Annotation of truecrypt/crypto/set_key.c, revision 1.1.1.2

1.1       root        1: /* crypto/des/set_key.c */
                      2: /* Copyright (C) 1995-1997 Eric Young ([email protected])
                      3:  * All rights reserved.
                      4:  *
                      5:  * This package is an SSL implementation written
                      6:  * by Eric Young ([email protected]).
                      7:  * The implementation was written so as to conform with Netscapes SSL.
                      8:  * 
                      9:  * This library is free for commercial and non-commercial use as long as
                     10:  * the following conditions are aheared to.  The following conditions
                     11:  * apply to all code found in this distribution, be it the RC4, RSA,
                     12:  * lhash, DES, etc., code; not just the SSL code.  The SSL documentation
                     13:  * included with this distribution is covered by the same copyright terms
                     14:  * except that the holder is Tim Hudson ([email protected]).
                     15:  * 
                     16:  * Copyright remains Eric Young's, and as such any Copyright notices in
                     17:  * the code are not to be removed.
                     18:  * If this package is used in a product, Eric Young should be given attribution
                     19:  * as the author of the parts of the library used.
                     20:  * This can be in the form of a textual message at program startup or
                     21:  * in documentation (online or textual) provided with the package.
                     22:  * 
                     23:  * Redistribution and use in source and binary forms, with or without
                     24:  * modification, are permitted provided that the following conditions
                     25:  * are met:
                     26:  * 1. Redistributions of source code must retain the copyright
                     27:  *    notice, this list of conditions and the following disclaimer.
                     28:  * 2. Redistributions in binary form must reproduce the above copyright
                     29:  *    notice, this list of conditions and the following disclaimer in the
                     30:  *    documentation and/or other materials provided with the distribution.
                     31:  * 3. All advertising materials mentioning features or use of this software
                     32:  *    must display the following acknowledgement:
                     33:  *    "This product includes cryptographic software written by
                     34:  *     Eric Young ([email protected])"
                     35:  *    The word 'cryptographic' can be left out if the rouines from the library
                     36:  *    being used are not cryptographic related :-).
                     37:  * 4. If you include any Windows specific code (or a derivative thereof) from 
                     38:  *    the apps directory (application code) you must include an acknowledgement:
                     39:  *    "This product includes software written by Tim Hudson ([email protected])"
                     40:  * 
                     41:  * THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND
                     42:  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
                     43:  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
                     44:  * ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
                     45:  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
                     46:  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
                     47:  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
                     48:  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
                     49:  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
                     50:  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
                     51:  * SUCH DAMAGE.
                     52:  * 
                     53:  * The licence and distribution terms for any publically available version or
                     54:  * derivative of this code cannot be changed.  i.e. this code cannot simply be
                     55:  * copied and put under another distribution licence
                     56:  * [including the GNU Public Licence.]
                     57:  */
                     58: 
                     59: /* set_key.c v 1.4 eay 24/9/91
                     60:  * 1.4 Speed up by 400% :-)
                     61:  * 1.3 added register declarations.
                     62:  * 1.2 unrolled make_key_sched a bit more
                     63:  * 1.1 added norm_expand_bits
                     64:  * 1.0 First working version
                     65:  */
                     66: 
1.1.1.2 ! root       67: /* Adapted for TrueCrypt by the TrueCrypt Foundation */
1.1       root       68: 
1.1.1.2 ! root       69: #include "Des_locl.h"
        !            70: #include "Podd.h"
        !            71: #include "Sk.h"
1.1       root       72: 
1.1.1.2 ! root       73: #ifdef LINUX_DRIVER
        !            74: #include <linux/string.h>
        !            75: #else
        !            76: #pragma intrinsic(memcmp,_lrotr)
        !            77: #endif
1.1       root       78: 
                     79: #ifndef NOPROTO
                     80: static int check_parity(des_cblock (*key));
                     81: #else
                     82: static int check_parity();
                     83: #endif
                     84: 
                     85: #pragma warning( disable : 4131 )
                     86: 
1.1.1.2 ! root       87: int des_check_key=1;
1.1       root       88: 
                     89: void des_set_odd_parity(key)
                     90: des_cblock (*key);
                     91:        {
                     92:        int i;
                     93: 
1.1.1.2 ! root       94:        for (i=0; i<(int)DES_KEY_SZ; i++)
1.1       root       95:                (*key)[i]=odd_parity[(*key)[i]];
                     96:        }
                     97: 
                     98: static int check_parity(key)
                     99: des_cblock (*key);
                    100:        {
                    101:        int i;
                    102: 
1.1.1.2 ! root      103:        for (i=0; i<(int)DES_KEY_SZ; i++)
1.1       root      104:                {
                    105:                if ((*key)[i] != odd_parity[(*key)[i]])
                    106:                        return(0);
                    107:                }
                    108:        return(1);
                    109:        }
                    110: 
                    111: /* Weak and semi week keys as take from
                    112:  * %A D.W. Davies
                    113:  * %A W.L. Price
                    114:  * %T Security for Computer Networks
                    115:  * %I John Wiley & Sons
                    116:  * %D 1984
                    117:  * Many thanks to [email protected] (Steven Bellovin) for the reference
                    118:  * (and actual cblock values).
