?  search:
summary | log | graphiclog1 | graphiclog2 | commit | commitdiff | tree | refs | edit | fork
blame | history | raw | HEAD
Fix dependency install on Debian 11 (#16683)
[zfs.git] / module / icp / algs / aes / aes_impl_generic.c
blobae13c0b855784ca3825c984188e42b5cc1aed6cc
1 /*
2 * CDDL HEADER START
3 *
4 * The contents of this file are subject to the terms of the
5 * Common Development and Distribution License (the "License").
6 * You may not use this file except in compliance with the License.
7 *
8 * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
9 * or https://opensource.org/licenses/CDDL-1.0.
10 * See the License for the specific language governing permissions
11 * and limitations under the License.
12 *
13 * When distributing Covered Code, include this CDDL HEADER in each
14 * file and include the License file at usr/src/OPENSOLARIS.LICENSE.
15 * If applicable, add the following below this CDDL HEADER, with the
16 * fields enclosed by brackets "[]" replaced with your own identifying
17 * information: Portions Copyright [yyyy] [name of copyright owner]
18 *
19 * CDDL HEADER END
20 */
21 /*
22 * Copyright (c) 2003, 2010, Oracle and/or its affiliates. All rights reserved.
23 */
24
25 #include <aes/aes_impl.h>
26
27 /*
28 * This file is derived from the file rijndael-alg-fst.c taken from the
29 * "optimized C code v3.0" on the "rijndael home page"
30 * http://www.iaik.tu-graz.ac.at/research/krypto/AES/old/~rijmen/rijndael/
31 * pointed by the NIST web-site http://csrc.nist.gov/archive/aes/
32 *
33 * The following note is from the original file:
34 */
35
36 /*
37 * rijndael-alg-fst.c
38 *
39 * @version 3.0 (December 2000)
40 *
41 * Optimised ANSI C code for the Rijndael cipher (now AES)
42 *
43 * @author Vincent Rijmen <vincent.rijmen@esat.kuleuven.ac.be>
44 * @author Antoon Bosselaers <antoon.bosselaers@esat.kuleuven.ac.be>
45 * @author Paulo Barreto <paulo.barreto@terra.com.br>
46 *
47 * This code is hereby placed in the public domain.
48 *
49 * THIS SOFTWARE IS PROVIDED BY THE AUTHORS ''AS IS'' AND ANY EXPRESS
50 * OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
51 * WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
52 * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHORS OR CONTRIBUTORS BE
53 * LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
54 * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
55 * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
56 * BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
57 * WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
58 * OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE,
59 * EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
60 */
61
62 /*
63 * Constant tables
64 */
65
66 /*
67 * Te0[x] = S [x].[02, 01, 01, 03];
68 * Te1[x] = S [x].[03, 02, 01, 01];
69 * Te2[x] = S [x].[01, 03, 02, 01];
70 * Te3[x] = S [x].[01, 01, 03, 02];
71 * Te4[x] = S [x].[01, 01, 01, 01];
72 *
73 * Td0[x] = Si[x].[0e, 09, 0d, 0b];
74 * Td1[x] = Si[x].[0b, 0e, 09, 0d];
75 * Td2[x] = Si[x].[0d, 0b, 0e, 09];
76 * Td3[x] = Si[x].[09, 0d, 0b, 0e];
77 * Td4[x] = Si[x].[01, 01, 01, 01];
78 */
79
80 /* Encrypt Sbox constants (for the substitute bytes operation) */
81
82 static const uint32_t Te0[256] =
83 {
84 0xc66363a5U, 0xf87c7c84U, 0xee777799U, 0xf67b7b8dU,
85 0xfff2f20dU, 0xd66b6bbdU, 0xde6f6fb1U, 0x91c5c554U,
86 0x60303050U, 0x02010103U, 0xce6767a9U, 0x562b2b7dU,
87 0xe7fefe19U, 0xb5d7d762U, 0x4dababe6U, 0xec76769aU,
88 0x8fcaca45U, 0x1f82829dU, 0x89c9c940U, 0xfa7d7d87U,
89 0xeffafa15U, 0xb25959ebU, 0x8e4747c9U, 0xfbf0f00bU,
90 0x41adadecU, 0xb3d4d467U, 0x5fa2a2fdU, 0x45afafeaU,
91 0x239c9cbfU, 0x53a4a4f7U, 0xe4727296U, 0x9bc0c05bU,
92 0x75b7b7c2U, 0xe1fdfd1cU, 0x3d9393aeU, 0x4c26266aU,
93 0x6c36365aU, 0x7e3f3f41U, 0xf5f7f702U, 0x83cccc4fU,
94 0x6834345cU, 0x51a5a5f4U, 0xd1e5e534U, 0xf9f1f108U,
95 0xe2717193U, 0xabd8d873U, 0x62313153U, 0x2a15153fU,
96 0x0804040cU, 0x95c7c752U, 0x46232365U, 0x9dc3c35eU,
97 0x30181828U, 0x379696a1U, 0x0a05050fU, 0x2f9a9ab5U,
98 0x0e070709U, 0x24121236U, 0x1b80809bU, 0xdfe2e23dU,
99 0xcdebeb26U, 0x4e272769U, 0x7fb2b2cdU, 0xea75759fU,
100 0x1209091bU, 0x1d83839eU, 0x582c2c74U, 0x341a1a2eU,
101 0x361b1b2dU, 0xdc6e6eb2U, 0xb45a5aeeU, 0x5ba0a0fbU,
102 0xa45252f6U, 0x763b3b4dU, 0xb7d6d661U, 0x7db3b3ceU,
103 0x5229297bU, 0xdde3e33eU, 0x5e2f2f71U, 0x13848497U,
104 0xa65353f5U, 0xb9d1d168U, 0x00000000U, 0xc1eded2cU,
105 0x40202060U, 0xe3fcfc1fU, 0x79b1b1c8U, 0xb65b5bedU,
106 0xd46a6abeU, 0x8dcbcb46U, 0x67bebed9U, 0x7239394bU,
107 0x944a4adeU, 0x984c4cd4U, 0xb05858e8U, 0x85cfcf4aU,
108 0xbbd0d06bU, 0xc5efef2aU, 0x4faaaae5U, 0xedfbfb16U,
109 0x864343c5U, 0x9a4d4dd7U, 0x66333355U, 0x11858594U,
110 0x8a4545cfU, 0xe9f9f910U, 0x04020206U, 0xfe7f7f81U,
111 0xa05050f0U, 0x783c3c44U, 0x259f9fbaU, 0x4ba8a8e3U,
112 0xa25151f3U, 0x5da3a3feU, 0x804040c0U, 0x058f8f8aU,
113 0x3f9292adU, 0x219d9dbcU, 0x70383848U, 0xf1f5f504U,
114 0x63bcbcdfU, 0x77b6b6c1U, 0xafdada75U, 0x42212163U,
115 0x20101030U, 0xe5ffff1aU, 0xfdf3f30eU, 0xbfd2d26dU,
116 0x81cdcd4cU, 0x180c0c14U, 0x26131335U, 0xc3ecec2fU,
117 0xbe5f5fe1U, 0x359797a2U, 0x884444ccU, 0x2e171739U,
118 0x93c4c457U, 0x55a7a7f2U, 0xfc7e7e82U, 0x7a3d3d47U,
119 0xc86464acU, 0xba5d5de7U, 0x3219192bU, 0xe6737395U,
120 0xc06060a0U, 0x19818198U, 0x9e4f4fd1U, 0xa3dcdc7fU,
121 0x44222266U, 0x542a2a7eU, 0x3b9090abU, 0x0b888883U,
122 0x8c4646caU, 0xc7eeee29U, 0x6bb8b8d3U, 0x2814143cU,
123 0xa7dede79U, 0xbc5e5ee2U, 0x160b0b1dU, 0xaddbdb76U,
124 0xdbe0e03bU, 0x64323256U, 0x743a3a4eU, 0x140a0a1eU,
125 0x924949dbU, 0x0c06060aU, 0x4824246cU, 0xb85c5ce4U,
126 0x9fc2c25dU, 0xbdd3d36eU, 0x43acacefU, 0xc46262a6U,
127 0x399191a8U, 0x319595a4U, 0xd3e4e437U, 0xf279798bU,
128 0xd5e7e732U, 0x8bc8c843U, 0x6e373759U, 0xda6d6db7U,
129 0x018d8d8cU, 0xb1d5d564U, 0x9c4e4ed2U, 0x49a9a9e0U,
130 0xd86c6cb4U, 0xac5656faU, 0xf3f4f407U, 0xcfeaea25U,
131 0xca6565afU, 0xf47a7a8eU, 0x47aeaee9U, 0x10080818U,
132 0x6fbabad5U, 0xf0787888U, 0x4a25256fU, 0x5c2e2e72U,
133 0x381c1c24U, 0x57a6a6f1U, 0x73b4b4c7U, 0x97c6c651U,
134 0xcbe8e823U, 0xa1dddd7cU, 0xe874749cU, 0x3e1f1f21U,
135 0x964b4bddU, 0x61bdbddcU, 0x0d8b8b86U, 0x0f8a8a85U,
136 0xe0707090U, 0x7c3e3e42U, 0x71b5b5c4U, 0xcc6666aaU,
137 0x904848d8U, 0x06030305U, 0xf7f6f601U, 0x1c0e0e12U,
138 0xc26161a3U, 0x6a35355fU, 0xae5757f9U, 0x69b9b9d0U,
139 0x17868691U, 0x99c1c158U, 0x3a1d1d27U, 0x279e9eb9U,
