155714Skris/* crypto/rc2/rc2_skey.c */ 255714Skris/* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com) 355714Skris * All rights reserved. 455714Skris * 555714Skris * This package is an SSL implementation written 655714Skris * by Eric Young (eay@cryptsoft.com). 755714Skris * The implementation was written so as to conform with Netscapes SSL. 8296341Sdelphij * 955714Skris * This library is free for commercial and non-commercial use as long as 1055714Skris * the following conditions are aheared to. The following conditions 1155714Skris * apply to all code found in this distribution, be it the RC4, RSA, 1255714Skris * lhash, DES, etc., code; not just the SSL code. The SSL documentation 1355714Skris * included with this distribution is covered by the same copyright terms 1455714Skris * except that the holder is Tim Hudson (tjh@cryptsoft.com). 15296341Sdelphij * 1655714Skris * Copyright remains Eric Young's, and as such any Copyright notices in 1755714Skris * the code are not to be removed. 1855714Skris * If this package is used in a product, Eric Young should be given attribution 1955714Skris * as the author of the parts of the library used. 2055714Skris * This can be in the form of a textual message at program startup or 2155714Skris * in documentation (online or textual) provided with the package. 22296341Sdelphij * 2355714Skris * Redistribution and use in source and binary forms, with or without 2455714Skris * modification, are permitted provided that the following conditions 2555714Skris * are met: 2655714Skris * 1. Redistributions of source code must retain the copyright 2755714Skris * notice, this list of conditions and the following disclaimer. 2855714Skris * 2. Redistributions in binary form must reproduce the above copyright 2955714Skris * notice, this list of conditions and the following disclaimer in the 3055714Skris * documentation and/or other materials provided with the distribution. 3155714Skris * 3. All advertising materials mentioning features or use of this software 3255714Skris * must display the following acknowledgement: 3355714Skris * "This product includes cryptographic software written by 3455714Skris * Eric Young (eay@cryptsoft.com)" 3555714Skris * The word 'cryptographic' can be left out if the rouines from the library 3655714Skris * being used are not cryptographic related :-). 37296341Sdelphij * 4. If you include any Windows specific code (or a derivative thereof) from 3855714Skris * the apps directory (application code) you must include an acknowledgement: 3955714Skris * "This product includes software written by Tim Hudson (tjh@cryptsoft.com)" 40296341Sdelphij * 4155714Skris * THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND 4255714Skris * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 4355714Skris * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 4455714Skris * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE 4555714Skris * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 4655714Skris * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 4755714Skris * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 4855714Skris * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 4955714Skris * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 5055714Skris * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 5155714Skris * SUCH DAMAGE. 52296341Sdelphij * 5355714Skris * The licence and distribution terms for any publically available version or 5455714Skris * derivative of this code cannot be changed. i.e. this code cannot simply be 5555714Skris * copied and put under another distribution licence 5655714Skris * [including the GNU Public Licence.] 