crypto/camellia/camellia.c

471 #define subl(x) subL[(x)]
493     subl(0) = kll;
496     subl(1) = krl;
501     subl(4) = kll;
504     subl(5) = krl;
509     subl(10) = kll;
512     subl(11) = krl;
517     subl(13) = krl;
522     subl(16) = kll;
525     subl(17) = krl;
530     subl(18) = kll;
533     subl(19) = krl;
538     subl(22) = kll;
541     subl(23) = krl;
545     kll = subl(0);
547     krl = subl(1);
567     subl(2) = kll;
569     subl(3) = krl;
573     subl(6) = kll;
575     subl(7) = krl;
579     subl(8) = kll;
581     subl(9) = krl;
585     subl(12) = kll;
589     subl(14) = kll;
591     subl(15) = krl;
595     subl(20) = kll;
597     subl(21) = krl;
601     subl(24) = kll;
603     subl(25) = krl;
608     subl(3) ^= subl(1);
611     subl(5) ^= subl(1);
614     subl(7) ^= subl(1);
616     subl(1) ^= subr(1) & ~subr(9);
617     dw = subl(1) & subl(9), subr(1) ^= CAMELLIA_RL1(dw); /* modified for
620     subl(11) ^= subl(1);
623     subl(13) ^= subl(1);
626     subl(15) ^= subl(1);
628     subl(1) ^= subr(1) & ~subr(17);
629     dw = subl(1) & subl(17), subr(1) ^= CAMELLIA_RL1(dw); /* modified for
632     subl(19) ^= subl(1);
635     subl(21) ^= subl(1);
638     subl(23) ^= subl(1);
641     subl(24) ^= subl(1);
645     kw4l = subl(25);
648     subl(22) ^= kw4l;
651     subl(20) ^= kw4l;
654     subl(18) ^= kw4l;
657     dw = kw4l & subl(16), kw4r ^= CAMELLIA_RL1(dw); /* modified for FL(kl3) */
659     subl(14) ^= kw4l;
662     subl(12) ^= kw4l;
665     subl(10) ^= kw4l;
668     dw = kw4l & subl(8), kw4r ^= CAMELLIA_RL1(dw); /* modified for FL(kl1) */
670     subl(6) ^= kw4l;
673     subl(4) ^= kw4l;
676     subl(2) ^= kw4l;
679     subl(0) ^= kw4l;
683     CamelliaSubkeyL(0) = subl(0) ^ subl(2); /* kw1 */
685     CamelliaSubkeyL(2) = subl(3); /* round 1 */
687     CamelliaSubkeyL(3) = subl(2) ^ subl(4); /* round 2 */
689     CamelliaSubkeyL(4) = subl(3) ^ subl(5); /* round 3 */
691     CamelliaSubkeyL(5) = subl(4) ^ subl(6); /* round 4 */
693     CamelliaSubkeyL(6) = subl(5) ^ subl(7); /* round 5 */
695     tl = subl(10) ^ (subr(10) & ~subr(8));
696     dw = tl & subl(8),          /* FL(kl1) */
698     CamelliaSubkeyL(7) = subl(6) ^ tl; /* round 6 */
700     CamelliaSubkeyL(8) = subl(8); /* FL(kl1) */
702     CamelliaSubkeyL(9) = subl(9); /* FLinv(kl2) */
704     tl = subl(7) ^ (subr(7) & ~subr(9));
705     dw = tl & subl(9),          /* FLinv(kl2) */
707     CamelliaSubkeyL(10) = tl ^ subl(11); /* round 7 */
709     CamelliaSubkeyL(11) = subl(10) ^ subl(12); /* round 8 */
711     CamelliaSubkeyL(12) = subl(11) ^ subl(13); /* round 9 */
713     CamelliaSubkeyL(13) = subl(12) ^ subl(14); /* round 10 */
715     CamelliaSubkeyL(14) = subl(13) ^ subl(15); /* round 11 */
717     tl = subl(18) ^ (subr(18) & ~subr(16));
