crypto/aes/aes_core.c

56 #  define U64(C) C##UI64
58 #  define U64(C) C##UL
60 #  define U64(C) C##ULL
91     b = a & U64(0x8080808080808080);
94     b &= U64(0x1B1B1B1B1B1B1B1B);
241     y = ((x & U64(0xFEFEFEFEFEFEFEFE)) >> 1) | ((x & U64(0x0101010101010101)) << 7);
242     x &= U64(0xDDDDDDDDDDDDDDDD);
243     x ^= y & U64(0x5757575757575757);
244     y = ((y & U64(0xFEFEFEFEFEFEFEFE)) >> 1) | ((y & U64(0x0101010101010101)) << 7);
245     x ^= y & U64(0x1C1C1C1C1C1C1C1C);
246     y = ((y & U64(0xFEFEFEFEFEFEFEFE)) >> 1) | ((y & U64(0x0101010101010101)) << 7);
247     x ^= y & U64(0x4A4A4A4A4A4A4A4A);
248     y = ((y & U64(0xFEFEFEFEFEFEFEFE)) >> 1) | ((y & U64(0x0101010101010101)) << 7);
249     x ^= y & U64(0x4242424242424242);
250     y = ((y & U64(0xFEFEFEFEFEFEFEFE)) >> 1) | ((y & U64(0x0101010101010101)) << 7);
251     x ^= y & U64(0x6464646464646464);
252     y = ((y & U64(0xFEFEFEFEFEFEFEFE)) >> 1) | ((y & U64(0x0101010101010101)) << 7);
253     x ^= y & U64(0xE0E0E0E0E0E0E0E0);
255     a1 ^= (x & U64(0xF0F0F0F0F0F0F0F0)) >> 4;
256     a2 = ((x & U64(0xCCCCCCCCCCCCCCCC)) >> 2) | ((x & U64(0x3333333333333333)) << 2);
258     a3 ^= (a3 & U64(0xAAAAAAAAAAAAAAAA)) >> 1;
259     a3 ^= (((x << 1) & a1) ^ ((a1 << 1) & x)) & U64(0xAAAAAAAAAAAAAAAA);
261     a4 ^= (a4 & U64(0xAAAAAAAAAAAAAAAA)) >> 1;
262     a4 ^= (((a2 << 1) & a1) ^ ((a1 << 1) & a2)) & U64(0xAAAAAAAAAAAAAAAA);
263     a5 = (a3 & U64(0xCCCCCCCCCCCCCCCC)) >> 2;
264     a3 ^= ((a4 << 2) ^ a4) & U64(0xCCCCCCCCCCCCCCCC);
265     a4 = a5 & U64(0x2222222222222222);
267     a4 ^= (a5 << 1) & U64(0x2222222222222222);
269     a5 = a3 & U64(0xA0A0A0A0A0A0A0A0);
271     a5 ^= (a3 << 1) & U64(0xA0A0A0A0A0A0A0A0);
272     a4 = a5 & U64(0xC0C0C0C0C0C0C0C0);
274     a4 ^= (a5 << 2) & U64(0xC0C0C0C0C0C0C0C0);
275     a5 = a6 & U64(0x2020202020202020);
277     a5 ^= (a6 << 1) & U64(0x2020202020202020);
280     a3 &= U64(0x0F0F0F0F0F0F0F0F);
282     a2 ^= (a3 & U64(0x0C0C0C0C0C0C0C0C)) >> 2;
284     a4 ^= (a4 & U64(0x0A0A0A0A0A0A0A0A)) >> 1;
285     a4 ^= (((a3 << 1) & a2) ^ ((a2 << 1) & a3)) & U64(0x0A0A0A0A0A0A0A0A);
286     a5 = a4 & U64(0x0808080808080808);
288     a5 ^= (a4 << 1) & U64(0x0808080808080808);
290     a4 &= U64(0x0303030303030303);
291     a4 ^= (a4 & U64(0x0202020202020202)) >> 1;
294     a3 ^= (a3 & U64(0x0A0A0A0A0A0A0A0A)) >> 1;
295     a3 ^= (((a2 << 1) & a4) ^ ((a4 << 1) & a2)) & U64(0x0A0A0A0A0A0A0A0A);
297     a2 = ((a1 & U64(0xCCCCCCCCCCCCCCCC)) >> 2) | ((a1 & U64(0x3333333333333333)) << 2);
299     x ^= (x & U64(0xAAAAAAAAAAAAAAAA)) >> 1;
300     x ^= (((a1 << 1) & a3) ^ ((a3 << 1) & a1)) & U64(0xAAAAAAAAAAAAAAAA);
302     a4 ^= (a4 & U64(0xAAAAAAAAAAAAAAAA)) >> 1;
303     a4 ^= (((a2 << 1) & a3) ^ ((a3 << 1) & a2)) & U64(0xAAAAAAAAAAAAAAAA);
304     a5 = (x & U64(0xCCCCCCCCCCCCCCCC)) >> 2;
