3 This file is part of the ARM-Crypto-Lib.
4 Copyright (C) 2006-2010 Daniel Otte (daniel.otte@rub.de)
6 This program is free software: you can redistribute it and/or modify
7 it under the terms of the GNU General Public License as published by
8 the Free Software Foundation, either version 3 of the License, or
9 (at your option) any later version.
11 This program is distributed in the hope that it will be useful,
12 but WITHOUT ANY WARRANTY; without even the implied warranty of
13 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
14 GNU General Public License for more details.
16 You should have received a copy of the GNU General Public License
17 along with this program. If not, see <http://www.gnu.org/licenses/>.
20 * a bitsliced implementation of the serpent cipher for avr microcontrollers
22 * email: daniel.otte@rub.de
27 #include <string.h> /* memset() */
30 #include "serpent-sboxes.h"
32 /******************************************************************************/
34 uint32_t rotl32(uint32_t a, uint8_t n){
35 return ((a<<n) | (a>>(32-n)));
39 uint32_t rotr32(uint32_t a, uint8_t n){
40 return ((a>>n) | (a<<(32-n)));
44 #define X0 (((uint32_t*)b)[0])
45 #define X1 (((uint32_t*)b)[1])
46 #define X2 (((uint32_t*)b)[2])
47 #define X3 (((uint32_t*)b)[3])
49 static void serpent_lt(uint8_t *b){
62 static void serpent_inv_lt(uint8_t *b){
75 #define GOLDEN_RATIO 0x9e3779b9l
77 static uint32_t serpent_gen_w(uint32_t * b, uint8_t i){
79 ret = b[0] ^ b[3] ^ b[5] ^ b[7] ^ GOLDEN_RATIO ^ (uint32_t)i;
80 ret = rotl32(ret, 11);
84 void serpent_init(const void* key, uint16_t keysize_b, serpent_ctx_t* ctx){
88 /* keysize is less than 256 bit, padding needed */
89 memset(buffer, 0, 32);
90 memcpy(buffer, key, (keysize_b+7)/8);
91 ((uint8_t*)buffer)[keysize_b/8] |= 1<<(keysize_b%8);
93 /* keysize is 256 bit */
94 memcpy((void*)buffer, key, 32);
98 ctx->k[i][j] = serpent_gen_w(buffer, i*4+j);
99 memmove(buffer, &(buffer[1]), 7*4); /* shift buffer one to the "left" */
100 buffer[7] = ctx->k[i][j];
104 sbox128(ctx->k[i],3-i);
108 void serpent_enc(void* buffer, const serpent_ctx_t* ctx){
111 memxor(buffer, ctx->k[i], 16);
113 serpent_lt((uint8_t*)buffer);
115 memxor(buffer, ctx->k[i], 16);
118 memxor(buffer, ctx->k[i], 16);
121 void serpent_dec(void* buffer, const serpent_ctx_t* ctx){
124 memxor(buffer, ctx->k[i], 16);
126 inv_sbox128(buffer, i);
127 memxor((uint8_t*)buffer, ctx->k[i], 16);
130 serpent_inv_lt(buffer);
131 inv_sbox128(buffer, i);
132 memxor(buffer, ctx->k[i], 16);