1 /* crypto/des/set_key.c */
2 /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
5 * This package is an SSL implementation written
6 * by Eric Young (eay@cryptsoft.com).
7 * The implementation was written so as to conform with Netscapes SSL.
9 * This library is free for commercial and non-commercial use as long as
10 * the following conditions are aheared to. The following conditions
11 * apply to all code found in this distribution, be it the RC4, RSA,
12 * lhash, DES, etc., code; not just the SSL code. The SSL documentation
13 * included with this distribution is covered by the same copyright terms
14 * except that the holder is Tim Hudson (tjh@cryptsoft.com).
16 * Copyright remains Eric Young's, and as such any Copyright notices in
17 * the code are not to be removed.
18 * If this package is used in a product, Eric Young should be given attribution
19 * as the author of the parts of the library used.
20 * This can be in the form of a textual message at program startup or
21 * in documentation (online or textual) provided with the package.
23 * Redistribution and use in source and binary forms, with or without
24 * modification, are permitted provided that the following conditions
26 * 1. Redistributions of source code must retain the copyright
27 * notice, this list of conditions and the following disclaimer.
28 * 2. Redistributions in binary form must reproduce the above copyright
29 * notice, this list of conditions and the following disclaimer in the
30 * documentation and/or other materials provided with the distribution.
31 * 3. All advertising materials mentioning features or use of this software
32 * must display the following acknowledgement:
33 * "This product includes cryptographic software written by
34 * Eric Young (eay@cryptsoft.com)"
35 * The word 'cryptographic' can be left out if the rouines from the library
36 * being used are not cryptographic related :-).
37 * 4. If you include any Windows specific code (or a derivative thereof) from
38 * the apps directory (application code) you must include an acknowledgement:
39 * "This product includes software written by Tim Hudson (tjh@cryptsoft.com)"
41 * THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND
42 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
43 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
44 * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
45 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
46 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
47 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
48 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
49 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
50 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
53 * The licence and distribution terms for any publically available version or
54 * derivative of this code cannot be changed. i.e. this code cannot simply be
55 * copied and put under another distribution licence
56 * [including the GNU Public Licence.]
59 /* set_key.c v 1.4 eay 24/9/91
60 * 1.4 Speed up by 400% :-)
61 * 1.3 added register declarations.
62 * 1.2 unrolled make_key_sched a bit more
63 * 1.1 added norm_expand_bits
64 * 1.0 First working version
66 #include "fips_des_locl.h"
67 #include <openssl/fips.h>
71 OPENSSL_IMPLEMENT_GLOBAL(int,DES_check_key
); /* defaults to false */
73 static const unsigned char odd_parity
[256]={
74 1, 1, 2, 2, 4, 4, 7, 7, 8, 8, 11, 11, 13, 13, 14, 14,
75 16, 16, 19, 19, 21, 21, 22, 22, 25, 25, 26, 26, 28, 28, 31, 31,
76 32, 32, 35, 35, 37, 37, 38, 38, 41, 41, 42, 42, 44, 44, 47, 47,
77 49, 49, 50, 50, 52, 52, 55, 55, 56, 56, 59, 59, 61, 61, 62, 62,
78 64, 64, 67, 67, 69, 69, 70, 70, 73, 73, 74, 74, 76, 76, 79, 79,
79 81, 81, 82, 82, 84, 84, 87, 87, 88, 88, 91, 91, 93, 93, 94, 94,
80 97, 97, 98, 98,100,100,103,103,104,104,107,107,109,109,110,110,
81 112,112,115,115,117,117,118,118,121,121,122,122,124,124,127,127,
82 128,128,131,131,133,133,134,134,137,137,138,138,140,140,143,143,
83 145,145,146,146,148,148,151,151,152,152,155,155,157,157,158,158,
84 161,161,162,162,164,164,167,167,168,168,171,171,173,173,174,174,
85 176,176,179,179,181,181,182,182,185,185,186,186,188,188,191,191,
86 193,193,194,194,196,196,199,199,200,200,203,203,205,205,206,206,
87 208,208,211,211,213,213,214,214,217,217,218,218,220,220,223,223,
88 224,224,227,227,229,229,230,230,233,233,234,234,236,236,239,239,
89 241,241,242,242,244,244,247,247,248,248,251,251,253,253,254,254};
91 void DES_set_odd_parity(DES_cblock
*key
)
95 for (i
=0; i
<DES_KEY_SZ
; i
++)
96 (*key
)[i
]=odd_parity
[(*key
)[i
]];
99 int DES_check_key_parity(const_DES_cblock
*key
)
103 for (i
=0; i
<DES_KEY_SZ
; i
++)
105 if ((*key
)[i
] != odd_parity
[(*key
)[i
]])
111 /* Weak and semi week keys as take from
114 * %T Security for Computer Networks
115 * %I John Wiley & Sons
117 * Many thanks to smb@ulysses.att.com (Steven Bellovin) for the reference
118 * (and actual cblock values).
