1 /*
2 * Glue Code for assembler optimized version of Camellia
3 *
4 * Copyright (c) 2012 Jussi Kivilinna <jussi.kivilinna@mbnet.fi>
5 *
6 * Camellia parts based on code by:
7 * Copyright (C) 2006 NTT (Nippon Telegraph and Telephone Corporation)
8 *
9 * This program is free software; you can redistribute it and/or modify
10 * it under the terms of the GNU General Public License as published by
11 * the Free Software Foundation; either version 2 of the License, or
12 * (at your option) any later version.
13 *
14 * This program is distributed in the hope that it will be useful,
15 * but WITHOUT ANY WARRANTY; without even the implied warranty of
16 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
17 * GNU General Public License for more details.
18 *
19 * You should have received a copy of the GNU General Public License
20 * along with this program; if not, write to the Free Software
21 * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307
22 * USA
23 *
24 */
25
26 #include <asm/processor.h>
27 #include <asm/unaligned.h>
28 #include <linux/crypto.h>
29 #include <linux/init.h>
30 #include <linux/module.h>
31 #include <linux/types.h>
32 #include <crypto/algapi.h>
33 #include <crypto/lrw.h>
34 #include <crypto/xts.h>
35 #include <asm/crypto/camellia.h>
36 #include <asm/crypto/glue_helper.h>
37
38 /* regular block cipher functions */
39 asmlinkage void __camellia_enc_blk(struct camellia_ctx *ctx, u8 *dst,
40 const u8 *src, bool xor);
41 EXPORT_SYMBOL_GPL(__camellia_enc_blk);
42 asmlinkage void camellia_dec_blk(struct camellia_ctx *ctx, u8 *dst,
43 const u8 *src);
44 EXPORT_SYMBOL_GPL(camellia_dec_blk);
45
46 /* 2-way parallel cipher functions */
47 asmlinkage void __camellia_enc_blk_2way(struct camellia_ctx *ctx, u8 *dst,
48 const u8 *src, bool xor);
49 EXPORT_SYMBOL_GPL(__camellia_enc_blk_2way);
50 asmlinkage void camellia_dec_blk_2way(struct camellia_ctx *ctx, u8 *dst,
51 const u8 *src);
52 EXPORT_SYMBOL_GPL(camellia_dec_blk_2way);
53
camellia_encrypt(struct crypto_tfm * tfm,u8 * dst,const u8 * src)54 static void camellia_encrypt(struct crypto_tfm *tfm, u8 *dst, const u8 *src)
55 {
56 camellia_enc_blk(crypto_tfm_ctx(tfm), dst, src);
57 }
58
camellia_decrypt(struct crypto_tfm * tfm,u8 * dst,const u8 * src)59 static void camellia_decrypt(struct crypto_tfm *tfm, u8 *dst, const u8 *src)
60 {
61 camellia_dec_blk(crypto_tfm_ctx(tfm), dst, src);
62 }
63
64 /* camellia sboxes */
65 __visible const u64 camellia_sp10011110[256] = {
66 0x7000007070707000ULL, 0x8200008282828200ULL, 0x2c00002c2c2c2c00ULL,
67 0xec0000ecececec00ULL, 0xb30000b3b3b3b300ULL, 0x2700002727272700ULL,
68 0xc00000c0c0c0c000ULL, 0xe50000e5e5e5e500ULL, 0xe40000e4e4e4e400ULL,
69 0x8500008585858500ULL, 0x5700005757575700ULL, 0x3500003535353500ULL,
70 0xea0000eaeaeaea00ULL, 0x0c00000c0c0c0c00ULL, 0xae0000aeaeaeae00ULL,
71 0x4100004141414100ULL, 0x2300002323232300ULL, 0xef0000efefefef00ULL,
72 0x6b00006b6b6b6b00ULL, 0x9300009393939300ULL, 0x4500004545454500ULL,
73 0x1900001919191900ULL, 0xa50000a5a5a5a500ULL, 0x2100002121212100ULL,
74 0xed0000edededed00ULL, 0x0e00000e0e0e0e00ULL, 0x4f00004f4f4f4f00ULL,
75 0x4e00004e4e4e4e00ULL, 0x1d00001d1d1d1d00ULL, 0x6500006565656500ULL,
76 0x9200009292929200ULL, 0xbd0000bdbdbdbd00ULL, 0x8600008686868600ULL,
77 0xb80000b8b8b8b800ULL, 0xaf0000afafafaf00ULL, 0x8f00008f8f8f8f00ULL,
78 0x7c00007c7c7c7c00ULL, 0xeb0000ebebebeb00ULL, 0x1f00001f1f1f1f00ULL,
79 0xce0000cececece00ULL, 0x3e00003e3e3e3e00ULL, 0x3000003030303000ULL,
80 0xdc0000dcdcdcdc00ULL, 0x5f00005f5f5f5f00ULL, 0x5e00005e5e5e5e00ULL,
81 0xc50000c5c5c5c500ULL, 0x0b00000b0b0b0b00ULL, 0x1a00001a1a1a1a00ULL,
82 0xa60000a6a6a6a600ULL, 0xe10000e1e1e1e100ULL, 0x3900003939393900ULL,
83 0xca0000cacacaca00ULL, 0xd50000d5d5d5d500ULL, 0x4700004747474700ULL,
84 0x5d00005d5d5d5d00ULL, 0x3d00003d3d3d3d00ULL, 0xd90000d9d9d9d900ULL,
85 0x0100000101010100ULL, 0x5a00005a5a5a5a00ULL, 0xd60000d6d6d6d600ULL,
86 0x5100005151515100ULL, 0x5600005656565600ULL, 0x6c00006c6c6c6c00ULL,
87 0x4d00004d4d4d4d00ULL, 0x8b00008b8b8b8b00ULL, 0x0d00000d0d0d0d00ULL,
88 0x9a00009a9a9a9a00ULL, 0x6600006666666600ULL, 0xfb0000fbfbfbfb00ULL,
89 0xcc0000cccccccc00ULL, 0xb00000b0b0b0b000ULL, 0x2d00002d2d2d2d00ULL,
90 0x7400007474747400ULL, 0x1200001212121200ULL, 0x2b00002b2b2b2b00ULL,
91 0x2000002020202000ULL, 0xf00000f0f0f0f000ULL, 0xb10000b1b1b1b100ULL,
92 0x8400008484848400ULL, 0x9900009999999900ULL, 0xdf0000dfdfdfdf00ULL,
93 0x4c00004c4c4c4c00ULL, 0xcb0000cbcbcbcb00ULL, 0xc20000c2c2c2c200ULL,
94 0x3400003434343400ULL, 0x7e00007e7e7e7e00ULL, 0x7600007676767600ULL,
95 0x0500000505050500ULL, 0x6d00006d6d6d6d00ULL, 0xb70000b7b7b7b700ULL,
96 0xa90000a9a9a9a900ULL, 0x3100003131313100ULL, 0xd10000d1d1d1d100ULL,
97 0x1700001717171700ULL, 0x0400000404040400ULL, 0xd70000d7d7d7d700ULL,
98 0x1400001414141400ULL, 0x5800005858585800ULL, 0x3a00003a3a3a3a00ULL,
99 0x6100006161616100ULL, 0xde0000dededede00ULL, 0x1b00001b1b1b1b00ULL,
100 0x1100001111111100ULL, 0x1c00001c1c1c1c00ULL, 0x3200003232323200ULL,
101 0x0f00000f0f0f0f00ULL, 0x9c00009c9c9c9c00ULL, 0x1600001616161600ULL,
102 0x5300005353535300ULL, 0x1800001818181800ULL, 0xf20000f2f2f2f200ULL,
103 0x2200002222222200ULL, 0xfe0000fefefefe00ULL, 0x4400004444444400ULL,
104 0xcf0000cfcfcfcf00ULL, 0xb20000b2b2b2b200ULL, 0xc30000c3c3c3c300ULL,
105 0xb50000b5b5b5b500ULL, 0x7a00007a7a7a7a00ULL, 0x9100009191919100ULL,
106 0x2400002424242400ULL, 0x0800000808080800ULL, 0xe80000e8e8e8e800ULL,
107 0xa80000a8a8a8a800ULL, 0x6000006060606000ULL, 0xfc0000fcfcfcfc00ULL,
108 0x6900006969696900ULL, 0x5000005050505000ULL, 0xaa0000aaaaaaaa00ULL,
109 0xd00000d0d0d0d000ULL, 0xa00000a0a0a0a000ULL, 0x7d00007d7d7d7d00ULL,
110 0xa10000a1a1a1a100ULL, 0x8900008989898900ULL, 0x6200006262626200ULL,
111 0x9700009797979700ULL, 0x5400005454545400ULL, 0x5b00005b5b5b5b00ULL,
112 0x1e00001e1e1e1e00ULL, 0x9500009595959500ULL, 0xe00000e0e0e0e000ULL,
113 0xff0000ffffffff00ULL, 0x6400006464646400ULL, 0xd20000d2d2d2d200ULL,
114 0x1000001010101000ULL, 0xc40000c4c4c4c400ULL, 0x0000000000000000ULL,
115 0x4800004848484800ULL, 0xa30000a3a3a3a300ULL, 0xf70000f7f7f7f700ULL,
116 0x7500007575757500ULL, 0xdb0000dbdbdbdb00ULL, 0x8a00008a8a8a8a00ULL,
117 0x0300000303030300ULL, 0xe60000e6e6e6e600ULL, 0xda0000dadadada00ULL,
118 0x0900000909090900ULL, 0x3f00003f3f3f3f00ULL, 0xdd0000dddddddd00ULL,
119 0x9400009494949400ULL, 0x8700008787878700ULL, 0x5c00005c5c5c5c00ULL,
120 0x8300008383838300ULL, 0x0200000202020200ULL, 0xcd0000cdcdcdcd00ULL,
121 0x4a00004a4a4a4a00ULL, 0x9000009090909000ULL, 0x3300003333333300ULL,
122 0x7300007373737300ULL, 0x6700006767676700ULL, 0xf60000f6f6f6f600ULL,
123 0xf30000f3f3f3f300ULL, 0x9d00009d9d9d9d00ULL, 0x7f00007f7f7f7f00ULL,
124 0xbf0000bfbfbfbf00ULL, 0xe20000e2e2e2e200ULL, 0x5200005252525200ULL,
125 0x9b00009b9b9b9b00ULL, 0xd80000d8d8d8d800ULL, 0x2600002626262600ULL,
126 0xc80000c8c8c8c800ULL, 0x3700003737373700ULL, 0xc60000c6c6c6c600ULL,
127 0x3b00003b3b3b3b00ULL, 0x8100008181818100ULL, 0x9600009696969600ULL,
128 0x6f00006f6f6f6f00ULL, 0x4b00004b4b4b4b00ULL, 0x1300001313131300ULL,
129 0xbe0000bebebebe00ULL, 0x6300006363636300ULL, 0x2e00002e2e2e2e00ULL,
130 0xe90000e9e9e9e900ULL, 0x7900007979797900ULL, 0xa70000a7a7a7a700ULL,
131 0x8c00008c8c8c8c00ULL, 0x9f00009f9f9f9f00ULL, 0x6e00006e6e6e6e00ULL,
132 0xbc0000bcbcbcbc00ULL, 0x8e00008e8e8e8e00ULL, 0x2900002929292900ULL,
133 0xf50000f5f5f5f500ULL, 0xf90000f9f9f9f900ULL, 0xb60000b6b6b6b600ULL,
134 0x2f00002f2f2f2f00ULL, 0xfd0000fdfdfdfd00ULL, 0xb40000b4b4b4b400ULL,
135 0x5900005959595900ULL, 0x7800007878787800ULL, 0x9800009898989800ULL,
136 0x0600000606060600ULL, 0x6a00006a6a6a6a00ULL, 0xe70000e7e7e7e700ULL,
137 0x4600004646464600ULL, 0x7100007171717100ULL, 0xba0000babababa00ULL,
138 0xd40000d4d4d4d400ULL, 0x2500002525252500ULL, 0xab0000abababab00ULL,
139 0x4200004242424200ULL, 0x8800008888888800ULL, 0xa20000a2a2a2a200ULL,
140 0x8d00008d8d8d8d00ULL, 0xfa0000fafafafa00ULL, 0x7200007272727200ULL,
141 0x0700000707070700ULL, 0xb90000b9b9b9b900ULL, 0x5500005555555500ULL,
142 0xf80000f8f8f8f800ULL, 0xee0000eeeeeeee00ULL, 0xac0000acacacac00ULL,
143 0x0a00000a0a0a0a00ULL, 0x3600003636363600ULL, 0x4900004949494900ULL,
144 0x2a00002a2a2a2a00ULL, 0x6800006868686800ULL, 0x3c00003c3c3c3c00ULL,
145 0x3800003838383800ULL, 0xf10000f1f1f1f100ULL, 0xa40000a4a4a4a400ULL,
146 0x4000004040404000ULL, 0x2800002828282800ULL, 0xd30000d3d3d3d300ULL,
147 0x7b00007b7b7b7b00ULL, 0xbb0000bbbbbbbb00ULL, 0xc90000c9c9c9c900ULL,
148 0x4300004343434300ULL, 0xc10000c1c1c1c100ULL, 0x1500001515151500ULL,
149 0xe30000e3e3e3e300ULL, 0xad0000adadadad00ULL, 0xf40000f4f4f4f400ULL,
150 0x7700007777777700ULL, 0xc70000c7c7c7c700ULL, 0x8000008080808000ULL,
151 0x9e00009e9e9e9e00ULL,
152 };
153
154 __visible const u64 camellia_sp22000222[256] = {
155 0xe0e0000000e0e0e0ULL, 0x0505000000050505ULL, 0x5858000000585858ULL,
156 0xd9d9000000d9d9d9ULL, 0x6767000000676767ULL, 0x4e4e0000004e4e4eULL,
157 0x8181000000818181ULL, 0xcbcb000000cbcbcbULL, 0xc9c9000000c9c9c9ULL,
158 0x0b0b0000000b0b0bULL, 0xaeae000000aeaeaeULL, 0x6a6a0000006a6a6aULL,
159 0xd5d5000000d5d5d5ULL, 0x1818000000181818ULL, 0x5d5d0000005d5d5dULL,
160 0x8282000000828282ULL, 0x4646000000464646ULL, 0xdfdf000000dfdfdfULL,
161 0xd6d6000000d6d6d6ULL, 0x2727000000272727ULL, 0x8a8a0000008a8a8aULL,
162 0x3232000000323232ULL, 0x4b4b0000004b4b4bULL, 0x4242000000424242ULL,
163 0xdbdb000000dbdbdbULL, 0x1c1c0000001c1c1cULL, 0x9e9e0000009e9e9eULL,
164 0x9c9c0000009c9c9cULL, 0x3a3a0000003a3a3aULL, 0xcaca000000cacacaULL,
165 0x2525000000252525ULL, 0x7b7b0000007b7b7bULL, 0x0d0d0000000d0d0dULL,
166 0x7171000000717171ULL, 0x5f5f0000005f5f5fULL, 0x1f1f0000001f1f1fULL,
167 0xf8f8000000f8f8f8ULL, 0xd7d7000000d7d7d7ULL, 0x3e3e0000003e3e3eULL,
168 0x9d9d0000009d9d9dULL, 0x7c7c0000007c7c7cULL, 0x6060000000606060ULL,
169 0xb9b9000000b9b9b9ULL, 0xbebe000000bebebeULL, 0xbcbc000000bcbcbcULL,
170 0x8b8b0000008b8b8bULL, 0x1616000000161616ULL, 0x3434000000343434ULL,
171 0x4d4d0000004d4d4dULL, 0xc3c3000000c3c3c3ULL, 0x7272000000727272ULL,
172 0x9595000000959595ULL, 0xabab000000abababULL, 0x8e8e0000008e8e8eULL,
173 0xbaba000000bababaULL, 0x7a7a0000007a7a7aULL, 0xb3b3000000b3b3b3ULL,
