crypto/des.c

   1 /*
   2  * Cryptographic API.
   3  *
   4  * DES & Triple DES EDE Cipher Algorithms.
   5  *
   6  * Originally released as descore by Dana L. How <how@isl.stanford.edu>.
   7  * Modified by Raimar Falke <rf13@inf.tu-dresden.de> for the Linux-Kernel.
   8  * Derived from Cryptoapi and Nettle implementations, adapted for in-place
   9  * scatterlist interface.  Changed LGPL to GPL per section 3 of the LGPL.
  10  *
  11  * Copyright (c) 1992 Dana L. How.
  12  * Copyright (c) Raimar Falke <rf13@inf.tu-dresden.de>
  13  * Copyright (c) Gisle Sælensminde <gisle@ii.uib.no>
  14  * Copyright (C) 2001 Niels Möller.
  15  * Copyright (c) 2002 James Morris <jmorris@intercode.com.au>
  16  *
  17  * This program is free software; you can redistribute it and/or modify
  18  * it under the terms of the GNU General Public License as published by
  19  * the Free Software Foundation; either version 2 of the License, or
  20  * (at your option) any later version.
  21  *
  22  */
  23 #include <linux/init.h>
  24 #include <linux/module.h>
  25 #include <linux/mm.h>
  26 #include <linux/errno.h>
  27 #include <asm/scatterlist.h>
  28 #include <linux/crypto.h>
  29
  30 #define DES_KEY_SIZE            8
  31 #define DES_EXPKEY_WORDS        32
  32 #define DES_BLOCK_SIZE          8
  33
  34 #define DES3_EDE_KEY_SIZE       (3 * DES_KEY_SIZE)
  35 #define DES3_EDE_EXPKEY_WORDS   (3 * DES_EXPKEY_WORDS)
  36 #define DES3_EDE_BLOCK_SIZE     DES_BLOCK_SIZE
  37
  38 #define ROR(d,c,o)      ((d) = (d) >> (c) | (d) << (o))
  39
  40 struct des_ctx {
  41         u8 iv[DES_BLOCK_SIZE];
  42         u32 expkey[DES_EXPKEY_WORDS];
  43 };
  44
  45 struct des3_ede_ctx {
  46         u8 iv[DES_BLOCK_SIZE];
  47         u32 expkey[DES3_EDE_EXPKEY_WORDS];
  48 };
  49
  50 static const u32 des_keymap[] = {
  51         0x02080008, 0x02082000, 0x00002008, 0x00000000,
  52         0x02002000, 0x00080008, 0x02080000, 0x02082008,
  53         0x00000008, 0x02000000, 0x00082000, 0x00002008,
  54         0x00082008, 0x02002008, 0x02000008, 0x02080000,
  55         0x00002000, 0x00082008, 0x00080008, 0x02002000,
  56         0x02082008, 0x02000008, 0x00000000, 0x00082000,
  57         0x02000000, 0x00080000, 0x02002008, 0x02080008,
  58         0x00080000, 0x00002000, 0x02082000, 0x00000008,
  59         0x00080000, 0x00002000, 0x02000008, 0x02082008,
  60         0x00002008, 0x02000000, 0x00000000, 0x00082000,
  61         0x02080008, 0x02002008, 0x02002000, 0x00080008,
  62         0x02082000, 0x00000008, 0x00080008, 0x02002000,
  63         0x02082008, 0x00080000, 0x02080000, 0x02000008,
  64         0x00082000, 0x00002008, 0x02002008, 0x02080000,
  65         0x00000008, 0x02082000, 0x00082008, 0x00000000,
  66         0x02000000, 0x02080008, 0x00002000, 0x00082008,
  67
  68         0x08000004, 0x00020004, 0x00000000, 0x08020200,
  69         0x00020004, 0x00000200, 0x08000204, 0x00020000,
  70         0x00000204, 0x08020204, 0x00020200, 0x08000000,
  71         0x08000200, 0x08000004, 0x08020000, 0x00020204,
  72         0x00020000, 0x08000204, 0x08020004, 0x00000000,
  73         0x00000200, 0x00000004, 0x08020200, 0x08020004,
  74         0x08020204, 0x08020000, 0x08000000, 0x00000204,
  75         0x00000004, 0x00020200, 0x00020204, 0x08000200,
  76         0x00000204, 0x08000000, 0x08000200, 0x00020204,
  77         0x08020200, 0x00020004, 0x00000000, 0x08000200,
  78         0x08000000, 0x00000200, 0x08020004, 0x00020000,
  79         0x00020004, 0x08020204, 0x00020200, 0x00000004,
  80         0x08020204, 0x00020200, 0x00020000, 0x08000204,
  81         0x08000004, 0x08020000, 0x00020204, 0x00000000,
  82         0x00000200, 0x08000004, 0x08000204, 0x08020200,
  83         0x08020000, 0x00000204, 0x00000004, 0x08020004,
  84
  85         0x80040100, 0x01000100, 0x80000000, 0x81040100,
  86         0x00000000, 0x01040000, 0x81000100, 0x80040000,
  87         0x01040100, 0x81000000, 0x01000000, 0x80000100,
  88         0x81000000, 0x80040100, 0x00040000, 0x01000000,
  89         0x81040000, 0x00040100, 0x00000100, 0x80000000,
  90         0x00040100, 0x81000100, 0x01040000, 0x00000100,
  91         0x80000100, 0x00000000, 0x80040000, 0x01040100,
  92         0x01000100, 0x81040000, 0x81040100, 0x00040000,
  93         0x81040000, 0x80000100, 0x00040000, 0x81000000,
  94         0x00040100, 0x01000100, 0x80000000, 0x01040000,
  95         0x81000100, 0x00000000, 0x00000100, 0x80040000,
  96         0x00000000, 0x81040000, 0x01040100, 0x00000100,
  97         0x01000000, 0x81040100, 0x80040100, 0x00040000,
  98         0x81040100, 0x80000000, 0x01000100, 0x80040100,
  99         0x80040000, 0x00040100, 0x01040000, 0x81000100,
 100         0x80000100, 0x01000000, 0x81000000, 0x01040100,
 101
 102         0x04010801, 0x00000000, 0x00010800, 0x04010000,
 103         0x04000001, 0x00000801, 0x04000800, 0x00010800,
 104         0x00000800, 0x04010001, 0x00000001, 0x04000800,
 105         0x00010001, 0x04010800, 0x04010000, 0x00000001,
 106         0x00010000, 0x04000801, 0x04010001, 0x00000800,
 107         0x00010801, 0x04000000, 0x00000000, 0x00010001,
 108         0x04000801, 0x00010801, 0x04010800, 0x04000001,
 109         0x04000000, 0x00010000, 0x00000801, 0x04010801,
 110         0x00010001, 0x04010800, 0x04000800, 0x00010801,
 111         0x04010801, 0x00010001, 0x04000001, 0x00000000,
 112         0x04000000, 0x00000801, 0x00010000, 0x04010001,
 113         0x00000800, 0x04000000, 0x00010801, 0x04000801,
 114         0x04010800, 0x00000800, 0x00000000, 0x04000001,
 115         0x00000001, 0x04010801, 0x00010800, 0x04010000,
 116         0x04010001, 0x00010000, 0x00000801, 0x04000800,
 117         0x04000801, 0x00000001, 0x04010000, 0x00010800,
 118
 119         0x00000400, 0x00000020, 0x00100020, 0x40100000,
 120         0x40100420, 0x40000400, 0x00000420, 0x00000000,
 121         0x00100000, 0x40100020, 0x40000020, 0x00100400,
 122         0x40000000, 0x00100420, 0x00100400, 0x40000020,
 123         0x40100020, 0x00000400, 0x40000400, 0x40100420,
 124         0x00000000, 0x00100020, 0x40100000, 0x00000420,
 125         0x40100400, 0x40000420, 0x00100420, 0x40000000,
 126         0x40000420, 0x40100400, 0x00000020, 0x00100000,
 127         0x40000420, 0x00100400, 0x40100400, 0x40000020,
 128         0x00000400, 0x00000020, 0x00100000, 0x40100400,
 129         0x40100020, 0x40000420, 0x00000420, 0x00000000,
 130         0x00000020, 0x40100000, 0x40000000, 0x00100020,
 131         0x00000000, 0x40100020, 0x00100020, 0x00000420,
 132         0x40000020, 0x00000400, 0x40100420, 0x00100000,
 133         0x00100420, 0x40000000, 0x40000400, 0x40100420,
 134         0x40100000, 0x00100420, 0x00100400, 0x40000400,
 135
 136         0x00800000, 0x00001000, 0x00000040, 0x00801042,
 137         0x00801002, 0x00800040, 0x00001042, 0x00801000,
 138         0x00001000, 0x00000002, 0x00800002, 0x00001040,
 139         0x00800042, 0x00801002, 0x00801040, 0x00000000,
 140         0x00001040, 0x00800000, 0x00001002, 0x00000042,