140 0xd9e1e138U, 0xebf8f813U, 0x2b9898b3U, 0x22111133U,
141 0xd26969bbU, 0xa9d9d970U, 0x078e8e89U, 0x339494a7U,
142 0x2d9b9bb6U, 0x3c1e1e22U, 0x15878792U, 0xc9e9e920U,
143 0x87cece49U, 0xaa5555ffU, 0x50282878U, 0xa5dfdf7aU,
144 0x038c8c8fU, 0x59a1a1f8U, 0x09898980U, 0x1a0d0d17U,
145 0x65bfbfdaU, 0xd7e6e631U, 0x844242c6U, 0xd06868b8U,
146 0x824141c3U, 0x299999b0U, 0x5a2d2d77U, 0x1e0f0f11U,
147 0x7bb0b0cbU, 0xa85454fcU, 0x6dbbbbd6U, 0x2c16163aU
148 };
149
150
151 static const uint32_t Te1[256] =
152 {
153 0xa5c66363U, 0x84f87c7cU, 0x99ee7777U, 0x8df67b7bU,
154 0x0dfff2f2U, 0xbdd66b6bU, 0xb1de6f6fU, 0x5491c5c5U,
155 0x50603030U, 0x03020101U, 0xa9ce6767U, 0x7d562b2bU,
156 0x19e7fefeU, 0x62b5d7d7U, 0xe64dababU, 0x9aec7676U,
157 0x458fcacaU, 0x9d1f8282U, 0x4089c9c9U, 0x87fa7d7dU,
158 0x15effafaU, 0xebb25959U, 0xc98e4747U, 0x0bfbf0f0U,
159 0xec41adadU, 0x67b3d4d4U, 0xfd5fa2a2U, 0xea45afafU,
160 0xbf239c9cU, 0xf753a4a4U, 0x96e47272U, 0x5b9bc0c0U,
161 0xc275b7b7U, 0x1ce1fdfdU, 0xae3d9393U, 0x6a4c2626U,
162 0x5a6c3636U, 0x417e3f3fU, 0x02f5f7f7U, 0x4f83ccccU,
163 0x5c683434U, 0xf451a5a5U, 0x34d1e5e5U, 0x08f9f1f1U,
164 0x93e27171U, 0x73abd8d8U, 0x53623131U, 0x3f2a1515U,
165 0x0c080404U, 0x5295c7c7U, 0x65462323U, 0x5e9dc3c3U,
166 0x28301818U, 0xa1379696U, 0x0f0a0505U, 0xb52f9a9aU,
167 0x090e0707U, 0x36241212U, 0x9b1b8080U, 0x3ddfe2e2U,
168 0x26cdebebU, 0x694e2727U, 0xcd7fb2b2U, 0x9fea7575U,
169 0x1b120909U, 0x9e1d8383U, 0x74582c2cU, 0x2e341a1aU,
170 0x2d361b1bU, 0xb2dc6e6eU, 0xeeb45a5aU, 0xfb5ba0a0U,
171 0xf6a45252U, 0x4d763b3bU, 0x61b7d6d6U, 0xce7db3b3U,
172 0x7b522929U, 0x3edde3e3U, 0x715e2f2fU, 0x97138484U,
173 0xf5a65353U, 0x68b9d1d1U, 0x00000000U, 0x2cc1ededU,
174 0x60402020U, 0x1fe3fcfcU, 0xc879b1b1U, 0xedb65b5bU,
175 0xbed46a6aU, 0x468dcbcbU, 0xd967bebeU, 0x4b723939U,
176 0xde944a4aU, 0xd4984c4cU, 0xe8b05858U, 0x4a85cfcfU,
177 0x6bbbd0d0U, 0x2ac5efefU, 0xe54faaaaU, 0x16edfbfbU,
178 0xc5864343U, 0xd79a4d4dU, 0x55663333U, 0x94118585U,
179 0xcf8a4545U, 0x10e9f9f9U, 0x06040202U, 0x81fe7f7fU,
180 0xf0a05050U, 0x44783c3cU, 0xba259f9fU, 0xe34ba8a8U,
181 0xf3a25151U, 0xfe5da3a3U, 0xc0804040U, 0x8a058f8fU,
182 0xad3f9292U, 0xbc219d9dU, 0x48703838U, 0x04f1f5f5U,
183 0xdf63bcbcU, 0xc177b6b6U, 0x75afdadaU, 0x63422121U,
184 0x30201010U, 0x1ae5ffffU, 0x0efdf3f3U, 0x6dbfd2d2U,
185 0x4c81cdcdU, 0x14180c0cU, 0x35261313U, 0x2fc3ececU,
186 0xe1be5f5fU, 0xa2359797U, 0xcc884444U, 0x392e1717U,
187 0x5793c4c4U, 0xf255a7a7U, 0x82fc7e7eU, 0x477a3d3dU,
188 0xacc86464U, 0xe7ba5d5dU, 0x2b321919U, 0x95e67373U,
189 0xa0c06060U, 0x98198181U, 0xd19e4f4fU, 0x7fa3dcdcU,
190 0x66442222U, 0x7e542a2aU, 0xab3b9090U, 0x830b8888U,
191 0xca8c4646U, 0x29c7eeeeU, 0xd36bb8b8U, 0x3c281414U,
192 0x79a7dedeU, 0xe2bc5e5eU, 0x1d160b0bU, 0x76addbdbU,
193 0x3bdbe0e0U, 0x56643232U, 0x4e743a3aU, 0x1e140a0aU,
194 0xdb924949U, 0x0a0c0606U, 0x6c482424U, 0xe4b85c5cU,
195 0x5d9fc2c2U, 0x6ebdd3d3U, 0xef43acacU, 0xa6c46262U,
196 0xa8399191U, 0xa4319595U, 0x37d3e4e4U, 0x8bf27979U,
197 0x32d5e7e7U, 0x438bc8c8U, 0x596e3737U, 0xb7da6d6dU,
198 0x8c018d8dU, 0x64b1d5d5U, 0xd29c4e4eU, 0xe049a9a9U,
199 0xb4d86c6cU, 0xfaac5656U, 0x07f3f4f4U, 0x25cfeaeaU,
200 0xafca6565U, 0x8ef47a7aU, 0xe947aeaeU, 0x18100808U,
201 0xd56fbabaU, 0x88f07878U, 0x6f4a2525U, 0x725c2e2eU,
202 0x24381c1cU, 0xf157a6a6U, 0xc773b4b4U, 0x5197c6c6U,
203 0x23cbe8e8U, 0x7ca1ddddU, 0x9ce87474U, 0x213e1f1fU,
204 0xdd964b4bU, 0xdc61bdbdU, 0x860d8b8bU, 0x850f8a8aU,
205 0x90e07070U, 0x427c3e3eU, 0xc471b5b5U, 0xaacc6666U,
206 0xd8904848U, 0x05060303U, 0x01f7f6f6U, 0x121c0e0eU,
207 0xa3c26161U, 0x5f6a3535U, 0xf9ae5757U, 0xd069b9b9U,
208 0x91178686U, 0x5899c1c1U, 0x273a1d1dU, 0xb9279e9eU,
209 0x38d9e1e1U, 0x13ebf8f8U, 0xb32b9898U, 0x33221111U,
210 0xbbd26969U, 0x70a9d9d9U, 0x89078e8eU, 0xa7339494U,
211 0xb62d9b9bU, 0x223c1e1eU, 0x92158787U, 0x20c9e9e9U,
212 0x4987ceceU, 0xffaa5555U, 0x78502828U, 0x7aa5dfdfU,
213 0x8f038c8cU, 0xf859a1a1U, 0x80098989U, 0x171a0d0dU,
214 0xda65bfbfU, 0x31d7e6e6U, 0xc6844242U, 0xb8d06868U,
215 0xc3824141U, 0xb0299999U, 0x775a2d2dU, 0x111e0f0fU,
216 0xcb7bb0b0U, 0xfca85454U, 0xd66dbbbbU, 0x3a2c1616U
217 };
218
219
220 static const uint32_t Te2[256] =
221 {
222 0x63a5c663U, 0x7c84f87cU, 0x7799ee77U, 0x7b8df67bU,
223 0xf20dfff2U, 0x6bbdd66bU, 0x6fb1de6fU, 0xc55491c5U,
224 0x30506030U, 0x01030201U, 0x67a9ce67U, 0x2b7d562bU,
225 0xfe19e7feU, 0xd762b5d7U, 0xabe64dabU, 0x769aec76U,
226 0xca458fcaU, 0x829d1f82U, 0xc94089c9U, 0x7d87fa7dU,
227 0xfa15effaU, 0x59ebb259U, 0x47c98e47U, 0xf00bfbf0U,
228 0xadec41adU, 0xd467b3d4U, 0xa2fd5fa2U, 0xafea45afU,
229 0x9cbf239cU, 0xa4f753a4U, 0x7296e472U, 0xc05b9bc0U,
230 0xb7c275b7U, 0xfd1ce1fdU, 0x93ae3d93U, 0x266a4c26U,
231 0x365a6c36U, 0x3f417e3fU, 0xf702f5f7U, 0xcc4f83ccU,
232 0x345c6834U, 0xa5f451a5U, 0xe534d1e5U, 0xf108f9f1U,
233 0x7193e271U, 0xd873abd8U, 0x31536231U, 0x153f2a15U,
234 0x040c0804U, 0xc75295c7U, 0x23654623U, 0xc35e9dc3U,
235 0x18283018U, 0x96a13796U, 0x050f0a05U, 0x9ab52f9aU,
236 0x07090e07U, 0x12362412U, 0x809b1b80U, 0xe23ddfe2U,
237 0xeb26cdebU, 0x27694e27U, 0xb2cd7fb2U, 0x759fea75U,
238 0x091b1209U, 0x839e1d83U, 0x2c74582cU, 0x1a2e341aU,
239 0x1b2d361bU, 0x6eb2dc6eU, 0x5aeeb45aU, 0xa0fb5ba0U,
240 0x52f6a452U, 0x3b4d763bU, 0xd661b7d6U, 0xb3ce7db3U,
241 0x297b5229U, 0xe33edde3U, 0x2f715e2fU, 0x84971384U,
242 0x53f5a653U, 0xd168b9d1U, 0x00000000U, 0xed2cc1edU,
243 0x20604020U, 0xfc1fe3fcU, 0xb1c879b1U, 0x5bedb65bU,
244 0x6abed46aU, 0xcb468dcbU, 0xbed967beU, 0x394b7239U,
245 0x4ade944aU, 0x4cd4984cU, 0x58e8b058U, 0xcf4a85cfU,
246 0xd06bbbd0U, 0xef2ac5efU, 0xaae54faaU, 0xfb16edfbU,
247 0x43c58643U, 0x4dd79a4dU, 0x33556633U, 0x85941185U,
248 0x45cf8a45U, 0xf910e9f9U, 0x02060402U, 0x7f81fe7fU,
249 0x50f0a050U, 0x3c44783cU, 0x9fba259fU, 0xa8e34ba8U,
250 0x51f3a251U, 0xa3fe5da3U, 0x40c08040U, 0x8f8a058fU,
251 0x92ad3f92U, 0x9dbc219dU, 0x38487038U, 0xf504f1f5U,
252 0xbcdf63bcU, 0xb6c177b6U, 0xda75afdaU, 0x21634221U,
253 0x10302010U, 0xff1ae5ffU, 0xf30efdf3U, 0xd26dbfd2U,
254 0xcd4c81cdU, 0x0c14180cU, 0x13352613U, 0xec2fc3ecU,
255 0x5fe1be5fU, 0x97a23597U, 0x44cc8844U, 0x17392e17U,
256 0xc45793c4U, 0xa7f255a7U, 0x7e82fc7eU, 0x3d477a3dU,
257 0x64acc864U, 0x5de7ba5dU, 0x192b3219U, 0x7395e673U,
258 0x60a0c060U, 0x81981981U, 0x4fd19e4fU, 0xdc7fa3dcU,
259 0x22664422U, 0x2a7e542aU, 0x90ab3b90U, 0x88830b88U,
260 0x46ca8c46U, 0xee29c7eeU, 0xb8d36bb8U, 0x143c2814U,
