xref: /openbsd/lib/libcrypto/modes/ofb128.c (revision 0e3d1220)
1*0e3d1220Sbeck /* $OpenBSD: ofb128.c,v 1.7 2023/07/08 14:56:54 beck Exp $ */
2f1535dc8Sdjm /* ====================================================================
3f1535dc8Sdjm  * Copyright (c) 2008 The OpenSSL Project.  All rights reserved.
4f1535dc8Sdjm  *
5f1535dc8Sdjm  * Redistribution and use in source and binary forms, with or without
6f1535dc8Sdjm  * modification, are permitted provided that the following conditions
7f1535dc8Sdjm  * are met:
8f1535dc8Sdjm  *
9f1535dc8Sdjm  * 1. Redistributions of source code must retain the above copyright
10f1535dc8Sdjm  *    notice, this list of conditions and the following disclaimer.
11f1535dc8Sdjm  *
12f1535dc8Sdjm  * 2. Redistributions in binary form must reproduce the above copyright
13f1535dc8Sdjm  *    notice, this list of conditions and the following disclaimer in
14f1535dc8Sdjm  *    the documentation and/or other materials provided with the
15f1535dc8Sdjm  *    distribution.
16f1535dc8Sdjm  *
17f1535dc8Sdjm  * 3. All advertising materials mentioning features or use of this
18f1535dc8Sdjm  *    software must display the following acknowledgment:
19f1535dc8Sdjm  *    "This product includes software developed by the OpenSSL Project
20f1535dc8Sdjm  *    for use in the OpenSSL Toolkit. (http://www.openssl.org/)"
21f1535dc8Sdjm  *
22f1535dc8Sdjm  * 4. The names "OpenSSL Toolkit" and "OpenSSL Project" must not be used to
23f1535dc8Sdjm  *    endorse or promote products derived from this software without
24f1535dc8Sdjm  *    prior written permission. For written permission, please contact
25f1535dc8Sdjm  *    openssl-core@openssl.org.
26f1535dc8Sdjm  *
27f1535dc8Sdjm  * 5. Products derived from this software may not be called "OpenSSL"
28f1535dc8Sdjm  *    nor may "OpenSSL" appear in their names without prior written
29f1535dc8Sdjm  *    permission of the OpenSSL Project.
30f1535dc8Sdjm  *
31f1535dc8Sdjm  * 6. Redistributions of any form whatsoever must retain the following
32f1535dc8Sdjm  *    acknowledgment:
33f1535dc8Sdjm  *    "This product includes software developed by the OpenSSL Project
34f1535dc8Sdjm  *    for use in the OpenSSL Toolkit (http://www.openssl.org/)"
35f1535dc8Sdjm  *
36f1535dc8Sdjm  * THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT ``AS IS'' AND ANY
37f1535dc8Sdjm  * EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
38f1535dc8Sdjm  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
39f1535dc8Sdjm  * PURPOSE ARE DISCLAIMED.  IN NO EVENT SHALL THE OpenSSL PROJECT OR
40f1535dc8Sdjm  * ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
41f1535dc8Sdjm  * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
42f1535dc8Sdjm  * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
43f1535dc8Sdjm  * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
44f1535dc8Sdjm  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
45f1535dc8Sdjm  * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
46f1535dc8Sdjm  * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
47f1535dc8Sdjm  * OF THE POSSIBILITY OF SUCH DAMAGE.
