crypto/seed.c

   1 // SPDX-License-Identifier: GPL-2.0-or-later
   2 /*
   3  * Cryptographic API.
   4  *
   5  * SEED Cipher Algorithm.
   6  *
   7  * Documentation of SEED can be found in RFC 4269.
   8  * Copyright (C) 2007 Korea Information Security Agency (KISA).
   9  */
  10
  11 #include <crypto/algapi.h>
  12 #include <linux/module.h>
  13 #include <linux/init.h>
  14 #include <linux/types.h>
  15 #include <linux/errno.h>
  16 #include <asm/byteorder.h>
  17
  18 #define SEED_NUM_KCONSTANTS     16
  19 #define SEED_KEY_SIZE           16
  20 #define SEED_BLOCK_SIZE         16
  21 #define SEED_KEYSCHED_LEN       32
  22
  23 /*
  24  * #define byte(x, nr) ((unsigned char)((x) >> (nr*8)))
  25  */
  26 static inline u8
  27 byte(const u32 x, const unsigned n)
  28 {
  29         return x >> (n << 3);
  30 }
  31
  32 struct seed_ctx {
  33         u32 keysched[SEED_KEYSCHED_LEN];
  34 };
  35
  36 static const u32 SS0[256] = {
  37         0x2989a1a8, 0x05858184, 0x16c6d2d4, 0x13c3d3d0,
  38         0x14445054, 0x1d0d111c, 0x2c8ca0ac, 0x25052124,
  39         0x1d4d515c, 0x03434340, 0x18081018, 0x1e0e121c,
  40         0x11415150, 0x3cccf0fc, 0x0acac2c8, 0x23436360,
  41         0x28082028, 0x04444044, 0x20002020, 0x1d8d919c,
  42         0x20c0e0e0, 0x22c2e2e0, 0x08c8c0c8, 0x17071314,
  43         0x2585a1a4, 0x0f8f838c, 0x03030300, 0x3b4b7378,
  44         0x3b8bb3b8, 0x13031310, 0x12c2d2d0, 0x2ecee2ec,
  45         0x30407070, 0x0c8c808c, 0x3f0f333c, 0x2888a0a8,
  46         0x32023230, 0x1dcdd1dc, 0x36c6f2f4, 0x34447074,
  47         0x2ccce0ec, 0x15859194, 0x0b0b0308, 0x17475354,
  48         0x1c4c505c, 0x1b4b5358, 0x3d8db1bc, 0x01010100,
  49         0x24042024, 0x1c0c101c, 0x33437370, 0x18889098,
  50         0x10001010, 0x0cccc0cc, 0x32c2f2f0, 0x19c9d1d8,
  51         0x2c0c202c, 0x27c7e3e4, 0x32427270, 0x03838380,
  52         0x1b8b9398, 0x11c1d1d0, 0x06868284, 0x09c9c1c8,
  53         0x20406060, 0x10405050, 0x2383a3a0, 0x2bcbe3e8,
  54         0x0d0d010c, 0x3686b2b4, 0x1e8e929c, 0x0f4f434c,
  55         0x3787b3b4, 0x1a4a5258, 0x06c6c2c4, 0x38487078,
  56         0x2686a2a4, 0x12021210, 0x2f8fa3ac, 0x15c5d1d4,
  57         0x21416160, 0x03c3c3c0, 0x3484b0b4, 0x01414140,
  58         0x12425250, 0x3d4d717c, 0x0d8d818c, 0x08080008,
  59         0x1f0f131c, 0x19899198, 0x00000000, 0x19091118,
  60         0x04040004, 0x13435350, 0x37c7f3f4, 0x21c1e1e0,
  61         0x3dcdf1fc, 0x36467274, 0x2f0f232c, 0x27072324,
  62         0x3080b0b0, 0x0b8b8388, 0x0e0e020c, 0x2b8ba3a8,
  63         0x2282a2a0, 0x2e4e626c, 0x13839390, 0x0d4d414c,
  64         0x29496168, 0x3c4c707c, 0x09090108, 0x0a0a0208,
  65         0x3f8fb3bc, 0x2fcfe3ec, 0x33c3f3f0, 0x05c5c1c4,
  66         0x07878384, 0x14041014, 0x3ecef2fc, 0x24446064,
  67         0x1eced2dc, 0x2e0e222c, 0x0b4b4348, 0x1a0a1218,
  68         0x06060204, 0x21012120, 0x2b4b6368, 0x26466264,