120 #define NUM_WEAK_KEY 16
121 static DES_cblock weak_keys
[NUM_WEAK_KEY
]={
123 {0x01,0x01,0x01,0x01,0x01,0x01,0x01,0x01},
124 {0xFE,0xFE,0xFE,0xFE,0xFE,0xFE,0xFE,0xFE},
125 {0x1F,0x1F,0x1F,0x1F,0x0E,0x0E,0x0E,0x0E},
126 {0xE0,0xE0,0xE0,0xE0,0xF1,0xF1,0xF1,0xF1},
128 {0x01,0xFE,0x01,0xFE,0x01,0xFE,0x01,0xFE},
129 {0xFE,0x01,0xFE,0x01,0xFE,0x01,0xFE,0x01},
130 {0x1F,0xE0,0x1F,0xE0,0x0E,0xF1,0x0E,0xF1},
131 {0xE0,0x1F,0xE0,0x1F,0xF1,0x0E,0xF1,0x0E},
132 {0x01,0xE0,0x01,0xE0,0x01,0xF1,0x01,0xF1},
133 {0xE0,0x01,0xE0,0x01,0xF1,0x01,0xF1,0x01},
134 {0x1F,0xFE,0x1F,0xFE,0x0E,0xFE,0x0E,0xFE},
135 {0xFE,0x1F,0xFE,0x1F,0xFE,0x0E,0xFE,0x0E},
136 {0x01,0x1F,0x01,0x1F,0x01,0x0E,0x01,0x0E},
137 {0x1F,0x01,0x1F,0x01,0x0E,0x01,0x0E,0x01},
138 {0xE0,0xFE,0xE0,0xFE,0xF1,0xFE,0xF1,0xFE},
139 {0xFE,0xE0,0xFE,0xE0,0xFE,0xF1,0xFE,0xF1}};
141 int DES_is_weak_key(const_DES_cblock
*key
)
145 for (i
=0; i
<NUM_WEAK_KEY
; i
++)
146 /* Added == 0 to comparison, I obviously don't run
147 * this section very often :-(, thanks to
148 * engineering@MorningStar.Com for the fix
150 * Another problem, I was comparing only the first 4
152 if (memcmp(weak_keys
[i
],key
,sizeof(DES_cblock
)) == 0) return(1);
156 /* NOW DEFINED IN des_local.h
157 * See ecb_encrypt.c for a pseudo description of these macros.
