Loading...
1/* Kernel cryptographic api.
2* cast5.c - Cast5 cipher algorithm (rfc2144).
3*
4* Derived from GnuPG implementation of cast5.
5*
6* Major Changes.
7* Complete conformance to rfc2144.
8* Supports key size from 40 to 128 bits.
9*
10* Copyright (C) 1998, 1999, 2000, 2001 Free Software Foundation, Inc.
11* Copyright (C) 2003 Kartikey Mahendra Bhatt <kartik_me@hotmail.com>.
12*
13* This program is free software; you can redistribute it and/or modify it
14* under the terms of GNU General Public License as published by the Free
15* Software Foundation; either version 2 of the License, or (at your option)
16* any later version.
17*
18* You should have received a copy of the GNU General Public License
19* along with this program. If not, see <http://www.gnu.org/licenses/>.
20*/
21
22
23#include <asm/byteorder.h>
24#include <linux/init.h>
25#include <linux/crypto.h>
26#include <linux/module.h>
27#include <linux/errno.h>
28#include <linux/string.h>
29#include <linux/types.h>
30#include <crypto/cast5.h>
31
32static const u32 s5[256] = {
33 0x7ec90c04, 0x2c6e74b9, 0x9b0e66df, 0xa6337911, 0xb86a7fff,
34 0x1dd358f5, 0x44dd9d44, 0x1731167f,
35 0x08fbf1fa, 0xe7f511cc, 0xd2051b00, 0x735aba00, 0x2ab722d8,
36 0x386381cb, 0xacf6243a, 0x69befd7a,
37 0xe6a2e77f, 0xf0c720cd, 0xc4494816, 0xccf5c180, 0x38851640,
38 0x15b0a848, 0xe68b18cb, 0x4caadeff,
39 0x5f480a01, 0x0412b2aa, 0x259814fc, 0x41d0efe2, 0x4e40b48d,
40 0x248eb6fb, 0x8dba1cfe, 0x41a99b02,
41 0x1a550a04, 0xba8f65cb, 0x7251f4e7, 0x95a51725, 0xc106ecd7,
42 0x97a5980a, 0xc539b9aa, 0x4d79fe6a,
43 0xf2f3f763, 0x68af8040, 0xed0c9e56, 0x11b4958b, 0xe1eb5a88,
44 0x8709e6b0, 0xd7e07156, 0x4e29fea7,
45 0x6366e52d, 0x02d1c000, 0xc4ac8e05, 0x9377f571, 0x0c05372a,
46 0x578535f2, 0x2261be02, 0xd642a0c9,
47 0xdf13a280, 0x74b55bd2, 0x682199c0, 0xd421e5ec, 0x53fb3ce8,
48 0xc8adedb3, 0x28a87fc9, 0x3d959981,
49 0x5c1ff900, 0xfe38d399, 0x0c4eff0b, 0x062407ea, 0xaa2f4fb1,
50 0x4fb96976, 0x90c79505, 0xb0a8a774,
51 0xef55a1ff, 0xe59ca2c2, 0xa6b62d27, 0xe66a4263, 0xdf65001f,
52 0x0ec50966, 0xdfdd55bc, 0x29de0655,
53 0x911e739a, 0x17af8975, 0x32c7911c, 0x89f89468, 0x0d01e980,
54 0x524755f4, 0x03b63cc9, 0x0cc844b2,
55 0xbcf3f0aa, 0x87ac36e9, 0xe53a7426, 0x01b3d82b, 0x1a9e7449,
56 0x64ee2d7e, 0xcddbb1da, 0x01c94910,
57 0xb868bf80, 0x0d26f3fd, 0x9342ede7, 0x04a5c284, 0x636737b6,
58 0x50f5b616, 0xf24766e3, 0x8eca36c1,
59 0x136e05db, 0xfef18391, 0xfb887a37, 0xd6e7f7d4, 0xc7fb7dc9,
60 0x3063fcdf, 0xb6f589de, 0xec2941da,
61 0x26e46695, 0xb7566419, 0xf654efc5, 0xd08d58b7, 0x48925401,
62 0xc1bacb7f, 0xe5ff550f, 0xb6083049,
63 0x5bb5d0e8, 0x87d72e5a, 0xab6a6ee1, 0x223a66ce, 0xc62bf3cd,
64 0x9e0885f9, 0x68cb3e47, 0x086c010f,
65 0xa21de820, 0xd18b69de, 0xf3f65777, 0xfa02c3f6, 0x407edac3,
66 0xcbb3d550, 0x1793084d, 0xb0d70eba,
67 0x0ab378d5, 0xd951fb0c, 0xded7da56, 0x4124bbe4, 0x94ca0b56,
68 0x0f5755d1, 0xe0e1e56e, 0x6184b5be,
69 0x580a249f, 0x94f74bc0, 0xe327888e, 0x9f7b5561, 0xc3dc0280,
70 0x05687715, 0x646c6bd7, 0x44904db3,
71 0x66b4f0a3, 0xc0f1648a, 0x697ed5af, 0x49e92ff6, 0x309e374f,
72 0x2cb6356a, 0x85808573, 0x4991f840,
73 0x76f0ae02, 0x083be84d, 0x28421c9a, 0x44489406, 0x736e4cb8,
74 0xc1092910, 0x8bc95fc6, 0x7d869cf4,
75 0x134f616f, 0x2e77118d, 0xb31b2be1, 0xaa90b472, 0x3ca5d717,
76 0x7d161bba, 0x9cad9010, 0xaf462ba2,
77 0x9fe459d2, 0x45d34559, 0xd9f2da13, 0xdbc65487, 0xf3e4f94e,
78 0x176d486f, 0x097c13ea, 0x631da5c7,
79 0x445f7382, 0x175683f4, 0xcdc66a97, 0x70be0288, 0xb3cdcf72,
80 0x6e5dd2f3, 0x20936079, 0x459b80a5,
81 0xbe60e2db, 0xa9c23101, 0xeba5315c, 0x224e42f2, 0x1c5c1572,
82 0xf6721b2c, 0x1ad2fff3, 0x8c25404e,
83 0x324ed72f, 0x4067b7fd, 0x0523138e, 0x5ca3bc78, 0xdc0fd66e,
84 0x75922283, 0x784d6b17, 0x58ebb16e,
85 0x44094f85, 0x3f481d87, 0xfcfeae7b, 0x77b5ff76, 0x8c2302bf,
86 0xaaf47556, 0x5f46b02a, 0x2b092801,
87 0x3d38f5f7, 0x0ca81f36, 0x52af4a8a, 0x66d5e7c0, 0xdf3b0874,
88 0x95055110, 0x1b5ad7a8, 0xf61ed5ad,
89 0x6cf6e479, 0x20758184, 0xd0cefa65, 0x88f7be58, 0x4a046826,
90 0x0ff6f8f3, 0xa09c7f70, 0x5346aba0,
91 0x5ce96c28, 0xe176eda3, 0x6bac307f, 0x376829d2, 0x85360fa9,
92 0x17e3fe2a, 0x24b79767, 0xf5a96b20,
93 0xd6cd2595, 0x68ff1ebf, 0x7555442c, 0xf19f06be, 0xf9e0659a,
94 0xeeb9491d, 0x34010718, 0xbb30cab8,
95 0xe822fe15, 0x88570983, 0x750e6249, 0xda627e55, 0x5e76ffa8,
96 0xb1534546, 0x6d47de08, 0xefe9e7d4
97};
98static const u32 s6[256] = {
99 0xf6fa8f9d, 0x2cac6ce1, 0x4ca34867, 0xe2337f7c, 0x95db08e7,
100 0x016843b4, 0xeced5cbc, 0x325553ac,
101 0xbf9f0960, 0xdfa1e2ed, 0x83f0579d, 0x63ed86b9, 0x1ab6a6b8,
102 0xde5ebe39, 0xf38ff732, 0x8989b138,
103 0x33f14961, 0xc01937bd, 0xf506c6da, 0xe4625e7e, 0xa308ea99,
104 0x4e23e33c, 0x79cbd7cc, 0x48a14367,
105 0xa3149619, 0xfec94bd5, 0xa114174a, 0xeaa01866, 0xa084db2d,
106 0x09a8486f, 0xa888614a, 0x2900af98,
107 0x01665991, 0xe1992863, 0xc8f30c60, 0x2e78ef3c, 0xd0d51932,
108 0xcf0fec14, 0xf7ca07d2, 0xd0a82072,
109 0xfd41197e, 0x9305a6b0, 0xe86be3da, 0x74bed3cd, 0x372da53c,
110 0x4c7f4448, 0xdab5d440, 0x6dba0ec3,
111 0x083919a7, 0x9fbaeed9, 0x49dbcfb0, 0x4e670c53, 0x5c3d9c01,
112 0x64bdb941, 0x2c0e636a, 0xba7dd9cd,
113 0xea6f7388, 0xe70bc762, 0x35f29adb, 0x5c4cdd8d, 0xf0d48d8c,
114 0xb88153e2, 0x08a19866, 0x1ae2eac8,
115 0x284caf89, 0xaa928223, 0x9334be53, 0x3b3a21bf, 0x16434be3,