  69         0x02020200, 0x35c5f1f4, 0x12829290, 0x0a8a8288,
  70         0x0c0c000c, 0x3383b3b0, 0x3e4e727c, 0x10c0d0d0,
  71         0x3a4a7278, 0x07474344, 0x16869294, 0x25c5e1e4,
  72         0x26062224, 0x00808080, 0x2d8da1ac, 0x1fcfd3dc,
  73         0x2181a1a0, 0x30003030, 0x37073334, 0x2e8ea2ac,
  74         0x36063234, 0x15051114, 0x22022220, 0x38083038,
  75         0x34c4f0f4, 0x2787a3a4, 0x05454144, 0x0c4c404c,
  76         0x01818180, 0x29c9e1e8, 0x04848084, 0x17879394,
  77         0x35053134, 0x0bcbc3c8, 0x0ecec2cc, 0x3c0c303c,
  78         0x31417170, 0x11011110, 0x07c7c3c4, 0x09898188,
  79         0x35457174, 0x3bcbf3f8, 0x1acad2d8, 0x38c8f0f8,
  80         0x14849094, 0x19495158, 0x02828280, 0x04c4c0c4,
  81         0x3fcff3fc, 0x09494148, 0x39093138, 0x27476364,
  82         0x00c0c0c0, 0x0fcfc3cc, 0x17c7d3d4, 0x3888b0b8,
  83         0x0f0f030c, 0x0e8e828c, 0x02424240, 0x23032320,
  84         0x11819190, 0x2c4c606c, 0x1bcbd3d8, 0x2484a0a4,
  85         0x34043034, 0x31c1f1f0, 0x08484048, 0x02c2c2c0,
  86         0x2f4f636c, 0x3d0d313c, 0x2d0d212c, 0x00404040,
  87         0x3e8eb2bc, 0x3e0e323c, 0x3c8cb0bc, 0x01c1c1c0,
  88         0x2a8aa2a8, 0x3a8ab2b8, 0x0e4e424c, 0x15455154,
  89         0x3b0b3338, 0x1cccd0dc, 0x28486068, 0x3f4f737c,
  90         0x1c8c909c, 0x18c8d0d8, 0x0a4a4248, 0x16465254,
  91         0x37477374, 0x2080a0a0, 0x2dcde1ec, 0x06464244,
  92         0x3585b1b4, 0x2b0b2328, 0x25456164, 0x3acaf2f8,
  93         0x23c3e3e0, 0x3989b1b8, 0x3181b1b0, 0x1f8f939c,
  94         0x1e4e525c, 0x39c9f1f8, 0x26c6e2e4, 0x3282b2b0,
  95         0x31013130, 0x2acae2e8, 0x2d4d616c, 0x1f4f535c,
  96         0x24c4e0e4, 0x30c0f0f0, 0x0dcdc1cc, 0x08888088,
  97         0x16061214, 0x3a0a3238, 0x18485058, 0x14c4d0d4,
  98         0x22426260, 0x29092128, 0x07070304, 0x33033330,
  99         0x28c8e0e8, 0x1b0b1318, 0x05050104, 0x39497178,
 100         0x10809090, 0x2a4a6268, 0x2a0a2228, 0x1a8a9298,
 101 };
 102
 103 static const u32 SS1[256] = {
 104         0x38380830, 0xe828c8e0, 0x2c2d0d21, 0xa42686a2,
 105         0xcc0fcfc3, 0xdc1eced2, 0xb03383b3, 0xb83888b0,
 106         0xac2f8fa3, 0x60204060, 0x54154551, 0xc407c7c3,
 107         0x44044440, 0x6c2f4f63, 0x682b4b63, 0x581b4b53,
 108         0xc003c3c3, 0x60224262, 0x30330333, 0xb43585b1,
 109         0x28290921, 0xa02080a0, 0xe022c2e2, 0xa42787a3,
 110         0xd013c3d3, 0x90118191, 0x10110111, 0x04060602,
 111         0x1c1c0c10, 0xbc3c8cb0, 0x34360632, 0x480b4b43,
 112         0xec2fcfe3, 0x88088880, 0x6c2c4c60, 0xa82888a0,
 113         0x14170713, 0xc404c4c0, 0x14160612, 0xf434c4f0,
 114         0xc002c2c2, 0x44054541, 0xe021c1e1, 0xd416c6d2,
 115         0x3c3f0f33, 0x3c3d0d31, 0x8c0e8e82, 0x98188890,
 116         0x28280820, 0x4c0e4e42, 0xf436c6f2, 0x3c3e0e32,
 117         0xa42585a1, 0xf839c9f1, 0x0c0d0d01, 0xdc1fcfd3,
 118         0xd818c8d0, 0x282b0b23, 0x64264662, 0x783a4a72,
 119         0x24270723, 0x2c2f0f23, 0xf031c1f1, 0x70324272,