261 0xde79a7deU, 0x5ee2bc5eU, 0x0b1d160bU, 0xdb76addbU,
262 0xe03bdbe0U, 0x32566432U, 0x3a4e743aU, 0x0a1e140aU,
263 0x49db9249U, 0x060a0c06U, 0x246c4824U, 0x5ce4b85cU,
264 0xc25d9fc2U, 0xd36ebdd3U, 0xacef43acU, 0x62a6c462U,
265 0x91a83991U, 0x95a43195U, 0xe437d3e4U, 0x798bf279U,
266 0xe732d5e7U, 0xc8438bc8U, 0x37596e37U, 0x6db7da6dU,
267 0x8d8c018dU, 0xd564b1d5U, 0x4ed29c4eU, 0xa9e049a9U,
268 0x6cb4d86cU, 0x56faac56U, 0xf407f3f4U, 0xea25cfeaU,
269 0x65afca65U, 0x7a8ef47aU, 0xaee947aeU, 0x08181008U,
270 0xbad56fbaU, 0x7888f078U, 0x256f4a25U, 0x2e725c2eU,
271 0x1c24381cU, 0xa6f157a6U, 0xb4c773b4U, 0xc65197c6U,
272 0xe823cbe8U, 0xdd7ca1ddU, 0x749ce874U, 0x1f213e1fU,
273 0x4bdd964bU, 0xbddc61bdU, 0x8b860d8bU, 0x8a850f8aU,
274 0x7090e070U, 0x3e427c3eU, 0xb5c471b5U, 0x66aacc66U,
275 0x48d89048U, 0x03050603U, 0xf601f7f6U, 0x0e121c0eU,
276 0x61a3c261U, 0x355f6a35U, 0x57f9ae57U, 0xb9d069b9U,
277 0x86911786U, 0xc15899c1U, 0x1d273a1dU, 0x9eb9279eU,
278 0xe138d9e1U, 0xf813ebf8U, 0x98b32b98U, 0x11332211U,
279 0x69bbd269U, 0xd970a9d9U, 0x8e89078eU, 0x94a73394U,
280 0x9bb62d9bU, 0x1e223c1eU, 0x87921587U, 0xe920c9e9U,
281 0xce4987ceU, 0x55ffaa55U, 0x28785028U, 0xdf7aa5dfU,
282 0x8c8f038cU, 0xa1f859a1U, 0x89800989U, 0x0d171a0dU,
283 0xbfda65bfU, 0xe631d7e6U, 0x42c68442U, 0x68b8d068U,
284 0x41c38241U, 0x99b02999U, 0x2d775a2dU, 0x0f111e0fU,
285 0xb0cb7bb0U, 0x54fca854U, 0xbbd66dbbU, 0x163a2c16U
286 };
287
288
289 static const uint32_t Te3[256] =
290 {
291 0x6363a5c6U, 0x7c7c84f8U, 0x777799eeU, 0x7b7b8df6U,
292 0xf2f20dffU, 0x6b6bbdd6U, 0x6f6fb1deU, 0xc5c55491U,
293 0x30305060U, 0x01010302U, 0x6767a9ceU, 0x2b2b7d56U,
294 0xfefe19e7U, 0xd7d762b5U, 0xababe64dU, 0x76769aecU,
295 0xcaca458fU, 0x82829d1fU, 0xc9c94089U, 0x7d7d87faU,
296 0xfafa15efU, 0x5959ebb2U, 0x4747c98eU, 0xf0f00bfbU,
297 0xadadec41U, 0xd4d467b3U, 0xa2a2fd5fU, 0xafafea45U,
298 0x9c9cbf23U, 0xa4a4f753U, 0x727296e4U, 0xc0c05b9bU,
299 0xb7b7c275U, 0xfdfd1ce1U, 0x9393ae3dU, 0x26266a4cU,
300 0x36365a6cU, 0x3f3f417eU, 0xf7f702f5U, 0xcccc4f83U,
301 0x34345c68U, 0xa5a5f451U, 0xe5e534d1U, 0xf1f108f9U,
302 0x717193e2U, 0xd8d873abU, 0x31315362U, 0x15153f2aU,
303 0x04040c08U, 0xc7c75295U, 0x23236546U, 0xc3c35e9dU,
304 0x18182830U, 0x9696a137U, 0x05050f0aU, 0x9a9ab52fU,
305 0x0707090eU, 0x12123624U, 0x80809b1bU, 0xe2e23ddfU,
306 0xebeb26cdU, 0x2727694eU, 0xb2b2cd7fU, 0x75759feaU,
307 0x09091b12U, 0x83839e1dU, 0x2c2c7458U, 0x1a1a2e34U,
308 0x1b1b2d36U, 0x6e6eb2dcU, 0x5a5aeeb4U, 0xa0a0fb5bU,
309 0x5252f6a4U, 0x3b3b4d76U, 0xd6d661b7U, 0xb3b3ce7dU,
310 0x29297b52U, 0xe3e33eddU, 0x2f2f715eU, 0x84849713U,
311 0x5353f5a6U, 0xd1d168b9U, 0x00000000U, 0xeded2cc1U,
312 0x20206040U, 0xfcfc1fe3U, 0xb1b1c879U, 0x5b5bedb6U,
313 0x6a6abed4U, 0xcbcb468dU, 0xbebed967U, 0x39394b72U,
314 0x4a4ade94U, 0x4c4cd498U, 0x5858e8b0U, 0xcfcf4a85U,
315 0xd0d06bbbU, 0xefef2ac5U, 0xaaaae54fU, 0xfbfb16edU,
316 0x4343c586U, 0x4d4dd79aU, 0x33335566U, 0x85859411U,
317 0x4545cf8aU, 0xf9f910e9U, 0x02020604U, 0x7f7f81feU,
318 0x5050f0a0U, 0x3c3c4478U, 0x9f9fba25U, 0xa8a8e34bU,
319 0x5151f3a2U, 0xa3a3fe5dU, 0x4040c080U, 0x8f8f8a05U,
320 0x9292ad3fU, 0x9d9dbc21U, 0x38384870U, 0xf5f504f1U,
321 0xbcbcdf63U, 0xb6b6c177U, 0xdada75afU, 0x21216342U,
322 0x10103020U, 0xffff1ae5U, 0xf3f30efdU, 0xd2d26dbfU,
323 0xcdcd4c81U, 0x0c0c1418U, 0x13133526U, 0xecec2fc3U,
324 0x5f5fe1beU, 0x9797a235U, 0x4444cc88U, 0x1717392eU,
325 0xc4c45793U, 0xa7a7f255U, 0x7e7e82fcU, 0x3d3d477aU,
326 0x6464acc8U, 0x5d5de7baU, 0x19192b32U, 0x737395e6U,
327 0x6060a0c0U, 0x81819819U, 0x4f4fd19eU, 0xdcdc7fa3U,
328 0x22226644U, 0x2a2a7e54U, 0x9090ab3bU, 0x8888830bU,
329 0x4646ca8cU, 0xeeee29c7U, 0xb8b8d36bU, 0x14143c28U,
330 0xdede79a7U, 0x5e5ee2bcU, 0x0b0b1d16U, 0xdbdb76adU,
331 0xe0e03bdbU, 0x32325664U, 0x3a3a4e74U, 0x0a0a1e14U,
332 0x4949db92U, 0x06060a0cU, 0x24246c48U, 0x5c5ce4b8U,
333 0xc2c25d9fU, 0xd3d36ebdU, 0xacacef43U, 0x6262a6c4U,
334 0x9191a839U, 0x9595a431U, 0xe4e437d3U, 0x79798bf2U,
335 0xe7e732d5U, 0xc8c8438bU, 0x3737596eU, 0x6d6db7daU,
336 0x8d8d8c01U, 0xd5d564b1U, 0x4e4ed29cU, 0xa9a9e049U,
337 0x6c6cb4d8U, 0x5656faacU, 0xf4f407f3U, 0xeaea25cfU,
338 0x6565afcaU, 0x7a7a8ef4U, 0xaeaee947U, 0x08081810U,
339 0xbabad56fU, 0x787888f0U, 0x25256f4aU, 0x2e2e725cU,
340 0x1c1c2438U, 0xa6a6f157U, 0xb4b4c773U, 0xc6c65197U,
341 0xe8e823cbU, 0xdddd7ca1U, 0x74749ce8U, 0x1f1f213eU,
342 0x4b4bdd96U, 0xbdbddc61U, 0x8b8b860dU, 0x8a8a850fU,
343 0x707090e0U, 0x3e3e427cU, 0xb5b5c471U, 0x6666aaccU,
344 0x4848d890U, 0x03030506U, 0xf6f601f7U, 0x0e0e121cU,
345 0x6161a3c2U, 0x35355f6aU, 0x5757f9aeU, 0xb9b9d069U,
346 0x86869117U, 0xc1c15899U, 0x1d1d273aU, 0x9e9eb927U,
347 0xe1e138d9U, 0xf8f813ebU, 0x9898b32bU, 0x11113322U,
348 0x6969bbd2U, 0xd9d970a9U, 0x8e8e8907U, 0x9494a733U,
349 0x9b9bb62dU, 0x1e1e223cU, 0x87879215U, 0xe9e920c9U,
350 0xcece4987U, 0x5555ffaaU, 0x28287850U, 0xdfdf7aa5U,
351 0x8c8c8f03U, 0xa1a1f859U, 0x89898009U, 0x0d0d171aU,
352 0xbfbfda65U, 0xe6e631d7U, 0x4242c684U, 0x6868b8d0U,
353 0x4141c382U, 0x9999b029U, 0x2d2d775aU, 0x0f0f111eU,
354 0xb0b0cb7bU, 0x5454fca8U, 0xbbbbd66dU, 0x16163a2cU
355 };
356
357 static const uint32_t Te4[256] =
358 {
359 0x63636363U, 0x7c7c7c7cU, 0x77777777U, 0x7b7b7b7bU,
360 0xf2f2f2f2U, 0x6b6b6b6bU, 0x6f6f6f6fU, 0xc5c5c5c5U,
361 0x30303030U, 0x01010101U, 0x67676767U, 0x2b2b2b2bU,
362 0xfefefefeU, 0xd7d7d7d7U, 0xababababU, 0x76767676U,
363 0xcacacacaU, 0x82828282U, 0xc9c9c9c9U, 0x7d7d7d7dU,
364 0xfafafafaU, 0x59595959U, 0x47474747U, 0xf0f0f0f0U,
365 0xadadadadU, 0xd4d4d4d4U, 0xa2a2a2a2U, 0xafafafafU,
366 0x9c9c9c9cU, 0xa4a4a4a4U, 0x72727272U, 0xc0c0c0c0U,
367 0xb7b7b7b7U, 0xfdfdfdfdU, 0x93939393U, 0x26262626U,
368 0x36363636U, 0x3f3f3f3fU, 0xf7f7f7f7U, 0xccccccccU,
369 0x34343434U, 0xa5a5a5a5U, 0xe5e5e5e5U, 0xf1f1f1f1U,
370 0x71717171U, 0xd8d8d8d8U, 0x31313131U, 0x15151515U,
371 0x04040404U, 0xc7c7c7c7U, 0x23232323U, 0xc3c3c3c3U,
372 0x18181818U, 0x96969696U, 0x05050505U, 0x9a9a9a9aU,
373 0x07070707U, 0x12121212U, 0x80808080U, 0xe2e2e2e2U,
374 0xebebebebU, 0x27272727U, 0xb2b2b2b2U, 0x75757575U,
375 0x09090909U, 0x83838383U, 0x2c2c2c2cU, 0x1a1a1a1aU,
376 0x1b1b1b1bU, 0x6e6e6e6eU, 0x5a5a5a5aU, 0xa0a0a0a0U,
377 0x52525252U, 0x3b3b3b3bU, 0xd6d6d6d6U, 0xb3b3b3b3U,
378 0x29292929U, 0xe3e3e3e3U, 0x2f2f2f2fU, 0x84848484U,
379 0x53535353U, 0xd1d1d1d1U, 0x00000000U, 0xededededU,
380 0x20202020U, 0xfcfcfcfcU, 0xb1b1b1b1U, 0x5b5b5b5bU,