 141         0x00800040, 0x00001042, 0x00000000, 0x00800002,
 142         0x00000002, 0x00800042, 0x00801042, 0x00001002,
 143         0x00801000, 0x00000040, 0x00000042, 0x00801040,
 144         0x00801040, 0x00800042, 0x00001002, 0x00801000,
 145         0x00001000, 0x00000002, 0x00800002, 0x00800040,
 146         0x00800000, 0x00001040, 0x00801042, 0x00000000,
 147         0x00001042, 0x00800000, 0x00000040, 0x00001002,
 148         0x00800042, 0x00000040, 0x00000000, 0x00801042,
 149         0x00801002, 0x00801040, 0x00000042, 0x00001000,
 150         0x00001040, 0x00801002, 0x00800040, 0x00000042,
 151         0x00000002, 0x00001042, 0x00801000, 0x00800002,
 152
 153         0x10400000, 0x00404010, 0x00000010, 0x10400010,
 154         0x10004000, 0x00400000, 0x10400010, 0x00004010,
 155         0x00400010, 0x00004000, 0x00404000, 0x10000000,
 156         0x10404010, 0x10000010, 0x10000000, 0x10404000,
 157         0x00000000, 0x10004000, 0x00404010, 0x00000010,
 158         0x10000010, 0x10404010, 0x00004000, 0x10400000,
 159         0x10404000, 0x00400010, 0x10004010, 0x00404000,
 160         0x00004010, 0x00000000, 0x00400000, 0x10004010,
 161         0x00404010, 0x00000010, 0x10000000, 0x00004000,
 162         0x10000010, 0x10004000, 0x00404000, 0x10400010,
 163         0x00000000, 0x00404010, 0x00004010, 0x10404000,
 164         0x10004000, 0x00400000, 0x10404010, 0x10000000,
 165         0x10004010, 0x10400000, 0x00400000, 0x10404010,
 166         0x00004000, 0x00400010, 0x10400010, 0x00004010,
 167         0x00400010, 0x00000000, 0x10404000, 0x10000010,
 168         0x10400000, 0x10004010, 0x00000010, 0x00404000,
 169
 170         0x00208080, 0x00008000, 0x20200000, 0x20208080,
 171         0x00200000, 0x20008080, 0x20008000, 0x20200000,
 172         0x20008080, 0x00208080, 0x00208000, 0x20000080,
 173         0x20200080, 0x00200000, 0x00000000, 0x20008000,
 174         0x00008000, 0x20000000, 0x00200080, 0x00008080,
 175         0x20208080, 0x00208000, 0x20000080, 0x00200080,
 176         0x20000000, 0x00000080, 0x00008080, 0x20208000,
 177         0x00000080, 0x20200080, 0x20208000, 0x00000000,
 178         0x00000000, 0x20208080, 0x00200080, 0x20008000,
 179         0x00208080, 0x00008000, 0x20000080, 0x00200080,
 180         0x20208000, 0x00000080, 0x00008080, 0x20200000,
 181         0x20008080, 0x20000000, 0x20200000, 0x00208000,
 182         0x20208080, 0x00008080, 0x00208000, 0x20200080,
 183         0x00200000, 0x20000080, 0x20008000, 0x00000000,
 184         0x00008000, 0x00200000, 0x20200080, 0x00208080,
 185         0x20000000, 0x20208000, 0x00000080, 0x20008080,
 186 };
 187
 188 static const u8 rotors[] = {
 189         34, 13,  5, 46, 47, 18, 32, 41, 11, 53, 33, 20,
 190         14, 36, 30, 24, 49,  2, 15, 37, 42, 50,  0, 21,
 191         38, 48,  6, 26, 39,  4, 52, 25, 12, 27, 31, 40,
 192         1, 17, 28, 29, 23, 51, 35,  7,  3, 22,  9, 43,
 193
 194         41, 20, 12, 53, 54, 25, 39, 48, 18, 31, 40, 27,
 195         21, 43, 37,  0,  1,  9, 22, 44, 49,  2,  7, 28,
 196         45, 55, 13, 33, 46, 11,  6, 32, 19, 34, 38, 47,
 197         8, 24, 35, 36, 30,  3, 42, 14, 10, 29, 16, 50,
 198
 199         55, 34, 26, 38, 11, 39, 53,  5, 32, 45, 54, 41,
 200         35,  2, 51, 14, 15, 23, 36,  3,  8, 16, 21, 42,
 201         6, 12, 27, 47, 31, 25, 20, 46, 33, 48, 52,  4,
 202         22,  7, 49, 50, 44, 17,  1, 28, 24, 43, 30,  9,
 203
 204         12, 48, 40, 52, 25, 53, 38, 19, 46,  6, 11, 55,
 205         49, 16, 10, 28, 29, 37, 50, 17, 22, 30, 35,  1,
 206         20, 26, 41,  4, 45, 39, 34, 31, 47,  5, 13, 18,
 207         36, 21,  8,  9,  3,  0, 15, 42,  7,  2, 44, 23,
 208
 209         26,  5, 54, 13, 39, 38, 52, 33, 31, 20, 25, 12,
 210         8, 30, 24, 42, 43, 51,  9,  0, 36, 44, 49, 15,
 211         34, 40, 55, 18,  6, 53, 48, 45,  4, 19, 27, 32,
 212         50, 35, 22, 23, 17, 14, 29,  1, 21, 16,  3, 37,
 213
 214         40, 19, 11, 27, 53, 52, 13, 47, 45, 34, 39, 26,
 215         22, 44,  7,  1,  2, 10, 23, 14, 50,  3,  8, 29,
 216         48, 54, 12, 32, 20, 38,  5,  6, 18, 33, 41, 46,
 217         9, 49, 36, 37,  0, 28, 43, 15, 35, 30, 17, 51,
 218
 219         54, 33, 25, 41, 38, 13, 27,  4,  6, 48, 53, 40,
 220         36,  3, 21, 15, 16, 24, 37, 28,  9, 17, 22, 43,
 221         5, 11, 26, 46, 34, 52, 19, 20, 32, 47, 55, 31,
 222         23,  8, 50, 51, 14, 42,  2, 29, 49, 44,  0, 10,
 223
 224         11, 47, 39, 55, 52, 27, 41, 18, 20,  5, 38, 54,
 225         50, 17, 35, 29, 30,  7, 51, 42, 23,  0, 36,  2,
 226         19, 25, 40, 31, 48, 13, 33, 34, 46,  4, 12, 45,
 227         37, 22,  9, 10, 28,  1, 16, 43,  8,  3, 14, 24,
 228
 229         18, 54, 46,  5,  6, 34, 48, 25, 27, 12, 45,  4,
 230         2, 24, 42, 36, 37, 14,  3, 49, 30,  7, 43,  9,
 231         26, 32, 47, 38, 55, 20, 40, 41, 53, 11, 19, 52,
 232         44, 29, 16, 17, 35,  8, 23, 50, 15, 10, 21,  0,
 233
 234         32, 11, 31, 19, 20, 48,  5, 39, 41, 26,  6, 18,
 235         16,  7,  1, 50, 51, 28, 17,  8, 44, 21,  2, 23,
 236         40, 46,  4, 52, 12, 34, 54, 55, 38, 25, 33, 13,
 237         3, 43, 30,  0, 49, 22, 37,  9, 29, 24, 35, 14,
 238
 239         46, 25, 45, 33, 34,  5, 19, 53, 55, 40, 20, 32,
 240         30, 21, 15,  9, 10, 42,  0, 22,  3, 35, 16, 37,
 241         54, 31, 18, 13, 26, 48, 11, 12, 52, 39, 47, 27,
 242         17,  2, 44, 14,  8, 36, 51, 23, 43,  7, 49, 28,
 243
 244         31, 39,  6, 47, 48, 19, 33, 38, 12, 54, 34, 46,
 245         44, 35, 29, 23, 24,  1, 14, 36, 17, 49, 30, 51,
 246         11, 45, 32, 27, 40,  5, 25, 26, 13, 53,  4, 41,
 247         0, 16,  3, 28, 22, 50, 10, 37,  2, 21,  8, 42,
 248
 249         45, 53, 20,  4,  5, 33, 47, 52, 26, 11, 48, 31,
 250         3, 49, 43, 37,  7, 15, 28, 50,  0,  8, 44, 10,
 251         25,  6, 46, 41, 54, 19, 39, 40, 27, 38, 18, 55,
 252         14, 30, 17, 42, 36,  9, 24, 51, 16, 35, 22,  1,
 253
 254         6, 38, 34, 18, 19, 47,  4, 13, 40, 25,  5, 45,
 255         17,  8,  2, 51, 21, 29, 42,  9, 14, 22,  3, 24,
 256         39, 20, 31, 55, 11, 33, 53, 54, 41, 52, 32, 12,
 257         28, 44,  0,  1, 50, 23,  7, 10, 30, 49, 36, 15,
 258
 259         20, 52, 48, 32, 33,  4, 18, 27, 54, 39, 19,  6,
 260         0, 22, 16, 10, 35, 43,  1, 23, 28, 36, 17,  7,
 261         53, 34, 45, 12, 25, 47, 38, 11, 55, 13, 46, 26,
 262         42,  3, 14, 15,  9, 37, 21, 24, 44,  8, 50, 29,
 263
 264         27,  6, 55, 39, 40, 11, 25, 34,  4, 46, 26, 13,
 265         7, 29, 23, 17, 42, 50,  8, 30, 35, 43, 24, 14,
 266         31, 41, 52, 19, 32, 54, 45, 18,  5, 20, 53, 33,
 267         49, 10, 21, 22, 16, 44, 28,  0, 51, 15,  2, 36,
 268 };
 269
 270 static const u8 parity[] = {
 271         8,1,0,8,0,8,8,0,0,8,8,0,8,0,2,8,0,8,8,0,8,0,0,8,8,0,0,8,0,8,8,3,
 272         0,8,8,0,8,0,0,8,8,0,0,8,0,8,8,0,8,0,0,8,0,8,8,0,0,8,8,0,8,0,0,8,
 273         0,8,8,0,8,0,0,8,8,0,0,8,0,8,8,0,8,0,0,8,0,8,8,0,0,8,8,0,8,0,0,8,
 274         8,0,0,8,0,8,8,0,0,8,8,0,8,0,0,8,0,8,8,0,8,0,0,8,8,0,0,8,0,8,8,0,
