crypto/cast5_generic.c

   1 // SPDX-License-Identifier: GPL-2.0-or-later
   2 /* Kernel cryptographic api.
   3 * cast5.c - Cast5 cipher algorithm (rfc2144).
   4 *
   5 * Derived from GnuPG implementation of cast5.
   6 *
   7 * Major Changes.
   8 *       Complete conformance to rfc2144.
   9 *       Supports key size from 40 to 128 bits.
  10 *
  11 * Copyright (C) 1998, 1999, 2000, 2001 Free Software Foundation, Inc.
  12 * Copyright (C) 2003 Kartikey Mahendra Bhatt <kartik_me@hotmail.com>.
  13 */
  14
  15
  16 #include <asm/unaligned.h>
  17 #include <crypto/algapi.h>
  18 #include <linux/init.h>
  19 #include <linux/module.h>
  20 #include <linux/errno.h>
  21 #include <linux/string.h>
  22 #include <linux/types.h>
  23 #include <crypto/cast5.h>
  24
  25 static const u32 s5[256] = {
  26         0x7ec90c04, 0x2c6e74b9, 0x9b0e66df, 0xa6337911, 0xb86a7fff,
  27         0x1dd358f5, 0x44dd9d44, 0x1731167f,
  28         0x08fbf1fa, 0xe7f511cc, 0xd2051b00, 0x735aba00, 0x2ab722d8,
  29         0x386381cb, 0xacf6243a, 0x69befd7a,
  30         0xe6a2e77f, 0xf0c720cd, 0xc4494816, 0xccf5c180, 0x38851640,
  31         0x15b0a848, 0xe68b18cb, 0x4caadeff,
  32         0x5f480a01, 0x0412b2aa, 0x259814fc, 0x41d0efe2, 0x4e40b48d,
  33         0x248eb6fb, 0x8dba1cfe, 0x41a99b02,
  34         0x1a550a04, 0xba8f65cb, 0x7251f4e7, 0x95a51725, 0xc106ecd7,
  35         0x97a5980a, 0xc539b9aa, 0x4d79fe6a,
  36         0xf2f3f763, 0x68af8040, 0xed0c9e56, 0x11b4958b, 0xe1eb5a88,
  37         0x8709e6b0, 0xd7e07156, 0x4e29fea7,
  38         0x6366e52d, 0x02d1c000, 0xc4ac8e05, 0x9377f571, 0x0c05372a,
  39         0x578535f2, 0x2261be02, 0xd642a0c9,
  40         0xdf13a280, 0x74b55bd2, 0x682199c0, 0xd421e5ec, 0x53fb3ce8,
  41         0xc8adedb3, 0x28a87fc9, 0x3d959981,
  42         0x5c1ff900, 0xfe38d399, 0x0c4eff0b, 0x062407ea, 0xaa2f4fb1,
  43         0x4fb96976, 0x90c79505, 0xb0a8a774,
  44         0xef55a1ff, 0xe59ca2c2, 0xa6b62d27, 0xe66a4263, 0xdf65001f,
  45         0x0ec50966, 0xdfdd55bc, 0x29de0655,
  46         0x911e739a, 0x17af8975, 0x32c7911c, 0x89f89468, 0x0d01e980,
  47         0x524755f4, 0x03b63cc9, 0x0cc844b2,
  48         0xbcf3f0aa, 0x87ac36e9, 0xe53a7426, 0x01b3d82b, 0x1a9e7449,
  49         0x64ee2d7e, 0xcddbb1da, 0x01c94910,
  50         0xb868bf80, 0x0d26f3fd, 0x9342ede7, 0x04a5c284, 0x636737b6,
  51         0x50f5b616, 0xf24766e3, 0x8eca36c1,
  52         0x136e05db, 0xfef18391, 0xfb887a37, 0xd6e7f7d4, 0xc7fb7dc9,
  53         0x3063fcdf, 0xb6f589de, 0xec2941da,
  54         0x26e46695, 0xb7566419, 0xf654efc5, 0xd08d58b7, 0x48925401,
  55         0xc1bacb7f, 0xe5ff550f, 0xb6083049,
  56         0x5bb5d0e8, 0x87d72e5a, 0xab6a6ee1, 0x223a66ce, 0xc62bf3cd,
  57         0x9e0885f9, 0x68cb3e47, 0x086c010f,
  58         0xa21de820, 0xd18b69de, 0xf3f65777, 0xfa02c3f6, 0x407edac3,
  59         0xcbb3d550, 0x1793084d, 0xb0d70eba,
  60         0x0ab378d5, 0xd951fb0c, 0xded7da56, 0x4124bbe4, 0x94ca0b56,
  61         0x0f5755d1, 0xe0e1e56e, 0x6184b5be,
  62         0x580a249f, 0x94f74bc0, 0xe327888e, 0x9f7b5561, 0xc3dc0280,
  63         0x05687715, 0x646c6bd7, 0x44904db3,
  64         0x66b4f0a3, 0xc0f1648a, 0x697ed5af, 0x49e92ff6, 0x309e374f,
  65         0x2cb6356a, 0x85808573, 0x4991f840,
  66         0x76f0ae02, 0x083be84d, 0x28421c9a, 0x44489406, 0x736e4cb8,
  67         0xc1092910, 0x8bc95fc6, 0x7d869cf4,