381 0x6a6a6a6aU, 0xcbcbcbcbU, 0xbebebebeU, 0x39393939U,
382 0x4a4a4a4aU, 0x4c4c4c4cU, 0x58585858U, 0xcfcfcfcfU,
383 0xd0d0d0d0U, 0xefefefefU, 0xaaaaaaaaU, 0xfbfbfbfbU,
384 0x43434343U, 0x4d4d4d4dU, 0x33333333U, 0x85858585U,
385 0x45454545U, 0xf9f9f9f9U, 0x02020202U, 0x7f7f7f7fU,
386 0x50505050U, 0x3c3c3c3cU, 0x9f9f9f9fU, 0xa8a8a8a8U,
387 0x51515151U, 0xa3a3a3a3U, 0x40404040U, 0x8f8f8f8fU,
388 0x92929292U, 0x9d9d9d9dU, 0x38383838U, 0xf5f5f5f5U,
389 0xbcbcbcbcU, 0xb6b6b6b6U, 0xdadadadaU, 0x21212121U,
390 0x10101010U, 0xffffffffU, 0xf3f3f3f3U, 0xd2d2d2d2U,
391 0xcdcdcdcdU, 0x0c0c0c0cU, 0x13131313U, 0xececececU,
392 0x5f5f5f5fU, 0x97979797U, 0x44444444U, 0x17171717U,
393 0xc4c4c4c4U, 0xa7a7a7a7U, 0x7e7e7e7eU, 0x3d3d3d3dU,
394 0x64646464U, 0x5d5d5d5dU, 0x19191919U, 0x73737373U,
395 0x60606060U, 0x81818181U, 0x4f4f4f4fU, 0xdcdcdcdcU,
396 0x22222222U, 0x2a2a2a2aU, 0x90909090U, 0x88888888U,
397 0x46464646U, 0xeeeeeeeeU, 0xb8b8b8b8U, 0x14141414U,
398 0xdedededeU, 0x5e5e5e5eU, 0x0b0b0b0bU, 0xdbdbdbdbU,
399 0xe0e0e0e0U, 0x32323232U, 0x3a3a3a3aU, 0x0a0a0a0aU,
400 0x49494949U, 0x06060606U, 0x24242424U, 0x5c5c5c5cU,
401 0xc2c2c2c2U, 0xd3d3d3d3U, 0xacacacacU, 0x62626262U,
402 0x91919191U, 0x95959595U, 0xe4e4e4e4U, 0x79797979U,
403 0xe7e7e7e7U, 0xc8c8c8c8U, 0x37373737U, 0x6d6d6d6dU,
404 0x8d8d8d8dU, 0xd5d5d5d5U, 0x4e4e4e4eU, 0xa9a9a9a9U,
405 0x6c6c6c6cU, 0x56565656U, 0xf4f4f4f4U, 0xeaeaeaeaU,
406 0x65656565U, 0x7a7a7a7aU, 0xaeaeaeaeU, 0x08080808U,
407 0xbabababaU, 0x78787878U, 0x25252525U, 0x2e2e2e2eU,
408 0x1c1c1c1cU, 0xa6a6a6a6U, 0xb4b4b4b4U, 0xc6c6c6c6U,
409 0xe8e8e8e8U, 0xddddddddU, 0x74747474U, 0x1f1f1f1fU,
410 0x4b4b4b4bU, 0xbdbdbdbdU, 0x8b8b8b8bU, 0x8a8a8a8aU,
411 0x70707070U, 0x3e3e3e3eU, 0xb5b5b5b5U, 0x66666666U,
412 0x48484848U, 0x03030303U, 0xf6f6f6f6U, 0x0e0e0e0eU,
413 0x61616161U, 0x35353535U, 0x57575757U, 0xb9b9b9b9U,
414 0x86868686U, 0xc1c1c1c1U, 0x1d1d1d1dU, 0x9e9e9e9eU,
415 0xe1e1e1e1U, 0xf8f8f8f8U, 0x98989898U, 0x11111111U,
416 0x69696969U, 0xd9d9d9d9U, 0x8e8e8e8eU, 0x94949494U,
417 0x9b9b9b9bU, 0x1e1e1e1eU, 0x87878787U, 0xe9e9e9e9U,
418 0xcecececeU, 0x55555555U, 0x28282828U, 0xdfdfdfdfU,
419 0x8c8c8c8cU, 0xa1a1a1a1U, 0x89898989U, 0x0d0d0d0dU,
420 0xbfbfbfbfU, 0xe6e6e6e6U, 0x42424242U, 0x68686868U,
421 0x41414141U, 0x99999999U, 0x2d2d2d2dU, 0x0f0f0f0fU,
422 0xb0b0b0b0U, 0x54545454U, 0xbbbbbbbbU, 0x16161616U
423 };
424
425 /* Decrypt Sbox constants (for the substitute bytes operation) */
426
427 static const uint32_t Td0[256] =
428 {
429 0x51f4a750U, 0x7e416553U, 0x1a17a4c3U, 0x3a275e96U,
430 0x3bab6bcbU, 0x1f9d45f1U, 0xacfa58abU, 0x4be30393U,
431 0x2030fa55U, 0xad766df6U, 0x88cc7691U, 0xf5024c25U,
432 0x4fe5d7fcU, 0xc52acbd7U, 0x26354480U, 0xb562a38fU,
433 0xdeb15a49U, 0x25ba1b67U, 0x45ea0e98U, 0x5dfec0e1U,
434 0xc32f7502U, 0x814cf012U, 0x8d4697a3U, 0x6bd3f9c6U,
435 0x038f5fe7U, 0x15929c95U, 0xbf6d7aebU, 0x955259daU,
436 0xd4be832dU, 0x587421d3U, 0x49e06929U, 0x8ec9c844U,
437 0x75c2896aU, 0xf48e7978U, 0x99583e6bU, 0x27b971ddU,
438 0xbee14fb6U, 0xf088ad17U, 0xc920ac66U, 0x7dce3ab4U,
439 0x63df4a18U, 0xe51a3182U, 0x97513360U, 0x62537f45U,
440 0xb16477e0U, 0xbb6bae84U, 0xfe81a01cU, 0xf9082b94U,
441 0x70486858U, 0x8f45fd19U, 0x94de6c87U, 0x527bf8b7U,
442 0xab73d323U, 0x724b02e2U, 0xe31f8f57U, 0x6655ab2aU,
443 0xb2eb2807U, 0x2fb5c203U, 0x86c57b9aU, 0xd33708a5U,
444 0x302887f2U, 0x23bfa5b2U, 0x02036abaU, 0xed16825cU,
445 0x8acf1c2bU, 0xa779b492U, 0xf307f2f0U, 0x4e69e2a1U,
446 0x65daf4cdU, 0x0605bed5U, 0xd134621fU, 0xc4a6fe8aU,
447 0x342e539dU, 0xa2f355a0U, 0x058ae132U, 0xa4f6eb75U,
448 0x0b83ec39U, 0x4060efaaU, 0x5e719f06U, 0xbd6e1051U,
449 0x3e218af9U, 0x96dd063dU, 0xdd3e05aeU, 0x4de6bd46U,
450 0x91548db5U, 0x71c45d05U, 0x0406d46fU, 0x605015ffU,
451 0x1998fb24U, 0xd6bde997U, 0x894043ccU, 0x67d99e77U,
452 0xb0e842bdU, 0x07898b88U, 0xe7195b38U, 0x79c8eedbU,
453 0xa17c0a47U, 0x7c420fe9U, 0xf8841ec9U, 0x00000000U,
454 0x09808683U, 0x322bed48U, 0x1e1170acU, 0x6c5a724eU,
455 0xfd0efffbU, 0x0f853856U, 0x3daed51eU, 0x362d3927U,
456 0x0a0fd964U, 0x685ca621U, 0x9b5b54d1U, 0x24362e3aU,
457 0x0c0a67b1U, 0x9357e70fU, 0xb4ee96d2U, 0x1b9b919eU,
458 0x80c0c54fU, 0x61dc20a2U, 0x5a774b69U, 0x1c121a16U,
459 0xe293ba0aU, 0xc0a02ae5U, 0x3c22e043U, 0x121b171dU,
460 0x0e090d0bU, 0xf28bc7adU, 0x2db6a8b9U, 0x141ea9c8U,
461 0x57f11985U, 0xaf75074cU, 0xee99ddbbU, 0xa37f60fdU,
462 0xf701269fU, 0x5c72f5bcU, 0x44663bc5U, 0x5bfb7e34U,
463 0x8b432976U, 0xcb23c6dcU, 0xb6edfc68U, 0xb8e4f163U,
464 0xd731dccaU, 0x42638510U, 0x13972240U, 0x84c61120U,
465 0x854a247dU, 0xd2bb3df8U, 0xaef93211U, 0xc729a16dU,
466 0x1d9e2f4bU, 0xdcb230f3U, 0x0d8652ecU, 0x77c1e3d0U,
467 0x2bb3166cU, 0xa970b999U, 0x119448faU, 0x47e96422U,
468 0xa8fc8cc4U, 0xa0f03f1aU, 0x567d2cd8U, 0x223390efU,
469 0x87494ec7U, 0xd938d1c1U, 0x8ccaa2feU, 0x98d40b36U,
470 0xa6f581cfU, 0xa57ade28U, 0xdab78e26U, 0x3fadbfa4U,
471 0x2c3a9de4U, 0x5078920dU, 0x6a5fcc9bU, 0x547e4662U,
472 0xf68d13c2U, 0x90d8b8e8U, 0x2e39f75eU, 0x82c3aff5U,
473 0x9f5d80beU, 0x69d0937cU, 0x6fd52da9U, 0xcf2512b3U,
474 0xc8ac993bU, 0x10187da7U, 0xe89c636eU, 0xdb3bbb7bU,
475 0xcd267809U, 0x6e5918f4U, 0xec9ab701U, 0x834f9aa8U,
476 0xe6956e65U, 0xaaffe67eU, 0x21bccf08U, 0xef15e8e6U,
477 0xbae79bd9U, 0x4a6f36ceU, 0xea9f09d4U, 0x29b07cd6U,
478 0x31a4b2afU, 0x2a3f2331U, 0xc6a59430U, 0x35a266c0U,
479 0x744ebc37U, 0xfc82caa6U, 0xe090d0b0U, 0x33a7d815U,
480 0xf104984aU, 0x41ecdaf7U, 0x7fcd500eU, 0x1791f62fU,
481 0x764dd68dU, 0x43efb04dU, 0xccaa4d54U, 0xe49604dfU,
482 0x9ed1b5e3U, 0x4c6a881bU, 0xc12c1fb8U, 0x4665517fU,
483 0x9d5eea04U, 0x018c355dU, 0xfa877473U, 0xfb0b412eU,
484 0xb3671d5aU, 0x92dbd252U, 0xe9105633U, 0x6dd64713U,
485 0x9ad7618cU, 0x37a10c7aU, 0x59f8148eU, 0xeb133c89U,
486 0xcea927eeU, 0xb761c935U, 0xe11ce5edU, 0x7a47b13cU,
487 0x9cd2df59U, 0x55f2733fU, 0x1814ce79U, 0x73c737bfU,
488 0x53f7cdeaU, 0x5ffdaa5bU, 0xdf3d6f14U, 0x7844db86U,
489 0xcaaff381U, 0xb968c43eU, 0x3824342cU, 0xc2a3405fU,
490 0x161dc372U, 0xbce2250cU, 0x283c498bU, 0xff0d9541U,
491 0x39a80171U, 0x080cb3deU, 0xd8b4e49cU, 0x6456c190U,
492 0x7bcb8461U, 0xd532b670U, 0x486c5c74U, 0xd0b85742U
493 };
494
495 static const uint32_t Td1[256] =
496 {
497 0x5051f4a7U, 0x537e4165U, 0xc31a17a4U, 0x963a275eU,
498 0xcb3bab6bU, 0xf11f9d45U, 0xabacfa58U, 0x934be303U,
499 0x552030faU, 0xf6ad766dU, 0x9188cc76U, 0x25f5024cU,
500 0xfc4fe5d7U, 0xd7c52acbU, 0x80263544U, 0x8fb562a3U,
501 0x49deb15aU, 0x6725ba1bU, 0x9845ea0eU, 0xe15dfec0U,