 275         0,8,8,0,8,0,0,8,8,0,0,8,0,8,8,0,8,0,0,8,0,8,8,0,0,8,8,0,8,0,0,8,
 276         8,0,0,8,0,8,8,0,0,8,8,0,8,0,0,8,0,8,8,0,8,0,0,8,8,0,0,8,0,8,8,0,
 277         8,0,0,8,0,8,8,0,0,8,8,0,8,0,0,8,0,8,8,0,8,0,0,8,8,0,0,8,0,8,8,0,
 278         4,8,8,0,8,0,0,8,8,0,0,8,0,8,8,0,8,5,0,8,0,8,8,0,0,8,8,0,8,0,6,8,
 279 };
 280
 281
 282 static void des_small_fips_encrypt(u32 *expkey, u8 *dst, const u8 *src)
 283 {
 284         u32 x, y, z;
 285
 286         x  = src[7];
 287         x <<= 8;
 288         x |= src[6];
 289         x <<= 8;
 290         x |= src[5];
 291         x <<= 8;
 292         x |= src[4];
 293         y  = src[3];
 294         y <<= 8;
 295         y |= src[2];
 296         y <<= 8;
 297         y |= src[1];
 298         y <<= 8;
 299         y |= src[0];
 300         z  = ((x >> 004) ^ y) & 0x0F0F0F0FL;
 301         x ^= z << 004;
 302         y ^= z;
 303         z  = ((y >> 020) ^ x) & 0x0000FFFFL;
 304         y ^= z << 020;
 305         x ^= z;
 306         z  = ((x >> 002) ^ y) & 0x33333333L;
 307         x ^= z << 002;
 308         y ^= z;
 309         z  = ((y >> 010) ^ x) & 0x00FF00FFL;
 310         y ^= z << 010;
 311         x ^= z;
 312         x  = x >> 1 | x << 31;
 313         z  = (x ^ y) & 0x55555555L;
 314         y ^= z;
 315         x ^= z;
 316         y  = y >> 1 | y << 31;
 317         z  = expkey[0];
 318         z ^= y;
 319         x ^= * (u32 *) ((u8 *) (des_keymap + 192) + (0xFC & z));
 320         z >>= 8;
 321         x ^= * (u32 *) ((u8 *) (des_keymap + 128) + (0xFC & z));
 322         z >>= 8;
 323         x ^= * (u32 *) ((u8 *) (des_keymap + 64) + (0xFC & z));
 324         z >>= 8;
 325         x ^= * (u32 *) ((u8 *) des_keymap + (0xFC & z));
 326         z  = expkey[1];
 327         z ^= y;
 328         z  = z << 4 | z >> 28;
 329         x ^= * (u32 *) ((u8 *) (des_keymap + 448) + (0xFC & z));
 330         z >>= 8;
 331         x ^= * (u32 *) ((u8 *) (des_keymap + 384) + (0xFC & z));
 332         z >>= 8;
 333         x ^= * (u32 *) ((u8 *) (des_keymap + 320) + (0xFC & z));
 334         z >>= 8;
 335         x ^= * (u32 *) ((u8 *) (des_keymap + 256) + (0xFC & z));
 336         z  = expkey[2];
 337         z ^= x;
 338         y ^= * (u32 *) ((u8 *) (des_keymap + 192) + (0xFC & z));
 339         z >>= 8;
 340         y ^= * (u32 *) ((u8 *) (des_keymap + 128) + (0xFC & z));
 341         z >>= 8;
 342         y ^= * (u32 *) ((u8 *) (des_keymap + 64) + (0xFC & z));
 343         z >>= 8;
 344         y ^= * (u32 *) ((u8 *) des_keymap + (0xFC & z));
 345         z  = expkey[3];
 346         z ^= x;
 347         z  = z << 4 | z >> 28;
 348         y ^= * (u32 *) ((u8 *) (des_keymap + 448) + (0xFC & z));
 349         z >>= 8;
 350         y ^= * (u32 *) ((u8 *) (des_keymap + 384) + (0xFC & z));
 351         z >>= 8;
 352         y ^= * (u32 *) ((u8 *) (des_keymap + 320) + (0xFC & z));
 353         z >>= 8;
 354         y ^= * (u32 *) ((u8 *) (des_keymap + 256) + (0xFC & z));
 355         z  = expkey[4];
 356         z ^= y;
 357         x ^= * (u32 *) ((u8 *) (des_keymap + 192) + (0xFC & z));
 358         z >>= 8;
 359         x ^= * (u32 *) ((u8 *) (des_keymap + 128) + (0xFC & z));
 360         z >>= 8;
 361         x ^= * (u32 *) ((u8 *) (des_keymap + 64) + (0xFC & z));
 362         z >>= 8;
 363         x ^= * (u32 *) ((u8 *) des_keymap + (0xFC & z));
 364         z  = expkey[5];
 365         z ^= y;
 366         z  = z << 4 | z >> 28;
 367         x ^= * (u32 *) ((u8 *) (des_keymap + 448) + (0xFC & z));
 368         z >>= 8;
 369         x ^= * (u32 *) ((u8 *) (des_keymap + 384) + (0xFC & z));
 370         z >>= 8;
 371         x ^= * (u32 *) ((u8 *) (des_keymap + 320) + (0xFC & z));
 372         z >>= 8;
 373         x ^= * (u32 *) ((u8 *) (des_keymap + 256) + (0xFC & z));
 374         z  = expkey[6];
 375         z ^= x;
 376         y ^= * (u32 *) ((u8 *) (des_keymap + 192) + (0xFC & z));
 377         z >>= 8;
 378         y ^= * (u32 *) ((u8 *) (des_keymap + 128) + (0xFC & z));
 379         z >>= 8;
 380         y ^= * (u32 *) ((u8 *) (des_keymap + 64) + (0xFC & z));
 381         z >>= 8;
 382         y ^= * (u32 *) ((u8 *) des_keymap + (0xFC & z));
 383         z  = expkey[7];
 384         z ^= x;
 385         z  = z << 4 | z >> 28;
 386         y ^= * (u32 *) ((u8 *) (des_keymap + 448) + (0xFC & z));
 387         z >>= 8;
 388         y ^= * (u32 *) ((u8 *) (des_keymap + 384) + (0xFC & z));
 389         z >>= 8;
 390         y ^= * (u32 *) ((u8 *) (des_keymap + 320) + (0xFC & z));
 391         z >>= 8;
 392         y ^= * (u32 *) ((u8 *) (des_keymap + 256) + (0xFC & z));
 393         z  = expkey[8];
 394         z ^= y;
 395         x ^= * (u32 *) ((u8 *) (des_keymap + 192) + (0xFC & z));
 396         z >>= 8;
 397         x ^= * (u32 *) ((u8 *) (des_keymap + 128) + (0xFC & z));
 398         z >>= 8;
 399         x ^= * (u32 *) ((u8 *) (des_keymap + 64) + (0xFC & z));
 400         z >>= 8;
 401         x ^= * (u32 *) ((u8 *) des_keymap + (0xFC & z));
 402         z  = expkey[9];
 403         z ^= y;
 404         z  = z << 4 | z >> 28;
 405         x ^= * (u32 *) ((u8 *) (des_keymap + 448) + (0xFC & z));
 406         z >>= 8;
 407         x ^= * (u32 *) ((u8 *) (des_keymap + 384) + (0xFC & z));
 408         z >>= 8;
 409         x ^= * (u32 *) ((u8 *) (des_keymap + 320) + (0xFC & z));
 410         z >>= 8;
 411         x ^= * (u32 *) ((u8 *) (des_keymap + 256) + (0xFC & z));
 412         z  = expkey[10];
 413         z ^= x;
 414         y ^= * (u32 *) ((u8 *) (des_keymap + 192) + (0xFC & z));
 415         z >>= 8;
 416         y ^= * (u32 *) ((u8 *) (des_keymap + 128) + (0xFC & z));
 417         z >>= 8;
 418         y ^= * (u32 *) ((u8 *) (des_keymap + 64) + (0xFC & z));
 419         z >>= 8;
 420         y ^= * (u32 *) ((u8 *) des_keymap + (0xFC & z));
 421         z  = expkey[11];
 422         z ^= x;
 423         z  = z << 4 | z >> 28;
 424         y ^= * (u32 *) ((u8 *) (des_keymap + 448) + (0xFC & z));
 425         z >>= 8;
 426         y ^= * (u32 *) ((u8 *) (des_keymap + 384) + (0xFC & z));
 427         z >>= 8;
 428         y ^= * (u32 *) ((u8 *) (des_keymap + 320) + (0xFC & z));
 429         z >>= 8;
 430         y ^= * (u32 *) ((u8 *) (des_keymap + 256) + (0xFC & z));
 431         z  = expkey[12];
 432         z ^= y;
 433         x ^= * (u32 *) ((u8 *) (des_keymap + 192) + (0xFC & z));
 434         z >>= 8;
 435         x ^= * (u32 *) ((u8 *) (des_keymap + 128) + (0xFC & z));
 436         z >>= 8;
 437         x ^= * (u32 *) ((u8 *) (des_keymap + 64) + (0xFC & z));
 438         z >>= 8;
 439         x ^= * (u32 *) ((u8 *) des_keymap + (0xFC & z));
 440         z  = expkey[13];
 441         z ^= y;
 442         z  = z << 4 | z >> 28;
 443         x ^= * (u32 *) ((u8 *) (des_keymap + 448) + (0xFC & z));
 444         z >>= 8;
 445         x ^= * (u32 *) ((u8 *) (des_keymap + 384) + (0xFC & z));
 446         z >>= 8;
 447         x ^= * (u32 *) ((u8 *) (des_keymap + 320) + (0xFC & z));
 448         z >>= 8;