174 0x0202000000020202ULL, 0xb4b4000000b4b4b4ULL, 0xadad000000adadadULL,
175 0xa2a2000000a2a2a2ULL, 0xacac000000acacacULL, 0xd8d8000000d8d8d8ULL,
176 0x9a9a0000009a9a9aULL, 0x1717000000171717ULL, 0x1a1a0000001a1a1aULL,
177 0x3535000000353535ULL, 0xcccc000000ccccccULL, 0xf7f7000000f7f7f7ULL,
178 0x9999000000999999ULL, 0x6161000000616161ULL, 0x5a5a0000005a5a5aULL,
179 0xe8e8000000e8e8e8ULL, 0x2424000000242424ULL, 0x5656000000565656ULL,
180 0x4040000000404040ULL, 0xe1e1000000e1e1e1ULL, 0x6363000000636363ULL,
181 0x0909000000090909ULL, 0x3333000000333333ULL, 0xbfbf000000bfbfbfULL,
182 0x9898000000989898ULL, 0x9797000000979797ULL, 0x8585000000858585ULL,
183 0x6868000000686868ULL, 0xfcfc000000fcfcfcULL, 0xecec000000ecececULL,
184 0x0a0a0000000a0a0aULL, 0xdada000000dadadaULL, 0x6f6f0000006f6f6fULL,
185 0x5353000000535353ULL, 0x6262000000626262ULL, 0xa3a3000000a3a3a3ULL,
186 0x2e2e0000002e2e2eULL, 0x0808000000080808ULL, 0xafaf000000afafafULL,
187 0x2828000000282828ULL, 0xb0b0000000b0b0b0ULL, 0x7474000000747474ULL,
188 0xc2c2000000c2c2c2ULL, 0xbdbd000000bdbdbdULL, 0x3636000000363636ULL,
189 0x2222000000222222ULL, 0x3838000000383838ULL, 0x6464000000646464ULL,
190 0x1e1e0000001e1e1eULL, 0x3939000000393939ULL, 0x2c2c0000002c2c2cULL,
191 0xa6a6000000a6a6a6ULL, 0x3030000000303030ULL, 0xe5e5000000e5e5e5ULL,
192 0x4444000000444444ULL, 0xfdfd000000fdfdfdULL, 0x8888000000888888ULL,
193 0x9f9f0000009f9f9fULL, 0x6565000000656565ULL, 0x8787000000878787ULL,
194 0x6b6b0000006b6b6bULL, 0xf4f4000000f4f4f4ULL, 0x2323000000232323ULL,
195 0x4848000000484848ULL, 0x1010000000101010ULL, 0xd1d1000000d1d1d1ULL,
196 0x5151000000515151ULL, 0xc0c0000000c0c0c0ULL, 0xf9f9000000f9f9f9ULL,
197 0xd2d2000000d2d2d2ULL, 0xa0a0000000a0a0a0ULL, 0x5555000000555555ULL,
198 0xa1a1000000a1a1a1ULL, 0x4141000000414141ULL, 0xfafa000000fafafaULL,
199 0x4343000000434343ULL, 0x1313000000131313ULL, 0xc4c4000000c4c4c4ULL,
200 0x2f2f0000002f2f2fULL, 0xa8a8000000a8a8a8ULL, 0xb6b6000000b6b6b6ULL,
201 0x3c3c0000003c3c3cULL, 0x2b2b0000002b2b2bULL, 0xc1c1000000c1c1c1ULL,
202 0xffff000000ffffffULL, 0xc8c8000000c8c8c8ULL, 0xa5a5000000a5a5a5ULL,
203 0x2020000000202020ULL, 0x8989000000898989ULL, 0x0000000000000000ULL,
204 0x9090000000909090ULL, 0x4747000000474747ULL, 0xefef000000efefefULL,
205 0xeaea000000eaeaeaULL, 0xb7b7000000b7b7b7ULL, 0x1515000000151515ULL,
206 0x0606000000060606ULL, 0xcdcd000000cdcdcdULL, 0xb5b5000000b5b5b5ULL,
207 0x1212000000121212ULL, 0x7e7e0000007e7e7eULL, 0xbbbb000000bbbbbbULL,
208 0x2929000000292929ULL, 0x0f0f0000000f0f0fULL, 0xb8b8000000b8b8b8ULL,
209 0x0707000000070707ULL, 0x0404000000040404ULL, 0x9b9b0000009b9b9bULL,
210 0x9494000000949494ULL, 0x2121000000212121ULL, 0x6666000000666666ULL,
211 0xe6e6000000e6e6e6ULL, 0xcece000000cececeULL, 0xeded000000edededULL,
212 0xe7e7000000e7e7e7ULL, 0x3b3b0000003b3b3bULL, 0xfefe000000fefefeULL,
213 0x7f7f0000007f7f7fULL, 0xc5c5000000c5c5c5ULL, 0xa4a4000000a4a4a4ULL,
214 0x3737000000373737ULL, 0xb1b1000000b1b1b1ULL, 0x4c4c0000004c4c4cULL,
215 0x9191000000919191ULL, 0x6e6e0000006e6e6eULL, 0x8d8d0000008d8d8dULL,
216 0x7676000000767676ULL, 0x0303000000030303ULL, 0x2d2d0000002d2d2dULL,
217 0xdede000000dededeULL, 0x9696000000969696ULL, 0x2626000000262626ULL,
218 0x7d7d0000007d7d7dULL, 0xc6c6000000c6c6c6ULL, 0x5c5c0000005c5c5cULL,
219 0xd3d3000000d3d3d3ULL, 0xf2f2000000f2f2f2ULL, 0x4f4f0000004f4f4fULL,
220 0x1919000000191919ULL, 0x3f3f0000003f3f3fULL, 0xdcdc000000dcdcdcULL,
221 0x7979000000797979ULL, 0x1d1d0000001d1d1dULL, 0x5252000000525252ULL,
222 0xebeb000000ebebebULL, 0xf3f3000000f3f3f3ULL, 0x6d6d0000006d6d6dULL,
223 0x5e5e0000005e5e5eULL, 0xfbfb000000fbfbfbULL, 0x6969000000696969ULL,
224 0xb2b2000000b2b2b2ULL, 0xf0f0000000f0f0f0ULL, 0x3131000000313131ULL,
225 0x0c0c0000000c0c0cULL, 0xd4d4000000d4d4d4ULL, 0xcfcf000000cfcfcfULL,
226 0x8c8c0000008c8c8cULL, 0xe2e2000000e2e2e2ULL, 0x7575000000757575ULL,
227 0xa9a9000000a9a9a9ULL, 0x4a4a0000004a4a4aULL, 0x5757000000575757ULL,
228 0x8484000000848484ULL, 0x1111000000111111ULL, 0x4545000000454545ULL,
229 0x1b1b0000001b1b1bULL, 0xf5f5000000f5f5f5ULL, 0xe4e4000000e4e4e4ULL,
230 0x0e0e0000000e0e0eULL, 0x7373000000737373ULL, 0xaaaa000000aaaaaaULL,
231 0xf1f1000000f1f1f1ULL, 0xdddd000000ddddddULL, 0x5959000000595959ULL,
232 0x1414000000141414ULL, 0x6c6c0000006c6c6cULL, 0x9292000000929292ULL,
233 0x5454000000545454ULL, 0xd0d0000000d0d0d0ULL, 0x7878000000787878ULL,
234 0x7070000000707070ULL, 0xe3e3000000e3e3e3ULL, 0x4949000000494949ULL,
235 0x8080000000808080ULL, 0x5050000000505050ULL, 0xa7a7000000a7a7a7ULL,
236 0xf6f6000000f6f6f6ULL, 0x7777000000777777ULL, 0x9393000000939393ULL,
237 0x8686000000868686ULL, 0x8383000000838383ULL, 0x2a2a0000002a2a2aULL,
238 0xc7c7000000c7c7c7ULL, 0x5b5b0000005b5b5bULL, 0xe9e9000000e9e9e9ULL,
239 0xeeee000000eeeeeeULL, 0x8f8f0000008f8f8fULL, 0x0101000000010101ULL,
240 0x3d3d0000003d3d3dULL,
241 };
242
243 __visible const u64 camellia_sp03303033[256] = {
244 0x0038380038003838ULL, 0x0041410041004141ULL, 0x0016160016001616ULL,
245 0x0076760076007676ULL, 0x00d9d900d900d9d9ULL, 0x0093930093009393ULL,
246 0x0060600060006060ULL, 0x00f2f200f200f2f2ULL, 0x0072720072007272ULL,
247 0x00c2c200c200c2c2ULL, 0x00abab00ab00ababULL, 0x009a9a009a009a9aULL,
248 0x0075750075007575ULL, 0x0006060006000606ULL, 0x0057570057005757ULL,
249 0x00a0a000a000a0a0ULL, 0x0091910091009191ULL, 0x00f7f700f700f7f7ULL,
250 0x00b5b500b500b5b5ULL, 0x00c9c900c900c9c9ULL, 0x00a2a200a200a2a2ULL,
251 0x008c8c008c008c8cULL, 0x00d2d200d200d2d2ULL, 0x0090900090009090ULL,
252 0x00f6f600f600f6f6ULL, 0x0007070007000707ULL, 0x00a7a700a700a7a7ULL,
253 0x0027270027002727ULL, 0x008e8e008e008e8eULL, 0x00b2b200b200b2b2ULL,
254 0x0049490049004949ULL, 0x00dede00de00dedeULL, 0x0043430043004343ULL,
255 0x005c5c005c005c5cULL, 0x00d7d700d700d7d7ULL, 0x00c7c700c700c7c7ULL,
256 0x003e3e003e003e3eULL, 0x00f5f500f500f5f5ULL, 0x008f8f008f008f8fULL,
257 0x0067670067006767ULL, 0x001f1f001f001f1fULL, 0x0018180018001818ULL,
258 0x006e6e006e006e6eULL, 0x00afaf00af00afafULL, 0x002f2f002f002f2fULL,
259 0x00e2e200e200e2e2ULL, 0x0085850085008585ULL, 0x000d0d000d000d0dULL,
260 0x0053530053005353ULL, 0x00f0f000f000f0f0ULL, 0x009c9c009c009c9cULL,
261 0x0065650065006565ULL, 0x00eaea00ea00eaeaULL, 0x00a3a300a300a3a3ULL,
262 0x00aeae00ae00aeaeULL, 0x009e9e009e009e9eULL, 0x00ecec00ec00ececULL,
263 0x0080800080008080ULL, 0x002d2d002d002d2dULL, 0x006b6b006b006b6bULL,
264 0x00a8a800a800a8a8ULL, 0x002b2b002b002b2bULL, 0x0036360036003636ULL,
265 0x00a6a600a600a6a6ULL, 0x00c5c500c500c5c5ULL, 0x0086860086008686ULL,
266 0x004d4d004d004d4dULL, 0x0033330033003333ULL, 0x00fdfd00fd00fdfdULL,
267 0x0066660066006666ULL, 0x0058580058005858ULL, 0x0096960096009696ULL,
268 0x003a3a003a003a3aULL, 0x0009090009000909ULL, 0x0095950095009595ULL,
269 0x0010100010001010ULL, 0x0078780078007878ULL, 0x00d8d800d800d8d8ULL,
270 0x0042420042004242ULL, 0x00cccc00cc00ccccULL, 0x00efef00ef00efefULL,
271 0x0026260026002626ULL, 0x00e5e500e500e5e5ULL, 0x0061610061006161ULL,
272 0x001a1a001a001a1aULL, 0x003f3f003f003f3fULL, 0x003b3b003b003b3bULL,
273 0x0082820082008282ULL, 0x00b6b600b600b6b6ULL, 0x00dbdb00db00dbdbULL,
274 0x00d4d400d400d4d4ULL, 0x0098980098009898ULL, 0x00e8e800e800e8e8ULL,
275 0x008b8b008b008b8bULL, 0x0002020002000202ULL, 0x00ebeb00eb00ebebULL,
276 0x000a0a000a000a0aULL, 0x002c2c002c002c2cULL, 0x001d1d001d001d1dULL,
277 0x00b0b000b000b0b0ULL, 0x006f6f006f006f6fULL, 0x008d8d008d008d8dULL,
278 0x0088880088008888ULL, 0x000e0e000e000e0eULL, 0x0019190019001919ULL,
279 0x0087870087008787ULL, 0x004e4e004e004e4eULL, 0x000b0b000b000b0bULL,
280 0x00a9a900a900a9a9ULL, 0x000c0c000c000c0cULL, 0x0079790079007979ULL,
281 0x0011110011001111ULL, 0x007f7f007f007f7fULL, 0x0022220022002222ULL,
282 0x00e7e700e700e7e7ULL, 0x0059590059005959ULL, 0x00e1e100e100e1e1ULL,
283 0x00dada00da00dadaULL, 0x003d3d003d003d3dULL, 0x00c8c800c800c8c8ULL,
284 0x0012120012001212ULL, 0x0004040004000404ULL, 0x0074740074007474ULL,
285 0x0054540054005454ULL, 0x0030300030003030ULL, 0x007e7e007e007e7eULL,
286 0x00b4b400b400b4b4ULL, 0x0028280028002828ULL, 0x0055550055005555ULL,
287 0x0068680068006868ULL, 0x0050500050005050ULL, 0x00bebe00be00bebeULL,
288 0x00d0d000d000d0d0ULL, 0x00c4c400c400c4c4ULL, 0x0031310031003131ULL,
289 0x00cbcb00cb00cbcbULL, 0x002a2a002a002a2aULL, 0x00adad00ad00adadULL,
290 0x000f0f000f000f0fULL, 0x00caca00ca00cacaULL, 0x0070700070007070ULL,
291 0x00ffff00ff00ffffULL, 0x0032320032003232ULL, 0x0069690069006969ULL,
292 0x0008080008000808ULL, 0x0062620062006262ULL, 0x0000000000000000ULL,
293 0x0024240024002424ULL, 0x00d1d100d100d1d1ULL, 0x00fbfb00fb00fbfbULL,
294 0x00baba00ba00babaULL, 0x00eded00ed00ededULL, 0x0045450045004545ULL,
295 0x0081810081008181ULL, 0x0073730073007373ULL, 0x006d6d006d006d6dULL,
296 0x0084840084008484ULL, 0x009f9f009f009f9fULL, 0x00eeee00ee00eeeeULL,
297 0x004a4a004a004a4aULL, 0x00c3c300c300c3c3ULL, 0x002e2e002e002e2eULL,
298 0x00c1c100c100c1c1ULL, 0x0001010001000101ULL, 0x00e6e600e600e6e6ULL,
299 0x0025250025002525ULL, 0x0048480048004848ULL, 0x0099990099009999ULL,
300 0x00b9b900b900b9b9ULL, 0x00b3b300b300b3b3ULL, 0x007b7b007b007b7bULL,
301 0x00f9f900f900f9f9ULL, 0x00cece00ce00ceceULL, 0x00bfbf00bf00bfbfULL,
302 0x00dfdf00df00dfdfULL, 0x0071710071007171ULL, 0x0029290029002929ULL,
303 0x00cdcd00cd00cdcdULL, 0x006c6c006c006c6cULL, 0x0013130013001313ULL,
304 0x0064640064006464ULL, 0x009b9b009b009b9bULL, 0x0063630063006363ULL,
305 0x009d9d009d009d9dULL, 0x00c0c000c000c0c0ULL, 0x004b4b004b004b4bULL,
306 0x00b7b700b700b7b7ULL, 0x00a5a500a500a5a5ULL, 0x0089890089008989ULL,
307 0x005f5f005f005f5fULL, 0x00b1b100b100b1b1ULL, 0x0017170017001717ULL,
308 0x00f4f400f400f4f4ULL, 0x00bcbc00bc00bcbcULL, 0x00d3d300d300d3d3ULL,
309 0x0046460046004646ULL, 0x00cfcf00cf00cfcfULL, 0x0037370037003737ULL,
310 0x005e5e005e005e5eULL, 0x0047470047004747ULL, 0x0094940094009494ULL,
311 0x00fafa00fa00fafaULL, 0x00fcfc00fc00fcfcULL, 0x005b5b005b005b5bULL,
312 0x0097970097009797ULL, 0x00fefe00fe00fefeULL, 0x005a5a005a005a5aULL,
313 0x00acac00ac00acacULL, 0x003c3c003c003c3cULL, 0x004c4c004c004c4cULL,
314 0x0003030003000303ULL, 0x0035350035003535ULL, 0x00f3f300f300f3f3ULL,
315 0x0023230023002323ULL, 0x00b8b800b800b8b8ULL, 0x005d5d005d005d5dULL,