502 0x02c32f75U, 0x12814cf0U, 0xa38d4697U, 0xc66bd3f9U,
503 0xe7038f5fU, 0x9515929cU, 0xebbf6d7aU, 0xda955259U,
504 0x2dd4be83U, 0xd3587421U, 0x2949e069U, 0x448ec9c8U,
505 0x6a75c289U, 0x78f48e79U, 0x6b99583eU, 0xdd27b971U,
506 0xb6bee14fU, 0x17f088adU, 0x66c920acU, 0xb47dce3aU,
507 0x1863df4aU, 0x82e51a31U, 0x60975133U, 0x4562537fU,
508 0xe0b16477U, 0x84bb6baeU, 0x1cfe81a0U, 0x94f9082bU,
509 0x58704868U, 0x198f45fdU, 0x8794de6cU, 0xb7527bf8U,
510 0x23ab73d3U, 0xe2724b02U, 0x57e31f8fU, 0x2a6655abU,
511 0x07b2eb28U, 0x032fb5c2U, 0x9a86c57bU, 0xa5d33708U,
512 0xf2302887U, 0xb223bfa5U, 0xba02036aU, 0x5ced1682U,
513 0x2b8acf1cU, 0x92a779b4U, 0xf0f307f2U, 0xa14e69e2U,
514 0xcd65daf4U, 0xd50605beU, 0x1fd13462U, 0x8ac4a6feU,
515 0x9d342e53U, 0xa0a2f355U, 0x32058ae1U, 0x75a4f6ebU,
516 0x390b83ecU, 0xaa4060efU, 0x065e719fU, 0x51bd6e10U,
517 0xf93e218aU, 0x3d96dd06U, 0xaedd3e05U, 0x464de6bdU,
518 0xb591548dU, 0x0571c45dU, 0x6f0406d4U, 0xff605015U,
519 0x241998fbU, 0x97d6bde9U, 0xcc894043U, 0x7767d99eU,
520 0xbdb0e842U, 0x8807898bU, 0x38e7195bU, 0xdb79c8eeU,
521 0x47a17c0aU, 0xe97c420fU, 0xc9f8841eU, 0x00000000U,
522 0x83098086U, 0x48322bedU, 0xac1e1170U, 0x4e6c5a72U,
523 0xfbfd0effU, 0x560f8538U, 0x1e3daed5U, 0x27362d39U,
524 0x640a0fd9U, 0x21685ca6U, 0xd19b5b54U, 0x3a24362eU,
525 0xb10c0a67U, 0x0f9357e7U, 0xd2b4ee96U, 0x9e1b9b91U,
526 0x4f80c0c5U, 0xa261dc20U, 0x695a774bU, 0x161c121aU,
527 0x0ae293baU, 0xe5c0a02aU, 0x433c22e0U, 0x1d121b17U,
528 0x0b0e090dU, 0xadf28bc7U, 0xb92db6a8U, 0xc8141ea9U,
529 0x8557f119U, 0x4caf7507U, 0xbbee99ddU, 0xfda37f60U,
530 0x9ff70126U, 0xbc5c72f5U, 0xc544663bU, 0x345bfb7eU,
531 0x768b4329U, 0xdccb23c6U, 0x68b6edfcU, 0x63b8e4f1U,
532 0xcad731dcU, 0x10426385U, 0x40139722U, 0x2084c611U,
533 0x7d854a24U, 0xf8d2bb3dU, 0x11aef932U, 0x6dc729a1U,
534 0x4b1d9e2fU, 0xf3dcb230U, 0xec0d8652U, 0xd077c1e3U,
535 0x6c2bb316U, 0x99a970b9U, 0xfa119448U, 0x2247e964U,
536 0xc4a8fc8cU, 0x1aa0f03fU, 0xd8567d2cU, 0xef223390U,
537 0xc787494eU, 0xc1d938d1U, 0xfe8ccaa2U, 0x3698d40bU,
538 0xcfa6f581U, 0x28a57adeU, 0x26dab78eU, 0xa43fadbfU,
539 0xe42c3a9dU, 0x0d507892U, 0x9b6a5fccU, 0x62547e46U,
540 0xc2f68d13U, 0xe890d8b8U, 0x5e2e39f7U, 0xf582c3afU,
541 0xbe9f5d80U, 0x7c69d093U, 0xa96fd52dU, 0xb3cf2512U,
542 0x3bc8ac99U, 0xa710187dU, 0x6ee89c63U, 0x7bdb3bbbU,
543 0x09cd2678U, 0xf46e5918U, 0x01ec9ab7U, 0xa8834f9aU,
544 0x65e6956eU, 0x7eaaffe6U, 0x0821bccfU, 0xe6ef15e8U,
545 0xd9bae79bU, 0xce4a6f36U, 0xd4ea9f09U, 0xd629b07cU,
546 0xaf31a4b2U, 0x312a3f23U, 0x30c6a594U, 0xc035a266U,
547 0x37744ebcU, 0xa6fc82caU, 0xb0e090d0U, 0x1533a7d8U,
548 0x4af10498U, 0xf741ecdaU, 0x0e7fcd50U, 0x2f1791f6U,
549 0x8d764dd6U, 0x4d43efb0U, 0x54ccaa4dU, 0xdfe49604U,
550 0xe39ed1b5U, 0x1b4c6a88U, 0xb8c12c1fU, 0x7f466551U,
551 0x049d5eeaU, 0x5d018c35U, 0x73fa8774U, 0x2efb0b41U,
552 0x5ab3671dU, 0x5292dbd2U, 0x33e91056U, 0x136dd647U,
553 0x8c9ad761U, 0x7a37a10cU, 0x8e59f814U, 0x89eb133cU,
554 0xeecea927U, 0x35b761c9U, 0xede11ce5U, 0x3c7a47b1U,
555 0x599cd2dfU, 0x3f55f273U, 0x791814ceU, 0xbf73c737U,
556 0xea53f7cdU, 0x5b5ffdaaU, 0x14df3d6fU, 0x867844dbU,
557 0x81caaff3U, 0x3eb968c4U, 0x2c382434U, 0x5fc2a340U,
558 0x72161dc3U, 0x0cbce225U, 0x8b283c49U, 0x41ff0d95U,
559 0x7139a801U, 0xde080cb3U, 0x9cd8b4e4U, 0x906456c1U,
560 0x617bcb84U, 0x70d532b6U, 0x74486c5cU, 0x42d0b857U
561 };
562
563 static const uint32_t Td2[256] =
564 {
565 0xa75051f4U, 0x65537e41U, 0xa4c31a17U, 0x5e963a27U,
566 0x6bcb3babU, 0x45f11f9dU, 0x58abacfaU, 0x03934be3U,
567 0xfa552030U, 0x6df6ad76U, 0x769188ccU, 0x4c25f502U,
568 0xd7fc4fe5U, 0xcbd7c52aU, 0x44802635U, 0xa38fb562U,
569 0x5a49deb1U, 0x1b6725baU, 0x0e9845eaU, 0xc0e15dfeU,
570 0x7502c32fU, 0xf012814cU, 0x97a38d46U, 0xf9c66bd3U,
571 0x5fe7038fU, 0x9c951592U, 0x7aebbf6dU, 0x59da9552U,
572 0x832dd4beU, 0x21d35874U, 0x692949e0U, 0xc8448ec9U,
573 0x896a75c2U, 0x7978f48eU, 0x3e6b9958U, 0x71dd27b9U,
574 0x4fb6bee1U, 0xad17f088U, 0xac66c920U, 0x3ab47dceU,
575 0x4a1863dfU, 0x3182e51aU, 0x33609751U, 0x7f456253U,
576 0x77e0b164U, 0xae84bb6bU, 0xa01cfe81U, 0x2b94f908U,
577 0x68587048U, 0xfd198f45U, 0x6c8794deU, 0xf8b7527bU,
578 0xd323ab73U, 0x02e2724bU, 0x8f57e31fU, 0xab2a6655U,
579 0x2807b2ebU, 0xc2032fb5U, 0x7b9a86c5U, 0x08a5d337U,
580 0x87f23028U, 0xa5b223bfU, 0x6aba0203U, 0x825ced16U,
581 0x1c2b8acfU, 0xb492a779U, 0xf2f0f307U, 0xe2a14e69U,
582 0xf4cd65daU, 0xbed50605U, 0x621fd134U, 0xfe8ac4a6U,
583 0x539d342eU, 0x55a0a2f3U, 0xe132058aU, 0xeb75a4f6U,
584 0xec390b83U, 0xefaa4060U, 0x9f065e71U, 0x1051bd6eU,
585 0x8af93e21U, 0x063d96ddU, 0x05aedd3eU, 0xbd464de6U,
586 0x8db59154U, 0x5d0571c4U, 0xd46f0406U, 0x15ff6050U,
587 0xfb241998U, 0xe997d6bdU, 0x43cc8940U, 0x9e7767d9U,
588 0x42bdb0e8U, 0x8b880789U, 0x5b38e719U, 0xeedb79c8U,
589 0x0a47a17cU, 0x0fe97c42U, 0x1ec9f884U, 0x00000000U,
590 0x86830980U, 0xed48322bU, 0x70ac1e11U, 0x724e6c5aU,
591 0xfffbfd0eU, 0x38560f85U, 0xd51e3daeU, 0x3927362dU,
592 0xd9640a0fU, 0xa621685cU, 0x54d19b5bU, 0x2e3a2436U,
593 0x67b10c0aU, 0xe70f9357U, 0x96d2b4eeU, 0x919e1b9bU,
594 0xc54f80c0U, 0x20a261dcU, 0x4b695a77U, 0x1a161c12U,
595 0xba0ae293U, 0x2ae5c0a0U, 0xe0433c22U, 0x171d121bU,
596 0x0d0b0e09U, 0xc7adf28bU, 0xa8b92db6U, 0xa9c8141eU,
597 0x198557f1U, 0x074caf75U, 0xddbbee99U, 0x60fda37fU,
598 0x269ff701U, 0xf5bc5c72U, 0x3bc54466U, 0x7e345bfbU,
599 0x29768b43U, 0xc6dccb23U, 0xfc68b6edU, 0xf163b8e4U,
600 0xdccad731U, 0x85104263U, 0x22401397U, 0x112084c6U,
601 0x247d854aU, 0x3df8d2bbU, 0x3211aef9U, 0xa16dc729U,
602 0x2f4b1d9eU, 0x30f3dcb2U, 0x52ec0d86U, 0xe3d077c1U,
603 0x166c2bb3U, 0xb999a970U, 0x48fa1194U, 0x642247e9U,
604 0x8cc4a8fcU, 0x3f1aa0f0U, 0x2cd8567dU, 0x90ef2233U,
605 0x4ec78749U, 0xd1c1d938U, 0xa2fe8ccaU, 0x0b3698d4U,
606 0x81cfa6f5U, 0xde28a57aU, 0x8e26dab7U, 0xbfa43fadU,
607 0x9de42c3aU, 0x920d5078U, 0xcc9b6a5fU, 0x4662547eU,
608 0x13c2f68dU, 0xb8e890d8U, 0xf75e2e39U, 0xaff582c3U,
609 0x80be9f5dU, 0x937c69d0U, 0x2da96fd5U, 0x12b3cf25U,
610 0x993bc8acU, 0x7da71018U, 0x636ee89cU, 0xbb7bdb3bU,
611 0x7809cd26U, 0x18f46e59U, 0xb701ec9aU, 0x9aa8834fU,
612 0x6e65e695U, 0xe67eaaffU, 0xcf0821bcU, 0xe8e6ef15U,
613 0x9bd9bae7U, 0x36ce4a6fU, 0x09d4ea9fU, 0x7cd629b0U,
614 0xb2af31a4U, 0x23312a3fU, 0x9430c6a5U, 0x66c035a2U,
615 0xbc37744eU, 0xcaa6fc82U, 0xd0b0e090U, 0xd81533a7U,
616 0x984af104U, 0xdaf741ecU, 0x500e7fcdU, 0xf62f1791U,
617 0xd68d764dU, 0xb04d43efU, 0x4d54ccaaU, 0x04dfe496U,
