cfb64ede.c 8.6 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250
  1. /* crypto/des/cfb64ede.c */
  2. /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
  3. * All rights reserved.
  4. *
  5. * This package is an SSL implementation written
  6. * by Eric Young (eay@cryptsoft.com).
  7. * The implementation was written so as to conform with Netscapes SSL.
  8. *
  9. * This library is free for commercial and non-commercial use as long as
  10. * the following conditions are aheared to. The following conditions
  11. * apply to all code found in this distribution, be it the RC4, RSA,
  12. * lhash, DES, etc., code; not just the SSL code. The SSL documentation
  13. * included with this distribution is covered by the same copyright terms
  14. * except that the holder is Tim Hudson (tjh@cryptsoft.com).
  15. *
  16. * Copyright remains Eric Young's, and as such any Copyright notices in
  17. * the code are not to be removed.
  18. * If this package is used in a product, Eric Young should be given attribution
  19. * as the author of the parts of the library used.
  20. * This can be in the form of a textual message at program startup or
  21. * in documentation (online or textual) provided with the package.
  22. *
  23. * Redistribution and use in source and binary forms, with or without
  24. * modification, are permitted provided that the following conditions
  25. * are met:
  26. * 1. Redistributions of source code must retain the copyright
  27. * notice, this list of conditions and the following disclaimer.
  28. * 2. Redistributions in binary form must reproduce the above copyright
  29. * notice, this list of conditions and the following disclaimer in the
  30. * documentation and/or other materials provided with the distribution.
  31. * 3. All advertising materials mentioning features or use of this software
  32. * must display the following acknowledgement:
  33. * "This product includes cryptographic software written by
  34. * Eric Young (eay@cryptsoft.com)"
  35. * The word 'cryptographic' can be left out if the rouines from the library
  36. * being used are not cryptographic related :-).
  37. * 4. If you include any Windows specific code (or a derivative thereof) from
  38. * the apps directory (application code) you must include an acknowledgement:
  39. * "This product includes software written by Tim Hudson (tjh@cryptsoft.com)"
  40. *
  41. * THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND
  42. * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
  43. * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
  44. * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
  45. * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
  46. * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
  47. * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
  48. * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
  49. * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
  50. * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
  51. * SUCH DAMAGE.
  52. *
  53. * The licence and distribution terms for any publically available version or
  54. * derivative of this code cannot be changed. i.e. this code cannot simply be
  55. * copied and put under another distribution licence
  56. * [including the GNU Public Licence.]
  57. */
  58. #include "des_locl.h"
  59. #include "e_os.h"
  60. /*
  61. * The input and output encrypted as though 64bit cfb mode is being used.
  62. * The extra state information to record how much of the 64bit block we have
  63. * used is contained in *num;
  64. */
  65. void DES_ede3_cfb64_encrypt(const unsigned char *in, unsigned char *out,
  66. long length, DES_key_schedule *ks1,
  67. DES_key_schedule *ks2, DES_key_schedule *ks3,
  68. DES_cblock *ivec, int *num, int enc)
  69. {
  70. register DES_LONG v0, v1;
  71. register long l = length;
  72. register int n = *num;
  73. DES_LONG ti[2];
  74. unsigned char *iv, c, cc;
  75. iv = &(*ivec)[0];
  76. if (enc) {
  77. while (l--) {
  78. if (n == 0) {
  79. c2l(iv, v0);
  80. c2l(iv, v1);
  81. ti[0] = v0;
  82. ti[1] = v1;
  83. DES_encrypt3(ti, ks1, ks2, ks3);
  84. v0 = ti[0];
  85. v1 = ti[1];
  86. iv = &(*ivec)[0];
  87. l2c(v0, iv);
  88. l2c(v1, iv);
  89. iv = &(*ivec)[0];
  90. }
  91. c = *(in++) ^ iv[n];
  92. *(out++) = c;
  93. iv[n] = c;
  94. n = (n + 1) & 0x07;
  95. }
  96. } else {
  97. while (l--) {
  98. if (n == 0) {
  99. c2l(iv, v0);
  100. c2l(iv, v1);
  101. ti[0] = v0;
  102. ti[1] = v1;
  103. DES_encrypt3(ti, ks1, ks2, ks3);
  104. v0 = ti[0];
  105. v1 = ti[1];
  106. iv = &(*ivec)[0];
  107. l2c(v0, iv);
  108. l2c(v1, iv);
  109. iv = &(*ivec)[0];
  110. }
  111. cc = *(in++);
  112. c = iv[n];
  113. iv[n] = cc;
  114. *(out++) = c ^ cc;
  115. n = (n + 1) & 0x07;
  116. }
  117. }
  118. v0 = v1 = ti[0] = ti[1] = c = cc = 0;
  119. *num = n;
  120. }
  121. #ifdef undef /* MACRO */
  122. void DES_ede2_cfb64_encrypt(unsigned char *in, unsigned char *out,
  123. long length, DES_key_schedule ks1,
  124. DES_key_schedule ks2, DES_cblock (*ivec),
  125. int *num, int enc)
  126. {
  127. DES_ede3_cfb64_encrypt(in, out, length, ks1, ks2, ks1, ivec, num, enc);
  128. }
  129. #endif
  130. /*
  131. * This is compatible with the single key CFB-r for DES, even thought that's
  132. * not what EVP needs.
