lib/block/seed.c

   1 /*
   2  * Copyright (C) 2012 Gregor Pintar <grpintar@gmail.com>
   3  *
   4  * Permission is granted to deal in this work without any restriction,
   5  * including unlimited rights to use, publicly perform, publish,
   6  * reproduce, relicence, modify, merge, and/or distribute in any form,
   7  * for any purpose, with or without fee, and by any means.
   8  *
   9  * This work is provided "AS IS" and WITHOUT WARRANTY of any kind,
  10  * to the utmost extent permitted by applicable law. In no event
  11  * shall a licensor, author or contributor be held liable for any
  12  * issues arising in any way out of dealing in the work.
  13  */
  14
  15 #include <stdint.h>
  16 #include <stdlib.h>
  17
  18 #include <kripto/cast.h>
  19 #include <kripto/loadstore.h>
  20 #include <kripto/rotate.h>
  21 #include <kripto/memwipe.h>
  22 #include <kripto/block.h>
  23 #include <kripto/desc/block.h>
  24 #include <kripto/object/block.h>
  25
  26 #include <kripto/block/seed.h>
  27
  28 struct kripto_block
  29 {
  30         struct kripto_block_object obj;
  31         unsigned int rounds;
  32         size_t size;
  33         uint32_t *k;
  34 };
  35
  36 static const uint32_t s0[256] =
  37 {
  38         0x2989A1A8, 0x05858184, 0x16C6D2D4, 0x13C3D3D0,
  39         0x14445054, 0x1D0D111C, 0x2C8CA0AC, 0x25052124,
  40         0x1D4D515C, 0x03434340, 0x18081018, 0x1E0E121C,
  41         0x11415150, 0x3CCCF0FC, 0x0ACAC2C8, 0x23436360,
  42         0x28082028, 0x04444044, 0x20002020, 0x1D8D919C,
  43         0x20C0E0E0, 0x22C2E2E0, 0x08C8C0C8, 0x17071314,
  44         0x2585A1A4, 0x0F8F838C, 0x03030300, 0x3B4B7378,
  45         0x3B8BB3B8, 0x13031310, 0x12C2D2D0, 0x2ECEE2EC,
  46         0x30407070, 0x0C8C808C, 0x3F0F333C, 0x2888A0A8,
  47         0x32023230, 0x1DCDD1DC, 0x36C6F2F4, 0x34447074,
  48         0x2CCCE0EC, 0x15859194, 0x0B0B0308, 0x17475354,
  49         0x1C4C505C, 0x1B4B5358, 0x3D8DB1BC, 0x01010100,
  50         0x24042024, 0x1C0C101C, 0x33437370, 0x18889098,
  51         0x10001010, 0x0CCCC0CC, 0x32C2F2F0, 0x19C9D1D8,
  52         0x2C0C202C, 0x27C7E3E4, 0x32427270, 0x03838380,
  53         0x1B8B9398, 0x11C1D1D0, 0x06868284, 0x09C9C1C8,
  54         0x20406060, 0x10405050, 0x2383A3A0, 0x2BCBE3E8,
  55         0x0D0D010C, 0x3686B2B4, 0x1E8E929C, 0x0F4F434C,
  56         0x3787B3B4, 0x1A4A5258, 0x06C6C2C4, 0x38487078,
  57         0x2686A2A4, 0x12021210, 0x2F8FA3AC, 0x15C5D1D4,
  58         0x21416160, 0x03C3C3C0, 0x3484B0B4, 0x01414140,
  59         0x12425250, 0x3D4D717C, 0x0D8D818C, 0x08080008,
  60         0x1F0F131C, 0x19899198, 0x00000000, 0x19091118,
  61         0x04040004, 0x13435350, 0x37C7F3F4, 0x21C1E1E0,
  62         0x3DCDF1FC, 0x36467274, 0x2F0F232C, 0x27072324,
  63         0x3080B0B0, 0x0B8B8388, 0x0E0E020C, 0x2B8BA3A8,
  64         0x2282A2A0, 0x2E4E626C, 0x13839390, 0x0D4D414C,
