Commit | Line | Data |
---|---|---|
e4e712bb TY |
1 | // SPDX-License-Identifier: GPL-2.0-or-later |
2 | /* | |
3 | * Cryptographic API. | |
4 | * | |
5 | * ARIA Cipher Algorithm. | |
6 | * | |
7 | * Documentation of ARIA can be found in RFC 5794. | |
8 | * Copyright (c) 2022 Taehee Yoo <ap420073@gmail.com> | |
9 | * | |
10 | * Information for ARIA | |
11 | * http://210.104.33.10/ARIA/index-e.html (English) | |
12 | * http://seed.kisa.or.kr/ (Korean) | |
13 | * | |
14 | * Public domain version is distributed above. | |
15 | */ | |
16 | ||
17 | #include <crypto/aria.h> | |
18 | ||
a9b0838d TY |
19 | static const u32 key_rc[20] = { |
20 | 0x517cc1b7, 0x27220a94, 0xfe13abe8, 0xfa9a6ee0, | |
21 | 0x6db14acc, 0x9e21c820, 0xff28b1d5, 0xef5de2b0, | |
22 | 0xdb92371d, 0x2126e970, 0x03249775, 0x04e8c90e, | |
23 | 0x517cc1b7, 0x27220a94, 0xfe13abe8, 0xfa9a6ee0, | |
24 | 0x6db14acc, 0x9e21c820, 0xff28b1d5, 0xef5de2b0 | |
25 | }; | |
26 | ||
e4e712bb TY |
27 | static void aria_set_encrypt_key(struct aria_ctx *ctx, const u8 *in_key, |
28 | unsigned int key_len) | |
29 | { | |
30 | const __be32 *key = (const __be32 *)in_key; | |
31 | u32 w0[4], w1[4], w2[4], w3[4]; | |
32 | u32 reg0, reg1, reg2, reg3; | |
33 | const u32 *ck; | |
34 | int rkidx = 0; | |
35 | ||
a9b0838d | 36 | ck = &key_rc[(key_len - 16) / 2]; |
e4e712bb TY |
37 | |
38 | w0[0] = be32_to_cpu(key[0]); | |
39 | w0[1] = be32_to_cpu(key[1]); | |
40 | w0[2] = be32_to_cpu(key[2]); | |
41 | w0[3] = be32_to_cpu(key[3]); | |
42 | ||
43 | reg0 = w0[0] ^ ck[0]; | |
44 | reg1 = w0[1] ^ ck[1]; | |
45 | reg2 = w0[2] ^ ck[2]; | |
46 | reg3 = w0[3] ^ ck[3]; | |
47 | ||
48 | aria_subst_diff_odd(®0, ®1, ®2, ®3); | |
49 | ||
50 | if (key_len > 16) { | |
51 | w1[0] = be32_to_cpu(key[4]); | |
52 | w1[1] = be32_to_cpu(key[5]); | |
53 | if (key_len > 24) { | |
54 | w1[2] = be32_to_cpu(key[6]); | |
55 | w1[3] = be32_to_cpu(key[7]); | |
56 | } else { | |
57 | w1[2] = 0; | |
58 | w1[3] = 0; | |
59 | } | |
60 | } else { | |
61 | w1[0] = 0; | |
62 | w1[1] = 0; | |
63 | w1[2] = 0; | |
64 | w1[3] = 0; | |
65 | } | |
66 | ||
67 | w1[0] ^= reg0; | |
68 | w1[1] ^= reg1; | |
69 | w1[2] ^= reg2; | |
70 | w1[3] ^= reg3; | |
71 | ||
72 | reg0 = w1[0]; | |
73 | reg1 = w1[1]; | |
74 | reg2 = w1[2]; | |
75 | reg3 = w1[3]; | |
76 | ||
77 | reg0 ^= ck[4]; | |
78 | reg1 ^= ck[5]; | |
79 | reg2 ^= ck[6]; | |
80 | reg3 ^= ck[7]; | |
81 | ||
82 | aria_subst_diff_even(®0, ®1, ®2, ®3); | |
83 | ||
84 | reg0 ^= w0[0]; | |
85 | reg1 ^= w0[1]; | |
86 | reg2 ^= w0[2]; | |
87 | reg3 ^= w0[3]; | |
88 | ||
89 | w2[0] = reg0; | |
90 | w2[1] = reg1; | |
