PageRenderTime 86ms CodeModel.GetById 31ms app.highlight 47ms RepoModel.GetById 1ms app.codeStats 0ms

/crypto/des_generic.c

https://bitbucket.org/ndreys/linux-sunxi
C | 1007 lines | 864 code | 77 blank | 66 comment | 16 complexity | bade053af723eb842f9d61f63bfd0b2a MD5 | raw file
Possible License(s): GPL-2.0, LGPL-2.0, AGPL-1.0
   1/*
   2 * Cryptographic API.
   3 *
   4 * DES & Triple DES EDE Cipher Algorithms.
   5 *
   6 * Copyright (c) 2005 Dag Arne Osvik <da@osvik.no>
   7 *
   8 * This program is free software; you can redistribute it and/or modify
   9 * it under the terms of the GNU General Public License as published by
  10 * the Free Software Foundation; either version 2 of the License, or
  11 * (at your option) any later version.
  12 *
  13 */
  14
  15#include <asm/byteorder.h>
  16#include <linux/bitops.h>
  17#include <linux/init.h>
  18#include <linux/module.h>
  19#include <linux/errno.h>
  20#include <linux/crypto.h>
  21#include <linux/types.h>
  22
  23#include <crypto/des.h>
  24
  25#define ROL(x, r) ((x) = rol32((x), (r)))
  26#define ROR(x, r) ((x) = ror32((x), (r)))
  27
  28struct des_ctx {
  29	u32 expkey[DES_EXPKEY_WORDS];
  30};
  31
  32struct des3_ede_ctx {
  33	u32 expkey[DES3_EDE_EXPKEY_WORDS];
  34};
  35
  36/* Lookup tables for key expansion */
  37
  38static const u8 pc1[256] = {
  39	0x00, 0x00, 0x40, 0x04, 0x10, 0x10, 0x50, 0x14,
  40	0x04, 0x40, 0x44, 0x44, 0x14, 0x50, 0x54, 0x54,
  41	0x02, 0x02, 0x42, 0x06, 0x12, 0x12, 0x52, 0x16,
  42	0x06, 0x42, 0x46, 0x46, 0x16, 0x52, 0x56, 0x56,
  43	0x80, 0x08, 0xc0, 0x0c, 0x90, 0x18, 0xd0, 0x1c,
  44	0x84, 0x48, 0xc4, 0x4c, 0x94, 0x58, 0xd4, 0x5c,
  45	0x82, 0x0a, 0xc2, 0x0e, 0x92, 0x1a, 0xd2, 0x1e,
  46	0x86, 0x4a, 0xc6, 0x4e, 0x96, 0x5a, 0xd6, 0x5e,
  47	0x20, 0x20, 0x60, 0x24, 0x30, 0x30, 0x70, 0x34,
  48	0x24, 0x60, 0x64, 0x64, 0x34, 0x70, 0x74, 0x74,
  49	0x22, 0x22, 0x62, 0x26, 0x32, 0x32, 0x72, 0x36,
  50	0x26, 0x62, 0x66, 0x66, 0x36, 0x72, 0x76, 0x76,
  51	0xa0, 0x28, 0xe0, 0x2c, 0xb0, 0x38, 0xf0, 0x3c,
  52	0xa4, 0x68, 0xe4, 0x6c, 0xb4, 0x78, 0xf4, 0x7c,
  53	0xa2, 0x2a, 0xe2, 0x2e, 0xb2, 0x3a, 0xf2, 0x3e,
  54	0xa6, 0x6a, 0xe6, 0x6e, 0xb6, 0x7a, 0xf6, 0x7e,
  55	0x08, 0x80, 0x48, 0x84, 0x18, 0x90, 0x58, 0x94,
  56	0x0c, 0xc0, 0x4c, 0xc4, 0x1c, 0xd0, 0x5c, 0xd4,
  57	0x0a, 0x82, 0x4a, 0x86, 0x1a, 0x92, 0x5a, 0x96,
  58	0x0e, 0xc2, 0x4e, 0xc6, 0x1e, 0xd2, 0x5e, 0xd6,
  59	0x88, 0x88, 0xc8, 0x8c, 0x98, 0x98, 0xd8, 0x9c,
  60	0x8c, 0xc8, 0xcc, 0xcc, 0x9c, 0xd8, 0xdc, 0xdc,
  61	0x8a, 0x8a, 0xca, 0x8e, 0x9a, 0x9a, 0xda, 0x9e,
  62	0x8e, 0xca, 0xce, 0xce, 0x9e, 0xda, 0xde, 0xde,
  63	0x28, 0xa0, 0x68, 0xa4, 0x38, 0xb0, 0x78, 0xb4,
  64	0x2c, 0xe0, 0x6c, 0xe4, 0x3c, 0xf0, 0x7c, 0xf4,
  65	0x2a, 0xa2, 0x6a, 0xa6, 0x3a, 0xb2, 0x7a, 0xb6,
  66	0x2e, 0xe2, 0x6e, 0xe6, 0x3e, 0xf2, 0x7e, 0xf6,
  67	0xa8, 0xa8, 0xe8, 0xac, 0xb8, 0xb8, 0xf8, 0xbc,
  68	0xac, 0xe8, 0xec, 0xec, 0xbc, 0xf8, 0xfc, 0xfc,
  69	0xaa, 0xaa, 0xea, 0xae, 0xba, 0xba, 0xfa, 0xbe,
  70	0xae, 0xea, 0xee, 0xee, 0xbe, 0xfa, 0xfe, 0xfe
  71};
  72
  73static const u8 rs[256] = {
  74	0x00, 0x00, 0x80, 0x80, 0x02, 0x02, 0x82, 0x82,
  75	0x04, 0x04, 0x84, 0x84, 0x06, 0x06, 0x86, 0x86,
  76	0x08, 0x08, 0x88, 0x88, 0x0a, 0x0a, 0x8a, 0x8a,
  77	0x0c, 0x0c, 0x8c, 0x8c, 0x0e, 0x0e, 0x8e, 0x8e,
  78	0x10, 0x10, 0x90, 0x90, 0x12, 0x12, 0x92, 0x92,
  79	0x14, 0x14, 0x94, 0x94, 0x16, 0x16, 0x96, 0x96,
  80	0x18, 0x18, 0x98, 0x98, 0x1a, 0x1a, 0x9a, 0x9a,
  81	0x1c, 0x1c, 0x9c, 0x9c, 0x1e, 0x1e, 0x9e, 0x9e,
  82	0x20, 0x20, 0xa0, 0xa0, 0x22, 0x22, 0xa2, 0xa2,
  83	0x24, 0x24, 0xa4, 0xa4, 0x26, 0x26, 0xa6, 0xa6,
  84	0x28, 0x28, 0xa8, 0xa8, 0x2a, 0x2a, 0xaa, 0xaa,
  85	0x2c, 0x2c, 0xac, 0xac, 0x2e, 0x2e, 0xae, 0xae,
  86	0x30, 0x30, 0xb0, 0xb0, 0x32, 0x32, 0xb2, 0xb2,
  87	0x34, 0x34, 0xb4, 0xb4, 0x36, 0x36, 0xb6, 0xb6,
  88	0x38, 0x38, 0xb8, 0xb8, 0x3a, 0x3a, 0xba, 0xba,
  89	0x3c, 0x3c, 0xbc, 0xbc, 0x3e, 0x3e, 0xbe, 0xbe,
  90	0x40, 0x40, 0xc0, 0xc0, 0x42, 0x42, 0xc2, 0xc2,
  91	0x44, 0x44, 0xc4, 0xc4, 0x46, 0x46, 0xc6, 0xc6,
  92	0x48, 0x48, 0xc8, 0xc8, 0x4a, 0x4a, 0xca, 0xca,
  93	0x4c, 0x4c, 0xcc, 0xcc, 0x4e, 0x4e, 0xce, 0xce,
  94	0x50, 0x50, 0xd0, 0xd0, 0x52, 0x52, 0xd2, 0xd2,
  95	0x54, 0x54, 0xd4, 0xd4, 0x56, 0x56, 0xd6, 0xd6,
  96	0x58, 0x58, 0xd8, 0xd8, 0x5a, 0x5a, 0xda, 0xda,
  97	0x5c, 0x5c, 0xdc, 0xdc, 0x5e, 0x5e, 0xde, 0xde,
  98	0x60, 0x60, 0xe0, 0xe0, 0x62, 0x62, 0xe2, 0xe2,
  99	0x64, 0x64, 0xe4, 0xe4, 0x66, 0x66, 0xe6, 0xe6,
 100	0x68, 0x68, 0xe8, 0xe8, 0x6a, 0x6a, 0xea, 0xea,
 101	0x6c, 0x6c, 0xec, 0xec, 0x6e, 0x6e, 0xee, 0xee,
 102	0x70, 0x70, 0xf0, 0xf0, 0x72, 0x72, 0xf2, 0xf2,
 103	0x74, 0x74, 0xf4, 0xf4, 0x76, 0x76, 0xf6, 0xf6,
 104	0x78, 0x78, 0xf8, 0xf8, 0x7a, 0x7a, 0xfa, 0xfa,
 105	0x7c, 0x7c, 0xfc, 0xfc, 0x7e, 0x7e, 0xfe, 0xfe
 106};
 107
 108static const u32 pc2[1024] = {
 109	0x00000000, 0x00000000, 0x00000000, 0x00000000,
 110	0x00040000, 0x00000000, 0x04000000, 0x00100000,
 111	0x00400000, 0x00000008, 0x00000800, 0x40000000,
 112	0x00440000, 0x00000008, 0x04000800, 0x40100000,
 113	0x00000400, 0x00000020, 0x08000000, 0x00000100,
 114	0x00040400, 0x00000020, 0x0c000000, 0x00100100,
 115	0x00400400, 0x00000028, 0x08000800, 0x40000100,
 116	0x00440400, 0x00000028, 0x0c000800, 0x40100100,
 117	0x80000000, 0x00000010, 0x00000000, 0x00800000,
 118	0x80040000, 0x00000010, 0x04000000, 0x00900000,
 119	0x80400000, 0x00000018, 0x00000800, 0x40800000,
 120	0x80440000, 0x00000018, 0x04000800, 0x40900000,
 121	0x80000400, 0x00000030, 0x08000000, 0x00800100,