116 0x9aea3906, 0xefe8c36e, 0xf890cdd9,
117 0x80226dae, 0xc340a4a3, 0xdf7e9c09, 0xa694a807, 0x5b7c5ecc,
118 0x221db3a6, 0x9a69a02f, 0x68818a54,
119 0xceb2296f, 0x53c0843a, 0xfe893655, 0x25bfe68a, 0xb4628abc,
120 0xcf222ebf, 0x25ac6f48, 0xa9a99387,
121 0x53bddb65, 0xe76ffbe7, 0xe967fd78, 0x0ba93563, 0x8e342bc1,
122 0xe8a11be9, 0x4980740d, 0xc8087dfc,
123 0x8de4bf99, 0xa11101a0, 0x7fd37975, 0xda5a26c0, 0xe81f994f,
124 0x9528cd89, 0xfd339fed, 0xb87834bf,
125 0x5f04456d, 0x22258698, 0xc9c4c83b, 0x2dc156be, 0x4f628daa,
126 0x57f55ec5, 0xe2220abe, 0xd2916ebf,
127 0x4ec75b95, 0x24f2c3c0, 0x42d15d99, 0xcd0d7fa0, 0x7b6e27ff,
128 0xa8dc8af0, 0x7345c106, 0xf41e232f,
129 0x35162386, 0xe6ea8926, 0x3333b094, 0x157ec6f2, 0x372b74af,
130 0x692573e4, 0xe9a9d848, 0xf3160289,
131 0x3a62ef1d, 0xa787e238, 0xf3a5f676, 0x74364853, 0x20951063,
132 0x4576698d, 0xb6fad407, 0x592af950,
133 0x36f73523, 0x4cfb6e87, 0x7da4cec0, 0x6c152daa, 0xcb0396a8,
134 0xc50dfe5d, 0xfcd707ab, 0x0921c42f,
135 0x89dff0bb, 0x5fe2be78, 0x448f4f33, 0x754613c9, 0x2b05d08d,
136 0x48b9d585, 0xdc049441, 0xc8098f9b,
137 0x7dede786, 0xc39a3373, 0x42410005, 0x6a091751, 0x0ef3c8a6,
138 0x890072d6, 0x28207682, 0xa9a9f7be,
139 0xbf32679d, 0xd45b5b75, 0xb353fd00, 0xcbb0e358, 0x830f220a,
140 0x1f8fb214, 0xd372cf08, 0xcc3c4a13,
141 0x8cf63166, 0x061c87be, 0x88c98f88, 0x6062e397, 0x47cf8e7a,
142 0xb6c85283, 0x3cc2acfb, 0x3fc06976,
143 0x4e8f0252, 0x64d8314d, 0xda3870e3, 0x1e665459, 0xc10908f0,
144 0x513021a5, 0x6c5b68b7, 0x822f8aa0,
145 0x3007cd3e, 0x74719eef, 0xdc872681, 0x073340d4, 0x7e432fd9,
146 0x0c5ec241, 0x8809286c, 0xf592d891,
147 0x08a930f6, 0x957ef305, 0xb7fbffbd, 0xc266e96f, 0x6fe4ac98,
148 0xb173ecc0, 0xbc60b42a, 0x953498da,
149 0xfba1ae12, 0x2d4bd736, 0x0f25faab, 0xa4f3fceb, 0xe2969123,
150 0x257f0c3d, 0x9348af49, 0x361400bc,
151 0xe8816f4a, 0x3814f200, 0xa3f94043, 0x9c7a54c2, 0xbc704f57,
152 0xda41e7f9, 0xc25ad33a, 0x54f4a084,
153 0xb17f5505, 0x59357cbe, 0xedbd15c8, 0x7f97c5ab, 0xba5ac7b5,
154 0xb6f6deaf, 0x3a479c3a, 0x5302da25,
155 0x653d7e6a, 0x54268d49, 0x51a477ea, 0x5017d55b, 0xd7d25d88,
156 0x44136c76, 0x0404a8c8, 0xb8e5a121,
157 0xb81a928a, 0x60ed5869, 0x97c55b96, 0xeaec991b, 0x29935913,
158 0x01fdb7f1, 0x088e8dfa, 0x9ab6f6f5,
159 0x3b4cbf9f, 0x4a5de3ab, 0xe6051d35, 0xa0e1d855, 0xd36b4cf1,
160 0xf544edeb, 0xb0e93524, 0xbebb8fbd,
161 0xa2d762cf, 0x49c92f54, 0x38b5f331, 0x7128a454, 0x48392905,
162 0xa65b1db8, 0x851c97bd, 0xd675cf2f
163};
164static const u32 s7[256] = {
165 0x85e04019, 0x332bf567, 0x662dbfff, 0xcfc65693, 0x2a8d7f6f,
166 0xab9bc912, 0xde6008a1, 0x2028da1f,
167 0x0227bce7, 0x4d642916, 0x18fac300, 0x50f18b82, 0x2cb2cb11,
168 0xb232e75c, 0x4b3695f2, 0xb28707de,
169 0xa05fbcf6, 0xcd4181e9, 0xe150210c, 0xe24ef1bd, 0xb168c381,
170 0xfde4e789, 0x5c79b0d8, 0x1e8bfd43,
171 0x4d495001, 0x38be4341, 0x913cee1d, 0x92a79c3f, 0x089766be,
172 0xbaeeadf4, 0x1286becf, 0xb6eacb19,
173 0x2660c200, 0x7565bde4, 0x64241f7a, 0x8248dca9, 0xc3b3ad66,
174 0x28136086, 0x0bd8dfa8, 0x356d1cf2,
175 0x107789be, 0xb3b2e9ce, 0x0502aa8f, 0x0bc0351e, 0x166bf52a,
176 0xeb12ff82, 0xe3486911, 0xd34d7516,
177 0x4e7b3aff, 0x5f43671b, 0x9cf6e037, 0x4981ac83, 0x334266ce,
178 0x8c9341b7, 0xd0d854c0, 0xcb3a6c88,
179 0x47bc2829, 0x4725ba37, 0xa66ad22b, 0x7ad61f1e, 0x0c5cbafa,
180 0x4437f107, 0xb6e79962, 0x42d2d816,
181 0x0a961288, 0xe1a5c06e, 0x13749e67, 0x72fc081a, 0xb1d139f7,
182 0xf9583745, 0xcf19df58, 0xbec3f756,
183 0xc06eba30, 0x07211b24, 0x45c28829, 0xc95e317f, 0xbc8ec511,
184 0x38bc46e9, 0xc6e6fa14, 0xbae8584a,
185 0xad4ebc46, 0x468f508b, 0x7829435f, 0xf124183b, 0x821dba9f,
186 0xaff60ff4, 0xea2c4e6d, 0x16e39264,
187 0x92544a8b, 0x009b4fc3, 0xaba68ced, 0x9ac96f78, 0x06a5b79a,
188 0xb2856e6e, 0x1aec3ca9, 0xbe838688,
189 0x0e0804e9, 0x55f1be56, 0xe7e5363b, 0xb3a1f25d, 0xf7debb85,
190 0x61fe033c, 0x16746233, 0x3c034c28,
191 0xda6d0c74, 0x79aac56c, 0x3ce4e1ad, 0x51f0c802, 0x98f8f35a,
192 0x1626a49f, 0xeed82b29, 0x1d382fe3,
193 0x0c4fb99a, 0xbb325778, 0x3ec6d97b, 0x6e77a6a9, 0xcb658b5c,
194 0xd45230c7, 0x2bd1408b, 0x60c03eb7,
195 0xb9068d78, 0xa33754f4, 0xf430c87d, 0xc8a71302, 0xb96d8c32,
196 0xebd4e7be, 0xbe8b9d2d, 0x7979fb06,
197 0xe7225308, 0x8b75cf77, 0x11ef8da4, 0xe083c858, 0x8d6b786f,
198 0x5a6317a6, 0xfa5cf7a0, 0x5dda0033,
199 0xf28ebfb0, 0xf5b9c310, 0xa0eac280, 0x08b9767a, 0xa3d9d2b0,
200 0x79d34217, 0x021a718d, 0x9ac6336a,
201 0x2711fd60, 0x438050e3, 0x069908a8, 0x3d7fedc4, 0x826d2bef,
202 0x4eeb8476, 0x488dcf25, 0x36c9d566,
203 0x28e74e41, 0xc2610aca, 0x3d49a9cf, 0xbae3b9df, 0xb65f8de6,
204 0x92aeaf64, 0x3ac7d5e6, 0x9ea80509,
205 0xf22b017d, 0xa4173f70, 0xdd1e16c3, 0x15e0d7f9, 0x50b1b887,
206 0x2b9f4fd5, 0x625aba82, 0x6a017962,
207 0x2ec01b9c, 0x15488aa9, 0xd716e740, 0x40055a2c, 0x93d29a22,
208 0xe32dbf9a, 0x058745b9, 0x3453dc1e,
209 0xd699296e, 0x496cff6f, 0x1c9f4986, 0xdfe2ed07, 0xb87242d1,
210 0x19de7eae, 0x053e561a, 0x15ad6f8c,
211 0x66626c1c, 0x7154c24c, 0xea082b2a, 0x93eb2939, 0x17dcb0f0,
212 0x58d4f2ae, 0x9ea294fb, 0x52cf564c,
213 0x9883fe66, 0x2ec40581, 0x763953c3, 0x01d6692e, 0xd3a0c108,
214 0xa1e7160e, 0xe4f2dfa6, 0x693ed285,
215 0x74904698, 0x4c2b0edd, 0x4f757656, 0x5d393378, 0xa132234f,
216 0x3d321c5d, 0xc3f5e194, 0x4b269301,
217 0xc79f022f, 0x3c997e7e, 0x5e4f9504, 0x3ffafbbd, 0x76f7ad0e,
