1 /*
2 * Cryptographic API.
3 *
4 * SEED Cipher Algorithm.
5 *
6 * This program is free software; you can redistribute it and/or modify
7 * it under the terms of the GNU General Public License as published by
8 * the Free Software Foundation; either version 2 of the License, or
9 * (at your option) any later version.
10 *
11 * Documentation of SEED can be found in RFC 4269.
12 * Copyright (C) 2007 Korea Information Security Agency (KISA).
13 */
14
15 #include <linux/module.h>
16 #include <linux/init.h>
17 #include <linux/types.h>
18 #include <linux/errno.h>
19 #include <linux/crypto.h>
20 #include <asm/byteorder.h>
21
22 #define SEED_NUM_KCONSTANTS 16
23 #define SEED_KEY_SIZE 16
24 #define SEED_BLOCK_SIZE 16
25 #define SEED_KEYSCHED_LEN 32
26
27 /*
28 * #define byte(x, nr) ((unsigned char)((x) >> (nr*8)))
29 */
30 static inline u8
byte(const u32 x,const unsigned n)31 byte(const u32 x, const unsigned n)
32 {
33 return x >> (n << 3);
34 }
35
36 struct seed_ctx {
37 u32 keysched[SEED_KEYSCHED_LEN];
38 };
39
40 static const u32 SS0[256] = {
41 0x2989a1a8, 0x05858184, 0x16c6d2d4, 0x13c3d3d0,
42 0x14445054, 0x1d0d111c, 0x2c8ca0ac, 0x25052124,
43 0x1d4d515c, 0x03434340, 0x18081018, 0x1e0e121c,
44 0x11415150, 0x3cccf0fc, 0x0acac2c8, 0x23436360,
45 0x28082028, 0x04444044, 0x20002020, 0x1d8d919c,
46 0x20c0e0e0, 0x22c2e2e0, 0x08c8c0c8, 0x17071314,
47 0x2585a1a4, 0x0f8f838c, 0x03030300, 0x3b4b7378,
48 0x3b8bb3b8, 0x13031310, 0x12c2d2d0, 0x2ecee2ec,
49 0x30407070, 0x0c8c808c, 0x3f0f333c, 0x2888a0a8,
50 0x32023230, 0x1dcdd1dc, 0x36c6f2f4, 0x34447074,
51 0x2ccce0ec, 0x15859194, 0x0b0b0308, 0x17475354,
52 0x1c4c505c, 0x1b4b5358, 0x3d8db1bc, 0x01010100,
53 0x24042024, 0x1c0c101c, 0x33437370, 0x18889098,
54 0x10001010, 0x0cccc0cc, 0x32c2f2f0, 0x19c9d1d8,
55 0x2c0c202c, 0x27c7e3e4, 0x32427270, 0x03838380,
56 0x1b8b9398, 0x11c1d1d0, 0x06868284, 0x09c9c1c8,
57 0x20406060, 0x10405050, 0x2383a3a0, 0x2bcbe3e8,
58 0x0d0d010c, 0x3686b2b4, 0x1e8e929c, 0x0f4f434c,
59 0x3787b3b4, 0x1a4a5258, 0x06c6c2c4, 0x38487078,
60 0x2686a2a4, 0x12021210, 0x2f8fa3ac, 0x15c5d1d4,
61 0x21416160, 0x03c3c3c0, 0x3484b0b4, 0x01414140,
62 0x12425250, 0x3d4d717c, 0x0d8d818c, 0x08080008,
63 0x1f0f131c, 0x19899198, 0x00000000, 0x19091118,
64 0x04040004, 0x13435350, 0x37c7f3f4, 0x21c1e1e0,
65 0x3dcdf1fc, 0x36467274, 0x2f0f232c, 0x27072324,
66 0x3080b0b0, 0x0b8b8388, 0x0e0e020c, 0x2b8ba3a8,
67 0x2282a2a0, 0x2e4e626c, 0x13839390, 0x0d4d414c,
