1*0e3d1220Sbeck /* $OpenBSD: ofb128.c,v 1.7 2023/07/08 14:56:54 beck Exp $ */
2f1535dc8Sdjm /* ====================================================================
3f1535dc8Sdjm * Copyright (c) 2008 The OpenSSL Project. All rights reserved.
4f1535dc8Sdjm *
5f1535dc8Sdjm * Redistribution and use in source and binary forms, with or without
6f1535dc8Sdjm * modification, are permitted provided that the following conditions
7f1535dc8Sdjm * are met:
8f1535dc8Sdjm *
9f1535dc8Sdjm * 1. Redistributions of source code must retain the above copyright
10f1535dc8Sdjm * notice, this list of conditions and the following disclaimer.
11f1535dc8Sdjm *
12f1535dc8Sdjm * 2. Redistributions in binary form must reproduce the above copyright
13f1535dc8Sdjm * notice, this list of conditions and the following disclaimer in
14f1535dc8Sdjm * the documentation and/or other materials provided with the
15f1535dc8Sdjm * distribution.
16f1535dc8Sdjm *
17f1535dc8Sdjm * 3. All advertising materials mentioning features or use of this
18f1535dc8Sdjm * software must display the following acknowledgment:
19f1535dc8Sdjm * "This product includes software developed by the OpenSSL Project
20f1535dc8Sdjm * for use in the OpenSSL Toolkit. (http://www.openssl.org/)"
21f1535dc8Sdjm *
22f1535dc8Sdjm * 4. The names "OpenSSL Toolkit" and "OpenSSL Project" must not be used to
23f1535dc8Sdjm * endorse or promote products derived from this software without
24f1535dc8Sdjm * prior written permission. For written permission, please contact
25f1535dc8Sdjm * openssl-core@openssl.org.
26f1535dc8Sdjm *
27f1535dc8Sdjm * 5. Products derived from this software may not be called "OpenSSL"
28f1535dc8Sdjm * nor may "OpenSSL" appear in their names without prior written
29f1535dc8Sdjm * permission of the OpenSSL Project.
30f1535dc8Sdjm *
31f1535dc8Sdjm * 6. Redistributions of any form whatsoever must retain the following
32f1535dc8Sdjm * acknowledgment:
33f1535dc8Sdjm * "This product includes software developed by the OpenSSL Project
34f1535dc8Sdjm * for use in the OpenSSL Toolkit (http://www.openssl.org/)"
35f1535dc8Sdjm *
36f1535dc8Sdjm * THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT ``AS IS'' AND ANY
37f1535dc8Sdjm * EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
38f1535dc8Sdjm * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
39f1535dc8Sdjm * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE OpenSSL PROJECT OR
40f1535dc8Sdjm * ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
41f1535dc8Sdjm * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
42f1535dc8Sdjm * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
43f1535dc8Sdjm * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
44f1535dc8Sdjm * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
45f1535dc8Sdjm * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
46f1535dc8Sdjm * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
47f1535dc8Sdjm * OF THE POSSIBILITY OF SUCH DAMAGE.
48f1535dc8Sdjm * ====================================================================
49f1535dc8Sdjm *
50f1535dc8Sdjm */
51f1535dc8Sdjm
52ec07fdf1Sdjm #include <openssl/crypto.h>
53c9675a23Stb #include "modes_local.h"
54f1535dc8Sdjm #include <string.h>
55f1535dc8Sdjm
56f1535dc8Sdjm #ifndef MODES_DEBUG
57f1535dc8Sdjm # ifndef NDEBUG
58f1535dc8Sdjm # define NDEBUG
59f1535dc8Sdjm # endif
60f1535dc8Sdjm #endif
61f1535dc8Sdjm
62f1535dc8Sdjm /* The input and output encrypted as though 128bit ofb mode is being
63f1535dc8Sdjm * used. The extra state information to record how much of the
64f1535dc8Sdjm * 128bit block we have used is contained in *num;
65f1535dc8Sdjm */
660451f6ceSbeck void
CRYPTO_ofb128_encrypt(const unsigned char * in,unsigned char * out,size_t len,const void * key,unsigned char ivec[16],int * num,block128_f block)670451f6ceSbeck CRYPTO_ofb128_encrypt(const unsigned char *in, unsigned char *out,
68f1535dc8Sdjm size_t len, const void *key,
69f1535dc8Sdjm unsigned char ivec[16], int *num,
70f1535dc8Sdjm block128_f block)
71f1535dc8Sdjm {
72f1535dc8Sdjm unsigned int n;
73f1535dc8Sdjm size_t l = 0;
74f1535dc8Sdjm
75f1535dc8Sdjm n = *num;
76f1535dc8Sdjm
77f1535dc8Sdjm #if !defined(OPENSSL_SMALL_FOOTPRINT)
780451f6ceSbeck if (16 % sizeof(size_t) == 0)
790451f6ceSbeck do { /* always true actually */
80f1535dc8Sdjm while (n && len) {
81f1535dc8Sdjm *(out++) = *(in++) ^ ivec[n];
82f1535dc8Sdjm --len;
83f1535dc8Sdjm n = (n + 1) % 16;
84f1535dc8Sdjm }
85d57444e6Smiod #ifdef __STRICT_ALIGNMENT
860451f6ceSbeck if (((size_t)in|(size_t)out|(size_t)ivec) %
870451f6ceSbeck sizeof(size_t) != 0)
88f1535dc8Sdjm break;
89f1535dc8Sdjm #endif
90f1535dc8Sdjm while (len >= 16) {
91f1535dc8Sdjm (*block)(ivec, ivec, key);
92f1535dc8Sdjm for (; n < 16; n += sizeof(size_t))
93f1535dc8Sdjm *(size_t *)(out + n) =
940451f6ceSbeck *(size_t *)(in + n) ^ *(size_t *)(ivec +
950451f6ceSbeck n);
96f1535dc8Sdjm len -= 16;
97f1535dc8Sdjm out += 16;
98f1535dc8Sdjm in += 16;
99f1535dc8Sdjm n = 0;
100f1535dc8Sdjm }
101f1535dc8Sdjm if (len) {
102f1535dc8Sdjm (*block)(ivec, ivec, key);
103f1535dc8Sdjm while (len--) {
104f1535dc8Sdjm out[n] = in[n] ^ ivec[n];
105f1535dc8Sdjm ++n;
106f1535dc8Sdjm }
107f1535dc8Sdjm }
108f1535dc8Sdjm *num = n;
109f1535dc8Sdjm return;
110f1535dc8Sdjm } while (0);
111f1535dc8Sdjm /* the rest would be commonly eliminated by x86* compiler */
112f1535dc8Sdjm #endif
113f1535dc8Sdjm while (l < len) {
114f1535dc8Sdjm if (n == 0) {
115f1535dc8Sdjm (*block)(ivec, ivec, key);
116f1535dc8Sdjm }
117f1535dc8Sdjm out[l] = in[l] ^ ivec[n];
118f1535dc8Sdjm ++l;
119f1535dc8Sdjm n = (n + 1) % 16;
120f1535dc8Sdjm }
121f1535dc8Sdjm
122f1535dc8Sdjm *num = n;
123f1535dc8Sdjm }
124*0e3d1220Sbeck LCRYPTO_ALIAS(CRYPTO_ofb128_encrypt);
125