linux-master/crypto/twofish_common.c

43 /* These two tables are the q0 and q1 permutations, exactly as described in
46 static const u8 q0[256] = {
96 /* These MDS tables are actually tables of MDS composed with q0 and q1,
102  * mds[0][i] = MDS (q1[i] 0 0 0)^T  mds[1][i] = MDS (0 q0[i] 0 0)^T
103  * mds[2][i] = MDS (0 0 q1[i] 0)^T  mds[3][i] = MDS (0 0 0 q0[i])^T
395  * S-box entries, preprocessed through q0 and q1. */
480  * are the index numbers preprocessed through the q0 and q1 tables
484    ctx->s[0][i] = mds[0][q0[(a) ^ sa] ^ se]; \
485    ctx->s[1][i] = mds[1][q0[(b) ^ sb] ^ sf]; \
492    ctx->s[0][i] = mds[0][q0[q0[(b) ^ sa] ^ se] ^ si]; \
493    ctx->s[1][i] = mds[1][q0[q1[(b) ^ sb] ^ sf] ^ sj]; \
494    ctx->s[2][i] = mds[2][q1[q0[(a) ^ sc] ^ sg] ^ sk]; \
500    ctx->s[0][i] = mds[0][q0[q0[q1[(b) ^ sa] ^ se] ^ si] ^ sm]; \
501    ctx->s[1][i] = mds[1][q0[q1[q1[(a) ^ sb] ^ sf] ^ sj] ^ sn]; \
502    ctx->s[2][i] = mds[2][q1[q0[q0[(a) ^ sc] ^ sg] ^ sk] ^ so]; \
503    ctx->s[3][i] = mds[3][q1[q1[q0[(b) ^ sd] ^ sh] ^ sl] ^ sp];
509  * preprocessed through q0 and q1 respectively; for longer keys they are the
519  * are the index preprocessed through q0, and a = b are the index
525  * preprocessed through q0 and q1 respectively; j is the index of the first
530      mds[0][q0[a ^ key[(j) + 8]] ^ key[j]] \
531    ^ mds[1][q0[b ^ key[(j) + 9]] ^ key[(j) + 1]] \
543    CALC_K_2 (q0[a ^ key[(j) + 16]], \
545 	     q0[c ^ key[(j) + 18]], \
558 	        q0[a ^ key[(j) + 26]], \
559 	        q0[b ^ key[(j) + 27]], j)
649 			CALC_K256 (w, i, q0[i], q1[i], q0[i+1], q1[i+1]);
652 			CALC_K256 (k, i, q0[i+8], q1[i+8], q0[i+9], q1[i+9]);
662 			CALC_K192 (w, i, q0[i], q1[i], q0[i+1], q1[i+1]);
665 			CALC_K192 (k, i, q0[i+8], q1[i+8], q0[i+9], q1[i+9]);
675 			CALC_K (w, i, q0[i], q1[i], q0[i+1], q1[i+1]);
678 			CALC_K (k, i, q0[i+8], q1[i+8], q0[i+9], q1[i+9]);