51 lines
2.9 KiB
C
51 lines
2.9 KiB
C
/*-*- mode:c;indent-tabs-mode:nil;c-basic-offset:2;tab-width:8;coding:utf-8 -*-│
|
|
│vi: set net ft=c ts=2 sts=2 sw=2 fenc=utf-8 :vi│
|
|
╞══════════════════════════════════════════════════════════════════════════════╡
|
|
│ Copyright 2020 Justine Alexandra Roberts Tunney │
|
|
│ │
|
|
│ Permission to use, copy, modify, and/or distribute this software for │
|
|
│ any purpose with or without fee is hereby granted, provided that the │
|
|
│ above copyright notice and this permission notice appear in all copies. │
|
|
│ │
|
|
│ THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL │
|
|
│ WARRANTIES WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED │
|
|
│ WARRANTIES OF MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE │
|
|
│ AUTHOR BE LIABLE FOR ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL │
|
|
│ DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR │
|
|
│ PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER │
|
|
│ TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR │
|
|
│ PERFORMANCE OF THIS SOFTWARE. │
|
|
╚─────────────────────────────────────────────────────────────────────────────*/
|
|
#include "libc/crypto/rijndael.h"
|
|
#include "libc/dce.h"
|
|
|
|
static noinline aes_block_t xtime(aes_block_t x) {
|
|
return ((x ^ (x & 0x80808080)) << 1) ^ (((x & 0x80808080) >> 7) * 0x1b);
|
|
}
|
|
|
|
static aes_block_t gf256mulx4(aes_block_t x, aes_block_t c) {
|
|
return ((((c >> 0 & 0x01010101) * 0xff) & x) ^
|
|
(((c >> 1 & 0x01010101) * 0xff) & xtime(x)) ^
|
|
(((c >> 2 & 0x01010101) * 0xff) & xtime(xtime(x))) ^
|
|
(((c >> 3 & 0x01010101) * 0xff) & xtime(xtime(xtime(x)))) ^
|
|
(((c >> 4 & 0x01010101) * 0xff) & xtime(xtime(xtime(x)))));
|
|
}
|
|
|
|
/**
|
|
* Applies inverse of Rijndael MixColumns() transformation.
|
|
* @see FIPS-197
|
|
*/
|
|
aes_block_t InvMixColumns(aes_block_t x) {
|
|
uint32_t i;
|
|
aes_block_t y = {0, 0, 0, 0};
|
|
aes_block_t c = {0x090D0B0E, 0x090D0B0E, 0x090D0B0E, 0x090D0B0E};
|
|
for (i = 0; i < 4; ++i) {
|
|
y ^= gf256mulx4((x & 0xff) * 0x01010101,
|
|
(((c >> 000) & 0xff) << 000 | ((c >> 010) & 0xff) << 030 |
|
|
((c >> 020) & 0xff) << 020 | ((c >> 030) & 0xff) << 010));
|
|
x = x << 8 | x >> 24;
|
|
c = c << 8 | c >> 24;
|
|
}
|
|
return y;
|
|
}
|