  68         0x134f616f, 0x2e77118d, 0xb31b2be1, 0xaa90b472, 0x3ca5d717,
  69         0x7d161bba, 0x9cad9010, 0xaf462ba2,
  70         0x9fe459d2, 0x45d34559, 0xd9f2da13, 0xdbc65487, 0xf3e4f94e,
  71         0x176d486f, 0x097c13ea, 0x631da5c7,
  72         0x445f7382, 0x175683f4, 0xcdc66a97, 0x70be0288, 0xb3cdcf72,
  73         0x6e5dd2f3, 0x20936079, 0x459b80a5,
  74         0xbe60e2db, 0xa9c23101, 0xeba5315c, 0x224e42f2, 0x1c5c1572,
  75         0xf6721b2c, 0x1ad2fff3, 0x8c25404e,
  76         0x324ed72f, 0x4067b7fd, 0x0523138e, 0x5ca3bc78, 0xdc0fd66e,
  77         0x75922283, 0x784d6b17, 0x58ebb16e,
  78         0x44094f85, 0x3f481d87, 0xfcfeae7b, 0x77b5ff76, 0x8c2302bf,
  79         0xaaf47556, 0x5f46b02a, 0x2b092801,
  80         0x3d38f5f7, 0x0ca81f36, 0x52af4a8a, 0x66d5e7c0, 0xdf3b0874,
  81         0x95055110, 0x1b5ad7a8, 0xf61ed5ad,
  82         0x6cf6e479, 0x20758184, 0xd0cefa65, 0x88f7be58, 0x4a046826,
  83         0x0ff6f8f3, 0xa09c7f70, 0x5346aba0,
  84         0x5ce96c28, 0xe176eda3, 0x6bac307f, 0x376829d2, 0x85360fa9,
  85         0x17e3fe2a, 0x24b79767, 0xf5a96b20,
  86         0xd6cd2595, 0x68ff1ebf, 0x7555442c, 0xf19f06be, 0xf9e0659a,
  87         0xeeb9491d, 0x34010718, 0xbb30cab8,
  88         0xe822fe15, 0x88570983, 0x750e6249, 0xda627e55, 0x5e76ffa8,
  89         0xb1534546, 0x6d47de08, 0xefe9e7d4
  90 };
  91 static const u32 s6[256] = {
  92         0xf6fa8f9d, 0x2cac6ce1, 0x4ca34867, 0xe2337f7c, 0x95db08e7,
  93         0x016843b4, 0xeced5cbc, 0x325553ac,
  94         0xbf9f0960, 0xdfa1e2ed, 0x83f0579d, 0x63ed86b9, 0x1ab6a6b8,
  95         0xde5ebe39, 0xf38ff732, 0x8989b138,
  96         0x33f14961, 0xc01937bd, 0xf506c6da, 0xe4625e7e, 0xa308ea99,
  97         0x4e23e33c, 0x79cbd7cc, 0x48a14367,
  98         0xa3149619, 0xfec94bd5, 0xa114174a, 0xeaa01866, 0xa084db2d,
  99         0x09a8486f, 0xa888614a, 0x2900af98,
 100         0x01665991, 0xe1992863, 0xc8f30c60, 0x2e78ef3c, 0xd0d51932,
 101         0xcf0fec14, 0xf7ca07d2, 0xd0a82072,
 102         0xfd41197e, 0x9305a6b0, 0xe86be3da, 0x74bed3cd, 0x372da53c,
 103         0x4c7f4448, 0xdab5d440, 0x6dba0ec3,
 104         0x083919a7, 0x9fbaeed9, 0x49dbcfb0, 0x4e670c53, 0x5c3d9c01,
 105         0x64bdb941, 0x2c0e636a, 0xba7dd9cd,
 106         0xea6f7388, 0xe70bc762, 0x35f29adb, 0x5c4cdd8d, 0xf0d48d8c,
 107         0xb88153e2, 0x08a19866, 0x1ae2eac8,
 108         0x284caf89, 0xaa928223, 0x9334be53, 0x3b3a21bf, 0x16434be3,
 109         0x9aea3906, 0xefe8c36e, 0xf890cdd9,
 110         0x80226dae, 0xc340a4a3, 0xdf7e9c09, 0xa694a807, 0x5b7c5ecc,
 111         0x221db3a6, 0x9a69a02f, 0x68818a54,
 112         0xceb2296f, 0x53c0843a, 0xfe893655, 0x25bfe68a, 0xb4628abc,
 113         0xcf222ebf, 0x25ac6f48, 0xa9a99387,
 114         0x53bddb65, 0xe76ffbe7, 0xe967fd78, 0x0ba93563, 0x8e342bc1,
 115         0xe8a11be9, 0x4980740d, 0xc8087dfc,
 116         0x8de4bf99, 0xa11101a0, 0x7fd37975, 0xda5a26c0, 0xe81f994f,
 117         0x9528cd89, 0xfd339fed, 0xb87834bf,
 118         0x5f04456d, 0x22258698, 0xc9c4c83b, 0x2dc156be, 0x4f628daa,
 119         0x57f55ec5, 0xe2220abe, 0xd2916ebf,
 120         0x4ec75b95, 0x24f2c3c0, 0x42d15d99, 0xcd0d7fa0, 0x7b6e27ff,
 121         0xa8dc8af0, 0x7345c106, 0xf41e232f,
 122         0x35162386, 0xe6ea8926, 0x3333b094, 0x157ec6f2, 0x372b74af,
 123         0x692573e4, 0xe9a9d848, 0xf3160289,
