1 /*
2  * CDDL HEADER START
3  *
4  * The contents of this file are subject to the terms of the
5  * Common Development and Distribution License (the "License").
6  * You may not use this file except in compliance with the License.
7  *
8  * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
9  * or https://opensource.org/licenses/CDDL-1.0.
10  * See the License for the specific language governing permissions
11  * and limitations under the License.
12  *
13  * When distributing Covered Code, include this CDDL HEADER in each
14  * file and include the License file at usr/src/OPENSOLARIS.LICENSE.
15  * If applicable, add the following below this CDDL HEADER, with the
16  * fields enclosed by brackets "[]" replaced with your own identifying
17  * information: Portions Copyright [yyyy] [name of copyright owner]
18  *
19  * CDDL HEADER END
20  */
21 /*
22  * Copyright (c) 2003, 2010, Oracle and/or its affiliates. All rights reserved.
23  */
24 
25 #include <aes/aes_impl.h>
26 
27 /*
28  * This file is derived from the file  rijndael-alg-fst.c  taken from the
29  * "optimized C code v3.0" on the "rijndael home page"
30  * http://www.iaik.tu-graz.ac.at/research/krypto/AES/old/~rijmen/rijndael/
31  * pointed by the NIST web-site http://csrc.nist.gov/archive/aes/
32  *
33  * The following note is from the original file:
34  */
35 
36 /*
37  * rijndael-alg-fst.c
38  *
39  * @version 3.0 (December 2000)
40  *
41  * Optimised ANSI C code for the Rijndael cipher (now AES)
42  *
43  * @author Vincent Rijmen <vincent.rijmen@esat.kuleuven.ac.be>
44  * @author Antoon Bosselaers <antoon.bosselaers@esat.kuleuven.ac.be>
45  * @author Paulo Barreto <paulo.barreto@terra.com.br>
46  *
47  * This code is hereby placed in the public domain.
48  *
49  * THIS SOFTWARE IS PROVIDED BY THE AUTHORS ''AS IS'' AND ANY EXPRESS
50  * OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
51  * WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
52  * ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHORS OR CONTRIBUTORS BE
53  * LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
54  * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
55  * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
56  * BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
57  * WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
58  * OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE,
59  * EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
60  */
61 
62 /*
63  *  Constant tables
64  */
65 
66 /*
67  * Te0[x] = S [x].[02, 01, 01, 03];
68  * Te1[x] = S [x].[03, 02, 01, 01];
69  * Te2[x] = S [x].[01, 03, 02, 01];
70  * Te3[x] = S [x].[01, 01, 03, 02];
71  * Te4[x] = S [x].[01, 01, 01, 01];
72  *
73  * Td0[x] = Si[x].[0e, 09, 0d, 0b];
74  * Td1[x] = Si[x].[0b, 0e, 09, 0d];
75  * Td2[x] = Si[x].[0d, 0b, 0e, 09];
76  * Td3[x] = Si[x].[09, 0d, 0b, 0e];
77  * Td4[x] = Si[x].[01, 01, 01, 01];
78  */
79 
80 /* Encrypt Sbox constants (for the substitute bytes operation) */
81 
82 static const uint32_t Te0[256] =
83 {
84 	0xc66363a5U, 0xf87c7c84U, 0xee777799U, 0xf67b7b8dU,
85 	0xfff2f20dU, 0xd66b6bbdU, 0xde6f6fb1U, 0x91c5c554U,
86 	0x60303050U, 0x02010103U, 0xce6767a9U, 0x562b2b7dU,
87 	0xe7fefe19U, 0xb5d7d762U, 0x4dababe6U, 0xec76769aU,
88 	0x8fcaca45U, 0x1f82829dU, 0x89c9c940U, 0xfa7d7d87U,
89 	0xeffafa15U, 0xb25959ebU, 0x8e4747c9U, 0xfbf0f00bU,
90 	0x41adadecU, 0xb3d4d467U, 0x5fa2a2fdU, 0x45afafeaU,
91 	0x239c9cbfU, 0x53a4a4f7U, 0xe4727296U, 0x9bc0c05bU,
92 	0x75b7b7c2U, 0xe1fdfd1cU, 0x3d9393aeU, 0x4c26266aU,
93 	0x6c36365aU, 0x7e3f3f41U, 0xf5f7f702U, 0x83cccc4fU,
94 	0x6834345cU, 0x51a5a5f4U, 0xd1e5e534U, 0xf9f1f108U,
95 	0xe2717193U, 0xabd8d873U, 0x62313153U, 0x2a15153fU,
96 	0x0804040cU, 0x95c7c752U, 0x46232365U, 0x9dc3c35eU,
97 	0x30181828U, 0x379696a1U, 0x0a05050fU, 0x2f9a9ab5U,
98 	0x0e070709U, 0x24121236U, 0x1b80809bU, 0xdfe2e23dU,
99 	0xcdebeb26U, 0x4e272769U, 0x7fb2b2cdU, 0xea75759fU,
100 	0x1209091bU, 0x1d83839eU, 0x582c2c74U, 0x341a1a2eU,
101 	0x361b1b2dU, 0xdc6e6eb2U, 0xb45a5aeeU, 0x5ba0a0fbU,
102 	0xa45252f6U, 0x763b3b4dU, 0xb7d6d661U, 0x7db3b3ceU,
103 	0x5229297bU, 0xdde3e33eU, 0x5e2f2f71U, 0x13848497U,
104 	0xa65353f5U, 0xb9d1d168U, 0x00000000U, 0xc1eded2cU,
105 	0x40202060U, 0xe3fcfc1fU, 0x79b1b1c8U, 0xb65b5bedU,
106 	0xd46a6abeU, 0x8dcbcb46U, 0x67bebed9U, 0x7239394bU,
107 	0x944a4adeU, 0x984c4cd4U, 0xb05858e8U, 0x85cfcf4aU,
108 	0xbbd0d06bU, 0xc5efef2aU, 0x4faaaae5U, 0xedfbfb16U,
109 	0x864343c5U, 0x9a4d4dd7U, 0x66333355U, 0x11858594U,
110 	0x8a4545cfU, 0xe9f9f910U, 0x04020206U, 0xfe7f7f81U,
111 	0xa05050f0U, 0x783c3c44U, 0x259f9fbaU, 0x4ba8a8e3U,
112 	0xa25151f3U, 0x5da3a3feU, 0x804040c0U, 0x058f8f8aU,
113 	0x3f9292adU, 0x219d9dbcU, 0x70383848U, 0xf1f5f504U,
114 	0x63bcbcdfU, 0x77b6b6c1U, 0xafdada75U, 0x42212163U,
115 	0x20101030U, 0xe5ffff1aU, 0xfdf3f30eU, 0xbfd2d26dU,
116 	0x81cdcd4cU, 0x180c0c14U, 0x26131335U, 0xc3ecec2fU,
117 	0xbe5f5fe1U, 0x359797a2U, 0x884444ccU, 0x2e171739U,
118 	0x93c4c457U, 0x55a7a7f2U, 0xfc7e7e82U, 0x7a3d3d47U,
119 	0xc86464acU, 0xba5d5de7U, 0x3219192bU, 0xe6737395U,
120 	0xc06060a0U, 0x19818198U, 0x9e4f4fd1U, 0xa3dcdc7fU,
121 	0x44222266U, 0x542a2a7eU, 0x3b9090abU, 0x0b888883U,
122 	0x8c4646caU, 0xc7eeee29U, 0x6bb8b8d3U, 0x2814143cU,
123 	0xa7dede79U, 0xbc5e5ee2U, 0x160b0b1dU, 0xaddbdb76U,
124 	0xdbe0e03bU, 0x64323256U, 0x743a3a4eU, 0x140a0a1eU,
125 	0x924949dbU, 0x0c06060aU, 0x4824246cU, 0xb85c5ce4U,
126 	0x9fc2c25dU, 0xbdd3d36eU, 0x43acacefU, 0xc46262a6U,
127 	0x399191a8U, 0x319595a4U, 0xd3e4e437U, 0xf279798bU,
128 	0xd5e7e732U, 0x8bc8c843U, 0x6e373759U, 0xda6d6db7U,
129 	0x018d8d8cU, 0xb1d5d564U, 0x9c4e4ed2U, 0x49a9a9e0U,
130 	0xd86c6cb4U, 0xac5656faU, 0xf3f4f407U, 0xcfeaea25U,
131 	0xca6565afU, 0xf47a7a8eU, 0x47aeaee9U, 0x10080818U,
132 	0x6fbabad5U, 0xf0787888U, 0x4a25256fU, 0x5c2e2e72U,
133 	0x381c1c24U, 0x57a6a6f1U, 0x73b4b4c7U, 0x97c6c651U,
134 	0xcbe8e823U, 0xa1dddd7cU, 0xe874749cU, 0x3e1f1f21U,
135 	0x964b4bddU, 0x61bdbddcU, 0x0d8b8b86U, 0x0f8a8a85U,
136 	0xe0707090U, 0x7c3e3e42U, 0x71b5b5c4U, 0xcc6666aaU,
137 	0x904848d8U, 0x06030305U, 0xf7f6f601U, 0x1c0e0e12U,
138 	0xc26161a3U, 0x6a35355fU, 0xae5757f9U, 0x69b9b9d0U,
139 	0x17868691U, 0x99c1c158U, 0x3a1d1d27U, 0x279e9eb9U,
140 	0xd9e1e138U, 0xebf8f813U, 0x2b9898b3U, 0x22111133U,
141 	0xd26969bbU, 0xa9d9d970U, 0x078e8e89U, 0x339494a7U,
142 	0x2d9b9bb6U, 0x3c1e1e22U, 0x15878792U, 0xc9e9e920U,
143 	0x87cece49U, 0xaa5555ffU, 0x50282878U, 0xa5dfdf7aU,
144 	0x038c8c8fU, 0x59a1a1f8U, 0x09898980U, 0x1a0d0d17U,
145 	0x65bfbfdaU, 0xd7e6e631U, 0x844242c6U, 0xd06868b8U,