316 0x006a6a006a006a6aULL, 0x0092920092009292ULL, 0x00d5d500d500d5d5ULL,
317 0x0021210021002121ULL, 0x0044440044004444ULL, 0x0051510051005151ULL,
318 0x00c6c600c600c6c6ULL, 0x007d7d007d007d7dULL, 0x0039390039003939ULL,
319 0x0083830083008383ULL, 0x00dcdc00dc00dcdcULL, 0x00aaaa00aa00aaaaULL,
320 0x007c7c007c007c7cULL, 0x0077770077007777ULL, 0x0056560056005656ULL,
321 0x0005050005000505ULL, 0x001b1b001b001b1bULL, 0x00a4a400a400a4a4ULL,
322 0x0015150015001515ULL, 0x0034340034003434ULL, 0x001e1e001e001e1eULL,
323 0x001c1c001c001c1cULL, 0x00f8f800f800f8f8ULL, 0x0052520052005252ULL,
324 0x0020200020002020ULL, 0x0014140014001414ULL, 0x00e9e900e900e9e9ULL,
325 0x00bdbd00bd00bdbdULL, 0x00dddd00dd00ddddULL, 0x00e4e400e400e4e4ULL,
326 0x00a1a100a100a1a1ULL, 0x00e0e000e000e0e0ULL, 0x008a8a008a008a8aULL,
327 0x00f1f100f100f1f1ULL, 0x00d6d600d600d6d6ULL, 0x007a7a007a007a7aULL,
328 0x00bbbb00bb00bbbbULL, 0x00e3e300e300e3e3ULL, 0x0040400040004040ULL,
329 0x004f4f004f004f4fULL,
330 };
331
332 __visible const u64 camellia_sp00444404[256] = {
333 0x0000707070700070ULL, 0x00002c2c2c2c002cULL, 0x0000b3b3b3b300b3ULL,
334 0x0000c0c0c0c000c0ULL, 0x0000e4e4e4e400e4ULL, 0x0000575757570057ULL,
335 0x0000eaeaeaea00eaULL, 0x0000aeaeaeae00aeULL, 0x0000232323230023ULL,
336 0x00006b6b6b6b006bULL, 0x0000454545450045ULL, 0x0000a5a5a5a500a5ULL,
337 0x0000edededed00edULL, 0x00004f4f4f4f004fULL, 0x00001d1d1d1d001dULL,
338 0x0000929292920092ULL, 0x0000868686860086ULL, 0x0000afafafaf00afULL,
339 0x00007c7c7c7c007cULL, 0x00001f1f1f1f001fULL, 0x00003e3e3e3e003eULL,
340 0x0000dcdcdcdc00dcULL, 0x00005e5e5e5e005eULL, 0x00000b0b0b0b000bULL,
341 0x0000a6a6a6a600a6ULL, 0x0000393939390039ULL, 0x0000d5d5d5d500d5ULL,
342 0x00005d5d5d5d005dULL, 0x0000d9d9d9d900d9ULL, 0x00005a5a5a5a005aULL,
343 0x0000515151510051ULL, 0x00006c6c6c6c006cULL, 0x00008b8b8b8b008bULL,
344 0x00009a9a9a9a009aULL, 0x0000fbfbfbfb00fbULL, 0x0000b0b0b0b000b0ULL,
345 0x0000747474740074ULL, 0x00002b2b2b2b002bULL, 0x0000f0f0f0f000f0ULL,
346 0x0000848484840084ULL, 0x0000dfdfdfdf00dfULL, 0x0000cbcbcbcb00cbULL,
347 0x0000343434340034ULL, 0x0000767676760076ULL, 0x00006d6d6d6d006dULL,
348 0x0000a9a9a9a900a9ULL, 0x0000d1d1d1d100d1ULL, 0x0000040404040004ULL,
349 0x0000141414140014ULL, 0x00003a3a3a3a003aULL, 0x0000dededede00deULL,
350 0x0000111111110011ULL, 0x0000323232320032ULL, 0x00009c9c9c9c009cULL,
351 0x0000535353530053ULL, 0x0000f2f2f2f200f2ULL, 0x0000fefefefe00feULL,
352 0x0000cfcfcfcf00cfULL, 0x0000c3c3c3c300c3ULL, 0x00007a7a7a7a007aULL,
353 0x0000242424240024ULL, 0x0000e8e8e8e800e8ULL, 0x0000606060600060ULL,
354 0x0000696969690069ULL, 0x0000aaaaaaaa00aaULL, 0x0000a0a0a0a000a0ULL,
355 0x0000a1a1a1a100a1ULL, 0x0000626262620062ULL, 0x0000545454540054ULL,
356 0x00001e1e1e1e001eULL, 0x0000e0e0e0e000e0ULL, 0x0000646464640064ULL,
357 0x0000101010100010ULL, 0x0000000000000000ULL, 0x0000a3a3a3a300a3ULL,
358 0x0000757575750075ULL, 0x00008a8a8a8a008aULL, 0x0000e6e6e6e600e6ULL,
359 0x0000090909090009ULL, 0x0000dddddddd00ddULL, 0x0000878787870087ULL,
360 0x0000838383830083ULL, 0x0000cdcdcdcd00cdULL, 0x0000909090900090ULL,
361 0x0000737373730073ULL, 0x0000f6f6f6f600f6ULL, 0x00009d9d9d9d009dULL,
362 0x0000bfbfbfbf00bfULL, 0x0000525252520052ULL, 0x0000d8d8d8d800d8ULL,
363 0x0000c8c8c8c800c8ULL, 0x0000c6c6c6c600c6ULL, 0x0000818181810081ULL,
364 0x00006f6f6f6f006fULL, 0x0000131313130013ULL, 0x0000636363630063ULL,
365 0x0000e9e9e9e900e9ULL, 0x0000a7a7a7a700a7ULL, 0x00009f9f9f9f009fULL,
366 0x0000bcbcbcbc00bcULL, 0x0000292929290029ULL, 0x0000f9f9f9f900f9ULL,
367 0x00002f2f2f2f002fULL, 0x0000b4b4b4b400b4ULL, 0x0000787878780078ULL,
368 0x0000060606060006ULL, 0x0000e7e7e7e700e7ULL, 0x0000717171710071ULL,
369 0x0000d4d4d4d400d4ULL, 0x0000abababab00abULL, 0x0000888888880088ULL,
370 0x00008d8d8d8d008dULL, 0x0000727272720072ULL, 0x0000b9b9b9b900b9ULL,
371 0x0000f8f8f8f800f8ULL, 0x0000acacacac00acULL, 0x0000363636360036ULL,
372 0x00002a2a2a2a002aULL, 0x00003c3c3c3c003cULL, 0x0000f1f1f1f100f1ULL,
373 0x0000404040400040ULL, 0x0000d3d3d3d300d3ULL, 0x0000bbbbbbbb00bbULL,
374 0x0000434343430043ULL, 0x0000151515150015ULL, 0x0000adadadad00adULL,
375 0x0000777777770077ULL, 0x0000808080800080ULL, 0x0000828282820082ULL,
376 0x0000ecececec00ecULL, 0x0000272727270027ULL, 0x0000e5e5e5e500e5ULL,
377 0x0000858585850085ULL, 0x0000353535350035ULL, 0x00000c0c0c0c000cULL,
378 0x0000414141410041ULL, 0x0000efefefef00efULL, 0x0000939393930093ULL,
379 0x0000191919190019ULL, 0x0000212121210021ULL, 0x00000e0e0e0e000eULL,
380 0x00004e4e4e4e004eULL, 0x0000656565650065ULL, 0x0000bdbdbdbd00bdULL,
381 0x0000b8b8b8b800b8ULL, 0x00008f8f8f8f008fULL, 0x0000ebebebeb00ebULL,
382 0x0000cececece00ceULL, 0x0000303030300030ULL, 0x00005f5f5f5f005fULL,
383 0x0000c5c5c5c500c5ULL, 0x00001a1a1a1a001aULL, 0x0000e1e1e1e100e1ULL,
384 0x0000cacacaca00caULL, 0x0000474747470047ULL, 0x00003d3d3d3d003dULL,
385 0x0000010101010001ULL, 0x0000d6d6d6d600d6ULL, 0x0000565656560056ULL,
386 0x00004d4d4d4d004dULL, 0x00000d0d0d0d000dULL, 0x0000666666660066ULL,
387 0x0000cccccccc00ccULL, 0x00002d2d2d2d002dULL, 0x0000121212120012ULL,
388 0x0000202020200020ULL, 0x0000b1b1b1b100b1ULL, 0x0000999999990099ULL,
389 0x00004c4c4c4c004cULL, 0x0000c2c2c2c200c2ULL, 0x00007e7e7e7e007eULL,
390 0x0000050505050005ULL, 0x0000b7b7b7b700b7ULL, 0x0000313131310031ULL,
391 0x0000171717170017ULL, 0x0000d7d7d7d700d7ULL, 0x0000585858580058ULL,
392 0x0000616161610061ULL, 0x00001b1b1b1b001bULL, 0x00001c1c1c1c001cULL,
393 0x00000f0f0f0f000fULL, 0x0000161616160016ULL, 0x0000181818180018ULL,
394 0x0000222222220022ULL, 0x0000444444440044ULL, 0x0000b2b2b2b200b2ULL,
395 0x0000b5b5b5b500b5ULL, 0x0000919191910091ULL, 0x0000080808080008ULL,
396 0x0000a8a8a8a800a8ULL, 0x0000fcfcfcfc00fcULL, 0x0000505050500050ULL,
397 0x0000d0d0d0d000d0ULL, 0x00007d7d7d7d007dULL, 0x0000898989890089ULL,
398 0x0000979797970097ULL, 0x00005b5b5b5b005bULL, 0x0000959595950095ULL,
399 0x0000ffffffff00ffULL, 0x0000d2d2d2d200d2ULL, 0x0000c4c4c4c400c4ULL,
400 0x0000484848480048ULL, 0x0000f7f7f7f700f7ULL, 0x0000dbdbdbdb00dbULL,
401 0x0000030303030003ULL, 0x0000dadadada00daULL, 0x00003f3f3f3f003fULL,
402 0x0000949494940094ULL, 0x00005c5c5c5c005cULL, 0x0000020202020002ULL,
403 0x00004a4a4a4a004aULL, 0x0000333333330033ULL, 0x0000676767670067ULL,
404 0x0000f3f3f3f300f3ULL, 0x00007f7f7f7f007fULL, 0x0000e2e2e2e200e2ULL,
405 0x00009b9b9b9b009bULL, 0x0000262626260026ULL, 0x0000373737370037ULL,
406 0x00003b3b3b3b003bULL, 0x0000969696960096ULL, 0x00004b4b4b4b004bULL,
407 0x0000bebebebe00beULL, 0x00002e2e2e2e002eULL, 0x0000797979790079ULL,
408 0x00008c8c8c8c008cULL, 0x00006e6e6e6e006eULL, 0x00008e8e8e8e008eULL,
409 0x0000f5f5f5f500f5ULL, 0x0000b6b6b6b600b6ULL, 0x0000fdfdfdfd00fdULL,
410 0x0000595959590059ULL, 0x0000989898980098ULL, 0x00006a6a6a6a006aULL,
411 0x0000464646460046ULL, 0x0000babababa00baULL, 0x0000252525250025ULL,
412 0x0000424242420042ULL, 0x0000a2a2a2a200a2ULL, 0x0000fafafafa00faULL,
413 0x0000070707070007ULL, 0x0000555555550055ULL, 0x0000eeeeeeee00eeULL,
414 0x00000a0a0a0a000aULL, 0x0000494949490049ULL, 0x0000686868680068ULL,
415 0x0000383838380038ULL, 0x0000a4a4a4a400a4ULL, 0x0000282828280028ULL,
416 0x00007b7b7b7b007bULL, 0x0000c9c9c9c900c9ULL, 0x0000c1c1c1c100c1ULL,
417 0x0000e3e3e3e300e3ULL, 0x0000f4f4f4f400f4ULL, 0x0000c7c7c7c700c7ULL,
418 0x00009e9e9e9e009eULL,
419 };
420
421 __visible const u64 camellia_sp02220222[256] = {
422 0x00e0e0e000e0e0e0ULL, 0x0005050500050505ULL, 0x0058585800585858ULL,
423 0x00d9d9d900d9d9d9ULL, 0x0067676700676767ULL, 0x004e4e4e004e4e4eULL,
424 0x0081818100818181ULL, 0x00cbcbcb00cbcbcbULL, 0x00c9c9c900c9c9c9ULL,
425 0x000b0b0b000b0b0bULL, 0x00aeaeae00aeaeaeULL, 0x006a6a6a006a6a6aULL,
426 0x00d5d5d500d5d5d5ULL, 0x0018181800181818ULL, 0x005d5d5d005d5d5dULL,
427 0x0082828200828282ULL, 0x0046464600464646ULL, 0x00dfdfdf00dfdfdfULL,
428 0x00d6d6d600d6d6d6ULL, 0x0027272700272727ULL, 0x008a8a8a008a8a8aULL,
429 0x0032323200323232ULL, 0x004b4b4b004b4b4bULL, 0x0042424200424242ULL,
430 0x00dbdbdb00dbdbdbULL, 0x001c1c1c001c1c1cULL, 0x009e9e9e009e9e9eULL,
431 0x009c9c9c009c9c9cULL, 0x003a3a3a003a3a3aULL, 0x00cacaca00cacacaULL,
432 0x0025252500252525ULL, 0x007b7b7b007b7b7bULL, 0x000d0d0d000d0d0dULL,
433 0x0071717100717171ULL, 0x005f5f5f005f5f5fULL, 0x001f1f1f001f1f1fULL,
434 0x00f8f8f800f8f8f8ULL, 0x00d7d7d700d7d7d7ULL, 0x003e3e3e003e3e3eULL,
435 0x009d9d9d009d9d9dULL, 0x007c7c7c007c7c7cULL, 0x0060606000606060ULL,
436 0x00b9b9b900b9b9b9ULL, 0x00bebebe00bebebeULL, 0x00bcbcbc00bcbcbcULL,
437 0x008b8b8b008b8b8bULL, 0x0016161600161616ULL, 0x0034343400343434ULL,
438 0x004d4d4d004d4d4dULL, 0x00c3c3c300c3c3c3ULL, 0x0072727200727272ULL,
439 0x0095959500959595ULL, 0x00ababab00abababULL, 0x008e8e8e008e8e8eULL,
440 0x00bababa00bababaULL, 0x007a7a7a007a7a7aULL, 0x00b3b3b300b3b3b3ULL,
441 0x0002020200020202ULL, 0x00b4b4b400b4b4b4ULL, 0x00adadad00adadadULL,
442 0x00a2a2a200a2a2a2ULL, 0x00acacac00acacacULL, 0x00d8d8d800d8d8d8ULL,
443 0x009a9a9a009a9a9aULL, 0x0017171700171717ULL, 0x001a1a1a001a1a1aULL,
444 0x0035353500353535ULL, 0x00cccccc00ccccccULL, 0x00f7f7f700f7f7f7ULL,
445 0x0099999900999999ULL, 0x0061616100616161ULL, 0x005a5a5a005a5a5aULL,
446 0x00e8e8e800e8e8e8ULL, 0x0024242400242424ULL, 0x0056565600565656ULL,
447 0x0040404000404040ULL, 0x00e1e1e100e1e1e1ULL, 0x0063636300636363ULL,
448 0x0009090900090909ULL, 0x0033333300333333ULL, 0x00bfbfbf00bfbfbfULL,
449 0x0098989800989898ULL, 0x0097979700979797ULL, 0x0085858500858585ULL,
450 0x0068686800686868ULL, 0x00fcfcfc00fcfcfcULL, 0x00ececec00ecececULL,
451 0x000a0a0a000a0a0aULL, 0x00dadada00dadadaULL, 0x006f6f6f006f6f6fULL,
452 0x0053535300535353ULL, 0x0062626200626262ULL, 0x00a3a3a300a3a3a3ULL,
453 0x002e2e2e002e2e2eULL, 0x0008080800080808ULL, 0x00afafaf00afafafULL,
454 0x0028282800282828ULL, 0x00b0b0b000b0b0b0ULL, 0x0074747400747474ULL,
455 0x00c2c2c200c2c2c2ULL, 0x00bdbdbd00bdbdbdULL, 0x0036363600363636ULL,
456 0x0022222200222222ULL, 0x0038383800383838ULL, 0x0064646400646464ULL,
457 0x001e1e1e001e1e1eULL, 0x0039393900393939ULL, 0x002c2c2c002c2c2cULL,
458 0x00a6a6a600a6a6a6ULL, 0x0030303000303030ULL, 0x00e5e5e500e5e5e5ULL,
459 0x0044444400444444ULL, 0x00fdfdfd00fdfdfdULL, 0x0088888800888888ULL,
