annotate aes.c @ 172:96094ee43c14 libavutil

memcpy
author michael
date Sun, 14 Jan 2007 13:37:19 +0000
parents acc949f04f7a
children 712b0f43e8ac
Ignore whitespace changes - Everywhere: Within whitespace: At end of lines:
rev   line source
164
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
1 /*
170
aa74806460c9 copyright fix
michael
parents: 169
diff changeset
2 * copyright (c) 2007 Michael Niedermayer <michaelni@gmx.at> and Reimar Döffinger
164
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
3 *
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
4 * This file is part of FFmpeg.
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
5 *
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
6 * FFmpeg is free software; you can redistribute it and/or
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
7 * modify it under the terms of the GNU Lesser General Public
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
8 * License as published by the Free Software Foundation; either
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
9 * version 2.1 of the License, or (at your option) any later version.
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
10 *
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
11 * FFmpeg is distributed in the hope that it will be useful,
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
12 * but WITHOUT ANY WARRANTY; without even the implied warranty of
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
13 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
14 * Lesser General Public License for more details.
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
15 *
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
16 * You should have received a copy of the GNU Lesser General Public
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
17 * License along with FFmpeg; if not, write to the Free Software
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
18 * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
19 */
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
20
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
21 #include "common.h"
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
22 #include "log.h"
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
23 #include "aes.h"
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
24
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
25 typedef struct AVAES{
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
26 uint8_t state[4][4];
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
27 uint8_t round_key[15][4][4];
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
28 int rounds;
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
29 }AVAES;
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
30
171
acc949f04f7a seems the larger rcon values are never accessed
michael
parents: 170
diff changeset
31 static const uint8_t rcon[11] = {
acc949f04f7a seems the larger rcon values are never accessed
michael
parents: 170
diff changeset
32 0x01, 0x02, 0x04, 0x08, 0x10, 0x20, 0x40, 0x80, 0x1b, 0x36, 0x6c
164
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
33 };
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
34
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
35 static uint8_t sbox[256];
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
36 static uint8_t inv_sbox[256];
169
94bd7a8efb06 stealing multbl trick from reimar
michael
parents: 168
diff changeset
37 #ifdef CONFIG_SMALL
94bd7a8efb06 stealing multbl trick from reimar
michael
parents: 168
diff changeset
38 static uint32_t enc_multbl[1][256];
94bd7a8efb06 stealing multbl trick from reimar
michael
parents: 168
diff changeset
39 static uint32_t dec_multbl[1][256];
94bd7a8efb06 stealing multbl trick from reimar
michael
parents: 168
diff changeset
40 #else
94bd7a8efb06 stealing multbl trick from reimar
michael
parents: 168
diff changeset
41 static uint32_t enc_multbl[4][256];
94bd7a8efb06 stealing multbl trick from reimar
michael
parents: 168
diff changeset
42 static uint32_t dec_multbl[4][256];
94bd7a8efb06 stealing multbl trick from reimar
michael
parents: 168
diff changeset
43 #endif
164
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
44
168
8ebd419dcff9 stealing reimars XOR_BLOCK
michael
parents: 167
diff changeset
45 static inline void addkey(uint64_t state[2], uint64_t round_key[2]){
8ebd419dcff9 stealing reimars XOR_BLOCK
michael
parents: 167
diff changeset
46 state[0] ^= round_key[0];
8ebd419dcff9 stealing reimars XOR_BLOCK
michael
parents: 167
diff changeset
47 state[1] ^= round_key[1];
164
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
48 }
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
49
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
50 #define SUBSHIFT0(s, box) s[0]=box[s[ 0]]; s[ 4]=box[s[ 4]]; s[ 8]=box[s[ 8]]; s[12]=box[s[12]];
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
51 #define SUBSHIFT1(s, box) t=s[0]; s[0]=box[s[ 4]]; s[ 4]=box[s[ 8]]; s[ 8]=box[s[12]]; s[12]=box[t];
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
52 #define SUBSHIFT2(s, box) t=s[0]; s[0]=box[s[ 8]]; s[ 8]=box[ t]; t=s[ 4]; s[ 4]=box[s[12]]; s[12]=box[t];
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
