1238384Sjkim/* ====================================================================
2238384Sjkim * Copyright (c) 2008 The OpenSSL Project.  All rights reserved.
3238384Sjkim *
4238384Sjkim * Redistribution and use in source and binary forms, with or without
5238384Sjkim * modification, are permitted provided that the following conditions
6238384Sjkim * are met:
7238384Sjkim *
8238384Sjkim * 1. Redistributions of source code must retain the above copyright
9280304Sjkim *    notice, this list of conditions and the following disclaimer.
10238384Sjkim *
11238384Sjkim * 2. Redistributions in binary form must reproduce the above copyright
12238384Sjkim *    notice, this list of conditions and the following disclaimer in
13238384Sjkim *    the documentation and/or other materials provided with the
14238384Sjkim *    distribution.
15238384Sjkim *
16238384Sjkim * 3. All advertising materials mentioning features or use of this
17238384Sjkim *    software must display the following acknowledgment:
18238384Sjkim *    "This product includes software developed by the OpenSSL Project
19238384Sjkim *    for use in the OpenSSL Toolkit. (http://www.openssl.org/)"
20238384Sjkim *
21238384Sjkim * 4. The names "OpenSSL Toolkit" and "OpenSSL Project" must not be used to
22238384Sjkim *    endorse or promote products derived from this software without
23238384Sjkim *    prior written permission. For written permission, please contact
24238384Sjkim *    openssl-core@openssl.org.
25238384Sjkim *
26238384Sjkim * 5. Products derived from this software may not be called "OpenSSL"
27238384Sjkim *    nor may "OpenSSL" appear in their names without prior written
28238384Sjkim *    permission of the OpenSSL Project.
29238384Sjkim *
30238384Sjkim * 6. Redistributions of any form whatsoever must retain the following
31238384Sjkim *    acknowledgment:
32238384Sjkim *    "This product includes software developed by the OpenSSL Project
33238384Sjkim *    for use in the OpenSSL Toolkit (http://www.openssl.org/)"
34238384Sjkim *
35238384Sjkim * THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT ``AS IS'' AND ANY
36238384Sjkim * EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
37238384Sjkim * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
38238384Sjkim * PURPOSE ARE DISCLAIMED.  IN NO EVENT SHALL THE OpenSSL PROJECT OR
39238384Sjkim * ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
40238384Sjkim * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
41238384Sjkim * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
42238384Sjkim * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
43238384Sjkim * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
44238384Sjkim * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
45238384Sjkim * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
46238384Sjkim * OF THE POSSIBILITY OF SUCH DAMAGE.
47238384Sjkim * ====================================================================
48238384Sjkim *
49238384Sjkim */
50238384Sjkim
51238384Sjkim#include <openssl/crypto.h>
52238384Sjkim#include "modes_lcl.h"
53238384Sjkim#include <string.h>
54238384Sjkim
55238384Sjkim#ifndef MODES_DEBUG
56238384Sjkim# ifndef NDEBUG
57238384Sjkim#  define NDEBUG
58238384Sjkim# endif
59238384Sjkim#endif
60238384Sjkim#include <assert.h>
61238384Sjkim
62280304Sjkim/*
63280304Sjkim * The input and output encrypted as though 128bit ofb mode is being used.
64280304Sjkim * The extra state information to record how much of the 128bit block we have
65280304Sjkim * used is contained in *num;
66238384Sjkim */
67238384Sjkimvoid CRYPTO_ofb128_encrypt(const unsigned char *in, unsigned char *out,
68280304Sjkim                           size_t len, const void *key,
69280304Sjkim                           unsigned char ivec[16], int *num, block128_f block)
70238384Sjkim{
71280304Sjkim    unsigned int n;
72280304Sjkim    size_t l = 0;
73238384Sjkim
74280304Sjkim    assert(in && out && key && ivec && num);
75238384Sjkim
76280304Sjkim    n = *num;
77238384Sjkim
78238384Sjkim#if !defined(OPENSSL_SMALL_FOOTPRINT)
79280304Sjkim    if (16 % sizeof(size_t) == 0) { /* always true actually */
80280304Sjkim        do {
81280304Sjkim            while (n && len) {
82280304Sjkim                *(out++) = *(in++) ^ ivec[n];
83280304Sjkim                --len;
84280304Sjkim                n = (n + 1) % 16;
85280304Sjkim            }
86280304Sjkim# if defined(STRICT_ALIGNMENT)
87280304Sjkim            if (((size_t)in | (size_t)out | (size_t)ivec) % sizeof(size_t) !=
88280304Sjkim                0)
89280304Sjkim                break;
90280304Sjkim# endif
91280304Sjkim            while (len >= 16) {
92280304Sjkim                (*block) (ivec, ivec, key);
93280304Sjkim                for (; n < 16; n += sizeof(size_t))
94280304Sjkim                    *(size_t *)(out + n) =
95280304Sjkim                        *(size_t *)(in + n) ^ *(size_t *)(ivec + n);
96280304Sjkim                len -= 16;
97280304Sjkim                out += 16;
98280304Sjkim                in += 16;
99280304Sjkim                n = 0;
100280304Sjkim            }
101280304Sjkim            if (len) {
102280304Sjkim                (*block) (ivec, ivec, key);
103280304Sjkim                while (len--) {
104280304Sjkim                    out[n] = in[n] ^ ivec[n];
105280304Sjkim                    ++n;
106280304Sjkim                }
107280304Sjkim            }
108280304Sjkim            *num = n;
109280304Sjkim            return;
110280304Sjkim        } while (0);
111280304Sjkim    }
112280304Sjkim    /* the rest would be commonly eliminated by x86* compiler */
113238384Sjkim#endif
114280304Sjkim    while (l < len) {
115280304Sjkim        if (n == 0) {
116280304Sjkim            (*block) (ivec, ivec, key);
117280304Sjkim        }
118280304Sjkim        out[l] = in[l] ^ ivec[n];
119280304Sjkim        ++l;
120280304Sjkim        n = (n + 1) % 16;
121280304Sjkim    }
122238384Sjkim
123280304Sjkim    *num = n;
124238384Sjkim}
125