68 0x29496168, 0x3c4c707c, 0x09090108, 0x0a0a0208,
69 0x3f8fb3bc, 0x2fcfe3ec, 0x33c3f3f0, 0x05c5c1c4,
70 0x07878384, 0x14041014, 0x3ecef2fc, 0x24446064,
71 0x1eced2dc, 0x2e0e222c, 0x0b4b4348, 0x1a0a1218,
72 0x06060204, 0x21012120, 0x2b4b6368, 0x26466264,
73 0x02020200, 0x35c5f1f4, 0x12829290, 0x0a8a8288,
74 0x0c0c000c, 0x3383b3b0, 0x3e4e727c, 0x10c0d0d0,
75 0x3a4a7278, 0x07474344, 0x16869294, 0x25c5e1e4,
76 0x26062224, 0x00808080, 0x2d8da1ac, 0x1fcfd3dc,
77 0x2181a1a0, 0x30003030, 0x37073334, 0x2e8ea2ac,
78 0x36063234, 0x15051114, 0x22022220, 0x38083038,
79 0x34c4f0f4, 0x2787a3a4, 0x05454144, 0x0c4c404c,
80 0x01818180, 0x29c9e1e8, 0x04848084, 0x17879394,
81 0x35053134, 0x0bcbc3c8, 0x0ecec2cc, 0x3c0c303c,
82 0x31417170, 0x11011110, 0x07c7c3c4, 0x09898188,
83 0x35457174, 0x3bcbf3f8, 0x1acad2d8, 0x38c8f0f8,
84 0x14849094, 0x19495158, 0x02828280, 0x04c4c0c4,
85 0x3fcff3fc, 0x09494148, 0x39093138, 0x27476364,
86 0x00c0c0c0, 0x0fcfc3cc, 0x17c7d3d4, 0x3888b0b8,
87 0x0f0f030c, 0x0e8e828c, 0x02424240, 0x23032320,
88 0x11819190, 0x2c4c606c, 0x1bcbd3d8, 0x2484a0a4,
89 0x34043034, 0x31c1f1f0, 0x08484048, 0x02c2c2c0,
90 0x2f4f636c, 0x3d0d313c, 0x2d0d212c, 0x00404040,
91 0x3e8eb2bc, 0x3e0e323c, 0x3c8cb0bc, 0x01c1c1c0,
92 0x2a8aa2a8, 0x3a8ab2b8, 0x0e4e424c, 0x15455154,
93 0x3b0b3338, 0x1cccd0dc, 0x28486068, 0x3f4f737c,
94 0x1c8c909c, 0x18c8d0d8, 0x0a4a4248, 0x16465254,
95 0x37477374, 0x2080a0a0, 0x2dcde1ec, 0x06464244,
96 0x3585b1b4, 0x2b0b2328, 0x25456164, 0x3acaf2f8,
97 0x23c3e3e0, 0x3989b1b8, 0x3181b1b0, 0x1f8f939c,
98 0x1e4e525c, 0x39c9f1f8, 0x26c6e2e4, 0x3282b2b0,
99 0x31013130, 0x2acae2e8, 0x2d4d616c, 0x1f4f535c,
100 0x24c4e0e4, 0x30c0f0f0, 0x0dcdc1cc, 0x08888088,
101 0x16061214, 0x3a0a3238, 0x18485058, 0x14c4d0d4,
102 0x22426260, 0x29092128, 0x07070304, 0x33033330,
103 0x28c8e0e8, 0x1b0b1318, 0x05050104, 0x39497178,
104 0x10809090, 0x2a4a6268, 0x2a0a2228, 0x1a8a9298,
105 };
106
107 static const u32 SS1[256] = {
108 0x38380830, 0xe828c8e0, 0x2c2d0d21, 0xa42686a2,
109 0xcc0fcfc3, 0xdc1eced2, 0xb03383b3, 0xb83888b0,
110 0xac2f8fa3, 0x60204060, 0x54154551, 0xc407c7c3,
111 0x44044440, 0x6c2f4f63, 0x682b4b63, 0x581b4b53,
112 0xc003c3c3, 0x60224262, 0x30330333, 0xb43585b1,
113 0x28290921, 0xa02080a0, 0xe022c2e2, 0xa42787a3,
114 0xd013c3d3, 0x90118191, 0x10110111, 0x04060602,
115 0x1c1c0c10, 0xbc3c8cb0, 0x34360632, 0x480b4b43,
116 0xec2fcfe3, 0x88088880, 0x6c2c4c60, 0xa82888a0,