 449         x ^= * (u32 *) ((u8 *) (des_keymap + 256) + (0xFC & z));
 450         z  = expkey[14];
 451         z ^= x;
 452         y ^= * (u32 *) ((u8 *) (des_keymap + 192) + (0xFC & z));
 453         z >>= 8;
 454         y ^= * (u32 *) ((u8 *) (des_keymap + 128) + (0xFC & z));
 455         z >>= 8;
 456         y ^= * (u32 *) ((u8 *) (des_keymap + 64) + (0xFC & z));
 457         z >>= 8;
 458         y ^= * (u32 *) ((u8 *) des_keymap + (0xFC & z));
 459         z  = expkey[15];
 460         z ^= x;
 461         z  = z << 4 | z >> 28;
 462         y ^= * (u32 *) ((u8 *) (des_keymap + 448) + (0xFC & z));
 463         z >>= 8;
 464         y ^= * (u32 *) ((u8 *) (des_keymap + 384) + (0xFC & z));
 465         z >>= 8;
 466         y ^= * (u32 *) ((u8 *) (des_keymap + 320) + (0xFC & z));
 467         z >>= 8;
 468         y ^= * (u32 *) ((u8 *) (des_keymap + 256) + (0xFC & z));
 469         z  = expkey[16];
 470         z ^= y;
 471         x ^= * (u32 *) ((u8 *) (des_keymap + 192) + (0xFC & z));
 472         z >>= 8;
 473         x ^= * (u32 *) ((u8 *) (des_keymap + 128) + (0xFC & z));
 474         z >>= 8;
 475         x ^= * (u32 *) ((u8 *) (des_keymap + 64) + (0xFC & z));
 476         z >>= 8;
 477         x ^= * (u32 *) ((u8 *) des_keymap + (0xFC & z));
 478         z  = expkey[17];
 479         z ^= y;
 480         z  = z << 4 | z >> 28;
 481         x ^= * (u32 *) ((u8 *) (des_keymap + 448) + (0xFC & z));
 482         z >>= 8;
 483         x ^= * (u32 *) ((u8 *) (des_keymap + 384) + (0xFC & z));
 484         z >>= 8;
 485         x ^= * (u32 *) ((u8 *) (des_keymap + 320) + (0xFC & z));
 486         z >>= 8;
 487         x ^= * (u32 *) ((u8 *) (des_keymap + 256) + (0xFC & z));
 488         z  = expkey[18];
 489         z ^= x;
 490         y ^= * (u32 *) ((u8 *) (des_keymap + 192) + (0xFC & z));
 491         z >>= 8;
 492         y ^= * (u32 *) ((u8 *) (des_keymap + 128) + (0xFC & z));
 493         z >>= 8;
 494         y ^= * (u32 *) ((u8 *) (des_keymap + 64) + (0xFC & z));
 495         z >>= 8;
 496         y ^= * (u32 *) ((u8 *) des_keymap + (0xFC & z));
 497         z  = expkey[19];
 498         z ^= x;
 499         z  = z << 4 | z >> 28;
 500         y ^= * (u32 *) ((u8 *) (des_keymap + 448) + (0xFC & z));
 501         z >>= 8;
 502         y ^= * (u32 *) ((u8 *) (des_keymap + 384) + (0xFC & z));
 503         z >>= 8;
 504         y ^= * (u32 *) ((u8 *) (des_keymap + 320) + (0xFC & z));
 505         z >>= 8;
 506         y ^= * (u32 *) ((u8 *) (des_keymap + 256) + (0xFC & z));
 507         z  = expkey[20];
 508         z ^= y;
 509         x ^= * (u32 *) ((u8 *) (des_keymap + 192) + (0xFC & z));
 510         z >>= 8;
 511         x ^= * (u32 *) ((u8 *) (des_keymap + 128) + (0xFC & z));
 512         z >>= 8;
 513         x ^= * (u32 *) ((u8 *) (des_keymap + 64) + (0xFC & z));
 514         z >>= 8;
 515         x ^= * (u32 *) ((u8 *) des_keymap + (0xFC & z));
 516         z  = expkey[21];
 517         z ^= y;
 518         z  = z << 4 | z >> 28;
 519         x ^= * (u32 *) ((u8 *) (des_keymap + 448) + (0xFC & z));
 520         z >>= 8;
 521         x ^= * (u32 *) ((u8 *) (des_keymap + 384) + (0xFC & z));
 522         z >>= 8;
 523         x ^= * (u32 *) ((u8 *) (des_keymap + 320) + (0xFC & z));
 524         z >>= 8;
 525         x ^= * (u32 *) ((u8 *) (des_keymap + 256) + (0xFC & z));
 526         z  = expkey[22];
 527         z ^= x;
 528         y ^= * (u32 *) ((u8 *) (des_keymap + 192) + (0xFC & z));
 529         z >>= 8;
 530         y ^= * (u32 *) ((u8 *) (des_keymap + 128) + (0xFC & z));
 531         z >>= 8;
 532         y ^= * (u32 *) ((u8 *) (des_keymap + 64) + (0xFC & z));
 533         z >>= 8;
 534         y ^= * (u32 *) ((u8 *) des_keymap + (0xFC & z));
 535         z  = expkey[23];
 536         z ^= x;
 537         z  = z << 4 | z >> 28;
 538         y ^= * (u32 *) ((u8 *) (des_keymap + 448) + (0xFC & z));
 539         z >>= 8;
 540         y ^= * (u32 *) ((u8 *) (des_keymap + 384) + (0xFC & z));
 541         z >>= 8;
 542         y ^= * (u32 *) ((u8 *) (des_keymap + 320) + (0xFC & z));
 543         z >>= 8;
 544         y ^= * (u32 *) ((u8 *) (des_keymap + 256) + (0xFC & z));
 545         z  = expkey[24];
 546         z ^= y;
 547         x ^= * (u32 *) ((u8 *) (des_keymap + 192) + (0xFC & z));
 548         z >>= 8;
 549         x ^= * (u32 *) ((u8 *) (des_keymap + 128) + (0xFC & z));
 550         z >>= 8;
 551         x ^= * (u32 *) ((u8 *) (des_keymap + 64) + (0xFC & z));
 552         z >>= 8;
 553         x ^= * (u32 *) ((u8 *) des_keymap + (0xFC & z));
 554         z  = expkey[25];
 555         z ^= y;
 556         z  = z << 4 | z >> 28;
 557         x ^= * (u32 *) ((u8 *) (des_keymap + 448) + (0xFC & z));
 558         z >>= 8;
 559         x ^= * (u32 *) ((u8 *) (des_keymap + 384) + (0xFC & z));
 560         z >>= 8;
 561         x ^= * (u32 *) ((u8 *) (des_keymap + 320) + (0xFC & z));
 562         z >>= 8;
 563         x ^= * (u32 *) ((u8 *) (des_keymap + 256) + (0xFC & z));
 564         z  = expkey[26];
 565         z ^= x;
 566         y ^= * (u32 *) ((u8 *) (des_keymap + 192) + (0xFC & z));
 567         z >>= 8;
 568         y ^= * (u32 *) ((u8 *) (des_keymap + 128) + (0xFC & z));
 569         z >>= 8;
 570         y ^= * (u32 *) ((u8 *) (des_keymap + 64) + (0xFC & z));
 571         z >>= 8;
 572         y ^= * (u32 *) ((u8 *) des_keymap + (0xFC & z));
 573         z  = expkey[27];
 574         z ^= x;
 575         z  = z << 4 | z >> 28;
 576         y ^= * (u32 *) ((u8 *) (des_keymap + 448) + (0xFC & z));
 577         z >>= 8;
 578         y ^= * (u32 *) ((u8 *) (des_keymap + 384) + (0xFC & z));
 579         z >>= 8;
 580         y ^= * (u32 *) ((u8 *) (des_keymap + 320) + (0xFC & z));
 581         z >>= 8;
 582         y ^= * (u32 *) ((u8 *) (des_keymap + 256) + (0xFC & z));
 583         z  = expkey[28];
 584         z ^= y;
 585         x ^= * (u32 *) ((u8 *) (des_keymap + 192) + (0xFC & z));
 586         z >>= 8;
 587         x ^= * (u32 *) ((u8 *) (des_keymap + 128) + (0xFC & z));
 588         z >>= 8;
 589         x ^= * (u32 *) ((u8 *) (des_keymap + 64) + (0xFC & z));
 590         z >>= 8;
 591         x ^= * (u32 *) ((u8 *) des_keymap + (0xFC & z));
 592         z  = expkey[29];
 593         z ^= y;
 594         z  = z << 4 | z >> 28;
 595         x ^= * (u32 *) ((u8 *) (des_keymap + 448) + (0xFC & z));
 596         z >>= 8;
 597         x ^= * (u32 *) ((u8 *) (des_keymap + 384) + (0xFC & z));
 598         z >>= 8;
 599         x ^= * (u32 *) ((u8 *) (des_keymap + 320) + (0xFC & z));
 600         z >>= 8;
 601         x ^= * (u32 *) ((u8 *) (des_keymap + 256) + (0xFC & z));
 602         z  = expkey[30];
 603         z ^= x;
 604         y ^= * (u32 *) ((u8 *) (des_keymap + 192) + (0xFC & z));
 605         z >>= 8;
 606         y ^= * (u32 *) ((u8 *) (des_keymap + 128) + (0xFC & z));
 607         z >>= 8;
 608         y ^= * (u32 *) ((u8 *) (des_keymap + 64) + (0xFC & z));
 609         z >>= 8;
 610         y ^= * (u32 *) ((u8 *) des_keymap + (0xFC & z));
 611         z  = expkey[31];
