00001
00002
00003
00004
00005
00006
00007
00008
00009
00010
00011
00012
00013
00014
00015
00016
00017 #include "pch.h"
00018 #include "misc.h"
00019 #include "des.h"
00020
00021 NAMESPACE_BEGIN(CryptoPP)
00022
00023 typedef BlockGetAndPut<word32, BigEndian> Block;
00024
00025
00026
00027
00028
00029
00030
00031
00032
00033
00034
00035
00036
00037
00038
00039
00040
00041
00042
00043
00044
00045
00046
00047
00048
00049
00050
00051
00052
00053
00054
00055
00056
00057
00058
00059
00060
00061
00062
00063
00064
00065
00066
00067
00068
00069
00070
00071
00072
00073
00074
00075
00076 static inline void IPERM(word32 &left, word32 &right)
00077 {
00078 word32 work;
00079
00080 right = rotlFixed(right, 4U);
00081 work = (left ^ right) & 0xf0f0f0f0;
00082 left ^= work;
00083 right = rotrFixed(right^work, 20U);
00084 work = (left ^ right) & 0xffff0000;
00085 left ^= work;
00086 right = rotrFixed(right^work, 18U);
00087 work = (left ^ right) & 0x33333333;
00088 left ^= work;
00089 right = rotrFixed(right^work, 6U);
00090 work = (left ^ right) & 0x00ff00ff;
00091 left ^= work;
00092 right = rotlFixed(right^work, 9U);
00093 work = (left ^ right) & 0xaaaaaaaa;
00094 left = rotlFixed(left^work, 1U);
00095 right ^= work;
00096 }
00097
00098 static inline void FPERM(word32 &left, word32 &right)
00099 {
00100 word32 work;
00101
00102 right = rotrFixed(right, 1U);
00103 work = (left ^ right) & 0xaaaaaaaa;
00104 right ^= work;
00105 left = rotrFixed(left^work, 9U);
00106 work = (left ^ right) & 0x00ff00ff;
00107 right ^= work;
00108 left = rotlFixed(left^work, 6U);
00109 work = (left ^ right) & 0x33333333;
00110 right ^= work;
00111 left = rotlFixed(left^work, 18U);
00112 work = (left ^ right) & 0xffff0000;
00113 right ^= work;
00114 left = rotlFixed(left^work, 20U);
00115 work = (left ^ right) & 0xf0f0f0f0;
00116 right ^= work;
00117 left = rotrFixed(left^work, 4U);
00118 }
00119
00120 #ifndef CRYPTOPP_IMPORTS
00121
00122
00123
00124
00125
00126
00127
00128
00129
00130 #ifdef notdef
00131
00132 static byte ip[] = {
00133 58, 50, 42, 34, 26, 18, 10, 2,
00134 60, 52, 44, 36, 28, 20, 12, 4,
00135 62, 54, 46, 38, 30, 22, 14, 6,
00136 64, 56, 48, 40, 32, 24, 16, 8,
00137 57, 49, 41, 33, 25, 17, 9, 1,
00138 59, 51, 43, 35, 27, 19, 11, 3,
00139 61, 53, 45, 37, 29, 21, 13, 5,
00140 63, 55, 47, 39, 31, 23, 15, 7
00141 };
00142
00143
00144 static byte fp[] = {
00145 40, 8, 48, 16, 56, 24, 64, 32,
00146 39, 7, 47, 15, 55, 23, 63, 31,
00147 38, 6, 46, 14, 54, 22, 62, 30,
00148 37, 5, 45, 13, 53, 21, 61, 29,
00149 36, 4, 44, 12, 52, 20, 60, 28,
00150 35, 3, 43, 11, 51, 19, 59, 27,
00151 34, 2, 42, 10, 50, 18, 58, 26,
00152 33, 1, 41, 9, 49, 17, 57, 25
00153 };
00154
00155 static byte ei[] = {
00156 32, 1, 2, 3, 4, 5,