117 0x14170713, 0xc404c4c0, 0x14160612, 0xf434c4f0,
118 0xc002c2c2, 0x44054541, 0xe021c1e1, 0xd416c6d2,
119 0x3c3f0f33, 0x3c3d0d31, 0x8c0e8e82, 0x98188890,
120 0x28280820, 0x4c0e4e42, 0xf436c6f2, 0x3c3e0e32,
121 0xa42585a1, 0xf839c9f1, 0x0c0d0d01, 0xdc1fcfd3,
122 0xd818c8d0, 0x282b0b23, 0x64264662, 0x783a4a72,
123 0x24270723, 0x2c2f0f23, 0xf031c1f1, 0x70324272,
124 0x40024242, 0xd414c4d0, 0x40014141, 0xc000c0c0,
125 0x70334373, 0x64274763, 0xac2c8ca0, 0x880b8b83,
126 0xf437c7f3, 0xac2d8da1, 0x80008080, 0x1c1f0f13,
127 0xc80acac2, 0x2c2c0c20, 0xa82a8aa2, 0x34340430,
128 0xd012c2d2, 0x080b0b03, 0xec2ecee2, 0xe829c9e1,
129 0x5c1d4d51, 0x94148490, 0x18180810, 0xf838c8f0,
130 0x54174753, 0xac2e8ea2, 0x08080800, 0xc405c5c1,
131 0x10130313, 0xcc0dcdc1, 0x84068682, 0xb83989b1,
132 0xfc3fcff3, 0x7c3d4d71, 0xc001c1c1, 0x30310131,
133 0xf435c5f1, 0x880a8a82, 0x682a4a62, 0xb03181b1,
134 0xd011c1d1, 0x20200020, 0xd417c7d3, 0x00020202,
135 0x20220222, 0x04040400, 0x68284860, 0x70314171,
136 0x04070703, 0xd81bcbd3, 0x9c1d8d91, 0x98198991,
137 0x60214161, 0xbc3e8eb2, 0xe426c6e2, 0x58194951,
138 0xdc1dcdd1, 0x50114151, 0x90108090, 0xdc1cccd0,
139 0x981a8a92, 0xa02383a3, 0xa82b8ba3, 0xd010c0d0,
140 0x80018181, 0x0c0f0f03, 0x44074743, 0x181a0a12,
141 0xe023c3e3, 0xec2ccce0, 0x8c0d8d81, 0xbc3f8fb3,
142 0x94168692, 0x783b4b73, 0x5c1c4c50, 0xa02282a2,
143 0xa02181a1, 0x60234363, 0x20230323, 0x4c0d4d41,
144 0xc808c8c0, 0x9c1e8e92, 0x9c1c8c90, 0x383a0a32,
145 0x0c0c0c00, 0x2c2e0e22, 0xb83a8ab2, 0x6c2e4e62,
146 0x9c1f8f93, 0x581a4a52, 0xf032c2f2, 0x90128292,
147 0xf033c3f3, 0x48094941, 0x78384870, 0xcc0cccc0,
148 0x14150511, 0xf83bcbf3, 0x70304070, 0x74354571,
149 0x7c3f4f73, 0x34350531, 0x10100010, 0x00030303,
150 0x64244460, 0x6c2d4d61, 0xc406c6c2, 0x74344470,
151 0xd415c5d1, 0xb43484b0, 0xe82acae2, 0x08090901,
152 0x74364672, 0x18190911, 0xfc3ecef2, 0x40004040,
153 0x10120212, 0xe020c0e0, 0xbc3d8db1, 0x04050501,
154 0xf83acaf2, 0x00010101, 0xf030c0f0, 0x282a0a22,
155 0x5c1e4e52, 0xa82989a1, 0x54164652, 0x40034343,
156 0x84058581, 0x14140410, 0x88098981, 0x981b8b93,
157 0xb03080b0, 0xe425c5e1, 0x48084840, 0x78394971,
158 0x94178793, 0xfc3cccf0, 0x1c1e0e12, 0x80028282,
159 0x20210121, 0x8c0c8c80, 0x181b0b13, 0x5c1f4f53,
160 0x74374773, 0x54144450, 0xb03282b2, 0x1c1d0d11,
161 0x24250521, 0x4c0f4f43, 0x00000000, 0x44064642,
162 0xec2dcde1, 0x58184850, 0x50124252, 0xe82bcbe3,
163 0x7c3e4e72, 0xd81acad2, 0xc809c9c1, 0xfc3dcdf1,
