mirror of
https://github.com/cryb-to/cryb-to.git
synced 2024-11-24 06:35:45 +00:00
Implement double- and triple-DES.
Single-DES is now a special case of triple-DES with all three keys being the same. This is significantly slower than a pure single-DES implementation, but that's fine since nobody should be using it anyway.
This commit is contained in:
Dag-Erling Smørgrav
parent
0c06ab5330
commit
239ab3a471
2 changed files with 77 additions and 15 deletions
|
|
@ -40,7 +40,10 @@ CRYB_BEGIN
|
|||
|
||||
#define DES_BLOCK_LEN 8
|
||||
|
||||
#define des_cipher cryb_des_cipher
|
||||
#define des_cipher cryb_des56_cipher
|
||||
#define des56_cipher cryb_des56_cipher
|
||||
#define des112_cipher cryb_des112_cipher
|
||||
#define des268_cipher cryb_des168_cipher
|
||||
#define des_ctx cryb_des_ctx
|
||||
#define des_init cryb_des_init
|
||||
#define des_keystream cryb_des_keystream
|
||||
|
|
@ -51,7 +54,9 @@ CRYB_BEGIN
|
|||
extern cipher_algorithm des_cipher;
|
||||
|
||||
typedef struct {
|
||||
uint32_t sk[32];
|
||||
uint32_t sk1[32];
|
||||
uint32_t sk2[32];
|
||||
uint32_t sk3[32];
|
||||
} des_ctx;
|
||||
|
||||
void des_init(des_ctx *, cipher_mode mode, const uint8_t *, size_t);
|
||||
|
|
|
|||
|
|
@ -264,7 +264,7 @@ static const uint32_t rhs[16] = {
|
|||
} while (0)
|
||||
|
||||
static void
|
||||
des_setkey(uint32_t sk[32], const uint8_t key[8])
|
||||
des_setkey(cipher_mode mode, uint32_t sk[32], const uint8_t key[8])
|
||||
{
|
||||
uint32_t x, y, t;
|
||||
unsigned int i;
|
||||
|
|
@ -295,7 +295,7 @@ des_setkey(uint32_t sk[32], const uint8_t key[8])
|
|||
x = (x << 2 | x >> 26) & 0x0FFFFFFF;
|
||||
y = (y << 2 | y >> 26) & 0x0FFFFFFF;
|
||||
}
|
||||
*sk++ =
|
||||
sk[i * 2] =
|
||||
(x << 4 & 0x24000000) | (x << 28 & 0x10000000) |
|
||||
(x << 14 & 0x08000000) | (x << 18 & 0x02080000) |
|
||||
(x << 6 & 0x01000000) | (x << 9 & 0x00200000) |
|
||||
|
|
@ -307,7 +307,7 @@ des_setkey(uint32_t sk[32], const uint8_t key[8])
|
|||
(y >> 5 & 0x00000020) | (y >> 10 & 0x00000010) |
|
||||
(y >> 3 & 0x00000008) | (y >> 18 & 0x00000004) |
|
||||
(y >> 26 & 0x00000002) | (y >> 24 & 0x00000001);
|
||||
*sk++ =
|
||||
sk[i * 2 + 1] =
|
||||
(x << 15 & 0x20000000) | (x << 17 & 0x10000000) |
|
||||
(x << 10 & 0x08000000) | (x << 22 & 0x04000000) |
|
||||
(x >> 2 & 0x02000000) | (x << 1 & 0x01000000) |
|
||||
|
|
@ -320,6 +320,12 @@ des_setkey(uint32_t sk[32], const uint8_t key[8])
|
|||
(y >> 7 & 0x00000020) | (y >> 3 & 0x00000011) |
|
||||
(y << 2 & 0x00000004) | (y >> 21 & 0x00000002);
|
||||
}
|
||||
if (mode == CIPHER_MODE_DECRYPT) {
|
||||
for (i = 0; i < 16; i += 2) {
|
||||
SWAP(sk[i + 0], sk[30 - i]);
|
||||
SWAP(sk[i + 1], sk[31 - i]);
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
/*
|
||||
|
|
@ -331,10 +337,25 @@ des_crypt_ecb(des_ctx *ctx, const uint8_t input[8], uint8_t output[8])
|
|||
uint32_t x, y, t, *sk;
|
||||
unsigned int i;
|
||||
|