 120         0x40024242, 0xd414c4d0, 0x40014141, 0xc000c0c0,
 121         0x70334373, 0x64274763, 0xac2c8ca0, 0x880b8b83,
 122         0xf437c7f3, 0xac2d8da1, 0x80008080, 0x1c1f0f13,
 123         0xc80acac2, 0x2c2c0c20, 0xa82a8aa2, 0x34340430,
 124         0xd012c2d2, 0x080b0b03, 0xec2ecee2, 0xe829c9e1,
 125         0x5c1d4d51, 0x94148490, 0x18180810, 0xf838c8f0,
 126         0x54174753, 0xac2e8ea2, 0x08080800, 0xc405c5c1,
 127         0x10130313, 0xcc0dcdc1, 0x84068682, 0xb83989b1,
 128         0xfc3fcff3, 0x7c3d4d71, 0xc001c1c1, 0x30310131,
 129         0xf435c5f1, 0x880a8a82, 0x682a4a62, 0xb03181b1,
 130         0xd011c1d1, 0x20200020, 0xd417c7d3, 0x00020202,
 131         0x20220222, 0x04040400, 0x68284860, 0x70314171,
 132         0x04070703, 0xd81bcbd3, 0x9c1d8d91, 0x98198991,
 133         0x60214161, 0xbc3e8eb2, 0xe426c6e2, 0x58194951,
 134         0xdc1dcdd1, 0x50114151, 0x90108090, 0xdc1cccd0,
 135         0x981a8a92, 0xa02383a3, 0xa82b8ba3, 0xd010c0d0,
 136         0x80018181, 0x0c0f0f03, 0x44074743, 0x181a0a12,
 137         0xe023c3e3, 0xec2ccce0, 0x8c0d8d81, 0xbc3f8fb3,
 138         0x94168692, 0x783b4b73, 0x5c1c4c50, 0xa02282a2,
 139         0xa02181a1, 0x60234363, 0x20230323, 0x4c0d4d41,
 140         0xc808c8c0, 0x9c1e8e92, 0x9c1c8c90, 0x383a0a32,
 141         0x0c0c0c00, 0x2c2e0e22, 0xb83a8ab2, 0x6c2e4e62,
 142         0x9c1f8f93, 0x581a4a52, 0xf032c2f2, 0x90128292,
 143         0xf033c3f3, 0x48094941, 0x78384870, 0xcc0cccc0,
 144         0x14150511, 0xf83bcbf3, 0x70304070, 0x74354571,
 145         0x7c3f4f73, 0x34350531, 0x10100010, 0x00030303,
 146         0x64244460, 0x6c2d4d61, 0xc406c6c2, 0x74344470,
 147         0xd415c5d1, 0xb43484b0, 0xe82acae2, 0x08090901,
 148         0x74364672, 0x18190911, 0xfc3ecef2, 0x40004040,
 149         0x10120212, 0xe020c0e0, 0xbc3d8db1, 0x04050501,
 150         0xf83acaf2, 0x00010101, 0xf030c0f0, 0x282a0a22,
 151         0x5c1e4e52, 0xa82989a1, 0x54164652, 0x40034343,
 152         0x84058581, 0x14140410, 0x88098981, 0x981b8b93,
 153         0xb03080b0, 0xe425c5e1, 0x48084840, 0x78394971,
 154         0x94178793, 0xfc3cccf0, 0x1c1e0e12, 0x80028282,
 155         0x20210121, 0x8c0c8c80, 0x181b0b13, 0x5c1f4f53,
 156         0x74374773, 0x54144450, 0xb03282b2, 0x1c1d0d11,
 157         0x24250521, 0x4c0f4f43, 0x00000000, 0x44064642,
 158         0xec2dcde1, 0x58184850, 0x50124252, 0xe82bcbe3,
 159         0x7c3e4e72, 0xd81acad2, 0xc809c9c1, 0xfc3dcdf1,
 160         0x30300030, 0x94158591, 0x64254561, 0x3c3c0c30,
 161         0xb43686b2, 0xe424c4e0, 0xb83b8bb3, 0x7c3c4c70,
 162         0x0c0e0e02, 0x50104050, 0x38390931, 0x24260622,
 163         0x30320232, 0x84048480, 0x68294961, 0x90138393,
 164         0x34370733, 0xe427c7e3, 0x24240420, 0xa42484a0,
 165         0xc80bcbc3, 0x50134353, 0x080a0a02, 0x84078783,
 166         0xd819c9d1, 0x4c0c4c40, 0x80038383, 0x8c0f8f83,
 167         0xcc0ecec2, 0x383b0b33, 0x480a4a42, 0xb43787b3,
