2 Copyright (c) 1996, David Mazieres <dm@uun.org>
3 Copyright (c) 2008, Damien Miller <djm@openbsd.org>
4 Copyright (c) 2013, Markus Friedl <markus@openbsd.org>
5 Copyright (c) 2014, Theo de Raadt <deraadt@openbsd.org>
20 chacha-merged.c version 20080118
41   (U32V((v) << (n)) | ((v) >> (32 - (n))))
57 #define ROTATE(v,c) (ROTL32(v,c))  argument
62 #define QUARTERROUND(a,b,c,d) \  argument
64   c = PLUS(c,d); b = ROTATE(XOR(b,c),12); \
66   c = PLUS(c,d); b = ROTATE(XOR(b,c), 7);
68 static const char sigma[16] = "expand 32-byte k";
69 static const char tau[16] = "expand 16-byte k";
76   x->input[4] = U8TO32_LITTLE(k + 0);  in chacha_keysetup()
77   x->input[5] = U8TO32_LITTLE(k + 4);  in chacha_keysetup()
78   x->input[6] = U8TO32_LITTLE(k + 8);  in chacha_keysetup()
79   x->input[7] = U8TO32_LITTLE(k + 12);  in chacha_keysetup()
86   x->input[8] = U8TO32_LITTLE(k + 0);  in chacha_keysetup()
87   x->input[9] = U8TO32_LITTLE(k + 4);  in chacha_keysetup()
88   x->input[10] = U8TO32_LITTLE(k + 8);  in chacha_keysetup()
89   x->input[11] = U8TO32_LITTLE(k + 12);  in chacha_keysetup()
90   x->input[0] = U8TO32_LITTLE(constants + 0);  in chacha_keysetup()
91   x->input[1] = U8TO32_LITTLE(constants + 4);  in chacha_keysetup()
92   x->input[2] = U8TO32_LITTLE(constants + 8);  in chacha_keysetup()
93   x->input[3] = U8TO32_LITTLE(constants + 12);  in chacha_keysetup()
99   x->input[12] = 0;  in chacha_ivsetup()
100   x->input[13] = 0;  in chacha_ivsetup()
101   x->input[14] = U8TO32_LITTLE(iv + 0);  in chacha_ivsetup()
102   x->input[15] = U8TO32_LITTLE(iv + 4);  in chacha_ivsetup()
106 chacha_encrypt_bytes(chacha_ctx *x,const u8 *m,u8 *c,u32 bytes)  in chacha_encrypt_bytes()  argument
116   j0 = x->input[0];  in chacha_encrypt_bytes()
117   j1 = x->input[1];  in chacha_encrypt_bytes()
118   j2 = x->input[2];  in chacha_encrypt_bytes()
119   j3 = x->input[3];  in chacha_encrypt_bytes()
120   j4 = x->input[4];  in chacha_encrypt_bytes()
121   j5 = x->input[5];  in chacha_encrypt_bytes()
122   j6 = x->input[6];  in chacha_encrypt_bytes()
123   j7 = x->input[7];  in chacha_encrypt_bytes()
124   j8 = x->input[8];  in chacha_encrypt_bytes()
125   j9 = x->input[9];  in chacha_encrypt_bytes()
126   j10 = x->input[10];  in chacha_encrypt_bytes()
127   j11 = x->input[11];  in chacha_encrypt_bytes()
128   j12 = x->input[12];  in chacha_encrypt_bytes()
129   j13 = x->input[13];  in chacha_encrypt_bytes()
130   j14 = x->input[14];  in chacha_encrypt_bytes()
131   j15 = x->input[15];  in chacha_encrypt_bytes()
137       ctarget = c;  in chacha_encrypt_bytes()
138       c = tmp;  in chacha_encrypt_bytes()
156     for (i = 20;i > 0;i -= 2) {  in chacha_encrypt_bytes()
208     U32TO8_LITTLE(c + 0,x0);  in chacha_encrypt_bytes()
209     U32TO8_LITTLE(c + 4,x1);  in chacha_encrypt_bytes()
210     U32TO8_LITTLE(c + 8,x2);  in chacha_encrypt_bytes()
211     U32TO8_LITTLE(c + 12,x3);  in chacha_encrypt_bytes()
212     U32TO8_LITTLE(c + 16,x4);  in chacha_encrypt_bytes()
213     U32TO8_LITTLE(c + 20,x5);  in chacha_encrypt_bytes()
214     U32TO8_LITTLE(c + 24,x6);  in chacha_encrypt_bytes()
215     U32TO8_LITTLE(c + 28,x7);  in chacha_encrypt_bytes()
216     U32TO8_LITTLE(c + 32,x8);  in chacha_encrypt_bytes()
217     U32TO8_LITTLE(c + 36,x9);  in chacha_encrypt_bytes()
218     U32TO8_LITTLE(c + 40,x10);  in chacha_encrypt_bytes()
219     U32TO8_LITTLE(c + 44,x11);  in chacha_encrypt_bytes()
220     U32TO8_LITTLE(c + 48,x12);  in chacha_encrypt_bytes()
221     U32TO8_LITTLE(c + 52,x13);  in chacha_encrypt_bytes()
222     U32TO8_LITTLE(c + 56,x14);  in chacha_encrypt_bytes()
223     U32TO8_LITTLE(c + 60,x15);  in chacha_encrypt_bytes()
227         for (i = 0;i < bytes;++i) ctarget[i] = c[i];  in chacha_encrypt_bytes()
229       x->input[12] = j12;  in chacha_encrypt_bytes()
230       x->input[13] = j13;  in chacha_encrypt_bytes()
233     bytes -= 64;  in chacha_encrypt_bytes()
234     c += 64;  in chacha_encrypt_bytes()