218 0x296693f4, 0x3d1fce6f, 0xc61e45be,
219 0xd3b5ab34, 0xf72bf9b7, 0x1b0434c0, 0x4e72b567, 0x5592a33d,
220 0xb5229301, 0xcfd2a87f, 0x60aeb767,
221 0x1814386b, 0x30bcc33d, 0x38a0c07d, 0xfd1606f2, 0xc363519b,
222 0x589dd390, 0x5479f8e6, 0x1cb8d647,
223 0x97fd61a9, 0xea7759f4, 0x2d57539d, 0x569a58cf, 0xe84e63ad,
224 0x462e1b78, 0x6580f87e, 0xf3817914,
225 0x91da55f4, 0x40a230f3, 0xd1988f35, 0xb6e318d2, 0x3ffa50bc,
226 0x3d40f021, 0xc3c0bdae, 0x4958c24c,
227 0x518f36b2, 0x84b1d370, 0x0fedce83, 0x878ddada, 0xf2a279c7,
228 0x94e01be8, 0x90716f4b, 0x954b8aa3
229};
230static const u32 sb8[256] = {
231 0xe216300d, 0xbbddfffc, 0xa7ebdabd, 0x35648095, 0x7789f8b7,
232 0xe6c1121b, 0x0e241600, 0x052ce8b5,
233 0x11a9cfb0, 0xe5952f11, 0xece7990a, 0x9386d174, 0x2a42931c,
234 0x76e38111, 0xb12def3a, 0x37ddddfc,
235 0xde9adeb1, 0x0a0cc32c, 0xbe197029, 0x84a00940, 0xbb243a0f,
236 0xb4d137cf, 0xb44e79f0, 0x049eedfd,
237 0x0b15a15d, 0x480d3168, 0x8bbbde5a, 0x669ded42, 0xc7ece831,
238 0x3f8f95e7, 0x72df191b, 0x7580330d,
239 0x94074251, 0x5c7dcdfa, 0xabbe6d63, 0xaa402164, 0xb301d40a,
240 0x02e7d1ca, 0x53571dae, 0x7a3182a2,
241 0x12a8ddec, 0xfdaa335d, 0x176f43e8, 0x71fb46d4, 0x38129022,
242 0xce949ad4, 0xb84769ad, 0x965bd862,
243 0x82f3d055, 0x66fb9767, 0x15b80b4e, 0x1d5b47a0, 0x4cfde06f,
244 0xc28ec4b8, 0x57e8726e, 0x647a78fc,
245 0x99865d44, 0x608bd593, 0x6c200e03, 0x39dc5ff6, 0x5d0b00a3,
246 0xae63aff2, 0x7e8bd632, 0x70108c0c,
247 0xbbd35049, 0x2998df04, 0x980cf42a, 0x9b6df491, 0x9e7edd53,
248 0x06918548, 0x58cb7e07, 0x3b74ef2e,
249 0x522fffb1, 0xd24708cc, 0x1c7e27cd, 0xa4eb215b, 0x3cf1d2e2,
250 0x19b47a38, 0x424f7618, 0x35856039,
251 0x9d17dee7, 0x27eb35e6, 0xc9aff67b, 0x36baf5b8, 0x09c467cd,
252 0xc18910b1, 0xe11dbf7b, 0x06cd1af8,
253 0x7170c608, 0x2d5e3354, 0xd4de495a, 0x64c6d006, 0xbcc0c62c,
254 0x3dd00db3, 0x708f8f34, 0x77d51b42,
255 0x264f620f, 0x24b8d2bf, 0x15c1b79e, 0x46a52564, 0xf8d7e54e,
256 0x3e378160, 0x7895cda5, 0x859c15a5,
257 0xe6459788, 0xc37bc75f, 0xdb07ba0c, 0x0676a3ab, 0x7f229b1e,
258 0x31842e7b, 0x24259fd7, 0xf8bef472,
259 0x835ffcb8, 0x6df4c1f2, 0x96f5b195, 0xfd0af0fc, 0xb0fe134c,
260 0xe2506d3d, 0x4f9b12ea, 0xf215f225,
261 0xa223736f, 0x9fb4c428, 0x25d04979, 0x34c713f8, 0xc4618187,
262 0xea7a6e98, 0x7cd16efc, 0x1436876c,
263 0xf1544107, 0xbedeee14, 0x56e9af27, 0xa04aa441, 0x3cf7c899,
264 0x92ecbae6, 0xdd67016d, 0x151682eb,
265 0xa842eedf, 0xfdba60b4, 0xf1907b75, 0x20e3030f, 0x24d8c29e,
266 0xe139673b, 0xefa63fb8, 0x71873054,
267 0xb6f2cf3b, 0x9f326442, 0xcb15a4cc, 0xb01a4504, 0xf1e47d8d,
268 0x844a1be5, 0xbae7dfdc, 0x42cbda70,
269 0xcd7dae0a, 0x57e85b7a, 0xd53f5af6, 0x20cf4d8c, 0xcea4d428,
270 0x79d130a4, 0x3486ebfb, 0x33d3cddc,
271 0x77853b53, 0x37effcb5, 0xc5068778, 0xe580b3e6, 0x4e68b8f4,
272 0xc5c8b37e, 0x0d809ea2, 0x398feb7c,
273 0x132a4f94, 0x43b7950e, 0x2fee7d1c, 0x223613bd, 0xdd06caa2,
274 0x37df932b, 0xc4248289, 0xacf3ebc3,
275 0x5715f6b7, 0xef3478dd, 0xf267616f, 0xc148cbe4, 0x9052815e,
276 0x5e410fab, 0xb48a2465, 0x2eda7fa4,
277 0xe87b40e4, 0xe98ea084, 0x5889e9e1, 0xefd390fc, 0xdd07d35b,
278 0xdb485694, 0x38d7e5b2, 0x57720101,
279 0x730edebc, 0x5b643113, 0x94917e4f, 0x503c2fba, 0x646f1282,
280 0x7523d24a, 0xe0779695, 0xf9c17a8f,
281 0x7a5b2121, 0xd187b896, 0x29263a4d, 0xba510cdf, 0x81f47c9f,
282 0xad1163ed, 0xea7b5965, 0x1a00726e,
283 0x11403092, 0x00da6d77, 0x4a0cdd61, 0xad1f4603, 0x605bdfb0,
284 0x9eedc364, 0x22ebe6a8, 0xcee7d28a,
285 0xa0e736a0, 0x5564a6b9, 0x10853209, 0xc7eb8f37, 0x2de705ca,
286 0x8951570f, 0xdf09822b, 0xbd691a6c,
287 0xaa12e4f2, 0x87451c0f, 0xe0f6a27a, 0x3ada4819, 0x4cf1764f,
288 0x0d771c2b, 0x67cdb156, 0x350d8384,
289 0x5938fa0f, 0x42399ef3, 0x36997b07, 0x0e84093d, 0x4aa93e61,
290 0x8360d87b, 0x1fa98b0c, 0x1149382c,
291 0xe97625a5, 0x0614d1b7, 0x0e25244b, 0x0c768347, 0x589e8d82,
292 0x0d2059d1, 0xa466bb1e, 0xf8da0a82,
293 0x04f19130, 0xba6e4ec0, 0x99265164, 0x1ee7230d, 0x50b2ad80,
294 0xeaee6801, 0x8db2a283, 0xea8bf59e
295};
296
297#define s1 cast_s1
298#define s2 cast_s2
299#define s3 cast_s3
300#define s4 cast_s4
301
302#define F1(D, m, r) ((I = ((m) + (D))), (I = rol32(I, (r))), \
303 (((s1[I >> 24] ^ s2[(I>>16)&0xff]) - s3[(I>>8)&0xff]) + s4[I&0xff]))
304#define F2(D, m, r) ((I = ((m) ^ (D))), (I = rol32(I, (r))), \
305 (((s1[I >> 24] - s2[(I>>16)&0xff]) + s3[(I>>8)&0xff]) ^ s4[I&0xff]))
306#define F3(D, m, r) ((I = ((m) - (D))), (I = rol32(I, (r))), \
307 (((s1[I >> 24] + s2[(I>>16)&0xff]) ^ s3[(I>>8)&0xff]) - s4[I&0xff]))
308
309
310void __cast5_encrypt(struct cast5_ctx *c, u8 *outbuf, const u8 *inbuf)
311{
312 const __be32 *src = (const __be32 *)inbuf;
313 __be32 *dst = (__be32 *)outbuf;
314 u32 l, r, t;
315 u32 I; /* used by the Fx macros */
316 u32 *Km;
317 u8 *Kr;
318
319 Km = c->Km;
320 Kr = c->Kr;
321
322 /* (L0,R0) <-- (m1...m64). (Split the plaintext into left and
323 * right 32-bit halves L0 = m1...m32 and R0 = m33...m64.)
324 */
325 l = be32_to_cpu(src[0]);
326 r = be32_to_cpu(src[1]);
327
328 /* (16 rounds) for i from 1 to 16, compute Li and Ri as follows:
329 * Li = Ri-1;
330 * Ri = Li-1 ^ f(Ri-1,Kmi,Kri), where f is defined in Section 2.2
331 * Rounds 1, 4, 7, 10, 13, and 16 use f function Type 1.
332 * Rounds 2, 5, 8, 11, and 14 use f function Type 2.
333 * Rounds 3, 6, 9, 12, and 15 use f function Type 3.