 122	0x80040400, 0x00000030, 0x0c000000, 0x00900100,
 123	0x80400400, 0x00000038, 0x08000800, 0x40800100,
 124	0x80440400, 0x00000038, 0x0c000800, 0x40900100,
 125	0x10000000, 0x00000000, 0x00200000, 0x00001000,
 126	0x10040000, 0x00000000, 0x04200000, 0x00101000,
 127	0x10400000, 0x00000008, 0x00200800, 0x40001000,
 128	0x10440000, 0x00000008, 0x04200800, 0x40101000,
 129	0x10000400, 0x00000020, 0x08200000, 0x00001100,
 130	0x10040400, 0x00000020, 0x0c200000, 0x00101100,
 131	0x10400400, 0x00000028, 0x08200800, 0x40001100,
 132	0x10440400, 0x00000028, 0x0c200800, 0x40101100,
 133	0x90000000, 0x00000010, 0x00200000, 0x00801000,
 134	0x90040000, 0x00000010, 0x04200000, 0x00901000,
 135	0x90400000, 0x00000018, 0x00200800, 0x40801000,
 136	0x90440000, 0x00000018, 0x04200800, 0x40901000,
 137	0x90000400, 0x00000030, 0x08200000, 0x00801100,
 138	0x90040400, 0x00000030, 0x0c200000, 0x00901100,
 139	0x90400400, 0x00000038, 0x08200800, 0x40801100,
 140	0x90440400, 0x00000038, 0x0c200800, 0x40901100,
 141	0x00000200, 0x00080000, 0x00000000, 0x00000004,
 142	0x00040200, 0x00080000, 0x04000000, 0x00100004,
 143	0x00400200, 0x00080008, 0x00000800, 0x40000004,
 144	0x00440200, 0x00080008, 0x04000800, 0x40100004,
 145	0x00000600, 0x00080020, 0x08000000, 0x00000104,
 146	0x00040600, 0x00080020, 0x0c000000, 0x00100104,
 147	0x00400600, 0x00080028, 0x08000800, 0x40000104,
 148	0x00440600, 0x00080028, 0x0c000800, 0x40100104,
 149	0x80000200, 0x00080010, 0x00000000, 0x00800004,
 150	0x80040200, 0x00080010, 0x04000000, 0x00900004,
 151	0x80400200, 0x00080018, 0x00000800, 0x40800004,
 152	0x80440200, 0x00080018, 0x04000800, 0x40900004,
 153	0x80000600, 0x00080030, 0x08000000, 0x00800104,
 154	0x80040600, 0x00080030, 0x0c000000, 0x00900104,
 155	0x80400600, 0x00080038, 0x08000800, 0x40800104,
 156	0x80440600, 0x00080038, 0x0c000800, 0x40900104,
 157	0x10000200, 0x00080000, 0x00200000, 0x00001004,
 158	0x10040200, 0x00080000, 0x04200000, 0x00101004,
 159	0x10400200, 0x00080008, 0x00200800, 0x40001004,
 160	0x10440200, 0x00080008, 0x04200800, 0x40101004,
 161	0x10000600, 0x00080020, 0x08200000, 0x00001104,
 162	0x10040600, 0x00080020, 0x0c200000, 0x00101104,
 163	0x10400600, 0x00080028, 0x08200800, 0x40001104,
 164	0x10440600, 0x00080028, 0x0c200800, 0x40101104,
 165	0x90000200, 0x00080010, 0x00200000, 0x00801004,
 166	0x90040200, 0x00080010, 0x04200000, 0x00901004,
 167	0x90400200, 0x00080018, 0x00200800, 0x40801004,
 168	0x90440200, 0x00080018, 0x04200800, 0x40901004,
 169	0x90000600, 0x00080030, 0x08200000, 0x00801104,
 170	0x90040600, 0x00080030, 0x0c200000, 0x00901104,
 171	0x90400600, 0x00080038, 0x08200800, 0x40801104,
 172	0x90440600, 0x00080038, 0x0c200800, 0x40901104,
 173	0x00000002, 0x00002000, 0x20000000, 0x00000001,
 174	0x00040002, 0x00002000, 0x24000000, 0x00100001,
 175	0x00400002, 0x00002008, 0x20000800, 0x40000001,
 176	0x00440002, 0x00002008, 0x24000800, 0x40100001,
 177	0x00000402, 0x00002020, 0x28000000, 0x00000101,
 178	0x00040402, 0x00002020, 0x2c000000, 0x00100101,
 179	0x00400402, 0x00002028, 0x28000800, 0x40000101,
 180	0x00440402, 0x00002028, 0x2c000800, 0x40100101,
 181	0x80000002, 0x00002010, 0x20000000, 0x00800001,
 182	0x80040002, 0x00002010, 0x24000000, 0x00900001,
 183	0x80400002, 0x00002018, 0x20000800, 0x40800001,
 184	0x80440002, 0x00002018, 0x24000800, 0x40900001,
 185	0x80000402, 0x00002030, 0x28000000, 0x00800101,
 186	0x80040402, 0x00002030, 0x2c000000, 0x00900101,
 187	0x80400402, 0x00002038, 0x28000800, 0x40800101,
 188	0x80440402, 0x00002038, 0x2c000800, 0x40900101,
 189	0x10000002, 0x00002000, 0x20200000, 0x00001001,
 190	0x10040002, 0x00002000, 0x24200000, 0x00101001,
 191	0x10400002, 0x00002008, 0x20200800, 0x40001001,
 192	0x10440002, 0x00002008, 0x24200800, 0x40101001,
 193	0x10000402, 0x00002020, 0x28200000, 0x00001101,
 194	0x10040402, 0x00002020, 0x2c200000, 0x00101101,
 195	0x10400402, 0x00002028, 0x28200800, 0x40001101,
 196	0x10440402, 0x00002028, 0x2c200800, 0x40101101,
 197	0x90000002, 0x00002010, 0x20200000, 0x00801001,
 198	0x90040002, 0x00002010, 0x24200000, 0x00901001,
 199	0x90400002, 0x00002018, 0x20200800, 0x40801001,
 200	0x90440002, 0x00002018, 0x24200800, 0x40901001,
 201	0x90000402, 0x00002030, 0x28200000, 0x00801101,
 202	0x90040402, 0x00002030, 0x2c200000, 0x00901101,
 203	0x90400402, 0x00002038, 0x28200800, 0x40801101,
 204	0x90440402, 0x00002038, 0x2c200800, 0x40901101,
 205	0x00000202, 0x00082000, 0x20000000, 0x00000005,
 206	0x00040202, 0x00082000, 0x24000000, 0x00100005,
 207	0x00400202, 0x00082008, 0x20000800, 0x40000005,
 208	0x00440202, 0x00082008, 0x24000800, 0x40100005,
 209	0x00000602, 0x00082020, 0x28000000, 0x00000105,
 210	0x00040602, 0x00082020, 0x2c000000, 0x00100105,
 211	0x00400602, 0x00082028, 0x28000800, 0x40000105,
 212	0x00440602, 0x00082028, 0x2c000800, 0x40100105,
 213	0x80000202, 0x00082010, 0x20000000, 0x00800005,
 214	0x80040202, 0x00082010, 0x24000000, 0x00900005,
 215	0x80400202, 0x00082018, 0x20000800, 0x40800005,
 216	0x80440202, 0x00082018, 0x24000800, 0x40900005,
 217	0x80000602, 0x00082030, 0x28000000, 0x00800105,
 218	0x80040602, 0x00082030, 0x2c000000, 0x00900105,
 219	0x80400602, 0x00082038, 0x28000800, 0x40800105,
 220	0x80440602, 0x00082038, 0x2c000800, 0x40900105,
 221	0x10000202, 0x00082000, 0x20200000, 0x00001005,
 222	0x10040202, 0x00082000, 0x24200000, 0x00101005,
 223	0x10400202, 0x00082008, 0x20200800, 0x40001005,
 224	0x10440202, 0x00082008, 0x24200800, 0x40101005,
 225	0x10000602, 0x00082020, 0x28200000, 0x00001105,
