1/*
2 * Cryptographic API.
3 *
4 * SEED Cipher Algorithm.
5 *
6 * This program is free software; you can redistribute it and/or modify
7 * it under the terms of the GNU General Public License as published by
8 * the Free Software Foundation; either version 2 of the License, or
9 * (at your option) any later version.
10 *
11 * Documentation of SEED can be found in RFC 4269.
12 * Copyright (C) 2007 Korea Information Security Agency (KISA).
13 */
14
15#include <linux/module.h>
16#include <linux/init.h>
17#include <linux/types.h>
18#include <linux/errno.h>
19#include <linux/crypto.h>
20#include <asm/byteorder.h>
21
22#define SEED_NUM_KCONSTANTS	16
23#define SEED_KEY_SIZE		16
24#define SEED_BLOCK_SIZE		16
25#define SEED_KEYSCHED_LEN	32
26
27/*
28 * #define byte(x, nr) ((unsigned char)((x) >> (nr*8)))
29 */
30static inline u8
31byte(const u32 x, const unsigned n)
32{
33	return x >> (n << 3);
34}
35
36struct seed_ctx {
37	u32 keysched[SEED_KEYSCHED_LEN];
38};
39
40static const u32 SS0[256] = {
41	0x2989a1a8, 0x05858184, 0x16c6d2d4, 0x13c3d3d0,
42	0x14445054, 0x1d0d111c, 0x2c8ca0ac, 0x25052124,
43	0x1d4d515c, 0x03434340, 0x18081018, 0x1e0e121c,
44	0x11415150, 0x3cccf0fc, 0x0acac2c8, 0x23436360,
45	0x28082028, 0x04444044, 0x20002020, 0x1d8d919c,
46	0x20c0e0e0, 0x22c2e2e0, 0x08c8c0c8, 0x17071314,
47	0x2585a1a4, 0x0f8f838c, 0x03030300, 0x3b4b7378,
48	0x3b8bb3b8, 0x13031310, 0x12c2d2d0, 0x2ecee2ec,
49	0x30407070, 0x0c8c808c, 0x3f0f333c, 0x2888a0a8,
50	0x32023230, 0x1dcdd1dc, 0x36c6f2f4, 0x34447074,
51	0x2ccce0ec, 0x15859194, 0x0b0b0308, 0x17475354,
52	0x1c4c505c, 0x1b4b5358, 0x3d8db1bc, 0x01010100,
53	0x24042024, 0x1c0c101c, 0x33437370, 0x18889098,
54	0x10001010, 0x0cccc0cc, 0x32c2f2f0, 0x19c9d1d8,
55	0x2c0c202c, 0x27c7e3e4, 0x32427270, 0x03838380,
56	0x1b8b9398, 0x11c1d1d0, 0x06868284, 0x09c9c1c8,
57	0x20406060, 0x10405050, 0x2383a3a0, 0x2bcbe3e8,
58	0x0d0d010c, 0x3686b2b4, 0x1e8e929c, 0x0f4f434c,
59	0x3787b3b4, 0x1a4a5258, 0x06c6c2c4, 0x38487078,
60	0x2686a2a4, 0x12021210, 0x2f8fa3ac, 0x15c5d1d4,
61	0x21416160, 0x03c3c3c0, 0x3484b0b4, 0x01414140,
62	0x12425250, 0x3d4d717c, 0x0d8d818c, 0x08080008,
63	0x1f0f131c, 0x19899198, 0x00000000, 0x19091118,
64	0x04040004, 0x13435350, 0x37c7f3f4, 0x21c1e1e0,
65	0x3dcdf1fc, 0x36467274, 0x2f0f232c, 0x27072324,
66	0x3080b0b0, 0x0b8b8388, 0x0e0e020c, 0x2b8ba3a8,
67	0x2282a2a0, 0x2e4e626c, 0x13839390, 0x0d4d414c,