146 	0x824141c3U, 0x299999b0U, 0x5a2d2d77U, 0x1e0f0f11U,
147 	0x7bb0b0cbU, 0xa85454fcU, 0x6dbbbbd6U, 0x2c16163aU
148 };
149 
150 
151 static const uint32_t Te1[256] =
152 {
153 	0xa5c66363U, 0x84f87c7cU, 0x99ee7777U, 0x8df67b7bU,
154 	0x0dfff2f2U, 0xbdd66b6bU, 0xb1de6f6fU, 0x5491c5c5U,
155 	0x50603030U, 0x03020101U, 0xa9ce6767U, 0x7d562b2bU,
156 	0x19e7fefeU, 0x62b5d7d7U, 0xe64dababU, 0x9aec7676U,
157 	0x458fcacaU, 0x9d1f8282U, 0x4089c9c9U, 0x87fa7d7dU,
158 	0x15effafaU, 0xebb25959U, 0xc98e4747U, 0x0bfbf0f0U,
159 	0xec41adadU, 0x67b3d4d4U, 0xfd5fa2a2U, 0xea45afafU,
160 	0xbf239c9cU, 0xf753a4a4U, 0x96e47272U, 0x5b9bc0c0U,
161 	0xc275b7b7U, 0x1ce1fdfdU, 0xae3d9393U, 0x6a4c2626U,
162 	0x5a6c3636U, 0x417e3f3fU, 0x02f5f7f7U, 0x4f83ccccU,
163 	0x5c683434U, 0xf451a5a5U, 0x34d1e5e5U, 0x08f9f1f1U,
164 	0x93e27171U, 0x73abd8d8U, 0x53623131U, 0x3f2a1515U,
165 	0x0c080404U, 0x5295c7c7U, 0x65462323U, 0x5e9dc3c3U,
166 	0x28301818U, 0xa1379696U, 0x0f0a0505U, 0xb52f9a9aU,
167 	0x090e0707U, 0x36241212U, 0x9b1b8080U, 0x3ddfe2e2U,
168 	0x26cdebebU, 0x694e2727U, 0xcd7fb2b2U, 0x9fea7575U,
169 	0x1b120909U, 0x9e1d8383U, 0x74582c2cU, 0x2e341a1aU,
170 	0x2d361b1bU, 0xb2dc6e6eU, 0xeeb45a5aU, 0xfb5ba0a0U,
171 	0xf6a45252U, 0x4d763b3bU, 0x61b7d6d6U, 0xce7db3b3U,
172 	0x7b522929U, 0x3edde3e3U, 0x715e2f2fU, 0x97138484U,
173 	0xf5a65353U, 0x68b9d1d1U, 0x00000000U, 0x2cc1ededU,
174 	0x60402020U, 0x1fe3fcfcU, 0xc879b1b1U, 0xedb65b5bU,
175 	0xbed46a6aU, 0x468dcbcbU, 0xd967bebeU, 0x4b723939U,
176 	0xde944a4aU, 0xd4984c4cU, 0xe8b05858U, 0x4a85cfcfU,
177 	0x6bbbd0d0U, 0x2ac5efefU, 0xe54faaaaU, 0x16edfbfbU,
178 	0xc5864343U, 0xd79a4d4dU, 0x55663333U, 0x94118585U,
179 	0xcf8a4545U, 0x10e9f9f9U, 0x06040202U, 0x81fe7f7fU,
180 	0xf0a05050U, 0x44783c3cU, 0xba259f9fU, 0xe34ba8a8U,
181 	0xf3a25151U, 0xfe5da3a3U, 0xc0804040U, 0x8a058f8fU,
182 	0xad3f9292U, 0xbc219d9dU, 0x48703838U, 0x04f1f5f5U,
183 	0xdf63bcbcU, 0xc177b6b6U, 0x75afdadaU, 0x63422121U,
184 	0x30201010U, 0x1ae5ffffU, 0x0efdf3f3U, 0x6dbfd2d2U,
185 	0x4c81cdcdU, 0x14180c0cU, 0x35261313U, 0x2fc3ececU,
186 	0xe1be5f5fU, 0xa2359797U, 0xcc884444U, 0x392e1717U,
187 	0x5793c4c4U, 0xf255a7a7U, 0x82fc7e7eU, 0x477a3d3dU,
188 	0xacc86464U, 0xe7ba5d5dU, 0x2b321919U, 0x95e67373U,
189 	0xa0c06060U, 0x98198181U, 0xd19e4f4fU, 0x7fa3dcdcU,
190 	0x66442222U, 0x7e542a2aU, 0xab3b9090U, 0x830b8888U,
191 	0xca8c4646U, 0x29c7eeeeU, 0xd36bb8b8U, 0x3c281414U,
192 	0x79a7dedeU, 0xe2bc5e5eU, 0x1d160b0bU, 0x76addbdbU,
193 	0x3bdbe0e0U, 0x56643232U, 0x4e743a3aU, 0x1e140a0aU,
194 	0xdb924949U, 0x0a0c0606U, 0x6c482424U, 0xe4b85c5cU,
195 	0x5d9fc2c2U, 0x6ebdd3d3U, 0xef43acacU, 0xa6c46262U,
196 	0xa8399191U, 0xa4319595U, 0x37d3e4e4U, 0x8bf27979U,
197 	0x32d5e7e7U, 0x438bc8c8U, 0x596e3737U, 0xb7da6d6dU,
198 	0x8c018d8dU, 0x64b1d5d5U, 0xd29c4e4eU, 0xe049a9a9U,
199 	0xb4d86c6cU, 0xfaac5656U, 0x07f3f4f4U, 0x25cfeaeaU,
200 	0xafca6565U, 0x8ef47a7aU, 0xe947aeaeU, 0x18100808U,
201 	0xd56fbabaU, 0x88f07878U, 0x6f4a2525U, 0x725c2e2eU,
202 	0x24381c1cU, 0xf157a6a6U, 0xc773b4b4U, 0x5197c6c6U,
203 	0x23cbe8e8U, 0x7ca1ddddU, 0x9ce87474U, 0x213e1f1fU,
204 	0xdd964b4bU, 0xdc61bdbdU, 0x860d8b8bU, 0x850f8a8aU,
205 	0x90e07070U, 0x427c3e3eU, 0xc471b5b5U, 0xaacc6666U,
206 	0xd8904848U, 0x05060303U, 0x01f7f6f6U, 0x121c0e0eU,
207 	0xa3c26161U, 0x5f6a3535U, 0xf9ae5757U, 0xd069b9b9U,
208 	0x91178686U, 0x5899c1c1U, 0x273a1d1dU, 0xb9279e9eU,
209 	0x38d9e1e1U, 0x13ebf8f8U, 0xb32b9898U, 0x33221111U,
210 	0xbbd26969U, 0x70a9d9d9U, 0x89078e8eU, 0xa7339494U,
211 	0xb62d9b9bU, 0x223c1e1eU, 0x92158787U, 0x20c9e9e9U,
212 	0x4987ceceU, 0xffaa5555U, 0x78502828U, 0x7aa5dfdfU,
213 	0x8f038c8cU, 0xf859a1a1U, 0x80098989U, 0x171a0d0dU,
214 	0xda65bfbfU, 0x31d7e6e6U, 0xc6844242U, 0xb8d06868U,
215 	0xc3824141U, 0xb0299999U, 0x775a2d2dU, 0x111e0f0fU,
216 	0xcb7bb0b0U, 0xfca85454U, 0xd66dbbbbU, 0x3a2c1616U
217 };
218 
219 
220 static const uint32_t Te2[256] =
221 {
222 	0x63a5c663U, 0x7c84f87cU, 0x7799ee77U, 0x7b8df67bU,
223 	0xf20dfff2U, 0x6bbdd66bU, 0x6fb1de6fU, 0xc55491c5U,
224 	0x30506030U, 0x01030201U, 0x67a9ce67U, 0x2b7d562bU,
225 	0xfe19e7feU, 0xd762b5d7U, 0xabe64dabU, 0x769aec76U,
226 	0xca458fcaU, 0x829d1f82U, 0xc94089c9U, 0x7d87fa7dU,
227 	0xfa15effaU, 0x59ebb259U, 0x47c98e47U, 0xf00bfbf0U,
228 	0xadec41adU, 0xd467b3d4U, 0xa2fd5fa2U, 0xafea45afU,
229 	0x9cbf239cU, 0xa4f753a4U, 0x7296e472U, 0xc05b9bc0U,
230 	0xb7c275b7U, 0xfd1ce1fdU, 0x93ae3d93U, 0x266a4c26U,
231 	0x365a6c36U, 0x3f417e3fU, 0xf702f5f7U, 0xcc4f83ccU,
232 	0x345c6834U, 0xa5f451a5U, 0xe534d1e5U, 0xf108f9f1U,
233 	0x7193e271U, 0xd873abd8U, 0x31536231U, 0x153f2a15U,
234 	0x040c0804U, 0xc75295c7U, 0x23654623U, 0xc35e9dc3U,
235 	0x18283018U, 0x96a13796U, 0x050f0a05U, 0x9ab52f9aU,
236 	0x07090e07U, 0x12362412U, 0x809b1b80U, 0xe23ddfe2U,
237 	0xeb26cdebU, 0x27694e27U, 0xb2cd7fb2U, 0x759fea75U,
238 	0x091b1209U, 0x839e1d83U, 0x2c74582cU, 0x1a2e341aU,
239 	0x1b2d361bU, 0x6eb2dc6eU, 0x5aeeb45aU, 0xa0fb5ba0U,
240 	0x52f6a452U, 0x3b4d763bU, 0xd661b7d6U, 0xb3ce7db3U,
241 	0x297b5229U, 0xe33edde3U, 0x2f715e2fU, 0x84971384U,
242 	0x53f5a653U, 0xd168b9d1U, 0x00000000U, 0xed2cc1edU,
243 	0x20604020U, 0xfc1fe3fcU, 0xb1c879b1U, 0x5bedb65bU,
244 	0x6abed46aU, 0xcb468dcbU, 0xbed967beU, 0x394b7239U,
245 	0x4ade944aU, 0x4cd4984cU, 0x58e8b058U, 0xcf4a85cfU,
246 	0xd06bbbd0U, 0xef2ac5efU, 0xaae54faaU, 0xfb16edfbU,
247 	0x43c58643U, 0x4dd79a4dU, 0x33556633U, 0x85941185U,
248 	0x45cf8a45U, 0xf910e9f9U, 0x02060402U, 0x7f81fe7fU,
249 	0x50f0a050U, 0x3c44783cU, 0x9fba259fU, 0xa8e34ba8U,
250 	0x51f3a251U, 0xa3fe5da3U, 0x40c08040U, 0x8f8a058fU,
251 	0x92ad3f92U, 0x9dbc219dU, 0x38487038U, 0xf504f1f5U,
252 	0xbcdf63bcU, 0xb6c177b6U, 0xda75afdaU, 0x21634221U,
253 	0x10302010U, 0xff1ae5ffU, 0xf30efdf3U, 0xd26dbfd2U,
254 	0xcd4c81cdU, 0x0c14180cU, 0x13352613U, 0xec2fc3ecU,
255 	0x5fe1be5fU, 0x97a23597U, 0x44cc8844U, 0x17392e17U,
256 	0xc45793c4U, 0xa7f255a7U, 0x7e82fc7eU, 0x3d477a3dU,
257 	0x64acc864U, 0x5de7ba5dU, 0x192b3219U, 0x7395e673U,
258 	0x60a0c060U, 0x81981981U, 0x4fd19e4fU, 0xdc7fa3dcU,
259 	0x22664422U, 0x2a7e542aU, 0x90ab3b90U, 0x88830b88U,
260 	0x46ca8c46U, 0xee29c7eeU, 0xb8d36bb8U, 0x143c2814U,
261 	0xde79a7deU, 0x5ee2bc5eU, 0x0b1d160bU, 0xdb76addbU,
262 	0xe03bdbe0U, 0x32566432U, 0x3a4e743aU, 0x0a1e140aU,
263 	0x49db9249U, 0x060a0c06U, 0x246c4824U, 0x5ce4b85cU,
264 	0xc25d9fc2U, 0xd36ebdd3U, 0xacef43acU, 0x62a6c462U,
265 	0x91a83991U, 0x95a43195U, 0xe437d3e4U, 0x798bf279U,
266 	0xe732d5e7U, 0xc8438bc8U, 0x37596e37U, 0x6db7da6dU,
267 	0x8d8c018dU, 0xd564b1d5U, 0x4ed29c4eU, 0xa9e049a9U,
268 	0x6cb4d86cU, 0x56faac56U, 0xf407f3f4U, 0xea25cfeaU,
269 	0x65afca65U, 0x7a8ef47aU, 0xaee947aeU, 0x08181008U,