 226	0x10040602, 0x00082020, 0x2c200000, 0x00101105,
 227	0x10400602, 0x00082028, 0x28200800, 0x40001105,
 228	0x10440602, 0x00082028, 0x2c200800, 0x40101105,
 229	0x90000202, 0x00082010, 0x20200000, 0x00801005,
 230	0x90040202, 0x00082010, 0x24200000, 0x00901005,
 231	0x90400202, 0x00082018, 0x20200800, 0x40801005,
 232	0x90440202, 0x00082018, 0x24200800, 0x40901005,
 233	0x90000602, 0x00082030, 0x28200000, 0x00801105,
 234	0x90040602, 0x00082030, 0x2c200000, 0x00901105,
 235	0x90400602, 0x00082038, 0x28200800, 0x40801105,
 236	0x90440602, 0x00082038, 0x2c200800, 0x40901105,
 237
 238	0x00000000, 0x00000000, 0x00000000, 0x00000000,
 239	0x00000000, 0x00000008, 0x00080000, 0x10000000,
 240	0x02000000, 0x00000000, 0x00000080, 0x00001000,
 241	0x02000000, 0x00000008, 0x00080080, 0x10001000,
 242	0x00004000, 0x00000000, 0x00000040, 0x00040000,
 243	0x00004000, 0x00000008, 0x00080040, 0x10040000,
 244	0x02004000, 0x00000000, 0x000000c0, 0x00041000,
 245	0x02004000, 0x00000008, 0x000800c0, 0x10041000,
 246	0x00020000, 0x00008000, 0x08000000, 0x00200000,
 247	0x00020000, 0x00008008, 0x08080000, 0x10200000,
 248	0x02020000, 0x00008000, 0x08000080, 0x00201000,
 249	0x02020000, 0x00008008, 0x08080080, 0x10201000,
 250	0x00024000, 0x00008000, 0x08000040, 0x00240000,
 251	0x00024000, 0x00008008, 0x08080040, 0x10240000,
 252	0x02024000, 0x00008000, 0x080000c0, 0x00241000,
 253	0x02024000, 0x00008008, 0x080800c0, 0x10241000,
 254	0x00000000, 0x01000000, 0x00002000, 0x00000020,
 255	0x00000000, 0x01000008, 0x00082000, 0x10000020,
 256	0x02000000, 0x01000000, 0x00002080, 0x00001020,
 257	0x02000000, 0x01000008, 0x00082080, 0x10001020,
 258	0x00004000, 0x01000000, 0x00002040, 0x00040020,
 259	0x00004000, 0x01000008, 0x00082040, 0x10040020,
 260	0x02004000, 0x01000000, 0x000020c0, 0x00041020,
 261	0x02004000, 0x01000008, 0x000820c0, 0x10041020,
 262	0x00020000, 0x01008000, 0x08002000, 0x00200020,
 263	0x00020000, 0x01008008, 0x08082000, 0x10200020,
 264	0x02020000, 0x01008000, 0x08002080, 0x00201020,
 265	0x02020000, 0x01008008, 0x08082080, 0x10201020,
 266	0x00024000, 0x01008000, 0x08002040, 0x00240020,
 267	0x00024000, 0x01008008, 0x08082040, 0x10240020,
 268	0x02024000, 0x01008000, 0x080020c0, 0x00241020,
 269	0x02024000, 0x01008008, 0x080820c0, 0x10241020,
 270	0x00000400, 0x04000000, 0x00100000, 0x00000004,
 271	0x00000400, 0x04000008, 0x00180000, 0x10000004,
 272	0x02000400, 0x04000000, 0x00100080, 0x00001004,
 273	0x02000400, 0x04000008, 0x00180080, 0x10001004,
 274	0x00004400, 0x04000000, 0x00100040, 0x00040004,
 275	0x00004400, 0x04000008, 0x00180040, 0x10040004,
 276	0x02004400, 0x04000000, 0x001000c0, 0x00041004,
 277	0x02004400, 0x04000008, 0x001800c0, 0x10041004,
 278	0x00020400, 0x04008000, 0x08100000, 0x00200004,
 279	0x00020400, 0x04008008, 0x08180000, 0x10200004,
 280	0x02020400, 0x04008000, 0x08100080, 0x00201004,
 281	0x02020400, 0x04008008, 0x08180080, 0x10201004,
 282	0x00024400, 0x04008000, 0x08100040, 0x00240004,
 283	0x00024400, 0x04008008, 0x08180040, 0x10240004,
 284	0x02024400, 0x04008000, 0x081000c0, 0x00241004,
 285	0x02024400, 0x04008008, 0x081800c0, 0x10241004,
 286	0x00000400, 0x05000000, 0x00102000, 0x00000024,
 287	0x00000400, 0x05000008, 0x00182000, 0x10000024,
 288	0x02000400, 0x05000000, 0x00102080, 0x00001024,
 289	0x02000400, 0x05000008, 0x00182080, 0x10001024,
 290	0x00004400, 0x05000000, 0x00102040, 0x00040024,
 291	0x00004400, 0x05000008, 0x00182040, 0x10040024,
 292	0x02004400, 0x05000000, 0x001020c0, 0x00041024,
 293	0x02004400, 0x05000008, 0x001820c0, 0x10041024,
 294	0x00020400, 0x05008000, 0x08102000, 0x00200024,
 295	0x00020400, 0x05008008, 0x08182000, 0x10200024,
 296	0x02020400, 0x05008000, 0x08102080, 0x00201024,
 297	0x02020400, 0x05008008, 0x08182080, 0x10201024,
 298	0x00024400, 0x05008000, 0x08102040, 0x00240024,
 299	0x00024400, 0x05008008, 0x08182040, 0x10240024,
 300	0x02024400, 0x05008000, 0x081020c0, 0x00241024,
 301	0x02024400, 0x05008008, 0x081820c0, 0x10241024,
 302	0x00000800, 0x00010000, 0x20000000, 0x00000010,
 303	0x00000800, 0x00010008, 0x20080000, 0x10000010,
 304	0x02000800, 0x00010000, 0x20000080, 0x00001010,
 305	0x02000800, 0x00010008, 0x20080080, 0x10001010,
 306	0x00004800, 0x00010000, 0x20000040, 0x00040010,
 307	0x00004800, 0x00010008, 0x20080040, 0x10040010,
 308	0x02004800, 0x00010000, 0x200000c0, 0x00041010,
 309	0x02004800, 0x00010008, 0x200800c0, 0x10041010,
 310	0x00020800, 0x00018000, 0x28000000, 0x00200010,
 311	0x00020800, 0x00018008, 0x28080000, 0x10200010,
 312	0x02020800, 0x00018000, 0x28000080, 0x00201010,
 313	0x02020800, 0x00018008, 0x28080080, 0x10201010,
 314	0x00024800, 0x00018000, 0x28000040, 0x00240010,
 315	0x00024800, 0x00018008, 0x28080040, 0x10240010,
 316	0x02024800, 0x00018000, 0x280000c0, 0x00241010,
 317	0x02024800, 0x00018008, 0x280800c0, 0x10241010,
 318	0x00000800, 0x01010000, 0x20002000, 0x00000030,
 319	0x00000800, 0x01010008, 0x20082000, 0x10000030,
 320	0x02000800, 0x01010000, 0x20002080, 0x00001030,
 321	0x02000800, 0x01010008, 0x20082080, 0x10001030,
 322	0x00004800, 0x01010000, 0x20002040, 0x00040030,
 323	0x00004800, 0x01010008, 0x20082040, 0x10040030,
 324	0x02004800, 0x01010000, 0x200020c0, 0x00041030,
 325	0x02004800, 0x01010008, 0x200820c0, 0x10041030,
 326	0x00020800, 0x01018000, 0x28002000, 0x00200030,
 327	0x00020800, 0x01018008, 0x28082000, 0x10200030,
 328	0x02020800, 0x01018000, 0x28002080, 0x00201030,
 329	0x02020800, 0x01018008, 0x28082080, 0x10201030,
 330	0x00024800, 0x01018000, 0x28002040, 0x00240030,