                    119:  */
                    120: #define NUM_WEAK_KEY   16
                    121: static des_cblock weak_keys[NUM_WEAK_KEY]={
                    122:        /* weak keys */
                    123:        {0x01,0x01,0x01,0x01,0x01,0x01,0x01,0x01},
                    124:        {0xFE,0xFE,0xFE,0xFE,0xFE,0xFE,0xFE,0xFE},
                    125:        {0x1F,0x1F,0x1F,0x1F,0x1F,0x1F,0x1F,0x1F},
                    126:        {0xE0,0xE0,0xE0,0xE0,0xE0,0xE0,0xE0,0xE0},
                    127:        /* semi-weak keys */
                    128:        {0x01,0xFE,0x01,0xFE,0x01,0xFE,0x01,0xFE},
                    129:        {0xFE,0x01,0xFE,0x01,0xFE,0x01,0xFE,0x01},
                    130:        {0x1F,0xE0,0x1F,0xE0,0x0E,0xF1,0x0E,0xF1},
                    131:        {0xE0,0x1F,0xE0,0x1F,0xF1,0x0E,0xF1,0x0E},
                    132:        {0x01,0xE0,0x01,0xE0,0x01,0xF1,0x01,0xF1},
                    133:        {0xE0,0x01,0xE0,0x01,0xF1,0x01,0xF1,0x01},
                    134:        {0x1F,0xFE,0x1F,0xFE,0x0E,0xFE,0x0E,0xFE},
                    135:        {0xFE,0x1F,0xFE,0x1F,0xFE,0x0E,0xFE,0x0E},
                    136:        {0x01,0x1F,0x01,0x1F,0x01,0x0E,0x01,0x0E},
                    137:        {0x1F,0x01,0x1F,0x01,0x0E,0x01,0x0E,0x01},
                    138:        {0xE0,0xFE,0xE0,0xFE,0xF1,0xFE,0xF1,0xFE},
                    139:        {0xFE,0xE0,0xFE,0xE0,0xFE,0xF1,0xFE,0xF1}};
                    140: 
                    141: int des_is_weak_key(key)
                    142: des_cblock (*key);
                    143:        {
                    144:        int i;
                    145: 
                    146:        for (i=0; i<NUM_WEAK_KEY; i++)
                    147:                /* Added == 0 to comparision, I obviously don't run
                    148:                 * this section very often :-(, thanks to
                    149:                 * [email protected] for the fix
                    150:                 * eay 93/06/29
                    151:                 * Another problem, I was comparing only the first 4
                    152:                 * bytes, 97/03/18 */
                    153:                if (memcmp(weak_keys[i],key,sizeof(des_cblock)) == 0) return(1);
                    154:        return(0);
                    155:        }
                    156: 
                    157: /* NOW DEFINED IN des_local.h
                    158:  * See ecb_encrypt.c for a pseudo description of these macros. 
                    159:  * #define PERM_OP(a,b,t,n,m) ((t)=((((a)>>(n))^(b))&(m)),\
                    160:  *     (b)^=(t),\
                    161:  *     (a)=((a)^((t)<<(n))))
                    162:  */
                    163: 
                    164: #define HPERM_OP(a,t,n,m) ((t)=((((a)<<(16-(n)))^(a))&(m)),\
                    165:        (a)=(a)^(t)^(t>>(16-(n))))
                    166: 
                    167: /* return 0 if key parity is odd (correct),
                    168:  * return -1 if key parity error,
                    169:  * return -2 if illegal weak key.