270 	0xbad56fbaU, 0x7888f078U, 0x256f4a25U, 0x2e725c2eU,
271 	0x1c24381cU, 0xa6f157a6U, 0xb4c773b4U, 0xc65197c6U,
272 	0xe823cbe8U, 0xdd7ca1ddU, 0x749ce874U, 0x1f213e1fU,
273 	0x4bdd964bU, 0xbddc61bdU, 0x8b860d8bU, 0x8a850f8aU,
274 	0x7090e070U, 0x3e427c3eU, 0xb5c471b5U, 0x66aacc66U,
275 	0x48d89048U, 0x03050603U, 0xf601f7f6U, 0x0e121c0eU,
276 	0x61a3c261U, 0x355f6a35U, 0x57f9ae57U, 0xb9d069b9U,
277 	0x86911786U, 0xc15899c1U, 0x1d273a1dU, 0x9eb9279eU,
278 	0xe138d9e1U, 0xf813ebf8U, 0x98b32b98U, 0x11332211U,
279 	0x69bbd269U, 0xd970a9d9U, 0x8e89078eU, 0x94a73394U,
280 	0x9bb62d9bU, 0x1e223c1eU, 0x87921587U, 0xe920c9e9U,
281 	0xce4987ceU, 0x55ffaa55U, 0x28785028U, 0xdf7aa5dfU,
282 	0x8c8f038cU, 0xa1f859a1U, 0x89800989U, 0x0d171a0dU,
283 	0xbfda65bfU, 0xe631d7e6U, 0x42c68442U, 0x68b8d068U,
284 	0x41c38241U, 0x99b02999U, 0x2d775a2dU, 0x0f111e0fU,
285 	0xb0cb7bb0U, 0x54fca854U, 0xbbd66dbbU, 0x163a2c16U
286 };
287 
288 
289 static const uint32_t Te3[256] =
290 {
291 	0x6363a5c6U, 0x7c7c84f8U, 0x777799eeU, 0x7b7b8df6U,
292 	0xf2f20dffU, 0x6b6bbdd6U, 0x6f6fb1deU, 0xc5c55491U,
293 	0x30305060U, 0x01010302U, 0x6767a9ceU, 0x2b2b7d56U,
294 	0xfefe19e7U, 0xd7d762b5U, 0xababe64dU, 0x76769aecU,
295 	0xcaca458fU, 0x82829d1fU, 0xc9c94089U, 0x7d7d87faU,
296 	0xfafa15efU, 0x5959ebb2U, 0x4747c98eU, 0xf0f00bfbU,
297 	0xadadec41U, 0xd4d467b3U, 0xa2a2fd5fU, 0xafafea45U,
298 	0x9c9cbf23U, 0xa4a4f753U, 0x727296e4U, 0xc0c05b9bU,
299 	0xb7b7c275U, 0xfdfd1ce1U, 0x9393ae3dU, 0x26266a4cU,
300 	0x36365a6cU, 0x3f3f417eU, 0xf7f702f5U, 0xcccc4f83U,
301 	0x34345c68U, 0xa5a5f451U, 0xe5e534d1U, 0xf1f108f9U,
302 	0x717193e2U, 0xd8d873abU, 0x31315362U, 0x15153f2aU,
303 	0x04040c08U, 0xc7c75295U, 0x23236546U, 0xc3c35e9dU,
304 	0x18182830U, 0x9696a137U, 0x05050f0aU, 0x9a9ab52fU,
305 	0x0707090eU, 0x12123624U, 0x80809b1bU, 0xe2e23ddfU,
306 	0xebeb26cdU, 0x2727694eU, 0xb2b2cd7fU, 0x75759feaU,
307 	0x09091b12U, 0x83839e1dU, 0x2c2c7458U, 0x1a1a2e34U,
308 	0x1b1b2d36U, 0x6e6eb2dcU, 0x5a5aeeb4U, 0xa0a0fb5bU,
309 	0x5252f6a4U, 0x3b3b4d76U, 0xd6d661b7U, 0xb3b3ce7dU,
310 	0x29297b52U, 0xe3e33eddU, 0x2f2f715eU, 0x84849713U,
311 	0x5353f5a6U, 0xd1d168b9U, 0x00000000U, 0xeded2cc1U,
312 	0x20206040U, 0xfcfc1fe3U, 0xb1b1c879U, 0x5b5bedb6U,
313 	0x6a6abed4U, 0xcbcb468dU, 0xbebed967U, 0x39394b72U,
314 	0x4a4ade94U, 0x4c4cd498U, 0x5858e8b0U, 0xcfcf4a85U,
315 	0xd0d06bbbU, 0xefef2ac5U, 0xaaaae54fU, 0xfbfb16edU,
316 	0x4343c586U, 0x4d4dd79aU, 0x33335566U, 0x85859411U,
317 	0x4545cf8aU, 0xf9f910e9U, 0x02020604U, 0x7f7f81feU,
318 	0x5050f0a0U, 0x3c3c4478U, 0x9f9fba25U, 0xa8a8e34bU,
319 	0x5151f3a2U, 0xa3a3fe5dU, 0x4040c080U, 0x8f8f8a05U,
320 	0x9292ad3fU, 0x9d9dbc21U, 0x38384870U, 0xf5f504f1U,
321 	0xbcbcdf63U, 0xb6b6c177U, 0xdada75afU, 0x21216342U,
322 	0x10103020U, 0xffff1ae5U, 0xf3f30efdU, 0xd2d26dbfU,
323 	0xcdcd4c81U, 0x0c0c1418U, 0x13133526U, 0xecec2fc3U,
324 	0x5f5fe1beU, 0x9797a235U, 0x4444cc88U, 0x1717392eU,
325 	0xc4c45793U, 0xa7a7f255U, 0x7e7e82fcU, 0x3d3d477aU,
326 	0x6464acc8U, 0x5d5de7baU, 0x19192b32U, 0x737395e6U,
327 	0x6060a0c0U, 0x81819819U, 0x4f4fd19eU, 0xdcdc7fa3U,
328 	0x22226644U, 0x2a2a7e54U, 0x9090ab3bU, 0x8888830bU,
329 	0x4646ca8cU, 0xeeee29c7U, 0xb8b8d36bU, 0x14143c28U,
330 	0xdede79a7U, 0x5e5ee2bcU, 0x0b0b1d16U, 0xdbdb76adU,
331 	0xe0e03bdbU, 0x32325664U, 0x3a3a4e74U, 0x0a0a1e14U,
332 	0x4949db92U, 0x06060a0cU, 0x24246c48U, 0x5c5ce4b8U,
333 	0xc2c25d9fU, 0xd3d36ebdU, 0xacacef43U, 0x6262a6c4U,
334 	0x9191a839U, 0x9595a431U, 0xe4e437d3U, 0x79798bf2U,
335 	0xe7e732d5U, 0xc8c8438bU, 0x3737596eU, 0x6d6db7daU,
336 	0x8d8d8c01U, 0xd5d564b1U, 0x4e4ed29cU, 0xa9a9e049U,
337 	0x6c6cb4d8U, 0x5656faacU, 0xf4f407f3U, 0xeaea25cfU,
338 	0x6565afcaU, 0x7a7a8ef4U, 0xaeaee947U, 0x08081810U,
339 	0xbabad56fU, 0x787888f0U, 0x25256f4aU, 0x2e2e725cU,
340 	0x1c1c2438U, 0xa6a6f157U, 0xb4b4c773U, 0xc6c65197U,
341 	0xe8e823cbU, 0xdddd7ca1U, 0x74749ce8U, 0x1f1f213eU,
342 	0x4b4bdd96U, 0xbdbddc61U, 0x8b8b860dU, 0x8a8a850fU,
343 	0x707090e0U, 0x3e3e427cU, 0xb5b5c471U, 0x6666aaccU,
344 	0x4848d890U, 0x03030506U, 0xf6f601f7U, 0x0e0e121cU,
345 	0x6161a3c2U, 0x35355f6aU, 0x5757f9aeU, 0xb9b9d069U,
346 	0x86869117U, 0xc1c15899U, 0x1d1d273aU, 0x9e9eb927U,
347 	0xe1e138d9U, 0xf8f813ebU, 0x9898b32bU, 0x11113322U,
348 	0x6969bbd2U, 0xd9d970a9U, 0x8e8e8907U, 0x9494a733U,
349 	0x9b9bb62dU, 0x1e1e223cU, 0x87879215U, 0xe9e920c9U,
350 	0xcece4987U, 0x5555ffaaU, 0x28287850U, 0xdfdf7aa5U,
351 	0x8c8c8f03U, 0xa1a1f859U, 0x89898009U, 0x0d0d171aU,
352 	0xbfbfda65U, 0xe6e631d7U, 0x4242c684U, 0x6868b8d0U,
353 	0x4141c382U, 0x9999b029U, 0x2d2d775aU, 0x0f0f111eU,
354 	0xb0b0cb7bU, 0x5454fca8U, 0xbbbbd66dU, 0x16163a2cU
355 };
356 
357 static const uint32_t Te4[256] =
358 {
359 	0x63636363U, 0x7c7c7c7cU, 0x77777777U, 0x7b7b7b7bU,
360 	0xf2f2f2f2U, 0x6b6b6b6bU, 0x6f6f6f6fU, 0xc5c5c5c5U,
361 	0x30303030U, 0x01010101U, 0x67676767U, 0x2b2b2b2bU,
362 	0xfefefefeU, 0xd7d7d7d7U, 0xababababU, 0x76767676U,
363 	0xcacacacaU, 0x82828282U, 0xc9c9c9c9U, 0x7d7d7d7dU,
364 	0xfafafafaU, 0x59595959U, 0x47474747U, 0xf0f0f0f0U,
365 	0xadadadadU, 0xd4d4d4d4U, 0xa2a2a2a2U, 0xafafafafU,
366 	0x9c9c9c9cU, 0xa4a4a4a4U, 0x72727272U, 0xc0c0c0c0U,
367 	0xb7b7b7b7U, 0xfdfdfdfdU, 0x93939393U, 0x26262626U,
368 	0x36363636U, 0x3f3f3f3fU, 0xf7f7f7f7U, 0xccccccccU,
369 	0x34343434U, 0xa5a5a5a5U, 0xe5e5e5e5U, 0xf1f1f1f1U,
370 	0x71717171U, 0xd8d8d8d8U, 0x31313131U, 0x15151515U,
371 	0x04040404U, 0xc7c7c7c7U, 0x23232323U, 0xc3c3c3c3U,
372 	0x18181818U, 0x96969696U, 0x05050505U, 0x9a9a9a9aU,
373 	0x07070707U, 0x12121212U, 0x80808080U, 0xe2e2e2e2U,
374 	0xebebebebU, 0x27272727U, 0xb2b2b2b2U, 0x75757575U,
375 	0x09090909U, 0x83838383U, 0x2c2c2c2cU, 0x1a1a1a1aU,
376 	0x1b1b1b1bU, 0x6e6e6e6eU, 0x5a5a5a5aU, 0xa0a0a0a0U,
377 	0x52525252U, 0x3b3b3b3bU, 0xd6d6d6d6U, 0xb3b3b3b3U,
378 	0x29292929U, 0xe3e3e3e3U, 0x2f2f2f2fU, 0x84848484U,
379 	0x53535353U, 0xd1d1d1d1U, 0x00000000U, 0xededededU,
380 	0x20202020U, 0xfcfcfcfcU, 0xb1b1b1b1U, 0x5b5b5b5bU,
381 	0x6a6a6a6aU, 0xcbcbcbcbU, 0xbebebebeU, 0x39393939U,
382 	0x4a4a4a4aU, 0x4c4c4c4cU, 0x58585858U, 0xcfcfcfcfU,
383 	0xd0d0d0d0U, 0xefefefefU, 0xaaaaaaaaU, 0xfbfbfbfbU,
384 	0x43434343U, 0x4d4d4d4dU, 0x33333333U, 0x85858585U,
385 	0x45454545U, 0xf9f9f9f9U, 0x02020202U, 0x7f7f7f7fU,
386 	0x50505050U, 0x3c3c3c3cU, 0x9f9f9f9fU, 0xa8a8a8a8U,
387 	0x51515151U, 0xa3a3a3a3U, 0x40404040U, 0x8f8f8f8fU,
388 	0x92929292U, 0x9d9d9d9dU, 0x38383838U, 0xf5f5f5f5U,
389 	0xbcbcbcbcU, 0xb6b6b6b6U, 0xdadadadaU, 0x21212121U,
390 	0x10101010U, 0xffffffffU, 0xf3f3f3f3U, 0xd2d2d2d2U,
391 	0xcdcdcdcdU, 0x0c0c0c0cU, 0x13131313U, 0xececececU,