||||
sk = ctx->sk;
|
||||
|
||||
x = be32dec(input + 0);
|
||||
y = be32dec(input + 4);
|
||||
sk = ctx->sk1;
|
||||
DES_IP(x, y);
|
||||
for (i = 0; i < 8; ++i) {
|
||||
DES_ROUND(y, x);
|
||||
DES_ROUND(x, y);
|
||||
}
|
||||
DES_FP(y, x);
|
||||
SWAP(x, y);
|
||||
sk = ctx->sk2;
|
||||
DES_IP(x, y);
|
||||
for (i = 0; i < 8; ++i) {
|
||||
DES_ROUND(y, x);
|
||||
DES_ROUND(x, y);
|
||||
}
|
||||
DES_FP(y, x);
|
||||
SWAP(x, y);
|
||||
sk = ctx->sk3;
|
||||
DES_IP(x, y);
|
||||
for (i = 0; i < 8; ++i) {
|
||||
DES_ROUND(y, x);
|
||||
|
|
@ -348,15 +369,29 @@ des_crypt_ecb(des_ctx *ctx, const uint8_t input[8], uint8_t output[8])
|
|||
void
|
||||
des_init(des_ctx *ctx, cipher_mode mode, const uint8_t *key, size_t keylen)
|
||||
{
|
||||
unsigned int i;
|
||||
cipher_mode m1, m2, m3;
|
||||
|
||||
(void)keylen;
|
||||
des_setkey(ctx->sk, key);
|
||||
if (mode == CIPHER_MODE_DECRYPT) {
|
||||
for (i = 0; i < 16; i += 2) {
|
||||
SWAP(ctx->sk[i + 0], ctx->sk[30 - i]);
|
||||
SWAP(ctx->sk[i + 1], ctx->sk[31 - i]);
|
||||
}
|
||||
m1 = m3 = CIPHER_MODE_DECRYPT;
|
||||
m2 = CIPHER_MODE_ENCRYPT;
|
||||
} else {
|
||||
m1 = m3 = CIPHER_MODE_ENCRYPT;
|
||||
m2 = CIPHER_MODE_DECRYPT;
|
||||
}
|
||||
des_setkey(m1, ctx->sk1, key);
|
||||
switch (keylen) {
|
||||
case 24:
|
||||
des_setkey(m2, ctx->sk2, key + 8);
|
||||
des_setkey(m3, ctx->sk3, key + 16);
|
||||
break;
|
||||
case 16:
|
||||
des_setkey(m2, ctx->sk2, key + 8);
|
||||
des_setkey(m3, ctx->sk3, key);
|
||||
break;
|
||||
case 8:
|
||||
des_setkey(m2, ctx->sk2, key);
|
||||
des_setkey(m3, ctx->sk3, key);
|
||||
break;
|
||||
}
|
||||
}
|
||||
|
||||
|
|
@ -397,7 +432,7 @@ des_finish(des_ctx *ctx)
|
|||
memset_s(ctx, 0, sizeof *ctx, sizeof *ctx);
|
||||
}
|
||||
|
||||
cipher_algorithm des_cipher = {
|
||||
cipher_algorithm des56_cipher = {
|
||||
.name = "des",
|
||||
.contextlen = sizeof(des_ctx),
|
||||
.blocklen = DES_BLOCK_LEN,
|
||||
|
|
@ -407,3 +442,25 @@ cipher_algorithm des_cipher = {
|
|||
.decrypt = (cipher_decrypt_func)des_decrypt,
|
||||
.finish = (cipher_finish_func)des_finish,
|
||||
};
|
||||
|
||||
cipher_algorithm des112_cipher = {
|
||||
.name = "2des",
|
||||
.contextlen = sizeof(des_ctx),
|
||||
.blocklen = DES_BLOCK_LEN,
|
||||
.keylen = DES_BLOCK_LEN * 2,
|
||||
.init = (cipher_init_func)des_init,
|
||||
.encrypt = (cipher_encrypt_func)des_encrypt,
|
||||
.decrypt = (cipher_decrypt_func)des_decrypt,
|
||||
.finish = (cipher_finish_func)des_finish,
|
||||
};
|
||||
|
||||
cipher_algorithm des168_cipher = {
|
||||
.name = "3des",
|
||||
.contextlen = sizeof(des_ctx),
|
||||
.blocklen = DES_BLOCK_LEN,
|
||||
.keylen = DES_BLOCK_LEN * 3,
|
||||
.init = (cipher_init_func)des_init,
|
||||
.encrypt = (cipher_encrypt_func)des_encrypt,
|
||||
.decrypt = (cipher_decrypt_func)des_decrypt,
|
||||
.finish = (cipher_finish_func)des_finish,
|
||||
};
|
||||
|
|
|
|||
Loading…
Reference in a new issue