 331	0x00024800, 0x01018008, 0x28082040, 0x10240030,
 332	0x02024800, 0x01018000, 0x280020c0, 0x00241030,
 333	0x02024800, 0x01018008, 0x280820c0, 0x10241030,
 334	0x00000c00, 0x04010000, 0x20100000, 0x00000014,
 335	0x00000c00, 0x04010008, 0x20180000, 0x10000014,
 336	0x02000c00, 0x04010000, 0x20100080, 0x00001014,
 337	0x02000c00, 0x04010008, 0x20180080, 0x10001014,
 338	0x00004c00, 0x04010000, 0x20100040, 0x00040014,
 339	0x00004c00, 0x04010008, 0x20180040, 0x10040014,
 340	0x02004c00, 0x04010000, 0x201000c0, 0x00041014,
 341	0x02004c00, 0x04010008, 0x201800c0, 0x10041014,
 342	0x00020c00, 0x04018000, 0x28100000, 0x00200014,
 343	0x00020c00, 0x04018008, 0x28180000, 0x10200014,
 344	0x02020c00, 0x04018000, 0x28100080, 0x00201014,
 345	0x02020c00, 0x04018008, 0x28180080, 0x10201014,
 346	0x00024c00, 0x04018000, 0x28100040, 0x00240014,
 347	0x00024c00, 0x04018008, 0x28180040, 0x10240014,
 348	0x02024c00, 0x04018000, 0x281000c0, 0x00241014,
 349	0x02024c00, 0x04018008, 0x281800c0, 0x10241014,
 350	0x00000c00, 0x05010000, 0x20102000, 0x00000034,
 351	0x00000c00, 0x05010008, 0x20182000, 0x10000034,
 352	0x02000c00, 0x05010000, 0x20102080, 0x00001034,
 353	0x02000c00, 0x05010008, 0x20182080, 0x10001034,
 354	0x00004c00, 0x05010000, 0x20102040, 0x00040034,
 355	0x00004c00, 0x05010008, 0x20182040, 0x10040034,
 356	0x02004c00, 0x05010000, 0x201020c0, 0x00041034,
 357	0x02004c00, 0x05010008, 0x201820c0, 0x10041034,
 358	0x00020c00, 0x05018000, 0x28102000, 0x00200034,
 359	0x00020c00, 0x05018008, 0x28182000, 0x10200034,
 360	0x02020c00, 0x05018000, 0x28102080, 0x00201034,
 361	0x02020c00, 0x05018008, 0x28182080, 0x10201034,
 362	0x00024c00, 0x05018000, 0x28102040, 0x00240034,
 363	0x00024c00, 0x05018008, 0x28182040, 0x10240034,
 364	0x02024c00, 0x05018000, 0x281020c0, 0x00241034,
 365	0x02024c00, 0x05018008, 0x281820c0, 0x10241034
 366};
 367
 368/* S-box lookup tables */
 369
 370static const u32 S1[64] = {
 371	0x01010400, 0x00000000, 0x00010000, 0x01010404,
 372	0x01010004, 0x00010404, 0x00000004, 0x00010000,
 373	0x00000400, 0x01010400, 0x01010404, 0x00000400,
 374	0x01000404, 0x01010004, 0x01000000, 0x00000004,
 375	0x00000404, 0x01000400, 0x01000400, 0x00010400,
 376	0x00010400, 0x01010000, 0x01010000, 0x01000404,
 377	0x00010004, 0x01000004, 0x01000004, 0x00010004,
 378	0x00000000, 0x00000404, 0x00010404, 0x01000000,
 379	0x00010000, 0x01010404, 0x00000004, 0x01010000,
 380	0x01010400, 0x01000000, 0x01000000, 0x00000400,
 381	0x01010004, 0x00010000, 0x00010400, 0x01000004,
 382	0x00000400, 0x00000004, 0x01000404, 0x00010404,
 383	0x01010404, 0x00010004, 0x01010000, 0x01000404,
 384	0x01000004, 0x00000404, 0x00010404, 0x01010400,
 385	0x00000404, 0x01000400, 0x01000400, 0x00000000,
 386	0x00010004, 0x00010400, 0x00000000, 0x01010004
 387};
 388
 389static const u32 S2[64] = {
 390	0x80108020, 0x80008000, 0x00008000, 0x00108020,
 391	0x00100000, 0x00000020, 0x80100020, 0x80008020,
 392	0x80000020, 0x80108020, 0x80108000, 0x80000000,
 393	0x80008000, 0x00100000, 0x00000020, 0x80100020,
 394	0x00108000, 0x00100020, 0x80008020, 0x00000000,
 395	0x80000000, 0x00008000, 0x00108020, 0x80100000,
 396	0x00100020, 0x80000020, 0x00000000, 0x00108000,
 397	0x00008020, 0x80108000, 0x80100000, 0x00008020,
 398	0x00000000, 0x00108020, 0x80100020, 0x00100000,
 399	0x80008020, 0x80100000, 0x80108000, 0x00008000,
 400	0x80100000, 0x80008000, 0x00000020, 0x80108020,
 401	0x00108020, 0x00000020, 0x00008000, 0x80000000,
 402	0x00008020, 0x80108000, 0x00100000, 0x80000020,
 403	0x00100020, 0x80008020, 0x80000020, 0x00100020,
 404	0x00108000, 0x00000000, 0x80008000, 0x00008020,
 405	0x80000000, 0x80100020, 0x80108020, 0x00108000
 406};
 407
 408static const u32 S3[64] = {
 409	0x00000208, 0x08020200, 0x00000000, 0x08020008,
 410	0x08000200, 0x00000000, 0x00020208, 0x08000200,
 411	0x00020008, 0x08000008, 0x08000008, 0x00020000,
 412	0x08020208, 0x00020008, 0x08020000, 0x00000208,
 413	0x08000000, 0x00000008, 0x08020200, 0x00000200,
 414	0x00020200, 0x08020000, 0x08020008, 0x00020208,
 415	0x08000208, 0x00020200, 0x00020000, 0x08000208,
 416	0x00000008, 0x08020208, 0x00000200, 0x08000000,
 417	0x08020200, 0x08000000, 0x00020008, 0x00000208,
 418	0x00020000, 0x08020200, 0x08000200, 0x00000000,
 419	0x00000200, 0x00020008, 0x08020208, 0x08000200,
 420	0x08000008, 0x00000200, 0x00000000, 0x08020008,
 421	0x08000208, 0x00020000, 0x08000000, 0x08020208,
 422	0x00000008, 0x00020208, 0x00020200, 0x08000008,
 423	0x08020000, 0x08000208, 0x00000208, 0x08020000,
 424	0x00020208, 0x00000008, 0x08020008, 0x00020200
 425};
 426
 427static const u32 S4[64] = {
 428	0x00802001, 0x00002081, 0x00002081, 0x00000080,
 429	0x00802080, 0x00800081, 0x00800001, 0x00002001,
 430	0x00000000, 0x00802000, 0x00802000, 0x00802081,
 431	0x00000081, 0x00000000, 0x00800080, 0x00800001,
 432	0x00000001, 0x00002000, 0x00800000, 0x00802001,
 433	0x00000080, 0x00800000, 0x00002001, 0x00002080,
 434	0x00800081, 0x00000001, 0x00002080, 0x00800080,
 435	0x00002000, 0x00802080, 0x00802081, 0x00000081,
 436	0x00800080, 0x00800001, 0x00802000, 0x00802081,
 437	0x00000081, 0x00000000, 0x00000000, 0x00802000,
 438	0x00002080, 0x00800080, 0x00800081, 0x00000001,
 439	0x00802001, 0x00002081, 0x00002081, 0x00000080,
 440	0x00802081, 0x00000081, 0x00000001, 0x00002000,
 441	0x00800001, 0x00002001, 0x00802080, 0x00800081,
 442	0x00002001, 0x00002080, 0x00800000, 0x00802001,
 443	0x00000080, 0x00800000, 0x00002000, 0x00802080
 444};
 445