 168 };
 169
 170 static const u32 SS2[256] = {
 171         0xa1a82989, 0x81840585, 0xd2d416c6, 0xd3d013c3,
 172         0x50541444, 0x111c1d0d, 0xa0ac2c8c, 0x21242505,
 173         0x515c1d4d, 0x43400343, 0x10181808, 0x121c1e0e,
 174         0x51501141, 0xf0fc3ccc, 0xc2c80aca, 0x63602343,
 175         0x20282808, 0x40440444, 0x20202000, 0x919c1d8d,
 176         0xe0e020c0, 0xe2e022c2, 0xc0c808c8, 0x13141707,
 177         0xa1a42585, 0x838c0f8f, 0x03000303, 0x73783b4b,
 178         0xb3b83b8b, 0x13101303, 0xd2d012c2, 0xe2ec2ece,
 179         0x70703040, 0x808c0c8c, 0x333c3f0f, 0xa0a82888,
 180         0x32303202, 0xd1dc1dcd, 0xf2f436c6, 0x70743444,
 181         0xe0ec2ccc, 0x91941585, 0x03080b0b, 0x53541747,
 182         0x505c1c4c, 0x53581b4b, 0xb1bc3d8d, 0x01000101,
 183         0x20242404, 0x101c1c0c, 0x73703343, 0x90981888,
 184         0x10101000, 0xc0cc0ccc, 0xf2f032c2, 0xd1d819c9,
 185         0x202c2c0c, 0xe3e427c7, 0x72703242, 0x83800383,
 186         0x93981b8b, 0xd1d011c1, 0x82840686, 0xc1c809c9,
 187         0x60602040, 0x50501040, 0xa3a02383, 0xe3e82bcb,
 188         0x010c0d0d, 0xb2b43686, 0x929c1e8e, 0x434c0f4f,
 189         0xb3b43787, 0x52581a4a, 0xc2c406c6, 0x70783848,
 190         0xa2a42686, 0x12101202, 0xa3ac2f8f, 0xd1d415c5,
 191         0x61602141, 0xc3c003c3, 0xb0b43484, 0x41400141,
 192         0x52501242, 0x717c3d4d, 0x818c0d8d, 0x00080808,
 193         0x131c1f0f, 0x91981989, 0x00000000, 0x11181909,
 194         0x00040404, 0x53501343, 0xf3f437c7, 0xe1e021c1,
 195         0xf1fc3dcd, 0x72743646, 0x232c2f0f, 0x23242707,
 196         0xb0b03080, 0x83880b8b, 0x020c0e0e, 0xa3a82b8b,
 197         0xa2a02282, 0x626c2e4e, 0x93901383, 0x414c0d4d,
 198         0x61682949, 0x707c3c4c, 0x01080909, 0x02080a0a,
 199         0xb3bc3f8f, 0xe3ec2fcf, 0xf3f033c3, 0xc1c405c5,
 200         0x83840787, 0x10141404, 0xf2fc3ece, 0x60642444,
 201         0xd2dc1ece, 0x222c2e0e, 0x43480b4b, 0x12181a0a,
 202         0x02040606, 0x21202101, 0x63682b4b, 0x62642646,
 203         0x02000202, 0xf1f435c5, 0x92901282, 0x82880a8a,
 204         0x000c0c0c, 0xb3b03383, 0x727c3e4e, 0xd0d010c0,
 205         0x72783a4a, 0x43440747, 0x92941686, 0xe1e425c5,
 206         0x22242606, 0x80800080, 0xa1ac2d8d, 0xd3dc1fcf,
 207         0xa1a02181, 0x30303000, 0x33343707, 0xa2ac2e8e,
 208         0x32343606, 0x11141505, 0x22202202, 0x30383808,
 209         0xf0f434c4, 0xa3a42787, 0x41440545, 0x404c0c4c,
 210         0x81800181, 0xe1e829c9, 0x80840484, 0x93941787,
 211         0x31343505, 0xc3c80bcb, 0xc2cc0ece, 0x303c3c0c,
 212         0x71703141, 0x11101101, 0xc3c407c7, 0x81880989,
 213         0x71743545, 0xf3f83bcb, 0xd2d81aca, 0xf0f838c8,
 214         0x90941484, 0x51581949, 0x82800282, 0xc0c404c4,
 215         0xf3fc3fcf, 0x41480949, 0x31383909, 0x63642747,
 216         0xc0c000c0, 0xc3cc0fcf, 0xd3d417c7, 0xb0b83888,
 217         0x030c0f0f, 0x828c0e8e, 0x42400242, 0x23202303,
