annotate aes.c @ 175:937928db9781 libavutil

cosmetic
author michael
date Sun, 14 Jan 2007 13:47:15 +0000
parents 263bbdc10c1e
children a02c8ad699a7
Ignore whitespace changes - Everywhere: Within whitespace: At end of lines:
rev   line source
164
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
1 /*
170
aa74806460c9 copyright fix
michael
parents: 169
diff changeset
2 * copyright (c) 2007 Michael Niedermayer <michaelni@gmx.at> and Reimar Döffinger
164
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
3 *
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
4 * This file is part of FFmpeg.
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
5 *
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
6 * FFmpeg is free software; you can redistribute it and/or
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
7 * modify it under the terms of the GNU Lesser General Public
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
8 * License as published by the Free Software Foundation; either
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
9 * version 2.1 of the License, or (at your option) any later version.
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
10 *
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
11 * FFmpeg is distributed in the hope that it will be useful,
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
12 * but WITHOUT ANY WARRANTY; without even the implied warranty of
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
13 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
14 * Lesser General Public License for more details.
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
15 *
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
16 * You should have received a copy of the GNU Lesser General Public
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
17 * License along with FFmpeg; if not, write to the Free Software
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
18 * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
19 */
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
20
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
21 #include "common.h"
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
22 #include "log.h"
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
23 #include "aes.h"
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
24
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
25 typedef struct AVAES{
174
263bbdc10c1e simplify round_key generation by writing over the end but ensuring that theres some irrelevant stuff afterwards
michael
parents: 173
diff changeset
26 uint8_t round_key[15][4][4];
164
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
27 uint8_t state[4][4];
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
28 int rounds;
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
29 }AVAES;
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
30
171
acc949f04f7a seems the larger rcon values are never accessed
michael
parents: 170
diff changeset
31 static const uint8_t rcon[11] = {
acc949f04f7a seems the larger rcon values are never accessed
michael
parents: 170
diff changeset
32 0x01, 0x02, 0x04, 0x08, 0x10, 0x20, 0x40, 0x80, 0x1b, 0x36, 0x6c
164
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
33 };
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
34
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
35 static uint8_t sbox[256];
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
36 static uint8_t inv_sbox[256];
169
94bd7a8efb06 stealing multbl trick from reimar
michael
parents: 168
diff changeset
37 #ifdef CONFIG_SMALL
94bd7a8efb06 stealing multbl trick from reimar
michael
parents: 168
diff changeset
38 static uint32_t enc_multbl[1][256];
94bd7a8efb06 stealing multbl trick from reimar
michael
parents: 168
diff changeset
39 static uint32_t dec_multbl[1][256];
94bd7a8efb06 stealing multbl trick from reimar
michael
parents: 168
diff changeset
40 #else
94bd7a8efb06 stealing multbl trick from reimar
michael
parents: 168
diff changeset
41 static uint32_t enc_multbl[4][256];
94bd7a8efb06 stealing multbl trick from reimar
michael
parents: 168
diff changeset
42 static uint32_t dec_multbl[4][256];
94bd7a8efb06 stealing multbl trick from reimar
michael
parents: 168
diff changeset
43 #endif
164
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
44
168
8ebd419dcff9 stealing reimars XOR_BLOCK
michael
parents: 167
diff changeset
45 static inline void addkey(uint64_t state[2], uint64_t round_key[2]){
8ebd419dcff9 stealing reimars XOR_BLOCK
michael
parents: 167
diff changeset
46 state[0] ^= round_key[0];
8ebd419dcff9 stealing reimars XOR_BLOCK
michael
parents: 167
diff changeset
47 state[1] ^= round_key[1];
164
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
48 }
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
49
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
50 #define SUBSHIFT0(s, box) s[0]=box[s[ 0]]; s[ 4]=box[s[ 4]]; s[ 8]=box[s[ 8]]; s[12]=box[s[12]];
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
51 #define SUBSHIFT1(s, box) t=s[0]; s[0]=box[s[ 4]]; s[ 4]=box[s[ 8]]; s[ 8]=box[s[12]]; s[12]=box[t];
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
52 #define SUBSHIFT2(s, box) t=s[0]; s[0]=box[s[ 8]]; s[ 8]=box[ t]; t=s[ 4]; s[ 4]=box[s[12]]; s[12]=box[t];
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