  65         0x29496168, 0x3C4C707C, 0x09090108, 0x0A0A0208,
  66         0x3F8FB3BC, 0x2FCFE3EC, 0x33C3F3F0, 0x05C5C1C4,
  67         0x07878384, 0x14041014, 0x3ECEF2FC, 0x24446064,
  68         0x1ECED2DC, 0x2E0E222C, 0x0B4B4348, 0x1A0A1218,
  69         0x06060204, 0x21012120, 0x2B4B6368, 0x26466264,
  70         0x02020200, 0x35C5F1F4, 0x12829290, 0x0A8A8288,
  71         0x0C0C000C, 0x3383B3B0, 0x3E4E727C, 0x10C0D0D0,
  72         0x3A4A7278, 0x07474344, 0x16869294, 0x25C5E1E4,
  73         0x26062224, 0x00808080, 0x2D8DA1AC, 0x1FCFD3DC,
  74         0x2181A1A0, 0x30003030, 0x37073334, 0x2E8EA2AC,
  75         0x36063234, 0x15051114, 0x22022220, 0x38083038,
  76         0x34C4F0F4, 0x2787A3A4, 0x05454144, 0x0C4C404C,
  77         0x01818180, 0x29C9E1E8, 0x04848084, 0x17879394,
  78         0x35053134, 0x0BCBC3C8, 0x0ECEC2CC, 0x3C0C303C,
  79         0x31417170, 0x11011110, 0x07C7C3C4, 0x09898188,
  80         0x35457174, 0x3BCBF3F8, 0x1ACAD2D8, 0x38C8F0F8,
  81         0x14849094, 0x19495158, 0x02828280, 0x04C4C0C4,
  82         0x3FCFF3FC, 0x09494148, 0x39093138, 0x27476364,
  83         0x00C0C0C0, 0x0FCFC3CC, 0x17C7D3D4, 0x3888B0B8,
  84         0x0F0F030C, 0x0E8E828C, 0x02424240, 0x23032320,
  85         0x11819190, 0x2C4C606C, 0x1BCBD3D8, 0x2484A0A4,
  86         0x34043034, 0x31C1F1F0, 0x08484048, 0x02C2C2C0,
  87         0x2F4F636C, 0x3D0D313C, 0x2D0D212C, 0x00404040,
  88         0x3E8EB2BC, 0x3E0E323C, 0x3C8CB0BC, 0x01C1C1C0,
  89         0x2A8AA2A8, 0x3A8AB2B8, 0x0E4E424C, 0x15455154,
  90         0x3B0B3338, 0x1CCCD0DC, 0x28486068, 0x3F4F737C,
  91         0x1C8C909C, 0x18C8D0D8, 0x0A4A4248, 0x16465254,
  92         0x37477374, 0x2080A0A0, 0x2DCDE1EC, 0x06464244,
  93         0x3585B1B4, 0x2B0B2328, 0x25456164, 0x3ACAF2F8,
  94         0x23C3E3E0, 0x3989B1B8, 0x3181B1B0, 0x1F8F939C,
  95         0x1E4E525C, 0x39C9F1F8, 0x26C6E2E4, 0x3282B2B0,
  96         0x31013130, 0x2ACAE2E8, 0x2D4D616C, 0x1F4F535C,
  97         0x24C4E0E4, 0x30C0F0F0, 0x0DCDC1CC, 0x08888088,
  98         0x16061214, 0x3A0A3238, 0x18485058, 0x14C4D0D4,
  99         0x22426260, 0x29092128, 0x07070304, 0x33033330,
 100         0x28C8E0E8, 0x1B0B1318, 0x05050104, 0x39497178,
 101         0x10809090, 0x2A4A6268, 0x2A0A2228, 0x1A8A9298
 102 };
 103
 104 static const uint32_t s1[256] =
 105 {
 106         0x38380830, 0xE828C8E0, 0x2C2D0D21, 0xA42686A2,
 107         0xCC0FCFC3, 0xDC1ECED2, 0xB03383B3, 0xB83888B0,
 108         0xAC2F8FA3, 0x60204060, 0x54154551, 0xC407C7C3,
 109         0x44044440, 0x6C2F4F63, 0x682B4B63, 0x581B4B53,
 110         0xC003C3C3, 0x60224262, 0x30330333, 0xB43585B1,
 111         0x28290921, 0xA02080A0, 0xE022C2E2, 0xA42787A3,
 112         0xD013C3D3, 0x90118191, 0x10110111, 0x04060602,
 113         0x1C1C0C10, 0xBC3C8CB0, 0x34360632, 0x480B4B43,
 114         0xEC2FCFE3, 0x88088880, 0x6C2C4C60, 0xA82888A0,