158 * #define PERM_OP(a,b,t,n,m) ((t)=((((a)>>(n))^(b))&(m)),\
160 * (a)=((a)^((t)<<(n))))
163 #define HPERM_OP(a,t,n,m) ((t)=((((a)<<(16-(n)))^(a))&(m)),\
164 (a)=(a)^(t)^(t>>(16-(n))))
166 static const DES_LONG des_skb
[8][64]={
168 /* for C bits (numbered as per FIPS 46) 1 2 3 4 5 6 */
169 0x00000000L
,0x00000010L
,0x20000000L
,0x20000010L
,
170 0x00010000L
,0x00010010L
,0x20010000L
,0x20010010L
,
171 0x00000800L
,0x00000810L
,0x20000800L
,0x20000810L
,
172 0x00010800L
,0x00010810L
,0x20010800L
,0x20010810L
,
173 0x00000020L
,0x00000030L
,0x20000020L
,0x20000030L
,
174 0x00010020L
,0x00010030L
,0x20010020L
,0x20010030L
,
175 0x00000820L
,0x00000830L
,0x20000820L
,0x20000830L
,
176 0x00010820L
,0x00010830L
,0x20010820L
,0x20010830L
,
177 0x00080000L
,0x00080010L
,0x20080000L
,0x20080010L
,
178 0x00090000L
,0x00090010L
,0x20090000L
,0x20090010L
,
179 0x00080800L
,0x00080810L
,0x20080800L
,0x20080810L
,
180 0x00090800L
,0x00090810L
,0x20090800L
,0x20090810L
,
181 0x00080020L
,0x00080030L
,0x20080020L
,0x20080030L
,
182 0x00090020L
,0x00090030L
,0x20090020L
,0x20090030L
,
183 0x00080820L
,0x00080830L
,0x20080820L
,0x20080830L
,
184 0x00090820L
,0x00090830L
,0x20090820L
,0x20090830L
,
186 /* for C bits (numbered as per FIPS 46) 7 8 10 11 12 13 */
187 0x00000000L
,0x02000000L
,0x00002000L
,0x02002000L
,
188 0x00200000L
,0x02200000L
,0x00202000L
,0x02202000L
,
189 0x00000004L
,0x02000004L
,0x00002004L
,0x02002004L
,
190 0x00200004L
,0x02200004L
,0x00202004L
,0x02202004L
,
191 0x00000400L
,0x02000400L
,0x00002400L
,0x02002400L
,
192 0x00200400L
,0x02200400L
,0x00202400L
,0x02202400L
,
193 0x00000404L
,0x02000404L
,0x00002404L
,0x02002404L
,
194 0x00200404L
,0x02200404L
,0x00202404L
,0x02202404L
,
195 0x10000000L
,0x12000000L
,0x10002000L
,0x12002000L
,
196 0x10200000L
,0x12200000L
,0x10202000L
,0x12202000L
,
197 0x10000004L
,0x12000004L
,0x10002004L
,0x12002004L
,
198 0x10200004L
,0x12200004L
,0x10202004L
,0x12202004L
,
199 0x10000400L
,0x12000400L
,0x10002400L
,0x12002400L
,
200 0x10200400L
,0x12200400L
,0x10202400L
,0x12202400L
,
201 0x10000404L
,0x12000404L
,0x10002404L
,0x12002404L
,
202 0x10200404L
,0x12200404L
,0x10202404L
,0x12202404L
,
204 /* for C bits (numbered as per FIPS 46) 14 15 16 17 19 20 */
205 0x00000000L
,0x00000001L
,0x00040000L
,0x00040001L
,
206 0x01000000L
,0x01000001L
,0x01040000L
,0x01040001L
,
207 0x00000002L
,0x00000003L
,0x00040002L
,0x00040003L
,
208 0x01000002L
,0x01000003L
,0x01040002L
,0x01040003L
,
209 0x00000200L
,0x00000201L
,0x00040200L
,0x00040201L
,
210 0x01000200L
,0x01000201L
,0x01040200L
,0x01040201L
,
211 0x00000202L
,0x00000203L
,0x00040202L
,0x00040203L
,
212 0x01000202L
,0x01000203L
,0x01040202L
,0x01040203L
,
213 0x08000000L
,0x08000001L
,0x08040000L
,0x08040001L
,
214 0x09000000L
,0x09000001L
