1 /*
2 * AES (Rijndael) cipher - encrypt
3 *
4 * Modifications to public domain implementation:
5 * - cleanup
6 * - use C pre-processor to make it easier to change S table access
7 * - added option (AES_SMALL_TABLES) for reducing code size by about 8 kB at
8 * cost of reduced throughput (quite small difference on Pentium 4,
9 * 10-25% when using -O1 or -O2 optimization)
10 *
11 * Copyright (c) 2003-2012, Jouni Malinen <j@w1.fi>
12 *
13 * This software may be distributed under the terms of the BSD license.
14 * See README for more details.
15 */
16
17 #include "includes.h"
18
19 #include "common.h"
20 #include "crypto.h"
21 #include "aes_i.h"
22
rijndaelEncrypt(const u32 rk[],int Nr,const u8 pt[16],u8 ct[16])23 static void rijndaelEncrypt(const u32 rk[], int Nr, const u8 pt[16], u8 ct[16])
24 {
25 u32 s0, s1, s2, s3, t0, t1, t2, t3;
26 #ifndef FULL_UNROLL
27 int r;
28 #endif /* ?FULL_UNROLL */
29
30 /*
31 * map byte array block to cipher state
32 * and add initial round key:
33 */
34 s0 = GETU32(pt ) ^ rk[0];
35 s1 = GETU32(pt + 4) ^ rk[1];
36 s2 = GETU32(pt + 8) ^ rk[2];
37 s3 = GETU32(pt + 12) ^ rk[3];
38
39 #define ROUND(i,d,s) \
40 d##0 = TE0(s##0) ^ TE1(s##1) ^ TE2(s##2) ^ TE3(s##3) ^ rk[4 * i]; \
41 d##1 = TE0(s##1) ^ TE1(s##2) ^ TE2(s##3) ^ TE3(s##0) ^ rk[4 * i + 1]; \
42 d##2 = TE0(s##2) ^ TE1(s##3) ^ TE2(s##0) ^ TE3(s##1) ^ rk[4 * i + 2]; \
43 d##3 = TE0(s##3) ^ TE1(s##0) ^ TE2(s##1) ^ TE3(s##2) ^ rk[4 * i + 3]
44
45 #ifdef FULL_UNROLL
46
47 ROUND(1,t,s);
48 ROUND(2,s,t);
49 ROUND(3,t,s);
50 ROUND(4,s,t);
51 ROUND(5,t,s);
52 ROUND(6,s,t);
53 ROUND(7,t,s);
54 ROUND(8,s,t);
55 ROUND(9,t,s);
56 if (Nr > 10) {
57 ROUND(10,s,t);
58 ROUND(11,t,s);
59 if (Nr > 12) {
60 ROUND(12,s,t);
61 ROUND(13,t,s);
62 }
63 }
64
65 rk += Nr << 2;
66
67 #else /* !FULL_UNROLL */
68
69 /* Nr - 1 full rounds: */
70 r = Nr >> 1;
71 for (;;) {
72 ROUND(1,t,s);
73 rk += 8;
74 if (--r == 0)
75 break;
76 ROUND(0,s,t);
77 }
78
79 #endif /* ?FULL_UNROLL */
80
81 #undef ROUND
82
83 /*
84 * apply last round and
85 * map cipher state to byte array block:
86 */
87 s0 = TE41(t0) ^ TE42(t1) ^ TE43(t2) ^ TE44(t3) ^ rk[0];
88 PUTU32(ct , s0);
89 s1 = TE41(t1) ^ TE42(t2) ^ TE43(t3) ^ TE44(t0) ^ rk[1];
90 PUTU32(ct + 4, s1);
91 s2 = TE41(t2) ^ TE42(t3) ^ TE43(t0) ^ TE44(t1) ^ rk[2];
92 PUTU32(ct + 8, s2);
93 s3 = TE41(t3) ^ TE42(t0) ^ TE43(t1) ^ TE44(t2) ^ rk[3];
94 PUTU32(ct + 12, s3);
95 }
96
97
aes_encrypt_init(const u8 * key,size_t len)98 void * aes_encrypt_init(const u8 *key, size_t len)
99 {
100 u32 *rk;
101 int res;
102
103 if (TEST_FAIL())
104 return NULL;
105
106 rk = os_malloc(AES_PRIV_SIZE);
107 if (rk == NULL)
108 return NULL;
109 res = rijndaelKeySetupEnc(rk, key, len * 8);
110 if (res < 0) {
111 os_free(rk);
112 return NULL;
113 }
114 rk[AES_PRIV_NR_POS] = res;
115 return rk;
116 }
117
118
aes_encrypt(void * ctx,const u8 * plain,u8 * crypt)119 int aes_encrypt(void *ctx, const u8 *plain, u8 *crypt)
120 {
121 u32 *rk = ctx;
122 rijndaelEncrypt(ctx, rk[AES_PRIV_NR_POS], plain, crypt);
123 return 0;
124 }
125
126
aes_encrypt_deinit(void * ctx)127 void aes_encrypt_deinit(void *ctx)
128 {
129 os_memset(ctx, 0, AES_PRIV_SIZE);
130 os_free(ctx);
131 }
132