68	0x29496168, 0x3c4c707c, 0x09090108, 0x0a0a0208,
69	0x3f8fb3bc, 0x2fcfe3ec, 0x33c3f3f0, 0x05c5c1c4,
70	0x07878384, 0x14041014, 0x3ecef2fc, 0x24446064,
71	0x1eced2dc, 0x2e0e222c, 0x0b4b4348, 0x1a0a1218,
72	0x06060204, 0x21012120, 0x2b4b6368, 0x26466264,
73	0x02020200, 0x35c5f1f4, 0x12829290, 0x0a8a8288,
74	0x0c0c000c, 0x3383b3b0, 0x3e4e727c, 0x10c0d0d0,
75	0x3a4a7278, 0x07474344, 0x16869294, 0x25c5e1e4,
76	0x26062224, 0x00808080, 0x2d8da1ac, 0x1fcfd3dc,
77	0x2181a1a0, 0x30003030, 0x37073334, 0x2e8ea2ac,
78	0x36063234, 0x15051114, 0x22022220, 0x38083038,
79	0x34c4f0f4, 0x2787a3a4, 0x05454144, 0x0c4c404c,
80	0x01818180, 0x29c9e1e8, 0x04848084, 0x17879394,
81	0x35053134, 0x0bcbc3c8, 0x0ecec2cc, 0x3c0c303c,
82	0x31417170, 0x11011110, 0x07c7c3c4, 0x09898188,
83	0x35457174, 0x3bcbf3f8, 0x1acad2d8, 0x38c8f0f8,
84	0x14849094, 0x19495158, 0x02828280, 0x04c4c0c4,
85	0x3fcff3fc, 0x09494148, 0x39093138, 0x27476364,
86	0x00c0c0c0, 0x0fcfc3cc, 0x17c7d3d4, 0x3888b0b8,
87	0x0f0f030c, 0x0e8e828c, 0x02424240, 0x23032320,
88	0x11819190, 0x2c4c606c, 0x1bcbd3d8, 0x2484a0a4,
89	0x34043034, 0x31c1f1f0, 0x08484048, 0x02c2c2c0,
90	0x2f4f636c, 0x3d0d313c, 0x2d0d212c, 0x00404040,
91	0x3e8eb2bc, 0x3e0e323c, 0x3c8cb0bc, 0x01c1c1c0,
92	0x2a8aa2a8, 0x3a8ab2b8, 0x0e4e424c, 0x15455154,
93	0x3b0b3338, 0x1cccd0dc, 0x28486068, 0x3f4f737c,
94	0x1c8c909c, 0x18c8d0d8, 0x0a4a4248, 0x16465254,
95	0x37477374, 0x2080a0a0, 0x2dcde1ec, 0x06464244,
96	0x3585b1b4, 0x2b0b2328, 0x25456164, 0x3acaf2f8,
97	0x23c3e3e0, 0x3989b1b8, 0x3181b1b0, 0x1f8f939c,
98	0x1e4e525c, 0x39c9f1f8, 0x26c6e2e4, 0x3282b2b0,
99	0x31013130, 0x2acae2e8, 0x2d4d616c, 0x1f4f535c,
100	0x24c4e0e4, 0x30c0f0f0, 0x0dcdc1cc, 0x08888088,
101	0x16061214, 0x3a0a3238, 0x18485058, 0x14c4d0d4,
102	0x22426260, 0x29092128, 0x07070304, 0x33033330,
103	0x28c8e0e8, 0x1b0b1318, 0x05050104, 0x39497178,
104	0x10809090, 0x2a4a6268, 0x2a0a2228, 0x1a8a9298,
105};
106
107static const u32 SS1[256] = {
108	0x38380830, 0xe828c8e0, 0x2c2d0d21, 0xa42686a2,
109	0xcc0fcfc3, 0xdc1eced2, 0xb03383b3, 0xb83888b0,
110	0xac2f8fa3, 0x60204060, 0x54154551, 0xc407c7c3,
111	0x44044440, 0x6c2f4f63, 0x682b4b63, 0x581b4b53,
112	0xc003c3c3, 0x60224262, 0x30330333, 0xb43585b1,
113	0x28290921, 0xa02080a0, 0xe022c2e2, 0xa42787a3,
114	0xd013c3d3, 0x90118191, 0x10110111, 0x04060602,
115	0x1c1c0c10, 0xbc3c8cb0, 0x34360632, 0x480b4b43,
116	0xec2fcfe3, 0x88088880, 0x6c2c4c60, 0xa82888a0,