 446static const u32 S5[64] = {
 447	0x00000100, 0x02080100, 0x02080000, 0x42000100,
 448	0x00080000, 0x00000100, 0x40000000, 0x02080000,
 449	0x40080100, 0x00080000, 0x02000100, 0x40080100,
 450	0x42000100, 0x42080000, 0x00080100, 0x40000000,
 451	0x02000000, 0x40080000, 0x40080000, 0x00000000,
 452	0x40000100, 0x42080100, 0x42080100, 0x02000100,
 453	0x42080000, 0x40000100, 0x00000000, 0x42000000,
 454	0x02080100, 0x02000000, 0x42000000, 0x00080100,
 455	0x00080000, 0x42000100, 0x00000100, 0x02000000,
 456	0x40000000, 0x02080000, 0x42000100, 0x40080100,
 457	0x02000100, 0x40000000, 0x42080000, 0x02080100,
 458	0x40080100, 0x00000100, 0x02000000, 0x42080000,
 459	0x42080100, 0x00080100, 0x42000000, 0x42080100,
 460	0x02080000, 0x00000000, 0x40080000, 0x42000000,
 461	0x00080100, 0x02000100, 0x40000100, 0x00080000,
 462	0x00000000, 0x40080000, 0x02080100, 0x40000100
 463};
 464
 465static const u32 S6[64] = {
 466	0x20000010, 0x20400000, 0x00004000, 0x20404010,
 467	0x20400000, 0x00000010, 0x20404010, 0x00400000,
 468	0x20004000, 0x00404010, 0x00400000, 0x20000010,
 469	0x00400010, 0x20004000, 0x20000000, 0x00004010,
 470	0x00000000, 0x00400010, 0x20004010, 0x00004000,
 471	0x00404000, 0x20004010, 0x00000010, 0x20400010,
 472	0x20400010, 0x00000000, 0x00404010, 0x20404000,
 473	0x00004010, 0x00404000, 0x20404000, 0x20000000,
 474	0x20004000, 0x00000010, 0x20400010, 0x00404000,
 475	0x20404010, 0x00400000, 0x00004010, 0x20000010,
 476	0x00400000, 0x20004000, 0x20000000, 0x00004010,
 477	0x20000010, 0x20404010, 0x00404000, 0x20400000,
 478	0x00404010, 0x20404000, 0x00000000, 0x20400010,
 479	0x00000010, 0x00004000, 0x20400000, 0x00404010,
 480	0x00004000, 0x00400010, 0x20004010, 0x00000000,
 481	0x20404000, 0x20000000, 0x00400010, 0x20004010
 482};
 483
 484static const u32 S7[64] = {
 485	0x00200000, 0x04200002, 0x04000802, 0x00000000,
 486	0x00000800, 0x04000802, 0x00200802, 0x04200800,
 487	0x04200802, 0x00200000, 0x00000000, 0x04000002,
 488	0x00000002, 0x04000000, 0x04200002, 0x00000802,
 489	0x04000800, 0x00200802, 0x00200002, 0x04000800,
 490	0x04000002, 0x04200000, 0x04200800, 0x00200002,
 491	0x04200000, 0x00000800, 0x00000802, 0x04200802,
 492	0x00200800, 0x00000002, 0x04000000, 0x00200800,
 493	0x04000000, 0x00200800, 0x00200000, 0x04000802,
 494	0x04000802, 0x04200002, 0x04200002, 0x00000002,
 495	0x00200002, 0x04000000, 0x04000800, 0x00200000,
 496	0x04200800, 0x00000802, 0x00200802, 0x04200800,
 497	0x00000802, 0x04000002, 0x04200802, 0x04200000,
 498	0x00200800, 0x00000000, 0x00000002, 0x04200802,
 499	0x00000000, 0x00200802, 0x04200000, 0x00000800,
 500	0x04000002, 0x04000800, 0x00000800, 0x00200002
 501};
 502
 503static const u32 S8[64] = {
 504	0x10001040, 0x00001000, 0x00040000, 0x10041040,
 505	0x10000000, 0x10001040, 0x00000040, 0x10000000,
 506	0x00040040, 0x10040000, 0x10041040, 0x00041000,
 507	0x10041000, 0x00041040, 0x00001000, 0x00000040,
 508	0x10040000, 0x10000040, 0x10001000, 0x00001040,
 509	0x00041000, 0x00040040, 0x10040040, 0x10041000,
 510	0x00001040, 0x00000000, 0x00000000, 0x10040040,
 511	0x10000040, 0x10001000, 0x00041040, 0x00040000,
 512	0x00041040, 0x00040000, 0x10041000, 0x00001000,
 513	0x00000040, 0x10040040, 0x00001000, 0x00041040,
 514	0x10001000, 0x00000040, 0x10000040, 0x10040000,
 515	0x10040040, 0x10000000, 0x00040000, 0x10001040,
 516	0x00000000, 0x10041040, 0x00040040, 0x10000040,
 517	0x10040000, 0x10001000, 0x10001040, 0x00000000,
 518	0x10041040, 0x00041000, 0x00041000, 0x00001040,
 519	0x00001040, 0x00040040, 0x10000000, 0x10041000
 520};
 521
 522/* Encryption components: IP, FP, and round function */
 523
 524#define IP(L, R, T)		\
 525	ROL(R, 4);		\
 526	T  = L;			\
 527	L ^= R;			\
 528	L &= 0xf0f0f0f0;	\
 529	R ^= L;			\
 530	L ^= T;			\
 531	ROL(R, 12);		\
 532	T  = L;			\
 533	L ^= R;			\
 534	L &= 0xffff0000;	\
 535	R ^= L;			\
 536	L ^= T;			\
 537	ROR(R, 14);		\
 538	T  = L;			\
 539	L ^= R;			\
 540	L &= 0xcccccccc;	\
 541	R ^= L;			\
 542	L ^= T;			\
 543	ROL(R, 6);		\
 544	T  = L;			\
 545	L ^= R;			\
 546	L &= 0xff00ff00;	\
 547	R ^= L;			\
 548	L ^= T;			\
 549	ROR(R, 7);		\
 550	T  = L;			\
 551	L ^= R;			\
 552	L &= 0xaaaaaaaa;	\
 553	R ^= L;			\
 554	L ^= T;			\
 555	ROL(L, 1);
 556
 557#define FP(L, R, T)		\
 558	ROR(L, 1);		\
 559	T  = L;			\
 560	L ^= R;			\
 561	L &= 0xaaaaaaaa;	\
 562	R ^= L;			\
 563	L ^= T;			\
 564	ROL(R, 7);		\
 565	T  = L;			\
 566	L ^= R;			\
 567	L &= 0xff00ff00;	\
 568	R ^= L;			\
 569	L ^= T;			\
 570	ROR(R, 6);		\
 571	T  = L;			\
 572	L ^= R;			\
 573	L &= 0xcccccccc;	\
 574	R ^= L;			\
 575	L ^= T;			\
 576	ROL(R, 14);		\
 577	T  = L;			\
 578	L ^= R;			\
 579	L &= 0xffff0000;	\
 580	R ^= L;			\
 581	L ^= T;			\
 582	ROR(R, 12);		\
 583	T  = L;			\
 584	L ^= R;			\
 585	L &= 0xf0f0f0f0;	\
 586	R ^= L;			\
 587	L ^= T;			\
 588	ROR(R, 4);
 589
 590#define ROUND(L, R, A, B, K, d)					\
 591	B = K[0];			A = K[1];	K += d;	\
 592	B ^= R;				A ^= R;			\
 593	B &= 0x3f3f3f3f;		ROR(A, 4);		\
 594	L ^= S8[0xff & B];		A &= 0x3f3f3f3f;	\
 595	L ^= S6[0xff & (B >> 8)];	B >>= 16;		\
 596	L ^= S7[0xff & A];					\
 597	L ^= S5[0xff & (A >> 8)];	A >>= 16;		\
 598	L ^= S4[0xff & B];					\
 599	L ^= S2[0xff & (B >> 8)];				\
 600	L ^= S3[0xff & A];					\
 601	L ^= S1[0xff & (A >> 8)];
 602
 603/*
 604 * PC2 lookup tables are organized as 2 consecutive sets of 4 interleaved
 605 * tables of 128 elements.  One set is for C_i and the other for D_i, while
 606 * the 4 interleaved tables correspond to four 7-bit subsets of C_i or D_i.
