1 /* Kernel cryptographic api.
2 * cast5.c - Cast5 cipher algorithm (rfc2144).
3 *
4 * Derived from GnuPG implementation of cast5.
5 *
6 * Major Changes.
7 * Complete conformance to rfc2144.
8 * Supports key size from 40 to 128 bits.
9 *
10 * Copyright (C) 1998, 1999, 2000, 2001 Free Software Foundation, Inc.
11 * Copyright (C) 2003 Kartikey Mahendra Bhatt <kartik_me@hotmail.com>.
12 *
13 * This program is free software; you can redistribute it and/or modify it
14 * under the terms of GNU General Public License as published by the Free
15 * Software Foundation; either version 2 of the License, or (at your option)
16 * any later version.
17 *
18 * You should have received a copy of the GNU General Public License
19 * along with this program; if not, write to the Free Software
20 * Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA
21 */
22
23
24 #include <asm/byteorder.h>
25 #include <linux/init.h>
26 #include <linux/crypto.h>
27 #include <linux/module.h>
28 #include <linux/errno.h>
29 #include <linux/string.h>
30 #include <linux/types.h>
31 #include <crypto/cast5.h>
32
33 static const u32 s5[256] = {
34 0x7ec90c04, 0x2c6e74b9, 0x9b0e66df, 0xa6337911, 0xb86a7fff,
35 0x1dd358f5, 0x44dd9d44, 0x1731167f,
36 0x08fbf1fa, 0xe7f511cc, 0xd2051b00, 0x735aba00, 0x2ab722d8,
37 0x386381cb, 0xacf6243a, 0x69befd7a,
38 0xe6a2e77f, 0xf0c720cd, 0xc4494816, 0xccf5c180, 0x38851640,
39 0x15b0a848, 0xe68b18cb, 0x4caadeff,
40 0x5f480a01, 0x0412b2aa, 0x259814fc, 0x41d0efe2, 0x4e40b48d,
41 0x248eb6fb, 0x8dba1cfe, 0x41a99b02,
42 0x1a550a04, 0xba8f65cb, 0x7251f4e7, 0x95a51725, 0xc106ecd7,
43 0x97a5980a, 0xc539b9aa, 0x4d79fe6a,
44 0xf2f3f763, 0x68af8040, 0xed0c9e56, 0x11b4958b, 0xe1eb5a88,
45 0x8709e6b0, 0xd7e07156, 0x4e29fea7,
46 0x6366e52d, 0x02d1c000, 0xc4ac8e05, 0x9377f571, 0x0c05372a,
47 0x578535f2, 0x2261be02, 0xd642a0c9,
48 0xdf13a280, 0x74b55bd2, 0x682199c0, 0xd421e5ec, 0x53fb3ce8,
49 0xc8adedb3, 0x28a87fc9, 0x3d959981,
50 0x5c1ff900, 0xfe38d399, 0x0c4eff0b, 0x062407ea, 0xaa2f4fb1,
51 0x4fb96976, 0x90c79505, 0xb0a8a774,
52 0xef55a1ff, 0xe59ca2c2, 0xa6b62d27, 0xe66a4263, 0xdf65001f,
53 0x0ec50966, 0xdfdd55bc, 0x29de0655,
54 0x911e739a, 0x17af8975, 0x32c7911c, 0x89f89468, 0x0d01e980,
55 0x524755f4, 0x03b63cc9, 0x0cc844b2,
56 0xbcf3f0aa, 0x87ac36e9, 0xe53a7426, 0x01b3d82b, 0x1a9e7449,
57 0x64ee2d7e, 0xcddbb1da, 0x01c94910,
58 0xb868bf80, 0x0d26f3fd, 0x9342ede7, 0x04a5c284, 0x636737b6,
59 0x50f5b616, 0xf24766e3, 0x8eca36c1,
60 0x136e05db, 0xfef18391, 0xfb887a37, 0xd6e7f7d4, 0xc7fb7dc9,
61 0x3063fcdf, 0xb6f589de, 0xec2941da,
62 0x26e46695, 0xb7566419, 0xf654efc5, 0xd08d58b7, 0x48925401,
63 0xc1bacb7f, 0xe5ff550f, 0xb6083049,
64 0x5bb5d0e8, 0x87d72e5a, 0xab6a6ee1, 0x223a66ce, 0xc62bf3cd,
65 0x9e0885f9, 0x68cb3e47, 0x086c010f,
66 0xa21de820, 0xd18b69de, 0xf3f65777, 0xfa02c3f6, 0x407edac3,
67 0xcbb3d550, 0x1793084d, 0xb0d70eba,
68 0x0ab378d5, 0xd951fb0c, 0xded7da56, 0x4124bbe4, 0x94ca0b56,