53 #define SUBSHIFT3(s, box) t=s[0]; s[0]=box[s[12]]; s[12]=box[s[ 8]]; s[ 8]=box[s[ 4]]; s[ 4]=box[t];
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
54
169
94bd7a8efb06 stealing multbl trick from reimar
michael
parents: 168
diff changeset
55 static inline int mul(int a, int b, uint8_t alog8[256]){
164
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
56 if(a==255) return 0;
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
57 else return alog8[a+b];
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
58 }
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
59
169
94bd7a8efb06 stealing multbl trick from reimar
michael
parents: 168
diff changeset
60 #define ROT(x,s) ((x>>s)|(x<<(32-s))
164
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
61
169
94bd7a8efb06 stealing multbl trick from reimar
michael
parents: 168
diff changeset
62 static inline void mix(uint8_t state[4][4], uint32_t multbl[4][256]){
94bd7a8efb06 stealing multbl trick from reimar
michael
parents: 168
diff changeset
63 int i;
94bd7a8efb06 stealing multbl trick from reimar
michael
parents: 168
diff changeset
64 for(i=0; i<4; i++)
94bd7a8efb06 stealing multbl trick from reimar
michael
parents: 168
diff changeset
65 #ifdef CONFIG_SMALL
94bd7a8efb06 stealing multbl trick from reimar
michael
parents: 168
diff changeset
66 ((uint32_t *)(state))[i] = multbl[0][state[i][0]] ^ ROT(multbl[0][state[i][1]], 8)
94bd7a8efb06 stealing multbl trick from reimar
michael
parents: 168
diff changeset
67 ^ROT(multbl[0][state[i][2]],16) ^ ROT(multbl[0][state[i][3]],24);
94bd7a8efb06 stealing multbl trick from reimar
michael
parents: 168
diff changeset
68
94bd7a8efb06 stealing multbl trick from reimar
michael
parents: 168
diff changeset
69 #else
94bd7a8efb06 stealing multbl trick from reimar
michael
parents: 168
diff changeset
70 ((uint32_t *)(state))[i] = multbl[0][state[i][0]] ^ multbl[1][state[i][1]]
94bd7a8efb06 stealing multbl trick from reimar
michael
parents: 168
diff changeset
71 ^multbl[2][state[i][2]] ^ multbl[3][state[i][3]];
94bd7a8efb06 stealing multbl trick from reimar
michael
parents: 168
diff changeset
72 #endif
164
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
73 }
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
74
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
75
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
76 void av_aes_decrypt(AVAES *a){
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
77 int t, r;
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
78
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
79 for(r=a->rounds-1; r>=0; r--){
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
80 if(r==a->rounds-1)
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
81 addkey(a->state, a->round_key[r+1]);
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
82 else
169
94bd7a8efb06 stealing multbl trick from reimar
michael
parents: 168
diff changeset
83 mix(a->state, dec_multbl);
164
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
84 SUBSHIFT0((a->state[0]+0), inv_sbox)
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
85 SUBSHIFT3((a->state[0]+1), inv_sbox)
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
86 SUBSHIFT2((a->state[0]+2), inv_sbox)
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
87 SUBSHIFT1((a->state[0]+3), inv_sbox)
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
88 addkey(a->state, a->round_key[r]);
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
89 }
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
90 }
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
91
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
92 void av_aes_encrypt(AVAES *a){
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
93 int r, t;
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
94
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
95 for(r=0; r<a->rounds; r++){
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
96 addkey(a->state, a->round_key[r]);
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
97 SUBSHIFT0((a->state[0]+0), sbox)
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
98 SUBSHIFT1((a->state[0]+1), sbox)
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
99 SUBSHIFT2((a->state[0]+2), sbox)
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
100 SUBSHIFT3((a->state[0]+3), sbox)
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
101 if(r==a->rounds-1)
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
102 addkey(a->state, a->round_key[r+1]);
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
103 else
169
94bd7a8efb06 stealing multbl trick from reimar
michael
parents: 168
diff changeset
104 mix(a->state, enc_multbl); //FIXME replace log8 by const / optimze mix as this can be simplified alot
164
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
105 }
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
106 }
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
107
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
108 // this is based on the reference AES code by Paulo Barreto and Vincent Rijmen
167
6104bbdb757b cosmetic
michael
parents: 166
diff changeset
109 AVAES *av_aes_init(uint8_t *key, int key_bits) {
166
c7ea70dea191 memleak