53 #define SUBSHIFT3(s, box) t=s[0]; s[0]=box[s[12]]; s[12]=box[s[ 8]]; s[ 8]=box[s[ 4]]; s[ 4]=box[t];
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
54
169
94bd7a8efb06 stealing multbl trick from reimar
michael
parents: 168
diff changeset
55 static inline int mul(int a, int b, uint8_t alog8[256]){
164
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
56 if(a==255) return 0;
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
57 else return alog8[a+b];
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
58 }
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
59
169
94bd7a8efb06 stealing multbl trick from reimar
michael
parents: 168
diff changeset
60 #define ROT(x,s) ((x>>s)|(x<<(32-s))
164
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
61
169
94bd7a8efb06 stealing multbl trick from reimar
michael
parents: 168
diff changeset
62 static inline void mix(uint8_t state[4][4], uint32_t multbl[4][256]){
94bd7a8efb06 stealing multbl trick from reimar
michael
parents: 168
diff changeset
63 int i;
94bd7a8efb06 stealing multbl trick from reimar
michael
parents: 168
diff changeset
64 for(i=0; i<4; i++)
94bd7a8efb06 stealing multbl trick from reimar
michael
parents: 168
diff changeset
65 #ifdef CONFIG_SMALL
94bd7a8efb06 stealing multbl trick from reimar
michael
parents: 168
diff changeset
66 ((uint32_t *)(state))[i] = multbl[0][state[i][0]] ^ ROT(multbl[0][state[i][1]], 8)
94bd7a8efb06 stealing multbl trick from reimar
michael
parents: 168
diff changeset
67 ^ROT(multbl[0][state[i][2]],16) ^ ROT(multbl[0][state[i][3]],24);
94bd7a8efb06 stealing multbl trick from reimar
michael
parents: 168
diff changeset
68
94bd7a8efb06 stealing multbl trick from reimar
michael
parents: 168
diff changeset
69 #else
94bd7a8efb06 stealing multbl trick from reimar
michael
parents: 168
diff changeset
70 ((uint32_t *)(state))[i] = multbl[0][state[i][0]] ^ multbl[1][state[i][1]]
94bd7a8efb06 stealing multbl trick from reimar
michael
parents: 168
diff changeset
71 ^multbl[2][state[i][2]] ^ multbl[3][state[i][3]];
94bd7a8efb06 stealing multbl trick from reimar
michael
parents: 168
diff changeset
72 #endif
164
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
73 }
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
74
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
75 void av_aes_decrypt(AVAES *a){
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
76 int t, r;
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
77
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
78 for(r=a->rounds-1; r>=0; r--){
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
79 if(r==a->rounds-1)
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
80 addkey(a->state, a->round_key[r+1]);
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
81 else
169
94bd7a8efb06 stealing multbl trick from reimar
michael
parents: 168
diff changeset
82 mix(a->state, dec_multbl);
164
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
83 SUBSHIFT0((a->state[0]+0), inv_sbox)
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
84 SUBSHIFT3((a->state[0]+1), inv_sbox)
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
85 SUBSHIFT2((a->state[0]+2), inv_sbox)
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
86 SUBSHIFT1((a->state[0]+3), inv_sbox)
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
87 addkey(a->state, a->round_key[r]);
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
88 }
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
89 }
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
90
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
91 void av_aes_encrypt(AVAES *a){
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
92 int r, t;
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
93
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
94 for(r=0; r<a->rounds; r++){
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
95 addkey(a->state, a->round_key[r]);
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
96 SUBSHIFT0((a->state[0]+0), sbox)
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
97 SUBSHIFT1((a->state[0]+1), sbox)
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
98 SUBSHIFT2((a->state[0]+2), sbox)
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
99 SUBSHIFT3((a->state[0]+3), sbox)
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
100 if(r==a->rounds-1)
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
101 addkey(a->state, a->round_key[r+1]);
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
102 else
169
94bd7a8efb06 stealing multbl trick from reimar
michael
parents: 168
diff changeset
103 mix(a->state, enc_multbl); //FIXME replace log8 by const / optimze mix as this can be simplified alot
164
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
104 }
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
105 }
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
106
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
107 // this is based on the reference AES code by Paulo Barreto and Vincent Rijmen
167
6104bbdb757b cosmetic
michael
parents: 166
diff changeset
108 AVAES *av_aes_init(uint8_t *key, int key_bits) {
166
c7ea70dea191 memleak
michael
parents: 165
diff changeset
109 AVAES *a;
164
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
110 int i, j, t, rconpointer = 0;