69 0x0f5755d1, 0xe0e1e56e, 0x6184b5be,
70 0x580a249f, 0x94f74bc0, 0xe327888e, 0x9f7b5561, 0xc3dc0280,
71 0x05687715, 0x646c6bd7, 0x44904db3,
72 0x66b4f0a3, 0xc0f1648a, 0x697ed5af, 0x49e92ff6, 0x309e374f,
73 0x2cb6356a, 0x85808573, 0x4991f840,
74 0x76f0ae02, 0x083be84d, 0x28421c9a, 0x44489406, 0x736e4cb8,
75 0xc1092910, 0x8bc95fc6, 0x7d869cf4,
76 0x134f616f, 0x2e77118d, 0xb31b2be1, 0xaa90b472, 0x3ca5d717,
77 0x7d161bba, 0x9cad9010, 0xaf462ba2,
78 0x9fe459d2, 0x45d34559, 0xd9f2da13, 0xdbc65487, 0xf3e4f94e,
79 0x176d486f, 0x097c13ea, 0x631da5c7,
80 0x445f7382, 0x175683f4, 0xcdc66a97, 0x70be0288, 0xb3cdcf72,
81 0x6e5dd2f3, 0x20936079, 0x459b80a5,
82 0xbe60e2db, 0xa9c23101, 0xeba5315c, 0x224e42f2, 0x1c5c1572,
83 0xf6721b2c, 0x1ad2fff3, 0x8c25404e,
84 0x324ed72f, 0x4067b7fd, 0x0523138e, 0x5ca3bc78, 0xdc0fd66e,
85 0x75922283, 0x784d6b17, 0x58ebb16e,
86 0x44094f85, 0x3f481d87, 0xfcfeae7b, 0x77b5ff76, 0x8c2302bf,
87 0xaaf47556, 0x5f46b02a, 0x2b092801,
88 0x3d38f5f7, 0x0ca81f36, 0x52af4a8a, 0x66d5e7c0, 0xdf3b0874,
89 0x95055110, 0x1b5ad7a8, 0xf61ed5ad,
90 0x6cf6e479, 0x20758184, 0xd0cefa65, 0x88f7be58, 0x4a046826,
91 0x0ff6f8f3, 0xa09c7f70, 0x5346aba0,
92 0x5ce96c28, 0xe176eda3, 0x6bac307f, 0x376829d2, 0x85360fa9,
93 0x17e3fe2a, 0x24b79767, 0xf5a96b20,
94 0xd6cd2595, 0x68ff1ebf, 0x7555442c, 0xf19f06be, 0xf9e0659a,
95 0xeeb9491d, 0x34010718, 0xbb30cab8,
96 0xe822fe15, 0x88570983, 0x750e6249, 0xda627e55, 0x5e76ffa8,
97 0xb1534546, 0x6d47de08, 0xefe9e7d4
98 };
99 static const u32 s6[256] = {
100 0xf6fa8f9d, 0x2cac6ce1, 0x4ca34867, 0xe2337f7c, 0x95db08e7,
101 0x016843b4, 0xeced5cbc, 0x325553ac,
102 0xbf9f0960, 0xdfa1e2ed, 0x83f0579d, 0x63ed86b9, 0x1ab6a6b8,
103 0xde5ebe39, 0xf38ff732, 0x8989b138,
104 0x33f14961, 0xc01937bd, 0xf506c6da, 0xe4625e7e, 0xa308ea99,
105 0x4e23e33c, 0x79cbd7cc, 0x48a14367,
106 0xa3149619, 0xfec94bd5, 0xa114174a, 0xeaa01866, 0xa084db2d,
107 0x09a8486f, 0xa888614a, 0x2900af98,
108 0x01665991, 0xe1992863, 0xc8f30c60, 0x2e78ef3c, 0xd0d51932,
109 0xcf0fec14, 0xf7ca07d2, 0xd0a82072,
110 0xfd41197e, 0x9305a6b0, 0xe86be3da, 0x74bed3cd, 0x372da53c,
111 0x4c7f4448, 0xdab5d440, 0x6dba0ec3,
112 0x083919a7, 0x9fbaeed9, 0x49dbcfb0, 0x4e670c53, 0x5c3d9c01,
113 0x64bdb941, 0x2c0e636a, 0xba7dd9cd,
114 0xea6f7388, 0xe70bc762, 0x35f29adb, 0x5c4cdd8d, 0xf0d48d8c,
115 0xb88153e2, 0x08a19866, 0x1ae2eac8,
116 0x284caf89, 0xaa928223, 0x9334be53, 0x3b3a21bf, 0x16434be3,
117 0x9aea3906, 0xefe8c36e, 0xf890cdd9,
118 0x80226dae, 0xc340a4a3, 0xdf7e9c09, 0xa694a807, 0x5b7c5ecc,
119 0x221db3a6, 0x9a69a02f, 0x68818a54,
120 0xceb2296f, 0x53c0843a, 0xfe893655, 0x25bfe68a, 0xb4628abc,
121 0xcf222ebf, 0x25ac6f48, 0xa9a99387,
122 0x53bddb65, 0xe76ffbe7, 0xe967fd78, 0x0ba93563, 0x8e342bc1,
123 0xe8a11be9, 0x4980740d, 0xc8087dfc,
124 0x8de4bf99, 0xa11101a0, 0x7fd37975, 0xda5a26c0, 0xe81f994f,
125 0x9528cd89, 0xfd339fed, 0xb87834bf,
126 0x5f04456d, 0x22258698, 0xc9c4c83b, 0x2dc156be, 0x4f628daa,