00157 4, 5, 6, 7, 8, 9,
00158 8, 9, 10, 11, 12, 13,
00159 12, 13, 14, 15, 16, 17,
00160 16, 17, 18, 19, 20, 21,
00161 20, 21, 22, 23, 24, 25,
00162 24, 25, 26, 27, 28, 29,
00163 28, 29, 30, 31, 32, 1
00164 };
00165
00166 static byte sbox[8][64] = {
00167
00168 14, 4, 13, 1, 2, 15, 11, 8, 3, 10, 6, 12, 5, 9, 0, 7,
00169 0, 15, 7, 4, 14, 2, 13, 1, 10, 6, 12, 11, 9, 5, 3, 8,
00170 4, 1, 14, 8, 13, 6, 2, 11, 15, 12, 9, 7, 3, 10, 5, 0,
00171 15, 12, 8, 2, 4, 9, 1, 7, 5, 11, 3, 14, 10, 0, 6, 13,
00172
00173
00174 15, 1, 8, 14, 6, 11, 3, 4, 9, 7, 2, 13, 12, 0, 5, 10,
00175 3, 13, 4, 7, 15, 2, 8, 14, 12, 0, 1, 10, 6, 9, 11, 5,
00176 0, 14, 7, 11, 10, 4, 13, 1, 5, 8, 12, 6, 9, 3, 2, 15,
00177 13, 8, 10, 1, 3, 15, 4, 2, 11, 6, 7, 12, 0, 5, 14, 9,
00178
00179
00180 10, 0, 9, 14, 6, 3, 15, 5, 1, 13, 12, 7, 11, 4, 2, 8,
00181 13, 7, 0, 9, 3, 4, 6, 10, 2, 8, 5, 14, 12, 11, 15, 1,
00182 13, 6, 4, 9, 8, 15, 3, 0, 11, 1, 2, 12, 5, 10, 14, 7,
00183 1, 10, 13, 0, 6, 9, 8, 7, 4, 15, 14, 3, 11, 5, 2, 12,
00184
00185
00186 7, 13, 14, 3, 0, 6, 9, 10, 1, 2, 8, 5, 11, 12, 4, 15,
00187 13, 8, 11, 5, 6, 15, 0, 3, 4, 7, 2, 12, 1, 10, 14, 9,
00188 10, 6, 9, 0, 12, 11, 7, 13, 15, 1, 3, 14, 5, 2, 8, 4,
00189 3, 15, 0, 6, 10, 1, 13, 8, 9, 4, 5, 11, 12, 7, 2, 14,
00190
00191
00192 2, 12, 4, 1, 7, 10, 11, 6, 8, 5, 3, 15, 13, 0, 14, 9,
00193 14, 11, 2, 12, 4, 7, 13, 1, 5, 0, 15, 10, 3, 9, 8, 6,
00194 4, 2, 1, 11, 10, 13, 7, 8, 15, 9, 12, 5, 6, 3, 0, 14,
00195 11, 8, 12, 7, 1, 14, 2, 13, 6, 15, 0, 9, 10, 4, 5, 3,
00196
00197
00198 12, 1, 10, 15, 9, 2, 6, 8, 0, 13, 3, 4, 14, 7, 5, 11,
00199 10, 15, 4, 2, 7, 12, 9, 5, 6, 1, 13, 14, 0, 11, 3, 8,
00200 9, 14, 15, 5, 2, 8, 12, 3, 7, 0, 4, 10, 1, 13, 11, 6,
00201 4, 3, 2, 12, 9, 5, 15, 10, 11, 14, 1, 7, 6, 0, 8, 13,
00202
00203
00204 4, 11, 2, 14, 15, 0, 8, 13, 3, 12, 9, 7, 5, 10, 6, 1,
00205 13, 0, 11, 7, 4, 9, 1, 10, 14, 3, 5, 12, 2, 15, 8, 6,
00206 1, 4, 11, 13, 12, 3, 7, 14, 10, 15, 6, 8, 0, 5, 9, 2,
00207 6, 11, 13, 8, 1, 4, 10, 7, 9, 5, 0, 15, 14, 2, 3, 12,
00208
00209
00210 13, 2, 8, 4, 6, 15, 11, 1, 10, 9, 3, 14, 5, 0, 12, 7,
00211 1, 15, 13, 8, 10, 3, 7, 4, 12, 5, 6, 11, 0, 14, 9, 2,
00212 7, 11, 4, 1, 9, 12, 14, 2, 0, 6, 10, 13, 15, 3, 5, 8,
00213 2, 1, 14, 7, 4, 10, 8, 13, 15, 12, 9, 0, 3, 5, 6, 11
00214 };
00215
00216
00217 static byte p32i[] = {
00218 16, 7, 20, 21,
00219 29, 12, 28, 17,
00220 1, 15, 23, 26,
00221 5, 18, 31, 10,
00222 2, 8, 24, 14,
00223 32, 27, 3, 9,
00224 19, 13, 30, 6,
00225 22, 11, 4, 25
00226 };
00227 #endif
00228
00229
00230 static const byte pc1[] = {
00231 57, 49, 41, 33, 25, 17, 9,
00232 1, 58, 50, 42, 34, 26, 18,
00233 10, 2, 59, 51, 43, 35, 27,
00234 19, 11, 3, 60, 52, 44, 36,
00235
00236 63, 55, 47, 39, 31, 23, 15,
00237 7, 62, 54, 46, 38, 30, 22,