618 0xb5e39ed1U, 0x881b4c6aU, 0x1fb8c12cU, 0x517f4665U,
619 0xea049d5eU, 0x355d018cU, 0x7473fa87U, 0x412efb0bU,
620 0x1d5ab367U, 0xd25292dbU, 0x5633e910U, 0x47136dd6U,
621 0x618c9ad7U, 0x0c7a37a1U, 0x148e59f8U, 0x3c89eb13U,
622 0x27eecea9U, 0xc935b761U, 0xe5ede11cU, 0xb13c7a47U,
623 0xdf599cd2U, 0x733f55f2U, 0xce791814U, 0x37bf73c7U,
624 0xcdea53f7U, 0xaa5b5ffdU, 0x6f14df3dU, 0xdb867844U,
625 0xf381caafU, 0xc43eb968U, 0x342c3824U, 0x405fc2a3U,
626 0xc372161dU, 0x250cbce2U, 0x498b283cU, 0x9541ff0dU,
627 0x017139a8U, 0xb3de080cU, 0xe49cd8b4U, 0xc1906456U,
628 0x84617bcbU, 0xb670d532U, 0x5c74486cU, 0x5742d0b8U
629 };
630
631 static const uint32_t Td3[256] =
632 {
633 0xf4a75051U, 0x4165537eU, 0x17a4c31aU, 0x275e963aU,
634 0xab6bcb3bU, 0x9d45f11fU, 0xfa58abacU, 0xe303934bU,
635 0x30fa5520U, 0x766df6adU, 0xcc769188U, 0x024c25f5U,
636 0xe5d7fc4fU, 0x2acbd7c5U, 0x35448026U, 0x62a38fb5U,
637 0xb15a49deU, 0xba1b6725U, 0xea0e9845U, 0xfec0e15dU,
638 0x2f7502c3U, 0x4cf01281U, 0x4697a38dU, 0xd3f9c66bU,
639 0x8f5fe703U, 0x929c9515U, 0x6d7aebbfU, 0x5259da95U,
640 0xbe832dd4U, 0x7421d358U, 0xe0692949U, 0xc9c8448eU,
641 0xc2896a75U, 0x8e7978f4U, 0x583e6b99U, 0xb971dd27U,
642 0xe14fb6beU, 0x88ad17f0U, 0x20ac66c9U, 0xce3ab47dU,
643 0xdf4a1863U, 0x1a3182e5U, 0x51336097U, 0x537f4562U,
644 0x6477e0b1U, 0x6bae84bbU, 0x81a01cfeU, 0x082b94f9U,
645 0x48685870U, 0x45fd198fU, 0xde6c8794U, 0x7bf8b752U,
646 0x73d323abU, 0x4b02e272U, 0x1f8f57e3U, 0x55ab2a66U,
647 0xeb2807b2U, 0xb5c2032fU, 0xc57b9a86U, 0x3708a5d3U,
648 0x2887f230U, 0xbfa5b223U, 0x036aba02U, 0x16825cedU,
649 0xcf1c2b8aU, 0x79b492a7U, 0x07f2f0f3U, 0x69e2a14eU,
650 0xdaf4cd65U, 0x05bed506U, 0x34621fd1U, 0xa6fe8ac4U,
651 0x2e539d34U, 0xf355a0a2U, 0x8ae13205U, 0xf6eb75a4U,
652 0x83ec390bU, 0x60efaa40U, 0x719f065eU, 0x6e1051bdU,
653 0x218af93eU, 0xdd063d96U, 0x3e05aeddU, 0xe6bd464dU,
654 0x548db591U, 0xc45d0571U, 0x06d46f04U, 0x5015ff60U,
655 0x98fb2419U, 0xbde997d6U, 0x4043cc89U, 0xd99e7767U,
656 0xe842bdb0U, 0x898b8807U, 0x195b38e7U, 0xc8eedb79U,
657 0x7c0a47a1U, 0x420fe97cU, 0x841ec9f8U, 0x00000000U,
658 0x80868309U, 0x2bed4832U, 0x1170ac1eU, 0x5a724e6cU,
659 0x0efffbfdU, 0x8538560fU, 0xaed51e3dU, 0x2d392736U,
660 0x0fd9640aU, 0x5ca62168U, 0x5b54d19bU, 0x362e3a24U,
661 0x0a67b10cU, 0x57e70f93U, 0xee96d2b4U, 0x9b919e1bU,
662 0xc0c54f80U, 0xdc20a261U, 0x774b695aU, 0x121a161cU,
663 0x93ba0ae2U, 0xa02ae5c0U, 0x22e0433cU, 0x1b171d12U,
664 0x090d0b0eU, 0x8bc7adf2U, 0xb6a8b92dU, 0x1ea9c814U,
665 0xf1198557U, 0x75074cafU, 0x99ddbbeeU, 0x7f60fda3U,
666 0x01269ff7U, 0x72f5bc5cU, 0x663bc544U, 0xfb7e345bU,
667 0x4329768bU, 0x23c6dccbU, 0xedfc68b6U, 0xe4f163b8U,
668 0x31dccad7U, 0x63851042U, 0x97224013U, 0xc6112084U,
669 0x4a247d85U, 0xbb3df8d2U, 0xf93211aeU, 0x29a16dc7U,
670 0x9e2f4b1dU, 0xb230f3dcU, 0x8652ec0dU, 0xc1e3d077U,
671 0xb3166c2bU, 0x70b999a9U, 0x9448fa11U, 0xe9642247U,
672 0xfc8cc4a8U, 0xf03f1aa0U, 0x7d2cd856U, 0x3390ef22U,
673 0x494ec787U, 0x38d1c1d9U, 0xcaa2fe8cU, 0xd40b3698U,
674 0xf581cfa6U, 0x7ade28a5U, 0xb78e26daU, 0xadbfa43fU,
675 0x3a9de42cU, 0x78920d50U, 0x5fcc9b6aU, 0x7e466254U,
676 0x8d13c2f6U, 0xd8b8e890U, 0x39f75e2eU, 0xc3aff582U,
677 0x5d80be9fU, 0xd0937c69U, 0xd52da96fU, 0x2512b3cfU,
678 0xac993bc8U, 0x187da710U, 0x9c636ee8U, 0x3bbb7bdbU,
679 0x267809cdU, 0x5918f46eU, 0x9ab701ecU, 0x4f9aa883U,
680 0x956e65e6U, 0xffe67eaaU, 0xbccf0821U, 0x15e8e6efU,
681 0xe79bd9baU, 0x6f36ce4aU, 0x9f09d4eaU, 0xb07cd629U,
682 0xa4b2af31U, 0x3f23312aU, 0xa59430c6U, 0xa266c035U,
683 0x4ebc3774U, 0x82caa6fcU, 0x90d0b0e0U, 0xa7d81533U,
684 0x04984af1U, 0xecdaf741U, 0xcd500e7fU, 0x91f62f17U,
685 0x4dd68d76U, 0xefb04d43U, 0xaa4d54ccU, 0x9604dfe4U,
686 0xd1b5e39eU, 0x6a881b4cU, 0x2c1fb8c1U, 0x65517f46U,
687 0x5eea049dU, 0x8c355d01U, 0x877473faU, 0x0b412efbU,
688 0x671d5ab3U, 0xdbd25292U, 0x105633e9U, 0xd647136dU,
689 0xd7618c9aU, 0xa10c7a37U, 0xf8148e59U, 0x133c89ebU,
690 0xa927eeceU, 0x61c935b7U, 0x1ce5ede1U, 0x47b13c7aU,
691 0xd2df599cU, 0xf2733f55U, 0x14ce7918U, 0xc737bf73U,
692 0xf7cdea53U, 0xfdaa5b5fU, 0x3d6f14dfU, 0x44db8678U,
693 0xaff381caU, 0x68c43eb9U, 0x24342c38U, 0xa3405fc2U,
694 0x1dc37216U, 0xe2250cbcU, 0x3c498b28U, 0x0d9541ffU,
695 0xa8017139U, 0x0cb3de08U, 0xb4e49cd8U, 0x56c19064U,
696 0xcb84617bU, 0x32b670d5U, 0x6c5c7448U, 0xb85742d0U
697 };
698
699 static const uint32_t Td4[256] =
700 {
701 0x52525252U, 0x09090909U, 0x6a6a6a6aU, 0xd5d5d5d5U,
702 0x30303030U, 0x36363636U, 0xa5a5a5a5U, 0x38383838U,
703 0xbfbfbfbfU, 0x40404040U, 0xa3a3a3a3U, 0x9e9e9e9eU,
704 0x81818181U, 0xf3f3f3f3U, 0xd7d7d7d7U, 0xfbfbfbfbU,
705 0x7c7c7c7cU, 0xe3e3e3e3U, 0x39393939U, 0x82828282U,
706 0x9b9b9b9bU, 0x2f2f2f2fU, 0xffffffffU, 0x87878787U,
707 0x34343434U, 0x8e8e8e8eU, 0x43434343U, 0x44444444U,
708 0xc4c4c4c4U, 0xdedededeU, 0xe9e9e9e9U, 0xcbcbcbcbU,
709 0x54545454U, 0x7b7b7b7bU, 0x94949494U, 0x32323232U,
710 0xa6a6a6a6U, 0xc2c2c2c2U, 0x23232323U, 0x3d3d3d3dU,
711 0xeeeeeeeeU, 0x4c4c4c4cU, 0x95959595U, 0x0b0b0b0bU,
712 0x42424242U, 0xfafafafaU, 0xc3c3c3c3U, 0x4e4e4e4eU,
713 0x08080808U, 0x2e2e2e2eU, 0xa1a1a1a1U, 0x66666666U,
714 0x28282828U, 0xd9d9d9d9U, 0x24242424U, 0xb2b2b2b2U,
715 0x76767676U, 0x5b5b5b5bU, 0xa2a2a2a2U, 0x49494949U,
716 0x6d6d6d6dU, 0x8b8b8b8bU, 0xd1d1d1d1U, 0x25252525U,
717 0x72727272U, 0xf8f8f8f8U, 0xf6f6f6f6U, 0x64646464U,
718 0x86868686U, 0x68686868U, 0x98989898U, 0x16161616U,
719 0xd4d4d4d4U, 0xa4a4a4a4U, 0x5c5c5c5cU, 0xccccccccU,
720 0x5d5d5d5dU, 0x65656565U, 0xb6b6b6b6U, 0x92929292U,
721 0x6c6c6c6cU, 0x70707070U, 0x48484848U, 0x50505050U,
722 0xfdfdfdfdU, 0xededededU, 0xb9b9b9b9U, 0xdadadadaU,
723 0x5e5e5e5eU, 0x15151515U, 0x46464646U, 0x57575757U,
724 0xa7a7a7a7U, 0x8d8d8d8dU, 0x9d9d9d9dU, 0x84848484U,
725 0x90909090U, 0xd8d8d8d8U, 0xababababU, 0x00000000U,
726 0x8c8c8c8cU, 0xbcbcbcbcU, 0xd3d3d3d3U, 0x0a0a0a0aU,
727 0xf7f7f7f7U, 0xe4e4e4e4U, 0x58585858U, 0x05050505U,
728 0xb8b8b8b8U, 0xb3b3b3b3U, 0x45454545U, 0x06060606U,
729 0xd0d0d0d0U, 0x2c2c2c2cU, 0x1e1e1e1eU, 0x8f8f8f8fU,
730 0xcacacacaU, 0x3f3f3f3fU, 0x0f0f0f0fU, 0x02020202U,
731 0xc1c1c1c1U, 0xafafafafU, 0xbdbdbdbdU, 0x03030303U,
732 0x01010101U, 0x13131313U, 0x8a8a8a8aU, 0x6b6b6b6bU,
733 0x3a3a3a3aU, 0x91919191U, 0x11111111U, 0x41414141U,
734 0x4f4f4f4fU, 0x67676767U, 0xdcdcdcdcU, 0xeaeaeaeaU,
735 0x97979797U, 0xf2f2f2f2U, 0xcfcfcfcfU, 0xcecececeU,
736 0xf0f0f0f0U, 0xb4b4b4b4U, 0xe6e6e6e6U, 0x73737373U,
