1/* crypto/evp/e_des.c */
2/* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
3 * All rights reserved.
4 *
5 * This package is an SSL implementation written
6 * by Eric Young (eay@cryptsoft.com).
7 * The implementation was written so as to conform with Netscapes SSL.
8 *
9 * This library is free for commercial and non-commercial use as long as
10 * the following conditions are aheared to.  The following conditions
11 * apply to all code found in this distribution, be it the RC4, RSA,
12 * lhash, DES, etc., code; not just the SSL code.  The SSL documentation
13 * included with this distribution is covered by the same copyright terms
14 * except that the holder is Tim Hudson (tjh@cryptsoft.com).
15 *
16 * Copyright remains Eric Young's, and as such any Copyright notices in
17 * the code are not to be removed.
18 * If this package is used in a product, Eric Young should be given attribution
19 * as the author of the parts of the library used.
20 * This can be in the form of a textual message at program startup or
21 * in documentation (online or textual) provided with the package.
22 *
23 * Redistribution and use in source and binary forms, with or without
24 * modification, are permitted provided that the following conditions
25 * are met:
26 * 1. Redistributions of source code must retain the copyright
27 *    notice, this list of conditions and the following disclaimer.
28 * 2. Redistributions in binary form must reproduce the above copyright
29 *    notice, this list of conditions and the following disclaimer in the
30 *    documentation and/or other materials provided with the distribution.
31 * 3. All advertising materials mentioning features or use of this software
32 *    must display the following acknowledgement:
33 *    "This product includes cryptographic software written by
34 *     Eric Young (eay@cryptsoft.com)"
35 *    The word 'cryptographic' can be left out if the rouines from the library
36 *    being used are not cryptographic related :-).
37 * 4. If you include any Windows specific code (or a derivative thereof) from
38 *    the apps directory (application code) you must include an acknowledgement:
39 *    "This product includes software written by Tim Hudson (tjh@cryptsoft.com)"
40 *
41 * THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND
42 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
43 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
44 * ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
45 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
46 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
47 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
48 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
49 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
50 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
51 * SUCH DAMAGE.
52 *
53 * The licence and distribution terms for any publically available version or
54 * derivative of this code cannot be changed.  i.e. this code cannot simply be
55 * copied and put under another distribution licence
56 * [including the GNU Public Licence.]
57 */
58
59#include <stdio.h>
60#include "cryptlib.h"
61#ifndef OPENSSL_NO_DES
62# include <openssl/evp.h>
63# include <openssl/objects.h>
64# include "evp_locl.h"
65# include <openssl/des.h>
66# include <openssl/rand.h>
67
68typedef struct {
69    union {
70        double align;
71        DES_key_schedule ks;
72    } ks;
73    union {
74        void (*cbc) (const void *, void *, size_t,
75                     const DES_key_schedule *, unsigned char *);
76    } stream;
77} EVP_DES_KEY;
78
79# if defined(AES_ASM) && (defined(__sparc) || defined(__sparc__))
80/* ----------^^^ this is not a typo, just a way to detect that
81 * assembler support was in general requested... */
82#  include "sparc_arch.h"
83
84extern unsigned int OPENSSL_sparcv9cap_P[];
85
86#  define SPARC_DES_CAPABLE       (OPENSSL_sparcv9cap_P[1] & CFR_DES)
87
88void des_t4_key_expand(const void *key, DES_key_schedule *ks);
89void des_t4_cbc_encrypt(const void *inp, void *out, size_t len,
90                        const DES_key_schedule *ks, unsigned char iv[8]);
91void des_t4_cbc_decrypt(const void *inp, void *out, size_t len,
92                        const DES_key_schedule *ks, unsigned char iv[8]);
93# endif
94
95static int des_init_key(EVP_CIPHER_CTX *ctx, const unsigned char *key,
96                        const unsigned char *iv, int enc);
97static int des_ctrl(EVP_CIPHER_CTX *c, int type, int arg, void *ptr);
98
99/*
100 * Because of various casts and different names can't use
101 * IMPLEMENT_BLOCK_CIPHER
102 */
103
104static int des_ecb_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out,
105                          const unsigned char *in, size_t inl)
106{
107    BLOCK_CIPHER_ecb_loop()
108        DES_ecb_encrypt((DES_cblock *)(in + i), (DES_cblock *)(out + i),
109                        ctx->cipher_data, ctx->encrypt);
110    return 1;
111}
112
113static int des_ofb_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out,
114                          const unsigned char *in, size_t inl)
115{
116    while (inl >= EVP_MAXCHUNK) {
117        DES_ofb64_encrypt(in, out, (long)EVP_MAXCHUNK, ctx->cipher_data,