 612         z ^= x;
 613         z  = z << 4 | z >> 28;
 614         y ^= * (u32 *) ((u8 *) (des_keymap + 448) + (0xFC & z));
 615         z >>= 8;
 616         y ^= * (u32 *) ((u8 *) (des_keymap + 384) + (0xFC & z));
 617         z >>= 8;
 618         y ^= * (u32 *) ((u8 *) (des_keymap + 320) + (0xFC & z));
 619         z >>= 8;
 620         y ^= * (u32 *) ((u8 *) (des_keymap + 256) + (0xFC & z));
 621         x  = x << 1 | x >> 31;
 622         z  = (x ^ y) & 0x55555555L;
 623         y ^= z;
 624         x ^= z;
 625         y  = y << 1 | y >> 31;
 626         z  = ((x >> 010) ^ y) & 0x00FF00FFL;
 627         x ^= z << 010;
 628         y ^= z;
 629         z  = ((y >> 002) ^ x) & 0x33333333L;
 630         y ^= z << 002;
 631         x ^= z;
 632         z  = ((x >> 020) ^ y) & 0x0000FFFFL;
 633         x ^= z << 020;
 634         y ^= z;
 635         z  = ((y >> 004) ^ x) & 0x0F0F0F0FL;
 636         y ^= z << 004;
 637         x ^= z;
 638         dst[0] = x;
 639         x >>= 8;
 640         dst[1] = x;
 641         x >>= 8;
 642         dst[2] = x;
 643         x >>= 8;
 644         dst[3] = x;
 645         dst[4] = y;
 646         y >>= 8;
 647         dst[5] = y;
 648         y >>= 8;
 649         dst[6] = y;
 650         y >>= 8;
 651         dst[7] = y;
 652 }
 653
 654 static void des_small_fips_decrypt(u32 *expkey, u8 *dst, const u8 *src)
 655 {
 656         u32 x, y, z;
 657
 658         x  = src[7];
 659         x <<= 8;
 660         x |= src[6];
 661         x <<= 8;
 662         x |= src[5];
 663         x <<= 8;
 664         x |= src[4];
 665         y  = src[3];
 666         y <<= 8;
 667         y |= src[2];
 668         y <<= 8;
 669         y |= src[1];
 670         y <<= 8;
 671         y |= src[0];
 672         z  = ((x >> 004) ^ y) & 0x0F0F0F0FL;
 673         x ^= z << 004;
 674         y ^= z;
 675         z  = ((y >> 020) ^ x) & 0x0000FFFFL;
 676         y ^= z << 020;
 677         x ^= z;
 678         z  = ((x >> 002) ^ y) & 0x33333333L;
 679         x ^= z << 002;
 680         y ^= z;
 681         z  = ((y >> 010) ^ x) & 0x00FF00FFL;
 682         y ^= z << 010;
 683         x ^= z;
 684         x  = x >> 1 | x << 31;
 685         z  = (x ^ y) & 0x55555555L;
 686         y ^= z;
 687         x ^= z;
 688         y  = y >> 1 | y << 31;
 689         z  = expkey[31];
 690         z ^= y;
 691         z  = z << 4 | z >> 28;
 692         x ^= * (u32 *) ((u8 *) (des_keymap + 448) + (0xFC & z));
 693         z >>= 8;
 694         x ^= * (u32 *) ((u8 *) (des_keymap + 384) + (0xFC & z));
 695         z >>= 8;
 696         x ^= * (u32 *) ((u8 *) (des_keymap + 320) + (0xFC & z));
 697         z >>= 8;
 698         x ^= * (u32 *) ((u8 *) (des_keymap + 256) + (0xFC & z));
 699         z  = expkey[30];
 700         z ^= y;
 701         x ^= * (u32 *) ((u8 *) (des_keymap + 192) + (0xFC & z));
 702         z >>= 8;
 703         x ^= * (u32 *) ((u8 *) (des_keymap + 128) + (0xFC & z));
 704         z >>= 8;
 705         x ^= * (u32 *) ((u8 *) (des_keymap + 64) + (0xFC & z));
 706         z >>= 8;
 707         x ^= * (u32 *) ((u8 *) des_keymap + (0xFC & z));
 708         z  = expkey[29];
 709         z ^= x;
 710         z  = z << 4 | z >> 28;
 711         y ^= * (u32 *) ((u8 *) (des_keymap + 448) + (0xFC & z));
 712         z >>= 8;
 713         y ^= * (u32 *) ((u8 *) (des_keymap + 384) + (0xFC & z));
 714         z >>= 8;
 715         y ^= * (u32 *) ((u8 *) (des_keymap + 320) + (0xFC & z));
 716         z >>= 8;
 717         y ^= * (u32 *) ((u8 *) (des_keymap + 256) + (0xFC & z));
 718         z  = expkey[28];
 719         z ^= x;
 720         y ^= * (u32 *) ((u8 *) (des_keymap + 192) + (0xFC & z));
 721         z >>= 8;
 722         y ^= * (u32 *) ((u8 *) (des_keymap + 128) + (0xFC & z));
 723         z >>= 8;
 724         y ^= * (u32 *) ((u8 *) (des_keymap + 64) + (0xFC & z));
 725         z >>= 8;
 726         y ^= * (u32 *) ((u8 *) des_keymap + (0xFC & z));
 727         z  = expkey[27];
 728         z ^= y;
 729         z  = z << 4 | z >> 28;
 730         x ^= * (u32 *) ((u8 *) (des_keymap + 448) + (0xFC & z));
 731         z >>= 8;
 732         x ^= * (u32 *) ((u8 *) (des_keymap + 384) + (0xFC & z));
 733         z >>= 8;
 734         x ^= * (u32 *) ((u8 *) (des_keymap + 320) + (0xFC & z));
 735         z >>= 8;
 736         x ^= * (u32 *) ((u8 *) (des_keymap + 256) + (0xFC & z));
 737         z  = expkey[26];
 738         z ^= y;
 739         x ^= * (u32 *) ((u8 *) (des_keymap + 192) + (0xFC & z));
 740         z >>= 8;
 741         x ^= * (u32 *) ((u8 *) (des_keymap + 128) + (0xFC & z));
 742         z >>= 8;
 743         x ^= * (u32 *) ((u8 *) (des_keymap + 64) + (0xFC & z));
 744         z >>= 8;
 745         x ^= * (u32 *) ((u8 *) des_keymap + (0xFC & z));
 746         z  = expkey[25];
 747         z ^= x;
 748         z  = z << 4 | z >> 28;
 749         y ^= * (u32 *) ((u8 *) (des_keymap + 448) + (0xFC & z));
 750         z >>= 8;
 751         y ^= * (u32 *) ((u8 *) (des_keymap + 384) + (0xFC & z));
 752         z >>= 8;
 753         y ^= * (u32 *) ((u8 *) (des_keymap + 320) + (0xFC & z));
 754         z >>= 8;
 755         y ^= * (u32 *) ((u8 *) (des_keymap + 256) + (0xFC & z));
 756         z  = expkey[24];
 757         z ^= x;
 758         y ^= * (u32 *) ((u8 *) (des_keymap + 192) + (0xFC & z));
 759         z >>= 8;
 760         y ^= * (u32 *) ((u8 *) (des_keymap + 128) + (0xFC & z));
 761         z >>= 8;
 762         y ^= * (u32 *) ((u8 *) (des_keymap + 64) + (0xFC & z));
 763         z >>= 8;
 764         y ^= * (u32 *) ((u8 *) des_keymap + (0xFC & z));
 765         z  = expkey[23];
 766         z ^= y;
 767         z  = z << 4 | z >> 28;
 768         x ^= * (u32 *) ((u8 *) (des_keymap + 448) + (0xFC & z));
 769         z >>= 8;
 770         x ^= * (u32 *) ((u8 *) (des_keymap + 384) + (0xFC & z));
 771         z >>= 8;
 772         x ^= * (u32 *) ((u8 *) (des_keymap + 320) + (0xFC & z));
 773         z >>= 8;
 774         x ^= * (u32 *) ((u8 *) (des_keymap + 256) + (0xFC & z));
 775         z  = expkey[22];
 776         z ^= y;
 777         x ^= * (u32 *) ((u8 *) (des_keymap + 192) + (0xFC & z));
 778         z >>= 8;
 779         x ^= * (u32 *) ((u8 *) (des_keymap + 128) + (0xFC & z));
 780         z >>= 8;
 781         x ^= * (u32 *) ((u8 *) (des_keymap + 64) + (0xFC & z));
 782         z >>= 8;
 783         x ^= * (u32 *) ((u8 *) des_keymap + (0xFC & z));
 784         z  = expkey[21];
 785         z ^= x;
 786         z  = z << 4 | z >> 28;
 787         y ^= * (u32 *) ((u8 *) (des_keymap + 448) + (0xFC & z));
 788         z >>= 8;
 789         y ^= * (u32 *) ((u8 *) (des_keymap + 384) + (0xFC & z));
 790         z >>= 8;
 791         y ^= * (u32 *) ((u8 *) (des_keymap + 320) + (0xFC & z));
 792         z >>= 8;
 793         y ^= * (u32 *) ((u8 *) (des_keymap + 256) + (0xFC & z));
 794         z  = expkey[20];
 795         z ^= x;
 796         y ^= * (u32 *) ((u8 *) (des_keymap + 192) + (0xFC & z));
 797         z >>= 8;
 798         y ^= * (u32 *) ((u8 *) (des_keymap + 128) + (0xFC & z));