164 0x30300030, 0x94158591, 0x64254561, 0x3c3c0c30,
165 0xb43686b2, 0xe424c4e0, 0xb83b8bb3, 0x7c3c4c70,
166 0x0c0e0e02, 0x50104050, 0x38390931, 0x24260622,
167 0x30320232, 0x84048480, 0x68294961, 0x90138393,
168 0x34370733, 0xe427c7e3, 0x24240420, 0xa42484a0,
169 0xc80bcbc3, 0x50134353, 0x080a0a02, 0x84078783,
170 0xd819c9d1, 0x4c0c4c40, 0x80038383, 0x8c0f8f83,
171 0xcc0ecec2, 0x383b0b33, 0x480a4a42, 0xb43787b3,
172 };
173
174 static const u32 SS2[256] = {
175 0xa1a82989, 0x81840585, 0xd2d416c6, 0xd3d013c3,
176 0x50541444, 0x111c1d0d, 0xa0ac2c8c, 0x21242505,
177 0x515c1d4d, 0x43400343, 0x10181808, 0x121c1e0e,
178 0x51501141, 0xf0fc3ccc, 0xc2c80aca, 0x63602343,
179 0x20282808, 0x40440444, 0x20202000, 0x919c1d8d,
180 0xe0e020c0, 0xe2e022c2, 0xc0c808c8, 0x13141707,
181 0xa1a42585, 0x838c0f8f, 0x03000303, 0x73783b4b,
182 0xb3b83b8b, 0x13101303, 0xd2d012c2, 0xe2ec2ece,
183 0x70703040, 0x808c0c8c, 0x333c3f0f, 0xa0a82888,
184 0x32303202, 0xd1dc1dcd, 0xf2f436c6, 0x70743444,
185 0xe0ec2ccc, 0x91941585, 0x03080b0b, 0x53541747,
186 0x505c1c4c, 0x53581b4b, 0xb1bc3d8d, 0x01000101,
187 0x20242404, 0x101c1c0c, 0x73703343, 0x90981888,
188 0x10101000, 0xc0cc0ccc, 0xf2f032c2, 0xd1d819c9,
189 0x202c2c0c, 0xe3e427c7, 0x72703242, 0x83800383,
190 0x93981b8b, 0xd1d011c1, 0x82840686, 0xc1c809c9,
191 0x60602040, 0x50501040, 0xa3a02383, 0xe3e82bcb,
192 0x010c0d0d, 0xb2b43686, 0x929c1e8e, 0x434c0f4f,
193 0xb3b43787, 0x52581a4a, 0xc2c406c6, 0x70783848,
194 0xa2a42686, 0x12101202, 0xa3ac2f8f, 0xd1d415c5,
195 0x61602141, 0xc3c003c3, 0xb0b43484, 0x41400141,
196 0x52501242, 0x717c3d4d, 0x818c0d8d, 0x00080808,
197 0x131c1f0f, 0x91981989, 0x00000000, 0x11181909,
198 0x00040404, 0x53501343, 0xf3f437c7, 0xe1e021c1,
199 0xf1fc3dcd, 0x72743646, 0x232c2f0f, 0x23242707,
200 0xb0b03080, 0x83880b8b, 0x020c0e0e, 0xa3a82b8b,
201 0xa2a02282, 0x626c2e4e, 0x93901383, 0x414c0d4d,
202 0x61682949, 0x707c3c4c, 0x01080909, 0x02080a0a,
203 0xb3bc3f8f, 0xe3ec2fcf, 0xf3f033c3, 0xc1c405c5,
204 0x83840787, 0x10141404, 0xf2fc3ece, 0x60642444,
205 0xd2dc1ece, 0x222c2e0e, 0x43480b4b, 0x12181a0a,
206 0x02040606, 0x21202101, 0x63682b4b, 0x62642646,
207 0x02000202, 0xf1f435c5, 0x92901282, 0x82880a8a,
208 0x000c0c0c, 0xb3b03383, 0x727c3e4e, 0xd0d010c0,
209 0x72783a4a, 0x43440747, 0x92941686, 0xe1e425c5,
210 0x22242606, 0x80800080, 0xa1ac2d8d, 0xd3dc1fcf,
211 0xa1a02181, 0x30303000, 0x33343707, 0xa2ac2e8e,
212 0x32343606, 0x11141505, 0x22202202, 0x30383808,
