1238384Sjkim/* ==================================================================== 2238384Sjkim * Copyright (c) 2008 The OpenSSL Project. All rights reserved. 3238384Sjkim * 4238384Sjkim * Redistribution and use in source and binary forms, with or without 5238384Sjkim * modification, are permitted provided that the following conditions 6238384Sjkim * are met: 7238384Sjkim * 8238384Sjkim * 1. Redistributions of source code must retain the above copyright 9280304Sjkim * notice, this list of conditions and the following disclaimer. 10238384Sjkim * 11238384Sjkim * 2. Redistributions in binary form must reproduce the above copyright 12238384Sjkim * notice, this list of conditions and the following disclaimer in 13238384Sjkim * the documentation and/or other materials provided with the 14238384Sjkim * distribution. 15238384Sjkim * 16238384Sjkim * 3. All advertising materials mentioning features or use of this 17238384Sjkim * software must display the following acknowledgment: 18238384Sjkim * "This product includes software developed by the OpenSSL Project 19238384Sjkim * for use in the OpenSSL Toolkit. (http://www.openssl.org/)" 20238384Sjkim * 21238384Sjkim * 4. The names "OpenSSL Toolkit" and "OpenSSL Project" must not be used to 22238384Sjkim * endorse or promote products derived from this software without 23238384Sjkim * prior written permission. For written permission, please contact 24238384Sjkim * openssl-core@openssl.org. 25238384Sjkim * 26238384Sjkim * 5. Products derived from this software may not be called "OpenSSL" 27238384Sjkim * nor may "OpenSSL" appear in their names without prior written 28238384Sjkim * permission of the OpenSSL Project. 29238384Sjkim * 30238384Sjkim * 6. Redistributions of any form whatsoever must retain the following 31238384Sjkim * acknowledgment: 32238384Sjkim * "This product includes software developed by the OpenSSL Project 33238384Sjkim * for use in the OpenSSL Toolkit (http://www.openssl.org/)" 34238384Sjkim * 35238384Sjkim * THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT ``AS IS'' AND ANY 36238384Sjkim * EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 37238384Sjkim * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR 38238384Sjkim * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE OpenSSL PROJECT OR 39238384Sjkim * ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, 40238384Sjkim * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT 41238384Sjkim * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; 42238384Sjkim * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 43238384Sjkim * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, 44238384Sjkim * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) 45238384Sjkim * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED 46238384Sjkim * OF THE POSSIBILITY OF SUCH DAMAGE. 47238384Sjkim * ==================================================================== 48238384Sjkim * 49238384Sjkim */ 50238384Sjkim 51238384Sjkim#include <openssl/crypto.h> 52238384Sjkim#include "modes_lcl.h" 53238384Sjkim#include <string.h> 54238384Sjkim 55238384Sjkim#ifndef MODES_DEBUG 56238384Sjkim# ifndef NDEBUG 57238384Sjkim# define NDEBUG 58238384Sjkim# endif 59238384Sjkim#endif 60238384Sjkim#include <assert.h> 61238384Sjkim 62280304Sjkim/* 63280304Sjkim * The input and output encrypted as though 128bit ofb mode is being used. 64280304Sjkim * The extra state information to record how much of the 128bit block we have 65280304Sjkim * used is contained in *num; 66238384Sjkim */ 67238384Sjkimvoid CRYPTO_ofb128_encrypt(const unsigned char *in, unsigned char *out, 68280304Sjkim size_t len, const void *key, 69280304Sjkim unsigned char ivec[16], int *num, block128_f block) 70238384Sjkim{ 71280304Sjkim unsigned int n; 72280304Sjkim size_t l = 0; 73238384Sjkim 74280304Sjkim assert(in && out && key && ivec && num); 75238384Sjkim 76280304Sjkim n = *num; 77238384Sjkim 78238384Sjkim#if !defined(OPENSSL_SMALL_FOOTPRINT) 79280304Sjkim if (16 % sizeof(size_t) == 0) { /* always true actually */ 80280304Sjkim do { 81280304Sjkim while (n && len) { 82280304Sjkim *(out++) = *(in++) ^ ivec[n]; 83280304Sjkim --len; 84280304Sjkim n = (n + 1) % 16; 85280304Sjkim } 86280304Sjkim# if defined(STRICT_ALIGNMENT) 87280304Sjkim if (((size_t)in | (size_t)out | (size_t)ivec) % sizeof(size_t) != 88280304Sjkim 0) 89280304Sjkim break; 90280304Sjkim# endif 91280304Sjkim while (len >= 16) { 92280304Sjkim (*block) (ivec, ivec, key); 93280304Sjkim for (; n < 16; n += sizeof(size_t)) 94280304Sjkim *(size_t *)(out + n) = 95280304Sjkim *(size_t *)(in + n) ^ *(size_t *)(ivec + n); 96280304Sjkim len -= 16; 97280304Sjkim out += 16; 98280304Sjkim in += 16; 99280304Sjkim n = 0; 100280304Sjkim } 101280304Sjkim if (len) { 102280304Sjkim (*block) (ivec, ivec, key); 103280304Sjkim while (len--) { 104280304Sjkim out[n] = in[n] ^ ivec[n]; 105280304Sjkim ++n; 106280304Sjkim } 107280304Sjkim } 108280304Sjkim *num = n; 109280304Sjkim return; 110280304Sjkim } while (0); 111280304Sjkim } 112280304Sjkim /* the rest would be commonly eliminated by x86* compiler */ 113238384Sjkim#endif 114280304Sjkim while (l < len) { 115280304Sjkim if (n == 0) { 116280304Sjkim (*block) (ivec, ivec, key); 117280304Sjkim } 118280304Sjkim out[l] = in[l] ^ ivec[n]; 119280304Sjkim ++l; 120280304Sjkim n = (n + 1) % 16; 121280304Sjkim } 122238384Sjkim 123280304Sjkim *num = n; 124238384Sjkim} 125