118                          (DES_cblock *)ctx->iv, &ctx->num);
119        inl -= EVP_MAXCHUNK;
120        in += EVP_MAXCHUNK;
121        out += EVP_MAXCHUNK;
122    }
123    if (inl)
124        DES_ofb64_encrypt(in, out, (long)inl, ctx->cipher_data,
125                          (DES_cblock *)ctx->iv, &ctx->num);
126    return 1;
127}
128
129static int des_cbc_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out,
130                          const unsigned char *in, size_t inl)
131{
132    EVP_DES_KEY *dat = (EVP_DES_KEY *) ctx->cipher_data;
133
134    if (dat->stream.cbc != NULL) {
135        (*dat->stream.cbc) (in, out, inl, &dat->ks.ks, ctx->iv);
136        return 1;
137    }
138    while (inl >= EVP_MAXCHUNK) {
139        DES_ncbc_encrypt(in, out, (long)EVP_MAXCHUNK, ctx->cipher_data,
140                         (DES_cblock *)ctx->iv, ctx->encrypt);
141        inl -= EVP_MAXCHUNK;
142        in += EVP_MAXCHUNK;
143        out += EVP_MAXCHUNK;
144    }
145    if (inl)
146        DES_ncbc_encrypt(in, out, (long)inl, ctx->cipher_data,
147                         (DES_cblock *)ctx->iv, ctx->encrypt);
148    return 1;
149}
150
151static int des_cfb64_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out,
152                            const unsigned char *in, size_t inl)
153{
154    while (inl >= EVP_MAXCHUNK) {
155        DES_cfb64_encrypt(in, out, (long)EVP_MAXCHUNK, ctx->cipher_data,
156                          (DES_cblock *)ctx->iv, &ctx->num, ctx->encrypt);
157        inl -= EVP_MAXCHUNK;
158        in += EVP_MAXCHUNK;
159        out += EVP_MAXCHUNK;
160    }
161    if (inl)
162        DES_cfb64_encrypt(in, out, (long)inl, ctx->cipher_data,
163                          (DES_cblock *)ctx->iv, &ctx->num, ctx->encrypt);
164    return 1;
165}
166
167/*
168 * Although we have a CFB-r implementation for DES, it doesn't pack the right
169 * way, so wrap it here
170 */
171static int des_cfb1_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out,
172                           const unsigned char *in, size_t inl)
173{
174    size_t n, chunk = EVP_MAXCHUNK / 8;
175    unsigned char c[1], d[1];
176
177    if (inl < chunk)
178        chunk = inl;
179
180    while (inl && inl >= chunk) {
181        for (n = 0; n < chunk * 8; ++n) {
182            c[0] = (in[n / 8] & (1 << (7 - n % 8))) ? 0x80 : 0;
183            DES_cfb_encrypt(c, d, 1, 1, ctx->cipher_data,
184                            (DES_cblock *)ctx->iv, ctx->encrypt);
185            out[n / 8] =
186                (out[n / 8] & ~(0x80 >> (unsigned int)(n % 8))) |
187                ((d[0] & 0x80) >> (unsigned int)(n % 8));
188        }
189        inl -= chunk;
190        in += chunk;
191        out += chunk;
192        if (inl < chunk)
193            chunk = inl;
194    }
195
196    return 1;
197}
198
199static int des_cfb8_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out,
200                           const unsigned char *in, size_t inl)
201{
202    while (inl >= EVP_MAXCHUNK) {
203        DES_cfb_encrypt(in, out, 8, (long)EVP_MAXCHUNK, ctx->cipher_data,
204                        (DES_cblock *)ctx->iv, ctx->encrypt);
205        inl -= EVP_MAXCHUNK;
206        in += EVP_MAXCHUNK;
207        out += EVP_MAXCHUNK;
208    }
209    if (inl)
210        DES_cfb_encrypt(in, out, 8, (long)inl, ctx->cipher_data,
211                        (DES_cblock *)ctx->iv, ctx->encrypt);
212    return 1;
213}
214
215BLOCK_CIPHER_defs(des, EVP_DES_KEY, NID_des, 8, 8, 8, 64,
216                  EVP_CIPH_RAND_KEY, des_init_key, NULL,
217                  EVP_CIPHER_set_asn1_iv, EVP_CIPHER_get_asn1_iv, des_ctrl)
218
219    BLOCK_CIPHER_def_cfb(des, EVP_DES_KEY, NID_des, 8, 8, 1,
220                     EVP_CIPH_RAND_KEY, des_init_key, NULL,
221                     EVP_CIPHER_set_asn1_iv, EVP_CIPHER_get_asn1_iv, des_ctrl)
222
223    BLOCK_CIPHER_def_cfb(des, EVP_DES_KEY, NID_des, 8, 8, 8,
224                     EVP_CIPH_RAND_KEY, des_init_key, NULL,
225                     EVP_CIPHER_set_asn1_iv, EVP_CIPHER_get_asn1_iv, des_ctrl)
226
227static int des_init_key(EVP_CIPHER_CTX *ctx, const unsigned char *key,
228                        const unsigned char *iv, int enc)
229{
230    DES_cblock *deskey = (DES_cblock *)key;
231    EVP_DES_KEY *dat = (EVP_DES_KEY *) ctx->cipher_data;
232
233    dat->stream.cbc = NULL;
234# if defined(SPARC_DES_CAPABLE)
235    if (SPARC_DES_CAPABLE) {
236        int mode = ctx->cipher->flags & EVP_CIPH_MODE;
237
238        if (mode == EVP_CIPH_CBC_MODE) {
239            des_t4_key_expand(key, &dat->ks.ks);
240            dat->stream.cbc = enc ? des_t4_cbc_encrypt : des_t4_cbc_decrypt;
241            return 1;
242        }
243    }
244# endif
245# ifdef EVP_CHECK_DES_KEY
246    if (DES_set_key_checked(deskey, dat->ks.ks) != 0)
247        return 0;
248# else
249    DES_set_key_unchecked(deskey, ctx->cipher_data);
250# endif
251    return 1;
252}
253
254static int des_ctrl(EVP_CIPHER_CTX *c, int type, int arg, void *ptr)
255{
256
257    switch (type) {
258    case EVP_CTRL_RAND_KEY:
259        if (RAND_bytes(ptr, 8) <= 0)
260            return 0;
261        DES_set_odd_parity((DES_cblock *)ptr);
262        return 1;
263
264    default:
265        return -1;
266    }
267}
268
269#endif
270