213 0xf0f434c4, 0xa3a42787, 0x41440545, 0x404c0c4c,
214 0x81800181, 0xe1e829c9, 0x80840484, 0x93941787,
215 0x31343505, 0xc3c80bcb, 0xc2cc0ece, 0x303c3c0c,
216 0x71703141, 0x11101101, 0xc3c407c7, 0x81880989,
217 0x71743545, 0xf3f83bcb, 0xd2d81aca, 0xf0f838c8,
218 0x90941484, 0x51581949, 0x82800282, 0xc0c404c4,
219 0xf3fc3fcf, 0x41480949, 0x31383909, 0x63642747,
220 0xc0c000c0, 0xc3cc0fcf, 0xd3d417c7, 0xb0b83888,
221 0x030c0f0f, 0x828c0e8e, 0x42400242, 0x23202303,
222 0x91901181, 0x606c2c4c, 0xd3d81bcb, 0xa0a42484,
223 0x30343404, 0xf1f031c1, 0x40480848, 0xc2c002c2,
224 0x636c2f4f, 0x313c3d0d, 0x212c2d0d, 0x40400040,
225 0xb2bc3e8e, 0x323c3e0e, 0xb0bc3c8c, 0xc1c001c1,
226 0xa2a82a8a, 0xb2b83a8a, 0x424c0e4e, 0x51541545,
227 0x33383b0b, 0xd0dc1ccc, 0x60682848, 0x737c3f4f,
228 0x909c1c8c, 0xd0d818c8, 0x42480a4a, 0x52541646,
229 0x73743747, 0xa0a02080, 0xe1ec2dcd, 0x42440646,
230 0xb1b43585, 0x23282b0b, 0x61642545, 0xf2f83aca,
231 0xe3e023c3, 0xb1b83989, 0xb1b03181, 0x939c1f8f,
232 0x525c1e4e, 0xf1f839c9, 0xe2e426c6, 0xb2b03282,
233 0x31303101, 0xe2e82aca, 0x616c2d4d, 0x535c1f4f,
234 0xe0e424c4, 0xf0f030c0, 0xc1cc0dcd, 0x80880888,
235 0x12141606, 0x32383a0a, 0x50581848, 0xd0d414c4,
236 0x62602242, 0x21282909, 0x03040707, 0x33303303,
237 0xe0e828c8, 0x13181b0b, 0x01040505, 0x71783949,
238 0x90901080, 0x62682a4a, 0x22282a0a, 0x92981a8a,
239 };
240
241 static const u32 SS3[256] = {
242 0x08303838, 0xc8e0e828, 0x0d212c2d, 0x86a2a426,
243 0xcfc3cc0f, 0xced2dc1e, 0x83b3b033, 0x88b0b838,
244 0x8fa3ac2f, 0x40606020, 0x45515415, 0xc7c3c407,
245 0x44404404, 0x4f636c2f, 0x4b63682b, 0x4b53581b,
246 0xc3c3c003, 0x42626022, 0x03333033, 0x85b1b435,
247 0x09212829, 0x80a0a020, 0xc2e2e022, 0x87a3a427,
248 0xc3d3d013, 0x81919011, 0x01111011, 0x06020406,
249 0x0c101c1c, 0x8cb0bc3c, 0x06323436, 0x4b43480b,
250 0xcfe3ec2f, 0x88808808, 0x4c606c2c, 0x88a0a828,
251 0x07131417, 0xc4c0c404, 0x06121416, 0xc4f0f434,
252 0xc2c2c002, 0x45414405, 0xc1e1e021, 0xc6d2d416,
253 0x0f333c3f, 0x0d313c3d, 0x8e828c0e, 0x88909818,
254 0x08202828, 0x4e424c0e, 0xc6f2f436, 0x0e323c3e,
255 0x85a1a425, 0xc9f1f839, 0x0d010c0d, 0xcfd3dc1f,
256 0xc8d0d818, 0x0b23282b, 0x46626426, 0x4a72783a,
257 0x07232427, 0x0f232c2f, 0xc1f1f031, 0x42727032,
258 0x42424002, 0xc4d0d414, 0x41414001, 0xc0c0c000,
259 0x43737033, 0x47636427, 0x8ca0ac2c, 0x8b83880b,
260 0xc7f3f437, 0x8da1ac2d, 0x80808000, 0x0f131c1f,