127 0x57f55ec5, 0xe2220abe, 0xd2916ebf,
128 0x4ec75b95, 0x24f2c3c0, 0x42d15d99, 0xcd0d7fa0, 0x7b6e27ff,
129 0xa8dc8af0, 0x7345c106, 0xf41e232f,
130 0x35162386, 0xe6ea8926, 0x3333b094, 0x157ec6f2, 0x372b74af,
131 0x692573e4, 0xe9a9d848, 0xf3160289,
132 0x3a62ef1d, 0xa787e238, 0xf3a5f676, 0x74364853, 0x20951063,
133 0x4576698d, 0xb6fad407, 0x592af950,
134 0x36f73523, 0x4cfb6e87, 0x7da4cec0, 0x6c152daa, 0xcb0396a8,
135 0xc50dfe5d, 0xfcd707ab, 0x0921c42f,
136 0x89dff0bb, 0x5fe2be78, 0x448f4f33, 0x754613c9, 0x2b05d08d,
137 0x48b9d585, 0xdc049441, 0xc8098f9b,
138 0x7dede786, 0xc39a3373, 0x42410005, 0x6a091751, 0x0ef3c8a6,
139 0x890072d6, 0x28207682, 0xa9a9f7be,
140 0xbf32679d, 0xd45b5b75, 0xb353fd00, 0xcbb0e358, 0x830f220a,
141 0x1f8fb214, 0xd372cf08, 0xcc3c4a13,
142 0x8cf63166, 0x061c87be, 0x88c98f88, 0x6062e397, 0x47cf8e7a,
143 0xb6c85283, 0x3cc2acfb, 0x3fc06976,
144 0x4e8f0252, 0x64d8314d, 0xda3870e3, 0x1e665459, 0xc10908f0,
145 0x513021a5, 0x6c5b68b7, 0x822f8aa0,
146 0x3007cd3e, 0x74719eef, 0xdc872681, 0x073340d4, 0x7e432fd9,
147 0x0c5ec241, 0x8809286c, 0xf592d891,
148 0x08a930f6, 0x957ef305, 0xb7fbffbd, 0xc266e96f, 0x6fe4ac98,
149 0xb173ecc0, 0xbc60b42a, 0x953498da,
150 0xfba1ae12, 0x2d4bd736, 0x0f25faab, 0xa4f3fceb, 0xe2969123,
151 0x257f0c3d, 0x9348af49, 0x361400bc,
152 0xe8816f4a, 0x3814f200, 0xa3f94043, 0x9c7a54c2, 0xbc704f57,
153 0xda41e7f9, 0xc25ad33a, 0x54f4a084,
154 0xb17f5505, 0x59357cbe, 0xedbd15c8, 0x7f97c5ab, 0xba5ac7b5,
155 0xb6f6deaf, 0x3a479c3a, 0x5302da25,
156 0x653d7e6a, 0x54268d49, 0x51a477ea, 0x5017d55b, 0xd7d25d88,
157 0x44136c76, 0x0404a8c8, 0xb8e5a121,
158 0xb81a928a, 0x60ed5869, 0x97c55b96, 0xeaec991b, 0x29935913,
159 0x01fdb7f1, 0x088e8dfa, 0x9ab6f6f5,
160 0x3b4cbf9f, 0x4a5de3ab, 0xe6051d35, 0xa0e1d855, 0xd36b4cf1,
161 0xf544edeb, 0xb0e93524, 0xbebb8fbd,
162 0xa2d762cf, 0x49c92f54, 0x38b5f331, 0x7128a454, 0x48392905,
163 0xa65b1db8, 0x851c97bd, 0xd675cf2f
164 };
165 static const u32 s7[256] = {
166 0x85e04019, 0x332bf567, 0x662dbfff, 0xcfc65693, 0x2a8d7f6f,
167 0xab9bc912, 0xde6008a1, 0x2028da1f,
168 0x0227bce7, 0x4d642916, 0x18fac300, 0x50f18b82, 0x2cb2cb11,
169 0xb232e75c, 0x4b3695f2, 0xb28707de,
170 0xa05fbcf6, 0xcd4181e9, 0xe150210c, 0xe24ef1bd, 0xb168c381,
171 0xfde4e789, 0x5c79b0d8, 0x1e8bfd43,
172 0x4d495001, 0x38be4341, 0x913cee1d, 0x92a79c3f, 0x089766be,
173 0xbaeeadf4, 0x1286becf, 0xb6eacb19,
174 0x2660c200, 0x7565bde4, 0x64241f7a, 0x8248dca9, 0xc3b3ad66,
175 0x28136086, 0x0bd8dfa8, 0x356d1cf2,
176 0x107789be, 0xb3b2e9ce, 0x0502aa8f, 0x0bc0351e, 0x166bf52a,
177 0xeb12ff82, 0xe3486911, 0xd34d7516,
178 0x4e7b3aff, 0x5f43671b, 0x9cf6e037, 0x4981ac83, 0x334266ce,
179 0x8c9341b7, 0xd0d854c0, 0xcb3a6c88,
180 0x47bc2829, 0x4725ba37, 0xa66ad22b, 0x7ad61f1e, 0x0c5cbafa,
181 0x4437f107, 0xb6e79962, 0x42d2d816,
182 0x0a961288, 0xe1a5c06e, 0x13749e67, 0x72fc081a, 0xb1d139f7,
183 0xf9583745, 0xcf19df58, 0xbec3f756,
