/src/botan/src/lib/block/gost_28147/gost_28147.cpp
Line | Count | Source (jump to first uncovered line) |
1 | | /* |
2 | | * GOST 28147-89 |
3 | | * (C) 1999-2009,2011 Jack Lloyd |
4 | | * |
5 | | * Botan is released under the Simplified BSD License (see license.txt) |
6 | | */ |
7 | | |
8 | | #include <botan/internal/gost_28147.h> |
9 | | #include <botan/exceptn.h> |
10 | | #include <botan/internal/loadstor.h> |
11 | | #include <botan/internal/rotate.h> |
12 | | |
13 | | namespace Botan { |
14 | | |
15 | | uint8_t GOST_28147_89_Params::sbox_entry(size_t row, size_t col) const |
16 | 0 | { |
17 | 0 | const uint8_t x = m_sboxes[4 * col + (row / 2)]; |
18 | 0 | return (row % 2 == 0) ? (x >> 4) : (x & 0x0F); |
19 | 0 | } |
20 | | |
21 | | uint8_t GOST_28147_89_Params::sbox_pair(size_t row, size_t col) const |
22 | 0 | { |
23 | 0 | const uint8_t x = m_sboxes[4 * (col % 16) + row]; |
24 | 0 | const uint8_t y = m_sboxes[4 * (col / 16) + row]; |
25 | 0 | return (x >> 4) | (y << 4); |
26 | 0 | } |
27 | | |
28 | | GOST_28147_89_Params::GOST_28147_89_Params(const std::string& n) : m_name(n) |
29 | 0 | { |
30 | | // Encoded in the packed fromat from RFC 4357 |
31 | | |
32 | | // GostR3411_94_TestParamSet (OID 1.2.643.2.2.31.0) |
33 | 0 | static const uint8_t GOST_R_3411_TEST_PARAMS[64] = { |
34 | 0 | 0x4E, 0x57, 0x64, 0xD1, 0xAB, 0x8D, 0xCB, 0xBF, 0x94, 0x1A, 0x7A, |
35 | 0 | 0x4D, 0x2C, 0xD1, 0x10, 0x10, 0xD6, 0xA0, 0x57, 0x35, 0x8D, 0x38, |
36 | 0 | 0xF2, 0xF7, 0x0F, 0x49, 0xD1, 0x5A, 0xEA, 0x2F, 0x8D, 0x94, 0x62, |
37 | 0 | 0xEE, 0x43, 0x09, 0xB3, 0xF4, 0xA6, 0xA2, 0x18, 0xC6, 0x98, 0xE3, |
38 | 0 | 0xC1, 0x7C, 0xE5, 0x7E, 0x70, 0x6B, 0x09, 0x66, 0xF7, 0x02, 0x3C, |
39 | 0 | 0x8B, 0x55, 0x95, 0xBF, 0x28, 0x39, 0xB3, 0x2E, 0xCC }; |
40 | | |
41 | | // GostR3411-94-CryptoProParamSet (OID 1.2.643.2.2.31.1) |
42 | 0 | static const uint8_t GOST_R_3411_CRYPTOPRO_PARAMS[64] = { |
43 | 0 | 0xA5, 0x74, 0x77, 0xD1, 0x4F, 0xFA, 0x66, 0xE3, 0x54, 0xC7, 0x42, |
44 | 0 | 0x4A, 0x60, 0xEC, 0xB4, 0x19, 0x82, 0x90, 0x9D, 0x75, 0x1D, 0x4F, |
45 | 0 | 0xC9, 0x0B, 0x3B, 0x12, 0x2F, 0x54, 0x79, 0x08, 0xA0, 0xAF, 0xD1, |
46 | 0 | 0x3E, 0x1A, 0x38, 0xC7, 0xB1, 0x81, 0xC6, 0xE6, 0x56, 0x05, 0x87, |
47 | 0 | 0x03, 0x25, 0xEB, 0xFE, 0x9C, 0x6D, 0xF8, 0x6D, 0x2E, 0xAB, 0xDE, |
48 | 0 | 0x20, 0xBA, 0x89, 0x3C, 0x92, 0xF8, 0xD3, 0x53, 0xBC }; |
49 | |
|
50 | 0 | if(m_name == "R3411_94_TestParam") |
51 | 0 | m_sboxes = GOST_R_3411_TEST_PARAMS; |
52 | 0 | else if(m_name == "R3411_CryptoPro") |
53 | 0 | m_sboxes = GOST_R_3411_CRYPTOPRO_PARAMS; |
54 | 0 | else |
55 | 0 | throw Invalid_Argument("GOST_28147_89_Params: Unknown " + m_name); |
56 | 0 | } |
57 | | |
58 | | /* |
59 | | * GOST Constructor |
60 | | */ |
61 | | GOST_28147_89::GOST_28147_89(const GOST_28147_89_Params& param) : |
62 | | m_SBOX(1024), |
63 | | m_name("GOST-28147-89(" + param.param_name() + ")") |
64 | 0 | { |
65 | | // Convert the parallel 4x4 sboxes into larger word-based sboxes |
66 | |
|
67 | 0 | for(size_t i = 0; i != 256; ++i) |
68 | 0 | { |
69 | 0 | m_SBOX[i ] = rotl<11, uint32_t>(param.sbox_pair(0, i)); |
70 | 0 | m_SBOX[i+256] = rotl<19, uint32_t>(param.sbox_pair(1, i)); |
71 | 0 | m_SBOX[i+512] = rotl<27, uint32_t>(param.sbox_pair(2, i)); |
72 | 0 | m_SBOX[i+768] = rotl< 3, uint32_t>(param.sbox_pair(3, i)); |
73 | 0 | } |
74 | 0 | } |
75 | | |
76 | | std::string GOST_28147_89::name() const |
77 | 0 | { |
78 | 0 | return m_name; |
79 | 0 | } |
80 | | |
81 | | namespace { |
82 | | |
83 | | /* |
84 | | * Two rounds of GOST |
85 | | */ |
86 | | template<size_t R1, size_t R2> |