,0x09040000L
,0x09040001L
,
215 0x08000002L
,0x08000003L
,0x08040002L
,0x08040003L
,
216 0x09000002L
,0x09000003L
,0x09040002L
,0x09040003L
,
217 0x08000200L
,0x08000201L
,0x08040200L
,0x08040201L
,
218 0x09000200L
,0x09000201L
,0x09040200L
,0x09040201L
,
219 0x08000202L
,0x08000203L
,0x08040202L
,0x08040203L
,
220 0x09000202L
,0x09000203L
,0x09040202L
,0x09040203L
,
222 /* for C bits (numbered as per FIPS 46) 21 23 24 26 27 28 */
223 0x00000000L
,0x00100000L
,0x00000100L
,0x00100100L
,
224 0x00000008L
,0x00100008L
,0x00000108L
,0x00100108L
,
225 0x00001000L
,0x00101000L
,0x00001100L
,0x00101100L
,
226 0x00001008L
,0x00101008L
,0x00001108L
,0x00101108L
,
227 0x04000000L
,0x04100000L
,0x04000100L
,0x04100100L
,
228 0x04000008L
,0x04100008L
,0x04000108L
,0x04100108L
,
229 0x04001000L
,0x04101000L
,0x04001100L
,0x04101100L
,
230 0x04001008L
,0x04101008L
,0x04001108L
,0x04101108L
,
231 0x00020000L
,0x00120000L
,0x00020100L
,0x00120100L
,
232 0x00020008L
,0x00120008L
,0x00020108L
,0x00120108L
,
233 0x00021000L
,0x00121000L
,0x00021100L
,0x00121100L
,
234 0x00021008L
,0x00121008L
,0x00021108L
,0x00121108L
,
235 0x04020000L
,0x04120000L
,0x04020100L
,0x04120100L
,
236 0x04020008L
,0x04120008L
,0x04020108L
,0x04120108L
,
237 0x04021000L
,0x04121000L
,0x04021100L
,0x04121100L
,
238 0x04021008L
,0x04121008L
,0x04021108L
,0x04121108L
,
240 /* for D bits (numbered as per FIPS 46) 1 2 3 4 5 6 */
241 0x00000000L
,0x10000000L
,0x00010000L
,0x10010000L
,
242 0x00000004L
,0x10000004L
,0x00010004L
,0x10010004L
,
243 0x20000000L
,0x30000000L
,0x20010000L
,0x30010000L
,
244 0x20000004L
,0x30000004L
,0x20010004L
,0x30010004L
,
245 0x00100000L
,0x10100000L
,0x00110000L
,0x10110000L
,
246 0x00100004L
,0x10100004L
,0x00110004L
,0x10110004L
,
247 0x20100000L
,0x30100000L
,0x20110000L
,0x30110000L
,
248 0x20100004L
,0x30100004L
,0x20110004L
,0x30110004L
,
249 0x00001000L
,0x10001000L
,0x00011000L
,0x10011000L
,
250 0x00001004L
,0x10001004L
,0x00011004L
,0x10011004L
,
251 0x20001000L
,0x30001000L
,0x20011000L
,0x30011000L
,
252 0x20001004L
,0x30001004L
,0x20011004L
,0x30011004L
,
253 0x00101000L
,0x10101000L
,0x00111000L
,0x10111000L
,
254 0x00101004L
,0x10101004L
,0x00111004L
,0x10111004L
,
255 0x20101000L
,0x30101000L
,0x20111000L
,0x30111000L
,
256 0x20101004L
,0x30101004L
,0x20111004L
,0x30111004L
,
258 /* for D bits (numbered as per FIPS 46) 8 9 11 12 13 14 */
259 0x00000000L
,0x08000000L
,0x00000008L
,0x08000008L
,
260 0x00000400L
,0x08000400L
,0x00000408L
,0x08000408L
,
261 0x00020000L
,0x08020000L
,0x00020008L
,0x08020008L
,
262 0x00020400L
,0x08020400L
,0x00020408L
,0x08020408L
,
263 0x00000001L
,0x08000001L
,0x00000009L
,0x08000009L
,
264 0x00000401L
,0x08000401L
,0x00000409L
,0x08000409L
,
265 0x00020001L
,0x08020001L
,0x00020009L
,0x08020009L
,
