crypto/camellia/camellia.c

353  * adjusting n accordingly, e.g. RotLeft128(s1,s2,s3,s0,n-32).
365     register u32 s0, s1, s2, s3;
367     k[0] = s0 = GETU32(rawKey);
373         k[8] = s0 = GETU32(rawKey + 16);
376             k[10] = s2 = ~s0;
382         s0 ^= k[0], s1 ^= k[1], s2 ^= k[2], s3 ^= k[3];
386     Camellia_Feistel(s0, s1, s2, s3, SIGMA + 0);
387     Camellia_Feistel(s2, s3, s0, s1, SIGMA + 2);
389     s0 ^= k[0], s1 ^= k[1], s2 ^= k[2], s3 ^= k[3];
390     Camellia_Feistel(s0, s1, s2, s3, SIGMA + 4);
391     Camellia_Feistel(s2, s3, s0, s1, SIGMA + 6);
395         k[4] = s0, k[5] = s1, k[6] = s2, k[7] = s3;
396         RotLeft128(s0, s1, s2, s3, 15); /* KA <<< 15 */
397         k[12] = s0, k[13] = s1, k[14] = s2, k[15] = s3;
398         RotLeft128(s0, s1, s2, s3, 15); /* KA <<< 30 */
399         k[16] = s0, k[17] = s1, k[18] = s2, k[19] = s3;
400         RotLeft128(s0, s1, s2, s3, 15); /* KA <<< 45 */
401         k[24] = s0, k[25] = s1;
402         RotLeft128(s0, s1, s2, s3, 15); /* KA <<< 60 */
403         k[28] = s0, k[29] = s1, k[30] = s2, k[31] = s3;
404         RotLeft128(s1, s2, s3, s0, 2); /* KA <<< 94 */
405         k[40] = s1, k[41] = s2, k[42] = s3, k[43] = s0;
406         RotLeft128(s1, s2, s3, s0, 17); /* KA <<<111 */
407         k[48] = s1, k[49] = s2, k[50] = s3, k[51] = s0;
409         s0 = k[0], s1 = k[1], s2 = k[2], s3 = k[3];
410         RotLeft128(s0, s1, s2, s3, 15); /* KL <<< 15 */
411         k[8] = s0, k[9] = s1, k[10] = s2, k[11] = s3;
412         RotLeft128(s0, s1, s2, s3, 30); /* KL <<< 45 */
413         k[20] = s0, k[21] = s1, k[22] = s2, k[23] = s3;
414         RotLeft128(s0, s1, s2, s3, 15); /* KL <<< 60 */
416         RotLeft128(s0, s1, s2, s3, 17); /* KL <<< 77 */
417         k[32] = s0, k[33] = s1, k[34] = s2, k[35] = s3;
418         RotLeft128(s0, s1, s2, s3, 17); /* KL <<< 94 */
419         k[36] = s0, k[37] = s1, k[38] = s2, k[39] = s3;
420         RotLeft128(s0, s1, s2, s3, 17); /* KL <<<111 */
421         k[44] = s0, k[45] = s1, k[46] = s2, k[47] = s3;
425         k[12] = s0, k[13] = s1, k[14] = s2, k[15] = s3;
426         s0 ^= k[8], s1 ^= k[9], s2 ^= k[10], s3 ^= k[11];
427         Camellia_Feistel(s0, s1, s2, s3, (SIGMA + 8));
428         Camellia_Feistel(s2, s3, s0, s1, (SIGMA + 10));
430         k[4] = s0, k[5] = s1, k[6] = s2, k[7] = s3;
431         RotLeft128(s0, s1, s2, s3, 30); /* KB <<< 30 */
432         k[20] = s0, k[21] = s1, k[22] = s2, k[23] = s3;
433         RotLeft128(s0, s1, s2, s3, 30); /* KB <<< 60 */
434         k[40] = s0, k[41] = s1, k[42] = s2, k[43] = s3;
435         RotLeft128(s1, s2, s3, s0, 19); /* KB <<<111 */
436         k[64] = s1, k[65] = s2, k[66] = s3, k[67] = s0;