261 0xcac2c80a, 0x0c202c2c, 0x8aa2a82a, 0x04303434,
262 0xc2d2d012, 0x0b03080b, 0xcee2ec2e, 0xc9e1e829,
263 0x4d515c1d, 0x84909414, 0x08101818, 0xc8f0f838,
264 0x47535417, 0x8ea2ac2e, 0x08000808, 0xc5c1c405,
265 0x03131013, 0xcdc1cc0d, 0x86828406, 0x89b1b839,
266 0xcff3fc3f, 0x4d717c3d, 0xc1c1c001, 0x01313031,
267 0xc5f1f435, 0x8a82880a, 0x4a62682a, 0x81b1b031,
268 0xc1d1d011, 0x00202020, 0xc7d3d417, 0x02020002,
269 0x02222022, 0x04000404, 0x48606828, 0x41717031,
270 0x07030407, 0xcbd3d81b, 0x8d919c1d, 0x89919819,
271 0x41616021, 0x8eb2bc3e, 0xc6e2e426, 0x49515819,
272 0xcdd1dc1d, 0x41515011, 0x80909010, 0xccd0dc1c,
273 0x8a92981a, 0x83a3a023, 0x8ba3a82b, 0xc0d0d010,
274 0x81818001, 0x0f030c0f, 0x47434407, 0x0a12181a,
275 0xc3e3e023, 0xcce0ec2c, 0x8d818c0d, 0x8fb3bc3f,
276 0x86929416, 0x4b73783b, 0x4c505c1c, 0x82a2a022,
277 0x81a1a021, 0x43636023, 0x03232023, 0x4d414c0d,
278 0xc8c0c808, 0x8e929c1e, 0x8c909c1c, 0x0a32383a,
279 0x0c000c0c, 0x0e222c2e, 0x8ab2b83a, 0x4e626c2e,
280 0x8f939c1f, 0x4a52581a, 0xc2f2f032, 0x82929012,
281 0xc3f3f033, 0x49414809, 0x48707838, 0xccc0cc0c,
282 0x05111415, 0xcbf3f83b, 0x40707030, 0x45717435,
283 0x4f737c3f, 0x05313435, 0x00101010, 0x03030003,
284 0x44606424, 0x4d616c2d, 0xc6c2c406, 0x44707434,
285 0xc5d1d415, 0x84b0b434, 0xcae2e82a, 0x09010809,
286 0x46727436, 0x09111819, 0xcef2fc3e, 0x40404000,
287 0x02121012, 0xc0e0e020, 0x8db1bc3d, 0x05010405,
288 0xcaf2f83a, 0x01010001, 0xc0f0f030, 0x0a22282a,
289 0x4e525c1e, 0x89a1a829, 0x46525416, 0x43434003,
290 0x85818405, 0x04101414, 0x89818809, 0x8b93981b,
291 0x80b0b030, 0xc5e1e425, 0x48404808, 0x49717839,
292 0x87939417, 0xccf0fc3c, 0x0e121c1e, 0x82828002,
293 0x01212021, 0x8c808c0c, 0x0b13181b, 0x4f535c1f,
294 0x47737437, 0x44505414, 0x82b2b032, 0x0d111c1d,
295 0x05212425, 0x4f434c0f, 0x00000000, 0x46424406,
296 0xcde1ec2d, 0x48505818, 0x42525012, 0xcbe3e82b,
297 0x4e727c3e, 0xcad2d81a, 0xc9c1c809, 0xcdf1fc3d,
298 0x00303030, 0x85919415, 0x45616425, 0x0c303c3c,
299 0x86b2b436, 0xc4e0e424, 0x8bb3b83b, 0x4c707c3c,
300 0x0e020c0e, 0x40505010, 0x09313839, 0x06222426,
301 0x02323032, 0x84808404, 0x49616829, 0x83939013,
302 0x07333437, 0xc7e3e427, 0x04202424, 0x84a0a424,
303 0xcbc3c80b, 0x43535013, 0x0a02080a, 0x87838407,
304 0xc9d1d819, 0x4c404c0c, 0x83838003, 0x8f838c0f,
305 0xcec2cc0e, 0x0b33383b, 0x4a42480a, 0x87b3b437,
306 };
307
308 static const u32 KC[SEED_NUM_KCONSTANTS] = {
309 0x9e3779b9, 0x3c6ef373, 0x78dde6e6, 0xf1bbcdcc,