184 0xc06eba30, 0x07211b24, 0x45c28829, 0xc95e317f, 0xbc8ec511,
185 0x38bc46e9, 0xc6e6fa14, 0xbae8584a,
186 0xad4ebc46, 0x468f508b, 0x7829435f, 0xf124183b, 0x821dba9f,
187 0xaff60ff4, 0xea2c4e6d, 0x16e39264,
188 0x92544a8b, 0x009b4fc3, 0xaba68ced, 0x9ac96f78, 0x06a5b79a,
189 0xb2856e6e, 0x1aec3ca9, 0xbe838688,
190 0x0e0804e9, 0x55f1be56, 0xe7e5363b, 0xb3a1f25d, 0xf7debb85,
191 0x61fe033c, 0x16746233, 0x3c034c28,
192 0xda6d0c74, 0x79aac56c, 0x3ce4e1ad, 0x51f0c802, 0x98f8f35a,
193 0x1626a49f, 0xeed82b29, 0x1d382fe3,
194 0x0c4fb99a, 0xbb325778, 0x3ec6d97b, 0x6e77a6a9, 0xcb658b5c,
195 0xd45230c7, 0x2bd1408b, 0x60c03eb7,
196 0xb9068d78, 0xa33754f4, 0xf430c87d, 0xc8a71302, 0xb96d8c32,
197 0xebd4e7be, 0xbe8b9d2d, 0x7979fb06,
198 0xe7225308, 0x8b75cf77, 0x11ef8da4, 0xe083c858, 0x8d6b786f,
199 0x5a6317a6, 0xfa5cf7a0, 0x5dda0033,
200 0xf28ebfb0, 0xf5b9c310, 0xa0eac280, 0x08b9767a, 0xa3d9d2b0,
201 0x79d34217, 0x021a718d, 0x9ac6336a,
202 0x2711fd60, 0x438050e3, 0x069908a8, 0x3d7fedc4, 0x826d2bef,
203 0x4eeb8476, 0x488dcf25, 0x36c9d566,
204 0x28e74e41, 0xc2610aca, 0x3d49a9cf, 0xbae3b9df, 0xb65f8de6,
205 0x92aeaf64, 0x3ac7d5e6, 0x9ea80509,
206 0xf22b017d, 0xa4173f70, 0xdd1e16c3, 0x15e0d7f9, 0x50b1b887,
207 0x2b9f4fd5, 0x625aba82, 0x6a017962,
208 0x2ec01b9c, 0x15488aa9, 0xd716e740, 0x40055a2c, 0x93d29a22,
209 0xe32dbf9a, 0x058745b9, 0x3453dc1e,
210 0xd699296e, 0x496cff6f, 0x1c9f4986, 0xdfe2ed07, 0xb87242d1,
211 0x19de7eae, 0x053e561a, 0x15ad6f8c,
212 0x66626c1c, 0x7154c24c, 0xea082b2a, 0x93eb2939, 0x17dcb0f0,
213 0x58d4f2ae, 0x9ea294fb, 0x52cf564c,
214 0x9883fe66, 0x2ec40581, 0x763953c3, 0x01d6692e, 0xd3a0c108,
215 0xa1e7160e, 0xe4f2dfa6, 0x693ed285,
216 0x74904698, 0x4c2b0edd, 0x4f757656, 0x5d393378, 0xa132234f,
217 0x3d321c5d, 0xc3f5e194, 0x4b269301,
218 0xc79f022f, 0x3c997e7e, 0x5e4f9504, 0x3ffafbbd, 0x76f7ad0e,
219 0x296693f4, 0x3d1fce6f, 0xc61e45be,
220 0xd3b5ab34, 0xf72bf9b7, 0x1b0434c0, 0x4e72b567, 0x5592a33d,
221 0xb5229301, 0xcfd2a87f, 0x60aeb767,
222 0x1814386b, 0x30bcc33d, 0x38a0c07d, 0xfd1606f2, 0xc363519b,
223 0x589dd390, 0x5479f8e6, 0x1cb8d647,
224 0x97fd61a9, 0xea7759f4, 0x2d57539d, 0x569a58cf, 0xe84e63ad,
225 0x462e1b78, 0x6580f87e, 0xf3817914,
226 0x91da55f4, 0x40a230f3, 0xd1988f35, 0xb6e318d2, 0x3ffa50bc,
227 0x3d40f021, 0xc3c0bdae, 0x4958c24c,
228 0x518f36b2, 0x84b1d370, 0x0fedce83, 0x878ddada, 0xf2a279c7,
229 0x94e01be8, 0x90716f4b, 0x954b8aa3
230 };
231 static const u32 sb8[256] = {
232 0xe216300d, 0xbbddfffc, 0xa7ebdabd, 0x35648095, 0x7789f8b7,
233 0xe6c1121b, 0x0e241600, 0x052ce8b5,
234 0x11a9cfb0, 0xe5952f11, 0xece7990a, 0x9386d174, 0x2a42931c,
235 0x76e38111, 0xb12def3a, 0x37ddddfc,
236 0xde9adeb1, 0x0a0cc32c, 0xbe197029, 0x84a00940, 0xbb243a0f,
237 0xb4d137cf, 0xb44e79f0, 0x049eedfd,
238 0x0b15a15d, 0x480d3168, 0x8bbbde5a, 0x669ded42, 0xc7ece831,
239 0x3f8f95e7, 0x72df191b, 0x7580330d,
240 0x94074251, 0x5c7dcdfa, 0xabbe6d63, 0xaa402164, 0xb301d40a,