 124         0x3a62ef1d, 0xa787e238, 0xf3a5f676, 0x74364853, 0x20951063,
 125         0x4576698d, 0xb6fad407, 0x592af950,
 126         0x36f73523, 0x4cfb6e87, 0x7da4cec0, 0x6c152daa, 0xcb0396a8,
 127         0xc50dfe5d, 0xfcd707ab, 0x0921c42f,
 128         0x89dff0bb, 0x5fe2be78, 0x448f4f33, 0x754613c9, 0x2b05d08d,
 129         0x48b9d585, 0xdc049441, 0xc8098f9b,
 130         0x7dede786, 0xc39a3373, 0x42410005, 0x6a091751, 0x0ef3c8a6,
 131         0x890072d6, 0x28207682, 0xa9a9f7be,
 132         0xbf32679d, 0xd45b5b75, 0xb353fd00, 0xcbb0e358, 0x830f220a,
 133         0x1f8fb214, 0xd372cf08, 0xcc3c4a13,
 134         0x8cf63166, 0x061c87be, 0x88c98f88, 0x6062e397, 0x47cf8e7a,
 135         0xb6c85283, 0x3cc2acfb, 0x3fc06976,
 136         0x4e8f0252, 0x64d8314d, 0xda3870e3, 0x1e665459, 0xc10908f0,
 137         0x513021a5, 0x6c5b68b7, 0x822f8aa0,
 138         0x3007cd3e, 0x74719eef, 0xdc872681, 0x073340d4, 0x7e432fd9,
 139         0x0c5ec241, 0x8809286c, 0xf592d891,
 140         0x08a930f6, 0x957ef305, 0xb7fbffbd, 0xc266e96f, 0x6fe4ac98,
 141         0xb173ecc0, 0xbc60b42a, 0x953498da,
 142         0xfba1ae12, 0x2d4bd736, 0x0f25faab, 0xa4f3fceb, 0xe2969123,
 143         0x257f0c3d, 0x9348af49, 0x361400bc,
 144         0xe8816f4a, 0x3814f200, 0xa3f94043, 0x9c7a54c2, 0xbc704f57,
 145         0xda41e7f9, 0xc25ad33a, 0x54f4a084,
 146         0xb17f5505, 0x59357cbe, 0xedbd15c8, 0x7f97c5ab, 0xba5ac7b5,
 147         0xb6f6deaf, 0x3a479c3a, 0x5302da25,
 148         0x653d7e6a, 0x54268d49, 0x51a477ea, 0x5017d55b, 0xd7d25d88,
 149         0x44136c76, 0x0404a8c8, 0xb8e5a121,
 150         0xb81a928a, 0x60ed5869, 0x97c55b96, 0xeaec991b, 0x29935913,
 151         0x01fdb7f1, 0x088e8dfa, 0x9ab6f6f5,
 152         0x3b4cbf9f, 0x4a5de3ab, 0xe6051d35, 0xa0e1d855, 0xd36b4cf1,
 153         0xf544edeb, 0xb0e93524, 0xbebb8fbd,
 154         0xa2d762cf, 0x49c92f54, 0x38b5f331, 0x7128a454, 0x48392905,
 155         0xa65b1db8, 0x851c97bd, 0xd675cf2f
 156 };
 157 static const u32 s7[256] = {
 158         0x85e04019, 0x332bf567, 0x662dbfff, 0xcfc65693, 0x2a8d7f6f,
 159         0xab9bc912, 0xde6008a1, 0x2028da1f,
 160         0x0227bce7, 0x4d642916, 0x18fac300, 0x50f18b82, 0x2cb2cb11,
 161         0xb232e75c, 0x4b3695f2, 0xb28707de,
 162         0xa05fbcf6, 0xcd4181e9, 0xe150210c, 0xe24ef1bd, 0xb168c381,
 163         0xfde4e789, 0x5c79b0d8, 0x1e8bfd43,
 164         0x4d495001, 0x38be4341, 0x913cee1d, 0x92a79c3f, 0x089766be,
 165         0xbaeeadf4, 0x1286becf, 0xb6eacb19,
 166         0x2660c200, 0x7565bde4, 0x64241f7a, 0x8248dca9, 0xc3b3ad66,
 167         0x28136086, 0x0bd8dfa8, 0x356d1cf2,
 168         0x107789be, 0xb3b2e9ce, 0x0502aa8f, 0x0bc0351e, 0x166bf52a,
 169         0xeb12ff82, 0xe3486911, 0xd34d7516,
 170         0x4e7b3aff, 0x5f43671b, 0x9cf6e037, 0x4981ac83, 0x334266ce,
 171         0x8c9341b7, 0xd0d854c0, 0xcb3a6c88,
 172         0x47bc2829, 0x4725ba37, 0xa66ad22b, 0x7ad61f1e, 0x0c5cbafa,
 173         0x4437f107, 0xb6e79962, 0x42d2d816,
 174         0x0a961288, 0xe1a5c06e, 0x13749e67, 0x72fc081a, 0xb1d139f7,
 175         0xf9583745, 0xcf19df58, 0xbec3f756,
 176         0xc06eba30, 0x07211b24, 0x45c28829, 0xc95e317f, 0xbc8ec511,
 177         0x38bc46e9, 0xc6e6fa14, 0xbae8584a,
 178         0xad4ebc46, 0x468f508b, 0x7829435f, 0xf124183b, 0x821dba9f,
 179         0xaff60ff4, 0xea2c4e6d, 0x16e39264,