310 0xe3779b99, 0xc6ef3733, 0x8dde6e67, 0x1bbcdccf,
311 0x3779b99e, 0x6ef3733c, 0xdde6e678, 0xbbcdccf1,
312 0x779b99e3, 0xef3733c6, 0xde6e678d, 0xbcdccf1b,
313 };
314
315 #define OP(X1, X2, X3, X4, rbase) \
316 t0 = X3 ^ ks[rbase]; \
317 t1 = X4 ^ ks[rbase+1]; \
318 t1 ^= t0; \
319 t1 = SS0[byte(t1, 0)] ^ SS1[byte(t1, 1)] ^ \
320 SS2[byte(t1, 2)] ^ SS3[byte(t1, 3)]; \
321 t0 += t1; \
322 t0 = SS0[byte(t0, 0)] ^ SS1[byte(t0, 1)] ^ \
323 SS2[byte(t0, 2)] ^ SS3[byte(t0, 3)]; \
324 t1 += t0; \
325 t1 = SS0[byte(t1, 0)] ^ SS1[byte(t1, 1)] ^ \
326 SS2[byte(t1, 2)] ^ SS3[byte(t1, 3)]; \
327 t0 += t1; \
328 X1 ^= t0; \
329 X2 ^= t1;
330
seed_set_key(struct crypto_tfm * tfm,const u8 * in_key,unsigned int key_len)331 static int seed_set_key(struct crypto_tfm *tfm, const u8 *in_key,
332 unsigned int key_len)
333 {
334 struct seed_ctx *ctx = crypto_tfm_ctx(tfm);
335 u32 *keyout = ctx->keysched;
336 const __be32 *key = (const __be32 *)in_key;
337 u32 i, t0, t1, x1, x2, x3, x4;
338
339 x1 = be32_to_cpu(key[0]);
340 x2 = be32_to_cpu(key[1]);
341 x3 = be32_to_cpu(key[2]);
342 x4 = be32_to_cpu(key[3]);
343
344 for (i = 0; i < SEED_NUM_KCONSTANTS; i++) {
345 t0 = x1 + x3 - KC[i];
346 t1 = x2 + KC[i] - x4;
347 *(keyout++) = SS0[byte(t0, 0)] ^ SS1[byte(t0, 1)] ^
348 SS2[byte(t0, 2)] ^ SS3[byte(t0, 3)];
349 *(keyout++) = SS0[byte(t1, 0)] ^ SS1[byte(t1, 1)] ^
350 SS2[byte(t1, 2)] ^ SS3[byte(t1, 3)];
351
352 if (i % 2 == 0) {
353 t0 = x1;
354 x1 = (x1 >> 8) ^ (x2 << 24);
355 x2 = (x2 >> 8) ^ (t0 << 24);
356 } else {
357 t0 = x3;
358 x3 = (x3 << 8) ^ (x4 >> 24);
359 x4 = (x4 << 8) ^ (t0 >> 24);
360 }
361 }
362
363 return 0;
364 }
365
366 /* encrypt a block of text */
367
seed_encrypt(struct crypto_tfm * tfm,u8 * out,const u8 * in)368 static void seed_encrypt(struct crypto_tfm *tfm, u8 *out, const u8 *in)
369 {
370 const struct seed_ctx *ctx = crypto_tfm_ctx(tfm);
371 const __be32 *src = (const __be32 *)in;
372 __be32 *dst = (__be32 *)out;
373 u32 x1, x2, x3, x4, t0, t1;
374 const u32 *ks = ctx->keysched;
375
376 x1 = be32_to_cpu(src[0]);
377 x2 = be32_to_cpu(src[1]);
378 x3 = be32_to_cpu(src[2]);
379 x4 = be32_to_cpu(src[3]);
380
381 OP(x1, x2, x3, x4, 0);
382 OP(x3, x4, x1, x2, 2);
383 OP(x1, x2, x3, x4, 4);
384 OP(x3, x4, x1, x2, 6);
385 OP(x1, x2, x3, x4, 8);
386 OP(x3, x4, x1, x2, 10);
387 OP(x1, x2, x3, x4, 12);
388 OP(x3, x4, x1, x2, 14);
389 OP(x1, x2, x3, x4, 16);
390 OP(x3, x4, x1, x2, 18);