 218         0x91901181, 0x606c2c4c, 0xd3d81bcb, 0xa0a42484,
 219         0x30343404, 0xf1f031c1, 0x40480848, 0xc2c002c2,
 220         0x636c2f4f, 0x313c3d0d, 0x212c2d0d, 0x40400040,
 221         0xb2bc3e8e, 0x323c3e0e, 0xb0bc3c8c, 0xc1c001c1,
 222         0xa2a82a8a, 0xb2b83a8a, 0x424c0e4e, 0x51541545,
 223         0x33383b0b, 0xd0dc1ccc, 0x60682848, 0x737c3f4f,
 224         0x909c1c8c, 0xd0d818c8, 0x42480a4a, 0x52541646,
 225         0x73743747, 0xa0a02080, 0xe1ec2dcd, 0x42440646,
 226         0xb1b43585, 0x23282b0b, 0x61642545, 0xf2f83aca,
 227         0xe3e023c3, 0xb1b83989, 0xb1b03181, 0x939c1f8f,
 228         0x525c1e4e, 0xf1f839c9, 0xe2e426c6, 0xb2b03282,
 229         0x31303101, 0xe2e82aca, 0x616c2d4d, 0x535c1f4f,
 230         0xe0e424c4, 0xf0f030c0, 0xc1cc0dcd, 0x80880888,
 231         0x12141606, 0x32383a0a, 0x50581848, 0xd0d414c4,
 232         0x62602242, 0x21282909, 0x03040707, 0x33303303,
 233         0xe0e828c8, 0x13181b0b, 0x01040505, 0x71783949,
 234         0x90901080, 0x62682a4a, 0x22282a0a, 0x92981a8a,
 235 };
 236
 237 static const u32 SS3[256] = {
 238         0x08303838, 0xc8e0e828, 0x0d212c2d, 0x86a2a426,
 239         0xcfc3cc0f, 0xced2dc1e, 0x83b3b033, 0x88b0b838,
 240         0x8fa3ac2f, 0x40606020, 0x45515415, 0xc7c3c407,
 241         0x44404404, 0x4f636c2f, 0x4b63682b, 0x4b53581b,
 242         0xc3c3c003, 0x42626022, 0x03333033, 0x85b1b435,
 243         0x09212829, 0x80a0a020, 0xc2e2e022, 0x87a3a427,
 244         0xc3d3d013, 0x81919011, 0x01111011, 0x06020406,
 245         0x0c101c1c, 0x8cb0bc3c, 0x06323436, 0x4b43480b,
 246         0xcfe3ec2f, 0x88808808, 0x4c606c2c, 0x88a0a828,
 247         0x07131417, 0xc4c0c404, 0x06121416, 0xc4f0f434,
 248         0xc2c2c002, 0x45414405, 0xc1e1e021, 0xc6d2d416,
 249         0x0f333c3f, 0x0d313c3d, 0x8e828c0e, 0x88909818,
 250         0x08202828, 0x4e424c0e, 0xc6f2f436, 0x0e323c3e,
 251         0x85a1a425, 0xc9f1f839, 0x0d010c0d, 0xcfd3dc1f,
 252         0xc8d0d818, 0x0b23282b, 0x46626426, 0x4a72783a,
 253         0x07232427, 0x0f232c2f, 0xc1f1f031, 0x42727032,
 254         0x42424002, 0xc4d0d414, 0x41414001, 0xc0c0c000,
 255         0x43737033, 0x47636427, 0x8ca0ac2c, 0x8b83880b,
 256         0xc7f3f437, 0x8da1ac2d, 0x80808000, 0x0f131c1f,
 257         0xcac2c80a, 0x0c202c2c, 0x8aa2a82a, 0x04303434,
 258         0xc2d2d012, 0x0b03080b, 0xcee2ec2e, 0xc9e1e829,
 259         0x4d515c1d, 0x84909414, 0x08101818, 0xc8f0f838,
 260         0x47535417, 0x8ea2ac2e, 0x08000808, 0xc5c1c405,
 261         0x03131013, 0xcdc1cc0d, 0x86828406, 0x89b1b839,
 262         0xcff3fc3f, 0x4d717c3d, 0xc1c1c001, 0x01313031,
 263         0xc5f1f435, 0x8a82880a, 0x4a62682a, 0x81b1b031,
 264         0xc1d1d011, 0x00202020, 0xc7d3d417, 0x02020002,
 265         0x02222022, 0x04000404, 0x48606828, 0x41717031,
 266         0x07030407, 0xcbd3d81b, 0x8d919c1d, 0x89919819,
 267         0x41616021, 0x8eb2bc3e, 0xc6e2e426, 0x49515819,