241 0x02e7d1ca, 0x53571dae, 0x7a3182a2,
242 0x12a8ddec, 0xfdaa335d, 0x176f43e8, 0x71fb46d4, 0x38129022,
243 0xce949ad4, 0xb84769ad, 0x965bd862,
244 0x82f3d055, 0x66fb9767, 0x15b80b4e, 0x1d5b47a0, 0x4cfde06f,
245 0xc28ec4b8, 0x57e8726e, 0x647a78fc,
246 0x99865d44, 0x608bd593, 0x6c200e03, 0x39dc5ff6, 0x5d0b00a3,
247 0xae63aff2, 0x7e8bd632, 0x70108c0c,
248 0xbbd35049, 0x2998df04, 0x980cf42a, 0x9b6df491, 0x9e7edd53,
249 0x06918548, 0x58cb7e07, 0x3b74ef2e,
250 0x522fffb1, 0xd24708cc, 0x1c7e27cd, 0xa4eb215b, 0x3cf1d2e2,
251 0x19b47a38, 0x424f7618, 0x35856039,
252 0x9d17dee7, 0x27eb35e6, 0xc9aff67b, 0x36baf5b8, 0x09c467cd,
253 0xc18910b1, 0xe11dbf7b, 0x06cd1af8,
254 0x7170c608, 0x2d5e3354, 0xd4de495a, 0x64c6d006, 0xbcc0c62c,
255 0x3dd00db3, 0x708f8f34, 0x77d51b42,
256 0x264f620f, 0x24b8d2bf, 0x15c1b79e, 0x46a52564, 0xf8d7e54e,
257 0x3e378160, 0x7895cda5, 0x859c15a5,
258 0xe6459788, 0xc37bc75f, 0xdb07ba0c, 0x0676a3ab, 0x7f229b1e,
259 0x31842e7b, 0x24259fd7, 0xf8bef472,
260 0x835ffcb8, 0x6df4c1f2, 0x96f5b195, 0xfd0af0fc, 0xb0fe134c,
261 0xe2506d3d, 0x4f9b12ea, 0xf215f225,
262 0xa223736f, 0x9fb4c428, 0x25d04979, 0x34c713f8, 0xc4618187,
263 0xea7a6e98, 0x7cd16efc, 0x1436876c,
264 0xf1544107, 0xbedeee14, 0x56e9af27, 0xa04aa441, 0x3cf7c899,
265 0x92ecbae6, 0xdd67016d, 0x151682eb,
266 0xa842eedf, 0xfdba60b4, 0xf1907b75, 0x20e3030f, 0x24d8c29e,
267 0xe139673b, 0xefa63fb8, 0x71873054,
268 0xb6f2cf3b, 0x9f326442, 0xcb15a4cc, 0xb01a4504, 0xf1e47d8d,
269 0x844a1be5, 0xbae7dfdc, 0x42cbda70,
270 0xcd7dae0a, 0x57e85b7a, 0xd53f5af6, 0x20cf4d8c, 0xcea4d428,
271 0x79d130a4, 0x3486ebfb, 0x33d3cddc,
272 0x77853b53, 0x37effcb5, 0xc5068778, 0xe580b3e6, 0x4e68b8f4,
273 0xc5c8b37e, 0x0d809ea2, 0x398feb7c,
274 0x132a4f94, 0x43b7950e, 0x2fee7d1c, 0x223613bd, 0xdd06caa2,
275 0x37df932b, 0xc4248289, 0xacf3ebc3,
276 0x5715f6b7, 0xef3478dd, 0xf267616f, 0xc148cbe4, 0x9052815e,
277 0x5e410fab, 0xb48a2465, 0x2eda7fa4,
278 0xe87b40e4, 0xe98ea084, 0x5889e9e1, 0xefd390fc, 0xdd07d35b,
279 0xdb485694, 0x38d7e5b2, 0x57720101,
280 0x730edebc, 0x5b643113, 0x94917e4f, 0x503c2fba, 0x646f1282,
281 0x7523d24a, 0xe0779695, 0xf9c17a8f,
282 0x7a5b2121, 0xd187b896, 0x29263a4d, 0xba510cdf, 0x81f47c9f,
283 0xad1163ed, 0xea7b5965, 0x1a00726e,
284 0x11403092, 0x00da6d77, 0x4a0cdd61, 0xad1f4603, 0x605bdfb0,
285 0x9eedc364, 0x22ebe6a8, 0xcee7d28a,
286 0xa0e736a0, 0x5564a6b9, 0x10853209, 0xc7eb8f37, 0x2de705ca,
287 0x8951570f, 0xdf09822b, 0xbd691a6c,
288 0xaa12e4f2, 0x87451c0f, 0xe0f6a27a, 0x3ada4819, 0x4cf1764f,
289 0x0d771c2b, 0x67cdb156, 0x350d8384,
290 0x5938fa0f, 0x42399ef3, 0x36997b07, 0x0e84093d, 0x4aa93e61,
291 0x8360d87b, 0x1fa98b0c, 0x1149382c,
292 0xe97625a5, 0x0614d1b7, 0x0e25244b, 0x0c768347, 0x589e8d82,
293 0x0d2059d1, 0xa466bb1e, 0xf8da0a82,
294 0x04f19130, 0xba6e4ec0, 0x99265164, 0x1ee7230d, 0x50b2ad80,
295 0xeaee6801, 0x8db2a283, 0xea8bf59e
296 };
297
298 #define s1 cast_s1