 180         0x92544a8b, 0x009b4fc3, 0xaba68ced, 0x9ac96f78, 0x06a5b79a,
 181         0xb2856e6e, 0x1aec3ca9, 0xbe838688,
 182         0x0e0804e9, 0x55f1be56, 0xe7e5363b, 0xb3a1f25d, 0xf7debb85,
 183         0x61fe033c, 0x16746233, 0x3c034c28,
 184         0xda6d0c74, 0x79aac56c, 0x3ce4e1ad, 0x51f0c802, 0x98f8f35a,
 185         0x1626a49f, 0xeed82b29, 0x1d382fe3,
 186         0x0c4fb99a, 0xbb325778, 0x3ec6d97b, 0x6e77a6a9, 0xcb658b5c,
 187         0xd45230c7, 0x2bd1408b, 0x60c03eb7,
 188         0xb9068d78, 0xa33754f4, 0xf430c87d, 0xc8a71302, 0xb96d8c32,
 189         0xebd4e7be, 0xbe8b9d2d, 0x7979fb06,
 190         0xe7225308, 0x8b75cf77, 0x11ef8da4, 0xe083c858, 0x8d6b786f,
 191         0x5a6317a6, 0xfa5cf7a0, 0x5dda0033,
 192         0xf28ebfb0, 0xf5b9c310, 0xa0eac280, 0x08b9767a, 0xa3d9d2b0,
 193         0x79d34217, 0x021a718d, 0x9ac6336a,
 194         0x2711fd60, 0x438050e3, 0x069908a8, 0x3d7fedc4, 0x826d2bef,
 195         0x4eeb8476, 0x488dcf25, 0x36c9d566,
 196         0x28e74e41, 0xc2610aca, 0x3d49a9cf, 0xbae3b9df, 0xb65f8de6,
 197         0x92aeaf64, 0x3ac7d5e6, 0x9ea80509,
 198         0xf22b017d, 0xa4173f70, 0xdd1e16c3, 0x15e0d7f9, 0x50b1b887,
 199         0x2b9f4fd5, 0x625aba82, 0x6a017962,
 200         0x2ec01b9c, 0x15488aa9, 0xd716e740, 0x40055a2c, 0x93d29a22,
 201         0xe32dbf9a, 0x058745b9, 0x3453dc1e,
 202         0xd699296e, 0x496cff6f, 0x1c9f4986, 0xdfe2ed07, 0xb87242d1,
 203         0x19de7eae, 0x053e561a, 0x15ad6f8c,
 204         0x66626c1c, 0x7154c24c, 0xea082b2a, 0x93eb2939, 0x17dcb0f0,
 205         0x58d4f2ae, 0x9ea294fb, 0x52cf564c,
 206         0x9883fe66, 0x2ec40581, 0x763953c3, 0x01d6692e, 0xd3a0c108,
 207         0xa1e7160e, 0xe4f2dfa6, 0x693ed285,
 208         0x74904698, 0x4c2b0edd, 0x4f757656, 0x5d393378, 0xa132234f,
 209         0x3d321c5d, 0xc3f5e194, 0x4b269301,
 210         0xc79f022f, 0x3c997e7e, 0x5e4f9504, 0x3ffafbbd, 0x76f7ad0e,
 211         0x296693f4, 0x3d1fce6f, 0xc61e45be,
 212         0xd3b5ab34, 0xf72bf9b7, 0x1b0434c0, 0x4e72b567, 0x5592a33d,
 213         0xb5229301, 0xcfd2a87f, 0x60aeb767,
 214         0x1814386b, 0x30bcc33d, 0x38a0c07d, 0xfd1606f2, 0xc363519b,
 215         0x589dd390, 0x5479f8e6, 0x1cb8d647,
 216         0x97fd61a9, 0xea7759f4, 0x2d57539d, 0x569a58cf, 0xe84e63ad,
 217         0x462e1b78, 0x6580f87e, 0xf3817914,
 218         0x91da55f4, 0x40a230f3, 0xd1988f35, 0xb6e318d2, 0x3ffa50bc,
 219         0x3d40f021, 0xc3c0bdae, 0x4958c24c,
 220         0x518f36b2, 0x84b1d370, 0x0fedce83, 0x878ddada, 0xf2a279c7,
 221         0x94e01be8, 0x90716f4b, 0x954b8aa3
 222 };
 223 static const u32 sb8[256] = {
 224         0xe216300d, 0xbbddfffc, 0xa7ebdabd, 0x35648095, 0x7789f8b7,
 225         0xe6c1121b, 0x0e241600, 0x052ce8b5,
 226         0x11a9cfb0, 0xe5952f11, 0xece7990a, 0x9386d174, 0x2a42931c,
 227         0x76e38111, 0xb12def3a, 0x37ddddfc,
 228         0xde9adeb1, 0x0a0cc32c, 0xbe197029, 0x84a00940, 0xbb243a0f,
 229         0xb4d137cf, 0xb44e79f0, 0x049eedfd,
 230         0x0b15a15d, 0x480d3168, 0x8bbbde5a, 0x669ded42, 0xc7ece831,
 231         0x3f8f95e7, 0x72df191b, 0x7580330d,
 232         0x94074251, 0x5c7dcdfa, 0xabbe6d63, 0xaa402164, 0xb301d40a,
 233         0x02e7d1ca, 0x53571dae, 0x7a3182a2,
 234         0x12a8ddec, 0xfdaa335d, 0x176f43e8, 0x71fb46d4, 0x38129022,
 235         0xce949ad4, 0xb84769ad, 0x965bd862,