 115         0x14170713, 0xC404C4C0, 0x14160612, 0xF434C4F0,
 116         0xC002C2C2, 0x44054541, 0xE021C1E1, 0xD416C6D2,
 117         0x3C3F0F33, 0x3C3D0D31, 0x8C0E8E82, 0x98188890,
 118         0x28280820, 0x4C0E4E42, 0xF436C6F2, 0x3C3E0E32,
 119         0xA42585A1, 0xF839C9F1, 0x0C0D0D01, 0xDC1FCFD3,
 120         0xD818C8D0, 0x282B0B23, 0x64264662, 0x783A4A72,
 121         0x24270723, 0x2C2F0F23, 0xF031C1F1, 0x70324272,
 122         0x40024242, 0xD414C4D0, 0x40014141, 0xC000C0C0,
 123         0x70334373, 0x64274763, 0xAC2C8CA0, 0x880B8B83,
 124         0xF437C7F3, 0xAC2D8DA1, 0x80008080, 0x1C1F0F13,
 125         0xC80ACAC2, 0x2C2C0C20, 0xA82A8AA2, 0x34340430,
 126         0xD012C2D2, 0x080B0B03, 0xEC2ECEE2, 0xE829C9E1,
 127         0x5C1D4D51, 0x94148490, 0x18180810, 0xF838C8F0,
 128         0x54174753, 0xAC2E8EA2, 0x08080800, 0xC405C5C1,
 129         0x10130313, 0xCC0DCDC1, 0x84068682, 0xB83989B1,
 130         0xFC3FCFF3, 0x7C3D4D71, 0xC001C1C1, 0x30310131,
 131         0xF435C5F1, 0x880A8A82, 0x682A4A62, 0xB03181B1,
 132         0xD011C1D1, 0x20200020, 0xD417C7D3, 0x00020202,
 133         0x20220222, 0x04040400, 0x68284860, 0x70314171,
 134         0x04070703, 0xD81BCBD3, 0x9C1D8D91, 0x98198991,
 135         0x60214161, 0xBC3E8EB2, 0xE426C6E2, 0x58194951,
 136         0xDC1DCDD1, 0x50114151, 0x90108090, 0xDC1CCCD0,
 137         0x981A8A92, 0xA02383A3, 0xA82B8BA3, 0xD010C0D0,
 138         0x80018181, 0x0C0F0F03, 0x44074743, 0x181A0A12,
 139         0xE023C3E3, 0xEC2CCCE0, 0x8C0D8D81, 0xBC3F8FB3,
 140         0x94168692, 0x783B4B73, 0x5C1C4C50, 0xA02282A2,
 141         0xA02181A1, 0x60234363, 0x20230323, 0x4C0D4D41,
 142         0xC808C8C0, 0x9C1E8E92, 0x9C1C8C90, 0x383A0A32,
 143         0x0C0C0C00, 0x2C2E0E22, 0xB83A8AB2, 0x6C2E4E62,
 144         0x9C1F8F93, 0x581A4A52, 0xF032C2F2, 0x90128292,
 145         0xF033C3F3, 0x48094941, 0x78384870, 0xCC0CCCC0,
 146         0x14150511, 0xF83BCBF3, 0x70304070, 0x74354571,
 147         0x7C3F4F73, 0x34350531, 0x10100010, 0x00030303,
 148         0x64244460, 0x6C2D4D61, 0xC406C6C2, 0x74344470,
 149         0xD415C5D1, 0xB43484B0, 0xE82ACAE2, 0x08090901,
 150         0x74364672, 0x18190911, 0xFC3ECEF2, 0x40004040,
 151         0x10120212, 0xE020C0E0, 0xBC3D8DB1, 0x04050501,
 152         0xF83ACAF2, 0x00010101, 0xF030C0F0, 0x282A0A22,
 153         0x5C1E4E52, 0xA82989A1, 0x54164652, 0x40034343,
 154         0x84058581, 0x14140410, 0x88098981, 0x981B8B93,
 155         0xB03080B0, 0xE425C5E1, 0x48084840, 0x78394971,
 156         0x94178793, 0xFC3CCCF0, 0x1C1E0E12, 0x80028282,
 157         0x20210121, 0x8C0C8C80, 0x181B0B13, 0x5C1F4F53,
 158         0x74374773, 0x54144450, 0xB03282B2, 0x1C1D0D11,
 159         0x24250521, 0x4C0F4F43, 0x00000000, 0x44064642,
 160         0xEC2DCDE1, 0x58184850, 0x50124252, 0xE82BCBE3,
 161         0x7C3E4E72, 0xD81ACAD2, 0xC809C9C1, 0xFC3DCDF1,