  133. */
  134. void DES_ede3_cfb_encrypt(const unsigned char *in, unsigned char *out,
  135. int numbits, long length, DES_key_schedule *ks1,
  136. DES_key_schedule *ks2, DES_key_schedule *ks3,
  137. DES_cblock *ivec, int enc)
  138. {
  139. register DES_LONG d0, d1, v0, v1;
  140. register unsigned long l = length, n = ((unsigned int)numbits + 7) / 8;
  141. register int num = numbits, i;
  142. DES_LONG ti[2];
  143. unsigned char *iv;
  144. unsigned char ovec[16];
  145. if (num > 64)
  146. return;
  147. iv = &(*ivec)[0];
  148. c2l(iv, v0);
  149. c2l(iv, v1);
  150. if (enc) {
  151. while (l >= n) {
  152. l -= n;
  153. ti[0] = v0;
  154. ti[1] = v1;
  155. DES_encrypt3(ti, ks1, ks2, ks3);
  156. c2ln(in, d0, d1, n);
  157. in += n;
  158. d0 ^= ti[0];
  159. d1 ^= ti[1];
  160. l2cn(d0, d1, out, n);
  161. out += n;
  162. /*
  163. * 30-08-94 - eay - changed because l>>32 and l<<32 are bad under
  164. * gcc :-(
  165. */
  166. if (num == 32) {
  167. v0 = v1;
  168. v1 = d0;
  169. } else if (num == 64) {
  170. v0 = d0;
  171. v1 = d1;
  172. } else {
  173. iv = &ovec[0];
  174. l2c(v0, iv);
  175. l2c(v1, iv);
  176. l2c(d0, iv);
  177. l2c(d1, iv);
  178. /* shift ovec left most of the bits... */
  179. memmove(ovec, ovec + num / 8, 8 + (num % 8 ? 1 : 0));
  180. /* now the remaining bits */
  181. if (num % 8 != 0)
  182. for (i = 0; i < 8; ++i) {
  183. ovec[i] <<= num % 8;
  184. ovec[i] |= ovec[i + 1] >> (8 - num % 8);
  185. }
  186. iv = &ovec[0];
  187. c2l(iv, v0);
  188. c2l(iv, v1);
  189. }
  190. }
  191. } else {
  192. while (l >= n) {
  193. l -= n;
  194. ti[0] = v0;
  195. ti[1] = v1;
  196. DES_encrypt3(ti, ks1, ks2, ks3);
  197. c2ln(in, d0, d1, n);
  198. in += n;
  199. /*
  200. * 30-08-94 - eay - changed because l>>32 and l<<32 are bad under
  201. * gcc :-(
  202. */
  203. if (num == 32) {
  204. v0 = v1;
  205. v1 = d0;
  206. } else if (num == 64) {
  207. v0 = d0;
  208. v1 = d1;
  209. } else {
  210. iv = &ovec[0];
  211. l2c(v0, iv);
  212. l2c(v1, iv);
  213. l2c(d0, iv);
  214. l2c(d1, iv);
  215. /* shift ovec left most of the bits... */
  216. memmove(ovec, ovec + num / 8, 8 + (num % 8 ? 1 : 0));
  217. /* now the remaining bits */
  218. if (num % 8 != 0)
  219. for (i = 0; i < 8; ++i) {
  220. ovec[i] <<= num % 8;
  221. ovec[i] |= ovec[i + 1] >> (8 - num % 8);
  222. }
  223. iv = &ovec[0];
  224. c2l(iv, v0);
  225. c2l(iv, v1);
  226. }
  227. d0 ^= ti[0];
  228. d1 ^= ti[1];
  229. l2cn(d0, d1, out, n);
  230. out += n;
  231. }
  232. }
  233. iv = &(*ivec)[0];
  234. l2c(v0, iv);
  235. l2c(v1, iv);
  236. v0 = v1 = d0 = d1 = ti[0] = ti[1] = 0;
  237. }