 236         0x82f3d055, 0x66fb9767, 0x15b80b4e, 0x1d5b47a0, 0x4cfde06f,
 237         0xc28ec4b8, 0x57e8726e, 0x647a78fc,
 238         0x99865d44, 0x608bd593, 0x6c200e03, 0x39dc5ff6, 0x5d0b00a3,
 239         0xae63aff2, 0x7e8bd632, 0x70108c0c,
 240         0xbbd35049, 0x2998df04, 0x980cf42a, 0x9b6df491, 0x9e7edd53,
 241         0x06918548, 0x58cb7e07, 0x3b74ef2e,
 242         0x522fffb1, 0xd24708cc, 0x1c7e27cd, 0xa4eb215b, 0x3cf1d2e2,
 243         0x19b47a38, 0x424f7618, 0x35856039,
 244         0x9d17dee7, 0x27eb35e6, 0xc9aff67b, 0x36baf5b8, 0x09c467cd,
 245         0xc18910b1, 0xe11dbf7b, 0x06cd1af8,
 246         0x7170c608, 0x2d5e3354, 0xd4de495a, 0x64c6d006, 0xbcc0c62c,
 247         0x3dd00db3, 0x708f8f34, 0x77d51b42,
 248         0x264f620f, 0x24b8d2bf, 0x15c1b79e, 0x46a52564, 0xf8d7e54e,
 249         0x3e378160, 0x7895cda5, 0x859c15a5,
 250         0xe6459788, 0xc37bc75f, 0xdb07ba0c, 0x0676a3ab, 0x7f229b1e,
 251         0x31842e7b, 0x24259fd7, 0xf8bef472,
 252         0x835ffcb8, 0x6df4c1f2, 0x96f5b195, 0xfd0af0fc, 0xb0fe134c,
 253         0xe2506d3d, 0x4f9b12ea, 0xf215f225,
 254         0xa223736f, 0x9fb4c428, 0x25d04979, 0x34c713f8, 0xc4618187,
 255         0xea7a6e98, 0x7cd16efc, 0x1436876c,
 256         0xf1544107, 0xbedeee14, 0x56e9af27, 0xa04aa441, 0x3cf7c899,
 257         0x92ecbae6, 0xdd67016d, 0x151682eb,
 258         0xa842eedf, 0xfdba60b4, 0xf1907b75, 0x20e3030f, 0x24d8c29e,
 259         0xe139673b, 0xefa63fb8, 0x71873054,
 260         0xb6f2cf3b, 0x9f326442, 0xcb15a4cc, 0xb01a4504, 0xf1e47d8d,
 261         0x844a1be5, 0xbae7dfdc, 0x42cbda70,
 262         0xcd7dae0a, 0x57e85b7a, 0xd53f5af6, 0x20cf4d8c, 0xcea4d428,
 263         0x79d130a4, 0x3486ebfb, 0x33d3cddc,
 264         0x77853b53, 0x37effcb5, 0xc5068778, 0xe580b3e6, 0x4e68b8f4,
 265         0xc5c8b37e, 0x0d809ea2, 0x398feb7c,
 266         0x132a4f94, 0x43b7950e, 0x2fee7d1c, 0x223613bd, 0xdd06caa2,
 267         0x37df932b, 0xc4248289, 0xacf3ebc3,
 268         0x5715f6b7, 0xef3478dd, 0xf267616f, 0xc148cbe4, 0x9052815e,
 269         0x5e410fab, 0xb48a2465, 0x2eda7fa4,
 270         0xe87b40e4, 0xe98ea084, 0x5889e9e1, 0xefd390fc, 0xdd07d35b,
 271         0xdb485694, 0x38d7e5b2, 0x57720101,
 272         0x730edebc, 0x5b643113, 0x94917e4f, 0x503c2fba, 0x646f1282,
 273         0x7523d24a, 0xe0779695, 0xf9c17a8f,
 274         0x7a5b2121, 0xd187b896, 0x29263a4d, 0xba510cdf, 0x81f47c9f,
 275         0xad1163ed, 0xea7b5965, 0x1a00726e,
 276         0x11403092, 0x00da6d77, 0x4a0cdd61, 0xad1f4603, 0x605bdfb0,
 277         0x9eedc364, 0x22ebe6a8, 0xcee7d28a,
 278         0xa0e736a0, 0x5564a6b9, 0x10853209, 0xc7eb8f37, 0x2de705ca,
 279         0x8951570f, 0xdf09822b, 0xbd691a6c,
 280         0xaa12e4f2, 0x87451c0f, 0xe0f6a27a, 0x3ada4819, 0x4cf1764f,
 281         0x0d771c2b, 0x67cdb156, 0x350d8384,
 282         0x5938fa0f, 0x42399ef3, 0x36997b07, 0x0e84093d, 0x4aa93e61,
 283         0x8360d87b, 0x1fa98b0c, 0x1149382c,
 284         0xe97625a5, 0x0614d1b7, 0x0e25244b, 0x0c768347, 0x589e8d82,
 285         0x0d2059d1, 0xa466bb1e, 0xf8da0a82,
 286         0x04f19130, 0xba6e4ec0, 0x99265164, 0x1ee7230d, 0x50b2ad80,
 287         0xeaee6801, 0x8db2a283, 0xea8bf59e
 288 };
 289
 290 #define s1 cast_s1
 291 #define s2 cast_s2
 292 #define s3 cast_s3
 293 #define s4 cast_s4
 294
 295 #define F1(D, m, r)  ((I = ((m) + (D))), (I = rol32(I, (r))),   \