 799         z >>= 8;
 800         y ^= * (u32 *) ((u8 *) (des_keymap + 64) + (0xFC & z));
 801         z >>= 8;
 802         y ^= * (u32 *) ((u8 *) des_keymap + (0xFC & z));
 803         z  = expkey[19];
 804         z ^= y;
 805         z  = z << 4 | z >> 28;
 806         x ^= * (u32 *) ((u8 *) (des_keymap + 448) + (0xFC & z));
 807         z >>= 8;
 808         x ^= * (u32 *) ((u8 *) (des_keymap + 384) + (0xFC & z));
 809         z >>= 8;
 810         x ^= * (u32 *) ((u8 *) (des_keymap + 320) + (0xFC & z));
 811         z >>= 8;
 812         x ^= * (u32 *) ((u8 *) (des_keymap + 256) + (0xFC & z));
 813         z  = expkey[18];
 814         z ^= y;
 815         x ^= * (u32 *) ((u8 *) (des_keymap + 192) + (0xFC & z));
 816         z >>= 8;
 817         x ^= * (u32 *) ((u8 *) (des_keymap + 128) + (0xFC & z));
 818         z >>= 8;
 819         x ^= * (u32 *) ((u8 *) (des_keymap + 64) + (0xFC & z));
 820         z >>= 8;
 821         x ^= * (u32 *) ((u8 *) des_keymap + (0xFC & z));
 822         z  = expkey[17];
 823         z ^= x;
 824         z  = z << 4 | z >> 28;
 825         y ^= * (u32 *) ((u8 *) (des_keymap + 448) + (0xFC & z));
 826         z >>= 8;
 827         y ^= * (u32 *) ((u8 *) (des_keymap + 384) + (0xFC & z));
 828         z >>= 8;
 829         y ^= * (u32 *) ((u8 *) (des_keymap + 320) + (0xFC & z));
 830         z >>= 8;
 831         y ^= * (u32 *) ((u8 *) (des_keymap + 256) + (0xFC & z));
 832         z  = expkey[16];
 833         z ^= x;
 834         y ^= * (u32 *) ((u8 *) (des_keymap + 192) + (0xFC & z));
 835         z >>= 8;
 836         y ^= * (u32 *) ((u8 *) (des_keymap + 128) + (0xFC & z));
 837         z >>= 8;
 838         y ^= * (u32 *) ((u8 *) (des_keymap + 64) + (0xFC & z));
 839         z >>= 8;
 840         y ^= * (u32 *) ((u8 *) des_keymap + (0xFC & z));
 841         z  = expkey[15];
 842         z ^= y;
 843         z  = z << 4 | z >> 28;
 844         x ^= * (u32 *) ((u8 *) (des_keymap + 448) + (0xFC & z));
 845         z >>= 8;
 846         x ^= * (u32 *) ((u8 *) (des_keymap + 384) + (0xFC & z));
 847         z >>= 8;
 848         x ^= * (u32 *) ((u8 *) (des_keymap + 320) + (0xFC & z));
 849         z >>= 8;
 850         x ^= * (u32 *) ((u8 *) (des_keymap + 256) + (0xFC & z));
 851         z  = expkey[14];
 852         z ^= y;
 853         x ^= * (u32 *) ((u8 *) (des_keymap + 192) + (0xFC & z));
 854         z >>= 8;
 855         x ^= * (u32 *) ((u8 *) (des_keymap + 128) + (0xFC & z));
 856         z >>= 8;
 857         x ^= * (u32 *) ((u8 *) (des_keymap + 64) + (0xFC & z));
 858         z >>= 8;
 859         x ^= * (u32 *) ((u8 *) des_keymap + (0xFC & z));
 860         z  = expkey[13];
 861         z ^= x;
 862         z  = z << 4 | z >> 28;
 863         y ^= * (u32 *) ((u8 *) (des_keymap + 448) + (0xFC & z));
 864         z >>= 8;
 865         y ^= * (u32 *) ((u8 *) (des_keymap + 384) + (0xFC & z));
 866         z >>= 8;
 867         y ^= * (u32 *) ((u8 *) (des_keymap + 320) + (0xFC & z));
 868         z >>= 8;
 869         y ^= * (u32 *) ((u8 *) (des_keymap + 256) + (0xFC & z));
 870         z  = expkey[12];
 871         z ^= x;
 872         y ^= * (u32 *) ((u8 *) (des_keymap + 192) + (0xFC & z));
 873         z >>= 8;
 874         y ^= * (u32 *) ((u8 *) (des_keymap + 128) + (0xFC & z));
 875         z >>= 8;
 876         y ^= * (u32 *) ((u8 *) (des_keymap + 64) + (0xFC & z));
 877         z >>= 8;
 878         y ^= * (u32 *) ((u8 *) des_keymap + (0xFC & z));
 879         z  = expkey[11];
 880         z ^= y;
 881         z  = z << 4 | z >> 28;
 882         x ^= * (u32 *) ((u8 *) (des_keymap + 448) + (0xFC & z));
 883         z >>= 8;
 884         x ^= * (u32 *) ((u8 *) (des_keymap + 384) + (0xFC & z));
 885         z >>= 8;
 886         x ^= * (u32 *) ((u8 *) (des_keymap + 320) + (0xFC & z));
 887         z >>= 8;
 888         x ^= * (u32 *) ((u8 *) (des_keymap + 256) + (0xFC & z));
 889         z  = expkey[10];
 890         z ^= y;
 891         x ^= * (u32 *) ((u8 *) (des_keymap + 192) + (0xFC & z));
 892         z >>= 8;
 893         x ^= * (u32 *) ((u8 *) (des_keymap + 128) + (0xFC & z));
 894         z >>= 8;
 895         x ^= * (u32 *) ((u8 *) (des_keymap + 64) + (0xFC & z));
 896         z >>= 8;
 897         x ^= * (u32 *) ((u8 *) des_keymap + (0xFC & z));
 898         z  = expkey[9];
 899         z ^= x;
 900         z  = z << 4 | z >> 28;
 901         y ^= * (u32 *) ((u8 *) (des_keymap + 448) + (0xFC & z));
 902         z >>= 8;
 903         y ^= * (u32 *) ((u8 *) (des_keymap + 384) + (0xFC & z));
 904         z >>= 8;
 905         y ^= * (u32 *) ((u8 *) (des_keymap + 320) + (0xFC & z));
 906         z >>= 8;
 907         y ^= * (u32 *) ((u8 *) (des_keymap + 256) + (0xFC & z));
 908         z  = expkey[8];
 909         z ^= x;
 910         y ^= * (u32 *) ((u8 *) (des_keymap + 192) + (0xFC & z));
 911         z >>= 8;
 912         y ^= * (u32 *) ((u8 *) (des_keymap + 128) + (0xFC & z));
 913         z >>= 8;
 914         y ^= * (u32 *) ((u8 *) (des_keymap + 64) + (0xFC & z));
 915         z >>= 8;
 916         y ^= * (u32 *) ((u8 *) des_keymap + (0xFC & z));
 917         z  = expkey[7];
 918         z ^= y;
 919         z  = z << 4 | z >> 28;
 920         x ^= * (u32 *) ((u8 *) (des_keymap + 448) + (0xFC & z));
 921         z >>= 8;
 922         x ^= * (u32 *) ((u8 *) (des_keymap + 384) + (0xFC & z));
 923         z >>= 8;
 924         x ^= * (u32 *) ((u8 *) (des_keymap + 320) + (0xFC & z));
 925         z >>= 8;
 926         x ^= * (u32 *) ((u8 *) (des_keymap + 256) + (0xFC & z));
 927         z  = expkey[6];
 928         z ^= y;
 929         x ^= * (u32 *) ((u8 *) (des_keymap + 192) + (0xFC & z));
 930         z >>= 8;
 931         x ^= * (u32 *) ((u8 *) (des_keymap + 128) + (0xFC & z));
 932         z >>= 8;
 933         x ^= * (u32 *) ((u8 *) (des_keymap + 64) + (0xFC & z));
 934         z >>= 8;
 935         x ^= * (u32 *) ((u8 *) des_keymap + (0xFC & z));
 936         z  = expkey[5];
 937         z ^= x;
 938         z  = z << 4 | z >> 28;
 939         y ^= * (u32 *) ((u8 *) (des_keymap + 448) + (0xFC & z));
 940         z >>= 8;
 941         y ^= * (u32 *) ((u8 *) (des_keymap + 384) + (0xFC & z));
 942         z >>= 8;
 943         y ^= * (u32 *) ((u8 *) (des_keymap + 320) + (0xFC & z));
 944         z >>= 8;
 945         y ^= * (u32 *) ((u8 *) (des_keymap + 256) + (0xFC & z));
 946         z  = expkey[4];
 947         z ^= x;
 948         y ^= * (u32 *) ((u8 *) (des_keymap + 192) + (0xFC & z));
 949         z >>= 8;
 950         y ^= * (u32 *) ((u8 *) (des_keymap + 128) + (0xFC & z));
 951         z >>= 8;
 952         y ^= * (u32 *) ((u8 *) (des_keymap + 64) + (0xFC & z));
 953         z >>= 8;
 954         y ^= * (u32 *) ((u8 *) des_keymap + (0xFC & z));
 955         z  = expkey[3];
 956         z ^= y;
 957         z  = z << 4 | z >> 28;
 958         x ^= * (u32 *) ((u8 *) (des_keymap + 448) + (0xFC & z));
 959         z >>= 8;
 960         x ^= * (u32 *) ((u8 *) (des_keymap + 384) + (0xFC & z));
