1238384Sjkim/* ====================================================================
2238384Sjkim * Copyright (c) 2008 The OpenSSL Project.  All rights reserved.
3238384Sjkim *
4238384Sjkim * Redistribution and use in source and binary forms, with or without
5238384Sjkim * modification, are permitted provided that the following conditions
6238384Sjkim * are met:
7238384Sjkim *
8238384Sjkim * 1. Redistributions of source code must retain the above copyright
9280304Sjkim *    notice, this list of conditions and the following disclaimer.
10238384Sjkim *
11238384Sjkim * 2. Redistributions in binary form must reproduce the above copyright
12238384Sjkim *    notice, this list of conditions and the following disclaimer in
13238384Sjkim *    the documentation and/or other materials provided with the
14238384Sjkim *    distribution.
15238384Sjkim *
16238384Sjkim * 3. All advertising materials mentioning features or use of this
17238384Sjkim *    software must display the following acknowledgment:
18238384Sjkim *    "This product includes software developed by the OpenSSL Project
19238384Sjkim *    for use in the OpenSSL Toolkit. (http://www.openssl.org/)"
20238384Sjkim *
21238384Sjkim * 4. The names "OpenSSL Toolkit" and "OpenSSL Project" must not be used to
22238384Sjkim *    endorse or promote products derived from this software without
23238384Sjkim *    prior written permission. For written permission, please contact
24238384Sjkim *    openssl-core@openssl.org.
25238384Sjkim *
26238384Sjkim * 5. Products derived from this software may not be called "OpenSSL"
27238384Sjkim *    nor may "OpenSSL" appear in their names without prior written
28238384Sjkim *    permission of the OpenSSL Project.
29238384Sjkim *
30238384Sjkim * 6. Redistributions of any form whatsoever must retain the following
31238384Sjkim *    acknowledgment:
32238384Sjkim *    "This product includes software developed by the OpenSSL Project
33238384Sjkim *    for use in the OpenSSL Toolkit (http://www.openssl.org/)"
34238384Sjkim *
35238384Sjkim * THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT ``AS IS'' AND ANY
36238384Sjkim * EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
37238384Sjkim * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
38238384Sjkim * PURPOSE ARE DISCLAIMED.  IN NO EVENT SHALL THE OpenSSL PROJECT OR
39238384Sjkim * ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
40238384Sjkim * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
41238384Sjkim * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
42238384Sjkim * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
43238384Sjkim * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
44238384Sjkim * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
45238384Sjkim * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
46238384Sjkim * OF THE POSSIBILITY OF SUCH DAMAGE.
47238384Sjkim * ====================================================================
48238384Sjkim *
49238384Sjkim */
50238384Sjkim
51238384Sjkim#include <openssl/crypto.h>
52238384Sjkim#include "modes_lcl.h"
53238384Sjkim#include <string.h>
54238384Sjkim
55238384Sjkim#ifndef MODES_DEBUG
56238384Sjkim# ifndef NDEBUG
57238384Sjkim#  define NDEBUG
58238384Sjkim# endif
59238384Sjkim#endif
60238384Sjkim#include <assert.h>
61238384Sjkim
62238384Sjkim#ifndef STRICT_ALIGNMENT
63280304Sjkim# define STRICT_ALIGNMENT 0
64238384Sjkim#endif
65238384Sjkim
66238384Sjkimvoid CRYPTO_cbc128_encrypt(const unsigned char *in, unsigned char *out,
67280304Sjkim                           size_t len, const void *key,
68280304Sjkim                           unsigned char ivec[16], block128_f block)
69238384Sjkim{
70280304Sjkim    size_t n;
71280304Sjkim    const unsigned char *iv = ivec;
72238384Sjkim
73280304Sjkim    assert(in && out && key && ivec);
74238384Sjkim
75238384Sjkim#if !defined(OPENSSL_SMALL_FOOTPRINT)
76280304Sjkim    if (STRICT_ALIGNMENT &&
77280304Sjkim        ((size_t)in | (size_t)out | (size_t)ivec) % sizeof(size_t) != 0) {
78280304Sjkim        while (len >= 16) {
79280304Sjkim            for (n = 0; n < 16; ++n)
80280304Sjkim                out[n] = in[n] ^ iv[n];
81280304Sjkim            (*block) (out, out, key);
82280304Sjkim            iv = out;
83280304Sjkim            len -= 16;
84280304Sjkim            in += 16;
85280304Sjkim            out += 16;
86280304Sjkim        }
87280304Sjkim    } else {
88280304Sjkim        while (len >= 16) {
89280304Sjkim            for (n = 0; n < 16; n += sizeof(size_t))
90280304Sjkim                *(size_t *)(out + n) =
91280304Sjkim                    *(size_t *)(in + n) ^ *(size_t *)(iv + n);
92280304Sjkim            (*block) (out, out, key);
93280304Sjkim            iv = out;
94280304Sjkim            len -= 16;