michael
parents: 165
diff changeset
110 AVAES *a;
164
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
111 int i, j, t, rconpointer = 0;
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
112 uint8_t tk[8][4];
167
6104bbdb757b cosmetic
michael
parents: 166
diff changeset
113 int KC= key_bits/32;
6104bbdb757b cosmetic
michael
parents: 166
diff changeset
114 int rounds= KC + 6;
169
94bd7a8efb06 stealing multbl trick from reimar
michael
parents: 168
diff changeset
115 uint8_t log8[256];
94bd7a8efb06 stealing multbl trick from reimar
michael
parents: 168
diff changeset
116 uint8_t alog8[512];
164
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
117
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
118 if(!sbox[255]){
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
119 j=1;
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
120 for(i=0; i<255; i++){
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
121 alog8[i]=
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
122 alog8[i+255]= j;
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
123 log8[j]= i;
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
124 j^= j+j;
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
125 if(j>255) j^= 0x11B;
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
126 }
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
127 log8[0]= 255;
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
128 for(i=0; i<256; i++){
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
129 j= i ? alog8[255-log8[i]] : 0;
165
d64f200afe17 simplify sbox init
michael
parents: 164
diff changeset
130 j ^= (j<<1) ^ (j<<2) ^ (j<<3) ^ (j<<4);
d64f200afe17 simplify sbox init
michael
parents: 164
diff changeset
131 j = (j ^ (j>>8) ^ 99) & 255;
164
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
132 inv_sbox[j]= i;
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
133 sbox [i]= j;
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
134 // av_log(NULL, AV_LOG_ERROR, "%d, ", log8[i]);
169
94bd7a8efb06 stealing multbl trick from reimar
michael
parents: 168
diff changeset
135 //FIXME multbl init
164
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
136 }
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
137 }
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
138
167
6104bbdb757b cosmetic
michael
parents: 166
diff changeset
139 if(key_bits!=128 && key_bits!=192 && key_bits!=256)
164
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
140 return NULL;
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
141
166
c7ea70dea191 memleak
michael
parents: 165
diff changeset
142 a= av_malloc(sizeof(AVAES));
167
6104bbdb757b cosmetic
michael
parents: 166
diff changeset
143 a->rounds= rounds;
166
c7ea70dea191 memleak
michael
parents: 165
diff changeset
144
164
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
145 memcpy(tk, key, KC*4);
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
146
167
6104bbdb757b cosmetic
michael
parents: 166
diff changeset
147 for(t= 0; t < (rounds+1)*4; ) {
6104bbdb757b cosmetic
michael
parents: 166
diff changeset
148 for(j = 0; (j < KC) && (t < (rounds+1)*4); j++, t++)
172
michael
parents: 171
diff changeset
149 memcpy(a->round_key[0][t], tk[j], 4);
164
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
150
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
151 for(i = 0; i < 4; i++)
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
152 tk[0][i] ^= sbox[tk[KC-1][(i+1)&3]];
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
153 tk[0][0] ^= rcon[rconpointer++];
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
154
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
155 for(j = 1; j < KC; j++){
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
156 if(KC != 8 || j != KC/2)
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
157 for(i = 0; i < 4; i++) tk[j][i] ^= tk[j-1][i];
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
158 else
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
159 for(i = 0; i < 4; i++)
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
160 tk[KC/2][i] ^= sbox[tk[KC/2 - 1][i]];
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
161 }
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
162 }
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
163 return a;
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
164 }
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
165
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
166 #ifdef TEST
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
167
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
168 int main(){
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
169 int i,j,k;
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
170 AVAES *a= av_aes_init("PI=3.141592654..", 128);
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
171
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
172 for(i=0; i<10000; i++){
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
173 }
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
174 return 0;
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
175 }
f45907fe2530 aes support (unfinished)
michael
parents:
diff changeset
176 #endif