161828Smarkm/* crypto/idea/i_skey.c */ 261828Smarkm/* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com) 361828Smarkm * All rights reserved. 461828Smarkm * 561828Smarkm * This package is an SSL implementation written 661828Smarkm * by Eric Young (eay@cryptsoft.com). 761828Smarkm * The implementation was written so as to conform with Netscapes SSL. 8296341Sdelphij * 961828Smarkm * This library is free for commercial and non-commercial use as long as 1061828Smarkm * the following conditions are aheared to. The following conditions 1161828Smarkm * apply to all code found in this distribution, be it the RC4, RSA, 1261828Smarkm * lhash, DES, etc., code; not just the SSL code. The SSL documentation 1361828Smarkm * included with this distribution is covered by the same copyright terms 1461828Smarkm * except that the holder is Tim Hudson (tjh@cryptsoft.com). 15296341Sdelphij * 1661828Smarkm * Copyright remains Eric Young's, and as such any Copyright notices in 1761828Smarkm * the code are not to be removed. 1861828Smarkm * If this package is used in a product, Eric Young should be given attribution 1961828Smarkm * as the author of the parts of the library used. 2061828Smarkm * This can be in the form of a textual message at program startup or 2161828Smarkm * in documentation (online or textual) provided with the package. 22296341Sdelphij * 2361828Smarkm * Redistribution and use in source and binary forms, with or without 2461828Smarkm * modification, are permitted provided that the following conditions 2561828Smarkm * are met: 2661828Smarkm * 1. Redistributions of source code must retain the copyright 2761828Smarkm * notice, this list of conditions and the following disclaimer. 2861828Smarkm * 2. Redistributions in binary form must reproduce the above copyright 2961828Smarkm * notice, this list of conditions and the following disclaimer in the 3061828Smarkm * documentation and/or other materials provided with the distribution. 3161828Smarkm * 3. All advertising materials mentioning features or use of this software 3261828Smarkm * must display the following acknowledgement: 3361828Smarkm * "This product includes cryptographic software written by 3461828Smarkm * Eric Young (eay@cryptsoft.com)" 3561828Smarkm * The word 'cryptographic' can be left out if the rouines from the library 3661828Smarkm * being used are not cryptographic related :-). 37296341Sdelphij * 4. If you include any Windows specific code (or a derivative thereof) from 3861828Smarkm * the apps directory (application code) you must include an acknowledgement: 3961828Smarkm * "This product includes software written by Tim Hudson (tjh@cryptsoft.com)" 40296341Sdelphij * 4161828Smarkm * THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND 4261828Smarkm * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 4361828Smarkm * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 4461828Smarkm * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE 4561828Smarkm * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 4661828Smarkm * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 4761828Smarkm * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 4861828Smarkm * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 4961828Smarkm * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 5061828Smarkm * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 5161828Smarkm * SUCH DAMAGE. 52296341Sdelphij * 5361828Smarkm * The licence and distribution terms for any publically available version or 5461828Smarkm * derivative of this code cannot be changed. i.e. this code cannot simply be 5561828Smarkm * copied and put under another distribution licence 5661828Smarkm * [including the GNU Public Licence.] 