 607 *
 608 * After PC1 each of the variables a,b,c,d contains a 7 bit subset of C_i
 609 * or D_i in bits 7-1 (bit 0 being the least significant).
 610 */
 611
 612#define T1(x) pt[2 * (x) + 0]
 613#define T2(x) pt[2 * (x) + 1]
 614#define T3(x) pt[2 * (x) + 2]
 615#define T4(x) pt[2 * (x) + 3]
 616
 617#define DES_PC2(a, b, c, d) (T4(d) | T3(c) | T2(b) | T1(a))
 618
 619/*
 620 * Encryption key expansion
 621 *
 622 * RFC2451: Weak key checks SHOULD be performed.
 623 *
 624 * FIPS 74:
 625 *
 626 *   Keys having duals are keys which produce all zeros, all ones, or
 627 *   alternating zero-one patterns in the C and D registers after Permuted
 628 *   Choice 1 has operated on the key.
 629 *
 630 */
 631unsigned long des_ekey(u32 *pe, const u8 *k)
 632{
 633	/* K&R: long is at least 32 bits */
 634	unsigned long a, b, c, d, w;
 635	const u32 *pt = pc2;
 636
 637	d = k[4]; d &= 0x0e; d <<= 4; d |= k[0] & 0x1e; d = pc1[d];
 638	c = k[5]; c &= 0x0e; c <<= 4; c |= k[1] & 0x1e; c = pc1[c];
 639	b = k[6]; b &= 0x0e; b <<= 4; b |= k[2] & 0x1e; b = pc1[b];
 640	a = k[7]; a &= 0x0e; a <<= 4; a |= k[3] & 0x1e; a = pc1[a];
 641
 642	pe[15 * 2 + 0] = DES_PC2(a, b, c, d); d = rs[d];
 643	pe[14 * 2 + 0] = DES_PC2(d, a, b, c); c = rs[c]; b = rs[b];
 644	pe[13 * 2 + 0] = DES_PC2(b, c, d, a); a = rs[a]; d = rs[d];
 645	pe[12 * 2 + 0] = DES_PC2(d, a, b, c); c = rs[c]; b = rs[b];
 646	pe[11 * 2 + 0] = DES_PC2(b, c, d, a); a = rs[a]; d = rs[d];
 647	pe[10 * 2 + 0] = DES_PC2(d, a, b, c); c = rs[c]; b = rs[b];
 648	pe[ 9 * 2 + 0] = DES_PC2(b, c, d, a); a = rs[a]; d = rs[d];
 649	pe[ 8 * 2 + 0] = DES_PC2(d, a, b, c); c = rs[c];
 650	pe[ 7 * 2 + 0] = DES_PC2(c, d, a, b); b = rs[b]; a = rs[a];
 651	pe[ 6 * 2 + 0] = DES_PC2(a, b, c, d); d = rs[d]; c = rs[c];
 652	pe[ 5 * 2 + 0] = DES_PC2(c, d, a, b); b = rs[b]; a = rs[a];
 653	pe[ 4 * 2 + 0] = DES_PC2(a, b, c, d); d = rs[d]; c = rs[c];
 654	pe[ 3 * 2 + 0] = DES_PC2(c, d, a, b); b = rs[b]; a = rs[a];
 655	pe[ 2 * 2 + 0] = DES_PC2(a, b, c, d); d = rs[d]; c = rs[c];
 656	pe[ 1 * 2 + 0] = DES_PC2(c, d, a, b); b = rs[b];
 657	pe[ 0 * 2 + 0] = DES_PC2(b, c, d, a);
 658
 659	/* Check if first half is weak */
 660	w  = (a ^ c) | (b ^ d) | (rs[a] ^ c) | (b ^ rs[d]);
 661
 662	/* Skip to next table set */
 663	pt += 512;
 664
 665	d = k[0]; d &= 0xe0; d >>= 4; d |= k[4] & 0xf0; d = pc1[d + 1];
 666	c = k[1]; c &= 0xe0; c >>= 4; c |= k[5] & 0xf0; c = pc1[c + 1];
 667	b = k[2]; b &= 0xe0; b >>= 4; b |= k[6] & 0xf0; b = pc1[b + 1];
 668	a = k[3]; a &= 0xe0; a >>= 4; a |= k[7] & 0xf0; a = pc1[a + 1];
 669
 670	/* Check if second half is weak */
 671	w |= (a ^ c) | (b ^ d) | (rs[a] ^ c) | (b ^ rs[d]);
 672
 673	pe[15 * 2 + 1] = DES_PC2(a, b, c, d); d = rs[d];
 674	pe[14 * 2 + 1] = DES_PC2(d, a, b, c); c = rs[c]; b = rs[b];
 675	pe[13 * 2 + 1] = DES_PC2(b, c, d, a); a = rs[a]; d = rs[d];
 676	pe[12 * 2 + 1] = DES_PC2(d, a, b, c); c = rs[c]; b = rs[b];
 677	pe[11 * 2 + 1] = DES_PC2(b, c, d, a); a = rs[a]; d = rs[d];
 678	pe[10 * 2 + 1] = DES_PC2(d, a, b, c); c = rs[c]; b = rs[b];
 679	pe[ 9 * 2 + 1] = DES_PC2(b, c, d, a); a = rs[a]; d = rs[d];
 680	pe[ 8 * 2 + 1] = DES_PC2(d, a, b, c); c = rs[c];
 681	pe[ 7 * 2 + 1] = DES_PC2(c, d, a, b); b = rs[b]; a = rs[a];
 682	pe[ 6 * 2 + 1] = DES_PC2(a, b, c, d); d = rs[d]; c = rs[c];
 683	pe[ 5 * 2 + 1] = DES_PC2(c, d, a, b); b = rs[b]; a = rs[a];
 684	pe[ 4 * 2 + 1] = DES_PC2(a, b, c, d); d = rs[d]; c = rs[c];
 685	pe[ 3 * 2 + 1] = DES_PC2(c, d, a, b); b = rs[b]; a = rs[a];
 686	pe[ 2 * 2 + 1] = DES_PC2(a, b, c, d); d = rs[d]; c = rs[c];
 687	pe[ 1 * 2 + 1] = DES_PC2(c, d, a, b); b = rs[b];
 688	pe[ 0 * 2 + 1] = DES_PC2(b, c, d, a);
 689
 690	/* Fixup: 2413 5768 -> 1357 2468 */
 691	for (d = 0; d < 16; ++d) {
 692		a = pe[2 * d];
 693		b = pe[2 * d + 1];
 694		c = a ^ b;
 695		c &= 0xffff0000;
 696		a ^= c;
 697		b ^= c;
 698		ROL(b, 18);
 699		pe[2 * d] = a;
 700		pe[2 * d + 1] = b;
 701	}
 702
 703	/* Zero if weak key */
 704	return w;
 705}
 706EXPORT_SYMBOL_GPL(des_ekey);
 707
 708/*
 709 * Decryption key expansion
 710 *
 711 * No weak key checking is performed, as this is only used by triple DES
 712 *
 713 */
 714static void dkey(u32 *pe, const u8 *k)
 715{
 716	/* K&R: long is at least 32 bits */
 717	unsigned long a, b, c, d;
 718	const u32 *pt = pc2;
 719
 720	d = k[4]; d &= 0x0e; d <<= 4; d |= k[0] & 0x1e; d = pc1[d];
 721	c = k[5]; c &= 0x0e; c <<= 4; c |= k[1] & 0x1e; c = pc1[c];
 722	b = k[6]; b &= 0x0e; b <<= 4; b |= k[2] & 0x1e; b = pc1[b];