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
111 uint8_t tk[8][4];
167
6104bbdb757b cosmetic
michael
parents: 166
diff changeset
112 int KC= key_bits/32;
6104bbdb757b cosmetic
michael
parents: 166
diff changeset
113 int rounds= KC + 6;
169
94bd7a8efb06 stealing multbl trick from reimar
michael
parents: 168
diff changeset
114 uint8_t log8[256];
94bd7a8efb06 stealing multbl trick from reimar
michael
parents: 168
diff changeset
115 uint8_t alog8[512];
164
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
116
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
117 if(!sbox[255]){
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
118 j=1;
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
119 for(i=0; i<255; i++){
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
120 alog8[i]=
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
121 alog8[i+255]= j;
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
122 log8[j]= i;
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
123 j^= j+j;
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
124 if(j>255) j^= 0x11B;
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
125 }
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
126 log8[0]= 255;
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
127 for(i=0; i<256; i++){
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
128 j= i ? alog8[255-log8[i]] : 0;
165
d64f200afe17 simplify sbox init
michael
parents: 164
diff changeset
129 j ^= (j<<1) ^ (j<<2) ^ (j<<3) ^ (j<<4);
d64f200afe17 simplify sbox init
michael
parents: 164
diff changeset
130 j = (j ^ (j>>8) ^ 99) & 255;
164
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
131 inv_sbox[j]= i;
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
132 sbox [i]= j;
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
133 // av_log(NULL, AV_LOG_ERROR, "%d, ", log8[i]);
169
94bd7a8efb06 stealing multbl trick from reimar
michael
parents: 168
diff changeset
134 //FIXME multbl init
164
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
135 }
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
136 }
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
137
167
6104bbdb757b cosmetic
michael
parents: 166
diff changeset
138 if(key_bits!=128 && key_bits!=192 && key_bits!=256)
164
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
139 return NULL;
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
140
166
c7ea70dea191 memleak
michael
parents: 165
diff changeset
141 a= av_malloc(sizeof(AVAES));
167
6104bbdb757b cosmetic
michael
parents: 166
diff changeset
142 a->rounds= rounds;
166
c7ea70dea191 memleak
michael
parents: 165
diff changeset
143
164
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
144 memcpy(tk, key, KC*4);
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
145
174
263bbdc10c1e simplify round_key generation by writing over the end but ensuring that theres some irrelevant stuff afterwards
michael
parents: 173
diff changeset
146 for(t= 0; t < (rounds+1)*4;) {
263bbdc10c1e simplify round_key generation by writing over the end but ensuring that theres some irrelevant stuff afterwards
michael
parents: 173
diff changeset
147 memcpy(a->round_key[0][t], tk, KC*4);
263bbdc10c1e simplify round_key generation by writing over the end but ensuring that theres some irrelevant stuff afterwards
michael
parents: 173
diff changeset
148 t+= KC;
164
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
149
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
150 for(i = 0; i < 4; i++)
173
712b0f43e8ac cosmetics
michael
parents: 172
diff changeset
151 tk[0][i] ^= sbox[tk[KC-1][(i+1)&3]];
164
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
152 tk[0][0] ^= rcon[rconpointer++];
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
153
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
154 for(j = 1; j < KC; j++){
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
155 if(KC != 8 || j != KC/2)
175
937928db9781 cosmetic
michael
parents: 174
diff changeset
156 for(i = 0; i < 4; i++) tk[j][i] ^= tk[j-1][i];
164
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
157 else
175
937928db9781 cosmetic
michael
parents: 174
diff changeset
158 for(i = 0; i < 4; i++) tk[j][i] ^= sbox[tk[j-1][i]];
164
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
159 }
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
160 }
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
161 return a;
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
162 }
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
163
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
164 #ifdef TEST
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
165
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
166 int main(){
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
167 int i,j,k;
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
168 AVAES *a= av_aes_init("PI=3.141592654..", 128);
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
169
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
170 for(i=0; i<10000; i++){
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
171 }
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
172 return 0;
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
173 }
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
174 #endif