392 	0x5f5f5f5fU, 0x97979797U, 0x44444444U, 0x17171717U,
393 	0xc4c4c4c4U, 0xa7a7a7a7U, 0x7e7e7e7eU, 0x3d3d3d3dU,
394 	0x64646464U, 0x5d5d5d5dU, 0x19191919U, 0x73737373U,
395 	0x60606060U, 0x81818181U, 0x4f4f4f4fU, 0xdcdcdcdcU,
396 	0x22222222U, 0x2a2a2a2aU, 0x90909090U, 0x88888888U,
397 	0x46464646U, 0xeeeeeeeeU, 0xb8b8b8b8U, 0x14141414U,
398 	0xdedededeU, 0x5e5e5e5eU, 0x0b0b0b0bU, 0xdbdbdbdbU,
399 	0xe0e0e0e0U, 0x32323232U, 0x3a3a3a3aU, 0x0a0a0a0aU,
400 	0x49494949U, 0x06060606U, 0x24242424U, 0x5c5c5c5cU,
401 	0xc2c2c2c2U, 0xd3d3d3d3U, 0xacacacacU, 0x62626262U,
402 	0x91919191U, 0x95959595U, 0xe4e4e4e4U, 0x79797979U,
403 	0xe7e7e7e7U, 0xc8c8c8c8U, 0x37373737U, 0x6d6d6d6dU,
404 	0x8d8d8d8dU, 0xd5d5d5d5U, 0x4e4e4e4eU, 0xa9a9a9a9U,
405 	0x6c6c6c6cU, 0x56565656U, 0xf4f4f4f4U, 0xeaeaeaeaU,
406 	0x65656565U, 0x7a7a7a7aU, 0xaeaeaeaeU, 0x08080808U,
407 	0xbabababaU, 0x78787878U, 0x25252525U, 0x2e2e2e2eU,
408 	0x1c1c1c1cU, 0xa6a6a6a6U, 0xb4b4b4b4U, 0xc6c6c6c6U,
409 	0xe8e8e8e8U, 0xddddddddU, 0x74747474U, 0x1f1f1f1fU,
410 	0x4b4b4b4bU, 0xbdbdbdbdU, 0x8b8b8b8bU, 0x8a8a8a8aU,
411 	0x70707070U, 0x3e3e3e3eU, 0xb5b5b5b5U, 0x66666666U,
412 	0x48484848U, 0x03030303U, 0xf6f6f6f6U, 0x0e0e0e0eU,
413 	0x61616161U, 0x35353535U, 0x57575757U, 0xb9b9b9b9U,
414 	0x86868686U, 0xc1c1c1c1U, 0x1d1d1d1dU, 0x9e9e9e9eU,
415 	0xe1e1e1e1U, 0xf8f8f8f8U, 0x98989898U, 0x11111111U,
416 	0x69696969U, 0xd9d9d9d9U, 0x8e8e8e8eU, 0x94949494U,
417 	0x9b9b9b9bU, 0x1e1e1e1eU, 0x87878787U, 0xe9e9e9e9U,
418 	0xcecececeU, 0x55555555U, 0x28282828U, 0xdfdfdfdfU,
419 	0x8c8c8c8cU, 0xa1a1a1a1U, 0x89898989U, 0x0d0d0d0dU,
420 	0xbfbfbfbfU, 0xe6e6e6e6U, 0x42424242U, 0x68686868U,
421 	0x41414141U, 0x99999999U, 0x2d2d2d2dU, 0x0f0f0f0fU,
422 	0xb0b0b0b0U, 0x54545454U, 0xbbbbbbbbU, 0x16161616U
423 };
424 
425 /* Decrypt Sbox constants (for the substitute bytes operation) */
426 
427 static const uint32_t Td0[256] =
428 {
429 	0x51f4a750U, 0x7e416553U, 0x1a17a4c3U, 0x3a275e96U,
430 	0x3bab6bcbU, 0x1f9d45f1U, 0xacfa58abU, 0x4be30393U,
431 	0x2030fa55U, 0xad766df6U, 0x88cc7691U, 0xf5024c25U,
432 	0x4fe5d7fcU, 0xc52acbd7U, 0x26354480U, 0xb562a38fU,
433 	0xdeb15a49U, 0x25ba1b67U, 0x45ea0e98U, 0x5dfec0e1U,
434 	0xc32f7502U, 0x814cf012U, 0x8d4697a3U, 0x6bd3f9c6U,
435 	0x038f5fe7U, 0x15929c95U, 0xbf6d7aebU, 0x955259daU,
436 	0xd4be832dU, 0x587421d3U, 0x49e06929U, 0x8ec9c844U,
437 	0x75c2896aU, 0xf48e7978U, 0x99583e6bU, 0x27b971ddU,
438 	0xbee14fb6U, 0xf088ad17U, 0xc920ac66U, 0x7dce3ab4U,
439 	0x63df4a18U, 0xe51a3182U, 0x97513360U, 0x62537f45U,
440 	0xb16477e0U, 0xbb6bae84U, 0xfe81a01cU, 0xf9082b94U,
441 	0x70486858U, 0x8f45fd19U, 0x94de6c87U, 0x527bf8b7U,
442 	0xab73d323U, 0x724b02e2U, 0xe31f8f57U, 0x6655ab2aU,
443 	0xb2eb2807U, 0x2fb5c203U, 0x86c57b9aU, 0xd33708a5U,
444 	0x302887f2U, 0x23bfa5b2U, 0x02036abaU, 0xed16825cU,
445 	0x8acf1c2bU, 0xa779b492U, 0xf307f2f0U, 0x4e69e2a1U,
446 	0x65daf4cdU, 0x0605bed5U, 0xd134621fU, 0xc4a6fe8aU,
447 	0x342e539dU, 0xa2f355a0U, 0x058ae132U, 0xa4f6eb75U,
448 	0x0b83ec39U, 0x4060efaaU, 0x5e719f06U, 0xbd6e1051U,
449 	0x3e218af9U, 0x96dd063dU, 0xdd3e05aeU, 0x4de6bd46U,
450 	0x91548db5U, 0x71c45d05U, 0x0406d46fU, 0x605015ffU,
451 	0x1998fb24U, 0xd6bde997U, 0x894043ccU, 0x67d99e77U,
452 	0xb0e842bdU, 0x07898b88U, 0xe7195b38U, 0x79c8eedbU,
453 	0xa17c0a47U, 0x7c420fe9U, 0xf8841ec9U, 0x00000000U,
454 	0x09808683U, 0x322bed48U, 0x1e1170acU, 0x6c5a724eU,
455 	0xfd0efffbU, 0x0f853856U, 0x3daed51eU, 0x362d3927U,
456 	0x0a0fd964U, 0x685ca621U, 0x9b5b54d1U, 0x24362e3aU,
457 	0x0c0a67b1U, 0x9357e70fU, 0xb4ee96d2U, 0x1b9b919eU,
458 	0x80c0c54fU, 0x61dc20a2U, 0x5a774b69U, 0x1c121a16U,
459 	0xe293ba0aU, 0xc0a02ae5U, 0x3c22e043U, 0x121b171dU,
460 	0x0e090d0bU, 0xf28bc7adU, 0x2db6a8b9U, 0x141ea9c8U,
461 	0x57f11985U, 0xaf75074cU, 0xee99ddbbU, 0xa37f60fdU,
462 	0xf701269fU, 0x5c72f5bcU, 0x44663bc5U, 0x5bfb7e34U,
463 	0x8b432976U, 0xcb23c6dcU, 0xb6edfc68U, 0xb8e4f163U,
464 	0xd731dccaU, 0x42638510U, 0x13972240U, 0x84c61120U,
465 	0x854a247dU, 0xd2bb3df8U, 0xaef93211U, 0xc729a16dU,
466 	0x1d9e2f4bU, 0xdcb230f3U, 0x0d8652ecU, 0x77c1e3d0U,
467 	0x2bb3166cU, 0xa970b999U, 0x119448faU, 0x47e96422U,
468 	0xa8fc8cc4U, 0xa0f03f1aU, 0x567d2cd8U, 0x223390efU,
469 	0x87494ec7U, 0xd938d1c1U, 0x8ccaa2feU, 0x98d40b36U,
470 	0xa6f581cfU, 0xa57ade28U, 0xdab78e26U, 0x3fadbfa4U,
471 	0x2c3a9de4U, 0x5078920dU, 0x6a5fcc9bU, 0x547e4662U,
472 	0xf68d13c2U, 0x90d8b8e8U, 0x2e39f75eU, 0x82c3aff5U,
473 	0x9f5d80beU, 0x69d0937cU, 0x6fd52da9U, 0xcf2512b3U,
474 	0xc8ac993bU, 0x10187da7U, 0xe89c636eU, 0xdb3bbb7bU,
475 	0xcd267809U, 0x6e5918f4U, 0xec9ab701U, 0x834f9aa8U,
476 	0xe6956e65U, 0xaaffe67eU, 0x21bccf08U, 0xef15e8e6U,
477 	0xbae79bd9U, 0x4a6f36ceU, 0xea9f09d4U, 0x29b07cd6U,
478 	0x31a4b2afU, 0x2a3f2331U, 0xc6a59430U, 0x35a266c0U,
479 	0x744ebc37U, 0xfc82caa6U, 0xe090d0b0U, 0x33a7d815U,
480 	0xf104984aU, 0x41ecdaf7U, 0x7fcd500eU, 0x1791f62fU,
481 	0x764dd68dU, 0x43efb04dU, 0xccaa4d54U, 0xe49604dfU,
482 	0x9ed1b5e3U, 0x4c6a881bU, 0xc12c1fb8U, 0x4665517fU,
483 	0x9d5eea04U, 0x018c355dU, 0xfa877473U, 0xfb0b412eU,
484 	0xb3671d5aU, 0x92dbd252U, 0xe9105633U, 0x6dd64713U,
485 	0x9ad7618cU, 0x37a10c7aU, 0x59f8148eU, 0xeb133c89U,
486 	0xcea927eeU, 0xb761c935U, 0xe11ce5edU, 0x7a47b13cU,
487 	0x9cd2df59U, 0x55f2733fU, 0x1814ce79U, 0x73c737bfU,
488 	0x53f7cdeaU, 0x5ffdaa5bU, 0xdf3d6f14U, 0x7844db86U,
489 	0xcaaff381U, 0xb968c43eU, 0x3824342cU, 0xc2a3405fU,
490 	0x161dc372U, 0xbce2250cU, 0x283c498bU, 0xff0d9541U,
491 	0x39a80171U, 0x080cb3deU, 0xd8b4e49cU, 0x6456c190U,
492 	0x7bcb8461U, 0xd532b670U, 0x486c5c74U, 0xd0b85742U
493 };
494 
495 static const uint32_t Td1[256] =
496 {
497 	0x5051f4a7U, 0x537e4165U, 0xc31a17a4U, 0x963a275eU,
498 	0xcb3bab6bU, 0xf11f9d45U, 0xabacfa58U, 0x934be303U,
499 	0x552030faU, 0xf6ad766dU, 0x9188cc76U, 0x25f5024cU,
500 	0xfc4fe5d7U, 0xd7c52acbU, 0x80263544U, 0x8fb562a3U,
501 	0x49deb15aU, 0x6725ba1bU, 0x9845ea0eU, 0xe15dfec0U,
502 	0x02c32f75U, 0x12814cf0U, 0xa38d4697U, 0xc66bd3f9U,
503 	0xe7038f5fU, 0x9515929cU, 0xebbf6d7aU, 0xda955259U,
504 	0x2dd4be83U, 0xd3587421U, 0x2949e069U, 0x448ec9c8U,
505 	0x6a75c289U, 0x78f48e79U, 0x6b99583eU, 0xdd27b971U,
506 	0xb6bee14fU, 0x17f088adU, 0x66c920acU, 0xb47dce3aU,
507 	0x1863df4aU, 0x82e51a31U, 0x60975133U, 0x4562537fU,
508 	0xe0b16477U, 0x84bb6baeU, 0x1cfe81a0U, 0x94f9082bU,
509 	0x58704868U, 0x198f45fdU, 0x8794de6cU, 0xb7527bf8U,
510 	0x23ab73d3U, 0xe2724b02U, 0x57e31f8fU, 0x2a6655abU,
511 	0x07b2eb28U, 0x032fb5c2U, 0x9a86c57bU, 0xa5d33708U,
512 	0xf2302887U, 0xb223bfa5U, 0xba02036aU, 0x5ced1682U,
513 	0x2b8acf1cU, 0x92a779b4U, 0xf0f307f2U, 0xa14e69e2U,