460 0x009f9f9f009f9f9fULL, 0x0065656500656565ULL, 0x0087878700878787ULL,
461 0x006b6b6b006b6b6bULL, 0x00f4f4f400f4f4f4ULL, 0x0023232300232323ULL,
462 0x0048484800484848ULL, 0x0010101000101010ULL, 0x00d1d1d100d1d1d1ULL,
463 0x0051515100515151ULL, 0x00c0c0c000c0c0c0ULL, 0x00f9f9f900f9f9f9ULL,
464 0x00d2d2d200d2d2d2ULL, 0x00a0a0a000a0a0a0ULL, 0x0055555500555555ULL,
465 0x00a1a1a100a1a1a1ULL, 0x0041414100414141ULL, 0x00fafafa00fafafaULL,
466 0x0043434300434343ULL, 0x0013131300131313ULL, 0x00c4c4c400c4c4c4ULL,
467 0x002f2f2f002f2f2fULL, 0x00a8a8a800a8a8a8ULL, 0x00b6b6b600b6b6b6ULL,
468 0x003c3c3c003c3c3cULL, 0x002b2b2b002b2b2bULL, 0x00c1c1c100c1c1c1ULL,
469 0x00ffffff00ffffffULL, 0x00c8c8c800c8c8c8ULL, 0x00a5a5a500a5a5a5ULL,
470 0x0020202000202020ULL, 0x0089898900898989ULL, 0x0000000000000000ULL,
471 0x0090909000909090ULL, 0x0047474700474747ULL, 0x00efefef00efefefULL,
472 0x00eaeaea00eaeaeaULL, 0x00b7b7b700b7b7b7ULL, 0x0015151500151515ULL,
473 0x0006060600060606ULL, 0x00cdcdcd00cdcdcdULL, 0x00b5b5b500b5b5b5ULL,
474 0x0012121200121212ULL, 0x007e7e7e007e7e7eULL, 0x00bbbbbb00bbbbbbULL,
475 0x0029292900292929ULL, 0x000f0f0f000f0f0fULL, 0x00b8b8b800b8b8b8ULL,
476 0x0007070700070707ULL, 0x0004040400040404ULL, 0x009b9b9b009b9b9bULL,
477 0x0094949400949494ULL, 0x0021212100212121ULL, 0x0066666600666666ULL,
478 0x00e6e6e600e6e6e6ULL, 0x00cecece00cececeULL, 0x00ededed00edededULL,
479 0x00e7e7e700e7e7e7ULL, 0x003b3b3b003b3b3bULL, 0x00fefefe00fefefeULL,
480 0x007f7f7f007f7f7fULL, 0x00c5c5c500c5c5c5ULL, 0x00a4a4a400a4a4a4ULL,
481 0x0037373700373737ULL, 0x00b1b1b100b1b1b1ULL, 0x004c4c4c004c4c4cULL,
482 0x0091919100919191ULL, 0x006e6e6e006e6e6eULL, 0x008d8d8d008d8d8dULL,
483 0x0076767600767676ULL, 0x0003030300030303ULL, 0x002d2d2d002d2d2dULL,
484 0x00dedede00dededeULL, 0x0096969600969696ULL, 0x0026262600262626ULL,
485 0x007d7d7d007d7d7dULL, 0x00c6c6c600c6c6c6ULL, 0x005c5c5c005c5c5cULL,
486 0x00d3d3d300d3d3d3ULL, 0x00f2f2f200f2f2f2ULL, 0x004f4f4f004f4f4fULL,
487 0x0019191900191919ULL, 0x003f3f3f003f3f3fULL, 0x00dcdcdc00dcdcdcULL,
488 0x0079797900797979ULL, 0x001d1d1d001d1d1dULL, 0x0052525200525252ULL,
489 0x00ebebeb00ebebebULL, 0x00f3f3f300f3f3f3ULL, 0x006d6d6d006d6d6dULL,
490 0x005e5e5e005e5e5eULL, 0x00fbfbfb00fbfbfbULL, 0x0069696900696969ULL,
491 0x00b2b2b200b2b2b2ULL, 0x00f0f0f000f0f0f0ULL, 0x0031313100313131ULL,
492 0x000c0c0c000c0c0cULL, 0x00d4d4d400d4d4d4ULL, 0x00cfcfcf00cfcfcfULL,
493 0x008c8c8c008c8c8cULL, 0x00e2e2e200e2e2e2ULL, 0x0075757500757575ULL,
494 0x00a9a9a900a9a9a9ULL, 0x004a4a4a004a4a4aULL, 0x0057575700575757ULL,
495 0x0084848400848484ULL, 0x0011111100111111ULL, 0x0045454500454545ULL,
496 0x001b1b1b001b1b1bULL, 0x00f5f5f500f5f5f5ULL, 0x00e4e4e400e4e4e4ULL,
497 0x000e0e0e000e0e0eULL, 0x0073737300737373ULL, 0x00aaaaaa00aaaaaaULL,
498 0x00f1f1f100f1f1f1ULL, 0x00dddddd00ddddddULL, 0x0059595900595959ULL,
499 0x0014141400141414ULL, 0x006c6c6c006c6c6cULL, 0x0092929200929292ULL,
500 0x0054545400545454ULL, 0x00d0d0d000d0d0d0ULL, 0x0078787800787878ULL,
501 0x0070707000707070ULL, 0x00e3e3e300e3e3e3ULL, 0x0049494900494949ULL,
502 0x0080808000808080ULL, 0x0050505000505050ULL, 0x00a7a7a700a7a7a7ULL,
503 0x00f6f6f600f6f6f6ULL, 0x0077777700777777ULL, 0x0093939300939393ULL,
504 0x0086868600868686ULL, 0x0083838300838383ULL, 0x002a2a2a002a2a2aULL,
505 0x00c7c7c700c7c7c7ULL, 0x005b5b5b005b5b5bULL, 0x00e9e9e900e9e9e9ULL,
506 0x00eeeeee00eeeeeeULL, 0x008f8f8f008f8f8fULL, 0x0001010100010101ULL,
507 0x003d3d3d003d3d3dULL,
508 };
509
510 __visible const u64 camellia_sp30333033[256] = {
511 0x3800383838003838ULL, 0x4100414141004141ULL, 0x1600161616001616ULL,
512 0x7600767676007676ULL, 0xd900d9d9d900d9d9ULL, 0x9300939393009393ULL,
513 0x6000606060006060ULL, 0xf200f2f2f200f2f2ULL, 0x7200727272007272ULL,
514 0xc200c2c2c200c2c2ULL, 0xab00ababab00ababULL, 0x9a009a9a9a009a9aULL,
515 0x7500757575007575ULL, 0x0600060606000606ULL, 0x5700575757005757ULL,
516 0xa000a0a0a000a0a0ULL, 0x9100919191009191ULL, 0xf700f7f7f700f7f7ULL,
517 0xb500b5b5b500b5b5ULL, 0xc900c9c9c900c9c9ULL, 0xa200a2a2a200a2a2ULL,
518 0x8c008c8c8c008c8cULL, 0xd200d2d2d200d2d2ULL, 0x9000909090009090ULL,
519 0xf600f6f6f600f6f6ULL, 0x0700070707000707ULL, 0xa700a7a7a700a7a7ULL,
520 0x2700272727002727ULL, 0x8e008e8e8e008e8eULL, 0xb200b2b2b200b2b2ULL,
521 0x4900494949004949ULL, 0xde00dedede00dedeULL, 0x4300434343004343ULL,
522 0x5c005c5c5c005c5cULL, 0xd700d7d7d700d7d7ULL, 0xc700c7c7c700c7c7ULL,
523 0x3e003e3e3e003e3eULL, 0xf500f5f5f500f5f5ULL, 0x8f008f8f8f008f8fULL,
524 0x6700676767006767ULL, 0x1f001f1f1f001f1fULL, 0x1800181818001818ULL,
525 0x6e006e6e6e006e6eULL, 0xaf00afafaf00afafULL, 0x2f002f2f2f002f2fULL,
526 0xe200e2e2e200e2e2ULL, 0x8500858585008585ULL, 0x0d000d0d0d000d0dULL,
527 0x5300535353005353ULL, 0xf000f0f0f000f0f0ULL, 0x9c009c9c9c009c9cULL,
528 0x6500656565006565ULL, 0xea00eaeaea00eaeaULL, 0xa300a3a3a300a3a3ULL,
529 0xae00aeaeae00aeaeULL, 0x9e009e9e9e009e9eULL, 0xec00ececec00ececULL,
530 0x8000808080008080ULL, 0x2d002d2d2d002d2dULL, 0x6b006b6b6b006b6bULL,
531 0xa800a8a8a800a8a8ULL, 0x2b002b2b2b002b2bULL, 0x3600363636003636ULL,
532 0xa600a6a6a600a6a6ULL, 0xc500c5c5c500c5c5ULL, 0x8600868686008686ULL,
533 0x4d004d4d4d004d4dULL, 0x3300333333003333ULL, 0xfd00fdfdfd00fdfdULL,
534 0x6600666666006666ULL, 0x5800585858005858ULL, 0x9600969696009696ULL,
535 0x3a003a3a3a003a3aULL, 0x0900090909000909ULL, 0x9500959595009595ULL,
536 0x1000101010001010ULL, 0x7800787878007878ULL, 0xd800d8d8d800d8d8ULL,
537 0x4200424242004242ULL, 0xcc00cccccc00ccccULL, 0xef00efefef00efefULL,
538 0x2600262626002626ULL, 0xe500e5e5e500e5e5ULL, 0x6100616161006161ULL,
539 0x1a001a1a1a001a1aULL, 0x3f003f3f3f003f3fULL, 0x3b003b3b3b003b3bULL,
540 0x8200828282008282ULL, 0xb600b6b6b600b6b6ULL, 0xdb00dbdbdb00dbdbULL,
541 0xd400d4d4d400d4d4ULL, 0x9800989898009898ULL, 0xe800e8e8e800e8e8ULL,
542 0x8b008b8b8b008b8bULL, 0x0200020202000202ULL, 0xeb00ebebeb00ebebULL,
543 0x0a000a0a0a000a0aULL, 0x2c002c2c2c002c2cULL, 0x1d001d1d1d001d1dULL,
544 0xb000b0b0b000b0b0ULL, 0x6f006f6f6f006f6fULL, 0x8d008d8d8d008d8dULL,
545 0x8800888888008888ULL, 0x0e000e0e0e000e0eULL, 0x1900191919001919ULL,
546 0x8700878787008787ULL, 0x4e004e4e4e004e4eULL, 0x0b000b0b0b000b0bULL,
547 0xa900a9a9a900a9a9ULL, 0x0c000c0c0c000c0cULL, 0x7900797979007979ULL,
548 0x1100111111001111ULL, 0x7f007f7f7f007f7fULL, 0x2200222222002222ULL,
549 0xe700e7e7e700e7e7ULL, 0x5900595959005959ULL, 0xe100e1e1e100e1e1ULL,
550 0xda00dadada00dadaULL, 0x3d003d3d3d003d3dULL, 0xc800c8c8c800c8c8ULL,
551 0x1200121212001212ULL, 0x0400040404000404ULL, 0x7400747474007474ULL,
552 0x5400545454005454ULL, 0x3000303030003030ULL, 0x7e007e7e7e007e7eULL,
553 0xb400b4b4b400b4b4ULL, 0x2800282828002828ULL, 0x5500555555005555ULL,
554 0x6800686868006868ULL, 0x5000505050005050ULL, 0xbe00bebebe00bebeULL,
555 0xd000d0d0d000d0d0ULL, 0xc400c4c4c400c4c4ULL, 0x3100313131003131ULL,
556 0xcb00cbcbcb00cbcbULL, 0x2a002a2a2a002a2aULL, 0xad00adadad00adadULL,
557 0x0f000f0f0f000f0fULL, 0xca00cacaca00cacaULL, 0x7000707070007070ULL,
558 0xff00ffffff00ffffULL, 0x3200323232003232ULL, 0x6900696969006969ULL,
559 0x0800080808000808ULL, 0x6200626262006262ULL, 0x0000000000000000ULL,
560 0x2400242424002424ULL, 0xd100d1d1d100d1d1ULL, 0xfb00fbfbfb00fbfbULL,
561 0xba00bababa00babaULL, 0xed00ededed00ededULL, 0x4500454545004545ULL,
562 0x8100818181008181ULL, 0x7300737373007373ULL, 0x6d006d6d6d006d6dULL,
563 0x8400848484008484ULL, 0x9f009f9f9f009f9fULL, 0xee00eeeeee00eeeeULL,
564 0x4a004a4a4a004a4aULL, 0xc300c3c3c300c3c3ULL, 0x2e002e2e2e002e2eULL,
565 0xc100c1c1c100c1c1ULL, 0x0100010101000101ULL, 0xe600e6e6e600e6e6ULL,
566 0x2500252525002525ULL, 0x4800484848004848ULL, 0x9900999999009999ULL,
567 0xb900b9b9b900b9b9ULL, 0xb300b3b3b300b3b3ULL, 0x7b007b7b7b007b7bULL,
568 0xf900f9f9f900f9f9ULL, 0xce00cecece00ceceULL, 0xbf00bfbfbf00bfbfULL,
569 0xdf00dfdfdf00dfdfULL, 0x7100717171007171ULL, 0x2900292929002929ULL,
570 0xcd00cdcdcd00cdcdULL, 0x6c006c6c6c006c6cULL, 0x1300131313001313ULL,
571 0x6400646464006464ULL, 0x9b009b9b9b009b9bULL, 0x6300636363006363ULL,
572 0x9d009d9d9d009d9dULL, 0xc000c0c0c000c0c0ULL, 0x4b004b4b4b004b4bULL,
573 0xb700b7b7b700b7b7ULL, 0xa500a5a5a500a5a5ULL, 0x8900898989008989ULL,
574 0x5f005f5f5f005f5fULL, 0xb100b1b1b100b1b1ULL, 0x1700171717001717ULL,
575 0xf400f4f4f400f4f4ULL, 0xbc00bcbcbc00bcbcULL, 0xd300d3d3d300d3d3ULL,
576 0x4600464646004646ULL, 0xcf00cfcfcf00cfcfULL, 0x3700373737003737ULL,
577 0x5e005e5e5e005e5eULL, 0x4700474747004747ULL, 0x9400949494009494ULL,
578 0xfa00fafafa00fafaULL, 0xfc00fcfcfc00fcfcULL, 0x5b005b5b5b005b5bULL,
579 0x9700979797009797ULL, 0xfe00fefefe00fefeULL, 0x5a005a5a5a005a5aULL,
580 0xac00acacac00acacULL, 0x3c003c3c3c003c3cULL, 0x4c004c4c4c004c4cULL,
581 0x0300030303000303ULL, 0x3500353535003535ULL, 0xf300f3f3f300f3f3ULL,
582 0x2300232323002323ULL, 0xb800b8b8b800b8b8ULL, 0x5d005d5d5d005d5dULL,
583 0x6a006a6a6a006a6aULL, 0x9200929292009292ULL, 0xd500d5d5d500d5d5ULL,
584 0x2100212121002121ULL, 0x4400444444004444ULL, 0x5100515151005151ULL,
585 0xc600c6c6c600c6c6ULL, 0x7d007d7d7d007d7dULL, 0x3900393939003939ULL,
586 0x8300838383008383ULL, 0xdc00dcdcdc00dcdcULL, 0xaa00aaaaaa00aaaaULL,
587 0x7c007c7c7c007c7cULL, 0x7700777777007777ULL, 0x5600565656005656ULL,
588 0x0500050505000505ULL, 0x1b001b1b1b001b1bULL, 0xa400a4a4a400a4a4ULL,
589 0x1500151515001515ULL, 0x3400343434003434ULL, 0x1e001e1e1e001e1eULL,
590 0x1c001c1c1c001c1cULL, 0xf800f8f8f800f8f8ULL, 0x5200525252005252ULL,
591 0x2000202020002020ULL, 0x1400141414001414ULL, 0xe900e9e9e900e9e9ULL,
592 0xbd00bdbdbd00bdbdULL, 0xdd00dddddd00ddddULL, 0xe400e4e4e400e4e4ULL,
593 0xa100a1a1a100a1a1ULL, 0xe000e0e0e000e0e0ULL, 0x8a008a8a8a008a8aULL,
594 0xf100f1f1f100f1f1ULL, 0xd600d6d6d600d6d6ULL, 0x7a007a7a7a007a7aULL,
595 0xbb00bbbbbb00bbbbULL, 0xe300e3e3e300e3e3ULL, 0x4000404040004040ULL,
596 0x4f004f4f4f004f4fULL,
597 };
598
599 __visible const u64 camellia_sp44044404[256] = {
600 0x7070007070700070ULL, 0x2c2c002c2c2c002cULL, 0xb3b300b3b3b300b3ULL,
601 0xc0c000c0c0c000c0ULL, 0xe4e400e4e4e400e4ULL, 0x5757005757570057ULL,
602 0xeaea00eaeaea00eaULL, 0xaeae00aeaeae00aeULL, 0x2323002323230023ULL,
603 0x6b6b006b6b6b006bULL, 0x4545004545450045ULL, 0xa5a500a5a5a500a5ULL,