117	0x14170713, 0xc404c4c0, 0x14160612, 0xf434c4f0,
118	0xc002c2c2, 0x44054541, 0xe021c1e1, 0xd416c6d2,
119	0x3c3f0f33, 0x3c3d0d31, 0x8c0e8e82, 0x98188890,
120	0x28280820, 0x4c0e4e42, 0xf436c6f2, 0x3c3e0e32,
121	0xa42585a1, 0xf839c9f1, 0x0c0d0d01, 0xdc1fcfd3,
122	0xd818c8d0, 0x282b0b23, 0x64264662, 0x783a4a72,
123	0x24270723, 0x2c2f0f23, 0xf031c1f1, 0x70324272,
124	0x40024242, 0xd414c4d0, 0x40014141, 0xc000c0c0,
125	0x70334373, 0x64274763, 0xac2c8ca0, 0x880b8b83,
126	0xf437c7f3, 0xac2d8da1, 0x80008080, 0x1c1f0f13,
127	0xc80acac2, 0x2c2c0c20, 0xa82a8aa2, 0x34340430,
128	0xd012c2d2, 0x080b0b03, 0xec2ecee2, 0xe829c9e1,
129	0x5c1d4d51, 0x94148490, 0x18180810, 0xf838c8f0,
130	0x54174753, 0xac2e8ea2, 0x08080800, 0xc405c5c1,
131	0x10130313, 0xcc0dcdc1, 0x84068682, 0xb83989b1,
132	0xfc3fcff3, 0x7c3d4d71, 0xc001c1c1, 0x30310131,
133	0xf435c5f1, 0x880a8a82, 0x682a4a62, 0xb03181b1,
134	0xd011c1d1, 0x20200020, 0xd417c7d3, 0x00020202,
135	0x20220222, 0x04040400, 0x68284860, 0x70314171,
136	0x04070703, 0xd81bcbd3, 0x9c1d8d91, 0x98198991,
137	0x60214161, 0xbc3e8eb2, 0xe426c6e2, 0x58194951,
138	0xdc1dcdd1, 0x50114151, 0x90108090, 0xdc1cccd0,
139	0x981a8a92, 0xa02383a3, 0xa82b8ba3, 0xd010c0d0,
140	0x80018181, 0x0c0f0f03, 0x44074743, 0x181a0a12,
141	0xe023c3e3, 0xec2ccce0, 0x8c0d8d81, 0xbc3f8fb3,
142	0x94168692, 0x783b4b73, 0x5c1c4c50, 0xa02282a2,
143	0xa02181a1, 0x60234363, 0x20230323, 0x4c0d4d41,
144	0xc808c8c0, 0x9c1e8e92, 0x9c1c8c90, 0x383a0a32,
145	0x0c0c0c00, 0x2c2e0e22, 0xb83a8ab2, 0x6c2e4e62,
146	0x9c1f8f93, 0x581a4a52, 0xf032c2f2, 0x90128292,
147	0xf033c3f3, 0x48094941, 0x78384870, 0xcc0cccc0,
148	0x14150511, 0xf83bcbf3, 0x70304070, 0x74354571,
149	0x7c3f4f73, 0x34350531, 0x10100010, 0x00030303,
150	0x64244460, 0x6c2d4d61, 0xc406c6c2, 0x74344470,
151	0xd415c5d1, 0xb43484b0, 0xe82acae2, 0x08090901,
152	0x74364672, 0x18190911, 0xfc3ecef2, 0x40004040,
153	0x10120212, 0xe020c0e0, 0xbc3d8db1, 0x04050501,
154	0xf83acaf2, 0x00010101, 0xf030c0f0, 0x282a0a22,
155	0x5c1e4e52, 0xa82989a1, 0x54164652, 0x40034343,
156	0x84058581, 0x14140410, 0x88098981, 0x981b8b93,
157	0xb03080b0, 0xe425c5e1, 0x48084840, 0x78394971,
158	0x94178793, 0xfc3cccf0, 0x1c1e0e12, 0x80028282,
159	0x20210121, 0x8c0c8c80, 0x181b0b13, 0x5c1f4f53,
160	0x74374773, 0x54144450, 0xb03282b2, 0x1c1d0d11,
161	0x24250521, 0x4c0f4f43, 0x00000000, 0x44064642,
162	0xec2dcde1, 0x58184850, 0x50124252, 0xe82bcbe3,