48f1535dc8Sdjm  * ====================================================================
49f1535dc8Sdjm  *
50f1535dc8Sdjm  */
51f1535dc8Sdjm 
52ec07fdf1Sdjm #include <openssl/crypto.h>
53c9675a23Stb #include "modes_local.h"
54f1535dc8Sdjm #include <string.h>
55f1535dc8Sdjm 
56f1535dc8Sdjm #ifndef MODES_DEBUG
57f1535dc8Sdjm # ifndef NDEBUG
58f1535dc8Sdjm #  define NDEBUG
59f1535dc8Sdjm # endif
60f1535dc8Sdjm #endif
61f1535dc8Sdjm 
62f1535dc8Sdjm /* The input and output encrypted as though 128bit ofb mode is being
63f1535dc8Sdjm  * used.  The extra state information to record how much of the
64f1535dc8Sdjm  * 128bit block we have used is contained in *num;
65f1535dc8Sdjm  */
660451f6ceSbeck void
CRYPTO_ofb128_encrypt(const unsigned char * in,unsigned char * out,size_t len,const void * key,unsigned char ivec[16],int * num,block128_f block)670451f6ceSbeck CRYPTO_ofb128_encrypt(const unsigned char *in, unsigned char *out,
68f1535dc8Sdjm     size_t len, const void *key,
69f1535dc8Sdjm     unsigned char ivec[16], int *num,
70f1535dc8Sdjm     block128_f block)
71f1535dc8Sdjm {
72f1535dc8Sdjm 	unsigned int n;
73f1535dc8Sdjm 	size_t l = 0;
74f1535dc8Sdjm 
75f1535dc8Sdjm 	n = *num;
76f1535dc8Sdjm 
77f1535dc8Sdjm #if !defined(OPENSSL_SMALL_FOOTPRINT)
780451f6ceSbeck 	if (16 % sizeof(size_t) == 0)
790451f6ceSbeck 		do { /* always true actually */
80f1535dc8Sdjm 			while (n && len) {
81f1535dc8Sdjm 				*(out++) = *(in++) ^ ivec[n];
82f1535dc8Sdjm 				--len;
83f1535dc8Sdjm 				n = (n + 1) % 16;
84f1535dc8Sdjm 			}
85d57444e6Smiod #ifdef __STRICT_ALIGNMENT
860451f6ceSbeck 			if (((size_t)in|(size_t)out|(size_t)ivec) %
870451f6ceSbeck 			    sizeof(size_t) != 0)
88f1535dc8Sdjm 				break;
89f1535dc8Sdjm #endif
90f1535dc8Sdjm 			while (len >= 16) {
91f1535dc8Sdjm 				(*block)(ivec, ivec, key);
92f1535dc8Sdjm 				for (; n < 16; n += sizeof(size_t))
93f1535dc8Sdjm 					*(size_t *)(out + n) =
940451f6ceSbeck 					    *(size_t *)(in + n) ^ *(size_t *)(ivec +
950451f6ceSbeck 					    n);
96f1535dc8Sdjm 				len -= 16;
97f1535dc8Sdjm 				out += 16;
98f1535dc8Sdjm 				in += 16;
99f1535dc8Sdjm 				n = 0;
100f1535dc8Sdjm 			}
101f1535dc8Sdjm 			if (len) {
102f1535dc8Sdjm 				(*block)(ivec, ivec, key);
103f1535dc8Sdjm 				while (len--) {
104f1535dc8Sdjm 					out[n] = in[n] ^ ivec[n];
105f1535dc8Sdjm 					++n;
106f1535dc8Sdjm 				}
107f1535dc8Sdjm 			}
108f1535dc8Sdjm 			*num = n;
109f1535dc8Sdjm 			return;
110f1535dc8Sdjm 		} while (0);
111f1535dc8Sdjm 	/* the rest would be commonly eliminated by x86* compiler */
112f1535dc8Sdjm #endif
113f1535dc8Sdjm 	while (l < len) {
114f1535dc8Sdjm 		if (n == 0) {
115f1535dc8Sdjm 			(*block)(ivec, ivec, key);
116f1535dc8Sdjm 		}
117f1535dc8Sdjm 		out[l] = in[l] ^ ivec[n];
118f1535dc8Sdjm 		++l;
119f1535dc8Sdjm 		n = (n + 1) % 16;
120f1535dc8Sdjm 	}
121f1535dc8Sdjm 
122f1535dc8Sdjm 	*num = n;
123f1535dc8Sdjm }
124*0e3d1220Sbeck LCRYPTO_ALIAS(CRYPTO_ofb128_encrypt);
125