00238 14, 6, 61, 53, 45, 37, 29,
00239 21, 13, 5, 28, 20, 12, 4
00240 };
00241
00242
00243 static const byte totrot[] = {
00244 1,2,4,6,8,10,12,14,15,17,19,21,23,25,27,28
00245 };
00246
00247
00248 static const byte pc2[] = {
00249 14, 17, 11, 24, 1, 5,
00250 3, 28, 15, 6, 21, 10,
00251 23, 19, 12, 4, 26, 8,
00252 16, 7, 27, 20, 13, 2,
00253 41, 52, 31, 37, 47, 55,
00254 30, 40, 51, 45, 33, 48,
00255 44, 49, 39, 56, 34, 53,
00256 46, 42, 50, 36, 29, 32
00257 };
00258
00259
00260
00261
00262 static const int bytebit[] = {
00263 0200,0100,040,020,010,04,02,01
00264 };
00265
00266
00267 void RawDES::UncheckedSetKey(CipherDir dir, const byte *key, unsigned int length)
00268 {
00269 SecByteBlock buffer(56+56+8);
00270 byte *const pc1m=buffer;
00271 byte *const pcr=pc1m+56;
00272 byte *const ks=pcr+56;
00273 register int i,j,l;
00274 int m;
00275
00276 for (j=0; j<56; j++) {
00277 l=pc1[j]-1;
00278 m = l & 07;
00279 pc1m[j]=(key[l>>3] &
00280 bytebit[m])
00281 ? 1 : 0;
00282 }
00283 for (i=0; i<16; i++) {
00284 memset(ks,0,8);
00285 for (j=0; j<56; j++)
00286 pcr[j] = pc1m[(l=j+totrot[i])<(j<28? 28 : 56) ? l: l-28];
00287
00288 for (j=0; j<48; j++){
00289
00290 if (pcr[pc2[j]-1]){
00291
00292 l= j % 6;
00293 ks[j/6] |= bytebit[l] >> 2;
00294 }
00295 }
00296
00297 k[2*i] = ((word32)ks[0] << 24)
00298 | ((word32)ks[2] << 16)
00299 | ((word32)ks[4] << 8)
00300 | ((word32)ks[6]);
00301 k[2*i+1] = ((word32)ks[1] << 24)
00302 | ((word32)ks[3] << 16)
00303 | ((word32)ks[5] << 8)
00304 | ((word32)ks[7]);
00305 }
00306
00307 if (dir==DECRYPTION)
00308 for (i=0; i<16; i+=2)
00309 {
00310 std::swap(k[i], k[32-2-i]);
00311 std::swap(k[i+1], k[32-1-i]);
00312 }
00313 }
00314
00315 void RawDES::RawProcessBlock(word32 &l_, word32 &r_) const
00316 {
00317 word32 l = l_, r = r_;
00318 const word32 *kptr=k;
00319
00320 for (unsigned i=0; i<8; i++)
00321 {
00322 word32 work = rotrFixed(r, 4U) ^ kptr[4*i+0];
00323 l ^= Spbox[6][(work) & 0x3f]
00324 ^ Spbox[4][(work >> 8) & 0x3f]
00325 ^ Spbox[2][(work >> 16) & 0x3f]
00326 ^ Spbox[0][(work >> 24) & 0x3f];
00327 work = r ^ kptr[4*i+1];
00328 l ^= Spbox[7][(work) & 0x3f]
00329 ^ Spbox[5][(work >> 8) & 0x3f]
00330 ^ Spbox[3][(work >> 16) & 0x3f]
00331 ^ Spbox[1][(work >> 24) & 0x3f];
00332
00333 work = rotrFixed(l, 4U) ^ kptr[4*i+2];
00334 r ^= Spbox[6][(work) & 0x3f]
00335 ^ Spbox[4][(work >> 8) & 0x3f]
00336 ^ Spbox[2][(work >> 16) & 0x3f]
00337 ^ Spbox[0][(work >> 24) & 0x3f];
00338 work = l ^ kptr[4*i+3];
00339 r ^= Spbox[7][(work) & 0x3f]
00340 ^ Spbox[5][(work >> 8) & 0x3f]
00341 ^ Spbox[3][(work >> 16) & 0x3f]
00342 ^ Spbox[1][(work >> 24) & 0x3f];
00343 }
00344
00345 l_ = l; r_ = r;
00346 }
00347
00348 void DES_EDE2::Base::UncheckedSetKey(CipherDir dir, const byte *key, unsigned int length)