334 */
335
336 t = l; l = r; r = t ^ F1(r, Km[0], Kr[0]);
337 t = l; l = r; r = t ^ F2(r, Km[1], Kr[1]);
338 t = l; l = r; r = t ^ F3(r, Km[2], Kr[2]);
339 t = l; l = r; r = t ^ F1(r, Km[3], Kr[3]);
340 t = l; l = r; r = t ^ F2(r, Km[4], Kr[4]);
341 t = l; l = r; r = t ^ F3(r, Km[5], Kr[5]);
342 t = l; l = r; r = t ^ F1(r, Km[6], Kr[6]);
343 t = l; l = r; r = t ^ F2(r, Km[7], Kr[7]);
344 t = l; l = r; r = t ^ F3(r, Km[8], Kr[8]);
345 t = l; l = r; r = t ^ F1(r, Km[9], Kr[9]);
346 t = l; l = r; r = t ^ F2(r, Km[10], Kr[10]);
347 t = l; l = r; r = t ^ F3(r, Km[11], Kr[11]);
348 if (!(c->rr)) {
349 t = l; l = r; r = t ^ F1(r, Km[12], Kr[12]);
350 t = l; l = r; r = t ^ F2(r, Km[13], Kr[13]);
351 t = l; l = r; r = t ^ F3(r, Km[14], Kr[14]);
352 t = l; l = r; r = t ^ F1(r, Km[15], Kr[15]);
353 }
354
355 /* c1...c64 <-- (R16,L16). (Exchange final blocks L16, R16 and
356 * concatenate to form the ciphertext.) */
357 dst[0] = cpu_to_be32(r);
358 dst[1] = cpu_to_be32(l);
359}
360EXPORT_SYMBOL_GPL(__cast5_encrypt);
361
362static void cast5_encrypt(struct crypto_tfm *tfm, u8 *outbuf, const u8 *inbuf)
363{
364 __cast5_encrypt(crypto_tfm_ctx(tfm), outbuf, inbuf);
365}
366
367void __cast5_decrypt(struct cast5_ctx *c, u8 *outbuf, const u8 *inbuf)
368{
369 const __be32 *src = (const __be32 *)inbuf;
370 __be32 *dst = (__be32 *)outbuf;
371 u32 l, r, t;
372 u32 I;
373 u32 *Km;
374 u8 *Kr;
375
376 Km = c->Km;
377 Kr = c->Kr;
378
379 l = be32_to_cpu(src[0]);
380 r = be32_to_cpu(src[1]);
381
382 if (!(c->rr)) {
383 t = l; l = r; r = t ^ F1(r, Km[15], Kr[15]);
384 t = l; l = r; r = t ^ F3(r, Km[14], Kr[14]);
385 t = l; l = r; r = t ^ F2(r, Km[13], Kr[13]);
386 t = l; l = r; r = t ^ F1(r, Km[12], Kr[12]);
387 }
388 t = l; l = r; r = t ^ F3(r, Km[11], Kr[11]);
389 t = l; l = r; r = t ^ F2(r, Km[10], Kr[10]);
390 t = l; l = r; r = t ^ F1(r, Km[9], Kr[9]);
391 t = l; l = r; r = t ^ F3(r, Km[8], Kr[8]);
392 t = l; l = r; r = t ^ F2(r, Km[7], Kr[7]);
393 t = l; l = r; r = t ^ F1(r, Km[6], Kr[6]);
394 t = l; l = r; r = t ^ F3(r, Km[5], Kr[5]);
395 t = l; l = r; r = t ^ F2(r, Km[4], Kr[4]);
396 t = l; l = r; r = t ^ F1(r, Km[3], Kr[3]);
397 t = l; l = r; r = t ^ F3(r, Km[2], Kr[2]);
398 t = l; l = r; r = t ^ F2(r, Km[1], Kr[1]);
399 t = l; l = r; r = t ^ F1(r, Km[0], Kr[0]);
400
401 dst[0] = cpu_to_be32(r);
402 dst[1] = cpu_to_be32(l);
403}
404EXPORT_SYMBOL_GPL(__cast5_decrypt);
405
406static void cast5_decrypt(struct crypto_tfm *tfm, u8 *outbuf, const u8 *inbuf)
407{
408 __cast5_decrypt(crypto_tfm_ctx(tfm), outbuf, inbuf);
409}
410
411static void key_schedule(u32 *x, u32 *z, u32 *k)
412{
413
414#define xi(i) ((x[(i)/4] >> (8*(3-((i)%4)))) & 0xff)
415#define zi(i) ((z[(i)/4] >> (8*(3-((i)%4)))) & 0xff)
416
417 z[0] = x[0] ^ s5[xi(13)] ^ s6[xi(15)] ^ s7[xi(12)] ^ sb8[xi(14)] ^
418 s7[xi(8)];
419 z[1] = x[2] ^ s5[zi(0)] ^ s6[zi(2)] ^ s7[zi(1)] ^ sb8[zi(3)] ^
420 sb8[xi(10)];
421 z[2] = x[3] ^ s5[zi(7)] ^ s6[zi(6)] ^ s7[zi(5)] ^ sb8[zi(4)] ^
422 s5[xi(9)];
423 z[3] = x[1] ^ s5[zi(10)] ^ s6[zi(9)] ^ s7[zi(11)] ^ sb8[zi(8)] ^
424 s6[xi(11)];
425 k[0] = s5[zi(8)] ^ s6[zi(9)] ^ s7[zi(7)] ^ sb8[zi(6)] ^ s5[zi(2)];
426 k[1] = s5[zi(10)] ^ s6[zi(11)] ^ s7[zi(5)] ^ sb8[zi(4)] ^
427 s6[zi(6)];
428 k[2] = s5[zi(12)] ^ s6[zi(13)] ^ s7[zi(3)] ^ sb8[zi(2)] ^
429 s7[zi(9)];
430 k[3] = s5[zi(14)] ^ s6[zi(15)] ^ s7[zi(1)] ^ sb8[zi(0)] ^
431 sb8[zi(12)];
432
433 x[0] = z[2] ^ s5[zi(5)] ^ s6[zi(7)] ^ s7[zi(4)] ^ sb8[zi(6)] ^
434 s7[zi(0)];
435 x[1] = z[0] ^ s5[xi(0)] ^ s6[xi(2)] ^ s7[xi(1)] ^ sb8[xi(3)] ^
436 sb8[zi(2)];
437 x[2] = z[1] ^ s5[xi(7)] ^ s6[xi(6)] ^ s7[xi(5)] ^ sb8[xi(4)] ^
438 s5[zi(1)];
439 x[3] = z[3] ^ s5[xi(10)] ^ s6[xi(9)] ^ s7[xi(11)] ^ sb8[xi(8)] ^
440 s6[zi(3)];
441 k[4] = s5[xi(3)] ^ s6[xi(2)] ^ s7[xi(12)] ^ sb8[xi(13)] ^
442 s5[xi(8)];
443 k[5] = s5[xi(1)] ^ s6[xi(0)] ^ s7[xi(14)] ^ sb8[xi(15)] ^
444 s6[xi(13)];
445 k[6] = s5[xi(7)] ^ s6[xi(6)] ^ s7[xi(8)] ^ sb8[xi(9)] ^ s7[xi(3)];
446 k[7] = s5[xi(5)] ^ s6[xi(4)] ^ s7[xi(10)] ^ sb8[xi(11)] ^
447 sb8[xi(7)];
448
449 z[0] = x[0] ^ s5[xi(13)] ^ s6[xi(15)] ^ s7[xi(12)] ^ sb8[xi(14)] ^
450 s7[xi(8)];
451 z[1] = x[2] ^ s5[zi(0)] ^ s6[zi(2)] ^ s7[zi(1)] ^ sb8[zi(3)] ^
452 sb8[xi(10)];
453 z[2] = x[3] ^ s5[zi(7)] ^ s6[zi(6)] ^ s7[zi(5)] ^ sb8[zi(4)] ^
454 s5[xi(9)];
455 z[3] = x[1] ^ s5[zi(10)] ^ s6[zi(9)] ^ s7[zi(11)] ^ sb8[zi(8)] ^
456 s6[xi(11)];
457 k[8] = s5[zi(3)] ^ s6[zi(2)] ^ s7[zi(12)] ^ sb8[zi(13)] ^
458 s5[zi(9)];
459 k[9] = s5[zi(1)] ^ s6[zi(0)] ^ s7[zi(14)] ^ sb8[zi(15)] ^
460 s6[zi(12)];
461 k[10] = s5[zi(7)] ^ s6[zi(6)] ^ s7[zi(8)] ^ sb8[zi(9)] ^ s7[zi(2)];
462 k[11] = s5[zi(5)] ^ s6[zi(4)] ^ s7[zi(10)] ^ sb8[zi(11)] ^
463 sb8[zi(6)];
464
465 x[0] = z[2] ^ s5[zi(5)] ^ s6[zi(7)] ^ s7[zi(4)] ^ sb8[zi(6)] ^
466 s7[zi(0)];
467 x[1] = z[0] ^ s5[xi(0)] ^ s6[xi(2)] ^ s7[xi(1)] ^ sb8[xi(3)] ^
468 sb8[zi(2)];
469 x[2] = z[1] ^ s5[xi(7)] ^ s6[xi(6)] ^ s7[xi(5)] ^ sb8[xi(4)] ^
470 s5[zi(1)];
471 x[3] = z[3] ^ s5[xi(10)] ^ s6[xi(9)] ^ s7[xi(11)] ^ sb8[xi(8)] ^
472 s6[zi(3)];
473 k[12] = s5[xi(8)] ^ s6[xi(9)] ^ s7[xi(7)] ^ sb8[xi(6)] ^ s5[xi(3)];
474 k[13] = s5[xi(10)] ^ s6[xi(11)] ^ s7[xi(5)] ^ sb8[xi(4)] ^
475 s6[xi(7)];
476 k[14] = s5[xi(12)] ^ s6[xi(13)] ^ s7[xi(3)] ^ sb8[xi(2)] ^
477 s7[xi(8)];
478 k[15] = s5[xi(14)] ^ s6[xi(15)] ^ s7[xi(1)] ^ sb8[xi(0)] ^
479 sb8[xi(13)];
480
481#undef xi
482#undef zi
483}
484
485
486int cast5_setkey(struct crypto_tfm *tfm, const u8 *key, unsigned int key_len)
487{
488 struct cast5_ctx *c = crypto_tfm_ctx(tfm);
489 int i;
490 u32 x[4];
491 u32 z[4];
492 u32 k[16];
493 __be32 p_key[4];
494
495 c->rr = key_len <= 10 ? 1 : 0;
496
497 memset(p_key, 0, 16);
498 memcpy(p_key, key, key_len);
499
500
501 x[0] = be32_to_cpu(p_key[0]);
502 x[1] = be32_to_cpu(p_key[1]);
503 x[2] = be32_to_cpu(p_key[2]);
504 x[3] = be32_to_cpu(p_key[3]);
505
506 key_schedule(x, z, k);
507 for (i = 0; i < 16; i++)
508 c->Km[i] = k[i];
509 key_schedule(x, z, k);
510 for (i = 0; i < 16; i++)
511 c->Kr[i] = k[i] & 0x1f;
512 return 0;
513}
514EXPORT_SYMBOL_GPL(cast5_setkey);
515
516static struct crypto_alg alg = {
517 .cra_name = "cast5",
518 .cra_driver_name = "cast5-generic",
519 .cra_priority = 100,
520 .cra_flags = CRYPTO_ALG_TYPE_CIPHER,
521 .cra_blocksize = CAST5_BLOCK_SIZE,
522 .cra_ctxsize = sizeof(struct cast5_ctx),
523 .cra_alignmask = 3,
524 .cra_module = THIS_MODULE,
525 .cra_u = {
526 .cipher = {
527 .cia_min_keysize = CAST5_MIN_KEY_SIZE,
528 .cia_max_keysize = CAST5_MAX_KEY_SIZE,
529 .cia_setkey = cast5_setkey,
530 .cia_encrypt = cast5_encrypt,
531 .cia_decrypt = cast5_decrypt
532 }
533 }
534};
535
536static int __init cast5_mod_init(void)
537{
538 return crypto_register_alg(&alg);
539}
540
541static void __exit cast5_mod_fini(void)
542{
543 crypto_unregister_alg(&alg);
544}
545
546module_init(cast5_mod_init);
547module_exit(cast5_mod_fini);
548
549MODULE_LICENSE("GPL");
550MODULE_DESCRIPTION("Cast5 Cipher Algorithm");
551MODULE_ALIAS_CRYPTO("cast5");
552MODULE_ALIAS_CRYPTO("cast5-generic");
1// SPDX-License-Identifier: GPL-2.0-or-later
2/* Kernel cryptographic api.