299 #define s2 cast_s2
300 #define s3 cast_s3
301 #define s4 cast_s4
302
303 #define F1(D, m, r) ((I = ((m) + (D))), (I = rol32(I, (r))), \
304 (((s1[I >> 24] ^ s2[(I>>16)&0xff]) - s3[(I>>8)&0xff]) + s4[I&0xff]))
305 #define F2(D, m, r) ((I = ((m) ^ (D))), (I = rol32(I, (r))), \
306 (((s1[I >> 24] - s2[(I>>16)&0xff]) + s3[(I>>8)&0xff]) ^ s4[I&0xff]))
307 #define F3(D, m, r) ((I = ((m) - (D))), (I = rol32(I, (r))), \
308 (((s1[I >> 24] + s2[(I>>16)&0xff]) ^ s3[(I>>8)&0xff]) - s4[I&0xff]))
309
310
__cast5_encrypt(struct cast5_ctx * c,u8 * outbuf,const u8 * inbuf)311 void __cast5_encrypt(struct cast5_ctx *c, u8 *outbuf, const u8 *inbuf)
312 {
313 const __be32 *src = (const __be32 *)inbuf;
314 __be32 *dst = (__be32 *)outbuf;
315 u32 l, r, t;
316 u32 I; /* used by the Fx macros */
317 u32 *Km;
318 u8 *Kr;
319
320 Km = c->Km;
321 Kr = c->Kr;
322
323 /* (L0,R0) <-- (m1...m64). (Split the plaintext into left and
324 * right 32-bit halves L0 = m1...m32 and R0 = m33...m64.)
325 */
326 l = be32_to_cpu(src[0]);
327 r = be32_to_cpu(src[1]);
328
329 /* (16 rounds) for i from 1 to 16, compute Li and Ri as follows:
330 * Li = Ri-1;
331 * Ri = Li-1 ^ f(Ri-1,Kmi,Kri), where f is defined in Section 2.2
332 * Rounds 1, 4, 7, 10, 13, and 16 use f function Type 1.
333 * Rounds 2, 5, 8, 11, and 14 use f function Type 2.
334 * Rounds 3, 6, 9, 12, and 15 use f function Type 3.
335 */
336
337 t = l; l = r; r = t ^ F1(r, Km[0], Kr[0]);
338 t = l; l = r; r = t ^ F2(r, Km[1], Kr[1]);
339 t = l; l = r; r = t ^ F3(r, Km[2], Kr[2]);
340 t = l; l = r; r = t ^ F1(r, Km[3], Kr[3]);
341 t = l; l = r; r = t ^ F2(r, Km[4], Kr[4]);
342 t = l; l = r; r = t ^ F3(r, Km[5], Kr[5]);
343 t = l; l = r; r = t ^ F1(r, Km[6], Kr[6]);
344 t = l; l = r; r = t ^ F2(r, Km[7], Kr[7]);
345 t = l; l = r; r = t ^ F3(r, Km[8], Kr[8]);
346 t = l; l = r; r = t ^ F1(r, Km[9], Kr[9]);
347 t = l; l = r; r = t ^ F2(r, Km[10], Kr[10]);
348 t = l; l = r; r = t ^ F3(r, Km[11], Kr[11]);
349 if (!(c->rr)) {
350 t = l; l = r; r = t ^ F1(r, Km[12], Kr[12]);
351 t = l; l = r; r = t ^ F2(r, Km[13], Kr[13]);
352 t = l; l = r; r = t ^ F3(r, Km[14], Kr[14]);
353 t = l; l = r; r = t ^ F1(r, Km[15], Kr[15]);
354 }
355
356 /* c1...c64 <-- (R16,L16). (Exchange final blocks L16, R16 and
357 * concatenate to form the ciphertext.) */
358 dst[0] = cpu_to_be32(r);
359 dst[1] = cpu_to_be32(l);
360 }
361 EXPORT_SYMBOL_GPL(__cast5_encrypt);
362
cast5_encrypt(struct crypto_tfm * tfm,u8 * outbuf,const u8 * inbuf)363 static void cast5_encrypt(struct crypto_tfm *tfm, u8 *outbuf, const u8 *inbuf)
364 {
365 __cast5_encrypt(crypto_tfm_ctx(tfm), outbuf, inbuf);
366 }
367
__cast5_decrypt(struct cast5_ctx * c,u8 * outbuf,const u8 * inbuf)368 void __cast5_decrypt(struct cast5_ctx *c, u8 *outbuf, const u8 *inbuf)
369 {
370 const __be32 *src = (const __be32 *)inbuf;
371 __be32 *dst = (__be32 *)outbuf;
372 u32 l, r, t;
373 u32 I;
374 u32 *Km;
375 u8 *Kr;
376