163	0x7c3e4e72, 0xd81acad2, 0xc809c9c1, 0xfc3dcdf1,
164	0x30300030, 0x94158591, 0x64254561, 0x3c3c0c30,
165	0xb43686b2, 0xe424c4e0, 0xb83b8bb3, 0x7c3c4c70,
166	0x0c0e0e02, 0x50104050, 0x38390931, 0x24260622,
167	0x30320232, 0x84048480, 0x68294961, 0x90138393,
168	0x34370733, 0xe427c7e3, 0x24240420, 0xa42484a0,
169	0xc80bcbc3, 0x50134353, 0x080a0a02, 0x84078783,
170	0xd819c9d1, 0x4c0c4c40, 0x80038383, 0x8c0f8f83,
171	0xcc0ecec2, 0x383b0b33, 0x480a4a42, 0xb43787b3,
172};
173
174static const u32 SS2[256] = {
175	0xa1a82989, 0x81840585, 0xd2d416c6, 0xd3d013c3,
176	0x50541444, 0x111c1d0d, 0xa0ac2c8c, 0x21242505,
177	0x515c1d4d, 0x43400343, 0x10181808, 0x121c1e0e,
178	0x51501141, 0xf0fc3ccc, 0xc2c80aca, 0x63602343,
179	0x20282808, 0x40440444, 0x20202000, 0x919c1d8d,
180	0xe0e020c0, 0xe2e022c2, 0xc0c808c8, 0x13141707,
181	0xa1a42585, 0x838c0f8f, 0x03000303, 0x73783b4b,
182	0xb3b83b8b, 0x13101303, 0xd2d012c2, 0xe2ec2ece,
183	0x70703040, 0x808c0c8c, 0x333c3f0f, 0xa0a82888,
184	0x32303202, 0xd1dc1dcd, 0xf2f436c6, 0x70743444,
185	0xe0ec2ccc, 0x91941585, 0x03080b0b, 0x53541747,
186	0x505c1c4c, 0x53581b4b, 0xb1bc3d8d, 0x01000101,
187	0x20242404, 0x101c1c0c, 0x73703343, 0x90981888,
188	0x10101000, 0xc0cc0ccc, 0xf2f032c2, 0xd1d819c9,
189	0x202c2c0c, 0xe3e427c7, 0x72703242, 0x83800383,
190	0x93981b8b, 0xd1d011c1, 0x82840686, 0xc1c809c9,
191	0x60602040, 0x50501040, 0xa3a02383, 0xe3e82bcb,
192	0x010c0d0d, 0xb2b43686, 0x929c1e8e, 0x434c0f4f,
193	0xb3b43787, 0x52581a4a, 0xc2c406c6, 0x70783848,
194	0xa2a42686, 0x12101202, 0xa3ac2f8f, 0xd1d415c5,
195	0x61602141, 0xc3c003c3, 0xb0b43484, 0x41400141,
196	0x52501242, 0x717c3d4d, 0x818c0d8d, 0x00080808,
197	0x131c1f0f, 0x91981989, 0x00000000, 0x11181909,
198	0x00040404, 0x53501343, 0xf3f437c7, 0xe1e021c1,
199	0xf1fc3dcd, 0x72743646, 0x232c2f0f, 0x23242707,
200	0xb0b03080, 0x83880b8b, 0x020c0e0e, 0xa3a82b8b,
201	0xa2a02282, 0x626c2e4e, 0x93901383, 0x414c0d4d,
202	0x61682949, 0x707c3c4c, 0x01080909, 0x02080a0a,
203	0xb3bc3f8f, 0xe3ec2fcf, 0xf3f033c3, 0xc1c405c5,
204	0x83840787, 0x10141404, 0xf2fc3ece, 0x60642444,
205	0xd2dc1ece, 0x222c2e0e, 0x43480b4b, 0x12181a0a,
206	0x02040606, 0x21202101, 0x63682b4b, 0x62642646,
207	0x02000202, 0xf1f435c5, 0x92901282, 0x82880a8a,
208	0x000c0c0c, 0xb3b03383, 0x727c3e4e, 0xd0d010c0,
209	0x72783a4a, 0x43440747, 0x92941686, 0xe1e425c5,
210	0x22242606, 0x80800080, 0xa1ac2d8d, 0xd3dc1fcf,