604 0xeded00ededed00edULL, 0x4f4f004f4f4f004fULL, 0x1d1d001d1d1d001dULL,
605 0x9292009292920092ULL, 0x8686008686860086ULL, 0xafaf00afafaf00afULL,
606 0x7c7c007c7c7c007cULL, 0x1f1f001f1f1f001fULL, 0x3e3e003e3e3e003eULL,
607 0xdcdc00dcdcdc00dcULL, 0x5e5e005e5e5e005eULL, 0x0b0b000b0b0b000bULL,
608 0xa6a600a6a6a600a6ULL, 0x3939003939390039ULL, 0xd5d500d5d5d500d5ULL,
609 0x5d5d005d5d5d005dULL, 0xd9d900d9d9d900d9ULL, 0x5a5a005a5a5a005aULL,
610 0x5151005151510051ULL, 0x6c6c006c6c6c006cULL, 0x8b8b008b8b8b008bULL,
611 0x9a9a009a9a9a009aULL, 0xfbfb00fbfbfb00fbULL, 0xb0b000b0b0b000b0ULL,
612 0x7474007474740074ULL, 0x2b2b002b2b2b002bULL, 0xf0f000f0f0f000f0ULL,
613 0x8484008484840084ULL, 0xdfdf00dfdfdf00dfULL, 0xcbcb00cbcbcb00cbULL,
614 0x3434003434340034ULL, 0x7676007676760076ULL, 0x6d6d006d6d6d006dULL,
615 0xa9a900a9a9a900a9ULL, 0xd1d100d1d1d100d1ULL, 0x0404000404040004ULL,
616 0x1414001414140014ULL, 0x3a3a003a3a3a003aULL, 0xdede00dedede00deULL,
617 0x1111001111110011ULL, 0x3232003232320032ULL, 0x9c9c009c9c9c009cULL,
618 0x5353005353530053ULL, 0xf2f200f2f2f200f2ULL, 0xfefe00fefefe00feULL,
619 0xcfcf00cfcfcf00cfULL, 0xc3c300c3c3c300c3ULL, 0x7a7a007a7a7a007aULL,
620 0x2424002424240024ULL, 0xe8e800e8e8e800e8ULL, 0x6060006060600060ULL,
621 0x6969006969690069ULL, 0xaaaa00aaaaaa00aaULL, 0xa0a000a0a0a000a0ULL,
622 0xa1a100a1a1a100a1ULL, 0x6262006262620062ULL, 0x5454005454540054ULL,
623 0x1e1e001e1e1e001eULL, 0xe0e000e0e0e000e0ULL, 0x6464006464640064ULL,
624 0x1010001010100010ULL, 0x0000000000000000ULL, 0xa3a300a3a3a300a3ULL,
625 0x7575007575750075ULL, 0x8a8a008a8a8a008aULL, 0xe6e600e6e6e600e6ULL,
626 0x0909000909090009ULL, 0xdddd00dddddd00ddULL, 0x8787008787870087ULL,
627 0x8383008383830083ULL, 0xcdcd00cdcdcd00cdULL, 0x9090009090900090ULL,
628 0x7373007373730073ULL, 0xf6f600f6f6f600f6ULL, 0x9d9d009d9d9d009dULL,
629 0xbfbf00bfbfbf00bfULL, 0x5252005252520052ULL, 0xd8d800d8d8d800d8ULL,
630 0xc8c800c8c8c800c8ULL, 0xc6c600c6c6c600c6ULL, 0x8181008181810081ULL,
631 0x6f6f006f6f6f006fULL, 0x1313001313130013ULL, 0x6363006363630063ULL,
632 0xe9e900e9e9e900e9ULL, 0xa7a700a7a7a700a7ULL, 0x9f9f009f9f9f009fULL,
633 0xbcbc00bcbcbc00bcULL, 0x2929002929290029ULL, 0xf9f900f9f9f900f9ULL,
634 0x2f2f002f2f2f002fULL, 0xb4b400b4b4b400b4ULL, 0x7878007878780078ULL,
635 0x0606000606060006ULL, 0xe7e700e7e7e700e7ULL, 0x7171007171710071ULL,
636 0xd4d400d4d4d400d4ULL, 0xabab00ababab00abULL, 0x8888008888880088ULL,
637 0x8d8d008d8d8d008dULL, 0x7272007272720072ULL, 0xb9b900b9b9b900b9ULL,
638 0xf8f800f8f8f800f8ULL, 0xacac00acacac00acULL, 0x3636003636360036ULL,
639 0x2a2a002a2a2a002aULL, 0x3c3c003c3c3c003cULL, 0xf1f100f1f1f100f1ULL,
640 0x4040004040400040ULL, 0xd3d300d3d3d300d3ULL, 0xbbbb00bbbbbb00bbULL,
641 0x4343004343430043ULL, 0x1515001515150015ULL, 0xadad00adadad00adULL,
642 0x7777007777770077ULL, 0x8080008080800080ULL, 0x8282008282820082ULL,
643 0xecec00ececec00ecULL, 0x2727002727270027ULL, 0xe5e500e5e5e500e5ULL,
644 0x8585008585850085ULL, 0x3535003535350035ULL, 0x0c0c000c0c0c000cULL,
645 0x4141004141410041ULL, 0xefef00efefef00efULL, 0x9393009393930093ULL,
646 0x1919001919190019ULL, 0x2121002121210021ULL, 0x0e0e000e0e0e000eULL,
647 0x4e4e004e4e4e004eULL, 0x6565006565650065ULL, 0xbdbd00bdbdbd00bdULL,
648 0xb8b800b8b8b800b8ULL, 0x8f8f008f8f8f008fULL, 0xebeb00ebebeb00ebULL,
649 0xcece00cecece00ceULL, 0x3030003030300030ULL, 0x5f5f005f5f5f005fULL,
650 0xc5c500c5c5c500c5ULL, 0x1a1a001a1a1a001aULL, 0xe1e100e1e1e100e1ULL,
651 0xcaca00cacaca00caULL, 0x4747004747470047ULL, 0x3d3d003d3d3d003dULL,
652 0x0101000101010001ULL, 0xd6d600d6d6d600d6ULL, 0x5656005656560056ULL,
653 0x4d4d004d4d4d004dULL, 0x0d0d000d0d0d000dULL, 0x6666006666660066ULL,
654 0xcccc00cccccc00ccULL, 0x2d2d002d2d2d002dULL, 0x1212001212120012ULL,
655 0x2020002020200020ULL, 0xb1b100b1b1b100b1ULL, 0x9999009999990099ULL,
656 0x4c4c004c4c4c004cULL, 0xc2c200c2c2c200c2ULL, 0x7e7e007e7e7e007eULL,
657 0x0505000505050005ULL, 0xb7b700b7b7b700b7ULL, 0x3131003131310031ULL,
658 0x1717001717170017ULL, 0xd7d700d7d7d700d7ULL, 0x5858005858580058ULL,
659 0x6161006161610061ULL, 0x1b1b001b1b1b001bULL, 0x1c1c001c1c1c001cULL,
660 0x0f0f000f0f0f000fULL, 0x1616001616160016ULL, 0x1818001818180018ULL,
661 0x2222002222220022ULL, 0x4444004444440044ULL, 0xb2b200b2b2b200b2ULL,
662 0xb5b500b5b5b500b5ULL, 0x9191009191910091ULL, 0x0808000808080008ULL,
663 0xa8a800a8a8a800a8ULL, 0xfcfc00fcfcfc00fcULL, 0x5050005050500050ULL,
664 0xd0d000d0d0d000d0ULL, 0x7d7d007d7d7d007dULL, 0x8989008989890089ULL,
665 0x9797009797970097ULL, 0x5b5b005b5b5b005bULL, 0x9595009595950095ULL,
666 0xffff00ffffff00ffULL, 0xd2d200d2d2d200d2ULL, 0xc4c400c4c4c400c4ULL,
667 0x4848004848480048ULL, 0xf7f700f7f7f700f7ULL, 0xdbdb00dbdbdb00dbULL,
668 0x0303000303030003ULL, 0xdada00dadada00daULL, 0x3f3f003f3f3f003fULL,
669 0x9494009494940094ULL, 0x5c5c005c5c5c005cULL, 0x0202000202020002ULL,
670 0x4a4a004a4a4a004aULL, 0x3333003333330033ULL, 0x6767006767670067ULL,
671 0xf3f300f3f3f300f3ULL, 0x7f7f007f7f7f007fULL, 0xe2e200e2e2e200e2ULL,
672 0x9b9b009b9b9b009bULL, 0x2626002626260026ULL, 0x3737003737370037ULL,
673 0x3b3b003b3b3b003bULL, 0x9696009696960096ULL, 0x4b4b004b4b4b004bULL,
674 0xbebe00bebebe00beULL, 0x2e2e002e2e2e002eULL, 0x7979007979790079ULL,
675 0x8c8c008c8c8c008cULL, 0x6e6e006e6e6e006eULL, 0x8e8e008e8e8e008eULL,
676 0xf5f500f5f5f500f5ULL, 0xb6b600b6b6b600b6ULL, 0xfdfd00fdfdfd00fdULL,
677 0x5959005959590059ULL, 0x9898009898980098ULL, 0x6a6a006a6a6a006aULL,
678 0x4646004646460046ULL, 0xbaba00bababa00baULL, 0x2525002525250025ULL,
679 0x4242004242420042ULL, 0xa2a200a2a2a200a2ULL, 0xfafa00fafafa00faULL,
680 0x0707000707070007ULL, 0x5555005555550055ULL, 0xeeee00eeeeee00eeULL,
681 0x0a0a000a0a0a000aULL, 0x4949004949490049ULL, 0x6868006868680068ULL,
682 0x3838003838380038ULL, 0xa4a400a4a4a400a4ULL, 0x2828002828280028ULL,
683 0x7b7b007b7b7b007bULL, 0xc9c900c9c9c900c9ULL, 0xc1c100c1c1c100c1ULL,
684 0xe3e300e3e3e300e3ULL, 0xf4f400f4f4f400f4ULL, 0xc7c700c7c7c700c7ULL,
685 0x9e9e009e9e9e009eULL,
686 };
687
688 __visible const u64 camellia_sp11101110[256] = {
689 0x7070700070707000ULL, 0x8282820082828200ULL, 0x2c2c2c002c2c2c00ULL,
690 0xececec00ececec00ULL, 0xb3b3b300b3b3b300ULL, 0x2727270027272700ULL,
691 0xc0c0c000c0c0c000ULL, 0xe5e5e500e5e5e500ULL, 0xe4e4e400e4e4e400ULL,
692 0x8585850085858500ULL, 0x5757570057575700ULL, 0x3535350035353500ULL,
693 0xeaeaea00eaeaea00ULL, 0x0c0c0c000c0c0c00ULL, 0xaeaeae00aeaeae00ULL,
694 0x4141410041414100ULL, 0x2323230023232300ULL, 0xefefef00efefef00ULL,
695 0x6b6b6b006b6b6b00ULL, 0x9393930093939300ULL, 0x4545450045454500ULL,
696 0x1919190019191900ULL, 0xa5a5a500a5a5a500ULL, 0x2121210021212100ULL,
697 0xededed00ededed00ULL, 0x0e0e0e000e0e0e00ULL, 0x4f4f4f004f4f4f00ULL,
698 0x4e4e4e004e4e4e00ULL, 0x1d1d1d001d1d1d00ULL, 0x6565650065656500ULL,
699 0x9292920092929200ULL, 0xbdbdbd00bdbdbd00ULL, 0x8686860086868600ULL,
700 0xb8b8b800b8b8b800ULL, 0xafafaf00afafaf00ULL, 0x8f8f8f008f8f8f00ULL,
701 0x7c7c7c007c7c7c00ULL, 0xebebeb00ebebeb00ULL, 0x1f1f1f001f1f1f00ULL,
702 0xcecece00cecece00ULL, 0x3e3e3e003e3e3e00ULL, 0x3030300030303000ULL,
703 0xdcdcdc00dcdcdc00ULL, 0x5f5f5f005f5f5f00ULL, 0x5e5e5e005e5e5e00ULL,
704 0xc5c5c500c5c5c500ULL, 0x0b0b0b000b0b0b00ULL, 0x1a1a1a001a1a1a00ULL,
705 0xa6a6a600a6a6a600ULL, 0xe1e1e100e1e1e100ULL, 0x3939390039393900ULL,
706 0xcacaca00cacaca00ULL, 0xd5d5d500d5d5d500ULL, 0x4747470047474700ULL,
707 0x5d5d5d005d5d5d00ULL, 0x3d3d3d003d3d3d00ULL, 0xd9d9d900d9d9d900ULL,
708 0x0101010001010100ULL, 0x5a5a5a005a5a5a00ULL, 0xd6d6d600d6d6d600ULL,
709 0x5151510051515100ULL, 0x5656560056565600ULL, 0x6c6c6c006c6c6c00ULL,
710 0x4d4d4d004d4d4d00ULL, 0x8b8b8b008b8b8b00ULL, 0x0d0d0d000d0d0d00ULL,
711 0x9a9a9a009a9a9a00ULL, 0x6666660066666600ULL, 0xfbfbfb00fbfbfb00ULL,
712 0xcccccc00cccccc00ULL, 0xb0b0b000b0b0b000ULL, 0x2d2d2d002d2d2d00ULL,
713 0x7474740074747400ULL, 0x1212120012121200ULL, 0x2b2b2b002b2b2b00ULL,
714 0x2020200020202000ULL, 0xf0f0f000f0f0f000ULL, 0xb1b1b100b1b1b100ULL,
715 0x8484840084848400ULL, 0x9999990099999900ULL, 0xdfdfdf00dfdfdf00ULL,
716 0x4c4c4c004c4c4c00ULL, 0xcbcbcb00cbcbcb00ULL, 0xc2c2c200c2c2c200ULL,
717 0x3434340034343400ULL, 0x7e7e7e007e7e7e00ULL, 0x7676760076767600ULL,
718 0x0505050005050500ULL, 0x6d6d6d006d6d6d00ULL, 0xb7b7b700b7b7b700ULL,
719 0xa9a9a900a9a9a900ULL, 0x3131310031313100ULL, 0xd1d1d100d1d1d100ULL,
720 0x1717170017171700ULL, 0x0404040004040400ULL, 0xd7d7d700d7d7d700ULL,
721 0x1414140014141400ULL, 0x5858580058585800ULL, 0x3a3a3a003a3a3a00ULL,
722 0x6161610061616100ULL, 0xdedede00dedede00ULL, 0x1b1b1b001b1b1b00ULL,
723 0x1111110011111100ULL, 0x1c1c1c001c1c1c00ULL, 0x3232320032323200ULL,
724 0x0f0f0f000f0f0f00ULL, 0x9c9c9c009c9c9c00ULL, 0x1616160016161600ULL,
725 0x5353530053535300ULL, 0x1818180018181800ULL, 0xf2f2f200f2f2f200ULL,
726 0x2222220022222200ULL, 0xfefefe00fefefe00ULL, 0x4444440044444400ULL,
727 0xcfcfcf00cfcfcf00ULL, 0xb2b2b200b2b2b200ULL, 0xc3c3c300c3c3c300ULL,
728 0xb5b5b500b5b5b500ULL, 0x7a7a7a007a7a7a00ULL, 0x9191910091919100ULL,
729 0x2424240024242400ULL, 0x0808080008080800ULL, 0xe8e8e800e8e8e800ULL,
730 0xa8a8a800a8a8a800ULL, 0x6060600060606000ULL, 0xfcfcfc00fcfcfc00ULL,
731 0x6969690069696900ULL, 0x5050500050505000ULL, 0xaaaaaa00aaaaaa00ULL,
732 0xd0d0d000d0d0d000ULL, 0xa0a0a000a0a0a000ULL, 0x7d7d7d007d7d7d00ULL,
733 0xa1a1a100a1a1a100ULL, 0x8989890089898900ULL, 0x6262620062626200ULL,
734 0x9797970097979700ULL, 0x5454540054545400ULL, 0x5b5b5b005b5b5b00ULL,
735 0x1e1e1e001e1e1e00ULL, 0x9595950095959500ULL, 0xe0e0e000e0e0e000ULL,
736 0xffffff00ffffff00ULL, 0x6464640064646400ULL, 0xd2d2d200d2d2d200ULL,
737 0x1010100010101000ULL, 0xc4c4c400c4c4c400ULL, 0x0000000000000000ULL,
738 0x4848480048484800ULL, 0xa3a3a300a3a3a300ULL, 0xf7f7f700f7f7f700ULL,
739 0x7575750075757500ULL, 0xdbdbdb00dbdbdb00ULL, 0x8a8a8a008a8a8a00ULL,
740 0x0303030003030300ULL, 0xe6e6e600e6e6e600ULL, 0xdadada00dadada00ULL,
741 0x0909090009090900ULL, 0x3f3f3f003f3f3f00ULL, 0xdddddd00dddddd00ULL,
742 0x9494940094949400ULL, 0x8787870087878700ULL, 0x5c5c5c005c5c5c00ULL,
743 0x8383830083838300ULL, 0x0202020002020200ULL, 0xcdcdcd00cdcdcd00ULL,
744 0x4a4a4a004a4a4a00ULL, 0x9090900090909000ULL, 0x3333330033333300ULL,
745 0x7373730073737300ULL, 0x6767670067676700ULL, 0xf6f6f600f6f6f600ULL,
