linux-master/crypto/twofish_common.c

43 /* These two tables are the q0 and q1 permutations, exactly as described in
71 static const u8 q1[256] = {
96 /* These MDS tables are actually tables of MDS composed with q0 and q1,
102  * mds[0][i] = MDS (q1[i] 0 0 0)^T  mds[1][i] = MDS (0 q0[i] 0 0)^T
103  * mds[2][i] = MDS (0 0 q1[i] 0)^T  mds[3][i] = MDS (0 0 0 q0[i])^T
395  * S-box entries, preprocessed through q0 and q1. */
480  * are the index numbers preprocessed through the q0 and q1 tables
486    ctx->s[2][i] = mds[2][q1[(a) ^ sc] ^ sg]; \
487    ctx->s[3][i] = mds[3][q1[(b) ^ sd] ^ sh]
493    ctx->s[1][i] = mds[1][q0[q1[(b) ^ sb] ^ sf] ^ sj]; \
494    ctx->s[2][i] = mds[2][q1[q0[(a) ^ sc] ^ sg] ^ sk]; \
495    ctx->s[3][i] = mds[3][q1[q1[(a) ^ sd] ^ sh] ^ sl];
500    ctx->s[0][i] = mds[0][q0[q0[q1[(b) ^ sa] ^ se] ^ si] ^ sm]; \
501    ctx->s[1][i] = mds[1][q0[q1[q1[(a) ^ sb] ^ sf] ^ sj] ^ sn]; \
502    ctx->s[2][i] = mds[2][q1[q0[q0[(a) ^ sc] ^ sg] ^ sk] ^ so]; \
503    ctx->s[3][i] = mds[3][q1[q1[q0[(b) ^ sd] ^ sh] ^ sl] ^ sp];
509  * preprocessed through q0 and q1 respectively; for longer keys they are the
520  * preprocessed through q1; j is the index of the first key byte to use.
525  * preprocessed through q0 and q1 respectively; j is the index of the first
532    ^ mds[2][q1[c ^ key[(j) + 10]] ^ key[(j) + 2]] \
533    ^ mds[3][q1[d ^ key[(j) + 11]] ^ key[(j) + 3]]
544 	     q1[b ^ key[(j) + 17]], \
546 	     q1[d ^ key[(j) + 19]], j)
556    CALC_K192_2 (q1[b ^ key[(j) + 24]], \
557 	        q1[a ^ key[(j) + 25]], \
649 			CALC_K256 (w, i, q0[i], q1[i], q0[i+1], q1[i+1]);
652 			CALC_K256 (k, i, q0[i+8], q1[i+8], q0[i+9], q1[i+9]);
662 			CALC_K192 (w, i, q0[i], q1[i], q0[i+1], q1[i+1]);
665 			CALC_K192 (k, i, q0[i+8], q1[i+8], q0[i+9], q1[i+9]);
675 			CALC_K (w, i, q0[i], q1[i], q0[i+1], q1[i+1]);
678 			CALC_K (k, i, q0[i+8], q1[i+8], q0[i+9], q1[i+9]);