514 	0xcd65daf4U, 0xd50605beU, 0x1fd13462U, 0x8ac4a6feU,
515 	0x9d342e53U, 0xa0a2f355U, 0x32058ae1U, 0x75a4f6ebU,
516 	0x390b83ecU, 0xaa4060efU, 0x065e719fU, 0x51bd6e10U,
517 	0xf93e218aU, 0x3d96dd06U, 0xaedd3e05U, 0x464de6bdU,
518 	0xb591548dU, 0x0571c45dU, 0x6f0406d4U, 0xff605015U,
519 	0x241998fbU, 0x97d6bde9U, 0xcc894043U, 0x7767d99eU,
520 	0xbdb0e842U, 0x8807898bU, 0x38e7195bU, 0xdb79c8eeU,
521 	0x47a17c0aU, 0xe97c420fU, 0xc9f8841eU, 0x00000000U,
522 	0x83098086U, 0x48322bedU, 0xac1e1170U, 0x4e6c5a72U,
523 	0xfbfd0effU, 0x560f8538U, 0x1e3daed5U, 0x27362d39U,
524 	0x640a0fd9U, 0x21685ca6U, 0xd19b5b54U, 0x3a24362eU,
525 	0xb10c0a67U, 0x0f9357e7U, 0xd2b4ee96U, 0x9e1b9b91U,
526 	0x4f80c0c5U, 0xa261dc20U, 0x695a774bU, 0x161c121aU,
527 	0x0ae293baU, 0xe5c0a02aU, 0x433c22e0U, 0x1d121b17U,
528 	0x0b0e090dU, 0xadf28bc7U, 0xb92db6a8U, 0xc8141ea9U,
529 	0x8557f119U, 0x4caf7507U, 0xbbee99ddU, 0xfda37f60U,
530 	0x9ff70126U, 0xbc5c72f5U, 0xc544663bU, 0x345bfb7eU,
531 	0x768b4329U, 0xdccb23c6U, 0x68b6edfcU, 0x63b8e4f1U,
532 	0xcad731dcU, 0x10426385U, 0x40139722U, 0x2084c611U,
533 	0x7d854a24U, 0xf8d2bb3dU, 0x11aef932U, 0x6dc729a1U,
534 	0x4b1d9e2fU, 0xf3dcb230U, 0xec0d8652U, 0xd077c1e3U,
535 	0x6c2bb316U, 0x99a970b9U, 0xfa119448U, 0x2247e964U,
536 	0xc4a8fc8cU, 0x1aa0f03fU, 0xd8567d2cU, 0xef223390U,
537 	0xc787494eU, 0xc1d938d1U, 0xfe8ccaa2U, 0x3698d40bU,
538 	0xcfa6f581U, 0x28a57adeU, 0x26dab78eU, 0xa43fadbfU,
539 	0xe42c3a9dU, 0x0d507892U, 0x9b6a5fccU, 0x62547e46U,
540 	0xc2f68d13U, 0xe890d8b8U, 0x5e2e39f7U, 0xf582c3afU,
541 	0xbe9f5d80U, 0x7c69d093U, 0xa96fd52dU, 0xb3cf2512U,
542 	0x3bc8ac99U, 0xa710187dU, 0x6ee89c63U, 0x7bdb3bbbU,
543 	0x09cd2678U, 0xf46e5918U, 0x01ec9ab7U, 0xa8834f9aU,
544 	0x65e6956eU, 0x7eaaffe6U, 0x0821bccfU, 0xe6ef15e8U,
545 	0xd9bae79bU, 0xce4a6f36U, 0xd4ea9f09U, 0xd629b07cU,
546 	0xaf31a4b2U, 0x312a3f23U, 0x30c6a594U, 0xc035a266U,
547 	0x37744ebcU, 0xa6fc82caU, 0xb0e090d0U, 0x1533a7d8U,
548 	0x4af10498U, 0xf741ecdaU, 0x0e7fcd50U, 0x2f1791f6U,
549 	0x8d764dd6U, 0x4d43efb0U, 0x54ccaa4dU, 0xdfe49604U,
550 	0xe39ed1b5U, 0x1b4c6a88U, 0xb8c12c1fU, 0x7f466551U,
551 	0x049d5eeaU, 0x5d018c35U, 0x73fa8774U, 0x2efb0b41U,
552 	0x5ab3671dU, 0x5292dbd2U, 0x33e91056U, 0x136dd647U,
553 	0x8c9ad761U, 0x7a37a10cU, 0x8e59f814U, 0x89eb133cU,
554 	0xeecea927U, 0x35b761c9U, 0xede11ce5U, 0x3c7a47b1U,
555 	0x599cd2dfU, 0x3f55f273U, 0x791814ceU, 0xbf73c737U,
556 	0xea53f7cdU, 0x5b5ffdaaU, 0x14df3d6fU, 0x867844dbU,
557 	0x81caaff3U, 0x3eb968c4U, 0x2c382434U, 0x5fc2a340U,
558 	0x72161dc3U, 0x0cbce225U, 0x8b283c49U, 0x41ff0d95U,
559 	0x7139a801U, 0xde080cb3U, 0x9cd8b4e4U, 0x906456c1U,
560 	0x617bcb84U, 0x70d532b6U, 0x74486c5cU, 0x42d0b857U
561 };
562 
563 static const uint32_t Td2[256] =
564 {
565 	0xa75051f4U, 0x65537e41U, 0xa4c31a17U, 0x5e963a27U,
566 	0x6bcb3babU, 0x45f11f9dU, 0x58abacfaU, 0x03934be3U,
567 	0xfa552030U, 0x6df6ad76U, 0x769188ccU, 0x4c25f502U,
568 	0xd7fc4fe5U, 0xcbd7c52aU, 0x44802635U, 0xa38fb562U,
569 	0x5a49deb1U, 0x1b6725baU, 0x0e9845eaU, 0xc0e15dfeU,
570 	0x7502c32fU, 0xf012814cU, 0x97a38d46U, 0xf9c66bd3U,
571 	0x5fe7038fU, 0x9c951592U, 0x7aebbf6dU, 0x59da9552U,
572 	0x832dd4beU, 0x21d35874U, 0x692949e0U, 0xc8448ec9U,
573 	0x896a75c2U, 0x7978f48eU, 0x3e6b9958U, 0x71dd27b9U,
574 	0x4fb6bee1U, 0xad17f088U, 0xac66c920U, 0x3ab47dceU,
575 	0x4a1863dfU, 0x3182e51aU, 0x33609751U, 0x7f456253U,
576 	0x77e0b164U, 0xae84bb6bU, 0xa01cfe81U, 0x2b94f908U,
577 	0x68587048U, 0xfd198f45U, 0x6c8794deU, 0xf8b7527bU,
578 	0xd323ab73U, 0x02e2724bU, 0x8f57e31fU, 0xab2a6655U,
579 	0x2807b2ebU, 0xc2032fb5U, 0x7b9a86c5U, 0x08a5d337U,
580 	0x87f23028U, 0xa5b223bfU, 0x6aba0203U, 0x825ced16U,
581 	0x1c2b8acfU, 0xb492a779U, 0xf2f0f307U, 0xe2a14e69U,
582 	0xf4cd65daU, 0xbed50605U, 0x621fd134U, 0xfe8ac4a6U,
583 	0x539d342eU, 0x55a0a2f3U, 0xe132058aU, 0xeb75a4f6U,
584 	0xec390b83U, 0xefaa4060U, 0x9f065e71U, 0x1051bd6eU,
585 	0x8af93e21U, 0x063d96ddU, 0x05aedd3eU, 0xbd464de6U,
586 	0x8db59154U, 0x5d0571c4U, 0xd46f0406U, 0x15ff6050U,
587 	0xfb241998U, 0xe997d6bdU, 0x43cc8940U, 0x9e7767d9U,
588 	0x42bdb0e8U, 0x8b880789U, 0x5b38e719U, 0xeedb79c8U,
589 	0x0a47a17cU, 0x0fe97c42U, 0x1ec9f884U, 0x00000000U,
590 	0x86830980U, 0xed48322bU, 0x70ac1e11U, 0x724e6c5aU,
591 	0xfffbfd0eU, 0x38560f85U, 0xd51e3daeU, 0x3927362dU,
592 	0xd9640a0fU, 0xa621685cU, 0x54d19b5bU, 0x2e3a2436U,
593 	0x67b10c0aU, 0xe70f9357U, 0x96d2b4eeU, 0x919e1b9bU,
594 	0xc54f80c0U, 0x20a261dcU, 0x4b695a77U, 0x1a161c12U,
595 	0xba0ae293U, 0x2ae5c0a0U, 0xe0433c22U, 0x171d121bU,
596 	0x0d0b0e09U, 0xc7adf28bU, 0xa8b92db6U, 0xa9c8141eU,
597 	0x198557f1U, 0x074caf75U, 0xddbbee99U, 0x60fda37fU,
598 	0x269ff701U, 0xf5bc5c72U, 0x3bc54466U, 0x7e345bfbU,
599 	0x29768b43U, 0xc6dccb23U, 0xfc68b6edU, 0xf163b8e4U,
600 	0xdccad731U, 0x85104263U, 0x22401397U, 0x112084c6U,
601 	0x247d854aU, 0x3df8d2bbU, 0x3211aef9U, 0xa16dc729U,
602 	0x2f4b1d9eU, 0x30f3dcb2U, 0x52ec0d86U, 0xe3d077c1U,
603 	0x166c2bb3U, 0xb999a970U, 0x48fa1194U, 0x642247e9U,
604 	0x8cc4a8fcU, 0x3f1aa0f0U, 0x2cd8567dU, 0x90ef2233U,
605 	0x4ec78749U, 0xd1c1d938U, 0xa2fe8ccaU, 0x0b3698d4U,
606 	0x81cfa6f5U, 0xde28a57aU, 0x8e26dab7U, 0xbfa43fadU,
607 	0x9de42c3aU, 0x920d5078U, 0xcc9b6a5fU, 0x4662547eU,
608 	0x13c2f68dU, 0xb8e890d8U, 0xf75e2e39U, 0xaff582c3U,
609 	0x80be9f5dU, 0x937c69d0U, 0x2da96fd5U, 0x12b3cf25U,
610 	0x993bc8acU, 0x7da71018U, 0x636ee89cU, 0xbb7bdb3bU,
611 	0x7809cd26U, 0x18f46e59U, 0xb701ec9aU, 0x9aa8834fU,
612 	0x6e65e695U, 0xe67eaaffU, 0xcf0821bcU, 0xe8e6ef15U,
613 	0x9bd9bae7U, 0x36ce4a6fU, 0x09d4ea9fU, 0x7cd629b0U,
614 	0xb2af31a4U, 0x23312a3fU, 0x9430c6a5U, 0x66c035a2U,
615 	0xbc37744eU, 0xcaa6fc82U, 0xd0b0e090U, 0xd81533a7U,
616 	0x984af104U, 0xdaf741ecU, 0x500e7fcdU, 0xf62f1791U,
617 	0xd68d764dU, 0xb04d43efU, 0x4d54ccaaU, 0x04dfe496U,
618 	0xb5e39ed1U, 0x881b4c6aU, 0x1fb8c12cU, 0x517f4665U,
619 	0xea049d5eU, 0x355d018cU, 0x7473fa87U, 0x412efb0bU,
620 	0x1d5ab367U, 0xd25292dbU, 0x5633e910U, 0x47136dd6U,
621 	0x618c9ad7U, 0x0c7a37a1U, 0x148e59f8U, 0x3c89eb13U,
622 	0x27eecea9U, 0xc935b761U, 0xe5ede11cU, 0xb13c7a47U,
623 	0xdf599cd2U, 0x733f55f2U, 0xce791814U, 0x37bf73c7U,
624 	0xcdea53f7U, 0xaa5b5ffdU, 0x6f14df3dU, 0xdb867844U,
625 	0xf381caafU, 0xc43eb968U, 0x342c3824U, 0x405fc2a3U,
626 	0xc372161dU, 0x250cbce2U, 0x498b283cU, 0x9541ff0dU,
627 	0x017139a8U, 0xb3de080cU, 0xe49cd8b4U, 0xc1906456U,
628 	0x84617bcbU, 0xb670d532U, 0x5c74486cU, 0x5742d0b8U
629 };
630 
631 static const uint32_t Td3[256] =
632 {
633 	0xf4a75051U, 0x4165537eU, 0x17a4c31aU, 0x275e963aU,
634 	0xab6bcb3bU, 0x9d45f11fU, 0xfa58abacU, 0xe303934bU,
635 	0x30fa5520U, 0x766df6adU, 0xcc769188U, 0x024c25f5U,