 162         0x30300030, 0x94158591, 0x64254561, 0x3C3C0C30,
 163         0xB43686B2, 0xE424C4E0, 0xB83B8BB3, 0x7C3C4C70,
 164         0x0C0E0E02, 0x50104050, 0x38390931, 0x24260622,
 165         0x30320232, 0x84048480, 0x68294961, 0x90138393,
 166         0x34370733, 0xE427C7E3, 0x24240420, 0xA42484A0,
 167         0xC80BCBC3, 0x50134353, 0x080A0A02, 0x84078783,
 168         0xD819C9D1, 0x4C0C4C40, 0x80038383, 0x8C0F8F83,
 169         0xCC0ECEC2, 0x383B0B33, 0x480A4A42, 0xB43787B3
 170 };
 171
 172 static const uint32_t s2[256] =
 173 {
 174         0xA1A82989, 0x81840585, 0xD2D416C6, 0xD3D013C3,
 175         0x50541444, 0x111C1D0D, 0xA0AC2C8C, 0x21242505,
 176         0x515C1D4D, 0x43400343, 0x10181808, 0x121C1E0E,
 177         0x51501141, 0xF0FC3CCC, 0xC2C80ACA, 0x63602343,
 178         0x20282808, 0x40440444, 0x20202000, 0x919C1D8D,
 179         0xE0E020C0, 0xE2E022C2, 0xC0C808C8, 0x13141707,
 180         0xA1A42585, 0x838C0F8F, 0x03000303, 0x73783B4B,
 181         0xB3B83B8B, 0x13101303, 0xD2D012C2, 0xE2EC2ECE,
 182         0x70703040, 0x808C0C8C, 0x333C3F0F, 0xA0A82888,
 183         0x32303202, 0xD1DC1DCD, 0xF2F436C6, 0x70743444,
 184         0xE0EC2CCC, 0x91941585, 0x03080B0B, 0x53541747,
 185         0x505C1C4C, 0x53581B4B, 0xB1BC3D8D, 0x01000101,
 186         0x20242404, 0x101C1C0C, 0x73703343, 0x90981888,
 187         0x10101000, 0xC0CC0CCC, 0xF2F032C2, 0xD1D819C9,
 188         0x202C2C0C, 0xE3E427C7, 0x72703242, 0x83800383,
 189         0x93981B8B, 0xD1D011C1, 0x82840686, 0xC1C809C9,
 190         0x60602040, 0x50501040, 0xA3A02383, 0xE3E82BCB,
 191         0x010C0D0D, 0xB2B43686, 0x929C1E8E, 0x434C0F4F,
 192         0xB3B43787, 0x52581A4A, 0xC2C406C6, 0x70783848,
 193         0xA2A42686, 0x12101202, 0xA3AC2F8F, 0xD1D415C5,
 194         0x61602141, 0xC3C003C3, 0xB0B43484, 0x41400141,
 195         0x52501242, 0x717C3D4D, 0x818C0D8D, 0x00080808,
 196         0x131C1F0F, 0x91981989, 0x00000000, 0x11181909,
 197         0x00040404, 0x53501343, 0xF3F437C7, 0xE1E021C1,
 198         0xF1FC3DCD, 0x72743646, 0x232C2F0F, 0x23242707,
 199         0xB0B03080, 0x83880B8B, 0x020C0E0E, 0xA3A82B8B,
 200         0xA2A02282, 0x626C2E4E, 0x93901383, 0x414C0D4D,
 201         0x61682949, 0x707C3C4C, 0x01080909, 0x02080A0A,
 202         0xB3BC3F8F, 0xE3EC2FCF, 0xF3F033C3, 0xC1C405C5,
 203         0x83840787, 0x10141404, 0xF2FC3ECE, 0x60642444,
 204         0xD2DC1ECE, 0x222C2E0E, 0x43480B4B, 0x12181A0A,
 205         0x02040606, 0x21202101, 0x63682B4B, 0x62642646,
 206         0x02000202, 0xF1F435C5, 0x92901282, 0x82880A8A,
 207         0x000C0C0C, 0xB3B03383, 0x727C3E4E, 0xD0D010C0,
 208         0x72783A4A, 0x43440747, 0x92941686, 0xE1E425C5,
 209         0x22242606, 0x80800080, 0xA1AC2D8D, 0xD3DC1FCF,
 210         0xA1A02181, 0x30303000, 0x33343707, 0xA2AC2E8E,
 211         0x32343606, 0x11141505, 0x22202202, 0x30383808,