 296         (((s1[I >> 24] ^ s2[(I>>16)&0xff]) - s3[(I>>8)&0xff]) + s4[I&0xff]))
 297 #define F2(D, m, r)  ((I = ((m) ^ (D))), (I = rol32(I, (r))),   \
 298         (((s1[I >> 24] - s2[(I>>16)&0xff]) + s3[(I>>8)&0xff]) ^ s4[I&0xff]))
 299 #define F3(D, m, r)  ((I = ((m) - (D))), (I = rol32(I, (r))),   \
 300         (((s1[I >> 24] + s2[(I>>16)&0xff]) ^ s3[(I>>8)&0xff]) - s4[I&0xff]))
 301
 302
 303 void __cast5_encrypt(struct cast5_ctx *c, u8 *outbuf, const u8 *inbuf)
 304 {
 305         u32 l, r, t;
 306         u32 I;                  /* used by the Fx macros */
 307         u32 *Km;
 308         u8 *Kr;
 309
 310         Km = c->Km;
 311         Kr = c->Kr;
 312
 313         /* (L0,R0) <-- (m1...m64).  (Split the plaintext into left and
 314          * right 32-bit halves L0 = m1...m32 and R0 = m33...m64.)
 315          */
 316         l = get_unaligned_be32(inbuf);
 317         r = get_unaligned_be32(inbuf + 4);
 318
 319         /* (16 rounds) for i from 1 to 16, compute Li and Ri as follows:
 320          *  Li = Ri-1;
 321          *  Ri = Li-1 ^ f(Ri-1,Kmi,Kri), where f is defined in Section 2.2
 322          * Rounds 1, 4, 7, 10, 13, and 16 use f function Type 1.
 323          * Rounds 2, 5, 8, 11, and 14 use f function Type 2.
 324          * Rounds 3, 6, 9, 12, and 15 use f function Type 3.
 325          */
 326
 327         t = l; l = r; r = t ^ F1(r, Km[0], Kr[0]);
 328         t = l; l = r; r = t ^ F2(r, Km[1], Kr[1]);
 329         t = l; l = r; r = t ^ F3(r, Km[2], Kr[2]);
 330         t = l; l = r; r = t ^ F1(r, Km[3], Kr[3]);
 331         t = l; l = r; r = t ^ F2(r, Km[4], Kr[4]);
 332         t = l; l = r; r = t ^ F3(r, Km[5], Kr[5]);
 333         t = l; l = r; r = t ^ F1(r, Km[6], Kr[6]);
 334         t = l; l = r; r = t ^ F2(r, Km[7], Kr[7]);
 335         t = l; l = r; r = t ^ F3(r, Km[8], Kr[8]);
 336         t = l; l = r; r = t ^ F1(r, Km[9], Kr[9]);
 337         t = l; l = r; r = t ^ F2(r, Km[10], Kr[10]);
 338         t = l; l = r; r = t ^ F3(r, Km[11], Kr[11]);
 339         if (!(c->rr)) {
 340                 t = l; l = r; r = t ^ F1(r, Km[12], Kr[12]);
 341                 t = l; l = r; r = t ^ F2(r, Km[13], Kr[13]);
 342                 t = l; l = r; r = t ^ F3(r, Km[14], Kr[14]);
 343                 t = l; l = r; r = t ^ F1(r, Km[15], Kr[15]);
 344         }
 345
 346         /* c1...c64 <-- (R16,L16).  (Exchange final blocks L16, R16 and
 347          *  concatenate to form the ciphertext.) */
 348         put_unaligned_be32(r, outbuf);
 349         put_unaligned_be32(l, outbuf + 4);
 350 }
 351 EXPORT_SYMBOL_GPL(__cast5_encrypt);
 352
 353 static void cast5_encrypt(struct crypto_tfm *tfm, u8 *outbuf, const u8 *inbuf)
 354 {
 355         __cast5_encrypt(crypto_tfm_ctx(tfm), outbuf, inbuf);
 356 }
 357
 358 void __cast5_decrypt(struct cast5_ctx *c, u8 *outbuf, const u8 *inbuf)
 359 {
 360         u32 l, r, t;
 361         u32 I;
 362         u32 *Km;
 363         u8 *Kr;
 364
 365         Km = c->Km;
 366         Kr = c->Kr;
 367
 368         l = get_unaligned_be32(inbuf);
 369         r = get_unaligned_be32(inbuf + 4);
 370
 371         if (!(c->rr)) {
 372                 t = l; l = r; r = t ^ F1(r, Km[15], Kr[15]);
 373                 t = l; l = r; r = t ^ F3(r, Km[14], Kr[14]);
 374                 t = l; l = r; r = t ^ F2(r, Km[13], Kr[13]);
 375                 t = l; l = r; r = t ^ F1(r, Km[12], Kr[12]);