3* cast5.c - Cast5 cipher algorithm (rfc2144).
4*
5* Derived from GnuPG implementation of cast5.
6*
7* Major Changes.
8* Complete conformance to rfc2144.
9* Supports key size from 40 to 128 bits.
10*
11* Copyright (C) 1998, 1999, 2000, 2001 Free Software Foundation, Inc.
12* Copyright (C) 2003 Kartikey Mahendra Bhatt <kartik_me@hotmail.com>.
13*/
14
15
16#include <linux/unaligned.h>
17#include <crypto/algapi.h>
18#include <linux/init.h>
19#include <linux/module.h>
20#include <linux/errno.h>
21#include <linux/string.h>
22#include <linux/types.h>
23#include <crypto/cast5.h>
24
25static const u32 s5[256] = {
26 0x7ec90c04, 0x2c6e74b9, 0x9b0e66df, 0xa6337911, 0xb86a7fff,
27 0x1dd358f5, 0x44dd9d44, 0x1731167f,
28 0x08fbf1fa, 0xe7f511cc, 0xd2051b00, 0x735aba00, 0x2ab722d8,
29 0x386381cb, 0xacf6243a, 0x69befd7a,
30 0xe6a2e77f, 0xf0c720cd, 0xc4494816, 0xccf5c180, 0x38851640,
31 0x15b0a848, 0xe68b18cb, 0x4caadeff,
32 0x5f480a01, 0x0412b2aa, 0x259814fc, 0x41d0efe2, 0x4e40b48d,
33 0x248eb6fb, 0x8dba1cfe, 0x41a99b02,
34 0x1a550a04, 0xba8f65cb, 0x7251f4e7, 0x95a51725, 0xc106ecd7,
35 0x97a5980a, 0xc539b9aa, 0x4d79fe6a,
36 0xf2f3f763, 0x68af8040, 0xed0c9e56, 0x11b4958b, 0xe1eb5a88,
37 0x8709e6b0, 0xd7e07156, 0x4e29fea7,
38 0x6366e52d, 0x02d1c000, 0xc4ac8e05, 0x9377f571, 0x0c05372a,
39 0x578535f2, 0x2261be02, 0xd642a0c9,
40 0xdf13a280, 0x74b55bd2, 0x682199c0, 0xd421e5ec, 0x53fb3ce8,
41 0xc8adedb3, 0x28a87fc9, 0x3d959981,
42 0x5c1ff900, 0xfe38d399, 0x0c4eff0b, 0x062407ea, 0xaa2f4fb1,
43 0x4fb96976, 0x90c79505, 0xb0a8a774,
44 0xef55a1ff, 0xe59ca2c2, 0xa6b62d27, 0xe66a4263, 0xdf65001f,
45 0x0ec50966, 0xdfdd55bc, 0x29de0655,
46 0x911e739a, 0x17af8975, 0x32c7911c, 0x89f89468, 0x0d01e980,
47 0x524755f4, 0x03b63cc9, 0x0cc844b2,
48 0xbcf3f0aa, 0x87ac36e9, 0xe53a7426, 0x01b3d82b, 0x1a9e7449,
49 0x64ee2d7e, 0xcddbb1da, 0x01c94910,
50 0xb868bf80, 0x0d26f3fd, 0x9342ede7, 0x04a5c284, 0x636737b6,
51 0x50f5b616, 0xf24766e3, 0x8eca36c1,
52 0x136e05db, 0xfef18391, 0xfb887a37, 0xd6e7f7d4, 0xc7fb7dc9,
53 0x3063fcdf, 0xb6f589de, 0xec2941da,
54 0x26e46695, 0xb7566419, 0xf654efc5, 0xd08d58b7, 0x48925401,
55 0xc1bacb7f, 0xe5ff550f, 0xb6083049,
56 0x5bb5d0e8, 0x87d72e5a, 0xab6a6ee1, 0x223a66ce, 0xc62bf3cd,
57 0x9e0885f9, 0x68cb3e47, 0x086c010f,
58 0xa21de820, 0xd18b69de, 0xf3f65777, 0xfa02c3f6, 0x407edac3,
59 0xcbb3d550, 0x1793084d, 0xb0d70eba,
60 0x0ab378d5, 0xd951fb0c, 0xded7da56, 0x4124bbe4, 0x94ca0b56,
61 0x0f5755d1, 0xe0e1e56e, 0x6184b5be,
62 0x580a249f, 0x94f74bc0, 0xe327888e, 0x9f7b5561, 0xc3dc0280,
63 0x05687715, 0x646c6bd7, 0x44904db3,
64 0x66b4f0a3, 0xc0f1648a, 0x697ed5af, 0x49e92ff6, 0x309e374f,
65 0x2cb6356a, 0x85808573, 0x4991f840,
66 0x76f0ae02, 0x083be84d, 0x28421c9a, 0x44489406, 0x736e4cb8,
67 0xc1092910, 0x8bc95fc6, 0x7d869cf4,
68 0x134f616f, 0x2e77118d, 0xb31b2be1, 0xaa90b472, 0x3ca5d717,
69 0x7d161bba, 0x9cad9010, 0xaf462ba2,
70 0x9fe459d2, 0x45d34559, 0xd9f2da13, 0xdbc65487, 0xf3e4f94e,
71 0x176d486f, 0x097c13ea, 0x631da5c7,
72 0x445f7382, 0x175683f4, 0xcdc66a97, 0x70be0288, 0xb3cdcf72,
73 0x6e5dd2f3, 0x20936079, 0x459b80a5,
74 0xbe60e2db, 0xa9c23101, 0xeba5315c, 0x224e42f2, 0x1c5c1572,
75 0xf6721b2c, 0x1ad2fff3, 0x8c25404e,
76 0x324ed72f, 0x4067b7fd, 0x0523138e, 0x5ca3bc78, 0xdc0fd66e,
77 0x75922283, 0x784d6b17, 0x58ebb16e,
78 0x44094f85, 0x3f481d87, 0xfcfeae7b, 0x77b5ff76, 0x8c2302bf,
79 0xaaf47556, 0x5f46b02a, 0x2b092801,
80 0x3d38f5f7, 0x0ca81f36, 0x52af4a8a, 0x66d5e7c0, 0xdf3b0874,
81 0x95055110, 0x1b5ad7a8, 0xf61ed5ad,
82 0x6cf6e479, 0x20758184, 0xd0cefa65, 0x88f7be58, 0x4a046826,
83 0x0ff6f8f3, 0xa09c7f70, 0x5346aba0,
84 0x5ce96c28, 0xe176eda3, 0x6bac307f, 0x376829d2, 0x85360fa9,
85 0x17e3fe2a, 0x24b79767, 0xf5a96b20,
86 0xd6cd2595, 0x68ff1ebf, 0x7555442c, 0xf19f06be, 0xf9e0659a,
87 0xeeb9491d, 0x34010718, 0xbb30cab8,
88 0xe822fe15, 0x88570983, 0x750e6249, 0xda627e55, 0x5e76ffa8,
89 0xb1534546, 0x6d47de08, 0xefe9e7d4
90};
91static const u32 s6[256] = {
92 0xf6fa8f9d, 0x2cac6ce1, 0x4ca34867, 0xe2337f7c, 0x95db08e7,
93 0x016843b4, 0xeced5cbc, 0x325553ac,
94 0xbf9f0960, 0xdfa1e2ed, 0x83f0579d, 0x63ed86b9, 0x1ab6a6b8,
95 0xde5ebe39, 0xf38ff732, 0x8989b138,
96 0x33f14961, 0xc01937bd, 0xf506c6da, 0xe4625e7e, 0xa308ea99,
97 0x4e23e33c, 0x79cbd7cc, 0x48a14367,
98 0xa3149619, 0xfec94bd5, 0xa114174a, 0xeaa01866, 0xa084db2d,
99 0x09a8486f, 0xa888614a, 0x2900af98,
100 0x01665991, 0xe1992863, 0xc8f30c60, 0x2e78ef3c, 0xd0d51932,
101 0xcf0fec14, 0xf7ca07d2, 0xd0a82072,
102 0xfd41197e, 0x9305a6b0, 0xe86be3da, 0x74bed3cd, 0x372da53c,
103 0x4c7f4448, 0xdab5d440, 0x6dba0ec3,
104 0x083919a7, 0x9fbaeed9, 0x49dbcfb0, 0x4e670c53, 0x5c3d9c01,
105 0x64bdb941, 0x2c0e636a, 0xba7dd9cd,
106 0xea6f7388, 0xe70bc762, 0x35f29adb, 0x5c4cdd8d, 0xf0d48d8c,
107 0xb88153e2, 0x08a19866, 0x1ae2eac8,
108 0x284caf89, 0xaa928223, 0x9334be53, 0x3b3a21bf, 0x16434be3,
109 0x9aea3906, 0xefe8c36e, 0xf890cdd9,
110 0x80226dae, 0xc340a4a3, 0xdf7e9c09, 0xa694a807, 0x5b7c5ecc,
111 0x221db3a6, 0x9a69a02f, 0x68818a54,
112 0xceb2296f, 0x53c0843a, 0xfe893655, 0x25bfe68a, 0xb4628abc,
113 0xcf222ebf, 0x25ac6f48, 0xa9a99387,