91 | w2[2] = reg2; | |
92 | w2[3] = reg3; | |
93 | ||
94 | reg0 ^= ck[8]; | |
95 | reg1 ^= ck[9]; | |
96 | reg2 ^= ck[10]; | |
97 | reg3 ^= ck[11]; | |
98 | ||
99 | aria_subst_diff_odd(®0, ®1, ®2, ®3); | |
100 | ||
101 | w3[0] = reg0 ^ w1[0]; | |
102 | w3[1] = reg1 ^ w1[1]; | |
103 | w3[2] = reg2 ^ w1[2]; | |
104 | w3[3] = reg3 ^ w1[3]; | |
105 | ||
106 | aria_gsrk(ctx->enc_key[rkidx], w0, w1, 19); | |
107 | rkidx++; | |
108 | aria_gsrk(ctx->enc_key[rkidx], w1, w2, 19); | |
109 | rkidx++; | |
110 | aria_gsrk(ctx->enc_key[rkidx], w2, w3, 19); | |
111 | rkidx++; | |
112 | aria_gsrk(ctx->enc_key[rkidx], w3, w0, 19); | |
113 | ||
114 | rkidx++; | |
115 | aria_gsrk(ctx->enc_key[rkidx], w0, w1, 31); | |
116 | rkidx++; | |
117 | aria_gsrk(ctx->enc_key[rkidx], w1, w2, 31); | |
118 | rkidx++; | |
119 | aria_gsrk(ctx->enc_key[rkidx], w2, w3, 31); | |
120 | rkidx++; | |
121 | aria_gsrk(ctx->enc_key[rkidx], w3, w0, 31); | |
122 | ||
123 | rkidx++; | |
124 | aria_gsrk(ctx->enc_key[rkidx], w0, w1, 67); | |
125 | rkidx++; | |
126 | aria_gsrk(ctx->enc_key[rkidx], w1, w2, 67); | |
127 | rkidx++; | |
128 | aria_gsrk(ctx->enc_key[rkidx], w2, w3, 67); | |
129 | rkidx++; | |
130 | aria_gsrk(ctx->enc_key[rkidx], w3, w0, 67); | |
131 | ||
132 | rkidx++; | |
133 | aria_gsrk(ctx->enc_key[rkidx], w0, w1, 97); | |
134 | if (key_len > 16) { | |
135 | rkidx++; | |
136 | aria_gsrk(ctx->enc_key[rkidx], w1, w2, 97); | |
137 | rkidx++; | |
138 | aria_gsrk(ctx->enc_key[rkidx], w2, w3, 97); | |
139 | ||
140 | if (key_len > 24) { | |
141 | rkidx++; | |
142 | aria_gsrk(ctx->enc_key[rkidx], w3, w0, 97); | |
143 | ||
144 | rkidx++; | |
145 | aria_gsrk(ctx->enc_key[rkidx], w0, w1, 109); | |
146 | } | |
147 | } | |
148 | } | |
149 | ||
150 | static void aria_set_decrypt_key(struct aria_ctx *ctx) | |
151 | { | |
152 | int i; | |
153 | ||
154 | for (i = 0; i < 4; i++) { | |
155 | ctx->dec_key[0][i] = ctx->enc_key[ctx->rounds][i]; | |
156 | ctx->dec_key[ctx->rounds][i] = ctx->enc_key[0][i]; | |
157 | } | |
158 | ||
159 | for (i = 1; i < ctx->rounds; i++) { | |
160 | ctx->dec_key[i][0] = aria_m(ctx->enc_key[ctx->rounds - i][0]); | |
161 | ctx->dec_key[i][1] = aria_m(ctx->enc_key[ctx->rounds - i][1]); | |
162 | ctx->dec_key[i][2] = aria_m(ctx->enc_key[ctx->rounds - i][2]); | |
163 | ctx->dec_key[i][3] = aria_m(ctx->enc_key[ctx->rounds - i][3]); | |
164 | ||
165 | aria_diff_word(&ctx->dec_key[i][0], &ctx->dec_key[i][1], | |
166 | &ctx->dec_key[i][2], &ctx->dec_key[i][3]); | |
167 | aria_diff_byte(&ctx->dec_key[i][1], | |
168 | &ctx->dec_key[i][2], &ctx->dec_key[i][3]); | |
