1238384Sjkim/* ==================================================================== 2238384Sjkim * Copyright (c) 2008 The OpenSSL Project. All rights reserved. 3238384Sjkim * 4238384Sjkim * Redistribution and use in source and binary forms, with or without 5238384Sjkim * modification, are permitted provided that the following conditions 6238384Sjkim * are met: 7238384Sjkim * 8238384Sjkim * 1. Redistributions of source code must retain the above copyright 9280304Sjkim * notice, this list of conditions and the following disclaimer. 10238384Sjkim * 11238384Sjkim * 2. Redistributions in binary form must reproduce the above copyright 12238384Sjkim * notice, this list of conditions and the following disclaimer in 13238384Sjkim * the documentation and/or other materials provided with the 14238384Sjkim * distribution. 15238384Sjkim * 16238384Sjkim * 3. All advertising materials mentioning features or use of this 17238384Sjkim * software must display the following acknowledgment: 18238384Sjkim * "This product includes software developed by the OpenSSL Project 19238384Sjkim * for use in the OpenSSL Toolkit. (http://www.openssl.org/)" 20238384Sjkim * 21238384Sjkim * 4. The names "OpenSSL Toolkit" and "OpenSSL Project" must not be used to 22238384Sjkim * endorse or promote products derived from this software without 23238384Sjkim * prior written permission. For written permission, please contact 24238384Sjkim * openssl-core@openssl.org. 25238384Sjkim * 26238384Sjkim * 5. Products derived from this software may not be called "OpenSSL" 27238384Sjkim * nor may "OpenSSL" appear in their names without prior written 28238384Sjkim * permission of the OpenSSL Project. 29238384Sjkim * 30238384Sjkim * 6. Redistributions of any form whatsoever must retain the following 31238384Sjkim * acknowledgment: 32238384Sjkim * "This product includes software developed by the OpenSSL Project 33238384Sjkim * for use in the OpenSSL Toolkit (http://www.openssl.org/)" 34238384Sjkim * 35238384Sjkim * THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT ``AS IS'' AND ANY 36238384Sjkim * EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 37238384Sjkim * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR 38238384Sjkim * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE OpenSSL PROJECT OR 39238384Sjkim * ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, 40238384Sjkim * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT 41238384Sjkim * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; 42238384Sjkim * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 43238384Sjkim * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, 44238384Sjkim * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) 45238384Sjkim * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED 46238384Sjkim * OF THE POSSIBILITY OF SUCH DAMAGE. 47238384Sjkim * ==================================================================== 48238384Sjkim * 49238384Sjkim */ 50238384Sjkim 51238384Sjkim#include <openssl/crypto.h> 52238384Sjkim#include "modes_lcl.h" 53238384Sjkim#include <string.h> 54238384Sjkim 55238384Sjkim#ifndef MODES_DEBUG 56238384Sjkim# ifndef NDEBUG 57238384Sjkim# define NDEBUG 58238384Sjkim# endif 59238384Sjkim#endif 60238384Sjkim#include <assert.h> 61238384Sjkim 62238384Sjkim#ifndef STRICT_ALIGNMENT 63280304Sjkim# define STRICT_ALIGNMENT 0 64238384Sjkim#endif 65238384Sjkim 66238384Sjkimvoid CRYPTO_cbc128_encrypt(const unsigned char *in, unsigned char *out, 67280304Sjkim size_t len, const void *key, 68280304Sjkim unsigned char ivec[16], block128_f block) 69238384Sjkim{ 70280304Sjkim size_t n; 71280304Sjkim const unsigned char *iv = ivec; 72238384Sjkim 73280304Sjkim assert(in && out && key && ivec); 74238384Sjkim 75238384Sjkim#if !defined(OPENSSL_SMALL_FOOTPRINT) 76280304Sjkim if (STRICT_ALIGNMENT && 77280304Sjkim ((size_t)in | (size_t)out | (size_t)ivec) % sizeof(size_t) != 0) { 78280304Sjkim while (len >= 16) { 79280304Sjkim for (n = 0; n < 16; ++n) 80280304Sjkim out[n] = in[n] ^ iv[n]; 81280304Sjkim (*block) (out, out, key); 82280304Sjkim iv = out; 83280304Sjkim len -= 16; 84280304Sjkim in += 16; 85280304Sjkim out += 16; 86280304Sjkim } 87280304Sjkim } else { 88280304Sjkim while (len >= 16) { 89280304Sjkim for (n = 0; n < 16; n += sizeof(size_t)) 90280304Sjkim *(size_t *)(out + n) = 91280304Sjkim *(size_t *)(in + n) ^ *(size_t *)(iv + n); 92280304Sjkim (*block) (out, out, key); 93280304Sjkim iv = out; 94280304Sjkim len -= 16; 95280304Sjkim in += 16; 96280304Sjkim out += 16; 97280304Sjkim } 98280304Sjkim } 99238384Sjkim#endif 100280304Sjkim while (len) { 101280304Sjkim for (n = 0; n < 16 && n < len; ++n) 102280304Sjkim out[n] = in[n] ^ iv[n]; 103280304Sjkim for (; n < 16; ++n) 104280304Sjkim out[n] = iv[n]; 105280304Sjkim (*block) (out, out, key); 106280304Sjkim iv = out; 107280304Sjkim if (len <= 16) 108280304Sjkim break; 109280304Sjkim len -= 16; 110280304Sjkim in += 16; 111280304Sjkim out += 16; 112280304Sjkim } 113280304Sjkim memcpy(ivec, iv, 16); 114238384Sjkim} 115238384Sjkim 116238384Sjkimvoid CRYPTO_cbc128_decrypt(const unsigned char *in, unsigned char *out, 117280304Sjkim size_t len, const void *key, 118280304Sjkim unsigned char ivec[16], block128_f block) 119238384Sjkim{ 120280304Sjkim size_t n; 121280304Sjkim union { 122280304Sjkim size_t t[16 / sizeof(size_t)]; 123280304Sjkim unsigned char c[16]; 124280304Sjkim } tmp; 125238384Sjkim 126280304Sjkim assert(in && out && key && ivec); 127238384Sjkim 128238384Sjkim#if !defined(OPENSSL_SMALL_FOOTPRINT) 129280304Sjkim if (in != out) { 130280304Sjkim const unsigned char *iv = ivec; 131238384Sjkim 132280304Sjkim if (STRICT_ALIGNMENT && 133280304Sjkim ((size_t)in | (size_t)out | (size_t)ivec) % sizeof(size_t) != 0) { 134280304Sjkim while (len >= 16) { 135280304Sjkim (*block) (in, out, key); 136280304Sjkim for (n = 0; n < 16; ++n) 137280304Sjkim out[n] ^= iv[n]; 138280304Sjkim iv = in; 139280304Sjkim len -= 16; 140280304Sjkim in += 16; 141280304Sjkim out += 16; 142280304Sjkim } 143280304Sjkim } else if (16 % sizeof(size_t) == 0) { /* always true */ 144280304Sjkim while (len >= 16) { 145280304Sjkim size_t *out_t = (size_t *)out, *iv_t = (size_t *)iv; 146264331Sjkim 147280304Sjkim (*block) (in, out, key); 148280304Sjkim for (n = 0; n < 16 / sizeof(size_t); n++) 149280304Sjkim out_t[n] ^= iv_t[n]; 150280304Sjkim iv = in; 151280304Sjkim len -= 16; 152280304Sjkim in += 16; 153280304Sjkim out += 16; 154280304Sjkim } 155280304Sjkim } 156280304Sjkim memcpy(ivec, iv, 16); 157280304Sjkim } else { 158280304Sjkim if (STRICT_ALIGNMENT && 159280304Sjkim ((size_t)in | (size_t)out | (size_t)ivec) % sizeof(size_t) != 0) { 160280304Sjkim unsigned char c; 161280304Sjkim while (len >= 16) { 162280304Sjkim (*block) (in, tmp.c, key); 163280304Sjkim for (n = 0; n < 16; ++n) { 164280304Sjkim c = in[n]; 165280304Sjkim out[n] = tmp.c[n] ^ ivec[n]; 166280304Sjkim ivec[n] = c; 167280304Sjkim } 168280304Sjkim len -= 16; 169280304Sjkim in += 16; 170280304Sjkim out += 16; 171280304Sjkim } 172280304Sjkim } else if (16 % sizeof(size_t) == 0) { /* always true */ 173280304Sjkim while (len >= 16) { 174280304Sjkim size_t c, *out_t = (size_t *)out, *ivec_t = (size_t *)ivec; 175280304Sjkim const size_t *in_t = (const size_t *)in; 176264331Sjkim 177280304Sjkim (*block) (in, tmp.c, key); 178280304Sjkim for (n = 0; n < 16 / sizeof(size_t); n++) { 179280304Sjkim c = in_t[n]; 180280304Sjkim out_t[n] = tmp.t[n] ^ ivec_t[n]; 181280304Sjkim ivec_t[n] = c; 182280304Sjkim } 183280304Sjkim len -= 16; 184280304Sjkim in += 16; 185280304Sjkim out += 16; 186280304Sjkim } 187280304Sjkim } 188280304Sjkim } 189238384Sjkim#endif 190280304Sjkim while (len) { 191280304Sjkim unsigned char c; 192280304Sjkim (*block) (in, tmp.c, key); 193280304Sjkim for (n = 0; n < 16 && n < len; ++n) { 194280304Sjkim c = in[n]; 195280304Sjkim out[n] = tmp.c[n] ^ ivec[n]; 196280304Sjkim ivec[n] = c; 197280304Sjkim } 198280304Sjkim if (len <= 16) { 199280304Sjkim for (; n < 16; ++n) 200280304Sjkim ivec[n] = in[n]; 201280304Sjkim break; 202280304Sjkim } 203280304Sjkim len -= 16; 204280304Sjkim in += 16; 205280304Sjkim out += 16; 206280304Sjkim } 207238384Sjkim} 208