 376         }
 377         t = l; l = r; r = t ^ F3(r, Km[11], Kr[11]);
 378         t = l; l = r; r = t ^ F2(r, Km[10], Kr[10]);
 379         t = l; l = r; r = t ^ F1(r, Km[9], Kr[9]);
 380         t = l; l = r; r = t ^ F3(r, Km[8], Kr[8]);
 381         t = l; l = r; r = t ^ F2(r, Km[7], Kr[7]);
 382         t = l; l = r; r = t ^ F1(r, Km[6], Kr[6]);
 383         t = l; l = r; r = t ^ F3(r, Km[5], Kr[5]);
 384         t = l; l = r; r = t ^ F2(r, Km[4], Kr[4]);
 385         t = l; l = r; r = t ^ F1(r, Km[3], Kr[3]);
 386         t = l; l = r; r = t ^ F3(r, Km[2], Kr[2]);
 387         t = l; l = r; r = t ^ F2(r, Km[1], Kr[1]);
 388         t = l; l = r; r = t ^ F1(r, Km[0], Kr[0]);
 389
 390         put_unaligned_be32(r, outbuf);
 391         put_unaligned_be32(l, outbuf + 4);
 392 }
 393 EXPORT_SYMBOL_GPL(__cast5_decrypt);
 394
 395 static void cast5_decrypt(struct crypto_tfm *tfm, u8 *outbuf, const u8 *inbuf)
 396 {
 397         __cast5_decrypt(crypto_tfm_ctx(tfm), outbuf, inbuf);
 398 }
 399
 400 static void key_schedule(u32 *x, u32 *z, u32 *k)
 401 {
 402
 403 #define xi(i)   ((x[(i)/4] >> (8*(3-((i)%4)))) & 0xff)
 404 #define zi(i)   ((z[(i)/4] >> (8*(3-((i)%4)))) & 0xff)
 405
 406         z[0] = x[0] ^ s5[xi(13)] ^ s6[xi(15)] ^ s7[xi(12)] ^ sb8[xi(14)] ^
 407             s7[xi(8)];
 408         z[1] = x[2] ^ s5[zi(0)] ^ s6[zi(2)] ^ s7[zi(1)] ^ sb8[zi(3)] ^
 409             sb8[xi(10)];
 410         z[2] = x[3] ^ s5[zi(7)] ^ s6[zi(6)] ^ s7[zi(5)] ^ sb8[zi(4)] ^
 411             s5[xi(9)];
 412         z[3] = x[1] ^ s5[zi(10)] ^ s6[zi(9)] ^ s7[zi(11)] ^ sb8[zi(8)] ^
 413             s6[xi(11)];
 414         k[0] = s5[zi(8)] ^ s6[zi(9)] ^ s7[zi(7)] ^ sb8[zi(6)] ^ s5[zi(2)];
 415         k[1] = s5[zi(10)] ^ s6[zi(11)] ^ s7[zi(5)] ^ sb8[zi(4)] ^
 416             s6[zi(6)];
 417         k[2] = s5[zi(12)] ^ s6[zi(13)] ^ s7[zi(3)] ^ sb8[zi(2)] ^
 418             s7[zi(9)];
 419         k[3] = s5[zi(14)] ^ s6[zi(15)] ^ s7[zi(1)] ^ sb8[zi(0)] ^
 420             sb8[zi(12)];
 421
 422         x[0] = z[2] ^ s5[zi(5)] ^ s6[zi(7)] ^ s7[zi(4)] ^ sb8[zi(6)] ^
 423             s7[zi(0)];
 424         x[1] = z[0] ^ s5[xi(0)] ^ s6[xi(2)] ^ s7[xi(1)] ^ sb8[xi(3)] ^
 425             sb8[zi(2)];
 426         x[2] = z[1] ^ s5[xi(7)] ^ s6[xi(6)] ^ s7[xi(5)] ^ sb8[xi(4)] ^
 427             s5[zi(1)];
 428         x[3] = z[3] ^ s5[xi(10)] ^ s6[xi(9)] ^ s7[xi(11)] ^ sb8[xi(8)] ^
 429             s6[zi(3)];
 430         k[4] = s5[xi(3)] ^ s6[xi(2)] ^ s7[xi(12)] ^ sb8[xi(13)] ^
 431             s5[xi(8)];
 432         k[5] = s5[xi(1)] ^ s6[xi(0)] ^ s7[xi(14)] ^ sb8[xi(15)] ^
 433             s6[xi(13)];
 434         k[6] = s5[xi(7)] ^ s6[xi(6)] ^ s7[xi(8)] ^ sb8[xi(9)] ^ s7[xi(3)];
 435         k[7] = s5[xi(5)] ^ s6[xi(4)] ^ s7[xi(10)] ^ sb8[xi(11)] ^
 436             sb8[xi(7)];
 437
 438         z[0] = x[0] ^ s5[xi(13)] ^ s6[xi(15)] ^ s7[xi(12)] ^ sb8[xi(14)] ^
 439             s7[xi(8)];
 440         z[1] = x[2] ^ s5[zi(0)] ^ s6[zi(2)] ^ s7[zi(1)] ^ sb8[zi(3)] ^
 441             sb8[xi(10)];
 442         z[2] = x[3] ^ s5[zi(7)] ^ s6[zi(6)] ^ s7[zi(5)] ^ sb8[zi(4)] ^
 443             s5[xi(9)];
 444         z[3] = x[1] ^ s5[zi(10)] ^ s6[zi(9)] ^ s7[zi(11)] ^ sb8[zi(8)] ^
 445             s6[xi(11)];
 446         k[8] = s5[zi(3)] ^ s6[zi(2)] ^ s7[zi(12)] ^ sb8[zi(13)] ^
 447             s5[zi(9)];