 268         0xcdd1dc1d, 0x41515011, 0x80909010, 0xccd0dc1c,
 269         0x8a92981a, 0x83a3a023, 0x8ba3a82b, 0xc0d0d010,
 270         0x81818001, 0x0f030c0f, 0x47434407, 0x0a12181a,
 271         0xc3e3e023, 0xcce0ec2c, 0x8d818c0d, 0x8fb3bc3f,
 272         0x86929416, 0x4b73783b, 0x4c505c1c, 0x82a2a022,
 273         0x81a1a021, 0x43636023, 0x03232023, 0x4d414c0d,
 274         0xc8c0c808, 0x8e929c1e, 0x8c909c1c, 0x0a32383a,
 275         0x0c000c0c, 0x0e222c2e, 0x8ab2b83a, 0x4e626c2e,
 276         0x8f939c1f, 0x4a52581a, 0xc2f2f032, 0x82929012,
 277         0xc3f3f033, 0x49414809, 0x48707838, 0xccc0cc0c,
 278         0x05111415, 0xcbf3f83b, 0x40707030, 0x45717435,
 279         0x4f737c3f, 0x05313435, 0x00101010, 0x03030003,
 280         0x44606424, 0x4d616c2d, 0xc6c2c406, 0x44707434,
 281         0xc5d1d415, 0x84b0b434, 0xcae2e82a, 0x09010809,
 282         0x46727436, 0x09111819, 0xcef2fc3e, 0x40404000,
 283         0x02121012, 0xc0e0e020, 0x8db1bc3d, 0x05010405,
 284         0xcaf2f83a, 0x01010001, 0xc0f0f030, 0x0a22282a,
 285         0x4e525c1e, 0x89a1a829, 0x46525416, 0x43434003,
 286         0x85818405, 0x04101414, 0x89818809, 0x8b93981b,
 287         0x80b0b030, 0xc5e1e425, 0x48404808, 0x49717839,
 288         0x87939417, 0xccf0fc3c, 0x0e121c1e, 0x82828002,
 289         0x01212021, 0x8c808c0c, 0x0b13181b, 0x4f535c1f,
 290         0x47737437, 0x44505414, 0x82b2b032, 0x0d111c1d,
 291         0x05212425, 0x4f434c0f, 0x00000000, 0x46424406,
 292         0xcde1ec2d, 0x48505818, 0x42525012, 0xcbe3e82b,
 293         0x4e727c3e, 0xcad2d81a, 0xc9c1c809, 0xcdf1fc3d,
 294         0x00303030, 0x85919415, 0x45616425, 0x0c303c3c,
 295         0x86b2b436, 0xc4e0e424, 0x8bb3b83b, 0x4c707c3c,
 296         0x0e020c0e, 0x40505010, 0x09313839, 0x06222426,
 297         0x02323032, 0x84808404, 0x49616829, 0x83939013,
 298         0x07333437, 0xc7e3e427, 0x04202424, 0x84a0a424,
 299         0xcbc3c80b, 0x43535013, 0x0a02080a, 0x87838407,
 300         0xc9d1d819, 0x4c404c0c, 0x83838003, 0x8f838c0f,
 301         0xcec2cc0e, 0x0b33383b, 0x4a42480a, 0x87b3b437,
 302 };
 303
 304 static const u32 KC[SEED_NUM_KCONSTANTS] = {
 305         0x9e3779b9, 0x3c6ef373, 0x78dde6e6, 0xf1bbcdcc,
 306         0xe3779b99, 0xc6ef3733, 0x8dde6e67, 0x1bbcdccf,
 307         0x3779b99e, 0x6ef3733c, 0xdde6e678, 0xbbcdccf1,
 308         0x779b99e3, 0xef3733c6, 0xde6e678d, 0xbcdccf1b,
 309 };
 310
 311 #define OP(X1, X2, X3, X4, rbase)                       \
 312         t0 = X3 ^ ks[rbase];                            \
 313         t1 = X4 ^ ks[rbase+1];                          \
 314         t1 ^= t0;                                       \
 315         t1 = SS0[byte(t1, 0)] ^ SS1[byte(t1, 1)] ^      \
 316                 SS2[byte(t1, 2)] ^ SS3[byte(t1, 3)];    \
 317         t0 += t1;                                       \
 318         t0 = SS0[byte(t0, 0)] ^ SS1[byte(t0, 1)] ^      \
 319                 SS2[byte(t0, 2)] ^ SS3[byte(t0, 3)];    \