211	0xa1a02181, 0x30303000, 0x33343707, 0xa2ac2e8e,
212	0x32343606, 0x11141505, 0x22202202, 0x30383808,
213	0xf0f434c4, 0xa3a42787, 0x41440545, 0x404c0c4c,
214	0x81800181, 0xe1e829c9, 0x80840484, 0x93941787,
215	0x31343505, 0xc3c80bcb, 0xc2cc0ece, 0x303c3c0c,
216	0x71703141, 0x11101101, 0xc3c407c7, 0x81880989,
217	0x71743545, 0xf3f83bcb, 0xd2d81aca, 0xf0f838c8,
218	0x90941484, 0x51581949, 0x82800282, 0xc0c404c4,
219	0xf3fc3fcf, 0x41480949, 0x31383909, 0x63642747,
220	0xc0c000c0, 0xc3cc0fcf, 0xd3d417c7, 0xb0b83888,
221	0x030c0f0f, 0x828c0e8e, 0x42400242, 0x23202303,
222	0x91901181, 0x606c2c4c, 0xd3d81bcb, 0xa0a42484,
223	0x30343404, 0xf1f031c1, 0x40480848, 0xc2c002c2,
224	0x636c2f4f, 0x313c3d0d, 0x212c2d0d, 0x40400040,
225	0xb2bc3e8e, 0x323c3e0e, 0xb0bc3c8c, 0xc1c001c1,
226	0xa2a82a8a, 0xb2b83a8a, 0x424c0e4e, 0x51541545,
227	0x33383b0b, 0xd0dc1ccc, 0x60682848, 0x737c3f4f,
228	0x909c1c8c, 0xd0d818c8, 0x42480a4a, 0x52541646,
229	0x73743747, 0xa0a02080, 0xe1ec2dcd, 0x42440646,
230	0xb1b43585, 0x23282b0b, 0x61642545, 0xf2f83aca,
231	0xe3e023c3, 0xb1b83989, 0xb1b03181, 0x939c1f8f,
232	0x525c1e4e, 0xf1f839c9, 0xe2e426c6, 0xb2b03282,
233	0x31303101, 0xe2e82aca, 0x616c2d4d, 0x535c1f4f,
234	0xe0e424c4, 0xf0f030c0, 0xc1cc0dcd, 0x80880888,
235	0x12141606, 0x32383a0a, 0x50581848, 0xd0d414c4,
236	0x62602242, 0x21282909, 0x03040707, 0x33303303,
237	0xe0e828c8, 0x13181b0b, 0x01040505, 0x71783949,
238	0x90901080, 0x62682a4a, 0x22282a0a, 0x92981a8a,
239};
240
241static const u32 SS3[256] = {
242	0x08303838, 0xc8e0e828, 0x0d212c2d, 0x86a2a426,
243	0xcfc3cc0f, 0xced2dc1e, 0x83b3b033, 0x88b0b838,
244	0x8fa3ac2f, 0x40606020, 0x45515415, 0xc7c3c407,
245	0x44404404, 0x4f636c2f, 0x4b63682b, 0x4b53581b,
246	0xc3c3c003, 0x42626022, 0x03333033, 0x85b1b435,
247	0x09212829, 0x80a0a020, 0xc2e2e022, 0x87a3a427,
248	0xc3d3d013, 0x81919011, 0x01111011, 0x06020406,
249	0x0c101c1c, 0x8cb0bc3c, 0x06323436, 0x4b43480b,
250	0xcfe3ec2f, 0x88808808, 0x4c606c2c, 0x88a0a828,
251	0x07131417, 0xc4c0c404, 0x06121416, 0xc4f0f434,
252	0xc2c2c002, 0x45414405, 0xc1e1e021, 0xc6d2d416,
253	0x0f333c3f, 0x0d313c3d, 0x8e828c0e, 0x88909818,
254	0x08202828, 0x4e424c0e, 0xc6f2f436, 0x0e323c3e,
255	0x85a1a425, 0xc9f1f839, 0x0d010c0d, 0xcfd3dc1f,
256	0xc8d0d818, 0x0b23282b, 0x46626426, 0x4a72783a,
257	0x07232427, 0x0f232c2f, 0xc1f1f031, 0x42727032,
258	0x42424002, 0xc4d0d414, 0x41414001, 0xc0c0c000,
259	0x43737033, 0x47636427, 0x8ca0ac2c, 0x8b83880b,