305     x ^= ((a4 << 2) ^ a4) & U64(0xCCCCCCCCCCCCCCCC);
306     a4 = a5 & U64(0x2222222222222222);
308     a4 ^= (a5 << 1) & U64(0x2222222222222222);
310     y = ((x & U64(0xFEFEFEFEFEFEFEFE)) >> 1) | ((x & U64(0x0101010101010101)) << 7);
311     x &= U64(0x3939393939393939);
312     x ^= y & U64(0x3F3F3F3F3F3F3F3F);
313     y = ((y & U64(0xFCFCFCFCFCFCFCFC)) >> 2) | ((y & U64(0x0303030303030303)) << 6);
314     x ^= y & U64(0x9797979797979797);
315     y = ((y & U64(0xFEFEFEFEFEFEFEFE)) >> 1) | ((y & U64(0x0101010101010101)) << 7);
316     x ^= y & U64(0x9B9B9B9B9B9B9B9B);
317     y = ((y & U64(0xFEFEFEFEFEFEFEFE)) >> 1) | ((y & U64(0x0101010101010101)) << 7);
318     x ^= y & U64(0x3C3C3C3C3C3C3C3C);
319     y = ((y & U64(0xFEFEFEFEFEFEFEFE)) >> 1) | ((y & U64(0x0101010101010101)) << 7);
320     x ^= y & U64(0xDDDDDDDDDDDDDDDD);
321     y = ((y & U64(0xFEFEFEFEFEFEFEFE)) >> 1) | ((y & U64(0x0101010101010101)) << 7);
322     x ^= y & U64(0x7272727272727272);
323     x ^= U64(0x6363636363636363);
335     x ^= U64(0x6363636363636363);
336     y = ((x & U64(0xFEFEFEFEFEFEFEFE)) >> 1) | ((x & U64(0x0101010101010101)) << 7);
337     x &= U64(0xFDFDFDFDFDFDFDFD);
338     x ^= y & U64(0x5E5E5E5E5E5E5E5E);
339     y = ((y & U64(0xFEFEFEFEFEFEFEFE)) >> 1) | ((y & U64(0x0101010101010101)) << 7);
340     x ^= y & U64(0xF3F3F3F3F3F3F3F3);
341     y = ((y & U64(0xFEFEFEFEFEFEFEFE)) >> 1) | ((y & U64(0x0101010101010101)) << 7);
342     x ^= y & U64(0xF5F5F5F5F5F5F5F5);
343     y = ((y & U64(0xFEFEFEFEFEFEFEFE)) >> 1) | ((y & U64(0x0101010101010101)) << 7);
344     x ^= y & U64(0x7878787878787878);
345     y = ((y & U64(0xFEFEFEFEFEFEFEFE)) >> 1) | ((y & U64(0x0101010101010101)) << 7);
346     x ^= y & U64(0x7777777777777777);
347     y = ((y & U64(0xFEFEFEFEFEFEFEFE)) >> 1) | ((y & U64(0x0101010101010101)) << 7);
348     x ^= y & U64(0x1515151515151515);
349     y = ((y & U64(0xFEFEFEFEFEFEFEFE)) >> 1) | ((y & U64(0x0101010101010101)) << 7);
350     x ^= y & U64(0xA5A5A5A5A5A5A5A5);
352     a1 ^= (x & U64(0xF0F0F0F0F0F0F0F0)) >> 4;
353     a2 = ((x & U64(0xCCCCCCCCCCCCCCCC)) >> 2) | ((x & U64(0x3333333333333333)) << 2);
355     a3 ^= (a3 & U64(0xAAAAAAAAAAAAAAAA)) >> 1;
356     a3 ^= (((x << 1) & a1) ^ ((a1 << 1) & x)) & U64(0xAAAAAAAAAAAAAAAA);
358     a4 ^= (a4 & U64(0xAAAAAAAAAAAAAAAA)) >> 1;
359     a4 ^= (((a2 << 1) & a1) ^ ((a1 << 1) & a2)) & U64(0xAAAAAAAAAAAAAAAA);
360     a5 = (a3 & U64(0xCCCCCCCCCCCCCCCC)) >> 2;
361     a3 ^= ((a4 << 2) ^ a4) & U64(0xCCCCCCCCCCCCCCCC);
362     a4 = a5 & U64(0x2222222222222222);
364     a4 ^= (a5 << 1) & U64(0x2222222222222222);
366     a5 = a3 & U64(0xA0A0A0A0A0A0A0A0);
368     a5 ^= (a3 << 1) & U64(0xA0A0A0A0A0A0A0A0);
369     a4 = a5 & U64(0xC0C0C0C0C0C0C0C0);
371     a4 ^= (a5 << 2) & U64(0xC0C0C0C0C0C0C0C0);
372     a5 = a6 & U64(0x2020202020202020);