 320         t1 += t0;                                       \
 321         t1 = SS0[byte(t1, 0)] ^ SS1[byte(t1, 1)] ^      \
 322                 SS2[byte(t1, 2)] ^ SS3[byte(t1, 3)];    \
 323         t0 += t1;                                       \
 324         X1 ^= t0;                                       \
 325         X2 ^= t1
 326
 327 static int seed_set_key(struct crypto_tfm *tfm, const u8 *in_key,
 328                         unsigned int key_len)
 329 {
 330         struct seed_ctx *ctx = crypto_tfm_ctx(tfm);
 331         u32 *keyout = ctx->keysched;
 332         const __be32 *key = (const __be32 *)in_key;
 333         u32 i, t0, t1, x1, x2, x3, x4;
 334
 335         x1 = be32_to_cpu(key[0]);
 336         x2 = be32_to_cpu(key[1]);
 337         x3 = be32_to_cpu(key[2]);
 338         x4 = be32_to_cpu(key[3]);
 339
 340         for (i = 0; i < SEED_NUM_KCONSTANTS; i++) {
 341                 t0 = x1 + x3 - KC[i];
 342                 t1 = x2 + KC[i] - x4;
 343                 *(keyout++) = SS0[byte(t0, 0)] ^ SS1[byte(t0, 1)] ^
 344                                 SS2[byte(t0, 2)] ^ SS3[byte(t0, 3)];
 345                 *(keyout++) = SS0[byte(t1, 0)] ^ SS1[byte(t1, 1)] ^
 346                                 SS2[byte(t1, 2)] ^ SS3[byte(t1, 3)];
 347
 348                 if (i % 2 == 0) {
 349                         t0 = x1;
 350                         x1 = (x1 >> 8) ^ (x2 << 24);
 351                         x2 = (x2 >> 8) ^ (t0 << 24);
 352                 } else {
 353                         t0 = x3;
 354                         x3 = (x3 << 8) ^ (x4 >> 24);
 355                         x4 = (x4 << 8) ^ (t0 >> 24);
 356                 }
 357         }
 358
 359         return 0;
 360 }
 361
 362 /* encrypt a block of text */
 363
 364 static void seed_encrypt(struct crypto_tfm *tfm, u8 *out, const u8 *in)
 365 {
 366         const struct seed_ctx *ctx = crypto_tfm_ctx(tfm);
 367         const __be32 *src = (const __be32 *)in;
 368         __be32 *dst = (__be32 *)out;
 369         u32 x1, x2, x3, x4, t0, t1;
 370         const u32 *ks = ctx->keysched;
 371
 372         x1 = be32_to_cpu(src[0]);
 373         x2 = be32_to_cpu(src[1]);
 374         x3 = be32_to_cpu(src[2]);
 375         x4 = be32_to_cpu(src[3]);
 376
 377         OP(x1, x2, x3, x4, 0);
 378         OP(x3, x4, x1, x2, 2);
 379         OP(x1, x2, x3, x4, 4);
 380         OP(x3, x4, x1, x2, 6);
 381         OP(x1, x2, x3, x4, 8);
 382         OP(x3, x4, x1, x2, 10);
 383         OP(x1, x2, x3, x4, 12);
 384         OP(x3, x4, x1, x2, 14);
 385         OP(x1, x2, x3, x4, 16);
 386         OP(x3, x4, x1, x2, 18);
 387         OP(x1, x2, x3, x4, 20);
 388         OP(x3, x4, x1, x2, 22);
 389         OP(x1, x2, x3, x4, 24);
 390         OP(x3, x4, x1, x2, 26);
 391         OP(x1, x2, x3, x4, 28);
 392         OP(x3, x4, x1, x2, 30);
 393
 394         dst[0] = cpu_to_be32(x3);