746 0xf3f3f300f3f3f300ULL, 0x9d9d9d009d9d9d00ULL, 0x7f7f7f007f7f7f00ULL,
747 0xbfbfbf00bfbfbf00ULL, 0xe2e2e200e2e2e200ULL, 0x5252520052525200ULL,
748 0x9b9b9b009b9b9b00ULL, 0xd8d8d800d8d8d800ULL, 0x2626260026262600ULL,
749 0xc8c8c800c8c8c800ULL, 0x3737370037373700ULL, 0xc6c6c600c6c6c600ULL,
750 0x3b3b3b003b3b3b00ULL, 0x8181810081818100ULL, 0x9696960096969600ULL,
751 0x6f6f6f006f6f6f00ULL, 0x4b4b4b004b4b4b00ULL, 0x1313130013131300ULL,
752 0xbebebe00bebebe00ULL, 0x6363630063636300ULL, 0x2e2e2e002e2e2e00ULL,
753 0xe9e9e900e9e9e900ULL, 0x7979790079797900ULL, 0xa7a7a700a7a7a700ULL,
754 0x8c8c8c008c8c8c00ULL, 0x9f9f9f009f9f9f00ULL, 0x6e6e6e006e6e6e00ULL,
755 0xbcbcbc00bcbcbc00ULL, 0x8e8e8e008e8e8e00ULL, 0x2929290029292900ULL,
756 0xf5f5f500f5f5f500ULL, 0xf9f9f900f9f9f900ULL, 0xb6b6b600b6b6b600ULL,
757 0x2f2f2f002f2f2f00ULL, 0xfdfdfd00fdfdfd00ULL, 0xb4b4b400b4b4b400ULL,
758 0x5959590059595900ULL, 0x7878780078787800ULL, 0x9898980098989800ULL,
759 0x0606060006060600ULL, 0x6a6a6a006a6a6a00ULL, 0xe7e7e700e7e7e700ULL,
760 0x4646460046464600ULL, 0x7171710071717100ULL, 0xbababa00bababa00ULL,
761 0xd4d4d400d4d4d400ULL, 0x2525250025252500ULL, 0xababab00ababab00ULL,
762 0x4242420042424200ULL, 0x8888880088888800ULL, 0xa2a2a200a2a2a200ULL,
763 0x8d8d8d008d8d8d00ULL, 0xfafafa00fafafa00ULL, 0x7272720072727200ULL,
764 0x0707070007070700ULL, 0xb9b9b900b9b9b900ULL, 0x5555550055555500ULL,
765 0xf8f8f800f8f8f800ULL, 0xeeeeee00eeeeee00ULL, 0xacacac00acacac00ULL,
766 0x0a0a0a000a0a0a00ULL, 0x3636360036363600ULL, 0x4949490049494900ULL,
767 0x2a2a2a002a2a2a00ULL, 0x6868680068686800ULL, 0x3c3c3c003c3c3c00ULL,
768 0x3838380038383800ULL, 0xf1f1f100f1f1f100ULL, 0xa4a4a400a4a4a400ULL,
769 0x4040400040404000ULL, 0x2828280028282800ULL, 0xd3d3d300d3d3d300ULL,
770 0x7b7b7b007b7b7b00ULL, 0xbbbbbb00bbbbbb00ULL, 0xc9c9c900c9c9c900ULL,
771 0x4343430043434300ULL, 0xc1c1c100c1c1c100ULL, 0x1515150015151500ULL,
772 0xe3e3e300e3e3e300ULL, 0xadadad00adadad00ULL, 0xf4f4f400f4f4f400ULL,
773 0x7777770077777700ULL, 0xc7c7c700c7c7c700ULL, 0x8080800080808000ULL,
774 0x9e9e9e009e9e9e00ULL,
775 };
776
777 /* key constants */
778 #define CAMELLIA_SIGMA1L (0xA09E667FL)
779 #define CAMELLIA_SIGMA1R (0x3BCC908BL)
780 #define CAMELLIA_SIGMA2L (0xB67AE858L)
781 #define CAMELLIA_SIGMA2R (0x4CAA73B2L)
782 #define CAMELLIA_SIGMA3L (0xC6EF372FL)
783 #define CAMELLIA_SIGMA3R (0xE94F82BEL)
784 #define CAMELLIA_SIGMA4L (0x54FF53A5L)
785 #define CAMELLIA_SIGMA4R (0xF1D36F1CL)
786 #define CAMELLIA_SIGMA5L (0x10E527FAL)
787 #define CAMELLIA_SIGMA5R (0xDE682D1DL)
788 #define CAMELLIA_SIGMA6L (0xB05688C2L)
789 #define CAMELLIA_SIGMA6R (0xB3E6C1FDL)
790
791 /* macros */
792 #define ROLDQ(l, r, bits) ({ \
793 u64 t = l; \
794 l = (l << bits) | (r >> (64 - bits)); \
795 r = (r << bits) | (t >> (64 - bits)); \
796 })
797
798 #define CAMELLIA_F(x, kl, kr, y) ({ \
799 u64 ii = x ^ (((u64)kl << 32) | kr); \
800 y = camellia_sp11101110[(uint8_t)ii]; \
801 y ^= camellia_sp44044404[(uint8_t)(ii >> 8)]; \
802 ii >>= 16; \
803 y ^= camellia_sp30333033[(uint8_t)ii]; \
804 y ^= camellia_sp02220222[(uint8_t)(ii >> 8)]; \
805 ii >>= 16; \
806 y ^= camellia_sp00444404[(uint8_t)ii]; \
807 y ^= camellia_sp03303033[(uint8_t)(ii >> 8)]; \
808 ii >>= 16; \
809 y ^= camellia_sp22000222[(uint8_t)ii]; \
810 y ^= camellia_sp10011110[(uint8_t)(ii >> 8)]; \
811 y = ror64(y, 32); \
812 })
813
814 #define SET_SUBKEY_LR(INDEX, sRL) (subkey[(INDEX)] = ror64((sRL), 32))
815
camellia_setup_tail(u64 * subkey,u64 * subRL,int max)816 static void camellia_setup_tail(u64 *subkey, u64 *subRL, int max)
817 {
818 u64 kw4, tt;
819 u32 dw, tl, tr;
820
821 /* absorb kw2 to other subkeys */
822 /* round 2 */
823 subRL[3] ^= subRL[1];
824 /* round 4 */
825 subRL[5] ^= subRL[1];
826 /* round 6 */
827 subRL[7] ^= subRL[1];
828
829 subRL[1] ^= (subRL[1] & ~subRL[9]) << 32;
830 /* modified for FLinv(kl2) */
831 dw = (subRL[1] & subRL[9]) >> 32;
832 subRL[1] ^= rol32(dw, 1);
833
834 /* round 8 */
835 subRL[11] ^= subRL[1];
836 /* round 10 */
837 subRL[13] ^= subRL[1];
838 /* round 12 */
839 subRL[15] ^= subRL[1];
840
841 subRL[1] ^= (subRL[1] & ~subRL[17]) << 32;
842 /* modified for FLinv(kl4) */
843 dw = (subRL[1] & subRL[17]) >> 32;
844 subRL[1] ^= rol32(dw, 1);
845
846 /* round 14 */
847 subRL[19] ^= subRL[1];
848 /* round 16 */
849 subRL[21] ^= subRL[1];
850 /* round 18 */
851 subRL[23] ^= subRL[1];
852
853 if (max == 24) {
854 /* kw3 */
855 subRL[24] ^= subRL[1];
856
857 /* absorb kw4 to other subkeys */
858 kw4 = subRL[25];
859 } else {
860 subRL[1] ^= (subRL[1] & ~subRL[25]) << 32;
861 /* modified for FLinv(kl6) */
862 dw = (subRL[1] & subRL[25]) >> 32;
863 subRL[1] ^= rol32(dw, 1);
864
865 /* round 20 */
866 subRL[27] ^= subRL[1];
867 /* round 22 */
868 subRL[29] ^= subRL[1];
869 /* round 24 */
870 subRL[31] ^= subRL[1];
871 /* kw3 */
872 subRL[32] ^= subRL[1];
873
874 /* absorb kw4 to other subkeys */
875 kw4 = subRL[33];
876 /* round 23 */
877 subRL[30] ^= kw4;
878 /* round 21 */
879 subRL[28] ^= kw4;
880 /* round 19 */
881 subRL[26] ^= kw4;
882
883 kw4 ^= (kw4 & ~subRL[24]) << 32;
884 /* modified for FL(kl5) */
885 dw = (kw4 & subRL[24]) >> 32;
886 kw4 ^= rol32(dw, 1);
887 }
888
889 /* round 17 */
890 subRL[22] ^= kw4;
891 /* round 15 */
892 subRL[20] ^= kw4;
893 /* round 13 */
894 subRL[18] ^= kw4;
895
896 kw4 ^= (kw4 & ~subRL[16]) << 32;
897 /* modified for FL(kl3) */
898 dw = (kw4 & subRL[16]) >> 32;
899 kw4 ^= rol32(dw, 1);
900
901 /* round 11 */
902 subRL[14] ^= kw4;
903 /* round 9 */
904 subRL[12] ^= kw4;
905 /* round 7 */
906 subRL[10] ^= kw4;
907
908 kw4 ^= (kw4 & ~subRL[8]) << 32;
909 /* modified for FL(kl1) */
910 dw = (kw4 & subRL[8]) >> 32;
911 kw4 ^= rol32(dw, 1);
912
913 /* round 5 */
914 subRL[6] ^= kw4;
915 /* round 3 */
916 subRL[4] ^= kw4;
917 /* round 1 */
918 subRL[2] ^= kw4;
919 /* kw1 */
920 subRL[0] ^= kw4;
921
922 /* key XOR is end of F-function */
923 SET_SUBKEY_LR(0, subRL[0] ^ subRL[2]); /* kw1 */
924 SET_SUBKEY_LR(2, subRL[3]); /* round 1 */
925 SET_SUBKEY_LR(3, subRL[2] ^ subRL[4]); /* round 2 */
926 SET_SUBKEY_LR(4, subRL[3] ^ subRL[5]); /* round 3 */
927 SET_SUBKEY_LR(5, subRL[4] ^ subRL[6]); /* round 4 */
928 SET_SUBKEY_LR(6, subRL[5] ^ subRL[7]); /* round 5 */
929
930 tl = (subRL[10] >> 32) ^ (subRL[10] & ~subRL[8]);
931 dw = tl & (subRL[8] >> 32); /* FL(kl1) */
932 tr = subRL[10] ^ rol32(dw, 1);
933 tt = (tr | ((u64)tl << 32));
934
935 SET_SUBKEY_LR(7, subRL[6] ^ tt); /* round 6 */
936 SET_SUBKEY_LR(8, subRL[8]); /* FL(kl1) */
937 SET_SUBKEY_LR(9, subRL[9]); /* FLinv(kl2) */
938
939 tl = (subRL[7] >> 32) ^ (subRL[7] & ~subRL[9]);
940 dw = tl & (subRL[9] >> 32); /* FLinv(kl2) */
941 tr = subRL[7] ^ rol32(dw, 1);
942 tt = (tr | ((u64)tl << 32));
943
944 SET_SUBKEY_LR(10, subRL[11] ^ tt); /* round 7 */
945 SET_SUBKEY_LR(11, subRL[10] ^ subRL[12]); /* round 8 */
946 SET_SUBKEY_LR(12, subRL[11] ^ subRL[13]); /* round 9 */
947 SET_SUBKEY_LR(13, subRL[12] ^ subRL[14]); /* round 10 */
948 SET_SUBKEY_LR(14, subRL[13] ^ subRL[15]); /* round 11 */
949
950 tl = (subRL[18] >> 32) ^ (subRL[18] & ~subRL[16]);
951 dw = tl & (subRL[16] >> 32); /* FL(kl3) */
952 tr = subRL[18] ^ rol32(dw, 1);
953 tt = (tr | ((u64)tl << 32));
954
955 SET_SUBKEY_LR(15, subRL[14] ^ tt); /* round 12 */
956 SET_SUBKEY_LR(16, subRL[16]); /* FL(kl3) */
957 SET_SUBKEY_LR(17, subRL[17]); /* FLinv(kl4) */
958
959 tl = (subRL[15] >> 32) ^ (subRL[15] & ~subRL[17]);
960 dw = tl & (subRL[17] >> 32); /* FLinv(kl4) */
961 tr = subRL[15] ^ rol32(dw, 1);
962 tt = (tr | ((u64)tl << 32));
963
964 SET_SUBKEY_LR(18, subRL[19] ^ tt); /* round 13 */
965 SET_SUBKEY_LR(19, subRL[18] ^ subRL[20]); /* round 14 */
966 SET_SUBKEY_LR(20, subRL[19] ^ subRL[21]); /* round 15 */
967 SET_SUBKEY_LR(21, subRL[20] ^ subRL[22]); /* round 16 */
968 SET_SUBKEY_LR(22, subRL[21] ^ subRL[23]); /* round 17 */
969
970 if (max == 24) {
971 SET_SUBKEY_LR(23, subRL[22]); /* round 18 */
972 SET_SUBKEY_LR(24, subRL[24] ^ subRL[23]); /* kw3 */
973 } else {
974 tl = (subRL[26] >> 32) ^ (subRL[26] & ~subRL[24]);
975 dw = tl & (subRL[24] >> 32); /* FL(kl5) */
976 tr = subRL[26] ^ rol32(dw, 1);
977 tt = (tr | ((u64)tl << 32));
978
979 SET_SUBKEY_LR(23, subRL[22] ^ tt); /* round 18 */
980 SET_SUBKEY_LR(24, subRL[24]); /* FL(kl5) */
981 SET_SUBKEY_LR(25, subRL[25]); /* FLinv(kl6) */
982
983 tl = (subRL[23] >> 32) ^ (subRL[23] & ~subRL[25]);
984 dw = tl & (subRL[25] >> 32); /* FLinv(kl6) */
985 tr = subRL[23] ^ rol32(dw, 1);
986 tt = (tr | ((u64)tl << 32));
987
988 SET_SUBKEY_LR(26, subRL[27] ^ tt); /* round 19 */
989 SET_SUBKEY_LR(27, subRL[26] ^ subRL[28]); /* round 20 */
990 SET_SUBKEY_LR(28, subRL[27] ^ subRL[29]); /* round 21 */
991 SET_SUBKEY_LR(29, subRL[28] ^ subRL[30]); /* round 22 */
992 SET_SUBKEY_LR(30, subRL[29] ^ subRL[31]); /* round 23 */
993 SET_SUBKEY_LR(31, subRL[30]); /* round 24 */
994 SET_SUBKEY_LR(32, subRL[32] ^ subRL[31]); /* kw3 */
995 }
996 }
997
camellia_setup128(const unsigned char * key,u64 * subkey)998 static void camellia_setup128(const unsigned char *key, u64 *subkey)
999 {
1000 u64 kl, kr, ww;
1001 u64 subRL[26];
1002
1003 /**
1004 * k == kl || kr (|| is concatenation)
1005 */
1006 kl = get_unaligned_be64(key);
1007 kr = get_unaligned_be64(key + 8);
1008
1009 /* generate KL dependent subkeys */
1010 /* kw1 */
1011 subRL[0] = kl;
1012 /* kw2 */
1013 subRL[1] = kr;
1014
1015 /* rotation left shift 15bit */
1016 ROLDQ(kl, kr, 15);
1017
1018 /* k3 */
1019 subRL[4] = kl;
1020 /* k4 */
1021 subRL[5] = kr;
1022
1023 /* rotation left shift 15+30bit */
1024 ROLDQ(kl, kr, 30);
1025
1026 /* k7 */
1027 subRL[10] = kl;
1028 /* k8 */
1029 subRL[11] = kr;
1030
1031 /* rotation left shift 15+30+15bit */
1032 ROLDQ(kl, kr, 15);
1033
1034 /* k10 */
1035 subRL[13] = kr;
1036 /* rotation left shift 15+30+15+17 bit */
1037 ROLDQ(kl, kr, 17);
1038
1039 /* kl3 */
1040 subRL[16] = kl;
1041 /* kl4 */
1042 subRL[17] = kr;
1043
1044 /* rotation left shift 15+30+15+17+17 bit */
1045 ROLDQ(kl, kr, 17);
1046
1047 /* k13 */
1048 subRL[18] = kl;
1049 /* k14 */
1050 subRL[19] = kr;
1051
1052 /* rotation left shift 15+30+15+17+17+17 bit */
1053 ROLDQ(kl, kr, 17);
1054
1055 /* k17 */