 961         z >>= 8;
 962         x ^= * (u32 *) ((u8 *) (des_keymap + 320) + (0xFC & z));
 963         z >>= 8;
 964         x ^= * (u32 *) ((u8 *) (des_keymap + 256) + (0xFC & z));
 965         z  = expkey[2];
 966         z ^= y;
 967         x ^= * (u32 *) ((u8 *) (des_keymap + 192) + (0xFC & z));
 968         z >>= 8;
 969         x ^= * (u32 *) ((u8 *) (des_keymap + 128) + (0xFC & z));
 970         z >>= 8;
 971         x ^= * (u32 *) ((u8 *) (des_keymap + 64) + (0xFC & z));
 972         z >>= 8;
 973         x ^= * (u32 *) ((u8 *) des_keymap + (0xFC & z));
 974         z  = expkey[1];
 975         z ^= x;
 976         z  = z << 4 | z >> 28;
 977         y ^= * (u32 *) ((u8 *) (des_keymap + 448) + (0xFC & z));
 978         z >>= 8;
 979         y ^= * (u32 *) ((u8 *) (des_keymap + 384) + (0xFC & z));
 980         z >>= 8;
 981         y ^= * (u32 *) ((u8 *) (des_keymap + 320) + (0xFC & z));
 982         z >>= 8;
 983         y ^= * (u32 *) ((u8 *) (des_keymap + 256) + (0xFC & z));
 984         z  = expkey[0];
 985         z ^= x;
 986         y ^= * (u32 *) ((u8 *) (des_keymap + 192) + (0xFC & z));
 987         z >>= 8;
 988         y ^= * (u32 *) ((u8 *) (des_keymap + 128) + (0xFC & z));
 989         z >>= 8;
 990         y ^= * (u32 *) ((u8 *) (des_keymap + 64) + (0xFC & z));
 991         z >>= 8;
 992         y ^= * (u32 *) ((u8 *) des_keymap + (0xFC & z));
 993         x  = x << 1 | x >> 31;
 994         z  = (x ^ y) & 0x55555555L;
 995         y ^= z;
 996         x ^= z;
 997         y  = y << 1 | y >> 31;
 998         z  = ((x >> 010) ^ y) & 0x00FF00FFL;
 999         x ^= z << 010;
1000         y ^= z;
1001         z  = ((y >> 002) ^ x) & 0x33333333L;
1002         y ^= z << 002;
1003         x ^= z;
1004         z  = ((x >> 020) ^ y) & 0x0000FFFFL;
1005         x ^= z << 020;
1006         y ^= z;
1007         z  = ((y >> 004) ^ x) & 0x0F0F0F0FL;
1008         y ^= z << 004;
1009         x ^= z;
1010         dst[0] = x;
1011         x >>= 8;
1012         dst[1] = x;
1013         x >>= 8;
1014         dst[2] = x;
1015         x >>= 8;
1016         dst[3] = x;
1017         dst[4] = y;
1018         y >>= 8;
1019         dst[5] = y;
1020         y >>= 8;
1021         dst[6] = y;
1022         y >>= 8;
1023         dst[7] = y;
1024 }
1025
1026 /*
1027  * RFC2451: Weak key checks SHOULD be performed.
1028  */
1029 static int setkey(u32 *expkey, const u8 *key, unsigned int keylen, u32 *flags)
1030 {
1031         const u8 *k;
1032         u8 *b0, *b1;
1033         u32 n, w;
1034         u8 bits0[56], bits1[56];
1035
1036         n  = parity[key[0]]; n <<= 4;
1037         n |= parity[key[1]]; n <<= 4;
1038         n |= parity[key[2]]; n <<= 4;
1039         n |= parity[key[3]]; n <<= 4;
1040         n |= parity[key[4]]; n <<= 4;
1041         n |= parity[key[5]]; n <<= 4;
1042         n |= parity[key[6]]; n <<= 4;
1043         n |= parity[key[7]];
1044         w = 0x88888888L;
1045
1046         if ((*flags & CRYPTO_TFM_REQ_WEAK_KEY)
1047             && !((n - (w >> 3)) & w)) {  /* 1 in 10^10 keys passes this test */
1048                 if (n < 0x41415151) {
1049                         if (n < 0x31312121) {
1050                                 if (n < 0x14141515) {
1051                                         /* 01 01 01 01 01 01 01 01 */
1052                                         if (n == 0x11111111) goto weak;
1053                                         /* 01 1F 01 1F 01 0E 01 0E */
1054                                         if (n == 0x13131212) goto weak;
1055                                 } else {
1056                                         /* 01 E0 01 E0 01 F1 01 F1 */
1057                                         if (n == 0x14141515) goto weak;
1058                                         /* 01 FE 01 FE 01 FE 01 FE */
1059                                         if (n == 0x16161616) goto weak;
1060                                 }
1061                         } else {
1062                                 if (n < 0x34342525) {
1063                                         /* 1F 01 1F 01 0E 01 0E 01 */
1064                                         if (n == 0x31312121) goto weak;
1065                                         /* 1F 1F 1F 1F 0E 0E 0E 0E (?) */
1066                                         if (n == 0x33332222) goto weak;
1067                                 } else {
1068                                         /* 1F E0 1F E0 0E F1 0E F1 */
1069                                         if (n == 0x34342525) goto weak;
1070                                         /* 1F FE 1F FE 0E FE 0E FE */
1071                                         if (n == 0x36362626) goto weak;
1072                                 }
1073                         }
1074                 } else {
1075                         if (n < 0x61616161) {
1076                                 if (n < 0x44445555) {
1077                                         /* E0 01 E0 01 F1 01 F1 01 */
1078                                         if (n == 0x41415151) goto weak;
1079                                         /* E0 1F E0 1F F1 0E F1 0E */
1080                                         if (n == 0x43435252) goto weak;
1081                                 } else {
1082                                         /* E0 E0 E0 E0 F1 F1 F1 F1 (?) */
1083                                         if (n == 0x44445555) goto weak;
1084                                         /* E0 FE E0 FE F1 FE F1 FE */
1085                                         if (n == 0x46465656) goto weak;
1086                                 }
1087                         } else {
1088                                 if (n < 0x64646565) {
1089                                         /* FE 01 FE 01 FE 01 FE 01 */
1090                                         if (n == 0x61616161) goto weak;
1091                                         /* FE 1F FE 1F FE 0E FE 0E */
1092                                         if (n == 0x63636262) goto weak;
1093                                 } else {
1094                                         /* FE E0 FE E0 FE F1 FE F1 */
1095                                         if (n == 0x64646565) goto weak;
1096                                         /* FE FE FE FE FE FE FE FE */
1097                                         if (n == 0x66666666) goto weak;
1098                                 }
1099                         }
1100                 }
1101
1102                 goto not_weak;
1103 weak:
1104                 *flags |= CRYPTO_TFM_RES_WEAK_KEY;
1105                 return -EINVAL;
1106         }
1107
1108 not_weak:
1109
1110         /* explode the bits */
1111         n = 56;
1112         b0 = bits0;
1113         b1 = bits1;
1114
1115         do {
1116                 w = (256 | *key++) << 2;
1117                 do {
1118                         --n;
1119                         b1[n] = 8 & w;
1120                         w >>= 1;
1121                         b0[n] = 4 & w;
1122                 } while ( w >= 16 );
1123         } while ( n );