266 0x00020401L
,0x08020401L
,0x00020409L
,0x08020409L
,
267 0x02000000L
,0x0A000000L
,0x02000008L
,0x0A000008L
,
268 0x02000400L
,0x0A000400L
,0x02000408L
,0x0A000408L
,
269 0x02020000L
,0x0A020000L
,0x02020008L
,0x0A020008L
,
270 0x02020400L
,0x0A020400L
,0x02020408L
,0x0A020408L
,
271 0x02000001L
,0x0A000001L
,0x02000009L
,0x0A000009L
,
272 0x02000401L
,0x0A000401L
,0x02000409L
,0x0A000409L
,
273 0x02020001L
,0x0A020001L
,0x02020009L
,0x0A020009L
,
274 0x02020401L
,0x0A020401L
,0x02020409L
,0x0A020409L
,
276 /* for D bits (numbered as per FIPS 46) 16 17 18 19 20 21 */
277 0x00000000L
,0x00000100L
,0x00080000L
,0x00080100L
,
278 0x01000000L
,0x01000100L
,0x01080000L
,0x01080100L
,
279 0x00000010L
,0x00000110L
,0x00080010L
,0x00080110L
,
280 0x01000010L
,0x01000110L
,0x01080010L
,0x01080110L
,
281 0x00200000L
,0x00200100L
,0x00280000L
,0x00280100L
,
282 0x01200000L
,0x01200100L
,0x01280000L
,0x01280100L
,
283 0x00200010L
,0x00200110L
,0x00280010L
,0x00280110L
,
284 0x01200010L
,0x01200110L
,0x01280010L
,0x01280110L
,
285 0x00000200L
,0x00000300L
,0x00080200L
,0x00080300L
,
286 0x01000200L
,0x01000300L
,0x01080200L
,0x01080300L
,
287 0x00000210L
,0x00000310L
,0x00080210L
,0x00080310L
,
288 0x01000210L
,0x01000310L
,0x01080210L
,0x01080310L
,
289 0x00200200L
,0x00200300L
,0x00280200L
,0x00280300L
,
290 0x01200200L
,0x01200300L
,0x01280200L
,0x01280300L
,
291 0x00200210L
,0x00200310L
,0x00280210L
,0x00280310L
,
292 0x01200210L
,0x01200310L
,0x01280210L
,0x01280310L
,
294 /* for D bits (numbered as per FIPS 46) 22 23 24 25 27 28 */
295 0x00000000L
,0x04000000L
,0x00040000L
,0x04040000L
,
296 0x00000002L
,0x04000002L
,0x00040002L
,0x04040002L
,
297 0x00002000L
,0x04002000L
,0x00042000L
,0x04042000L
,
298 0x00002002L
,0x04002002L
,0x00042002L
,0x04042002L
,
299 0x00000020L
,0x04000020L
,0x00040020L
,0x04040020L
,
300 0x00000022L
,0x04000022L
,0x00040022L
,0x04040022L
,
301 0x00002020L
,0x04002020L
,0x00042020L
,0x04042020L
,
302 0x00002022L
,0x04002022L
,0x00042022L
,0x04042022L
,
303 0x00000800L
,0x04000800L
,0x00040800L
,0x04040800L
,
304 0x00000802L
,0x04000802L
,0x00040802L
,0x04040802L
,
305 0x00002800L
,0x04002800L
,0x00042800L
,0x04042800L
,
306 0x00002802L
,0x04002802L
,0x00042802L
,0x04042802L
,
307 0x00000820L
,0x04000820L
,0x00040820L
,0x04040820L
,
308 0x00000822L
,0x04000822L
,0x00040822L
,0x04040822L
,
309 0x00002820L
,0x04002820L
,0x00042820L
,0x04042820L
,
310 0x00002822L
,0x04002822L
,0x00042822L
,0x04042822L
,
313 int DES_set_key(const_DES_cblock
*key
, DES_key_schedule
*schedule
)
315 if (FIPS_selftest_failed())
319 return DES_set_key_checked(key
, schedule
);
323 DES_set_key_unchecked(key
, schedule
);
328 /* return 0 if key parity is odd (correct),
329 * return -1 if key parity error,
330 * return -2 if illegal weak key.