718     dw = tl & subl(16),         /* FL(kl3) */
720     CamelliaSubkeyL(15) = subl(14) ^ tl; /* round 12 */
722     CamelliaSubkeyL(16) = subl(16); /* FL(kl3) */
724     CamelliaSubkeyL(17) = subl(17); /* FLinv(kl4) */
726     tl = subl(15) ^ (subr(15) & ~subr(17));
727     dw = tl & subl(17),         /* FLinv(kl4) */
729     CamelliaSubkeyL(18) = tl ^ subl(19); /* round 13 */
731     CamelliaSubkeyL(19) = subl(18) ^ subl(20); /* round 14 */
733     CamelliaSubkeyL(20) = subl(19) ^ subl(21); /* round 15 */
735     CamelliaSubkeyL(21) = subl(20) ^ subl(22); /* round 16 */
737     CamelliaSubkeyL(22) = subl(21) ^ subl(23); /* round 17 */
739     CamelliaSubkeyL(23) = subl(22); /* round 18 */
741     CamelliaSubkeyL(24) = subl(24) ^ subl(23); /* kw3 */
828     subl(0) = kll;
831     subl(1) = krl;
835     subl(12) = kll;
838     subl(13) = krl;
842     subl(16) = kll;
845     subl(17) = krl;
849     subl(22) = kll;
852     subl(23) = krl;
856     subl(30) = kll;
859     subl(31) = krl;
865     subl(4) = krll;
868     subl(5) = krrl;
872     subl(8) = krll;
875     subl(9) = krrl;
879     subl(18) = krll;
882     subl(19) = krrl;
886     subl(26) = krll;
889     subl(27) = krrl;
894     kll = subl(0) ^ krll;
896     krl = subl(1) ^ krrl;
932     subl(6) = kll;
935     subl(7) = krl;
939     subl(14) = kll;
942     subl(15) = krl;
946     subl(24) = klr;
949     subl(25) = krr;
954     subl(28) = kll;
957     subl(29) = krl;
962     subl(2) = krll;
965     subl(3) = krrl;
969     subl(10) = krll;
972     subl(11) = krrl;
976     subl(20) = krll;
979     subl(21) = krrl;
983     subl(32) = krll;
986     subl(33) = krrl;
991     subl(3) ^= subl(1);
994     subl(5) ^= subl(1);
997     subl(7) ^= subl(1);
999     subl(1) ^= subr(1) & ~subr(9);
1000     dw = subl(1) & subl(9), subr(1) ^= CAMELLIA_RL1(dw); /* modified for
1003     subl(11) ^= subl(1);
1006     subl(13) ^= subl(1);
1009     subl(15) ^= subl(1);
1011     subl(1) ^= subr(1) & ~subr(17);
1012     dw = subl(1) & subl(17), subr(1) ^= CAMELLIA_RL1(dw); /* modified for
1015     subl(19) ^= subl(1);
1018     subl(21) ^= subl(1);
1021     subl(23) ^= subl(1);
1023     subl(1) ^= subr(1) & ~subr(25);
1024     dw = subl(1) & subl(25), subr(1) ^= CAMELLIA_RL1(dw); /* modified for
1027     subl(27) ^= subl(1);
1030     subl(29) ^= subl(1);
1033     subl(31) ^= subl(1);
1036     subl(32) ^= subl(1);
1040     kw4l = subl(33);
1043     subl(30) ^= kw4l;
1046     subl(28) ^= kw4l;
1049     subl(26) ^= kw4l;
1052     dw = kw4l & subl(24), kw4r ^= CAMELLIA_RL1(dw); /* modified for FL(kl5) */
1054     subl(22) ^= kw4l;
1057     subl(20) ^= kw4l;
1060     subl(18) ^= kw4l;
1063     dw = kw4l & subl(16), kw4r ^= CAMELLIA_RL1(dw); /* modified for FL(kl3) */
1065     subl(14) ^= kw4l;
1068     subl(12) ^= kw4l;