260	0xc7f3f437, 0x8da1ac2d, 0x80808000, 0x0f131c1f,
261	0xcac2c80a, 0x0c202c2c, 0x8aa2a82a, 0x04303434,
262	0xc2d2d012, 0x0b03080b, 0xcee2ec2e, 0xc9e1e829,
263	0x4d515c1d, 0x84909414, 0x08101818, 0xc8f0f838,
264	0x47535417, 0x8ea2ac2e, 0x08000808, 0xc5c1c405,
265	0x03131013, 0xcdc1cc0d, 0x86828406, 0x89b1b839,
266	0xcff3fc3f, 0x4d717c3d, 0xc1c1c001, 0x01313031,
267	0xc5f1f435, 0x8a82880a, 0x4a62682a, 0x81b1b031,
268	0xc1d1d011, 0x00202020, 0xc7d3d417, 0x02020002,
269	0x02222022, 0x04000404, 0x48606828, 0x41717031,
270	0x07030407, 0xcbd3d81b, 0x8d919c1d, 0x89919819,
271	0x41616021, 0x8eb2bc3e, 0xc6e2e426, 0x49515819,
272	0xcdd1dc1d, 0x41515011, 0x80909010, 0xccd0dc1c,
273	0x8a92981a, 0x83a3a023, 0x8ba3a82b, 0xc0d0d010,
274	0x81818001, 0x0f030c0f, 0x47434407, 0x0a12181a,
275	0xc3e3e023, 0xcce0ec2c, 0x8d818c0d, 0x8fb3bc3f,
276	0x86929416, 0x4b73783b, 0x4c505c1c, 0x82a2a022,
277	0x81a1a021, 0x43636023, 0x03232023, 0x4d414c0d,
278	0xc8c0c808, 0x8e929c1e, 0x8c909c1c, 0x0a32383a,
279	0x0c000c0c, 0x0e222c2e, 0x8ab2b83a, 0x4e626c2e,
280	0x8f939c1f, 0x4a52581a, 0xc2f2f032, 0x82929012,
281	0xc3f3f033, 0x49414809, 0x48707838, 0xccc0cc0c,
282	0x05111415, 0xcbf3f83b, 0x40707030, 0x45717435,
283	0x4f737c3f, 0x05313435, 0x00101010, 0x03030003,
284	0x44606424, 0x4d616c2d, 0xc6c2c406, 0x44707434,
285	0xc5d1d415, 0x84b0b434, 0xcae2e82a, 0x09010809,
286	0x46727436, 0x09111819, 0xcef2fc3e, 0x40404000,
287	0x02121012, 0xc0e0e020, 0x8db1bc3d, 0x05010405,
288	0xcaf2f83a, 0x01010001, 0xc0f0f030, 0x0a22282a,
289	0x4e525c1e, 0x89a1a829, 0x46525416, 0x43434003,
290	0x85818405, 0x04101414, 0x89818809, 0x8b93981b,
291	0x80b0b030, 0xc5e1e425, 0x48404808, 0x49717839,
292	0x87939417, 0xccf0fc3c, 0x0e121c1e, 0x82828002,
293	0x01212021, 0x8c808c0c, 0x0b13181b, 0x4f535c1f,
294	0x47737437, 0x44505414, 0x82b2b032, 0x0d111c1d,
295	0x05212425, 0x4f434c0f, 0x00000000, 0x46424406,
296	0xcde1ec2d, 0x48505818, 0x42525012, 0xcbe3e82b,
297	0x4e727c3e, 0xcad2d81a, 0xc9c1c809, 0xcdf1fc3d,
298	0x00303030, 0x85919415, 0x45616425, 0x0c303c3c,
299	0x86b2b436, 0xc4e0e424, 0x8bb3b83b, 0x4c707c3c,
300	0x0e020c0e, 0x40505010, 0x09313839, 0x06222426,
301	0x02323032, 0x84808404, 0x49616829, 0x83939013,
302	0x07333437, 0xc7e3e427, 0x04202424, 0x84a0a424,
303	0xcbc3c80b, 0x43535013, 0x0a02080a, 0x87838407,
304	0xc9d1d819, 0x4c404c0c, 0x83838003, 0x8f838c0f,
305	0xcec2cc0e, 0x0b33383b, 0x4a42480a, 0x87b3b437,