 212         0xF0F434C4, 0xA3A42787, 0x41440545, 0x404C0C4C,
 213         0x81800181, 0xE1E829C9, 0x80840484, 0x93941787,
 214         0x31343505, 0xC3C80BCB, 0xC2CC0ECE, 0x303C3C0C,
 215         0x71703141, 0x11101101, 0xC3C407C7, 0x81880989,
 216         0x71743545, 0xF3F83BCB, 0xD2D81ACA, 0xF0F838C8,
 217         0x90941484, 0x51581949, 0x82800282, 0xC0C404C4,
 218         0xF3FC3FCF, 0x41480949, 0x31383909, 0x63642747,
 219         0xC0C000C0, 0xC3CC0FCF, 0xD3D417C7, 0xB0B83888,
 220         0x030C0F0F, 0x828C0E8E, 0x42400242, 0x23202303,
 221         0x91901181, 0x606C2C4C, 0xD3D81BCB, 0xA0A42484,
 222         0x30343404, 0xF1F031C1, 0x40480848, 0xC2C002C2,
 223         0x636C2F4F, 0x313C3D0D, 0x212C2D0D, 0x40400040,
 224         0xB2BC3E8E, 0x323C3E0E, 0xB0BC3C8C, 0xC1C001C1,
 225         0xA2A82A8A, 0xB2B83A8A, 0x424C0E4E, 0x51541545,
 226         0x33383B0B, 0xD0DC1CCC, 0x60682848, 0x737C3F4F,
 227         0x909C1C8C, 0xD0D818C8, 0x42480A4A, 0x52541646,
 228         0x73743747, 0xA0A02080, 0xE1EC2DCD, 0x42440646,
 229         0xB1B43585, 0x23282B0B, 0x61642545, 0xF2F83ACA,
 230         0xE3E023C3, 0xB1B83989, 0xB1B03181, 0x939C1F8F,
 231         0x525C1E4E, 0xF1F839C9, 0xE2E426C6, 0xB2B03282,
 232         0x31303101, 0xE2E82ACA, 0x616C2D4D, 0x535C1F4F,
 233         0xE0E424C4, 0xF0F030C0, 0xC1CC0DCD, 0x80880888,
 234         0x12141606, 0x32383A0A, 0x50581848, 0xD0D414C4,
 235         0x62602242, 0x21282909, 0x03040707, 0x33303303,
 236         0xE0E828C8, 0x13181B0B, 0x01040505, 0x71783949,
 237         0x90901080, 0x62682A4A, 0x22282A0A, 0x92981A8A
 238 };
 239
 240 static const uint32_t s3[256] =
 241 {
 242         0x08303838, 0xC8E0E828, 0x0D212C2D, 0x86A2A426,
 243         0xCFC3CC0F, 0xCED2DC1E, 0x83B3B033, 0x88B0B838,
 244         0x8FA3AC2F, 0x40606020, 0x45515415, 0xC7C3C407,
 245         0x44404404, 0x4F636C2F, 0x4B63682B, 0x4B53581B,
 246         0xC3C3C003, 0x42626022, 0x03333033, 0x85B1B435,
 247         0x09212829, 0x80A0A020, 0xC2E2E022, 0x87A3A427,
 248         0xC3D3D013, 0x81919011, 0x01111011, 0x06020406,
 249         0x0C101C1C, 0x8CB0BC3C, 0x06323436, 0x4B43480B,
 250         0xCFE3EC2F, 0x88808808, 0x4C606C2C, 0x88A0A828,
 251         0x07131417, 0xC4C0C404, 0x06121416, 0xC4F0F434,
 252         0xC2C2C002, 0x45414405, 0xC1E1E021, 0xC6D2D416,
 253         0x0F333C3F, 0x0D313C3D, 0x8E828C0E, 0x88909818,
 254         0x08202828, 0x4E424C0E, 0xC6F2F436, 0x0E323C3E,
 255         0x85A1A425, 0xC9F1F839, 0x0D010C0D, 0xCFD3DC1F,
 256         0xC8D0D818, 0x0B23282B, 0x46626426, 0x4A72783A,
 257         0x07232427, 0x0F232C2F, 0xC1F1F031, 0x42727032,
 258         0x42424002, 0xC4D0D414, 0x41414001, 0xC0C0C000,
 259         0x43737033, 0x47636427, 0x8CA0AC2C, 0x8B83880B,
 260         0xC7F3F437, 0x8DA1AC2D, 0x80808000, 0x0F131C1F,
 261         0xCAC2C80A, 0x0C202C2C, 0x8AA2A82A, 0x04303434,