 395         dst[1] = cpu_to_be32(x4);
 396         dst[2] = cpu_to_be32(x1);
 397         dst[3] = cpu_to_be32(x2);
 398 }
 399
 400 /* decrypt a block of text */
 401
 402 static void seed_decrypt(struct crypto_tfm *tfm, u8 *out, const u8 *in)
 403 {
 404         const struct seed_ctx *ctx = crypto_tfm_ctx(tfm);
 405         const __be32 *src = (const __be32 *)in;
 406         __be32 *dst = (__be32 *)out;
 407         u32 x1, x2, x3, x4, t0, t1;
 408         const u32 *ks = ctx->keysched;
 409
 410         x1 = be32_to_cpu(src[0]);
 411         x2 = be32_to_cpu(src[1]);
 412         x3 = be32_to_cpu(src[2]);
 413         x4 = be32_to_cpu(src[3]);
 414
 415         OP(x1, x2, x3, x4, 30);
 416         OP(x3, x4, x1, x2, 28);
 417         OP(x1, x2, x3, x4, 26);
 418         OP(x3, x4, x1, x2, 24);
 419         OP(x1, x2, x3, x4, 22);
 420         OP(x3, x4, x1, x2, 20);
 421         OP(x1, x2, x3, x4, 18);
 422         OP(x3, x4, x1, x2, 16);
 423         OP(x1, x2, x3, x4, 14);
 424         OP(x3, x4, x1, x2, 12);
 425         OP(x1, x2, x3, x4, 10);
 426         OP(x3, x4, x1, x2, 8);
 427         OP(x1, x2, x3, x4, 6);
 428         OP(x3, x4, x1, x2, 4);
 429         OP(x1, x2, x3, x4, 2);
 430         OP(x3, x4, x1, x2, 0);
 431
 432         dst[0] = cpu_to_be32(x3);
 433         dst[1] = cpu_to_be32(x4);
 434         dst[2] = cpu_to_be32(x1);
 435         dst[3] = cpu_to_be32(x2);
 436 }
 437
 438
 439 static struct crypto_alg seed_alg = {
 440         .cra_name               =       "seed",
 441         .cra_driver_name        =       "seed-generic",
 442         .cra_priority           =       100,
 443         .cra_flags              =       CRYPTO_ALG_TYPE_CIPHER,
 444         .cra_blocksize          =       SEED_BLOCK_SIZE,
 445         .cra_ctxsize            =       sizeof(struct seed_ctx),
 446         .cra_alignmask          =       3,
 447         .cra_module             =       THIS_MODULE,
 448         .cra_u                  =       {
 449                 .cipher = {
 450                         .cia_min_keysize        =       SEED_KEY_SIZE,
 451                         .cia_max_keysize        =       SEED_KEY_SIZE,
 452                         .cia_setkey             =       seed_set_key,
 453                         .cia_encrypt            =       seed_encrypt,
 454                         .cia_decrypt            =       seed_decrypt
 455                 }
 456         }
 457 };
 458
 459 static int __init seed_init(void)
 460 {
 461         return crypto_register_alg(&seed_alg);
 462 }
 463
 464 static void __exit seed_fini(void)
 465 {
 466         crypto_unregister_alg(&seed_alg);
 467 }
 468
 469 subsys_initcall(seed_init);
 470 module_exit(seed_fini);
 471
 472 MODULE_DESCRIPTION("SEED Cipher Algorithm");
 473 MODULE_LICENSE("GPL");
 474 MODULE_AUTHOR("Hye-Shik Chang <perky@FreeBSD.org>, Kim Hyun <hkim@kisa.or.kr>");
 475 MODULE_ALIAS_CRYPTO("seed");