391 OP(x1, x2, x3, x4, 20);
392 OP(x3, x4, x1, x2, 22);
393 OP(x1, x2, x3, x4, 24);
394 OP(x3, x4, x1, x2, 26);
395 OP(x1, x2, x3, x4, 28);
396 OP(x3, x4, x1, x2, 30);
397
398 dst[0] = cpu_to_be32(x3);
399 dst[1] = cpu_to_be32(x4);
400 dst[2] = cpu_to_be32(x1);
401 dst[3] = cpu_to_be32(x2);
402 }
403
404 /* decrypt a block of text */
405
seed_decrypt(struct crypto_tfm * tfm,u8 * out,const u8 * in)406 static void seed_decrypt(struct crypto_tfm *tfm, u8 *out, const u8 *in)
407 {
408 const struct seed_ctx *ctx = crypto_tfm_ctx(tfm);
409 const __be32 *src = (const __be32 *)in;
410 __be32 *dst = (__be32 *)out;
411 u32 x1, x2, x3, x4, t0, t1;
412 const u32 *ks = ctx->keysched;
413
414 x1 = be32_to_cpu(src[0]);
415 x2 = be32_to_cpu(src[1]);
416 x3 = be32_to_cpu(src[2]);
417 x4 = be32_to_cpu(src[3]);
418
419 OP(x1, x2, x3, x4, 30);
420 OP(x3, x4, x1, x2, 28);
421 OP(x1, x2, x3, x4, 26);
422 OP(x3, x4, x1, x2, 24);
423 OP(x1, x2, x3, x4, 22);
424 OP(x3, x4, x1, x2, 20);
425 OP(x1, x2, x3, x4, 18);
426 OP(x3, x4, x1, x2, 16);
427 OP(x1, x2, x3, x4, 14);
428 OP(x3, x4, x1, x2, 12);
429 OP(x1, x2, x3, x4, 10);
430 OP(x3, x4, x1, x2, 8);
431 OP(x1, x2, x3, x4, 6);
432 OP(x3, x4, x1, x2, 4);
433 OP(x1, x2, x3, x4, 2);
434 OP(x3, x4, x1, x2, 0);
435
436 dst[0] = cpu_to_be32(x3);
437 dst[1] = cpu_to_be32(x4);
438 dst[2] = cpu_to_be32(x1);
439 dst[3] = cpu_to_be32(x2);
440 }
441
442
443 static struct crypto_alg seed_alg = {
444 .cra_name = "seed",
445 .cra_driver_name = "seed-generic",
446 .cra_priority = 100,
447 .cra_flags = CRYPTO_ALG_TYPE_CIPHER,
448 .cra_blocksize = SEED_BLOCK_SIZE,
449 .cra_ctxsize = sizeof(struct seed_ctx),
450 .cra_alignmask = 3,
451 .cra_module = THIS_MODULE,
452 .cra_list = LIST_HEAD_INIT(seed_alg.cra_list),
453 .cra_u = {
454 .cipher = {
455 .cia_min_keysize = SEED_KEY_SIZE,
456 .cia_max_keysize = SEED_KEY_SIZE,
457 .cia_setkey = seed_set_key,
458 .cia_encrypt = seed_encrypt,
459 .cia_decrypt = seed_decrypt
460 }
461 }
462 };
463
seed_init(void)464 static int __init seed_init(void)
465 {
466 return crypto_register_alg(&seed_alg);
467 }
468
seed_fini(void)469 static void __exit seed_fini(void)
470 {
471 crypto_unregister_alg(&seed_alg);
472 }
473
474 module_init(seed_init);
475 module_exit(seed_fini);
476
477 MODULE_DESCRIPTION("SEED Cipher Algorithm");
478 MODULE_LICENSE("GPL");
479 MODULE_AUTHOR("Hye-Shik Chang <perky@FreeBSD.org>, Kim Hyun <hkim@kisa.or.kr>");
480