 262         0xC2D2D012, 0x0B03080B, 0xCEE2EC2E, 0xC9E1E829,
 263         0x4D515C1D, 0x84909414, 0x08101818, 0xC8F0F838,
 264         0x47535417, 0x8EA2AC2E, 0x08000808, 0xC5C1C405,
 265         0x03131013, 0xCDC1CC0D, 0x86828406, 0x89B1B839,
 266         0xCFF3FC3F, 0x4D717C3D, 0xC1C1C001, 0x01313031,
 267         0xC5F1F435, 0x8A82880A, 0x4A62682A, 0x81B1B031,
 268         0xC1D1D011, 0x00202020, 0xC7D3D417, 0x02020002,
 269         0x02222022, 0x04000404, 0x48606828, 0x41717031,
 270         0x07030407, 0xCBD3D81B, 0x8D919C1D, 0x89919819,
 271         0x41616021, 0x8EB2BC3E, 0xC6E2E426, 0x49515819,
 272         0xCDD1DC1D, 0x41515011, 0x80909010, 0xCCD0DC1C,
 273         0x8A92981A, 0x83A3A023, 0x8BA3A82B, 0xC0D0D010,
 274         0x81818001, 0x0F030C0F, 0x47434407, 0x0A12181A,
 275         0xC3E3E023, 0xCCE0EC2C, 0x8D818C0D, 0x8FB3BC3F,
 276         0x86929416, 0x4B73783B, 0x4C505C1C, 0x82A2A022,
 277         0x81A1A021, 0x43636023, 0x03232023, 0x4D414C0D,
 278         0xC8C0C808, 0x8E929C1E, 0x8C909C1C, 0x0A32383A,
 279         0x0C000C0C, 0x0E222C2E, 0x8AB2B83A, 0x4E626C2E,
 280         0x8F939C1F, 0x4A52581A, 0xC2F2F032, 0x82929012,
 281         0xC3F3F033, 0x49414809, 0x48707838, 0xCCC0CC0C,
 282         0x05111415, 0xCBF3F83B, 0x40707030, 0x45717435,
 283         0x4F737C3F, 0x05313435, 0x00101010, 0x03030003,
 284         0x44606424, 0x4D616C2D, 0xC6C2C406, 0x44707434,
 285         0xC5D1D415, 0x84B0B434, 0xCAE2E82A, 0x09010809,
 286         0x46727436, 0x09111819, 0xCEF2FC3E, 0x40404000,
 287         0x02121012, 0xC0E0E020, 0x8DB1BC3D, 0x05010405,
 288         0xCAF2F83A, 0x01010001, 0xC0F0F030, 0x0A22282A,
 289         0x4E525C1E, 0x89A1A829, 0x46525416, 0x43434003,
 290         0x85818405, 0x04101414, 0x89818809, 0x8B93981B,
 291         0x80B0B030, 0xC5E1E425, 0x48404808, 0x49717839,
 292         0x87939417, 0xCCF0FC3C, 0x0E121C1E, 0x82828002,
 293         0x01212021, 0x8C808C0C, 0x0B13181B, 0x4F535C1F,
 294         0x47737437, 0x44505414, 0x82B2B032, 0x0D111C1D,
 295         0x05212425, 0x4F434C0F, 0x00000000, 0x46424406,
 296         0xCDE1EC2D, 0x48505818, 0x42525012, 0xCBE3E82B,
 297         0x4E727C3E, 0xCAD2D81A, 0xC9C1C809, 0xCDF1FC3D,
 298         0x00303030, 0x85919415, 0x45616425, 0x0C303C3C,
 299         0x86B2B436, 0xC4E0E424, 0x8BB3B83B, 0x4C707C3C,
 300         0x0E020C0E, 0x40505010, 0x09313839, 0x06222426,
 301         0x02323032, 0x84808404, 0x49616829, 0x83939013,
 302         0x07333437, 0xC7E3E427, 0x04202424, 0x84A0A424,
 303         0xCBC3C80B, 0x43535013, 0x0A02080A, 0x87838407,
 304         0xC9D1D819, 0x4C404C0C, 0x83838003, 0x8F838C0F,
 305         0xCEC2CC0E, 0x0B33383B, 0x4A42480A, 0x87B3B437
 306 };
 307
 308 #define F(X)                                                                                    \
 309 (                                                                                                               \