 448         k[9] = s5[zi(1)] ^ s6[zi(0)] ^ s7[zi(14)] ^ sb8[zi(15)] ^
 449             s6[zi(12)];
 450         k[10] = s5[zi(7)] ^ s6[zi(6)] ^ s7[zi(8)] ^ sb8[zi(9)] ^ s7[zi(2)];
 451         k[11] = s5[zi(5)] ^ s6[zi(4)] ^ s7[zi(10)] ^ sb8[zi(11)] ^
 452             sb8[zi(6)];
 453
 454         x[0] = z[2] ^ s5[zi(5)] ^ s6[zi(7)] ^ s7[zi(4)] ^ sb8[zi(6)] ^
 455             s7[zi(0)];
 456         x[1] = z[0] ^ s5[xi(0)] ^ s6[xi(2)] ^ s7[xi(1)] ^ sb8[xi(3)] ^
 457             sb8[zi(2)];
 458         x[2] = z[1] ^ s5[xi(7)] ^ s6[xi(6)] ^ s7[xi(5)] ^ sb8[xi(4)] ^
 459             s5[zi(1)];
 460         x[3] = z[3] ^ s5[xi(10)] ^ s6[xi(9)] ^ s7[xi(11)] ^ sb8[xi(8)] ^
 461             s6[zi(3)];
 462         k[12] = s5[xi(8)] ^ s6[xi(9)] ^ s7[xi(7)] ^ sb8[xi(6)] ^ s5[xi(3)];
 463         k[13] = s5[xi(10)] ^ s6[xi(11)] ^ s7[xi(5)] ^ sb8[xi(4)] ^
 464             s6[xi(7)];
 465         k[14] = s5[xi(12)] ^ s6[xi(13)] ^ s7[xi(3)] ^ sb8[xi(2)] ^
 466             s7[xi(8)];
 467         k[15] = s5[xi(14)] ^ s6[xi(15)] ^ s7[xi(1)] ^ sb8[xi(0)] ^
 468             sb8[xi(13)];
 469
 470 #undef xi
 471 #undef zi
 472 }
 473
 474
 475 int cast5_setkey(struct crypto_tfm *tfm, const u8 *key, unsigned int key_len)
 476 {
 477         struct cast5_ctx *c = crypto_tfm_ctx(tfm);
 478         int i;
 479         u32 x[4];
 480         u32 z[4];
 481         u32 k[16];
 482         __be32 p_key[4];
 483
 484         c->rr = key_len <= 10 ? 1 : 0;
 485
 486         memset(p_key, 0, 16);
 487         memcpy(p_key, key, key_len);
 488
 489
 490         x[0] = be32_to_cpu(p_key[0]);
 491         x[1] = be32_to_cpu(p_key[1]);
 492         x[2] = be32_to_cpu(p_key[2]);
 493         x[3] = be32_to_cpu(p_key[3]);
 494
 495         key_schedule(x, z, k);
 496         for (i = 0; i < 16; i++)
 497                 c->Km[i] = k[i];
 498         key_schedule(x, z, k);
 499         for (i = 0; i < 16; i++)
 500                 c->Kr[i] = k[i] & 0x1f;
 501         return 0;
 502 }
 503 EXPORT_SYMBOL_GPL(cast5_setkey);
 504
 505 static struct crypto_alg alg = {
 506         .cra_name               = "cast5",
 507         .cra_driver_name        = "cast5-generic",
 508         .cra_priority           = 100,
 509         .cra_flags              = CRYPTO_ALG_TYPE_CIPHER,
 510         .cra_blocksize          = CAST5_BLOCK_SIZE,
 511         .cra_ctxsize            = sizeof(struct cast5_ctx),
 512         .cra_module             = THIS_MODULE,
 513         .cra_u                  = {
 514                 .cipher = {
 515                         .cia_min_keysize = CAST5_MIN_KEY_SIZE,
 516                         .cia_max_keysize = CAST5_MAX_KEY_SIZE,
 517                         .cia_setkey  = cast5_setkey,
 518                         .cia_encrypt = cast5_encrypt,
 519                         .cia_decrypt = cast5_decrypt
 520                 }
 521         }
 522 };
 523
 524 static int __init cast5_mod_init(void)
 525 {
 526         return crypto_register_alg(&alg);
 527 }
 528
 529 static void __exit cast5_mod_fini(void)
 530 {
 531         crypto_unregister_alg(&alg);
 532 }
 533
 534 subsys_initcall(cast5_mod_init);
 535 module_exit(cast5_mod_fini);
 536
 537 MODULE_LICENSE("GPL");
 538 MODULE_DESCRIPTION("Cast5 Cipher Algorithm");
 539 MODULE_ALIAS_CRYPTO("cast5");
 540 MODULE_ALIAS_CRYPTO("cast5-generic");