636 	0xe5d7fc4fU, 0x2acbd7c5U, 0x35448026U, 0x62a38fb5U,
637 	0xb15a49deU, 0xba1b6725U, 0xea0e9845U, 0xfec0e15dU,
638 	0x2f7502c3U, 0x4cf01281U, 0x4697a38dU, 0xd3f9c66bU,
639 	0x8f5fe703U, 0x929c9515U, 0x6d7aebbfU, 0x5259da95U,
640 	0xbe832dd4U, 0x7421d358U, 0xe0692949U, 0xc9c8448eU,
641 	0xc2896a75U, 0x8e7978f4U, 0x583e6b99U, 0xb971dd27U,
642 	0xe14fb6beU, 0x88ad17f0U, 0x20ac66c9U, 0xce3ab47dU,
643 	0xdf4a1863U, 0x1a3182e5U, 0x51336097U, 0x537f4562U,
644 	0x6477e0b1U, 0x6bae84bbU, 0x81a01cfeU, 0x082b94f9U,
645 	0x48685870U, 0x45fd198fU, 0xde6c8794U, 0x7bf8b752U,
646 	0x73d323abU, 0x4b02e272U, 0x1f8f57e3U, 0x55ab2a66U,
647 	0xeb2807b2U, 0xb5c2032fU, 0xc57b9a86U, 0x3708a5d3U,
648 	0x2887f230U, 0xbfa5b223U, 0x036aba02U, 0x16825cedU,
649 	0xcf1c2b8aU, 0x79b492a7U, 0x07f2f0f3U, 0x69e2a14eU,
650 	0xdaf4cd65U, 0x05bed506U, 0x34621fd1U, 0xa6fe8ac4U,
651 	0x2e539d34U, 0xf355a0a2U, 0x8ae13205U, 0xf6eb75a4U,
652 	0x83ec390bU, 0x60efaa40U, 0x719f065eU, 0x6e1051bdU,
653 	0x218af93eU, 0xdd063d96U, 0x3e05aeddU, 0xe6bd464dU,
654 	0x548db591U, 0xc45d0571U, 0x06d46f04U, 0x5015ff60U,
655 	0x98fb2419U, 0xbde997d6U, 0x4043cc89U, 0xd99e7767U,
656 	0xe842bdb0U, 0x898b8807U, 0x195b38e7U, 0xc8eedb79U,
657 	0x7c0a47a1U, 0x420fe97cU, 0x841ec9f8U, 0x00000000U,
658 	0x80868309U, 0x2bed4832U, 0x1170ac1eU, 0x5a724e6cU,
659 	0x0efffbfdU, 0x8538560fU, 0xaed51e3dU, 0x2d392736U,
660 	0x0fd9640aU, 0x5ca62168U, 0x5b54d19bU, 0x362e3a24U,
661 	0x0a67b10cU, 0x57e70f93U, 0xee96d2b4U, 0x9b919e1bU,
662 	0xc0c54f80U, 0xdc20a261U, 0x774b695aU, 0x121a161cU,
663 	0x93ba0ae2U, 0xa02ae5c0U, 0x22e0433cU, 0x1b171d12U,
664 	0x090d0b0eU, 0x8bc7adf2U, 0xb6a8b92dU, 0x1ea9c814U,
665 	0xf1198557U, 0x75074cafU, 0x99ddbbeeU, 0x7f60fda3U,
666 	0x01269ff7U, 0x72f5bc5cU, 0x663bc544U, 0xfb7e345bU,
667 	0x4329768bU, 0x23c6dccbU, 0xedfc68b6U, 0xe4f163b8U,
668 	0x31dccad7U, 0x63851042U, 0x97224013U, 0xc6112084U,
669 	0x4a247d85U, 0xbb3df8d2U, 0xf93211aeU, 0x29a16dc7U,
670 	0x9e2f4b1dU, 0xb230f3dcU, 0x8652ec0dU, 0xc1e3d077U,
671 	0xb3166c2bU, 0x70b999a9U, 0x9448fa11U, 0xe9642247U,
672 	0xfc8cc4a8U, 0xf03f1aa0U, 0x7d2cd856U, 0x3390ef22U,
673 	0x494ec787U, 0x38d1c1d9U, 0xcaa2fe8cU, 0xd40b3698U,
674 	0xf581cfa6U, 0x7ade28a5U, 0xb78e26daU, 0xadbfa43fU,
675 	0x3a9de42cU, 0x78920d50U, 0x5fcc9b6aU, 0x7e466254U,
676 	0x8d13c2f6U, 0xd8b8e890U, 0x39f75e2eU, 0xc3aff582U,
677 	0x5d80be9fU, 0xd0937c69U, 0xd52da96fU, 0x2512b3cfU,
678 	0xac993bc8U, 0x187da710U, 0x9c636ee8U, 0x3bbb7bdbU,
679 	0x267809cdU, 0x5918f46eU, 0x9ab701ecU, 0x4f9aa883U,
680 	0x956e65e6U, 0xffe67eaaU, 0xbccf0821U, 0x15e8e6efU,
681 	0xe79bd9baU, 0x6f36ce4aU, 0x9f09d4eaU, 0xb07cd629U,
682 	0xa4b2af31U, 0x3f23312aU, 0xa59430c6U, 0xa266c035U,
683 	0x4ebc3774U, 0x82caa6fcU, 0x90d0b0e0U, 0xa7d81533U,
684 	0x04984af1U, 0xecdaf741U, 0xcd500e7fU, 0x91f62f17U,
685 	0x4dd68d76U, 0xefb04d43U, 0xaa4d54ccU, 0x9604dfe4U,
686 	0xd1b5e39eU, 0x6a881b4cU, 0x2c1fb8c1U, 0x65517f46U,
687 	0x5eea049dU, 0x8c355d01U, 0x877473faU, 0x0b412efbU,
688 	0x671d5ab3U, 0xdbd25292U, 0x105633e9U, 0xd647136dU,
689 	0xd7618c9aU, 0xa10c7a37U, 0xf8148e59U, 0x133c89ebU,
690 	0xa927eeceU, 0x61c935b7U, 0x1ce5ede1U, 0x47b13c7aU,
691 	0xd2df599cU, 0xf2733f55U, 0x14ce7918U, 0xc737bf73U,
692 	0xf7cdea53U, 0xfdaa5b5fU, 0x3d6f14dfU, 0x44db8678U,
693 	0xaff381caU, 0x68c43eb9U, 0x24342c38U, 0xa3405fc2U,
694 	0x1dc37216U, 0xe2250cbcU, 0x3c498b28U, 0x0d9541ffU,
695 	0xa8017139U, 0x0cb3de08U, 0xb4e49cd8U, 0x56c19064U,
696 	0xcb84617bU, 0x32b670d5U, 0x6c5c7448U, 0xb85742d0U
697 };
698 
699 static const uint32_t Td4[256] =
700 {
701 	0x52525252U, 0x09090909U, 0x6a6a6a6aU, 0xd5d5d5d5U,
702 	0x30303030U, 0x36363636U, 0xa5a5a5a5U, 0x38383838U,
703 	0xbfbfbfbfU, 0x40404040U, 0xa3a3a3a3U, 0x9e9e9e9eU,
704 	0x81818181U, 0xf3f3f3f3U, 0xd7d7d7d7U, 0xfbfbfbfbU,
705 	0x7c7c7c7cU, 0xe3e3e3e3U, 0x39393939U, 0x82828282U,
706 	0x9b9b9b9bU, 0x2f2f2f2fU, 0xffffffffU, 0x87878787U,
707 	0x34343434U, 0x8e8e8e8eU, 0x43434343U, 0x44444444U,
708 	0xc4c4c4c4U, 0xdedededeU, 0xe9e9e9e9U, 0xcbcbcbcbU,
709 	0x54545454U, 0x7b7b7b7bU, 0x94949494U, 0x32323232U,
710 	0xa6a6a6a6U, 0xc2c2c2c2U, 0x23232323U, 0x3d3d3d3dU,
711 	0xeeeeeeeeU, 0x4c4c4c4cU, 0x95959595U, 0x0b0b0b0bU,
712 	0x42424242U, 0xfafafafaU, 0xc3c3c3c3U, 0x4e4e4e4eU,
713 	0x08080808U, 0x2e2e2e2eU, 0xa1a1a1a1U, 0x66666666U,
714 	0x28282828U, 0xd9d9d9d9U, 0x24242424U, 0xb2b2b2b2U,
715 	0x76767676U, 0x5b5b5b5bU, 0xa2a2a2a2U, 0x49494949U,
716 	0x6d6d6d6dU, 0x8b8b8b8bU, 0xd1d1d1d1U, 0x25252525U,
717 	0x72727272U, 0xf8f8f8f8U, 0xf6f6f6f6U, 0x64646464U,
718 	0x86868686U, 0x68686868U, 0x98989898U, 0x16161616U,
719 	0xd4d4d4d4U, 0xa4a4a4a4U, 0x5c5c5c5cU, 0xccccccccU,
720 	0x5d5d5d5dU, 0x65656565U, 0xb6b6b6b6U, 0x92929292U,
721 	0x6c6c6c6cU, 0x70707070U, 0x48484848U, 0x50505050U,
722 	0xfdfdfdfdU, 0xededededU, 0xb9b9b9b9U, 0xdadadadaU,
723 	0x5e5e5e5eU, 0x15151515U, 0x46464646U, 0x57575757U,
724 	0xa7a7a7a7U, 0x8d8d8d8dU, 0x9d9d9d9dU, 0x84848484U,
725 	0x90909090U, 0xd8d8d8d8U, 0xababababU, 0x00000000U,
726 	0x8c8c8c8cU, 0xbcbcbcbcU, 0xd3d3d3d3U, 0x0a0a0a0aU,
727 	0xf7f7f7f7U, 0xe4e4e4e4U, 0x58585858U, 0x05050505U,
728 	0xb8b8b8b8U, 0xb3b3b3b3U, 0x45454545U, 0x06060606U,
729 	0xd0d0d0d0U, 0x2c2c2c2cU, 0x1e1e1e1eU, 0x8f8f8f8fU,
730 	0xcacacacaU, 0x3f3f3f3fU, 0x0f0f0f0fU, 0x02020202U,
731 	0xc1c1c1c1U, 0xafafafafU, 0xbdbdbdbdU, 0x03030303U,
732 	0x01010101U, 0x13131313U, 0x8a8a8a8aU, 0x6b6b6b6bU,
733 	0x3a3a3a3aU, 0x91919191U, 0x11111111U, 0x41414141U,
734 	0x4f4f4f4fU, 0x67676767U, 0xdcdcdcdcU, 0xeaeaeaeaU,
735 	0x97979797U, 0xf2f2f2f2U, 0xcfcfcfcfU, 0xcecececeU,
736 	0xf0f0f0f0U, 0xb4b4b4b4U, 0xe6e6e6e6U, 0x73737373U,
737 	0x96969696U, 0xacacacacU, 0x74747474U, 0x22222222U,
738 	0xe7e7e7e7U, 0xadadadadU, 0x35353535U, 0x85858585U,
739 	0xe2e2e2e2U, 0xf9f9f9f9U, 0x37373737U, 0xe8e8e8e8U,
740 	0x1c1c1c1cU, 0x75757575U, 0xdfdfdfdfU, 0x6e6e6e6eU,
741 	0x47474747U, 0xf1f1f1f1U, 0x1a1a1a1aU, 0x71717171U,
742 	0x1d1d1d1dU, 0x29292929U, 0xc5c5c5c5U, 0x89898989U,
743 	0x6f6f6f6fU, 0xb7b7b7b7U, 0x62626262U, 0x0e0e0e0eU,
744 	0xaaaaaaaaU, 0x18181818U, 0xbebebebeU, 0x1b1b1b1bU,
745 	0xfcfcfcfcU, 0x56565656U, 0x3e3e3e3eU, 0x4b4b4b4bU,
746 	0xc6c6c6c6U, 0xd2d2d2d2U, 0x79797979U, 0x20202020U,
747 	0x9a9a9a9aU, 0xdbdbdbdbU, 0xc0c0c0c0U, 0xfefefefeU,
748 	0x78787878U, 0xcdcdcdcdU, 0x5a5a5a5aU, 0xf4f4f4f4U,
749 	0x1f1f1f1fU, 0xddddddddU, 0xa8a8a8a8U, 0x33333333U,
750 	0x88888888U, 0x07070707U, 0xc7c7c7c7U, 0x31313131U,
751 	0xb1b1b1b1U, 0x12121212U, 0x10101010U, 0x59595959U,
752 	0x27272727U, 0x80808080U, 0xececececU, 0x5f5f5f5fU,
753 	0x60606060U, 0x51515151U, 0x7f7f7f7fU, 0xa9a9a9a9U,