1056 subRL[22] = kl;
1057 /* k18 */
1058 subRL[23] = kr;
1059
1060 /* generate KA */
1061 kl = subRL[0];
1062 kr = subRL[1];
1063 CAMELLIA_F(kl, CAMELLIA_SIGMA1L, CAMELLIA_SIGMA1R, ww);
1064 kr ^= ww;
1065 CAMELLIA_F(kr, CAMELLIA_SIGMA2L, CAMELLIA_SIGMA2R, kl);
1066
1067 /* current status == (kll, klr, w0, w1) */
1068 CAMELLIA_F(kl, CAMELLIA_SIGMA3L, CAMELLIA_SIGMA3R, kr);
1069 kr ^= ww;
1070 CAMELLIA_F(kr, CAMELLIA_SIGMA4L, CAMELLIA_SIGMA4R, ww);
1071 kl ^= ww;
1072
1073 /* generate KA dependent subkeys */
1074 /* k1, k2 */
1075 subRL[2] = kl;
1076 subRL[3] = kr;
1077 ROLDQ(kl, kr, 15);
1078 /* k5,k6 */
1079 subRL[6] = kl;
1080 subRL[7] = kr;
1081 ROLDQ(kl, kr, 15);
1082 /* kl1, kl2 */
1083 subRL[8] = kl;
1084 subRL[9] = kr;
1085 ROLDQ(kl, kr, 15);
1086 /* k9 */
1087 subRL[12] = kl;
1088 ROLDQ(kl, kr, 15);
1089 /* k11, k12 */
1090 subRL[14] = kl;
1091 subRL[15] = kr;
1092 ROLDQ(kl, kr, 34);
1093 /* k15, k16 */
1094 subRL[20] = kl;
1095 subRL[21] = kr;
1096 ROLDQ(kl, kr, 17);
1097 /* kw3, kw4 */
1098 subRL[24] = kl;
1099 subRL[25] = kr;
1100
1101 camellia_setup_tail(subkey, subRL, 24);
1102 }
1103
camellia_setup256(const unsigned char * key,u64 * subkey)1104 static void camellia_setup256(const unsigned char *key, u64 *subkey)
1105 {
1106 u64 kl, kr; /* left half of key */
1107 u64 krl, krr; /* right half of key */
1108 u64 ww; /* temporary variables */
1109 u64 subRL[34];
1110
1111 /**
1112 * key = (kl || kr || krl || krr) (|| is concatenation)
1113 */
1114 kl = get_unaligned_be64(key);
1115 kr = get_unaligned_be64(key + 8);
1116 krl = get_unaligned_be64(key + 16);
1117 krr = get_unaligned_be64(key + 24);
1118
1119 /* generate KL dependent subkeys */
1120 /* kw1 */
1121 subRL[0] = kl;
1122 /* kw2 */
1123 subRL[1] = kr;
1124 ROLDQ(kl, kr, 45);
1125 /* k9 */
1126 subRL[12] = kl;
1127 /* k10 */
1128 subRL[13] = kr;
1129 ROLDQ(kl, kr, 15);
1130 /* kl3 */
1131 subRL[16] = kl;
1132 /* kl4 */
1133 subRL[17] = kr;
1134 ROLDQ(kl, kr, 17);
1135 /* k17 */
1136 subRL[22] = kl;
1137 /* k18 */
1138 subRL[23] = kr;
1139 ROLDQ(kl, kr, 34);
1140 /* k23 */
1141 subRL[30] = kl;
1142 /* k24 */
1143 subRL[31] = kr;
1144
1145 /* generate KR dependent subkeys */
1146 ROLDQ(krl, krr, 15);
1147 /* k3 */
1148 subRL[4] = krl;
1149 /* k4 */
1150 subRL[5] = krr;
1151 ROLDQ(krl, krr, 15);
1152 /* kl1 */
1153 subRL[8] = krl;
1154 /* kl2 */
1155 subRL[9] = krr;
1156 ROLDQ(krl, krr, 30);
1157 /* k13 */
1158 subRL[18] = krl;
1159 /* k14 */
1160 subRL[19] = krr;
1161 ROLDQ(krl, krr, 34);
1162 /* k19 */
1163 subRL[26] = krl;
1164 /* k20 */
1165 subRL[27] = krr;
1166 ROLDQ(krl, krr, 34);
1167
1168 /* generate KA */
1169 kl = subRL[0] ^ krl;
1170 kr = subRL[1] ^ krr;
1171
1172 CAMELLIA_F(kl, CAMELLIA_SIGMA1L, CAMELLIA_SIGMA1R, ww);
1173 kr ^= ww;
1174 CAMELLIA_F(kr, CAMELLIA_SIGMA2L, CAMELLIA_SIGMA2R, kl);
1175 kl ^= krl;
1176 CAMELLIA_F(kl, CAMELLIA_SIGMA3L, CAMELLIA_SIGMA3R, kr);
1177 kr ^= ww ^ krr;
1178 CAMELLIA_F(kr, CAMELLIA_SIGMA4L, CAMELLIA_SIGMA4R, ww);
1179 kl ^= ww;
1180
1181 /* generate KB */
1182 krl ^= kl;
1183 krr ^= kr;
1184 CAMELLIA_F(krl, CAMELLIA_SIGMA5L, CAMELLIA_SIGMA5R, ww);
1185 krr ^= ww;
1186 CAMELLIA_F(krr, CAMELLIA_SIGMA6L, CAMELLIA_SIGMA6R, ww);
1187 krl ^= ww;
1188
1189 /* generate KA dependent subkeys */
1190 ROLDQ(kl, kr, 15);
1191 /* k5 */
1192 subRL[6] = kl;
1193 /* k6 */
1194 subRL[7] = kr;
1195 ROLDQ(kl, kr, 30);
1196 /* k11 */
1197 subRL[14] = kl;
1198 /* k12 */
1199 subRL[15] = kr;
1200 /* rotation left shift 32bit */
1201 ROLDQ(kl, kr, 32);
1202 /* kl5 */
1203 subRL[24] = kl;
1204 /* kl6 */
1205 subRL[25] = kr;
1206 /* rotation left shift 17 from k11,k12 -> k21,k22 */
1207 ROLDQ(kl, kr, 17);
1208 /* k21 */
1209 subRL[28] = kl;
1210 /* k22 */
1211 subRL[29] = kr;
1212
1213 /* generate KB dependent subkeys */
1214 /* k1 */
1215 subRL[2] = krl;
1216 /* k2 */
1217 subRL[3] = krr;
1218 ROLDQ(krl, krr, 30);
1219 /* k7 */
1220 subRL[10] = krl;
1221 /* k8 */
1222 subRL[11] = krr;
1223 ROLDQ(krl, krr, 30);
1224 /* k15 */
1225 subRL[20] = krl;
1226 /* k16 */
1227 subRL[21] = krr;
1228 ROLDQ(krl, krr, 51);
1229 /* kw3 */
1230 subRL[32] = krl;
1231 /* kw4 */
1232 subRL[33] = krr;
1233
1234 camellia_setup_tail(subkey, subRL, 32);
1235 }
1236
camellia_setup192(const unsigned char * key,u64 * subkey)1237 static void camellia_setup192(const unsigned char *key, u64 *subkey)
1238 {
1239 unsigned char kk[32];
1240 u64 krl, krr;
1241
1242 memcpy(kk, key, 24);
1243 memcpy((unsigned char *)&krl, key+16, 8);
1244 krr = ~krl;
1245 memcpy(kk+24, (unsigned char *)&krr, 8);
1246 camellia_setup256(kk, subkey);
1247 }
1248
__camellia_setkey(struct camellia_ctx * cctx,const unsigned char * key,unsigned int key_len,u32 * flags)1249 int __camellia_setkey(struct camellia_ctx *cctx, const unsigned char *key,
1250 unsigned int key_len, u32 *flags)
1251 {
1252 if (key_len != 16 && key_len != 24 && key_len != 32) {
1253 *flags |= CRYPTO_TFM_RES_BAD_KEY_LEN;
1254 return -EINVAL;
1255 }
1256
1257 cctx->key_length = key_len;
1258
1259 switch (key_len) {
1260 case 16:
1261 camellia_setup128(key, cctx->key_table);
1262 break;
1263 case 24:
1264 camellia_setup192(key, cctx->key_table);
1265 break;
1266 case 32:
1267 camellia_setup256(key, cctx->key_table);
1268 break;
1269 }
1270
1271 return 0;
1272 }
1273 EXPORT_SYMBOL_GPL(__camellia_setkey);
1274
camellia_setkey(struct crypto_tfm * tfm,const u8 * in_key,unsigned int key_len)1275 static int camellia_setkey(struct crypto_tfm *tfm, const u8 *in_key,
1276 unsigned int key_len)
1277 {
1278 return __camellia_setkey(crypto_tfm_ctx(tfm), in_key, key_len,
1279 &tfm->crt_flags);
1280 }
1281
camellia_decrypt_cbc_2way(void * ctx,u128 * dst,const u128 * src)1282 void camellia_decrypt_cbc_2way(void *ctx, u128 *dst, const u128 *src)
1283 {
1284 u128 iv = *src;
1285
1286 camellia_dec_blk_2way(ctx, (u8 *)dst, (u8 *)src);
1287
1288 u128_xor(&dst[1], &dst[1], &iv);
1289 }
1290 EXPORT_SYMBOL_GPL(camellia_decrypt_cbc_2way);
1291
camellia_crypt_ctr(void * ctx,u128 * dst,const u128 * src,le128 * iv)1292 void camellia_crypt_ctr(void *ctx, u128 *dst, const u128 *src, le128 *iv)
1293 {
1294 be128 ctrblk;
1295
1296 if (dst != src)
1297 *dst = *src;
1298
1299 le128_to_be128(&ctrblk, iv);
1300 le128_inc(iv);
1301
1302 camellia_enc_blk_xor(ctx, (u8 *)dst, (u8 *)&ctrblk);
1303 }
1304 EXPORT_SYMBOL_GPL(camellia_crypt_ctr);
1305
camellia_crypt_ctr_2way(void * ctx,u128 * dst,const u128 * src,le128 * iv)1306 void camellia_crypt_ctr_2way(void *ctx, u128 *dst, const u128 *src, le128 *iv)
1307 {
1308 be128 ctrblks[2];
1309
1310 if (dst != src) {
1311 dst[0] = src[0];
1312 dst[1] = src[1];
1313 }
1314
1315 le128_to_be128(&ctrblks[0], iv);
1316 le128_inc(iv);
1317 le128_to_be128(&ctrblks[1], iv);
1318 le128_inc(iv);
1319
1320 camellia_enc_blk_xor_2way(ctx, (u8 *)dst, (u8 *)ctrblks);
1321 }
1322 EXPORT_SYMBOL_GPL(camellia_crypt_ctr_2way);
1323
1324 static const struct common_glue_ctx camellia_enc = {
1325 .num_funcs = 2,
1326 .fpu_blocks_limit = -1,
1327
1328 .funcs = { {
1329 .num_blocks = 2,
1330 .fn_u = { .ecb = GLUE_FUNC_CAST(camellia_enc_blk_2way) }
1331 }, {
1332 .num_blocks = 1,
1333 .fn_u = { .ecb = GLUE_FUNC_CAST(camellia_enc_blk) }
1334 } }
1335 };
1336
1337 static const struct common_glue_ctx camellia_ctr = {
1338 .num_funcs = 2,
1339 .fpu_blocks_limit = -1,
1340
1341 .funcs = { {
1342 .num_blocks = 2,
1343 .fn_u = { .ctr = GLUE_CTR_FUNC_CAST(camellia_crypt_ctr_2way) }
1344 }, {
1345 .num_blocks = 1,
1346 .fn_u = { .ctr = GLUE_CTR_FUNC_CAST(camellia_crypt_ctr) }
1347 } }
1348 };
1349
1350 static const struct common_glue_ctx camellia_dec = {
1351 .num_funcs = 2,
1352 .fpu_blocks_limit = -1,
1353
1354 .funcs = { {
1355 .num_blocks = 2,
1356 .fn_u = { .ecb = GLUE_FUNC_CAST(camellia_dec_blk_2way) }
1357 }, {
1358 .num_blocks = 1,
1359 .fn_u = { .ecb = GLUE_FUNC_CAST(camellia_dec_blk) }
1360 } }
1361 };
1362
1363 static const struct common_glue_ctx camellia_dec_cbc = {
1364 .num_funcs = 2,
1365 .fpu_blocks_limit = -1,
1366
1367 .funcs = { {
1368 .num_blocks = 2,
1369 .fn_u = { .cbc = GLUE_CBC_FUNC_CAST(camellia_decrypt_cbc_2way) }
1370 }, {
1371 .num_blocks = 1,
1372 .fn_u = { .cbc = GLUE_CBC_FUNC_CAST(camellia_dec_blk) }
1373 } }
1374 };
1375
ecb_encrypt(struct blkcipher_desc * desc,struct scatterlist * dst,struct scatterlist * src,unsigned int nbytes)1376 static int ecb_encrypt(struct blkcipher_desc *desc, struct scatterlist *dst,
1377 struct scatterlist *src, unsigned int nbytes)
1378 {
1379 return glue_ecb_crypt_128bit(&camellia_enc, desc, dst, src, nbytes);
1380 }
1381
ecb_decrypt(struct blkcipher_desc * desc,struct scatterlist * dst,struct scatterlist * src,unsigned int nbytes)1382 static int ecb_decrypt(struct blkcipher_desc *desc, struct scatterlist *dst,
1383 struct scatterlist *src, unsigned int nbytes)
1384 {
1385 return glue_ecb_crypt_128bit(&camellia_dec, desc, dst, src, nbytes);
1386 }
1387
cbc_encrypt(struct blkcipher_desc * desc,struct scatterlist * dst,struct scatterlist * src,unsigned int nbytes)1388 static int cbc_encrypt(struct blkcipher_desc *desc, struct scatterlist *dst,
1389 struct scatterlist *src, unsigned int nbytes)
1390 {
1391 return glue_cbc_encrypt_128bit(GLUE_FUNC_CAST(camellia_enc_blk), desc,
1392 dst, src, nbytes);
1393 }
1394
cbc_decrypt(struct blkcipher_desc * desc,struct scatterlist * dst,struct scatterlist * src,unsigned int nbytes)1395 static int cbc_decrypt(struct blkcipher_desc *desc, struct scatterlist *dst,
1396 struct scatterlist *src, unsigned int nbytes)
1397 {
1398 return glue_cbc_decrypt_128bit(&camellia_dec_cbc, desc, dst, src,
1399 nbytes);
1400 }
1401
ctr_crypt(struct blkcipher_desc * desc,struct scatterlist * dst,struct scatterlist * src,unsigned int nbytes)1402 static int ctr_crypt(struct blkcipher_desc *desc, struct scatterlist *dst,
1403 struct scatterlist *src, unsigned int nbytes)
1404 {
1405 return glue_ctr_crypt_128bit(&camellia_ctr, desc, dst, src, nbytes);
1406 }
1407
encrypt_callback(void * priv,u8 * srcdst,unsigned int nbytes)1408 static void encrypt_callback(void *priv, u8 *srcdst, unsigned int nbytes)
1409 {
1410 const unsigned int bsize = CAMELLIA_BLOCK_SIZE;
1411 struct camellia_ctx *ctx = priv;