5761828Smarkm */ 5861828Smarkm 59238405Sjkim#include <openssl/crypto.h> 6061828Smarkm#include <openssl/idea.h> 6161828Smarkm#include "idea_lcl.h" 6261828Smarkm 6361828Smarkmstatic IDEA_INT inverse(unsigned int xin); 64238405Sjkimvoid idea_set_encrypt_key(const unsigned char *key, IDEA_KEY_SCHEDULE *ks) 65194206Ssimon#ifdef OPENSSL_FIPS 66296341Sdelphij{ 67296341Sdelphij fips_cipher_abort(IDEA); 68296341Sdelphij private_idea_set_encrypt_key(key, ks); 69296341Sdelphij} 70296341Sdelphij 71296341Sdelphijvoid private_idea_set_encrypt_key(const unsigned char *key, 72296341Sdelphij IDEA_KEY_SCHEDULE *ks) 73194206Ssimon#endif 74296341Sdelphij{ 75296341Sdelphij int i; 76296341Sdelphij register IDEA_INT *kt, *kf, r0, r1, r2; 7761828Smarkm 78296341Sdelphij kt = &(ks->data[0][0]); 79296341Sdelphij n2s(key, kt[0]); 80296341Sdelphij n2s(key, kt[1]); 81296341Sdelphij n2s(key, kt[2]); 82296341Sdelphij n2s(key, kt[3]); 83296341Sdelphij n2s(key, kt[4]); 84296341Sdelphij n2s(key, kt[5]); 85296341Sdelphij n2s(key, kt[6]); 86296341Sdelphij n2s(key, kt[7]); 8761828Smarkm 88296341Sdelphij kf = kt; 89296341Sdelphij kt += 8; 90296341Sdelphij for (i = 0; i < 6; i++) { 91296341Sdelphij r2 = kf[1]; 92296341Sdelphij r1 = kf[2]; 93296341Sdelphij *(kt++) = ((r2 << 9) | (r1 >> 7)) & 0xffff; 94296341Sdelphij r0 = kf[3]; 95296341Sdelphij *(kt++) = ((r1 << 9) | (r0 >> 7)) & 0xffff; 96296341Sdelphij r1 = kf[4]; 97296341Sdelphij *(kt++) = ((r0 << 9) | (r1 >> 7)) & 0xffff; 98296341Sdelphij r0 = kf[5]; 99296341Sdelphij *(kt++) = ((r1 << 9) | (r0 >> 7)) & 0xffff; 100296341Sdelphij r1 = kf[6]; 101296341Sdelphij *(kt++) = ((r0 << 9) | (r1 >> 7)) & 0xffff; 102296341Sdelphij r0 = kf[7]; 103296341Sdelphij *(kt++) = ((r1 << 9) | (r0 >> 7)) & 0xffff; 104296341Sdelphij r1 = kf[0]; 105296341Sdelphij if (i >= 5) 106296341Sdelphij break; 107296341Sdelphij *(kt++) = ((r0 << 9) | (r1 >> 7)) & 0xffff; 108296341Sdelphij *(kt++) = ((r1 << 9) | (r2 >> 7)) & 0xffff; 109296341Sdelphij kf += 8; 110296341Sdelphij } 111296341Sdelphij} 11261828Smarkm 113238405Sjkimvoid idea_set_decrypt_key(IDEA_KEY_SCHEDULE *ek, IDEA_KEY_SCHEDULE *dk) 114296341Sdelphij{ 115296341Sdelphij int r; 116296341Sdelphij register IDEA_INT *fp, *tp, t; 11761828Smarkm 118296341Sdelphij tp = &(dk->data[0][0]); 119296341Sdelphij fp = &(ek->data[8][0]); 120296341Sdelphij for (r = 0; r < 9; r++) { 121296341Sdelphij *(tp++) = inverse(fp[0]); 122296341Sdelphij *(tp++) = ((int)(0x10000L - fp[2]) & 0xffff); 123296341Sdelphij *(tp++) = ((int)(0x10000L - fp[1]) & 0xffff); 124296341Sdelphij *(tp++) = inverse(fp[3]); 125296341Sdelphij if (r == 8) 126296341Sdelphij break; 127296341Sdelphij fp -= 6; 128296341Sdelphij *(tp++) = fp[4]; 129296341Sdelphij *(tp++) = fp[5]; 130296341Sdelphij } 13161828Smarkm 132296341Sdelphij tp = &(dk->data[0][0]); 133296341Sdelphij t = tp[1]; 134296341Sdelphij tp[1] = tp[2]; 135296341Sdelphij tp[2] = t; 13661828Smarkm 137296341Sdelphij t = tp[49]; 138296341Sdelphij tp[49] = tp[50]; 139296341Sdelphij tp[50] = t; 140296341Sdelphij} 14161828Smarkm 14261828Smarkm/* taken directly from the 'paper' I'll have a look at it later */ 14361828Smarkmstatic IDEA_INT inverse(unsigned int xin) 144296341Sdelphij{ 145296341Sdelphij long n1, n2, q, r, b1, b2, t; 14661828Smarkm 147296341Sdelphij if (xin == 0) 148296341Sdelphij b2 = 0; 149296341Sdelphij else { 150296341Sdelphij n1 = 0x10001; 151296341Sdelphij n2 = xin; 152296341Sdelphij b2 = 1; 153296341Sdelphij b1 = 0; 15461828Smarkm 155296341Sdelphij do { 156296341Sdelphij r = (n1 % n2); 157296341Sdelphij q = (n1 - r) / n2; 158296341Sdelphij if (r == 0) { 159296341Sdelphij if (b2 < 0) 160296341Sdelphij b2 = 0x10001 + b2; 161296341Sdelphij } else { 162296341Sdelphij n1 = n2; 163296341Sdelphij n2 = r; 164296341Sdelphij t = b2; 165296341Sdelphij b2 = b1 - q * b2; 166296341Sdelphij b1 = t; 167296341Sdelphij } 168296341Sdelphij } while (r != 0); 169296341Sdelphij } 170296341Sdelphij return ((IDEA_INT) b2); 171296341Sdelphij} 172