 723	a = k[7]; a &= 0x0e; a <<= 4; a |= k[3] & 0x1e; a = pc1[a];
 724
 725	pe[ 0 * 2] = DES_PC2(a, b, c, d); d = rs[d];
 726	pe[ 1 * 2] = DES_PC2(d, a, b, c); c = rs[c]; b = rs[b];
 727	pe[ 2 * 2] = DES_PC2(b, c, d, a); a = rs[a]; d = rs[d];
 728	pe[ 3 * 2] = DES_PC2(d, a, b, c); c = rs[c]; b = rs[b];
 729	pe[ 4 * 2] = DES_PC2(b, c, d, a); a = rs[a]; d = rs[d];
 730	pe[ 5 * 2] = DES_PC2(d, a, b, c); c = rs[c]; b = rs[b];
 731	pe[ 6 * 2] = DES_PC2(b, c, d, a); a = rs[a]; d = rs[d];
 732	pe[ 7 * 2] = DES_PC2(d, a, b, c); c = rs[c];
 733	pe[ 8 * 2] = DES_PC2(c, d, a, b); b = rs[b]; a = rs[a];
 734	pe[ 9 * 2] = DES_PC2(a, b, c, d); d = rs[d]; c = rs[c];
 735	pe[10 * 2] = DES_PC2(c, d, a, b); b = rs[b]; a = rs[a];
 736	pe[11 * 2] = DES_PC2(a, b, c, d); d = rs[d]; c = rs[c];
 737	pe[12 * 2] = DES_PC2(c, d, a, b); b = rs[b]; a = rs[a];
 738	pe[13 * 2] = DES_PC2(a, b, c, d); d = rs[d]; c = rs[c];
 739	pe[14 * 2] = DES_PC2(c, d, a, b); b = rs[b];
 740	pe[15 * 2] = DES_PC2(b, c, d, a);
 741
 742	/* Skip to next table set */
 743	pt += 512;
 744
 745	d = k[0]; d &= 0xe0; d >>= 4; d |= k[4] & 0xf0; d = pc1[d + 1];
 746	c = k[1]; c &= 0xe0; c >>= 4; c |= k[5] & 0xf0; c = pc1[c + 1];
 747	b = k[2]; b &= 0xe0; b >>= 4; b |= k[6] & 0xf0; b = pc1[b + 1];
 748	a = k[3]; a &= 0xe0; a >>= 4; a |= k[7] & 0xf0; a = pc1[a + 1];
 749
 750	pe[ 0 * 2 + 1] = DES_PC2(a, b, c, d); d = rs[d];
 751	pe[ 1 * 2 + 1] = DES_PC2(d, a, b, c); c = rs[c]; b = rs[b];
 752	pe[ 2 * 2 + 1] = DES_PC2(b, c, d, a); a = rs[a]; d = rs[d];
 753	pe[ 3 * 2 + 1] = DES_PC2(d, a, b, c); c = rs[c]; b = rs[b];
 754	pe[ 4 * 2 + 1] = DES_PC2(b, c, d, a); a = rs[a]; d = rs[d];
 755	pe[ 5 * 2 + 1] = DES_PC2(d, a, b, c); c = rs[c]; b = rs[b];
 756	pe[ 6 * 2 + 1] = DES_PC2(b, c, d, a); a = rs[a]; d = rs[d];
 757	pe[ 7 * 2 + 1] = DES_PC2(d, a, b, c); c = rs[c];
 758	pe[ 8 * 2 + 1] = DES_PC2(c, d, a, b); b = rs[b]; a = rs[a];
 759	pe[ 9 * 2 + 1] = DES_PC2(a, b, c, d); d = rs[d]; c = rs[c];
 760	pe[10 * 2 + 1] = DES_PC2(c, d, a, b); b = rs[b]; a = rs[a];
 761	pe[11 * 2 + 1] = DES_PC2(a, b, c, d); d = rs[d]; c = rs[c];
 762	pe[12 * 2 + 1] = DES_PC2(c, d, a, b); b = rs[b]; a = rs[a];
 763	pe[13 * 2 + 1] = DES_PC2(a, b, c, d); d = rs[d]; c = rs[c];
 764	pe[14 * 2 + 1] = DES_PC2(c, d, a, b); b = rs[b];
 765	pe[15 * 2 + 1] = DES_PC2(b, c, d, a);
 766
 767	/* Fixup: 2413 5768 -> 1357 2468 */
 768	for (d = 0; d < 16; ++d) {
 769		a = pe[2 * d];
 770		b = pe[2 * d + 1];
 771		c = a ^ b;
 772		c &= 0xffff0000;
 773		a ^= c;
 774		b ^= c;
 775		ROL(b, 18);
 776		pe[2 * d] = a;
 777		pe[2 * d + 1] = b;
 778	}
 779}
 780
 781static int des_setkey(struct crypto_tfm *tfm, const u8 *key,
 782		      unsigned int keylen)
 783{
 784	struct des_ctx *dctx = crypto_tfm_ctx(tfm);
 785	u32 *flags = &tfm->crt_flags;
 786	u32 tmp[DES_EXPKEY_WORDS];
 787	int ret;
 788
 789	/* Expand to tmp */
 790	ret = des_ekey(tmp, key);
 791
 792	if (unlikely(ret == 0) && (*flags & CRYPTO_TFM_REQ_WEAK_KEY)) {
 793		*flags |= CRYPTO_TFM_RES_WEAK_KEY;
 794		return -EINVAL;
 795	}
 796
 797	/* Copy to output */
 798	memcpy(dctx->expkey, tmp, sizeof(dctx->expkey));
 799
 800	return 0;
 801}
 802
 803static void des_encrypt(struct crypto_tfm *tfm, u8 *dst, const u8 *src)
 804{
 805	struct des_ctx *ctx = crypto_tfm_ctx(tfm);
 806	const u32 *K = ctx->expkey;
 807	const __le32 *s = (const __le32 *)src;
 808	__le32 *d = (__le32 *)dst;
 809	u32 L, R, A, B;
 810	int i;
 811
 812	L = le32_to_cpu(s[0]);
 813	R = le32_to_cpu(s[1]);
 814
 815	IP(L, R, A);
 816	for (i = 0; i < 8; i++) {
 817		ROUND(L, R, A, B, K, 2);
 818		ROUND(R, L, A, B, K, 2);
 819	}
 820	FP(R, L, A);
 821
 822	d[0] = cpu_to_le32(R);
 823	d[1] = cpu_to_le32(L);
 824}
 825
 826static void des_decrypt(struct crypto_tfm *tfm, u8 *dst, const u8 *src)
 827{
 828	struct des_ctx *ctx = crypto_tfm_ctx(tfm);
 829	const u32 *K = ctx->expkey + DES_EXPKEY_WORDS - 2;
 830	const __le32 *s = (const __le32 *)src;
 831	__le32 *d = (__le32 *)dst;
 832	u32 L, R, A, B;
 833	int i;
 834
 835	L = le32_to_cpu(s[0]);
 836	R = le32_to_cpu(s[1]);
 837
 838	IP(L, R, A);
 839	for (i = 0; i < 8; i++) {
 840		ROUND(L, R, A, B, K, -2);
 841		ROUND(R, L, A, B, K, -2);
 842	}
 843	FP(R, L, A);
 844
 845	d[0] = cpu_to_le32(R);
 846	d[1] = cpu_to_le32(L);
 847}
 848
 849/*
 850 * RFC2451:
 851 *
 852 *   For DES-EDE3, there is no known need to reject weak or
 853 *   complementation keys.  Any weakness is obviated by the use of
 854 *   multiple keys.