377 Km = c->Km;
378 Kr = c->Kr;
379
380 l = be32_to_cpu(src[0]);
381 r = be32_to_cpu(src[1]);
382
383 if (!(c->rr)) {
384 t = l; l = r; r = t ^ F1(r, Km[15], Kr[15]);
385 t = l; l = r; r = t ^ F3(r, Km[14], Kr[14]);
386 t = l; l = r; r = t ^ F2(r, Km[13], Kr[13]);
387 t = l; l = r; r = t ^ F1(r, Km[12], Kr[12]);
388 }
389 t = l; l = r; r = t ^ F3(r, Km[11], Kr[11]);
390 t = l; l = r; r = t ^ F2(r, Km[10], Kr[10]);
391 t = l; l = r; r = t ^ F1(r, Km[9], Kr[9]);
392 t = l; l = r; r = t ^ F3(r, Km[8], Kr[8]);
393 t = l; l = r; r = t ^ F2(r, Km[7], Kr[7]);
394 t = l; l = r; r = t ^ F1(r, Km[6], Kr[6]);
395 t = l; l = r; r = t ^ F3(r, Km[5], Kr[5]);
396 t = l; l = r; r = t ^ F2(r, Km[4], Kr[4]);
397 t = l; l = r; r = t ^ F1(r, Km[3], Kr[3]);
398 t = l; l = r; r = t ^ F3(r, Km[2], Kr[2]);
399 t = l; l = r; r = t ^ F2(r, Km[1], Kr[1]);
400 t = l; l = r; r = t ^ F1(r, Km[0], Kr[0]);
401
402 dst[0] = cpu_to_be32(r);
403 dst[1] = cpu_to_be32(l);
404 }
405 EXPORT_SYMBOL_GPL(__cast5_decrypt);
406
cast5_decrypt(struct crypto_tfm * tfm,u8 * outbuf,const u8 * inbuf)407 static void cast5_decrypt(struct crypto_tfm *tfm, u8 *outbuf, const u8 *inbuf)
408 {
409 __cast5_decrypt(crypto_tfm_ctx(tfm), outbuf, inbuf);
410 }
411
key_schedule(u32 * x,u32 * z,u32 * k)412 static void key_schedule(u32 *x, u32 *z, u32 *k)
413 {
414
415 #define xi(i) ((x[(i)/4] >> (8*(3-((i)%4)))) & 0xff)
416 #define zi(i) ((z[(i)/4] >> (8*(3-((i)%4)))) & 0xff)
417
418 z[0] = x[0] ^ s5[xi(13)] ^ s6[xi(15)] ^ s7[xi(12)] ^ sb8[xi(14)] ^
419 s7[xi(8)];
420 z[1] = x[2] ^ s5[zi(0)] ^ s6[zi(2)] ^ s7[zi(1)] ^ sb8[zi(3)] ^
421 sb8[xi(10)];
422 z[2] = x[3] ^ s5[zi(7)] ^ s6[zi(6)] ^ s7[zi(5)] ^ sb8[zi(4)] ^
423 s5[xi(9)];
424 z[3] = x[1] ^ s5[zi(10)] ^ s6[zi(9)] ^ s7[zi(11)] ^ sb8[zi(8)] ^
425 s6[xi(11)];
426 k[0] = s5[zi(8)] ^ s6[zi(9)] ^ s7[zi(7)] ^ sb8[zi(6)] ^ s5[zi(2)];
427 k[1] = s5[zi(10)] ^ s6[zi(11)] ^ s7[zi(5)] ^ sb8[zi(4)] ^
428 s6[zi(6)];
429 k[2] = s5[zi(12)] ^ s6[zi(13)] ^ s7[zi(3)] ^ sb8[zi(2)] ^
430 s7[zi(9)];
431 k[3] = s5[zi(14)] ^ s6[zi(15)] ^ s7[zi(1)] ^ sb8[zi(0)] ^
432 sb8[zi(12)];
433
434 x[0] = z[2] ^ s5[zi(5)] ^ s6[zi(7)] ^ s7[zi(4)] ^ sb8[zi(6)] ^
435 s7[zi(0)];
436 x[1] = z[0] ^ s5[xi(0)] ^ s6[xi(2)] ^ s7[xi(1)] ^ sb8[xi(3)] ^
437 sb8[zi(2)];
438 x[2] = z[1] ^ s5[xi(7)] ^ s6[xi(6)] ^ s7[xi(5)] ^ sb8[xi(4)] ^
439 s5[zi(1)];
440 x[3] = z[3] ^ s5[xi(10)] ^ s6[xi(9)] ^ s7[xi(11)] ^ sb8[xi(8)] ^
441 s6[zi(3)];
442 k[4] = s5[xi(3)] ^ s6[xi(2)] ^ s7[xi(12)] ^ sb8[xi(13)] ^
443 s5[xi(8)];
444 k[5] = s5[xi(1)] ^ s6[xi(0)] ^ s7[xi(14)] ^ sb8[xi(15)] ^
445 s6[xi(13)];
446 k[6] = s5[xi(7)] ^ s6[xi(6)] ^ s7[xi(8)] ^ sb8[xi(9)] ^ s7[xi(3)];
447 k[7] = s5[xi(5)] ^ s6[xi(4)] ^ s7[xi(10)] ^ sb8[xi(11)] ^
448 sb8[xi(7)];
449
450 z[0] = x[0] ^ s5[xi(13)] ^ s6[xi(15)] ^ s7[xi(12)] ^ sb8[xi(14)] ^
451 s7[xi(8)];
452 z[1] = x[2] ^ s5[zi(0)] ^ s6[zi(2)] ^ s7[zi(1)] ^ sb8[zi(3)] ^
453 sb8[xi(10)];