95280304Sjkim            in += 16;
96280304Sjkim            out += 16;
97280304Sjkim        }
98280304Sjkim    }
99238384Sjkim#endif
100280304Sjkim    while (len) {
101280304Sjkim        for (n = 0; n < 16 && n < len; ++n)
102280304Sjkim            out[n] = in[n] ^ iv[n];
103280304Sjkim        for (; n < 16; ++n)
104280304Sjkim            out[n] = iv[n];
105280304Sjkim        (*block) (out, out, key);
106280304Sjkim        iv = out;
107280304Sjkim        if (len <= 16)
108280304Sjkim            break;
109280304Sjkim        len -= 16;
110280304Sjkim        in += 16;
111280304Sjkim        out += 16;
112280304Sjkim    }
113280304Sjkim    memcpy(ivec, iv, 16);
114238384Sjkim}
115238384Sjkim
116238384Sjkimvoid CRYPTO_cbc128_decrypt(const unsigned char *in, unsigned char *out,
117280304Sjkim                           size_t len, const void *key,
118280304Sjkim                           unsigned char ivec[16], block128_f block)
119238384Sjkim{
120280304Sjkim    size_t n;
121280304Sjkim    union {
122280304Sjkim        size_t t[16 / sizeof(size_t)];
123280304Sjkim        unsigned char c[16];
124280304Sjkim    } tmp;
125238384Sjkim
126280304Sjkim    assert(in && out && key && ivec);
127238384Sjkim
128238384Sjkim#if !defined(OPENSSL_SMALL_FOOTPRINT)
129280304Sjkim    if (in != out) {
130280304Sjkim        const unsigned char *iv = ivec;
131238384Sjkim
132280304Sjkim        if (STRICT_ALIGNMENT &&
133280304Sjkim            ((size_t)in | (size_t)out | (size_t)ivec) % sizeof(size_t) != 0) {
134280304Sjkim            while (len >= 16) {
135280304Sjkim                (*block) (in, out, key);
136280304Sjkim                for (n = 0; n < 16; ++n)
137280304Sjkim                    out[n] ^= iv[n];
138280304Sjkim                iv = in;
139280304Sjkim                len -= 16;
140280304Sjkim                in += 16;
141280304Sjkim                out += 16;
142280304Sjkim            }
143280304Sjkim        } else if (16 % sizeof(size_t) == 0) { /* always true */
144280304Sjkim            while (len >= 16) {
145280304Sjkim                size_t *out_t = (size_t *)out, *iv_t = (size_t *)iv;
146264331Sjkim
147280304Sjkim                (*block) (in, out, key);
148280304Sjkim                for (n = 0; n < 16 / sizeof(size_t); n++)
149280304Sjkim                    out_t[n] ^= iv_t[n];
150280304Sjkim                iv = in;
151280304Sjkim                len -= 16;
152280304Sjkim                in += 16;
153280304Sjkim                out += 16;
154280304Sjkim            }
155280304Sjkim        }
156280304Sjkim        memcpy(ivec, iv, 16);
157280304Sjkim    } else {
158280304Sjkim        if (STRICT_ALIGNMENT &&
159280304Sjkim            ((size_t)in | (size_t)out | (size_t)ivec) % sizeof(size_t) != 0) {
160280304Sjkim            unsigned char c;
161280304Sjkim            while (len >= 16) {
162280304Sjkim                (*block) (in, tmp.c, key);
163280304Sjkim                for (n = 0; n < 16; ++n) {
164280304Sjkim                    c = in[n];
165280304Sjkim                    out[n] = tmp.c[n] ^ ivec[n];
166280304Sjkim                    ivec[n] = c;
167280304Sjkim                }
168280304Sjkim                len -= 16;
169280304Sjkim                in += 16;
170280304Sjkim                out += 16;
171280304Sjkim            }
172280304Sjkim        } else if (16 % sizeof(size_t) == 0) { /* always true */
173280304Sjkim            while (len >= 16) {
174280304Sjkim                size_t c, *out_t = (size_t *)out, *ivec_t = (size_t *)ivec;
175280304Sjkim                const size_t *in_t = (const size_t *)in;
176264331Sjkim
177280304Sjkim                (*block) (in, tmp.c, key);
178280304Sjkim                for (n = 0; n < 16 / sizeof(size_t); n++) {
179280304Sjkim                    c = in_t[n];
180280304Sjkim                    out_t[n] = tmp.t[n] ^ ivec_t[n];
181280304Sjkim                    ivec_t[n] = c;
182280304Sjkim                }
183280304Sjkim                len -= 16;
184280304Sjkim                in += 16;
185280304Sjkim                out += 16;
186280304Sjkim            }
187280304Sjkim        }
188280304Sjkim    }
189238384Sjkim#endif
190280304Sjkim    while (len) {
191280304Sjkim        unsigned char c;
192280304Sjkim        (*block) (in, tmp.c, key);
193280304Sjkim        for (n = 0; n < 16 && n < len; ++n) {
194280304Sjkim            c = in[n];
195280304Sjkim            out[n] = tmp.c[n] ^ ivec[n];
196280304Sjkim            ivec[n] = c;
197280304Sjkim        }
198280304Sjkim        if (len <= 16) {
199280304Sjkim            for (; n < 16; ++n)
200280304Sjkim                ivec[n] = in[n];
201280304Sjkim            break;
202280304Sjkim        }
203280304Sjkim        len -= 16;
204280304Sjkim        in += 16;
205280304Sjkim        out += 16;
206280304Sjkim    }
207238384Sjkim}
208