5755714Skris */ 5855714Skris 59238405Sjkim#include <openssl/crypto.h> 6055714Skris#include <openssl/rc2.h> 6155714Skris#include "rc2_locl.h" 6255714Skris 63296341Sdelphijstatic const unsigned char key_table[256] = { 64296341Sdelphij 0xd9, 0x78, 0xf9, 0xc4, 0x19, 0xdd, 0xb5, 0xed, 0x28, 0xe9, 0xfd, 0x79, 65296341Sdelphij 0x4a, 0xa0, 0xd8, 0x9d, 0xc6, 0x7e, 0x37, 0x83, 0x2b, 0x76, 0x53, 0x8e, 66296341Sdelphij 0x62, 0x4c, 0x64, 0x88, 0x44, 0x8b, 0xfb, 0xa2, 0x17, 0x9a, 0x59, 0xf5, 67296341Sdelphij 0x87, 0xb3, 0x4f, 0x13, 0x61, 0x45, 0x6d, 0x8d, 0x09, 0x81, 0x7d, 0x32, 68296341Sdelphij 0xbd, 0x8f, 0x40, 0xeb, 0x86, 0xb7, 0x7b, 0x0b, 0xf0, 0x95, 0x21, 0x22, 69296341Sdelphij 0x5c, 0x6b, 0x4e, 0x82, 0x54, 0xd6, 0x65, 0x93, 0xce, 0x60, 0xb2, 0x1c, 70296341Sdelphij 0x73, 0x56, 0xc0, 0x14, 0xa7, 0x8c, 0xf1, 0xdc, 0x12, 0x75, 0xca, 0x1f, 71296341Sdelphij 0x3b, 0xbe, 0xe4, 0xd1, 0x42, 0x3d, 0xd4, 0x30, 0xa3, 0x3c, 0xb6, 0x26, 72296341Sdelphij 0x6f, 0xbf, 0x0e, 0xda, 0x46, 0x69, 0x07, 0x57, 0x27, 0xf2, 0x1d, 0x9b, 73296341Sdelphij 0xbc, 0x94, 0x43, 0x03, 0xf8, 0x11, 0xc7, 0xf6, 0x90, 0xef, 0x3e, 0xe7, 74296341Sdelphij 0x06, 0xc3, 0xd5, 0x2f, 0xc8, 0x66, 0x1e, 0xd7, 0x08, 0xe8, 0xea, 0xde, 75296341Sdelphij 0x80, 0x52, 0xee, 0xf7, 0x84, 0xaa, 0x72, 0xac, 0x35, 0x4d, 0x6a, 0x2a, 76296341Sdelphij 0x96, 0x1a, 0xd2, 0x71, 0x5a, 0x15, 0x49, 0x74, 0x4b, 0x9f, 0xd0, 0x5e, 77296341Sdelphij 0x04, 0x18, 0xa4, 0xec, 0xc2, 0xe0, 0x41, 0x6e, 0x0f, 0x51, 0xcb, 0xcc, 78296341Sdelphij 0x24, 0x91, 0xaf, 0x50, 0xa1, 0xf4, 0x70, 0x39, 0x99, 0x7c, 0x3a, 0x85, 79296341Sdelphij 0x23, 0xb8, 0xb4, 0x7a, 0xfc, 0x02, 0x36, 0x5b, 0x25, 0x55, 0x97, 0x31, 80296341Sdelphij 0x2d, 0x5d, 0xfa, 0x98, 0xe3, 0x8a, 0x92, 0xae, 0x05, 0xdf, 0x29, 0x10, 81296341Sdelphij 0x67, 0x6c, 0xba, 0xc9, 0xd3, 0x00, 0xe6, 0xcf, 0xe1, 0x9e, 0xa8, 0x2c, 82296341Sdelphij 0x63, 0x16, 0x01, 0x3f, 0x58, 0xe2, 0x89, 0xa9, 0x0d, 0x38, 0x34, 0x1b, 83296341Sdelphij 0xab, 0x33, 0xff, 0xb0, 0xbb, 0x48, 0x0c, 0x5f, 0xb9, 0xb1, 0xcd, 0x2e, 84296341Sdelphij 0xc5, 0xf3, 0xdb, 0x47, 0xe5, 0xa5, 0x9c, 0x77, 0x0a, 0xa6, 0x20, 0x68, 85296341Sdelphij 0xfe, 0x7f, 0xc1, 0xad, 86296341Sdelphij}; 8755714Skris 88160814Ssimon#if defined(_MSC_VER) && defined(_ARM_) 89296341Sdelphij# pragma optimize("g",off) 90160814Ssimon#endif 91160814Ssimon 92296341Sdelphij/* 93296341Sdelphij * It has come to my attention that there are 2 versions of the RC2 key 94296341Sdelphij * schedule. One which is normal, and anther which has a hook to use a 95296341Sdelphij * reduced key length. BSAFE uses the 'retarded' version. What I previously 96296341Sdelphij * shipped is the same as specifying 1024 for the 'bits' parameter. Bsafe 97296341Sdelphij * uses a version where the bits parameter is the same as len*8 98296341Sdelphij */ 99238405Sjkimvoid RC2_set_key(RC2_KEY *key, int len, const unsigned char *data, int bits) 100194206Ssimon#ifdef OPENSSL_FIPS 101296341Sdelphij{ 102296341Sdelphij fips_cipher_abort(RC2); 103296341Sdelphij private_RC2_set_key(key, len, data, bits); 104296341Sdelphij} 105296341Sdelphij 106296341Sdelphijvoid private_RC2_set_key(RC2_KEY *key, int len, const unsigned char *data, 107296341Sdelphij int bits) 108194206Ssimon#endif 109296341Sdelphij{ 110296341Sdelphij int i, j; 111296341Sdelphij unsigned char *k; 112296341Sdelphij RC2_INT *ki; 113296341Sdelphij unsigned int c, d; 11455714Skris 115296341Sdelphij k = (unsigned char *)&(key->data[0]); 116296341Sdelphij *k = 0; /* for if there is a zero length key */ 11755714Skris 118296341Sdelphij if (len > 128) 119296341Sdelphij len = 128; 120296341Sdelphij if (bits <= 0) 121296341Sdelphij bits = 1024; 122296341Sdelphij if (bits > 1024) 123296341Sdelphij bits = 1024; 12455714Skris 125296341Sdelphij for (i = 0; i < len; i++) 126296341Sdelphij k[i] = data[i]; 12755714Skris 128296341Sdelphij /* expand table */ 129296341Sdelphij d = k[len - 1]; 130296341Sdelphij j = 0; 131296341Sdelphij for (i = len; i < 128; i++, j++) { 132296341Sdelphij d = key_table[(k[j] + d) & 0xff]; 133296341Sdelphij k[i] = d; 134296341Sdelphij } 13555714Skris 136296341Sdelphij /* hmm.... key reduction to 'bits' bits */ 13755714Skris 138296341Sdelphij j = (bits + 7) >> 3; 139296341Sdelphij i = 128 - j; 140296341Sdelphij c = (0xff >> (-bits & 0x07)); 14155714Skris 142296341Sdelphij d = key_table[k[i] & c]; 143296341Sdelphij k[i] = d; 144296341Sdelphij while (i--) { 145296341Sdelphij d = key_table[k[i + j] ^ d]; 146296341Sdelphij k[i] = d; 147296341Sdelphij } 14855714Skris 149296341Sdelphij /* copy from bytes into RC2_INT's */ 150296341Sdelphij ki = &(key->data[63]); 151296341Sdelphij for (i = 127; i >= 0; i -= 2) 152296341Sdelphij *(ki--) = ((k[i] << 8) | k[i - 1]) & 0xffff; 153296341Sdelphij} 15455714Skris 155160814Ssimon#if defined(_MSC_VER) 156296341Sdelphij# pragma optimize("",on) 157160814Ssimon#endif 158