETU32(rawKey+28);
385 		s0 ^= k[0], s1 ^= k[1], s2 ^= k[2], s3 ^= k[3];
389 	Camellia_Feistel(s0,s1,s2,s3,SIGMA+0);
390 	Camellia_Feistel(s2,s3,s0,s1,SIGMA+2);
392 	s0 ^= k[0], s1 ^= k[1], s2 ^= k[2], s3 ^= k[3];
393 	Camellia_Feistel(s0,s1,s2,s3,SIGMA+4);
394 	Camellia_Feistel(s2,s3,s0,s1,SIGMA+6);
399 		k[ 4] = s0, k[ 5] = s1, k[ 6] = s2, k[ 7] = s3;
400 		RotLeft128(s0,s1,s2,s3,15);	/* KA <<< 15 */
401 		k[12] = s0, k[13] = s1, k[14] = s2, k[15] = s3;
402 		RotLeft128(s0,s1,s2,s3,15);	/* KA <<< 30 */
403 		k[16] = s0, k[17] = s1, k[18] = s2, k[19] = s3;
404 		RotLeft128(s0,s1,s2,s3,15);	/* KA <<< 45 */
406 		RotLeft128(s0,s1,s2,s3,15);	/* KA <<< 60 */
407 		k[28] = s0, k[29] = s1, k[30] = s2, k[31] = s3;
408 		RotLeft128(s1,s2,s3,s0,2);	/* KA <<< 94 */
409 		k[40] = s1, k[41] = s2, k[42] = s3, k[43] = s0;
410 		RotLeft128(s1,s2,s3,s0,17);	/* KA <<<111 */
411 		k[48] = s1, k[49] = s2, k[50] = s3, k[51] = s0;
413 		s0 = k[ 0], s1 = k[ 1], s2 = k[ 2], s3 = k[ 3];
414 		RotLeft128(s0,s1,s2,s3,15);	/* KL <<< 15 */
415 		k[ 8] = s0, k[ 9] = s1, k[10] = s2, k[11] = s3;
416 		RotLeft128(s0,s1,s2,s3,30);	/* KL <<< 45 */
417 		k[20] = s0, k[21] = s1, k[22] = s2, k[23] = s3;
418 		RotLeft128(s0,s1,s2,s3,15);	/* KL <<< 60 */
419 		k[26] = s2, k[27] = s3;
420 		RotLeft128(s0,s1,s2,s3,17);	/* KL <<< 77 */
421 		k[32] = s0, k[33] = s1, k[34] = s2, k[35] = s3;
422 		RotLeft128(s0,s1,s2,s3,17);	/* KL <<< 94 */
423 		k[36] = s0, k[37] = s1, k[38] = s2, k[39] = s3;
424 		RotLeft128(s0,s1,s2,s3,17);	/* KL <<<111 */
425 		k[44] = s0, k[45] = s1, k[46] = s2, k[47] = s3;
431 		k[12] = s0, k[13] = s1, k[14] = s2, k[15] = s3;
432 		s0 ^= k[8], s1 ^= k[9], s2 ^=k[10], s3 ^=k[11];
433 		Camellia_Feistel(s0,s1,s2,s3,(SIGMA+8));
434 		Camellia_Feistel(s2,s3,s0,s1,(SIGMA+10));
436 		k[ 4] = s0, k[ 5] = s1, k[ 6] = s2, k[ 7] = s3;
437 		RotLeft128(s0,s1,s2,s3,30);	/* KB <<< 30 */
438 		k[20] = s0, k[21] = s1, k[22] = s2, k[23] = s3;
439 		RotLeft128(s0,s1,s2,s3,30);	/* KB <<< 60 */
440 		k[40] = s0, k[41] = s1, k[42] = s2, k[43] = s3;
441 		RotLeft128(s1,s2,s3,s0,19);	/* KB <<<111 */
442 		k[64] = s1, k[65] = s2, k[66] = s3, k[67] = s0;
444 		s0 = k[ 8], s1 = k[ 9], s2 = k[10], s3 = k[11];