454 z[2] = x[3] ^ s5[zi(7)] ^ s6[zi(6)] ^ s7[zi(5)] ^ sb8[zi(4)] ^
455 s5[xi(9)];
456 z[3] = x[1] ^ s5[zi(10)] ^ s6[zi(9)] ^ s7[zi(11)] ^ sb8[zi(8)] ^
457 s6[xi(11)];
458 k[8] = s5[zi(3)] ^ s6[zi(2)] ^ s7[zi(12)] ^ sb8[zi(13)] ^
459 s5[zi(9)];
460 k[9] = s5[zi(1)] ^ s6[zi(0)] ^ s7[zi(14)] ^ sb8[zi(15)] ^
461 s6[zi(12)];
462 k[10] = s5[zi(7)] ^ s6[zi(6)] ^ s7[zi(8)] ^ sb8[zi(9)] ^ s7[zi(2)];
463 k[11] = s5[zi(5)] ^ s6[zi(4)] ^ s7[zi(10)] ^ sb8[zi(11)] ^
464 sb8[zi(6)];
465
466 x[0] = z[2] ^ s5[zi(5)] ^ s6[zi(7)] ^ s7[zi(4)] ^ sb8[zi(6)] ^
467 s7[zi(0)];
468 x[1] = z[0] ^ s5[xi(0)] ^ s6[xi(2)] ^ s7[xi(1)] ^ sb8[xi(3)] ^
469 sb8[zi(2)];
470 x[2] = z[1] ^ s5[xi(7)] ^ s6[xi(6)] ^ s7[xi(5)] ^ sb8[xi(4)] ^
471 s5[zi(1)];
472 x[3] = z[3] ^ s5[xi(10)] ^ s6[xi(9)] ^ s7[xi(11)] ^ sb8[xi(8)] ^
473 s6[zi(3)];
474 k[12] = s5[xi(8)] ^ s6[xi(9)] ^ s7[xi(7)] ^ sb8[xi(6)] ^ s5[xi(3)];
475 k[13] = s5[xi(10)] ^ s6[xi(11)] ^ s7[xi(5)] ^ sb8[xi(4)] ^
476 s6[xi(7)];
477 k[14] = s5[xi(12)] ^ s6[xi(13)] ^ s7[xi(3)] ^ sb8[xi(2)] ^
478 s7[xi(8)];
479 k[15] = s5[xi(14)] ^ s6[xi(15)] ^ s7[xi(1)] ^ sb8[xi(0)] ^
480 sb8[xi(13)];
481
482 #undef xi
483 #undef zi
484 }
485
486
cast5_setkey(struct crypto_tfm * tfm,const u8 * key,unsigned int key_len)487 int cast5_setkey(struct crypto_tfm *tfm, const u8 *key, unsigned int key_len)
488 {
489 struct cast5_ctx *c = crypto_tfm_ctx(tfm);
490 int i;
491 u32 x[4];
492 u32 z[4];
493 u32 k[16];
494 __be32 p_key[4];
495
496 c->rr = key_len <= 10 ? 1 : 0;
497
498 memset(p_key, 0, 16);
499 memcpy(p_key, key, key_len);
500
501
502 x[0] = be32_to_cpu(p_key[0]);
503 x[1] = be32_to_cpu(p_key[1]);
504 x[2] = be32_to_cpu(p_key[2]);
505 x[3] = be32_to_cpu(p_key[3]);
506
507 key_schedule(x, z, k);
508 for (i = 0; i < 16; i++)
509 c->Km[i] = k[i];
510 key_schedule(x, z, k);
511 for (i = 0; i < 16; i++)
512 c->Kr[i] = k[i] & 0x1f;
513 return 0;
514 }
515 EXPORT_SYMBOL_GPL(cast5_setkey);
516
517 static struct crypto_alg alg = {
518 .cra_name = "cast5",
519 .cra_driver_name = "cast5-generic",
520 .cra_priority = 100,
521 .cra_flags = CRYPTO_ALG_TYPE_CIPHER,
522 .cra_blocksize = CAST5_BLOCK_SIZE,
523 .cra_ctxsize = sizeof(struct cast5_ctx),
524 .cra_alignmask = 3,
525 .cra_module = THIS_MODULE,
526 .cra_u = {
527 .cipher = {
528 .cia_min_keysize = CAST5_MIN_KEY_SIZE,
529 .cia_max_keysize = CAST5_MAX_KEY_SIZE,
530 .cia_setkey = cast5_setkey,
531 .cia_encrypt = cast5_encrypt,
532 .cia_decrypt = cast5_decrypt
533 }
534 }
535 };
536
cast5_mod_init(void)537 static int __init cast5_mod_init(void)
538 {
539 return crypto_register_alg(&alg);
540 }
541
cast5_mod_fini(void)542 static void __exit cast5_mod_fini(void)
543 {
544 crypto_unregister_alg(&alg);
545 }
546
547 module_init(cast5_mod_init);
548 module_exit(cast5_mod_fini);
549
550 MODULE_LICENSE("GPL");
551 MODULE_DESCRIPTION("Cast5 Cipher Algorithm");
552 MODULE_ALIAS_CRYPTO("cast5");
553 MODULE_ALIAS_CRYPTO("cast5-generic");
554