 310         s0[(uint8_t)(X)] ^ s1[(uint8_t)((X) >> 8)] ^            \
 311         s2[(uint8_t)((X) >> 16)] ^ s3[(uint8_t)((X) >> 24)]     \
 312 )
 313
 314 #define R(L0, L1, R0, R1, K)    \
 315 {                                                               \
 316         t0 = R0 ^ (K)[0];                       \
 317         t1 = R1 ^ (K)[1] ^ t0;          \
 318         t1 = F(t1);                                     \
 319         t0 += t1;                                       \
 320         t0 = F(t0);                                     \
 321         t1 += t0;                                       \
 322         t1 = F(t1);                                     \
 323         t0 += t1;                                       \
 324         t0 ^= L0;                                       \
 325         t1 ^= L1;                                       \
 326         L0 = R0;                                        \
 327         L1 = R1;                                        \
 328         R0 = t0;                                        \
 329         R1 = t1;                                        \
 330 }
 331
 332 static void seed_encrypt
 333 (
 334         const kripto_block *s,
 335         const void *pt,
 336         void *ct
 337 )
 338 {
 339         uint32_t l0;
 340         uint32_t l1;
 341         uint32_t r0;
 342         uint32_t r1;
 343         uint32_t t0;
 344         uint32_t t1;
 345         unsigned int i;
 346
 347         l0 = LOAD32B(CU8(pt));
 348         l1 = LOAD32B(CU8(pt) + 4);
 349         r0 = LOAD32B(CU8(pt) + 8);
 350         r1 = LOAD32B(CU8(pt) + 12);
 351
 352         for(i = 0; i < s->rounds << 1; i += 2)
 353                 R(l0, l1, r0, r1, s->k + i);
 354
 355         STORE32B(r0, U8(ct));
 356         STORE32B(r1, U8(ct) + 4);
 357         STORE32B(l0, U8(ct) + 8);
 358         STORE32B(l1, U8(ct) + 12);
 359 }
 360
 361 static void seed_decrypt
 362 (
 363         const kripto_block *s,
 364         const void *ct,
 365         void *pt
 366 )
 367 {
 368         uint32_t l0;
 369         uint32_t l1;
 370         uint32_t r0;
 371         uint32_t r1;
 372         uint32_t t0;
 373         uint32_t t1;
 374         unsigned int i;
 375
 376         l0 = LOAD32B(CU8(ct));
 377         l1 = LOAD32B(CU8(ct) + 4);
 378         r0 = LOAD32B(CU8(ct) + 8);
 379         r1 = LOAD32B(CU8(ct) + 12);
 380
 381         for(i = (s->rounds << 1) - 2; i + 2; i -= 2)
 382                 R(l0, l1, r0, r1, s->k + i);
 383
 384         STORE32B(l0, U8(pt));
 385         STORE32B(l1, U8(pt) + 4);
 386         STORE32B(r0, U8(pt) + 8);
 387         STORE32B(r1, U8(pt) + 12);
 388 }
 389
 390 static void seed_setup
 391 (
 392         kripto_block *s,
 393         const uint8_t *key,
 394         unsigned int key_len
 395 )
 396 {
 397         uint32_t k[4] = {0, 0, 0, 0};
