20 chacha-merged.c version 20080118
25 /* $OpenBSD: chacha_private.h,v 1.3 2022/02/28 21:56:29 dtucker Exp $ */
37 #define U8V(v) ((u8)(v))  argument
38 #define U32V(v) ((u32)(v))  argument
40 #define ROTL32(v, n) \  argument
41   (U32V((v) << (n)) | ((v) >> (32 - (n))))
49 #define U32TO8_LITTLE(p, v) \  argument
51     (p)[0] = U8V((v)      ); \
52     (p)[1] = U8V((v) >>  8); \
53     (p)[2] = U8V((v) >> 16); \
54     (p)[3] = U8V((v) >> 24); \
57 #define ROTATE(v,c) (ROTL32(v,c))  argument
58 #define XOR(v,w) ((v) ^ (w))  argument
59 #define PLUS(v,w) (U32V((v) + (w)))  argument
60 #define PLUSONE(v) (PLUS((v),1))  argument
68 static const char sigma[16] = "expand 32-byte k";
69 static const char tau[16] = "expand 16-byte k";
76   x->input[4] = U8TO32_LITTLE(k + 0);  in chacha_keysetup()
77   x->input[5] = U8TO32_LITTLE(k + 4);  in chacha_keysetup()
78   x->input[6] = U8TO32_LITTLE(k + 8);  in chacha_keysetup()
79   x->input[7] = U8TO32_LITTLE(k + 12);  in chacha_keysetup()
86   x->input[8] = U8TO32_LITTLE(k + 0);  in chacha_keysetup()
87   x->input[9] = U8TO32_LITTLE(k + 4);  in chacha_keysetup()
88   x->input[10] = U8TO32_LITTLE(k + 8);  in chacha_keysetup()
89   x->input[11] = U8TO32_LITTLE(k + 12);  in chacha_keysetup()
90   x->input[0] = U8TO32_LITTLE(constants + 0);  in chacha_keysetup()
91   x->input[1] = U8TO32_LITTLE(constants + 4);  in chacha_keysetup()
92   x->input[2] = U8TO32_LITTLE(constants + 8);  in chacha_keysetup()
93   x->input[3] = U8TO32_LITTLE(constants + 12);  in chacha_keysetup()
99   x->input[12] = 0;  in chacha_ivsetup()
100   x->input[13] = 0;  in chacha_ivsetup()
101   x->input[14] = U8TO32_LITTLE(iv + 0);  in chacha_ivsetup()
102   x->input[15] = U8TO32_LITTLE(iv + 4);  in chacha_ivsetup()
116   j0 = x->input[0];  in chacha_encrypt_bytes()
117   j1 = x->input[1];  in chacha_encrypt_bytes()
118   j2 = x->input[2];  in chacha_encrypt_bytes()
119   j3 = x->input[3];  in chacha_encrypt_bytes()
120   j4 = x->input[4];  in chacha_encrypt_bytes()
121   j5 = x->input[5];  in chacha_encrypt_bytes()
122   j6 = x->input[6];  in chacha_encrypt_bytes()
123   j7 = x->input[7];  in chacha_encrypt_bytes()
124   j8 = x->input[8];  in chacha_encrypt_bytes()
125   j9 = x->input[9];  in chacha_encrypt_bytes()
126   j10 = x->input[10];  in chacha_encrypt_bytes()
127   j11 = x->input[11];  in chacha_encrypt_bytes()
128   j12 = x->input[12];  in chacha_encrypt_bytes()
129   j13 = x->input[13];  in chacha_encrypt_bytes()
130   j14 = x->input[14];  in chacha_encrypt_bytes()
131   j15 = x->input[15];  in chacha_encrypt_bytes()
156     for (i = 20;i > 0;i -= 2) {  in chacha_encrypt_bytes()
229       x->input[12] = j12;  in chacha_encrypt_bytes()
230       x->input[13] = j13;  in chacha_encrypt_bytes()
233     bytes -= 64;  in chacha_encrypt_bytes()