114 0x53bddb65, 0xe76ffbe7, 0xe967fd78, 0x0ba93563, 0x8e342bc1,
115 0xe8a11be9, 0x4980740d, 0xc8087dfc,
116 0x8de4bf99, 0xa11101a0, 0x7fd37975, 0xda5a26c0, 0xe81f994f,
117 0x9528cd89, 0xfd339fed, 0xb87834bf,
118 0x5f04456d, 0x22258698, 0xc9c4c83b, 0x2dc156be, 0x4f628daa,
119 0x57f55ec5, 0xe2220abe, 0xd2916ebf,
120 0x4ec75b95, 0x24f2c3c0, 0x42d15d99, 0xcd0d7fa0, 0x7b6e27ff,
121 0xa8dc8af0, 0x7345c106, 0xf41e232f,
122 0x35162386, 0xe6ea8926, 0x3333b094, 0x157ec6f2, 0x372b74af,
123 0x692573e4, 0xe9a9d848, 0xf3160289,
124 0x3a62ef1d, 0xa787e238, 0xf3a5f676, 0x74364853, 0x20951063,
125 0x4576698d, 0xb6fad407, 0x592af950,
126 0x36f73523, 0x4cfb6e87, 0x7da4cec0, 0x6c152daa, 0xcb0396a8,
127 0xc50dfe5d, 0xfcd707ab, 0x0921c42f,
128 0x89dff0bb, 0x5fe2be78, 0x448f4f33, 0x754613c9, 0x2b05d08d,
129 0x48b9d585, 0xdc049441, 0xc8098f9b,
130 0x7dede786, 0xc39a3373, 0x42410005, 0x6a091751, 0x0ef3c8a6,
131 0x890072d6, 0x28207682, 0xa9a9f7be,
132 0xbf32679d, 0xd45b5b75, 0xb353fd00, 0xcbb0e358, 0x830f220a,
133 0x1f8fb214, 0xd372cf08, 0xcc3c4a13,
134 0x8cf63166, 0x061c87be, 0x88c98f88, 0x6062e397, 0x47cf8e7a,
135 0xb6c85283, 0x3cc2acfb, 0x3fc06976,
136 0x4e8f0252, 0x64d8314d, 0xda3870e3, 0x1e665459, 0xc10908f0,
137 0x513021a5, 0x6c5b68b7, 0x822f8aa0,
138 0x3007cd3e, 0x74719eef, 0xdc872681, 0x073340d4, 0x7e432fd9,
139 0x0c5ec241, 0x8809286c, 0xf592d891,
140 0x08a930f6, 0x957ef305, 0xb7fbffbd, 0xc266e96f, 0x6fe4ac98,
141 0xb173ecc0, 0xbc60b42a, 0x953498da,
142 0xfba1ae12, 0x2d4bd736, 0x0f25faab, 0xa4f3fceb, 0xe2969123,
143 0x257f0c3d, 0x9348af49, 0x361400bc,
144 0xe8816f4a, 0x3814f200, 0xa3f94043, 0x9c7a54c2, 0xbc704f57,
145 0xda41e7f9, 0xc25ad33a, 0x54f4a084,
146 0xb17f5505, 0x59357cbe, 0xedbd15c8, 0x7f97c5ab, 0xba5ac7b5,
147 0xb6f6deaf, 0x3a479c3a, 0x5302da25,
148 0x653d7e6a, 0x54268d49, 0x51a477ea, 0x5017d55b, 0xd7d25d88,
149 0x44136c76, 0x0404a8c8, 0xb8e5a121,
150 0xb81a928a, 0x60ed5869, 0x97c55b96, 0xeaec991b, 0x29935913,
151 0x01fdb7f1, 0x088e8dfa, 0x9ab6f6f5,
152 0x3b4cbf9f, 0x4a5de3ab, 0xe6051d35, 0xa0e1d855, 0xd36b4cf1,
153 0xf544edeb, 0xb0e93524, 0xbebb8fbd,
154 0xa2d762cf, 0x49c92f54, 0x38b5f331, 0x7128a454, 0x48392905,
155 0xa65b1db8, 0x851c97bd, 0xd675cf2f
156};
157static const u32 s7[256] = {
158 0x85e04019, 0x332bf567, 0x662dbfff, 0xcfc65693, 0x2a8d7f6f,
159 0xab9bc912, 0xde6008a1, 0x2028da1f,
160 0x0227bce7, 0x4d642916, 0x18fac300, 0x50f18b82, 0x2cb2cb11,
161 0xb232e75c, 0x4b3695f2, 0xb28707de,
162 0xa05fbcf6, 0xcd4181e9, 0xe150210c, 0xe24ef1bd, 0xb168c381,
163 0xfde4e789, 0x5c79b0d8, 0x1e8bfd43,
164 0x4d495001, 0x38be4341, 0x913cee1d, 0x92a79c3f, 0x089766be,
165 0xbaeeadf4, 0x1286becf, 0xb6eacb19,
166 0x2660c200, 0x7565bde4, 0x64241f7a, 0x8248dca9, 0xc3b3ad66,
167 0x28136086, 0x0bd8dfa8, 0x356d1cf2,
168 0x107789be, 0xb3b2e9ce, 0x0502aa8f, 0x0bc0351e, 0x166bf52a,
169 0xeb12ff82, 0xe3486911, 0xd34d7516,
170 0x4e7b3aff, 0x5f43671b, 0x9cf6e037, 0x4981ac83, 0x334266ce,
171 0x8c9341b7, 0xd0d854c0, 0xcb3a6c88,
172 0x47bc2829, 0x4725ba37, 0xa66ad22b, 0x7ad61f1e, 0x0c5cbafa,
173 0x4437f107, 0xb6e79962, 0x42d2d816,
174 0x0a961288, 0xe1a5c06e, 0x13749e67, 0x72fc081a, 0xb1d139f7,
175 0xf9583745, 0xcf19df58, 0xbec3f756,
176 0xc06eba30, 0x07211b24, 0x45c28829, 0xc95e317f, 0xbc8ec511,
177 0x38bc46e9, 0xc6e6fa14, 0xbae8584a,
178 0xad4ebc46, 0x468f508b, 0x7829435f, 0xf124183b, 0x821dba9f,
179 0xaff60ff4, 0xea2c4e6d, 0x16e39264,
180 0x92544a8b, 0x009b4fc3, 0xaba68ced, 0x9ac96f78, 0x06a5b79a,
181 0xb2856e6e, 0x1aec3ca9, 0xbe838688,
182 0x0e0804e9, 0x55f1be56, 0xe7e5363b, 0xb3a1f25d, 0xf7debb85,
183 0x61fe033c, 0x16746233, 0x3c034c28,
184 0xda6d0c74, 0x79aac56c, 0x3ce4e1ad, 0x51f0c802, 0x98f8f35a,
185 0x1626a49f, 0xeed82b29, 0x1d382fe3,
186 0x0c4fb99a, 0xbb325778, 0x3ec6d97b, 0x6e77a6a9, 0xcb658b5c,
187 0xd45230c7, 0x2bd1408b, 0x60c03eb7,
188 0xb9068d78, 0xa33754f4, 0xf430c87d, 0xc8a71302, 0xb96d8c32,
189 0xebd4e7be, 0xbe8b9d2d, 0x7979fb06,
190 0xe7225308, 0x8b75cf77, 0x11ef8da4, 0xe083c858, 0x8d6b786f,
191 0x5a6317a6, 0xfa5cf7a0, 0x5dda0033,
192 0xf28ebfb0, 0xf5b9c310, 0xa0eac280, 0x08b9767a, 0xa3d9d2b0,
193 0x79d34217, 0x021a718d, 0x9ac6336a,
194 0x2711fd60, 0x438050e3, 0x069908a8, 0x3d7fedc4, 0x826d2bef,
195 0x4eeb8476, 0x488dcf25, 0x36c9d566,
196 0x28e74e41, 0xc2610aca, 0x3d49a9cf, 0xbae3b9df, 0xb65f8de6,
197 0x92aeaf64, 0x3ac7d5e6, 0x9ea80509,
198 0xf22b017d, 0xa4173f70, 0xdd1e16c3, 0x15e0d7f9, 0x50b1b887,
199 0x2b9f4fd5, 0x625aba82, 0x6a017962,
200 0x2ec01b9c, 0x15488aa9, 0xd716e740, 0x40055a2c, 0x93d29a22,
201 0xe32dbf9a, 0x058745b9, 0x3453dc1e,
202 0xd699296e, 0x496cff6f, 0x1c9f4986, 0xdfe2ed07, 0xb87242d1,
203 0x19de7eae, 0x053e561a, 0x15ad6f8c,
204 0x66626c1c, 0x7154c24c, 0xea082b2a, 0x93eb2939, 0x17dcb0f0,
205 0x58d4f2ae, 0x9ea294fb, 0x52cf564c,
206 0x9883fe66, 0x2ec40581, 0x763953c3, 0x01d6692e, 0xd3a0c108,
207 0xa1e7160e, 0xe4f2dfa6, 0x693ed285,
208 0x74904698, 0x4c2b0edd, 0x4f757656, 0x5d393378, 0xa132234f,
209 0x3d321c5d, 0xc3f5e194, 0x4b269301,
210 0xc79f022f, 0x3c997e7e, 0x5e4f9504, 0x3ffafbbd, 0x76f7ad0e,
211 0x296693f4, 0x3d1fce6f, 0xc61e45be,
212 0xd3b5ab34, 0xf72bf9b7, 0x1b0434c0, 0x4e72b567, 0x5592a33d,