1124
1125         /* put the bits in the correct places */
1126         n = 16;
1127         k = rotors;
1128
1129         do {
1130                 w   = (b1[k[ 0   ]] | b0[k[ 1   ]]) << 4;
1131                 w  |= (b1[k[ 2   ]] | b0[k[ 3   ]]) << 2;
1132                 w  |=  b1[k[ 4   ]] | b0[k[ 5   ]];
1133                 w <<= 8;
1134                 w  |= (b1[k[ 6   ]] | b0[k[ 7   ]]) << 4;
1135                 w  |= (b1[k[ 8   ]] | b0[k[ 9   ]]) << 2;
1136                 w  |=  b1[k[10   ]] | b0[k[11   ]];
1137                 w <<= 8;
1138                 w  |= (b1[k[12   ]] | b0[k[13   ]]) << 4;
1139                 w  |= (b1[k[14   ]] | b0[k[15   ]]) << 2;
1140                 w  |=  b1[k[16   ]] | b0[k[17   ]];
1141                 w <<= 8;
1142                 w  |= (b1[k[18   ]] | b0[k[19   ]]) << 4;
1143                 w  |= (b1[k[20   ]] | b0[k[21   ]]) << 2;
1144                 w  |=  b1[k[22   ]] | b0[k[23   ]];
1145                 expkey[0] = w;
1146
1147                 w   = (b1[k[ 0+24]] | b0[k[ 1+24]]) << 4;
1148                 w  |= (b1[k[ 2+24]] | b0[k[ 3+24]]) << 2;
1149                 w  |=  b1[k[ 4+24]] | b0[k[ 5+24]];
1150                 w <<= 8;
1151                 w  |= (b1[k[ 6+24]] | b0[k[ 7+24]]) << 4;
1152                 w  |= (b1[k[ 8+24]] | b0[k[ 9+24]]) << 2;
1153                 w  |=  b1[k[10+24]] | b0[k[11+24]];
1154                 w <<= 8;
1155                 w  |= (b1[k[12+24]] | b0[k[13+24]]) << 4;
1156                 w  |= (b1[k[14+24]] | b0[k[15+24]]) << 2;
1157                 w  |=  b1[k[16+24]] | b0[k[17+24]];
1158                 w <<= 8;
1159                 w  |= (b1[k[18+24]] | b0[k[19+24]]) << 4;
1160                 w  |= (b1[k[20+24]] | b0[k[21+24]]) << 2;
1161                 w  |=  b1[k[22+24]] | b0[k[23+24]];
1162
1163                 ROR(w, 4, 28);      /* could be eliminated */
1164                 expkey[1] = w;
1165
1166                 k += 48;
1167                 expkey += 2;
1168         } while (--n);
1169
1170         return 0;
1171 }
1172
1173 static int des_setkey(void *ctx, const u8 *key, unsigned int keylen, u32 *flags)
1174 {
1175         return setkey(((struct des_ctx *)ctx)->expkey, key, keylen, flags);
1176 }
1177
1178 static void des_encrypt(void *ctx, u8 *dst, const u8 *src)
1179 {
1180         des_small_fips_encrypt(((struct des_ctx *)ctx)->expkey, dst, src);
1181 }
1182
1183 static void des_decrypt(void *ctx, u8 *dst, const u8 *src)
1184 {
1185         des_small_fips_decrypt(((struct des_ctx *)ctx)->expkey, dst, src);
1186 }
1187
1188 /*
1189  * RFC2451:
1190  *
1191  *   For DES-EDE3, there is no known need to reject weak or
1192  *   complementation keys.  Any weakness is obviated by the use of
1193  *   multiple keys.
1194  *
1195  *   However, if the first two or last two independent 64-bit keys are
1196  *   equal (k1 == k2 or k2 == k3), then the DES3 operation is simply the
1197  *   same as DES.  Implementers MUST reject keys that exhibit this
1198  *   property.
1199  *
1200  */
1201 static int des3_ede_setkey(void *ctx, const u8 *key,
1202                            unsigned int keylen, u32 *flags)
1203 {
1204         unsigned int i, off;
1205         struct des3_ede_ctx *dctx = ctx;
1206
1207         if (!(memcmp(key, &key[DES_KEY_SIZE], DES_KEY_SIZE) &&
1208             memcmp(&key[DES_KEY_SIZE], &key[DES_KEY_SIZE * 2],
1209                                                 DES_KEY_SIZE))) {
1210
1211                 *flags |= CRYPTO_TFM_RES_BAD_KEY_SCHED;
1212                 return -EINVAL;
1213         }
1214
1215         for (i = 0, off = 0; i < 3; i++, off += DES_EXPKEY_WORDS,
1216                                                         key += DES_KEY_SIZE) {
1217                 int ret = setkey(&dctx->expkey[off], key, DES_KEY_SIZE, flags);
1218                 if (ret < 0)
1219                         return ret;
1220         }
1221         return 0;
1222 }
1223
1224 static void des3_ede_encrypt(void *ctx, u8 *dst, const u8 *src)
1225 {
1226         struct des3_ede_ctx *dctx = ctx;
1227
1228         des_small_fips_encrypt(dctx->expkey, dst, src);
1229         des_small_fips_decrypt(&dctx->expkey[DES_EXPKEY_WORDS], dst, dst);
1230         des_small_fips_encrypt(&dctx->expkey[DES_EXPKEY_WORDS * 2], dst, dst);
1231 }
1232
1233 static void des3_ede_decrypt(void *ctx, u8 *dst, const u8 *src)
1234 {
1235         struct des3_ede_ctx *dctx = ctx;
1236
1237         des_small_fips_decrypt(&dctx->expkey[DES_EXPKEY_WORDS * 2], dst, src);
1238         des_small_fips_encrypt(&dctx->expkey[DES_EXPKEY_WORDS], dst, dst);
1239         des_small_fips_decrypt(dctx->expkey, dst, dst);
1240 }
1241
1242 static struct crypto_alg des_alg = {
1243         .cra_name               =       "des",
1244         .cra_flags              =       CRYPTO_ALG_TYPE_CIPHER,
1245         .cra_blocksize          =       DES_BLOCK_SIZE,
1246         .cra_ctxsize            =       sizeof(struct des_ctx),
1247         .cra_module             =       THIS_MODULE,
1248         .cra_list               =       LIST_HEAD_INIT(des_alg.cra_list),
1249         .cra_u                  =       { .cipher = {
1250         .cia_min_keysize        =       DES_KEY_SIZE,
1251         .cia_max_keysize        =       DES_KEY_SIZE,
1252         .cia_setkey             =       des_setkey,
1253         .cia_encrypt            =       des_encrypt,
1254         .cia_decrypt            =       des_decrypt } }
1255 };
1256
1257 static struct crypto_alg des3_ede_alg = {
1258         .cra_name               =       "des3_ede",
1259         .cra_flags              =       CRYPTO_ALG_TYPE_CIPHER,
1260         .cra_blocksize          =       DES3_EDE_BLOCK_SIZE,
1261         .cra_ctxsize            =       sizeof(struct des3_ede_ctx),
1262         .cra_module             =       THIS_MODULE,
1263         .cra_list               =       LIST_HEAD_INIT(des3_ede_alg.cra_list),
1264         .cra_u                  =       { .cipher = {
1265         .cia_min_keysize        =       DES3_EDE_KEY_SIZE,
1266         .cia_max_keysize        =       DES3_EDE_KEY_SIZE,
1267         .cia_setkey             =       des3_ede_setkey,
1268         .cia_encrypt            =       des3_ede_encrypt,
1269         .cia_decrypt            =       des3_ede_decrypt } }
1270 };
1271
1272 MODULE_ALIAS("des3_ede");
1273
1274 static int __init init(void)
1275 {
1276         int ret = 0;
1277
1278         ret = crypto_register_alg(&des_alg);
1279         if (ret < 0)
1280                 goto out;
1281
1282         ret = crypto_register_alg(&des3_ede_alg);
1283         if (ret < 0)
1284                 crypto_unregister_alg(&des_alg);
1285 out:
1286         return ret;
1287 }
1288
1289 static void __exit fini(void)
1290 {
1291         crypto_unregister_alg(&des3_ede_alg);
1292         crypto_unregister_alg(&des_alg);
1293 }
1294
1295 module_init(init);
1296 module_exit(fini);
1297
1298 MODULE_LICENSE("GPL");
1299 MODULE_DESCRIPTION("DES & Triple DES EDE Cipher Algorithms");