 398         uint32_t t0;
 399         uint32_t t1;
 400         uint32_t kc = 0x9E3779B9;
 401         unsigned int i;
 402
 403         for(i = 0; i < key_len; i++)
 404                 k[i >> 2] |= key[i] << (24 - ((i & 3) << 3));
 405
 406         for(i = 0; i < s->rounds; i++)
 407         {
 408                 t0 = k[0] + k[2] - kc;
 409                 t1 = k[1] - k[3] + kc;
 410                 s->k[i << 1] = F(t0);
 411                 s->k[(i << 1) + 1] = F(t1);
 412
 413                 if(i & 1)
 414                 {
 415                         t0 = k[2];
 416                         k[2] = (k[2] << 8) | (k[3] >> 24);
 417                         k[3] = (k[3] << 8) | (t0 >> 24);
 418                 }
 419                 else
 420                 {
 421                         t0 = k[0];
 422                         k[0] = (k[0] >> 8) | (k[1] << 24);
 423                         k[1] = (k[1] >> 8) | (t0 << 24);
 424                 }
 425
 426                 kc = ROL32(kc, 1);
 427         }
 428
 429         /* wipe */
 430         kripto_memwipe(k, 16);
 431         kripto_memwipe(&t0, sizeof(uint32_t));
 432         kripto_memwipe(&t1, sizeof(uint32_t));
 433 }
 434
 435 static kripto_block *seed_create
 436 (
 437         unsigned int r,
 438         const void *key,
 439         unsigned int key_len
 440 )
 441 {
 442         kripto_block *s;
 443
 444         if(!r) r = 16;
 445
 446         s = malloc(sizeof(kripto_block) + (r << 3));
 447         if(!s) return 0;
 448
 449         s->obj.desc = kripto_block_seed;
 450         s->size = sizeof(kripto_block) + (r << 3);
 451         s->rounds = r;
 452         s->k = (uint32_t *)((uint8_t *)s + sizeof(kripto_block));
 453
 454         seed_setup(s, key, key_len);
 455
 456         return s;
 457 }
 458
 459 static void seed_destroy(kripto_block *s)
 460 {
 461         kripto_memwipe(s, s->size);
 462         free(s);
 463 }
 464
 465 static kripto_block *seed_recreate
 466 (
 467         kripto_block *s,
 468         unsigned int r,
 469         const void *key,
 470         unsigned int key_len
 471 )
 472 {
 473         if(!r) r = 16;
 474
 475         if(sizeof(kripto_block) + (r << 3) > s->size)
 476         {
 477                 seed_destroy(s);
 478                 s = seed_create(r, key, key_len);
 479         }
 480         else
 481         {
 482                 s->rounds = r;
 483                 seed_setup(s, key, key_len);
 484         }
 485
 486         return s;
 487 }
 488
 489 static const kripto_block_desc seed =
 490 {
 491         &seed_create,
 492         &seed_recreate,
 493         0,
 494         &seed_encrypt,
 495         &seed_decrypt,
 496         &seed_destroy,
 497         16, /* block size */
 498         16 /* max key */
 499 };
 500
 501 const kripto_block_desc *const kripto_block_seed = &seed;