                    170:  */
                    171: int des_set_key(key, schedule)
                    172: des_cblock (*key);
                    173: des_key_schedule schedule;
                    174:        {
                    175:        static int shifts2[16]={0,0,1,1,1,1,1,1,0,1,1,1,1,1,1,0};
                    176:        register DES_LONG c,d,t,s,t2;
                    177:        register unsigned char *in;
                    178:        register DES_LONG *k;
                    179:        register int i;
                    180: 
                    181:        k=(DES_LONG *)schedule;
                    182:        in=(unsigned char *)key;
                    183: 
                    184:        c2l(in,c);
                    185:        c2l(in,d);
                    186: 
                    187:        /* do PC1 in 60 simple operations */ 
                    188: /*     PERM_OP(d,c,t,4,0x0f0f0f0fL);
                    189:        HPERM_OP(c,t,-2, 0xcccc0000L);
                    190:        HPERM_OP(c,t,-1, 0xaaaa0000L);
                    191:        HPERM_OP(c,t, 8, 0x00ff0000L);
                    192:        HPERM_OP(c,t,-1, 0xaaaa0000L);
                    193:        HPERM_OP(d,t,-8, 0xff000000L);
                    194:        HPERM_OP(d,t, 8, 0x00ff0000L);
                    195:        HPERM_OP(d,t, 2, 0x33330000L);
                    196:        d=((d&0x00aa00aaL)<<7L)|((d&0x55005500L)>>7L)|(d&0xaa55aa55L);
                    197:        d=(d>>8)|((c&0xf0000000L)>>4);
                    198:        c&=0x0fffffffL; */
                    199: 
                    200:        /* I now do it in 47 simple operations :-)
                    201:         * Thanks to John Fletcher ([email protected])
                    202:         * for the inspiration. :-) */
                    203:        PERM_OP (d,c,t,4,0x0f0f0f0fL);
                    204:        HPERM_OP(c,t,-2,0xcccc0000L);
                    205:        HPERM_OP(d,t,-2,0xcccc0000L);
                    206:        PERM_OP (d,c,t,1,0x55555555L);
                    207:        PERM_OP (c,d,t,8,0x00ff00ffL);
                    208:        PERM_OP (d,c,t,1,0x55555555L);
                    209:        d=      (((d&0x000000ffL)<<16L)| (d&0x0000ff00L)     |
                    210:                 ((d&0x00ff0000L)>>16L)|((c&0xf0000000L)>>4L));
                    211:        c&=0x0fffffffL;
                    212: 
                    213:        for (i=0; i<ITERATIONS; i++)
                    214:                {
                    215:                if (shifts2[i])
                    216:                        { c=((c>>2L)|(c<<26L)); d=((d>>2L)|(d<<26L)); }
                    217:                else
                    218:                        { c=((c>>1L)|(c<<27L)); d=((d>>1L)|(d<<27L)); }
                    219:                c&=0x0fffffffL;
                    220:                d&=0x0fffffffL;
                    221:                /* could be a few less shifts but I am to lazy at this
                    222:                 * point in time to investigate */
                    223:                s=      des_skb[0][ (c    )&0x3f                ]|
                    224:                        des_skb[1][((c>> 6)&0x03)|((c>> 7L)&0x3c)]|
                    225:                        des_skb[2][((c>>13)&0x0f)|((c>>14L)&0x30)]|
                    226:                        des_skb[3][((c>>20)&0x01)|((c>>21L)&0x06) |
                    227:                                                  ((c>>22L)&0x38)];
                    228:                t=      des_skb[4][ (d    )&0x3f                ]|
                    229:                        des_skb[5][((d>> 7L)&0x03)|((d>> 8L)&0x3c)]|
                    230:                        des_skb[6][ (d>>15L)&0x3f                ]|
                    231:                        des_skb[7][((d>>21L)&0x0f)|((d>>22L)&0x30)];
                    232: 
                    233:                /* table contained 0213 4657 */
                    234:                t2=((t<<16L)|(s&0x0000ffffL))&0xffffffffL;
                    235:                *(k++)=ROTATE(t2,30)&0xffffffffL;
                    236: 
                    237:                t2=((s>>16L)|(t&0xffff0000L));
                    238:                *(k++)=ROTATE(t2,26)&0xffffffffL;
                    239:                }
1.1.1.2 ! root      240:                
        !           241:        if (des_check_key)
        !           242:        {
        !           243:                //if (!check_parity(key))
        !           244:                //      return(-1);
        !           245: 
        !           246:                if (des_is_weak_key(key))
        !           247:                        return(-2);
        !           248:        }
        !           249: 
1.1       root      250:        return(0);
                    251:        }
                    252: 
                    253: int _cdecl des_key_sched(key, schedule)
                    254: des_cblock (*key);
                    255: des_key_schedule schedule;
                    256:        {
                    257:        return(des_set_key(key,schedule));
                    258:        }

unix.superglobalmegacorp.com

This archive runs on limited infrastructure. Preserving old code on modern bandwidth. Automated agents are requested to crawl responsibly.