306};
307
308static const u32 KC[SEED_NUM_KCONSTANTS] = {
309	0x9e3779b9, 0x3c6ef373, 0x78dde6e6, 0xf1bbcdcc,
310	0xe3779b99, 0xc6ef3733, 0x8dde6e67, 0x1bbcdccf,
311	0x3779b99e, 0x6ef3733c, 0xdde6e678, 0xbbcdccf1,
312	0x779b99e3, 0xef3733c6, 0xde6e678d, 0xbcdccf1b,
313};
314
315#define OP(X1, X2, X3, X4, rbase)			\
316	t0 = X3 ^ ks[rbase];				\
317	t1 = X4 ^ ks[rbase+1];				\
318	t1 ^= t0;					\
319	t1 = SS0[byte(t1, 0)] ^ SS1[byte(t1, 1)] ^	\
320		SS2[byte(t1, 2)] ^ SS3[byte(t1, 3)];	\
321	t0 += t1;					\
322	t0 = SS0[byte(t0, 0)] ^ SS1[byte(t0, 1)] ^	\
323		SS2[byte(t0, 2)] ^ SS3[byte(t0, 3)];	\
324	t1 += t0;					\
325	t1 = SS0[byte(t1, 0)] ^ SS1[byte(t1, 1)] ^	\
326		SS2[byte(t1, 2)] ^ SS3[byte(t1, 3)];	\
327	t0 += t1;					\
328	X1 ^= t0;					\
329	X2 ^= t1;
330
331static int seed_set_key(struct crypto_tfm *tfm, const u8 *in_key,
332		        unsigned int key_len)
333{
334	struct seed_ctx *ctx = crypto_tfm_ctx(tfm);
335	u32 *keyout = ctx->keysched;
336	const __be32 *key = (const __be32 *)in_key;
337	u32 i, t0, t1, x1, x2, x3, x4;
338
339	x1 = be32_to_cpu(key[0]);
340	x2 = be32_to_cpu(key[1]);
341	x3 = be32_to_cpu(key[2]);
342	x4 = be32_to_cpu(key[3]);
343
344	for (i = 0; i < SEED_NUM_KCONSTANTS; i++) {
345		t0 = x1 + x3 - KC[i];
346		t1 = x2 + KC[i] - x4;
347		*(keyout++) = SS0[byte(t0, 0)] ^ SS1[byte(t0, 1)] ^
348				SS2[byte(t0, 2)] ^ SS3[byte(t0, 3)];
349		*(keyout++) = SS0[byte(t1, 0)] ^ SS1[byte(t1, 1)] ^
350				SS2[byte(t1, 2)] ^ SS3[byte(t1, 3)];
351
352		if (i % 2 == 0) {
353			t0 = x1;
354			x1 = (x1 >> 8) ^ (x2 << 24);
355			x2 = (x2 >> 8) ^ (t0 << 24);
356		} else {
357			t0 = x3;
358			x3 = (x3 << 8) ^ (x4 >> 24);
359			x4 = (x4 << 8) ^ (t0 >> 24);
360		}
361	}
362
363	return 0;
364}
365
366/* encrypt a block of text */
367
368static void seed_encrypt(struct crypto_tfm *tfm, u8 *out, const u8 *in)
369{
370	const struct seed_ctx *ctx = crypto_tfm_ctx(tfm);
371	const __be32 *src = (const __be32 *)in;
372	__be32 *dst = (__be32 *)out;
373	u32 x1, x2, x3, x4, t0, t1;
374	const u32 *ks = ctx->keysched;
375
376	x1 = be32_to_cpu(src[0]);
377	x2 = be32_to_cpu(src[1]);
378	x3 = be32_to_cpu(src[2]);
379	x4 = be32_to_cpu(src[3]);
380
381	OP(x1, x2, x3, x4, 0);
382	OP(x3, x4, x1, x2, 2);
383	OP(x1, x2, x3, x4, 4);
384	OP(x3, x4, x1, x2, 6);
385	OP(x1, x2, x3, x4, 8);
386	OP(x3, x4, x1, x2, 10);
387	OP(x1, x2, x3, x4, 12);