438         s0 = k[8], s1 = k[9], s2 = k[10], s3 = k[11];
439         RotLeft128(s0, s1, s2, s3, 15); /* KR <<< 15 */
440         k[8] = s0, k[9] = s1, k[10] = s2, k[11] = s3;
441         RotLeft128(s0, s1, s2, s3, 15); /* KR <<< 30 */
442         k[16] = s0, k[17] = s1, k[18] = s2, k[19] = s3;
443         RotLeft128(s0, s1, s2, s3, 30); /* KR <<< 60 */
444         k[36] = s0, k[37] = s1, k[38] = s2, k[39] = s3;
445         RotLeft128(s1, s2, s3, s0, 2); /* KR <<< 94 */
446         k[52] = s1, k[53] = s2, k[54] = s3, k[55] = s0;
448         s0 = k[12], s1 = k[13], s2 = k[14], s3 = k[15];
449         RotLeft128(s0, s1, s2, s3, 15); /* KA <<< 15 */
450         k[12] = s0, k[13] = s1, k[14] = s2, k[15] = s3;
451         RotLeft128(s0, s1, s2, s3, 30); /* KA <<< 45 */
452         k[28] = s0, k[29] = s1, k[30] = s2, k[31] = s3;
454         k[48] = s1, k[49] = s2, k[50] = s3, k[51] = s0;
455         RotLeft128(s1, s2, s3, s0, 17); /* KA <<< 94 */
456         k[56] = s1, k[57] = s2, k[58] = s3, k[59] = s0;
458         s0 = k[0], s1 = k[1], s2 = k[2], s3 = k[3];
459         RotLeft128(s1, s2, s3, s0, 13); /* KL <<< 45 */
460         k[24] = s1, k[25] = s2, k[26] = s3, k[27] = s0;
461         RotLeft128(s1, s2, s3, s0, 15); /* KL <<< 60 */
462         k[32] = s1, k[33] = s2, k[34] = s3, k[35] = s0;
463         RotLeft128(s1, s2, s3, s0, 17); /* KL <<< 77 */
464         k[44] = s1, k[45] = s2, k[46] = s3, k[47] = s0;
465         RotLeft128(s2, s3, s0, s1, 2); /* KL <<<111 */
466         k[60] = s2, k[61] = s3, k[62] = s0, k[63] = s1;
484     register u32 s0, s1, s2, s3;
487     s0 = GETU32(plaintext) ^ k[0];
495         Camellia_Feistel(s0, s1, s2, s3, k + 0);
496         Camellia_Feistel(s2, s3, s0, s1, k + 2);
497         Camellia_Feistel(s0, s1, s2, s3, k + 4);
498         Camellia_Feistel(s2, s3, s0, s1, k + 6);
499         Camellia_Feistel(s0, s1, s2, s3, k + 8);
500         Camellia_Feistel(s2, s3, s0, s1, k + 10);
511         s1 ^= LeftRotate(s0 & k[0], 1);
513         s0 ^= s1 | k[1];
518     s2 ^= k[0], s3 ^= k[1], s0 ^= k[2], s1 ^= k[3];
522     PUTU32(ciphertext + 8, s0);
537     u32 s0, s1, s2, s3;
540     s0 = GETU32(ciphertext) ^ k[0];
548         Camellia_Feistel(s0, s1, s2, s3, k + 10);
549         Camellia_Feistel(s2, s3, s0, s1, k + 8);
550         Camellia_Feistel(s0, s1, s2, s3, k + 6);
551         Camellia_Feistel(s2, s3, s0, s1, k + 4);
552         Camellia_Feistel(s0, s1, s2, s3, k + 2);
553         Camellia_Feistel(s2, s3, s0, s1, k + 0);
564         s1 ^= LeftRotate(s0 & k[2], 1);
566         s0 ^= s1 | k[3];
571     s2 ^= k[0], s3 ^= k[1], s0 ^= k[2], s1 ^= k[3];
575     PUTU32(plaintext + 8, s0);