1412 int i;
1413
1414 while (nbytes >= 2 * bsize) {
1415 camellia_enc_blk_2way(ctx, srcdst, srcdst);
1416 srcdst += bsize * 2;
1417 nbytes -= bsize * 2;
1418 }
1419
1420 for (i = 0; i < nbytes / bsize; i++, srcdst += bsize)
1421 camellia_enc_blk(ctx, srcdst, srcdst);
1422 }
1423
decrypt_callback(void * priv,u8 * srcdst,unsigned int nbytes)1424 static void decrypt_callback(void *priv, u8 *srcdst, unsigned int nbytes)
1425 {
1426 const unsigned int bsize = CAMELLIA_BLOCK_SIZE;
1427 struct camellia_ctx *ctx = priv;
1428 int i;
1429
1430 while (nbytes >= 2 * bsize) {
1431 camellia_dec_blk_2way(ctx, srcdst, srcdst);
1432 srcdst += bsize * 2;
1433 nbytes -= bsize * 2;
1434 }
1435
1436 for (i = 0; i < nbytes / bsize; i++, srcdst += bsize)
1437 camellia_dec_blk(ctx, srcdst, srcdst);
1438 }
1439
lrw_camellia_setkey(struct crypto_tfm * tfm,const u8 * key,unsigned int keylen)1440 int lrw_camellia_setkey(struct crypto_tfm *tfm, const u8 *key,
1441 unsigned int keylen)
1442 {
1443 struct camellia_lrw_ctx *ctx = crypto_tfm_ctx(tfm);
1444 int err;
1445
1446 err = __camellia_setkey(&ctx->camellia_ctx, key,
1447 keylen - CAMELLIA_BLOCK_SIZE,
1448 &tfm->crt_flags);
1449 if (err)
1450 return err;
1451
1452 return lrw_init_table(&ctx->lrw_table,
1453 key + keylen - CAMELLIA_BLOCK_SIZE);
1454 }
1455 EXPORT_SYMBOL_GPL(lrw_camellia_setkey);
1456
lrw_encrypt(struct blkcipher_desc * desc,struct scatterlist * dst,struct scatterlist * src,unsigned int nbytes)1457 static int lrw_encrypt(struct blkcipher_desc *desc, struct scatterlist *dst,
1458 struct scatterlist *src, unsigned int nbytes)
1459 {
1460 struct camellia_lrw_ctx *ctx = crypto_blkcipher_ctx(desc->tfm);
1461 be128 buf[2 * 4];
1462 struct lrw_crypt_req req = {
1463 .tbuf = buf,
1464 .tbuflen = sizeof(buf),
1465
1466 .table_ctx = &ctx->lrw_table,
1467 .crypt_ctx = &ctx->camellia_ctx,
1468 .crypt_fn = encrypt_callback,
1469 };
1470
1471 return lrw_crypt(desc, dst, src, nbytes, &req);
1472 }
1473
lrw_decrypt(struct blkcipher_desc * desc,struct scatterlist * dst,struct scatterlist * src,unsigned int nbytes)1474 static int lrw_decrypt(struct blkcipher_desc *desc, struct scatterlist *dst,
1475 struct scatterlist *src, unsigned int nbytes)
1476 {
1477 struct camellia_lrw_ctx *ctx = crypto_blkcipher_ctx(desc->tfm);
1478 be128 buf[2 * 4];
1479 struct lrw_crypt_req req = {
1480 .tbuf = buf,
1481 .tbuflen = sizeof(buf),
1482
1483 .table_ctx = &ctx->lrw_table,
1484 .crypt_ctx = &ctx->camellia_ctx,
1485 .crypt_fn = decrypt_callback,
1486 };
1487
1488 return lrw_crypt(desc, dst, src, nbytes, &req);
1489 }
1490
lrw_camellia_exit_tfm(struct crypto_tfm * tfm)1491 void lrw_camellia_exit_tfm(struct crypto_tfm *tfm)
1492 {
1493 struct camellia_lrw_ctx *ctx = crypto_tfm_ctx(tfm);
1494
1495 lrw_free_table(&ctx->lrw_table);
1496 }
1497 EXPORT_SYMBOL_GPL(lrw_camellia_exit_tfm);
1498
xts_camellia_setkey(struct crypto_tfm * tfm,const u8 * key,unsigned int keylen)1499 int xts_camellia_setkey(struct crypto_tfm *tfm, const u8 *key,
1500 unsigned int keylen)
1501 {
1502 struct camellia_xts_ctx *ctx = crypto_tfm_ctx(tfm);
1503 u32 *flags = &tfm->crt_flags;
1504 int err;
1505
1506 /* key consists of keys of equal size concatenated, therefore
1507 * the length must be even
1508 */
1509 if (keylen % 2) {
1510 *flags |= CRYPTO_TFM_RES_BAD_KEY_LEN;
1511 return -EINVAL;
1512 }
1513
1514 /* first half of xts-key is for crypt */
1515 err = __camellia_setkey(&ctx->crypt_ctx, key, keylen / 2, flags);
1516 if (err)
1517 return err;
1518
1519 /* second half of xts-key is for tweak */
1520 return __camellia_setkey(&ctx->tweak_ctx, key + keylen / 2, keylen / 2,
1521 flags);
1522 }
1523 EXPORT_SYMBOL_GPL(xts_camellia_setkey);
1524
xts_encrypt(struct blkcipher_desc * desc,struct scatterlist * dst,struct scatterlist * src,unsigned int nbytes)1525 static int xts_encrypt(struct blkcipher_desc *desc, struct scatterlist *dst,
1526 struct scatterlist *src, unsigned int nbytes)
1527 {
1528 struct camellia_xts_ctx *ctx = crypto_blkcipher_ctx(desc->tfm);
1529 be128 buf[2 * 4];
1530 struct xts_crypt_req req = {
1531 .tbuf = buf,
1532 .tbuflen = sizeof(buf),
1533
1534 .tweak_ctx = &ctx->tweak_ctx,
1535 .tweak_fn = XTS_TWEAK_CAST(camellia_enc_blk),
1536 .crypt_ctx = &ctx->crypt_ctx,
1537 .crypt_fn = encrypt_callback,
1538 };
1539
1540 return xts_crypt(desc, dst, src, nbytes, &req);
1541 }
1542
xts_decrypt(struct blkcipher_desc * desc,struct scatterlist * dst,struct scatterlist * src,unsigned int nbytes)1543 static int xts_decrypt(struct blkcipher_desc *desc, struct scatterlist *dst,
1544 struct scatterlist *src, unsigned int nbytes)
1545 {
1546 struct camellia_xts_ctx *ctx = crypto_blkcipher_ctx(desc->tfm);
1547 be128 buf[2 * 4];
1548 struct xts_crypt_req req = {
1549 .tbuf = buf,
1550 .tbuflen = sizeof(buf),
1551
1552 .tweak_ctx = &ctx->tweak_ctx,
1553 .tweak_fn = XTS_TWEAK_CAST(camellia_enc_blk),
1554 .crypt_ctx = &ctx->crypt_ctx,
1555 .crypt_fn = decrypt_callback,
1556 };
1557
1558 return xts_crypt(desc, dst, src, nbytes, &req);
1559 }
1560
1561 static struct crypto_alg camellia_algs[6] = { {
1562 .cra_name = "camellia",
1563 .cra_driver_name = "camellia-asm",
1564 .cra_priority = 200,
1565 .cra_flags = CRYPTO_ALG_TYPE_CIPHER,
1566 .cra_blocksize = CAMELLIA_BLOCK_SIZE,
1567 .cra_ctxsize = sizeof(struct camellia_ctx),
1568 .cra_alignmask = 0,
1569 .cra_module = THIS_MODULE,
1570 .cra_u = {
1571 .cipher = {
1572 .cia_min_keysize = CAMELLIA_MIN_KEY_SIZE,
1573 .cia_max_keysize = CAMELLIA_MAX_KEY_SIZE,
1574 .cia_setkey = camellia_setkey,
1575 .cia_encrypt = camellia_encrypt,
1576 .cia_decrypt = camellia_decrypt
1577 }
1578 }
1579 }, {
1580 .cra_name = "ecb(camellia)",
1581 .cra_driver_name = "ecb-camellia-asm",
1582 .cra_priority = 300,
1583 .cra_flags = CRYPTO_ALG_TYPE_BLKCIPHER,
1584 .cra_blocksize = CAMELLIA_BLOCK_SIZE,
1585 .cra_ctxsize = sizeof(struct camellia_ctx),
1586 .cra_alignmask = 0,
1587 .cra_type = &crypto_blkcipher_type,
1588 .cra_module = THIS_MODULE,
1589 .cra_u = {
1590 .blkcipher = {
1591 .min_keysize = CAMELLIA_MIN_KEY_SIZE,
1592 .max_keysize = CAMELLIA_MAX_KEY_SIZE,
1593 .setkey = camellia_setkey,
1594 .encrypt = ecb_encrypt,
1595 .decrypt = ecb_decrypt,
1596 },
1597 },
1598 }, {
1599 .cra_name = "cbc(camellia)",
1600 .cra_driver_name = "cbc-camellia-asm",
1601 .cra_priority = 300,
1602 .cra_flags = CRYPTO_ALG_TYPE_BLKCIPHER,
1603 .cra_blocksize = CAMELLIA_BLOCK_SIZE,
1604 .cra_ctxsize = sizeof(struct camellia_ctx),
1605 .cra_alignmask = 0,
1606 .cra_type = &crypto_blkcipher_type,
1607 .cra_module = THIS_MODULE,
1608 .cra_u = {
1609 .blkcipher = {
1610 .min_keysize = CAMELLIA_MIN_KEY_SIZE,
1611 .max_keysize = CAMELLIA_MAX_KEY_SIZE,
1612 .ivsize = CAMELLIA_BLOCK_SIZE,
1613 .setkey = camellia_setkey,
1614 .encrypt = cbc_encrypt,
1615 .decrypt = cbc_decrypt,
1616 },
1617 },
1618 }, {
1619 .cra_name = "ctr(camellia)",
1620 .cra_driver_name = "ctr-camellia-asm",
1621 .cra_priority = 300,
1622 .cra_flags = CRYPTO_ALG_TYPE_BLKCIPHER,
1623 .cra_blocksize = 1,
1624 .cra_ctxsize = sizeof(struct camellia_ctx),
1625 .cra_alignmask = 0,
1626 .cra_type = &crypto_blkcipher_type,
1627 .cra_module = THIS_MODULE,
1628 .cra_u = {
1629 .blkcipher = {
1630 .min_keysize = CAMELLIA_MIN_KEY_SIZE,
1631 .max_keysize = CAMELLIA_MAX_KEY_SIZE,
1632 .ivsize = CAMELLIA_BLOCK_SIZE,
1633 .setkey = camellia_setkey,
1634 .encrypt = ctr_crypt,
1635 .decrypt = ctr_crypt,
1636 },
1637 },
1638 }, {
1639 .cra_name = "lrw(camellia)",
1640 .cra_driver_name = "lrw-camellia-asm",
1641 .cra_priority = 300,
1642 .cra_flags = CRYPTO_ALG_TYPE_BLKCIPHER,
1643 .cra_blocksize = CAMELLIA_BLOCK_SIZE,
1644 .cra_ctxsize = sizeof(struct camellia_lrw_ctx),
1645 .cra_alignmask = 0,
1646 .cra_type = &crypto_blkcipher_type,
1647 .cra_module = THIS_MODULE,
1648 .cra_exit = lrw_camellia_exit_tfm,
1649 .cra_u = {
1650 .blkcipher = {
1651 .min_keysize = CAMELLIA_MIN_KEY_SIZE +
1652 CAMELLIA_BLOCK_SIZE,
1653 .max_keysize = CAMELLIA_MAX_KEY_SIZE +
1654 CAMELLIA_BLOCK_SIZE,
1655 .ivsize = CAMELLIA_BLOCK_SIZE,
1656 .setkey = lrw_camellia_setkey,
1657 .encrypt = lrw_encrypt,
1658 .decrypt = lrw_decrypt,
1659 },
1660 },
1661 }, {
1662 .cra_name = "xts(camellia)",
1663 .cra_driver_name = "xts-camellia-asm",
1664 .cra_priority = 300,
1665 .cra_flags = CRYPTO_ALG_TYPE_BLKCIPHER,
1666 .cra_blocksize = CAMELLIA_BLOCK_SIZE,
1667 .cra_ctxsize = sizeof(struct camellia_xts_ctx),
1668 .cra_alignmask = 0,
1669 .cra_type = &crypto_blkcipher_type,
1670 .cra_module = THIS_MODULE,
1671 .cra_u = {
1672 .blkcipher = {
1673 .min_keysize = CAMELLIA_MIN_KEY_SIZE * 2,
1674 .max_keysize = CAMELLIA_MAX_KEY_SIZE * 2,
1675 .ivsize = CAMELLIA_BLOCK_SIZE,
1676 .setkey = xts_camellia_setkey,
1677 .encrypt = xts_encrypt,
1678 .decrypt = xts_decrypt,
1679 },
1680 },
1681 } };
1682
is_blacklisted_cpu(void)1683 static bool is_blacklisted_cpu(void)
1684 {
1685 if (boot_cpu_data.x86_vendor != X86_VENDOR_INTEL)
1686 return false;
1687
1688 if (boot_cpu_data.x86 == 0x0f) {
1689 /*
1690 * On Pentium 4, camellia-asm is slower than original assembler
1691 * implementation because excessive uses of 64bit rotate and
1692 * left-shifts (which are really slow on P4) needed to store and
1693 * handle 128bit block in two 64bit registers.
1694 */
1695 return true;
1696 }
1697
1698 return false;
1699 }
1700
1701 static int force;
1702 module_param(force, int, 0);
1703 MODULE_PARM_DESC(force, "Force module load, ignore CPU blacklist");
1704
init(void)1705 static int __init init(void)
1706 {
1707 if (!force && is_blacklisted_cpu()) {
1708 printk(KERN_INFO
1709 "camellia-x86_64: performance on this CPU "
1710 "would be suboptimal: disabling "
1711 "camellia-x86_64.\n");
1712 return -ENODEV;
1713 }
1714
1715 return crypto_register_algs(camellia_algs, ARRAY_SIZE(camellia_algs));
1716 }
1717
fini(void)1718 static void __exit fini(void)
1719 {
1720 crypto_unregister_algs(camellia_algs, ARRAY_SIZE(camellia_algs));
1721 }
1722
1723 module_init(init);
1724 module_exit(fini);
1725
1726 MODULE_LICENSE("GPL");
1727 MODULE_DESCRIPTION("Camellia Cipher Algorithm, asm optimized");
1728 MODULE_ALIAS_CRYPTO("camellia");
1729 MODULE_ALIAS_CRYPTO("camellia-asm");
1730