388	OP(x3, x4, x1, x2, 14);
389	OP(x1, x2, x3, x4, 16);
390	OP(x3, x4, x1, x2, 18);
391	OP(x1, x2, x3, x4, 20);
392	OP(x3, x4, x1, x2, 22);
393	OP(x1, x2, x3, x4, 24);
394	OP(x3, x4, x1, x2, 26);
395	OP(x1, x2, x3, x4, 28);
396	OP(x3, x4, x1, x2, 30);
397
398	dst[0] = cpu_to_be32(x3);
399	dst[1] = cpu_to_be32(x4);
400	dst[2] = cpu_to_be32(x1);
401	dst[3] = cpu_to_be32(x2);
402}
403
404/* decrypt a block of text */
405
406static void seed_decrypt(struct crypto_tfm *tfm, u8 *out, const u8 *in)
407{
408	const struct seed_ctx *ctx = crypto_tfm_ctx(tfm);
409	const __be32 *src = (const __be32 *)in;
410	__be32 *dst = (__be32 *)out;
411	u32 x1, x2, x3, x4, t0, t1;
412	const u32 *ks = ctx->keysched;
413
414	x1 = be32_to_cpu(src[0]);
415	x2 = be32_to_cpu(src[1]);
416	x3 = be32_to_cpu(src[2]);
417	x4 = be32_to_cpu(src[3]);
418
419	OP(x1, x2, x3, x4, 30);
420	OP(x3, x4, x1, x2, 28);
421	OP(x1, x2, x3, x4, 26);
422	OP(x3, x4, x1, x2, 24);
423	OP(x1, x2, x3, x4, 22);
424	OP(x3, x4, x1, x2, 20);
425	OP(x1, x2, x3, x4, 18);
426	OP(x3, x4, x1, x2, 16);
427	OP(x1, x2, x3, x4, 14);
428	OP(x3, x4, x1, x2, 12);
429	OP(x1, x2, x3, x4, 10);
430	OP(x3, x4, x1, x2, 8);
431	OP(x1, x2, x3, x4, 6);
432	OP(x3, x4, x1, x2, 4);
433	OP(x1, x2, x3, x4, 2);
434	OP(x3, x4, x1, x2, 0);
435
436	dst[0] = cpu_to_be32(x3);
437	dst[1] = cpu_to_be32(x4);
438	dst[2] = cpu_to_be32(x1);
439	dst[3] = cpu_to_be32(x2);
440}
441
442
443static struct crypto_alg seed_alg = {
444	.cra_name		=	"seed",
445	.cra_driver_name	=	"seed-generic",
446	.cra_priority		=	100,
447	.cra_flags		=	CRYPTO_ALG_TYPE_CIPHER,
448	.cra_blocksize		=	SEED_BLOCK_SIZE,
449	.cra_ctxsize		=	sizeof(struct seed_ctx),
450	.cra_alignmask		=	3,
451	.cra_module		=	THIS_MODULE,
452	.cra_u			=	{
453		.cipher = {
454			.cia_min_keysize	=	SEED_KEY_SIZE,
455			.cia_max_keysize	=	SEED_KEY_SIZE,
456			.cia_setkey		=	seed_set_key,
457			.cia_encrypt		=	seed_encrypt,
458			.cia_decrypt		=	seed_decrypt
459		}
460	}
461};
462
463static int __init seed_init(void)
464{
465	return crypto_register_alg(&seed_alg);
466}
467
468static void __exit seed_fini(void)
469{
470	crypto_unregister_alg(&seed_alg);
471}
472
473module_init(seed_init);
474module_exit(seed_fini);
475
476MODULE_DESCRIPTION("SEED Cipher Algorithm");
477MODULE_LICENSE("GPL");
478MODULE_AUTHOR("Hye-Shik Chang <perky@FreeBSD.org>, Kim Hyun <hkim@kisa.or.kr>");
479MODULE_ALIAS_CRYPTO("seed");
480