737 0x96969696U, 0xacacacacU, 0x74747474U, 0x22222222U,
738 0xe7e7e7e7U, 0xadadadadU, 0x35353535U, 0x85858585U,
739 0xe2e2e2e2U, 0xf9f9f9f9U, 0x37373737U, 0xe8e8e8e8U,
740 0x1c1c1c1cU, 0x75757575U, 0xdfdfdfdfU, 0x6e6e6e6eU,
741 0x47474747U, 0xf1f1f1f1U, 0x1a1a1a1aU, 0x71717171U,
742 0x1d1d1d1dU, 0x29292929U, 0xc5c5c5c5U, 0x89898989U,
743 0x6f6f6f6fU, 0xb7b7b7b7U, 0x62626262U, 0x0e0e0e0eU,
744 0xaaaaaaaaU, 0x18181818U, 0xbebebebeU, 0x1b1b1b1bU,
745 0xfcfcfcfcU, 0x56565656U, 0x3e3e3e3eU, 0x4b4b4b4bU,
746 0xc6c6c6c6U, 0xd2d2d2d2U, 0x79797979U, 0x20202020U,
747 0x9a9a9a9aU, 0xdbdbdbdbU, 0xc0c0c0c0U, 0xfefefefeU,
748 0x78787878U, 0xcdcdcdcdU, 0x5a5a5a5aU, 0xf4f4f4f4U,
749 0x1f1f1f1fU, 0xddddddddU, 0xa8a8a8a8U, 0x33333333U,
750 0x88888888U, 0x07070707U, 0xc7c7c7c7U, 0x31313131U,
751 0xb1b1b1b1U, 0x12121212U, 0x10101010U, 0x59595959U,
752 0x27272727U, 0x80808080U, 0xececececU, 0x5f5f5f5fU,
753 0x60606060U, 0x51515151U, 0x7f7f7f7fU, 0xa9a9a9a9U,
754 0x19191919U, 0xb5b5b5b5U, 0x4a4a4a4aU, 0x0d0d0d0dU,
755 0x2d2d2d2dU, 0xe5e5e5e5U, 0x7a7a7a7aU, 0x9f9f9f9fU,
756 0x93939393U, 0xc9c9c9c9U, 0x9c9c9c9cU, 0xefefefefU,
757 0xa0a0a0a0U, 0xe0e0e0e0U, 0x3b3b3b3bU, 0x4d4d4d4dU,
758 0xaeaeaeaeU, 0x2a2a2a2aU, 0xf5f5f5f5U, 0xb0b0b0b0U,
759 0xc8c8c8c8U, 0xebebebebU, 0xbbbbbbbbU, 0x3c3c3c3cU,
760 0x83838383U, 0x53535353U, 0x99999999U, 0x61616161U,
761 0x17171717U, 0x2b2b2b2bU, 0x04040404U, 0x7e7e7e7eU,
762 0xbabababaU, 0x77777777U, 0xd6d6d6d6U, 0x26262626U,
763 0xe1e1e1e1U, 0x69696969U, 0x14141414U, 0x63636363U,
764 0x55555555U, 0x21212121U, 0x0c0c0c0cU, 0x7d7d7d7dU
765 };
766
767 /* Rcon is Round Constant; used for encryption key expansion */
768 static const uint32_t rcon[RC_LENGTH] =
769 {
770 /* for 128-bit blocks, Rijndael never uses more than 10 rcon values */
771 0x01000000, 0x02000000, 0x04000000, 0x08000000,
772 0x10000000, 0x20000000, 0x40000000, 0x80000000,
773 0x1B000000, 0x36000000
774 };
775
776
777 /*
778 * Expand the cipher key into the encryption key schedule.
779 *
780 * Return the number of rounds for the given cipher key size.
781 * The size of the key schedule depends on the number of rounds
782 * (which can be computed from the size of the key), i.e. 4*(Nr + 1).
783 *
784 * Parameters:
785 * rk AES key schedule 32-bit array to be initialized
786 * cipherKey User key
787 * keyBits AES key size (128, 192, or 256 bits)
788 */
789 static int
790 rijndael_key_setup_enc(uint32_t rk[], const uint32_t cipherKey[],
791 int keyBits)
792 {
793 int i = 0;
794 uint32_t temp;
795
796 rk[0] = cipherKey[0];
797 rk[1] = cipherKey[1];
798 rk[2] = cipherKey[2];
799 rk[3] = cipherKey[3];
800
801 if (keyBits == 128) {
802 for (;;) {
803 temp = rk[3];
804 rk[4] = rk[0] ^
805 (Te4[(temp >> 16) & 0xff] & 0xff000000) ^
806 (Te4[(temp >> 8) & 0xff] & 0x00ff0000) ^
807 (Te4[temp & 0xff] & 0x0000ff00) ^
808 (Te4[temp >> 24] & 0x000000ff) ^
809 rcon[i];
810 rk[5] = rk[1] ^ rk[4];
811 rk[6] = rk[2] ^ rk[5];
812 rk[7] = rk[3] ^ rk[6];
813
814 if (++i == 10) {
815 return (10);
816 }
817 rk += 4;
818 }
819 }
820
821 rk[4] = cipherKey[4];
822 rk[5] = cipherKey[5];
823
824 if (keyBits == 192) {
825 for (;;) {
826 temp = rk[5];
827 rk[6] = rk[0] ^
828 (Te4[(temp >> 16) & 0xff] & 0xff000000) ^
829 (Te4[(temp >> 8) & 0xff] & 0x00ff0000) ^
830 (Te4[temp & 0xff] & 0x0000ff00) ^
831 (Te4[temp >> 24] & 0x000000ff) ^
832 rcon[i];
833 rk[7] = rk[1] ^ rk[6];
834 rk[8] = rk[2] ^ rk[7];
835 rk[9] = rk[3] ^ rk[8];
836
837 if (++i == 8) {
838 return (12);
839 }
840
841 rk[10] = rk[4] ^ rk[9];
842 rk[11] = rk[5] ^ rk[10];
843 rk += 6;
844 }
845 }
846
847 rk[6] = cipherKey[6];
848 rk[7] = cipherKey[7];
849
850 if (keyBits == 256) {
851 for (;;) {
852 temp = rk[7];
853 rk[8] = rk[0] ^
854 (Te4[(temp >> 16) & 0xff] & 0xff000000) ^
855 (Te4[(temp >> 8) & 0xff] & 0x00ff0000) ^
856 (Te4[temp & 0xff] & 0x0000ff00) ^
857 (Te4[temp >> 24] & 0x000000ff) ^
858 rcon[i];
859 rk[9] = rk[1] ^ rk[8];
860 rk[10] = rk[2] ^ rk[9];
861 rk[11] = rk[3] ^ rk[10];
862
863 if (++i == 7) {
864 return (14);
865 }
866 temp = rk[11];
867 rk[12] = rk[4] ^
868 (Te4[temp >> 24] & 0xff000000) ^
869 (Te4[(temp >> 16) & 0xff] & 0x00ff0000) ^
870 (Te4[(temp >> 8) & 0xff] & 0x0000ff00) ^
871 (Te4[temp & 0xff] & 0x000000ff);
872 rk[13] = rk[5] ^ rk[12];
873 rk[14] = rk[6] ^ rk[13];
874 rk[15] = rk[7] ^ rk[14];
875
876 rk += 8;
877 }
878 }
879
880 return (0);
881 }
882
883 /*
884 * Expand the cipher key into the decryption key schedule.
885 * Return the number of rounds for the given cipher key size.
886 * The size of the key schedule depends on the number of rounds
887 * (which can be computed from the size of the key), i.e. 4*(Nr + 1).
888 *
889 * Parameters:
890 * rk AES key schedule 32-bit array to be initialized
891 * cipherKey User key
892 * keyBits AES key size (128, 192, or 256 bits)
893 */
894 static int
895 rijndael_key_setup_dec(uint32_t rk[], const uint32_t cipherKey[], int keyBits)
896 {
897 int Nr, i, j;
898 uint32_t temp;
899
900 /* expand the cipher key: */
901 Nr = rijndael_key_setup_enc(rk, cipherKey, keyBits);
902
903 /* invert the order of the round keys: */
904 for (i = 0, j = 4 * Nr; i < j; i += 4, j -= 4) {
905 temp = rk[i];
906 rk[i] = rk[j];
907 rk[j] = temp;
908 temp = rk[i + 1];
909 rk[i + 1] = rk[j + 1];
910 rk[j + 1] = temp;
911 temp = rk[i + 2];
912 rk[i + 2] = rk[j + 2];
913 rk[j + 2] = temp;
914 temp = rk[i + 3];
915 rk[i + 3] = rk[j + 3];
916 rk[j + 3] = temp;
917 }
918
919 /*
920 * apply the inverse MixColumn transform to all
921 * round keys but the first and the last:
922 */
923 for (i = 1; i < Nr; i++) {
924 rk += 4;
925 rk[0] = Td0[Te4[rk[0] >> 24] & 0xff] ^
926 Td1[Te4[(rk[0] >> 16) & 0xff] & 0xff] ^
927 Td2[Te4[(rk[0] >> 8) & 0xff] & 0xff] ^
928 Td3[Te4[rk[0] & 0xff] & 0xff];
929 rk[1] = Td0[Te4[rk[1] >> 24] & 0xff] ^
930 Td1[Te4[(rk[1] >> 16) & 0xff] & 0xff] ^
931 Td2[Te4[(rk[1] >> 8) & 0xff] & 0xff] ^
932 Td3[Te4[rk[1] & 0xff] & 0xff];
933 rk[2] = Td0[Te4[rk[2] >> 24] & 0xff] ^
934 Td1[Te4[(rk[2] >> 16) & 0xff] & 0xff] ^
935 Td2[Te4[(rk[2] >> 8) & 0xff] & 0xff] ^
936 Td3[Te4[rk[2] & 0xff] & 0xff];
937 rk[3] = Td0[Te4[rk[3] >> 24] & 0xff] ^
938 Td1[Te4[(rk[3] >> 16) & 0xff] & 0xff] ^
939 Td2[Te4[(rk[3] >> 8) & 0xff] & 0xff] ^
940 Td3[Te4[rk[3] & 0xff] & 0xff];
941 }
942
943 return (Nr);
944 }
945
946 /*
947 * Expand the 32-bit AES cipher key array into the encryption and decryption
948 * key schedules.