213 0xb5229301, 0xcfd2a87f, 0x60aeb767,
214 0x1814386b, 0x30bcc33d, 0x38a0c07d, 0xfd1606f2, 0xc363519b,
215 0x589dd390, 0x5479f8e6, 0x1cb8d647,
216 0x97fd61a9, 0xea7759f4, 0x2d57539d, 0x569a58cf, 0xe84e63ad,
217 0x462e1b78, 0x6580f87e, 0xf3817914,
218 0x91da55f4, 0x40a230f3, 0xd1988f35, 0xb6e318d2, 0x3ffa50bc,
219 0x3d40f021, 0xc3c0bdae, 0x4958c24c,
220 0x518f36b2, 0x84b1d370, 0x0fedce83, 0x878ddada, 0xf2a279c7,
221 0x94e01be8, 0x90716f4b, 0x954b8aa3
222};
223static const u32 sb8[256] = {
224 0xe216300d, 0xbbddfffc, 0xa7ebdabd, 0x35648095, 0x7789f8b7,
225 0xe6c1121b, 0x0e241600, 0x052ce8b5,
226 0x11a9cfb0, 0xe5952f11, 0xece7990a, 0x9386d174, 0x2a42931c,
227 0x76e38111, 0xb12def3a, 0x37ddddfc,
228 0xde9adeb1, 0x0a0cc32c, 0xbe197029, 0x84a00940, 0xbb243a0f,
229 0xb4d137cf, 0xb44e79f0, 0x049eedfd,
230 0x0b15a15d, 0x480d3168, 0x8bbbde5a, 0x669ded42, 0xc7ece831,
231 0x3f8f95e7, 0x72df191b, 0x7580330d,
232 0x94074251, 0x5c7dcdfa, 0xabbe6d63, 0xaa402164, 0xb301d40a,
233 0x02e7d1ca, 0x53571dae, 0x7a3182a2,
234 0x12a8ddec, 0xfdaa335d, 0x176f43e8, 0x71fb46d4, 0x38129022,
235 0xce949ad4, 0xb84769ad, 0x965bd862,
236 0x82f3d055, 0x66fb9767, 0x15b80b4e, 0x1d5b47a0, 0x4cfde06f,
237 0xc28ec4b8, 0x57e8726e, 0x647a78fc,
238 0x99865d44, 0x608bd593, 0x6c200e03, 0x39dc5ff6, 0x5d0b00a3,
239 0xae63aff2, 0x7e8bd632, 0x70108c0c,
240 0xbbd35049, 0x2998df04, 0x980cf42a, 0x9b6df491, 0x9e7edd53,
241 0x06918548, 0x58cb7e07, 0x3b74ef2e,
242 0x522fffb1, 0xd24708cc, 0x1c7e27cd, 0xa4eb215b, 0x3cf1d2e2,
243 0x19b47a38, 0x424f7618, 0x35856039,
244 0x9d17dee7, 0x27eb35e6, 0xc9aff67b, 0x36baf5b8, 0x09c467cd,
245 0xc18910b1, 0xe11dbf7b, 0x06cd1af8,
246 0x7170c608, 0x2d5e3354, 0xd4de495a, 0x64c6d006, 0xbcc0c62c,
247 0x3dd00db3, 0x708f8f34, 0x77d51b42,
248 0x264f620f, 0x24b8d2bf, 0x15c1b79e, 0x46a52564, 0xf8d7e54e,
249 0x3e378160, 0x7895cda5, 0x859c15a5,
250 0xe6459788, 0xc37bc75f, 0xdb07ba0c, 0x0676a3ab, 0x7f229b1e,
251 0x31842e7b, 0x24259fd7, 0xf8bef472,
252 0x835ffcb8, 0x6df4c1f2, 0x96f5b195, 0xfd0af0fc, 0xb0fe134c,
253 0xe2506d3d, 0x4f9b12ea, 0xf215f225,
254 0xa223736f, 0x9fb4c428, 0x25d04979, 0x34c713f8, 0xc4618187,
255 0xea7a6e98, 0x7cd16efc, 0x1436876c,
256 0xf1544107, 0xbedeee14, 0x56e9af27, 0xa04aa441, 0x3cf7c899,
257 0x92ecbae6, 0xdd67016d, 0x151682eb,
258 0xa842eedf, 0xfdba60b4, 0xf1907b75, 0x20e3030f, 0x24d8c29e,
259 0xe139673b, 0xefa63fb8, 0x71873054,
260 0xb6f2cf3b, 0x9f326442, 0xcb15a4cc, 0xb01a4504, 0xf1e47d8d,
261 0x844a1be5, 0xbae7dfdc, 0x42cbda70,
262 0xcd7dae0a, 0x57e85b7a, 0xd53f5af6, 0x20cf4d8c, 0xcea4d428,
263 0x79d130a4, 0x3486ebfb, 0x33d3cddc,
264 0x77853b53, 0x37effcb5, 0xc5068778, 0xe580b3e6, 0x4e68b8f4,
265 0xc5c8b37e, 0x0d809ea2, 0x398feb7c,
266 0x132a4f94, 0x43b7950e, 0x2fee7d1c, 0x223613bd, 0xdd06caa2,
267 0x37df932b, 0xc4248289, 0xacf3ebc3,
268 0x5715f6b7, 0xef3478dd, 0xf267616f, 0xc148cbe4, 0x9052815e,
269 0x5e410fab, 0xb48a2465, 0x2eda7fa4,
270 0xe87b40e4, 0xe98ea084, 0x5889e9e1, 0xefd390fc, 0xdd07d35b,
271 0xdb485694, 0x38d7e5b2, 0x57720101,
272 0x730edebc, 0x5b643113, 0x94917e4f, 0x503c2fba, 0x646f1282,
273 0x7523d24a, 0xe0779695, 0xf9c17a8f,
274 0x7a5b2121, 0xd187b896, 0x29263a4d, 0xba510cdf, 0x81f47c9f,
275 0xad1163ed, 0xea7b5965, 0x1a00726e,
276 0x11403092, 0x00da6d77, 0x4a0cdd61, 0xad1f4603, 0x605bdfb0,
277 0x9eedc364, 0x22ebe6a8, 0xcee7d28a,
278 0xa0e736a0, 0x5564a6b9, 0x10853209, 0xc7eb8f37, 0x2de705ca,
279 0x8951570f, 0xdf09822b, 0xbd691a6c,
280 0xaa12e4f2, 0x87451c0f, 0xe0f6a27a, 0x3ada4819, 0x4cf1764f,
281 0x0d771c2b, 0x67cdb156, 0x350d8384,
282 0x5938fa0f, 0x42399ef3, 0x36997b07, 0x0e84093d, 0x4aa93e61,
283 0x8360d87b, 0x1fa98b0c, 0x1149382c,
284 0xe97625a5, 0x0614d1b7, 0x0e25244b, 0x0c768347, 0x589e8d82,
285 0x0d2059d1, 0xa466bb1e, 0xf8da0a82,
286 0x04f19130, 0xba6e4ec0, 0x99265164, 0x1ee7230d, 0x50b2ad80,
287 0xeaee6801, 0x8db2a283, 0xea8bf59e
288};
289
290#define s1 cast_s1
291#define s2 cast_s2
292#define s3 cast_s3
293#define s4 cast_s4
294
295#define F1(D, m, r) ((I = ((m) + (D))), (I = rol32(I, (r))), \
296 (((s1[I >> 24] ^ s2[(I>>16)&0xff]) - s3[(I>>8)&0xff]) + s4[I&0xff]))
297#define F2(D, m, r) ((I = ((m) ^ (D))), (I = rol32(I, (r))), \
298 (((s1[I >> 24] - s2[(I>>16)&0xff]) + s3[(I>>8)&0xff]) ^ s4[I&0xff]))
299#define F3(D, m, r) ((I = ((m) - (D))), (I = rol32(I, (r))), \
300 (((s1[I >> 24] + s2[(I>>16)&0xff]) ^ s3[(I>>8)&0xff]) - s4[I&0xff]))
301
302
303void __cast5_encrypt(struct cast5_ctx *c, u8 *outbuf, const u8 *inbuf)
304{
305 u32 l, r, t;
306 u32 I; /* used by the Fx macros */
307 u32 *Km;
308 u8 *Kr;
309
310 Km = c->Km;
311 Kr = c->Kr;
312
313 /* (L0,R0) <-- (m1...m64). (Split the plaintext into left and
314 * right 32-bit halves L0 = m1...m32 and R0 = m33...m64.)
315 */
316 l = get_unaligned_be32(inbuf);
317 r = get_unaligned_be32(inbuf + 4);
318
319 /* (16 rounds) for i from 1 to 16, compute Li and Ri as follows:
320 * Li = Ri-1;
321 * Ri = Li-1 ^ f(Ri-1,Kmi,Kri), where f is defined in Section 2.2
322 * Rounds 1, 4, 7, 10, 13, and 16 use f function Type 1.
323 * Rounds 2, 5, 8, 11, and 14 use f function Type 2.
324 * Rounds 3, 6, 9, 12, and 15 use f function Type 3.