332 int DES_set_key_checked(const_DES_cblock
*key
, DES_key_schedule
*schedule
)
334 if (!DES_check_key_parity(key
))
336 if (DES_is_weak_key(key
))
338 if (FIPS_selftest_failed())
341 DES_set_key_unchecked(key
, schedule
);
345 void DES_set_key_unchecked(const_DES_cblock
*key
, DES_key_schedule
*schedule
)
347 static int shifts2
[16]={0,0,1,1,1,1,1,1,0,1,1,1,1,1,1,0};
348 register DES_LONG c
,d
,t
,s
,t2
;
349 register const unsigned char *in
;
350 register DES_LONG
*k
;
353 #ifdef OPENBSD_DEV_CRYPTO
354 memcpy(schedule
->key
,key
,sizeof schedule
->key
);
355 schedule
->session
=NULL
;
357 k
= &schedule
->ks
->deslong
[0];
363 /* do PC1 in 47 simple operations :-)
364 * Thanks to John Fletcher (john_fletcher@lccmail.ocf.llnl.gov)
365 * for the inspiration. :-) */
366 PERM_OP (d
,c
,t
,4,0x0f0f0f0fL
);
367 HPERM_OP(c
,t
,-2,0xcccc0000L
);
368 HPERM_OP(d
,t
,-2,0xcccc0000L
);
369 PERM_OP (d
,c
,t
,1,0x55555555L
);
370 PERM_OP (c
,d
,t
,8,0x00ff00ffL
);
371 PERM_OP (d
,c
,t
,1,0x55555555L
);
372 d
= (((d
&0x000000ffL
)<<16L)| (d
&0x0000ff00L
) |
373 ((d
&0x00ff0000L
)>>16L)|((c
&0xf0000000L
)>>4L));
376 for (i
=0; i
<ITERATIONS
; i
++)
379 { c
=((c
>>2L)|(c
<<26L)); d
=((d
>>2L)|(d
<<26L)); }
381 { c
=((c
>>1L)|(c
<<27L)); d
=((d
>>1L)|(d
<<27L)); }
384 /* could be a few less shifts but I am to lazy at this
385 * point in time to investigate */
386 s
= des_skb
[0][ (c
)&0x3f ]|
387 des_skb
[1][((c
>> 6L)&0x03)|((c
>> 7L)&0x3c)]|
388 des_skb
[2][((c
>>13L)&0x0f)|((c
>>14L)&0x30)]|
389 des_skb
[3][((c
>>20L)&0x01)|((c
>>21L)&0x06) |
391 t
= des_skb
[4][ (d
)&0x3f ]|
392 des_skb
[5][((d
>> 7L)&0x03)|((d
>> 8L)&0x3c)]|
393 des_skb
[6][ (d
>>15L)&0x3f ]|
394 des_skb
[7][((d
>>21L)&0x0f)|((d
>>22L)&0x30)];
396 /* table contained 0213 4657 */
397 t2
=((t
<<16L)|(s
&0x0000ffffL
))&0xffffffffL
;
398 *(k
++)=ROTATE(t2
,30)&0xffffffffL
;
400 t2
=((s
>>16L)|(t
&0xffff0000L
));
401 *(k
++)=ROTATE(t2
,26)&0xffffffffL
;
405 int DES_key_sched(const_DES_cblock
*key
, DES_key_schedule
*schedule
)
407 return(DES_set_key(key
,schedule
));
410 #undef des_fixup_key_parity
411 void des_fixup_key_parity(des_cblock *key)
413 des_set_odd_parity(key);
417 #endif /* def OPENSSL_FIPS */