754 	0x19191919U, 0xb5b5b5b5U, 0x4a4a4a4aU, 0x0d0d0d0dU,
755 	0x2d2d2d2dU, 0xe5e5e5e5U, 0x7a7a7a7aU, 0x9f9f9f9fU,
756 	0x93939393U, 0xc9c9c9c9U, 0x9c9c9c9cU, 0xefefefefU,
757 	0xa0a0a0a0U, 0xe0e0e0e0U, 0x3b3b3b3bU, 0x4d4d4d4dU,
758 	0xaeaeaeaeU, 0x2a2a2a2aU, 0xf5f5f5f5U, 0xb0b0b0b0U,
759 	0xc8c8c8c8U, 0xebebebebU, 0xbbbbbbbbU, 0x3c3c3c3cU,
760 	0x83838383U, 0x53535353U, 0x99999999U, 0x61616161U,
761 	0x17171717U, 0x2b2b2b2bU, 0x04040404U, 0x7e7e7e7eU,
762 	0xbabababaU, 0x77777777U, 0xd6d6d6d6U, 0x26262626U,
763 	0xe1e1e1e1U, 0x69696969U, 0x14141414U, 0x63636363U,
764 	0x55555555U, 0x21212121U, 0x0c0c0c0cU, 0x7d7d7d7dU
765 };
766 
767 /* Rcon is Round Constant; used for encryption key expansion */
768 static const uint32_t rcon[RC_LENGTH] =
769 {
770 	/* for 128-bit blocks, Rijndael never uses more than 10 rcon values */
771 	0x01000000, 0x02000000, 0x04000000, 0x08000000,
772 	0x10000000, 0x20000000, 0x40000000, 0x80000000,
773 	0x1B000000, 0x36000000
774 };
775 
776 
777 /*
778  * Expand the cipher key into the encryption key schedule.
779  *
780  * Return the number of rounds for the given cipher key size.
781  * The size of the key schedule depends on the number of rounds
782  * (which can be computed from the size of the key), i.e. 4*(Nr + 1).
783  *
784  * Parameters:
785  * rk		AES key schedule 32-bit array to be initialized
786  * cipherKey	User key
787  * keyBits	AES key size (128, 192, or 256 bits)
788  */
789 static int
790 rijndael_key_setup_enc(uint32_t rk[], const uint32_t cipherKey[],
791     int keyBits)
792 {
793 	int		i = 0;
794 	uint32_t	temp;
795 
796 	rk[0] = cipherKey[0];
797 	rk[1] = cipherKey[1];
798 	rk[2] = cipherKey[2];
799 	rk[3] = cipherKey[3];
800 
801 	if (keyBits == 128) {
802 		for (;;) {
803 			temp  = rk[3];
804 			rk[4] = rk[0] ^
805 			    (Te4[(temp >> 16) & 0xff] & 0xff000000) ^
806 			    (Te4[(temp >> 8) & 0xff] & 0x00ff0000) ^
807 			    (Te4[temp & 0xff] & 0x0000ff00) ^
808 			    (Te4[temp >> 24] & 0x000000ff) ^
809 			    rcon[i];
810 			rk[5] = rk[1] ^ rk[4];
811 			rk[6] = rk[2] ^ rk[5];
812 			rk[7] = rk[3] ^ rk[6];
813 
814 			if (++i == 10) {
815 				return (10);
816 			}
817 			rk += 4;
818 		}
819 	}
820 
821 	rk[4] = cipherKey[4];
822 	rk[5] = cipherKey[5];
823 
824 	if (keyBits == 192) {
825 		for (;;) {
826 			temp = rk[5];
827 			rk[6] = rk[0] ^
828 			    (Te4[(temp >> 16) & 0xff] & 0xff000000) ^
829 			    (Te4[(temp >> 8) & 0xff] & 0x00ff0000) ^
830 			    (Te4[temp & 0xff] & 0x0000ff00) ^
831 			    (Te4[temp >> 24] & 0x000000ff) ^
832 			    rcon[i];
833 			rk[7] = rk[1] ^ rk[6];
834 			rk[8] = rk[2] ^ rk[7];
835 			rk[9] = rk[3] ^ rk[8];
836 
837 			if (++i == 8) {
838 				return (12);
839 			}
840 
841 			rk[10] = rk[4] ^ rk[9];
842 			rk[11] = rk[5] ^ rk[10];
843 			rk += 6;
844 		}
845 	}
846 
847 	rk[6] = cipherKey[6];
848 	rk[7] = cipherKey[7];
849 
850 	if (keyBits == 256) {
851 		for (;;) {
852 			temp = rk[7];
853 			rk[8] = rk[0] ^
854 			    (Te4[(temp >> 16) & 0xff] & 0xff000000) ^
855 			    (Te4[(temp >> 8) & 0xff] & 0x00ff0000) ^
856 			    (Te4[temp & 0xff] & 0x0000ff00) ^
857 			    (Te4[temp >> 24] & 0x000000ff) ^
858 			    rcon[i];
859 			rk[9] = rk[1] ^ rk[8];
860 			rk[10] = rk[2] ^ rk[9];
861 			rk[11] = rk[3] ^ rk[10];
862 
863 			if (++i == 7) {
864 				return (14);
865 			}
866 			temp = rk[11];
867 			rk[12] = rk[4] ^
868 			    (Te4[temp >> 24] & 0xff000000) ^
869 			    (Te4[(temp >> 16) & 0xff] & 0x00ff0000) ^
870 			    (Te4[(temp >> 8) & 0xff] & 0x0000ff00) ^
871 			    (Te4[temp & 0xff] & 0x000000ff);
872 			rk[13] = rk[5] ^ rk[12];
873 			rk[14] = rk[6] ^ rk[13];
874 			rk[15] = rk[7] ^ rk[14];
875 
876 			rk += 8;
877 		}
878 	}
879 
880 	return (0);
881 }
882 
883 /*
884  *  Expand the cipher key into the decryption key schedule.
885  *  Return the number of rounds for the given cipher key size.
886  *  The size of the key schedule depends on the number of rounds
887  *  (which can be computed from the size of the key), i.e. 4*(Nr + 1).
888  *
889  * Parameters:
890  * rk		AES key schedule 32-bit array to be initialized
891  * cipherKey	User key
892  * keyBits	AES key size (128, 192, or 256 bits)
893  */
894 static int
895 rijndael_key_setup_dec(uint32_t rk[], const uint32_t cipherKey[], int keyBits)
896 {
897 	int	 Nr, i, j;
898 	uint32_t temp;
899 
900 	/* expand the cipher key: */
901 	Nr = rijndael_key_setup_enc(rk, cipherKey, keyBits);
902 
903 	/* invert the order of the round keys: */
904 	for (i = 0, j = 4 * Nr; i < j; i += 4, j -= 4) {
905 		temp = rk[i];
906 		rk[i] = rk[j];
907 		rk[j] = temp;
908 		temp = rk[i + 1];
909 		rk[i + 1] = rk[j + 1];
910 		rk[j + 1] = temp;
911 		temp = rk[i + 2];
912 		rk[i + 2] = rk[j + 2];
913 		rk[j + 2] = temp;
914 		temp = rk[i + 3];
915 		rk[i + 3] = rk[j + 3];
916 		rk[j + 3] = temp;
917 	}
918 
919 	/*
920 	 * apply the inverse MixColumn transform to all
921 	 * round keys but the first and the last:
922 	 */
923 	for (i = 1; i < Nr; i++) {
924 		rk += 4;
925 		rk[0] = Td0[Te4[rk[0] >> 24] & 0xff] ^
926 		    Td1[Te4[(rk[0] >> 16) & 0xff] & 0xff] ^
927 		    Td2[Te4[(rk[0] >> 8) & 0xff] & 0xff] ^
928 		    Td3[Te4[rk[0] & 0xff] & 0xff];
929 		rk[1] = Td0[Te4[rk[1] >> 24] & 0xff] ^
930 		    Td1[Te4[(rk[1] >> 16) & 0xff] & 0xff] ^
931 		    Td2[Te4[(rk[1] >> 8) & 0xff] & 0xff] ^
932 		    Td3[Te4[rk[1] & 0xff] & 0xff];
933 		rk[2] = Td0[Te4[rk[2] >> 24] & 0xff] ^
934 		    Td1[Te4[(rk[2] >> 16) & 0xff] & 0xff] ^
935 		    Td2[Te4[(rk[2] >> 8) & 0xff] & 0xff] ^
936 		    Td3[Te4[rk[2] & 0xff] & 0xff];
937 		rk[3] = Td0[Te4[rk[3] >> 24] & 0xff] ^
938 		    Td1[Te4[(rk[3] >> 16) & 0xff] & 0xff] ^
939 		    Td2[Te4[(rk[3] >> 8) & 0xff] & 0xff] ^
940 		    Td3[Te4[rk[3] & 0xff] & 0xff];
941 	}
942 
943 	return (Nr);
944 }
945 
946 /*
947  * Expand the 32-bit AES cipher key array into the encryption and decryption
948  * key schedules.
949  *
950  * Parameters:
951  * key		AES key schedule to be initialized
952  * keyarr32	User key
953  * keyBits	AES key size (128, 192, or 256 bits)
954  */
955 static void
956 aes_generic_generate(aes_key_t *key, const uint32_t *keyarr32, int keybits)
957 {
958 	key->nr = rijndael_key_setup_enc(&(key->encr_ks.ks32[0]), keyarr32,
959 	    keybits);
960 	key->nr = rijndael_key_setup_dec(&(key->decr_ks.ks32[0]), keyarr32,
961 	    keybits);
962 }
963 
964 /*
965  * Encrypt one block of data. The block is assumed to be an array
966  * of four uint32_t values, so copy for alignment (and byte-order
967  * reversal for little endian systems might be necessary on the
968  * input and output byte streams.