 855 *
 856 *   However, if the first two or last two independent 64-bit keys are
 857 *   equal (k1 == k2 or k2 == k3), then the DES3 operation is simply the
 858 *   same as DES.  Implementers MUST reject keys that exhibit this
 859 *   property.
 860 *
 861 */
 862static int des3_ede_setkey(struct crypto_tfm *tfm, const u8 *key,
 863			   unsigned int keylen)
 864{
 865	const u32 *K = (const u32 *)key;
 866	struct des3_ede_ctx *dctx = crypto_tfm_ctx(tfm);
 867	u32 *expkey = dctx->expkey;
 868	u32 *flags = &tfm->crt_flags;
 869
 870	if (unlikely(!((K[0] ^ K[2]) | (K[1] ^ K[3])) ||
 871		     !((K[2] ^ K[4]) | (K[3] ^ K[5]))) &&
 872		     (*flags & CRYPTO_TFM_REQ_WEAK_KEY)) {
 873		*flags |= CRYPTO_TFM_RES_WEAK_KEY;
 874		return -EINVAL;
 875	}
 876
 877	des_ekey(expkey, key); expkey += DES_EXPKEY_WORDS; key += DES_KEY_SIZE;
 878	dkey(expkey, key); expkey += DES_EXPKEY_WORDS; key += DES_KEY_SIZE;
 879	des_ekey(expkey, key);
 880
 881	return 0;
 882}
 883
 884static void des3_ede_encrypt(struct crypto_tfm *tfm, u8 *dst, const u8 *src)
 885{
 886	struct des3_ede_ctx *dctx = crypto_tfm_ctx(tfm);
 887	const u32 *K = dctx->expkey;
 888	const __le32 *s = (const __le32 *)src;
 889	__le32 *d = (__le32 *)dst;
 890	u32 L, R, A, B;
 891	int i;
 892
 893	L = le32_to_cpu(s[0]);
 894	R = le32_to_cpu(s[1]);
 895
 896	IP(L, R, A);
 897	for (i = 0; i < 8; i++) {
 898		ROUND(L, R, A, B, K, 2);
 899		ROUND(R, L, A, B, K, 2);
 900	}
 901	for (i = 0; i < 8; i++) {
 902		ROUND(R, L, A, B, K, 2);
 903		ROUND(L, R, A, B, K, 2);
 904	}
 905	for (i = 0; i < 8; i++) {
 906		ROUND(L, R, A, B, K, 2);
 907		ROUND(R, L, A, B, K, 2);
 908	}
 909	FP(R, L, A);
 910
 911	d[0] = cpu_to_le32(R);
 912	d[1] = cpu_to_le32(L);
 913}
 914
 915static void des3_ede_decrypt(struct crypto_tfm *tfm, u8 *dst, const u8 *src)
 916{
 917	struct des3_ede_ctx *dctx = crypto_tfm_ctx(tfm);
 918	const u32 *K = dctx->expkey + DES3_EDE_EXPKEY_WORDS - 2;
 919	const __le32 *s = (const __le32 *)src;
 920	__le32 *d = (__le32 *)dst;
 921	u32 L, R, A, B;
 922	int i;
 923
 924	L = le32_to_cpu(s[0]);
 925	R = le32_to_cpu(s[1]);
 926
 927	IP(L, R, A);
 928	for (i = 0; i < 8; i++) {
 929		ROUND(L, R, A, B, K, -2);
 930		ROUND(R, L, A, B, K, -2);
 931	}
 932	for (i = 0; i < 8; i++) {
 933		ROUND(R, L, A, B, K, -2);
 934		ROUND(L, R, A, B, K, -2);
 935	}
 936	for (i = 0; i < 8; i++) {
 937		ROUND(L, R, A, B, K, -2);
 938		ROUND(R, L, A, B, K, -2);
 939	}
 940	FP(R, L, A);
 941
 942	d[0] = cpu_to_le32(R);
 943	d[1] = cpu_to_le32(L);
 944}
 945
 946static struct crypto_alg des_alg = {
 947	.cra_name		=	"des",
 948	.cra_flags		=	CRYPTO_ALG_TYPE_CIPHER,
 949	.cra_blocksize		=	DES_BLOCK_SIZE,
 950	.cra_ctxsize		=	sizeof(struct des_ctx),
 951	.cra_module		=	THIS_MODULE,
 952	.cra_alignmask		=	3,
 953	.cra_list		=	LIST_HEAD_INIT(des_alg.cra_list),
 954	.cra_u			=	{ .cipher = {
 955	.cia_min_keysize	=	DES_KEY_SIZE,
 956	.cia_max_keysize	=	DES_KEY_SIZE,
 957	.cia_setkey		=	des_setkey,
 958	.cia_encrypt		=	des_encrypt,
 959	.cia_decrypt		=	des_decrypt } }
 960};
 961
 962static struct crypto_alg des3_ede_alg = {
 963	.cra_name		=	"des3_ede",
 964	.cra_flags		=	CRYPTO_ALG_TYPE_CIPHER,
 965	.cra_blocksize		=	DES3_EDE_BLOCK_SIZE,
 966	.cra_ctxsize		=	sizeof(struct des3_ede_ctx),
 967	.cra_module		=	THIS_MODULE,
 968	.cra_alignmask		=	3,
 969	.cra_list		=	LIST_HEAD_INIT(des3_ede_alg.cra_list),
 970	.cra_u			=	{ .cipher = {
 971	.cia_min_keysize	=	DES3_EDE_KEY_SIZE,
 972	.cia_max_keysize	=	DES3_EDE_KEY_SIZE,
 973	.cia_setkey		=	des3_ede_setkey,
 974	.cia_encrypt		=	des3_ede_encrypt,
 975	.cia_decrypt		=	des3_ede_decrypt } }
 976};
 977
 978MODULE_ALIAS("des3_ede");
 979
 980static int __init des_generic_mod_init(void)
 981{
 982	int ret = 0;
 983
 984	ret = crypto_register_alg(&des_alg);
 985	if (ret < 0)
 986		goto out;
 987
 988	ret = crypto_register_alg(&des3_ede_alg);
 989	if (ret < 0)
 990		crypto_unregister_alg(&des_alg);
 991out:
 992	return ret;
 993}
 994
 995static void __exit des_generic_mod_fini(void)
 996{
 997	crypto_unregister_alg(&des3_ede_alg);
 998	crypto_unregister_alg(&des_alg);
 999}
1000
1001module_init(des_generic_mod_init);
1002module_exit(des_generic_mod_fini);
1003
1004MODULE_LICENSE("GPL");
1005MODULE_DESCRIPTION("DES & Triple DES EDE Cipher Algorithms");
1006MODULE_AUTHOR("Dag Arne Osvik <da@osvik.no>");
1007MODULE_ALIAS("des");