374     a5 ^= (a6 << 1) & U64(0x2020202020202020);
377     a3 &= U64(0x0F0F0F0F0F0F0F0F);
379     a2 ^= (a3 & U64(0x0C0C0C0C0C0C0C0C)) >> 2;
381     a4 ^= (a4 & U64(0x0A0A0A0A0A0A0A0A)) >> 1;
382     a4 ^= (((a3 << 1) & a2) ^ ((a2 << 1) & a3)) & U64(0x0A0A0A0A0A0A0A0A);
383     a5 = a4 & U64(0x0808080808080808);
385     a5 ^= (a4 << 1) & U64(0x0808080808080808);
387     a4 &= U64(0x0303030303030303);
388     a4 ^= (a4 & U64(0x0202020202020202)) >> 1;
391     a3 ^= (a3 & U64(0x0A0A0A0A0A0A0A0A)) >> 1;
392     a3 ^= (((a2 << 1) & a4) ^ ((a4 << 1) & a2)) & U64(0x0A0A0A0A0A0A0A0A);
394     a2 = ((a1 & U64(0xCCCCCCCCCCCCCCCC)) >> 2) | ((a1 & U64(0x3333333333333333)) << 2);
396     x ^= (x & U64(0xAAAAAAAAAAAAAAAA)) >> 1;
397     x ^= (((a1 << 1) & a3) ^ ((a3 << 1) & a1)) & U64(0xAAAAAAAAAAAAAAAA);
399     a4 ^= (a4 & U64(0xAAAAAAAAAAAAAAAA)) >> 1;
400     a4 ^= (((a2 << 1) & a3) ^ ((a3 << 1) & a2)) & U64(0xAAAAAAAAAAAAAAAA);
401     a5 = (x & U64(0xCCCCCCCCCCCCCCCC)) >> 2;
402     x ^= ((a4 << 2) ^ a4) & U64(0xCCCCCCCCCCCCCCCC);
403     a4 = a5 & U64(0x2222222222222222);
405     a4 ^= (a5 << 1) & U64(0x2222222222222222);
407     y = ((x & U64(0xFEFEFEFEFEFEFEFE)) >> 1) | ((x & U64(0x0101010101010101)) << 7);
408     x &= U64(0xB5B5B5B5B5B5B5B5);
409     x ^= y & U64(0x4040404040404040);
410     y = ((y & U64(0xFEFEFEFEFEFEFEFE)) >> 1) | ((y & U64(0x0101010101010101)) << 7);
411     x ^= y & U64(0x8080808080808080);
412     y = ((y & U64(0xFEFEFEFEFEFEFEFE)) >> 1) | ((y & U64(0x0101010101010101)) << 7);
413     x ^= y & U64(0x1616161616161616);
414     y = ((y & U64(0xFEFEFEFEFEFEFEFE)) >> 1) | ((y & U64(0x0101010101010101)) << 7);
415     x ^= y & U64(0xEBEBEBEBEBEBEBEB);
416     y = ((y & U64(0xFEFEFEFEFEFEFEFE)) >> 1) | ((y & U64(0x0101010101010101)) << 7);
417     x ^= y & U64(0x9797979797979797);
418     y = ((y & U64(0xFEFEFEFEFEFEFEFE)) >> 1) | ((y & U64(0x0101010101010101)) << 7);
419     x ^= y & U64(0xFBFBFBFBFBFBFBFB);
420     y = ((y & U64(0xFEFEFEFEFEFEFEFE)) >> 1) | ((y & U64(0x0101010101010101)) << 7);
421     x ^= y & U64(0x7D7D7D7D7D7D7D7D);
472         s.d ^= ((s.d & U64(0xFFFF0000FFFF0000)) >> 16)
473                | ((s.d & U64(0x0000FFFF0000FFFF)) << 16);
474         s.d ^= ((s.d & U64(0xFF00FF00FF00FF00)) >> 8)
475                | ((s.d & U64(0x00FF00FF00FF00FF)) << 8);
500         s.d ^= ((s.d & U64(0xFFFF0000FFFF0000)) >> 16)
501                | ((s.d & U64(0x0000FFFF0000FFFF)) << 16);
502         s.d ^= ((s.d & U64(0xFF00FF00FF00FF00)) >> 8)
503                | ((s.d & U64(0x00FF00FF00FF00FF)) << 8);
516         s1.d ^= ((s1.d & U64(0xFFFF0000FFFF0000)) >> 16)
517                 | ((s1.d & U64(0x0000FFFF0000FFFF)) << 16);
520         s1.d ^= ((s1.d & U64(0xFF00FF00FF00FF00)) >> 8)
521                 | ((s1.d & U64(0x00FF00FF00FF00FF)) << 8);