169 | aria_diff_word(&ctx->dec_key[i][0], &ctx->dec_key[i][1], | |
170 | &ctx->dec_key[i][2], &ctx->dec_key[i][3]); | |
171 | } | |
172 | } | |
173 | ||
a9b0838d | 174 | int aria_set_key(struct crypto_tfm *tfm, const u8 *in_key, unsigned int key_len) |
e4e712bb TY |
175 | { |
176 | struct aria_ctx *ctx = crypto_tfm_ctx(tfm); | |
177 | ||
178 | if (key_len != 16 && key_len != 24 && key_len != 32) | |
179 | return -EINVAL; | |
180 | ||
35344cf3 TY |
181 | BUILD_BUG_ON(sizeof(ctx->enc_key) != 272); |
182 | BUILD_BUG_ON(sizeof(ctx->dec_key) != 272); | |
183 | BUILD_BUG_ON(sizeof(int) != sizeof(ctx->rounds)); | |
184 | ||
e4e712bb TY |
185 | ctx->key_length = key_len; |
186 | ctx->rounds = (key_len + 32) / 4; | |
187 | ||
188 | aria_set_encrypt_key(ctx, in_key, key_len); | |
189 | aria_set_decrypt_key(ctx); | |
190 | ||
191 | return 0; | |
192 | } | |
a9b0838d | 193 | EXPORT_SYMBOL_GPL(aria_set_key); |
e4e712bb TY |
194 | |
195 | static void __aria_crypt(struct aria_ctx *ctx, u8 *out, const u8 *in, | |
196 | u32 key[][ARIA_RD_KEY_WORDS]) | |
197 | { | |
198 | const __be32 *src = (const __be32 *)in; | |
199 | __be32 *dst = (__be32 *)out; | |
200 | u32 reg0, reg1, reg2, reg3; | |
201 | int rounds, rkidx = 0; | |
202 | ||
203 | rounds = ctx->rounds; | |
204 | ||
205 | reg0 = be32_to_cpu(src[0]); | |
206 | reg1 = be32_to_cpu(src[1]); | |
207 | reg2 = be32_to_cpu(src[2]); | |
208 | reg3 = be32_to_cpu(src[3]); | |
209 | ||
210 | aria_add_round_key(key[rkidx], ®0, ®1, ®2, ®3); | |
211 | rkidx++; | |
212 | ||
213 | aria_subst_diff_odd(®0, ®1, ®2, ®3); | |
214 | aria_add_round_key(key[rkidx], ®0, ®1, ®2, ®3); | |
215 | rkidx++; | |
216 | ||
217 | while ((rounds -= 2) > 0) { | |
218 | aria_subst_diff_even(®0, ®1, ®2, ®3); | |
219 | aria_add_round_key(key[rkidx], ®0, ®1, ®2, ®3); | |
220 | rkidx++; | |
221 | ||
222 | aria_subst_diff_odd(®0, ®1, ®2, ®3); | |
223 | aria_add_round_key(key[rkidx], ®0, ®1, ®2, ®3); | |
224 | rkidx++; | |
225 | } | |
226 | ||
227 | reg0 = key[rkidx][0] ^ make_u32((u8)(x1[get_u8(reg0, 0)]), | |
228 | (u8)(x2[get_u8(reg0, 1)] >> 8), | |
229 | (u8)(s1[get_u8(reg0, 2)]), | |
230 | (u8)(s2[get_u8(reg0, 3)])); | |
231 | reg1 = key[rkidx][1] ^ make_u32((u8)(x1[get_u8(reg1, 0)]), | |
232 | (u8)(x2[get_u8(reg1, 1)] >> 8), | |
233 | (u8)(s1[get_u8(reg1, 2)]), | |
234 | (u8)(s2[get_u8(reg1, 3)])); | |
235 | reg2 = key[rkidx][2] ^ make_u32((u8)(x1[get_u8(reg2, 0)]), | |
236 | (u8)(x2[get_u8(reg2, 1)] >> 8), | |
237 | (u8)(s1[get_u8(reg2, 2)]), | |
238 | (u8)(s2[get_u8(reg2, 3)])); | |
239 | reg3 = key[rkidx][3] ^ make_u32((u8)(x1[get_u8(reg3, 0)]), | |