325 */
326
327 t = l; l = r; r = t ^ F1(r, Km[0], Kr[0]);
328 t = l; l = r; r = t ^ F2(r, Km[1], Kr[1]);
329 t = l; l = r; r = t ^ F3(r, Km[2], Kr[2]);
330 t = l; l = r; r = t ^ F1(r, Km[3], Kr[3]);
331 t = l; l = r; r = t ^ F2(r, Km[4], Kr[4]);
332 t = l; l = r; r = t ^ F3(r, Km[5], Kr[5]);
333 t = l; l = r; r = t ^ F1(r, Km[6], Kr[6]);
334 t = l; l = r; r = t ^ F2(r, Km[7], Kr[7]);
335 t = l; l = r; r = t ^ F3(r, Km[8], Kr[8]);
336 t = l; l = r; r = t ^ F1(r, Km[9], Kr[9]);
337 t = l; l = r; r = t ^ F2(r, Km[10], Kr[10]);
338 t = l; l = r; r = t ^ F3(r, Km[11], Kr[11]);
339 if (!(c->rr)) {
340 t = l; l = r; r = t ^ F1(r, Km[12], Kr[12]);
341 t = l; l = r; r = t ^ F2(r, Km[13], Kr[13]);
342 t = l; l = r; r = t ^ F3(r, Km[14], Kr[14]);
343 t = l; l = r; r = t ^ F1(r, Km[15], Kr[15]);
344 }
345
346 /* c1...c64 <-- (R16,L16). (Exchange final blocks L16, R16 and
347 * concatenate to form the ciphertext.) */
348 put_unaligned_be32(r, outbuf);
349 put_unaligned_be32(l, outbuf + 4);
350}
351EXPORT_SYMBOL_GPL(__cast5_encrypt);
352
353static void cast5_encrypt(struct crypto_tfm *tfm, u8 *outbuf, const u8 *inbuf)
354{
355 __cast5_encrypt(crypto_tfm_ctx(tfm), outbuf, inbuf);
356}
357
358void __cast5_decrypt(struct cast5_ctx *c, u8 *outbuf, const u8 *inbuf)
359{
360 u32 l, r, t;
361 u32 I;
362 u32 *Km;
363 u8 *Kr;
364
365 Km = c->Km;
366 Kr = c->Kr;
367
368 l = get_unaligned_be32(inbuf);
369 r = get_unaligned_be32(inbuf + 4);
370
371 if (!(c->rr)) {
372 t = l; l = r; r = t ^ F1(r, Km[15], Kr[15]);
373 t = l; l = r; r = t ^ F3(r, Km[14], Kr[14]);
374 t = l; l = r; r = t ^ F2(r, Km[13], Kr[13]);
375 t = l; l = r; r = t ^ F1(r, Km[12], Kr[12]);
376 }
377 t = l; l = r; r = t ^ F3(r, Km[11], Kr[11]);
378 t = l; l = r; r = t ^ F2(r, Km[10], Kr[10]);
379 t = l; l = r; r = t ^ F1(r, Km[9], Kr[9]);
380 t = l; l = r; r = t ^ F3(r, Km[8], Kr[8]);
381 t = l; l = r; r = t ^ F2(r, Km[7], Kr[7]);
382 t = l; l = r; r = t ^ F1(r, Km[6], Kr[6]);
383 t = l; l = r; r = t ^ F3(r, Km[5], Kr[5]);
384 t = l; l = r; r = t ^ F2(r, Km[4], Kr[4]);
385 t = l; l = r; r = t ^ F1(r, Km[3], Kr[3]);
386 t = l; l = r; r = t ^ F3(r, Km[2], Kr[2]);
387 t = l; l = r; r = t ^ F2(r, Km[1], Kr[1]);
388 t = l; l = r; r = t ^ F1(r, Km[0], Kr[0]);
389
390 put_unaligned_be32(r, outbuf);
391 put_unaligned_be32(l, outbuf + 4);
392}
393EXPORT_SYMBOL_GPL(__cast5_decrypt);
394
395static void cast5_decrypt(struct crypto_tfm *tfm, u8 *outbuf, const u8 *inbuf)
396{
397 __cast5_decrypt(crypto_tfm_ctx(tfm), outbuf, inbuf);
398}
399
400static void key_schedule(u32 *x, u32 *z, u32 *k)
401{
402
403#define xi(i) ((x[(i)/4] >> (8*(3-((i)%4)))) & 0xff)
404#define zi(i) ((z[(i)/4] >> (8*(3-((i)%4)))) & 0xff)
405
406 z[0] = x[0] ^ s5[xi(13)] ^ s6[xi(15)] ^ s7[xi(12)] ^ sb8[xi(14)] ^
407 s7[xi(8)];
408 z[1] = x[2] ^ s5[zi(0)] ^ s6[zi(2)] ^ s7[zi(1)] ^ sb8[zi(3)] ^
409 sb8[xi(10)];
410 z[2] = x[3] ^ s5[zi(7)] ^ s6[zi(6)] ^ s7[zi(5)] ^ sb8[zi(4)] ^
411 s5[xi(9)];
412 z[3] = x[1] ^ s5[zi(10)] ^ s6[zi(9)] ^ s7[zi(11)] ^ sb8[zi(8)] ^
413 s6[xi(11)];
414 k[0] = s5[zi(8)] ^ s6[zi(9)] ^ s7[zi(7)] ^ sb8[zi(6)] ^ s5[zi(2)];
415 k[1] = s5[zi(10)] ^ s6[zi(11)] ^ s7[zi(5)] ^ sb8[zi(4)] ^
416 s6[zi(6)];
417 k[2] = s5[zi(12)] ^ s6[zi(13)] ^ s7[zi(3)] ^ sb8[zi(2)] ^
418 s7[zi(9)];
419 k[3] = s5[zi(14)] ^ s6[zi(15)] ^ s7[zi(1)] ^ sb8[zi(0)] ^
420 sb8[zi(12)];
421
422 x[0] = z[2] ^ s5[zi(5)] ^ s6[zi(7)] ^ s7[zi(4)] ^ sb8[zi(6)] ^
423 s7[zi(0)];
424 x[1] = z[0] ^ s5[xi(0)] ^ s6[xi(2)] ^ s7[xi(1)] ^ sb8[xi(3)] ^
425 sb8[zi(2)];
426 x[2] = z[1] ^ s5[xi(7)] ^ s6[xi(6)] ^ s7[xi(5)] ^ sb8[xi(4)] ^
427 s5[zi(1)];
428 x[3] = z[3] ^ s5[xi(10)] ^ s6[xi(9)] ^ s7[xi(11)] ^ sb8[xi(8)] ^
429 s6[zi(3)];
430 k[4] = s5[xi(3)] ^ s6[xi(2)] ^ s7[xi(12)] ^ sb8[xi(13)] ^
431 s5[xi(8)];
432 k[5] = s5[xi(1)] ^ s6[xi(0)] ^ s7[xi(14)] ^ sb8[xi(15)] ^
433 s6[xi(13)];
434 k[6] = s5[xi(7)] ^ s6[xi(6)] ^ s7[xi(8)] ^ sb8[xi(9)] ^ s7[xi(3)];
435 k[7] = s5[xi(5)] ^ s6[xi(4)] ^ s7[xi(10)] ^ sb8[xi(11)] ^
436 sb8[xi(7)];
437
438 z[0] = x[0] ^ s5[xi(13)] ^ s6[xi(15)] ^ s7[xi(12)] ^ sb8[xi(14)] ^
439 s7[xi(8)];
440 z[1] = x[2] ^ s5[zi(0)] ^ s6[zi(2)] ^ s7[zi(1)] ^ sb8[zi(3)] ^
441 sb8[xi(10)];
442 z[2] = x[3] ^ s5[zi(7)] ^ s6[zi(6)] ^ s7[zi(5)] ^ sb8[zi(4)] ^
443 s5[xi(9)];
444 z[3] = x[1] ^ s5[zi(10)] ^ s6[zi(9)] ^ s7[zi(11)] ^ sb8[zi(8)] ^
445 s6[xi(11)];
446 k[8] = s5[zi(3)] ^ s6[zi(2)] ^ s7[zi(12)] ^ sb8[zi(13)] ^
447 s5[zi(9)];
448 k[9] = s5[zi(1)] ^ s6[zi(0)] ^ s7[zi(14)] ^ sb8[zi(15)] ^
449 s6[zi(12)];
450 k[10] = s5[zi(7)] ^ s6[zi(6)] ^ s7[zi(8)] ^ sb8[zi(9)] ^ s7[zi(2)];
451 k[11] = s5[zi(5)] ^ s6[zi(4)] ^ s7[zi(10)] ^ sb8[zi(11)] ^
452 sb8[zi(6)];
453
454 x[0] = z[2] ^ s5[zi(5)] ^ s6[zi(7)] ^ s7[zi(4)] ^ sb8[zi(6)] ^
455 s7[zi(0)];
456 x[1] = z[0] ^ s5[xi(0)] ^ s6[xi(2)] ^ s7[xi(1)] ^ sb8[xi(3)] ^
457 sb8[zi(2)];
458 x[2] = z[1] ^ s5[xi(7)] ^ s6[xi(6)] ^ s7[xi(5)] ^ sb8[xi(4)] ^
459 s5[zi(1)];
460 x[3] = z[3] ^ s5[xi(10)] ^ s6[xi(9)] ^ s7[xi(11)] ^ sb8[xi(8)] ^
461 s6[zi(3)];
462 k[12] = s5[xi(8)] ^ s6[xi(9)] ^ s7[xi(7)] ^ sb8[xi(6)] ^ s5[xi(3)];
463 k[13] = s5[xi(10)] ^ s6[xi(11)] ^ s7[xi(5)] ^ sb8[xi(4)] ^
464 s6[xi(7)];
465 k[14] = s5[xi(12)] ^ s6[xi(13)] ^ s7[xi(3)] ^ sb8[xi(2)] ^
466 s7[xi(8)];
467 k[15] = s5[xi(14)] ^ s6[xi(15)] ^ s7[xi(1)] ^ sb8[xi(0)] ^
468 sb8[xi(13)];
469
470#undef xi
471#undef zi
472}
473
474
475int cast5_setkey(struct crypto_tfm *tfm, const u8 *key, unsigned int key_len)
476{
477 struct cast5_ctx *c = crypto_tfm_ctx(tfm);
478 int i;
479 u32 x[4];
480 u32 z[4];
481 u32 k[16];
482 __be32 p_key[4];
483
484 c->rr = key_len <= 10 ? 1 : 0;
485
486 memset(p_key, 0, 16);
487 memcpy(p_key, key, key_len);
488
489
490 x[0] = be32_to_cpu(p_key[0]);
491 x[1] = be32_to_cpu(p_key[1]);
492 x[2] = be32_to_cpu(p_key[2]);
493 x[3] = be32_to_cpu(p_key[3]);
494
495 key_schedule(x, z, k);
496 for (i = 0; i < 16; i++)
497 c->Km[i] = k[i];
498 key_schedule(x, z, k);
499 for (i = 0; i < 16; i++)
500 c->Kr[i] = k[i] & 0x1f;
501 return 0;
502}
503EXPORT_SYMBOL_GPL(cast5_setkey);
504
505static struct crypto_alg alg = {
506 .cra_name = "cast5",
507 .cra_driver_name = "cast5-generic",
508 .cra_priority = 100,
509 .cra_flags = CRYPTO_ALG_TYPE_CIPHER,
510 .cra_blocksize = CAST5_BLOCK_SIZE,
511 .cra_ctxsize = sizeof(struct cast5_ctx),
512 .cra_module = THIS_MODULE,
513 .cra_u = {
514 .cipher = {
515 .cia_min_keysize = CAST5_MIN_KEY_SIZE,
516 .cia_max_keysize = CAST5_MAX_KEY_SIZE,
517 .cia_setkey = cast5_setkey,
518 .cia_encrypt = cast5_encrypt,
519 .cia_decrypt = cast5_decrypt
520 }
521 }
522};
523
524static int __init cast5_mod_init(void)
525{
526 return crypto_register_alg(&alg);
527}
528
529static void __exit cast5_mod_fini(void)
530{
531 crypto_unregister_alg(&alg);
532}
533
534subsys_initcall(cast5_mod_init);
535module_exit(cast5_mod_fini);
536
537MODULE_LICENSE("GPL");
538MODULE_DESCRIPTION("Cast5 Cipher Algorithm");
539MODULE_ALIAS_CRYPTO("cast5");
540MODULE_ALIAS_CRYPTO("cast5-generic");