1071     subl(10) ^= kw4l;
1074     dw = kw4l & subl(8), kw4r ^= CAMELLIA_RL1(dw); /* modified for FL(kl1) */
1076     subl(6) ^= kw4l;
1079     subl(4) ^= kw4l;
1082     subl(2) ^= kw4l;
1085     subl(0) ^= kw4l;
1089     CamelliaSubkeyL(0) = subl(0) ^ subl(2); /* kw1 */
1091     CamelliaSubkeyL(2) = subl(3); /* round 1 */
1093     CamelliaSubkeyL(3) = subl(2) ^ subl(4); /* round 2 */
1095     CamelliaSubkeyL(4) = subl(3) ^ subl(5); /* round 3 */
1097     CamelliaSubkeyL(5) = subl(4) ^ subl(6); /* round 4 */
1099     CamelliaSubkeyL(6) = subl(5) ^ subl(7); /* round 5 */
1101     tl = subl(10) ^ (subr(10) & ~subr(8));
1102     dw = tl & subl(8),          /* FL(kl1) */
1104     CamelliaSubkeyL(7) = subl(6) ^ tl; /* round 6 */
1106     CamelliaSubkeyL(8) = subl(8); /* FL(kl1) */
1108     CamelliaSubkeyL(9) = subl(9); /* FLinv(kl2) */
1110     tl = subl(7) ^ (subr(7) & ~subr(9));
1111     dw = tl & subl(9),          /* FLinv(kl2) */
1113     CamelliaSubkeyL(10) = tl ^ subl(11); /* round 7 */
1115     CamelliaSubkeyL(11) = subl(10) ^ subl(12); /* round 8 */
1117     CamelliaSubkeyL(12) = subl(11) ^ subl(13); /* round 9 */
1119     CamelliaSubkeyL(13) = subl(12) ^ subl(14); /* round 10 */
1121     CamelliaSubkeyL(14) = subl(13) ^ subl(15); /* round 11 */
1123     tl = subl(18) ^ (subr(18) & ~subr(16));
1124     dw = tl & subl(16),         /* FL(kl3) */
1126     CamelliaSubkeyL(15) = subl(14) ^ tl; /* round 12 */
1128     CamelliaSubkeyL(16) = subl(16); /* FL(kl3) */
1130     CamelliaSubkeyL(17) = subl(17); /* FLinv(kl4) */
1132     tl = subl(15) ^ (subr(15) & ~subr(17));
1133     dw = tl & subl(17),         /* FLinv(kl4) */
1135     CamelliaSubkeyL(18) = tl ^ subl(19); /* round 13 */
1137     CamelliaSubkeyL(19) = subl(18) ^ subl(20); /* round 14 */
1139     CamelliaSubkeyL(20) = subl(19) ^ subl(21); /* round 15 */
1141     CamelliaSubkeyL(21) = subl(20) ^ subl(22); /* round 16 */
1143     CamelliaSubkeyL(22) = subl(21) ^ subl(23); /* round 17 */
1145     tl = subl(26) ^ (subr(26)
1147     dw = tl & subl(24),         /* FL(kl5) */
1149     CamelliaSubkeyL(23) = subl(22) ^ tl; /* round 18 */
1151     CamelliaSubkeyL(24) = subl(24); /* FL(kl5) */
1153     CamelliaSubkeyL(25) = subl(25); /* FLinv(kl6) */
1155     tl = subl(23) ^ (subr(23) & ~subr(25));
1156     dw = tl & subl(25),         /* FLinv(kl6) */
1158     CamelliaSubkeyL(26) = tl ^ subl(27); /* round 19 */
1160     CamelliaSubkeyL(27) = subl(26) ^ subl(28); /* round 20 */
1162     CamelliaSubkeyL(28) = subl(27) ^ subl(29); /* round 21 */
1164     CamelliaSubkeyL(29) = subl(28) ^ subl(30); /* round 22 */
1166     CamelliaSubkeyL(30) = subl(29) ^ subl(31); /* round 23 */
1168     CamelliaSubkeyL(31) = subl(30); /* round 24 */
1170     CamelliaSubkeyL(32) = subl(32) ^ subl(31); /* kw3 */