445 		RotLeft128(s0,s1,s2,s3,15);	/* KR <<< 15 */
446 		k[ 8] = s0, k[ 9] = s1, k[10] = s2, k[11] = s3;
447 		RotLeft128(s0,s1,s2,s3,15);	/* KR <<< 30 */
448 		k[16] = s0, k[17] = s1, k[18] = s2, k[19] = s3;
449 		RotLeft128(s0,s1,s2,s3,30);	/* KR <<< 60 */
450 		k[36] = s0, k[37] = s1, k[38] = s2, k[39] = s3;
451 		RotLeft128(s1,s2,s3,s0,2);	/* KR <<< 94 */
452 		k[52] = s1, k[53] = s2, k[54] = s3, k[55] = s0;
454 		s0 = k[12], s1 = k[13], s2 = k[14], s3 = k[15];
455 		RotLeft128(s0,s1,s2,s3,15);	/* KA <<< 15 */
456 		k[12] = s0, k[13] = s1, k[14] = s2, k[15] = s3;
457 		RotLeft128(s0,s1,s2,s3,30);	/* KA <<< 45 */
458 		k[28] = s0, k[29] = s1, k[30] = s2, k[31] = s3;
460 		k[48] = s1, k[49] = s2, k[50] = s3, k[51] = s0;
461 		RotLeft128(s1,s2,s3,s0,17);	/* KA <<< 94 */
462 		k[56] = s1, k[57] = s2, k[58] = s3, k[59] = s0;
464 		s0 = k[ 0], s1 = k[ 1], s2 = k[ 2], s3 = k[ 3];
465 		RotLeft128(s1,s2,s3,s0,13);	/* KL <<< 45 */
466 		k[24] = s1, k[25] = s2, k[26] = s3, k[27] = s0;
467 		RotLeft128(s1,s2,s3,s0,15);	/* KL <<< 60 */
468 		k[32] = s1, k[33] = s2, k[34] = s3, k[35] = s0;
469 		RotLeft128(s1,s2,s3,s0,17);	/* KL <<< 77 */
470 		k[44] = s1, k[45] = s2, k[46] = s3, k[47] = s0;
471 		RotLeft128(s2,s3,s0,s1,2);	/* KL <<<111 */
472 		k[60] = s2, k[61] = s3, k[62] = s0, k[63] = s1;
489 	register u32 s0,s1,s2,s3;
495 	s3 = GETU32(plaintext+12) ^ k[3];
501 		Camellia_Feistel(s0,s1,s2,s3,k+0);
502 		Camellia_Feistel(s2,s3,s0,s1,k+2);
503 		Camellia_Feistel(s0,s1,s2,s3,k+4);
504 		Camellia_Feistel(s2,s3,s0,s1,k+6);
505 		Camellia_Feistel(s0,s1,s2,s3,k+8);
506 		Camellia_Feistel(s2,s3,s0,s1,k+10);
515 		s2 ^= s3 | k[3];
517 		s3 ^= LeftRotate(s2 & k[2], 1);
521 	s2 ^= k[0], s3 ^= k[1], s0 ^= k[2], s1 ^= k[3];
524 	PUTU32(ciphertext+4, s3);
538 	u32 s0,s1,s2,s3;
544 	s3 = GETU32(ciphertext+12) ^ k[3];
550 		Camellia_Feistel(s0,s1,s2,s3,k+10);
551 		Camellia_Feistel(s2,s3,s0,s1,k+8);
552 		Camellia_Feistel(s0,s1,s2,s3,k+6);
553 		Camellia_Feistel(s2,s3,s0,s1,k+4);
554 		Camellia_Feistel(s0,s1,s2,s3,k+2);
555 		Camellia_Feistel(s2,s3,s0,s1,k+0);
564 		s2 ^= s3 | k[1];
566 		s3 ^= LeftRotate(s2 & k[0], 1);
570 	s2 ^= k[0], s3 ^= k[1], s0 ^= k[2], s1 ^= k[3];
573 	PUTU32(plaintext+4, s3);