969  * The size of the key schedule depends on the number of rounds
970  * (which can be computed from the size of the key), i.e. 4*(Nr + 1).
971  *
972  * Parameters:
973  * rk	Key schedule, of aes_ks_t (60 32-bit integers)
974  * Nr	Number of rounds
975  * pt	Input block (plain text)
976  * ct	Output block (crypto text).  Can overlap with pt
977  */
978 static void
979 aes_generic_encrypt(const uint32_t rk[], int Nr, const uint32_t pt[4],
980     uint32_t ct[4])
981 {
982 	uint32_t	s0, s1, s2, s3, t0, t1, t2, t3;
983 	int		r;
984 
985 	/*
986 	 * map byte array block to cipher state
987 	 * and add initial round key:
988 	 */
989 
990 	s0 = pt[0] ^ rk[0];
991 	s1 = pt[1] ^ rk[1];
992 	s2 = pt[2] ^ rk[2];
993 	s3 = pt[3] ^ rk[3];
994 
995 	/*
996 	 * Nr - 1 full rounds:
997 	 */
998 
999 	r = Nr >> 1;
1000 
1001 	for (;;) {
1002 		t0 = Te0[s0 >> 24] ^
1003 		    Te1[(s1 >> 16) & 0xff] ^
1004 		    Te2[(s2 >>  8) & 0xff] ^
1005 		    Te3[s3 & 0xff] ^
1006 		    rk[4];
1007 
1008 		t1 = Te0[s1 >> 24] ^
1009 		    Te1[(s2 >> 16) & 0xff] ^
1010 		    Te2[(s3 >>  8) & 0xff] ^
1011 		    Te3[s0 & 0xff] ^
1012 		    rk[5];
1013 
1014 		t2 = Te0[s2 >> 24] ^
1015 		    Te1[(s3 >> 16) & 0xff] ^
1016 		    Te2[(s0 >>  8) & 0xff] ^
1017 		    Te3[s1 & 0xff] ^
1018 		    rk[6];
1019 
1020 		t3 = Te0[s3 >> 24] ^
1021 		    Te1[(s0 >> 16) & 0xff] ^
1022 		    Te2[(s1 >>  8) & 0xff] ^
1023 		    Te3[s2 & 0xff] ^
1024 		    rk[7];
1025 
1026 		rk += 8;
1027 
1028 		if (--r == 0) {
1029 			break;
1030 		}
1031 
1032 		s0 = Te0[t0 >> 24] ^
1033 		    Te1[(t1 >> 16) & 0xff] ^
1034 		    Te2[(t2 >>  8) & 0xff] ^
1035 		    Te3[t3 & 0xff] ^
1036 		    rk[0];
1037 
1038 		s1 = Te0[t1 >> 24] ^
1039 		    Te1[(t2 >> 16) & 0xff] ^
1040 		    Te2[(t3 >>  8) & 0xff] ^
1041 		    Te3[t0 & 0xff] ^
1042 		    rk[1];
1043 
1044 		s2 = Te0[t2 >> 24] ^
1045 		    Te1[(t3 >> 16) & 0xff] ^
1046 		    Te2[(t0 >>  8) & 0xff] ^
1047 		    Te3[t1 & 0xff] ^
1048 		    rk[2];
1049 
1050 		s3 = Te0[t3 >> 24] ^
1051 		    Te1[(t0 >> 16) & 0xff] ^
1052 		    Te2[(t1 >>  8) & 0xff] ^
1053 		    Te3[t2 & 0xff] ^
1054 		    rk[3];
1055 	}
1056 
1057 	/*
1058 	 * apply last round and
1059 	 * map cipher state to byte array block:
1060 	 */
1061 
1062 	s0 = (Te4[(t0 >> 24)] & 0xff000000) ^
1063 	    (Te4[(t1 >> 16) & 0xff] & 0x00ff0000) ^
1064 	    (Te4[(t2 >>  8) & 0xff] & 0x0000ff00) ^
1065 	    (Te4[t3 & 0xff] & 0x000000ff) ^
1066 	    rk[0];
1067 	ct[0] = s0;
1068 
1069 	s1 = (Te4[(t1 >> 24)] & 0xff000000) ^
1070 	    (Te4[(t2 >> 16) & 0xff] & 0x00ff0000) ^
1071 	    (Te4[(t3 >>  8) & 0xff] & 0x0000ff00) ^
1072 	    (Te4[t0 & 0xff] & 0x000000ff) ^
1073 	    rk[1];
1074 	ct[1] = s1;
1075 
1076 	s2 = (Te4[(t2 >> 24)] & 0xff000000) ^
1077 	    (Te4[(t3 >> 16) & 0xff] & 0x00ff0000) ^
1078 	    (Te4[(t0 >>  8) & 0xff] & 0x0000ff00) ^
1079 	    (Te4[t1 & 0xff] & 0x000000ff) ^
1080 	    rk[2];
1081 	ct[2] = s2;
1082 
1083 	s3 = (Te4[(t3 >> 24)] & 0xff000000) ^
1084 	    (Te4[(t0 >> 16) & 0xff] & 0x00ff0000) ^
1085 	    (Te4[(t1 >>  8) & 0xff] & 0x0000ff00) ^
1086 	    (Te4[t2 & 0xff] & 0x000000ff) ^
1087 	    rk[3];
1088 	ct[3] = s3;
1089 }
1090 
1091 
1092 /*
1093  * Decrypt one block of data. The block is assumed to be an array
1094  * of four uint32_t values, so copy for alignment (and byte-order
1095  * reversal for little endian systems might be necessary on the
1096  * input and output byte streams.
1097  * The size of the key schedule depends on the number of rounds
1098  * (which can be computed from the size of the key), i.e. 4*(Nr + 1).
1099  *
1100  * Parameters:
1101  * rk	Key schedule, of aes_ks_t (60 32-bit integers)
1102  * Nr	Number of rounds
1103  * ct	Input block (crypto text)
1104  * pt	Output block (plain text). Can overlap with pt
1105  */
1106 static void
1107 aes_generic_decrypt(const uint32_t rk[], int Nr, const uint32_t ct[4],
1108     uint32_t pt[4])
1109 {
1110 	uint32_t s0, s1, s2, s3, t0, t1, t2, t3;
1111 	int	 r;
1112 
1113 	/*
1114 	 * map byte array block to cipher state
1115 	 * and add initial round key:
1116 	 */
1117 	s0 = ct[0] ^ rk[0];
1118 	s1 = ct[1] ^ rk[1];
1119 	s2 = ct[2] ^ rk[2];
1120 	s3 = ct[3] ^ rk[3];
1121 
1122 	/*
1123 	 * Nr - 1 full rounds:
1124 	 */
1125 
1126 	r = Nr >> 1;
1127 
1128 	for (;;) {
1129 		t0 = Td0[s0 >> 24] ^
1130 		    Td1[(s3 >> 16) & 0xff] ^
1131 		    Td2[(s2 >> 8) & 0xff] ^
1132 		    Td3[s1 & 0xff] ^
1133 		    rk[4];
1134 
1135 		t1 = Td0[s1 >> 24] ^
1136 		    Td1[(s0 >> 16) & 0xff] ^
1137 		    Td2[(s3 >>  8) & 0xff] ^
1138 		    Td3[s2 & 0xff] ^
1139 		    rk[5];
1140 
1141 		t2 = Td0[s2 >> 24] ^
1142 		    Td1[(s1 >> 16) & 0xff] ^
1143 		    Td2[(s0 >>  8) & 0xff] ^
1144 		    Td3[s3 & 0xff] ^
1145 		    rk[6];
1146 
1147 		t3 = Td0[s3 >> 24] ^
1148 		    Td1[(s2 >> 16) & 0xff] ^
1149 		    Td2[(s1 >> 8) & 0xff] ^
1150 		    Td3[s0 & 0xff] ^
1151 		    rk[7];
1152 
1153 		rk += 8;
1154 
1155 		if (--r == 0) {
1156 			break;
1157 		}
1158 
1159 		s0 = Td0[t0 >> 24] ^
1160 		    Td1[(t3 >> 16) & 0xff] ^
1161 		    Td2[(t2 >> 8) & 0xff] ^
1162 		    Td3[t1 & 0xff] ^
1163 		    rk[0];
1164 
1165 		s1 = Td0[t1 >> 24] ^
1166 		    Td1[(t0 >> 16) & 0xff] ^
1167 		    Td2[(t3 >> 8) & 0xff] ^
1168 		    Td3[t2 & 0xff] ^
1169 		    rk[1];
1170 
1171 		s2 = Td0[t2 >> 24] ^
1172 		    Td1[(t1 >> 16) & 0xff] ^
1173 		    Td2[(t0 >> 8) & 0xff] ^
1174 		    Td3[t3 & 0xff] ^
1175 		    rk[2];
1176 
1177 		s3 = Td0[t3 >> 24] ^
1178 		    Td1[(t2 >> 16) & 0xff] ^
1179 		    Td2[(t1 >> 8) & 0xff] ^
1180 		    Td3[t0 & 0xff] ^
1181 		    rk[3];
1182 	}
1183 
1184 	/*
1185 	 * apply last round and
1186 	 * map cipher state to byte array block:
1187 	 */
1188 
1189 	s0 = (Td4[t0 >> 24] & 0xff000000) ^
1190 	    (Td4[(t3 >> 16) & 0xff] & 0x00ff0000) ^
1191 	    (Td4[(t2 >> 8) & 0xff] & 0x0000ff00) ^
1192 	    (Td4[t1 & 0xff] & 0x000000ff) ^
1193 	    rk[0];
1194 	pt[0] = s0;
1195 
1196 	s1 = (Td4[t1 >> 24] & 0xff000000) ^
1197 	    (Td4[(t0 >> 16) & 0xff] & 0x00ff0000) ^
1198 	    (Td4[(t3 >>  8) & 0xff] & 0x0000ff00) ^
1199 	    (Td4[t2 & 0xff] & 0x000000ff) ^
1200 	    rk[1];
1201 	pt[1] = s1;
1202 
1203 	s2 = (Td4[t2 >> 24] & 0xff000000) ^
1204 	    (Td4[(t1 >> 16) & 0xff] & 0x00ff0000) ^
1205 	    (Td4[(t0 >> 8) & 0xff] & 0x0000ff00) ^
1206 	    (Td4[t3 & 0xff] & 0x000000ff) ^
1207 	    rk[2];
1208 	pt[2] = s2;
1209 
1210 	s3 = (Td4[t3 >> 24] & 0xff000000) ^
1211 	    (Td4[(t2 >> 16) & 0xff] & 0x00ff0000) ^
1212 	    (Td4[(t1 >>  8) & 0xff] & 0x0000ff00) ^
1213 	    (Td4[t0 & 0xff] & 0x000000ff) ^
1214 	    rk[3];
1215 	pt[3] = s3;
1216 }
1217 
1218 static boolean_t
1219 aes_generic_will_work(void)
1220 {
1221 	return (B_TRUE);
1222 }
1223 
1224 /*
1225  * For _LITTLE_ENDIAN machines, reverse every 4 bytes in the key.
1226  * On _BIG_ENDIAN, copy the key without reversing bytes.
1227  *
1228  * SPARCv8/v9 uses a key schedule array with 64-bit elements.
1229  * X86/AMD64  uses a key schedule array with 32-bit elements.
1230  */
1231 const aes_impl_ops_t aes_generic_impl = {
1232 	.generate = &aes_generic_generate,
1233 	.encrypt = &aes_generic_encrypt,
1234 	.decrypt = &aes_generic_decrypt,
1235 	.is_supported = &aes_generic_will_work,
1236 #if defined(_ZFS_LITTLE_ENDIAN)
1237 	.needs_byteswap = B_TRUE,
1238 #else
1239 	.needs_byteswap = B_FALSE,
1240 #endif
1241 	.name = "generic"
1242 };
1243