240 | (u8)(x2[get_u8(reg3, 1)] >> 8), | |
241 | (u8)(s1[get_u8(reg3, 2)]), | |
242 | (u8)(s2[get_u8(reg3, 3)])); | |
243 | ||
244 | dst[0] = cpu_to_be32(reg0); | |
245 | dst[1] = cpu_to_be32(reg1); | |
246 | dst[2] = cpu_to_be32(reg2); | |
247 | dst[3] = cpu_to_be32(reg3); | |
248 | } | |
249 | ||
a9b0838d TY |
250 | void aria_encrypt(void *_ctx, u8 *out, const u8 *in) |
251 | { | |
252 | struct aria_ctx *ctx = (struct aria_ctx *)_ctx; | |
253 | ||
254 | __aria_crypt(ctx, out, in, ctx->enc_key); | |
255 | } | |
256 | EXPORT_SYMBOL_GPL(aria_encrypt); | |
257 | ||
258 | void aria_decrypt(void *_ctx, u8 *out, const u8 *in) | |
259 | { | |
260 | struct aria_ctx *ctx = (struct aria_ctx *)_ctx; | |
261 | ||
262 | __aria_crypt(ctx, out, in, ctx->dec_key); | |
263 | } | |
264 | EXPORT_SYMBOL_GPL(aria_decrypt); | |
265 | ||
266 | static void __aria_encrypt(struct crypto_tfm *tfm, u8 *out, const u8 *in) | |
e4e712bb TY |
267 | { |
268 | struct aria_ctx *ctx = crypto_tfm_ctx(tfm); | |
269 | ||
270 | __aria_crypt(ctx, out, in, ctx->enc_key); | |
271 | } | |
272 | ||
a9b0838d | 273 | static void __aria_decrypt(struct crypto_tfm *tfm, u8 *out, const u8 *in) |
e4e712bb TY |
274 | { |
275 | struct aria_ctx *ctx = crypto_tfm_ctx(tfm); | |
276 | ||
277 | __aria_crypt(ctx, out, in, ctx->dec_key); | |
278 | } | |
279 | ||
280 | static struct crypto_alg aria_alg = { | |
281 | .cra_name = "aria", | |
282 | .cra_driver_name = "aria-generic", | |
283 | .cra_priority = 100, | |
284 | .cra_flags = CRYPTO_ALG_TYPE_CIPHER, | |
285 | .cra_blocksize = ARIA_BLOCK_SIZE, | |
286 | .cra_ctxsize = sizeof(struct aria_ctx), | |
287 | .cra_alignmask = 3, | |
288 | .cra_module = THIS_MODULE, | |
289 | .cra_u = { | |
290 | .cipher = { | |
291 | .cia_min_keysize = ARIA_MIN_KEY_SIZE, | |
292 | .cia_max_keysize = ARIA_MAX_KEY_SIZE, | |
293 | .cia_setkey = aria_set_key, | |
a9b0838d TY |
294 | .cia_encrypt = __aria_encrypt, |
295 | .cia_decrypt = __aria_decrypt | |
e4e712bb TY |
296 | } |
297 | } | |
298 | }; | |
299 | ||
300 | static int __init aria_init(void) | |
301 | { | |
302 | return crypto_register_alg(&aria_alg); | |
303 | } | |
304 | ||
305 | static void __exit aria_fini(void) | |
306 | { | |
307 | crypto_unregister_alg(&aria_alg); | |
308 | } | |
309 | ||
310 | subsys_initcall(aria_init); | |
311 | module_exit(aria_fini); | |
312 | ||
313 | MODULE_DESCRIPTION("ARIA Cipher Algorithm"); | |
314 | MODULE_LICENSE("GPL"); | |
315 | MODULE_AUTHOR("Taehee Yoo <ap420073@gmail.com>"); | |
316 | MODULE_ALIAS_CRYPTO("aria"); | |
a9b0838d | 317 | MODULE_ALIAS_CRYPTO("aria-generic"); |