00349 {
00350 AssertValidKeyLength(length);
00351
00352 m_des1.UncheckedSetKey(dir, key);
00353 m_des2.UncheckedSetKey(ReverseCipherDir(dir), key+8);
00354 }
00355
00356 void DES_EDE2::Base::ProcessAndXorBlock(const byte *inBlock, const byte *xorBlock, byte *outBlock) const
00357 {
00358 word32 l,r;
00359 Block::Get(inBlock)(l)(r);
00360 IPERM(l,r);
00361 m_des1.RawProcessBlock(l, r);
00362 m_des2.RawProcessBlock(r, l);
00363 m_des1.RawProcessBlock(l, r);
00364 FPERM(l,r);
00365 Block::Put(xorBlock, outBlock)(r)(l);
00366 }
00367
00368 void DES_EDE3::Base::UncheckedSetKey(CipherDir dir, const byte *key, unsigned int length)
00369 {
00370 AssertValidKeyLength(length);
00371
00372 m_des1.UncheckedSetKey(dir, key+(dir==ENCRYPTION?0:2*8));
00373 m_des2.UncheckedSetKey(ReverseCipherDir(dir), key+8);
00374 m_des3.UncheckedSetKey(dir, key+(dir==DECRYPTION?0:2*8));
00375 }
00376
00377 void DES_EDE3::Base::ProcessAndXorBlock(const byte *inBlock, const byte *xorBlock, byte *outBlock) const
00378 {
00379 word32 l,r;
00380 Block::Get(inBlock)(l)(r);
00381 IPERM(l,r);
00382 m_des1.RawProcessBlock(l, r);
00383 m_des2.RawProcessBlock(r, l);
00384 m_des3.RawProcessBlock(l, r);
00385 FPERM(l,r);
00386 Block::Put(xorBlock, outBlock)(r)(l);
00387 }
00388
00389 #endif // #ifndef CRYPTOPP_IMPORTS
00390
00391 static inline bool CheckParity(byte b)
00392 {
00393 unsigned int a = b ^ (b >> 4);
00394 return ((a ^ (a>>1) ^ (a>>2) ^ (a>>3)) & 1) == 1;
00395 }
00396
00397 bool DES::CheckKeyParityBits(const byte *key)
00398 {
00399 for (unsigned int i=0; i<8; i++)
00400 if (!CheckParity(key[i]))
00401 return false;
00402 return true;
00403 }
00404
00405 void DES::CorrectKeyParityBits(byte *key)
00406 {
00407 for (unsigned int i=0; i<8; i++)
00408 if (!CheckParity(key[i]))
00409 key[i] ^= 1;
00410 }
00411
00412
00413 void DES::Base::ProcessAndXorBlock(const byte *inBlock, const byte *xorBlock, byte *outBlock) const
00414 {
00415 word32 l,r;
00416 Block::Get(inBlock)(l)(r);
00417 IPERM(l,r);
00418 RawProcessBlock(l, r);
00419 FPERM(l,r);
00420 Block::Put(xorBlock, outBlock)(r)(l);
00421 }
00422
00423 void DES_XEX3::Base::UncheckedSetKey(CipherDir dir, const byte *key, unsigned int length)
00424 {
00425 AssertValidKeyLength(length);
00426
00427 memcpy(m_x1, key+(dir==ENCRYPTION?0:2*8), BLOCKSIZE);
00428 m_des.UncheckedSetKey(dir, key+8);
00429 memcpy(m_x3, key+(dir==DECRYPTION?0:2*8), BLOCKSIZE);
00430 }
00431
00432 void DES_XEX3::Base::ProcessAndXorBlock(const byte *inBlock, const byte *xorBlock, byte *outBlock) const
00433 {
00434 xorbuf(outBlock, inBlock, m_x1, BLOCKSIZE);
00435 m_des.ProcessAndXorBlock(outBlock, xorBlock, outBlock);
00436 xorbuf(outBlock, m_x3, BLOCKSIZE);
00437 }
00438
00439 NAMESPACE_END