949 *
950 * Parameters:
951 * key AES key schedule to be initialized
952 * keyarr32 User key
953 * keyBits AES key size (128, 192, or 256 bits)
954 */
955 static void
956 aes_generic_generate(aes_key_t *key, const uint32_t *keyarr32, int keybits)
957 {
958 key->nr = rijndael_key_setup_enc(&(key->encr_ks.ks32[0]), keyarr32,
959 keybits);
960 key->nr = rijndael_key_setup_dec(&(key->decr_ks.ks32[0]), keyarr32,
961 keybits);
962 }
963
964 /*
965 * Encrypt one block of data. The block is assumed to be an array
966 * of four uint32_t values, so copy for alignment (and byte-order
967 * reversal for little endian systems might be necessary on the
968 * input and output byte streams.
969 * The size of the key schedule depends on the number of rounds
970 * (which can be computed from the size of the key), i.e. 4*(Nr + 1).
971 *
972 * Parameters:
973 * rk Key schedule, of aes_ks_t (60 32-bit integers)
974 * Nr Number of rounds
975 * pt Input block (plain text)
976 * ct Output block (crypto text). Can overlap with pt
977 */
978 static void
979 aes_generic_encrypt(const uint32_t rk[], int Nr, const uint32_t pt[4],
980 uint32_t ct[4])
981 {
982 uint32_t s0, s1, s2, s3, t0, t1, t2, t3;
983 int r;
984
985 /*
986 * map byte array block to cipher state
987 * and add initial round key:
988 */
989
990 s0 = pt[0] ^ rk[0];
991 s1 = pt[1] ^ rk[1];
992 s2 = pt[2] ^ rk[2];
993 s3 = pt[3] ^ rk[3];
994
995 /*
996 * Nr - 1 full rounds:
997 */
998
999 r = Nr >> 1;
1000
1001 for (;;) {
1002 t0 = Te0[s0 >> 24] ^
1003 Te1[(s1 >> 16) & 0xff] ^
1004 Te2[(s2 >> 8) & 0xff] ^
1005 Te3[s3 & 0xff] ^
1006 rk[4];
1007
1008 t1 = Te0[s1 >> 24] ^
1009 Te1[(s2 >> 16) & 0xff] ^
1010 Te2[(s3 >> 8) & 0xff] ^
1011 Te3[s0 & 0xff] ^
1012 rk[5];
1013
1014 t2 = Te0[s2 >> 24] ^
1015 Te1[(s3 >> 16) & 0xff] ^
1016 Te2[(s0 >> 8) & 0xff] ^
1017 Te3[s1 & 0xff] ^
1018 rk[6];
1019
1020 t3 = Te0[s3 >> 24] ^
1021 Te1[(s0 >> 16) & 0xff] ^
1022 Te2[(s1 >> 8) & 0xff] ^
1023 Te3[s2 & 0xff] ^
1024 rk[7];
1025
1026 rk += 8;
1027
1028 if (--r == 0) {
1029 break;
1030 }
1031
1032 s0 = Te0[t0 >> 24] ^
1033 Te1[(t1 >> 16) & 0xff] ^
1034 Te2[(t2 >> 8) & 0xff] ^
1035 Te3[t3 & 0xff] ^
1036 rk[0];
1037
1038 s1 = Te0[t1 >> 24] ^
1039 Te1[(t2 >> 16) & 0xff] ^
1040 Te2[(t3 >> 8) & 0xff] ^
1041 Te3[t0 & 0xff] ^
1042 rk[1];
1043
1044 s2 = Te0[t2 >> 24] ^
1045 Te1[(t3 >> 16) & 0xff] ^
1046 Te2[(t0 >> 8) & 0xff] ^
1047 Te3[t1 & 0xff] ^
1048 rk[2];
1049
1050 s3 = Te0[t3 >> 24] ^
1051 Te1[(t0 >> 16) & 0xff] ^
1052 Te2[(t1 >> 8) & 0xff] ^
1053 Te3[t2 & 0xff] ^
1054 rk[3];
1055 }
1056
1057 /*
1058 * apply last round and
1059 * map cipher state to byte array block:
1060 */
1061
1062 s0 = (Te4[(t0 >> 24)] & 0xff000000) ^
1063 (Te4[(t1 >> 16) & 0xff] & 0x00ff0000) ^
1064 (Te4[(t2 >> 8) & 0xff] & 0x0000ff00) ^
1065 (Te4[t3 & 0xff] & 0x000000ff) ^
1066 rk[0];
1067 ct[0] = s0;
1068
1069 s1 = (Te4[(t1 >> 24)] & 0xff000000) ^
1070 (Te4[(t2 >> 16) & 0xff] & 0x00ff0000) ^
1071 (Te4[(t3 >> 8) & 0xff] & 0x0000ff00) ^
1072 (Te4[t0 & 0xff] & 0x000000ff) ^
1073 rk[1];
1074 ct[1] = s1;
1075
1076 s2 = (Te4[(t2 >> 24)] & 0xff000000) ^
1077 (Te4[(t3 >> 16) & 0xff] & 0x00ff0000) ^
1078 (Te4[(t0 >> 8) & 0xff] & 0x0000ff00) ^
1079 (Te4[t1 & 0xff] & 0x000000ff) ^
1080 rk[2];
1081 ct[2] = s2;
1082
1083 s3 = (Te4[(t3 >> 24)] & 0xff000000) ^
1084 (Te4[(t0 >> 16) & 0xff] & 0x00ff0000) ^
1085 (Te4[(t1 >> 8) & 0xff] & 0x0000ff00) ^
1086 (Te4[t2 & 0xff] & 0x000000ff) ^
1087 rk[3];
1088 ct[3] = s3;
1089 }
1090
1091
1092 /*
1093 * Decrypt one block of data. The block is assumed to be an array
1094 * of four uint32_t values, so copy for alignment (and byte-order
1095 * reversal for little endian systems might be necessary on the
1096 * input and output byte streams.
1097 * The size of the key schedule depends on the number of rounds
1098 * (which can be computed from the size of the key), i.e. 4*(Nr + 1).
1099 *
1100 * Parameters:
1101 * rk Key schedule, of aes_ks_t (60 32-bit integers)
1102 * Nr Number of rounds
1103 * ct Input block (crypto text)
1104 * pt Output block (plain text). Can overlap with pt
1105 */
1106 static void
1107 aes_generic_decrypt(const uint32_t rk[], int Nr, const uint32_t ct[4],
1108 uint32_t pt[4])
1109 {
1110 uint32_t s0, s1, s2, s3, t0, t1, t2, t3;
1111 int r;
1112
1113 /*
1114 * map byte array block to cipher state
1115 * and add initial round key:
1116 */
1117 s0 = ct[0] ^ rk[0];
1118 s1 = ct[1] ^ rk[1];
1119 s2 = ct[2] ^ rk[2];
1120 s3 = ct[3] ^ rk[3];
1121
1122 /*
1123 * Nr - 1 full rounds:
1124 */
1125
1126 r = Nr >> 1;
1127
1128 for (;;) {
1129 t0 = Td0[s0 >> 24] ^
1130 Td1[(s3 >> 16) & 0xff] ^
1131 Td2[(s2 >> 8) & 0xff] ^
1132 Td3[s1 & 0xff] ^
1133 rk[4];
1134
1135 t1 = Td0[s1 >> 24] ^
1136 Td1[(s0 >> 16) & 0xff] ^
1137 Td2[(s3 >> 8) & 0xff] ^
1138 Td3[s2 & 0xff] ^
1139 rk[5];
1140
1141 t2 = Td0[s2 >> 24] ^
1142 Td1[(s1 >> 16) & 0xff] ^
1143 Td2[(s0 >> 8) & 0xff] ^
1144 Td3[s3 & 0xff] ^
1145 rk[6];
1146
1147 t3 = Td0[s3 >> 24] ^
1148 Td1[(s2 >> 16) & 0xff] ^
1149 Td2[(s1 >> 8) & 0xff] ^
1150 Td3[s0 & 0xff] ^
1151 rk[7];
1152
1153 rk += 8;
1154
1155 if (--r == 0) {
1156 break;
1157 }
1158
1159 s0 = Td0[t0 >> 24] ^
1160 Td1[(t3 >> 16) & 0xff] ^
1161 Td2[(t2 >> 8) & 0xff] ^
1162 Td3[t1 & 0xff] ^
1163 rk[0];
1164
1165 s1 = Td0[t1 >> 24] ^
1166 Td1[(t0 >> 16) & 0xff] ^
1167 Td2[(t3 >> 8) & 0xff] ^
1168 Td3[t2 & 0xff] ^
1169 rk[1];
1170
1171 s2 = Td0[t2 >> 24] ^
1172 Td1[(t1 >> 16) & 0xff] ^
1173 Td2[(t0 >> 8) & 0xff] ^
1174 Td3[t3 & 0xff] ^
1175 rk[2];
1176
1177 s3 = Td0[t3 >> 24] ^
1178 Td1[(t2 >> 16) & 0xff] ^
1179 Td2[(t1 >> 8) & 0xff] ^
1180 Td3[t0 & 0xff] ^
1181 rk[3];
1182 }
1183
1184 /*
1185 * apply last round and
1186 * map cipher state to byte array block:
1187 */
1188
1189 s0 = (Td4[t0 >> 24] & 0xff000000) ^
1190 (Td4[(t3 >> 16) & 0xff] & 0x00ff0000) ^
1191 (Td4[(t2 >> 8) & 0xff] & 0x0000ff00) ^
1192 (Td4[t1 & 0xff] & 0x000000ff) ^
1193 rk[0];
1194 pt[0] = s0;
1195
1196 s1 = (Td4[t1 >> 24] & 0xff000000) ^
1197 (Td4[(t0 >> 16) & 0xff] & 0x00ff0000) ^
1198 (Td4[(t3 >> 8) & 0xff] & 0x0000ff00) ^
1199 (Td4[t2 & 0xff] & 0x000000ff) ^
1200 rk[1];
1201 pt[1] = s1;
1202
1203 s2 = (Td4[t2 >> 24] & 0xff000000) ^
1204 (Td4[(t1 >> 16) & 0xff] & 0x00ff0000) ^
1205 (Td4[(t0 >> 8) & 0xff] & 0x0000ff00) ^
1206 (Td4[t3 & 0xff] & 0x000000ff) ^
1207 rk[2];
1208 pt[2] = s2;
1209
1210 s3 = (Td4[t3 >> 24] & 0xff000000) ^
1211 (Td4[(t2 >> 16) & 0xff] & 0x00ff0000) ^
1212 (Td4[(t1 >> 8) & 0xff] & 0x0000ff00) ^
1213 (Td4[t0 & 0xff] & 0x000000ff) ^
1214 rk[3];
1215 pt[3] = s3;
1216 }
1217
1218 static boolean_t
1219 aes_generic_will_work(void)
1220 {
1221 return (B_TRUE);
1222 }
1223
1224 /*
1225 * For _LITTLE_ENDIAN machines, reverse every 4 bytes in the key.
1226 * On _BIG_ENDIAN, copy the key without reversing bytes.
1227 *
1228 * SPARCv8/v9 uses a key schedule array with 64-bit elements.
1229 * X86/AMD64 uses a key schedule array with 32-bit elements.
1230 */
1231 const aes_impl_ops_t aes_generic_impl = {
1232 .generate = &aes_generic_generate,
1233 .encrypt = &aes_generic_encrypt,
1234 .decrypt = &aes_generic_decrypt,
1235 .is_supported = &aes_generic_will_work,
1236 #if defined(_ZFS_LITTLE_ENDIAN)
1237 .needs_byteswap = B_TRUE,
1238 #else
1239 .needs_byteswap = B_FALSE,
1240 #endif
1241 .name = "generic"
1242 };
OpenZFS on Linux and FreeBSD