87 | | void GOST_ROUND2(uint32_t& N1, uint32_t& N2, |
88 | | const std::vector<uint32_t>& S, |
89 | | const secure_vector<uint32_t>& EK) |
90 | 0 | { |
91 | 0 | const uint32_t T0 = N1 + EK[R1]; |
92 | 0 | N2 ^= S[get_byte<3>(T0)] | |
93 | 0 | S[get_byte<2>(T0)+256] | |
94 | 0 | S[get_byte<1>(T0)+512] | |
95 | 0 | S[get_byte<0>(T0)+768]; |
96 | |
|
97 | 0 | const uint32_t T1 = N2 + EK[R2]; |
98 | 0 | N1 ^= S[get_byte<3>(T1)] | |
99 | 0 | S[get_byte<2>(T1)+256] | |
100 | 0 | S[get_byte<1>(T1)+512] | |
101 | 0 | S[get_byte<0>(T1)+768]; |
102 | 0 | } Unexecuted instantiation: gost_28147.cpp:void Botan::(anonymous namespace)::GOST_ROUND2<0ul, 1ul>(unsigned int&, unsigned int&, std::__1::vector<unsigned int, std::__1::allocator<unsigned int> > const&, std::__1::vector<unsigned int, Botan::secure_allocator<unsigned int> > const&) Unexecuted instantiation: gost_28147.cpp:void Botan::(anonymous namespace)::GOST_ROUND2<2ul, 3ul>(unsigned int&, unsigned int&, std::__1::vector<unsigned int, std::__1::allocator<unsigned int> > const&, std::__1::vector<unsigned int, Botan::secure_allocator<unsigned int> > const&) Unexecuted instantiation: gost_28147.cpp:void Botan::(anonymous namespace)::GOST_ROUND2<4ul, 5ul>(unsigned int&, unsigned int&, std::__1::vector<unsigned int, std::__1::allocator<unsigned int> > const&, std::__1::vector<unsigned int, Botan::secure_allocator<unsigned int> > const&) Unexecuted instantiation: gost_28147.cpp:void Botan::(anonymous namespace)::GOST_ROUND2<6ul, 7ul>(unsigned int&, unsigned int&, std::__1::vector<unsigned int, std::__1::allocator<unsigned int> > const&, std::__1::vector<unsigned int, Botan::secure_allocator<unsigned int> > const&) Unexecuted instantiation: gost_28147.cpp:void Botan::(anonymous namespace)::GOST_ROUND2<7ul, 6ul>(unsigned int&, unsigned int&, std::__1::vector<unsigned int, std::__1::allocator<unsigned int> > const&, std::__1::vector<unsigned int, Botan::secure_allocator<unsigned int> > const&) Unexecuted instantiation: gost_28147.cpp:void Botan::(anonymous namespace)::GOST_ROUND2<5ul, 4ul>(unsigned int&, unsigned int&, std::__1::vector<unsigned int, std::__1::allocator<unsigned int> > const&, std::__1::vector<unsigned int, Botan::secure_allocator<unsigned int> > const&) Unexecuted instantiation: gost_28147.cpp:void Botan::(anonymous namespace)::GOST_ROUND2<3ul, 2ul>(unsigned int&, unsigned int&, std::__1::vector<unsigned int, std::__1::allocator<unsigned int> > const&, std::__1::vector<unsigned int, Botan::secure_allocator<unsigned int> > const&) Unexecuted instantiation: gost_28147.cpp:void Botan::(anonymous namespace)::GOST_ROUND2<1ul, 0ul>(unsigned int&, unsigned int&, std::__1::vector<unsigned int, std::__1::allocator<unsigned int> > const&, std::__1::vector<unsigned int, Botan::secure_allocator<unsigned int> > const&) |
103 | | |
104 | | } |
105 | | |
106 | | /* |
107 | | * GOST Encryption |
108 | | */ |
109 | | void GOST_28147_89::encrypt_n(const uint8_t in[], uint8_t out[], size_t blocks) const |
110 | 0 | { |
111 | 0 | verify_key_set(m_EK.empty() == false); |
112 | |
|
113 | 0 | for(size_t i = 0; i != blocks; ++i) |
114 | 0 | { |
115 | 0 | uint32_t N1 = load_le<uint32_t>(in, 0); |
116 | 0 | uint32_t N2 = load_le<uint32_t>(in, 1); |
117 | |
|
118 | 0 | for(size_t j = 0; j != 3; ++j) |
119 | 0 | { |
120 | 0 | GOST_ROUND2<0, 1>(N1, N2, m_SBOX, m_EK); |
121 | 0 | GOST_ROUND2<2, 3>(N1, N2, m_SBOX, m_EK); |
122 | 0 | GOST_ROUND2<4, 5>(N1, N2, m_SBOX, m_EK); |
123 | 0 | GOST_ROUND2<6, 7>(N1, N2, m_SBOX, m_EK); |
124 | 0 | } |
125 | |
|
126 | 0 | GOST_ROUND2<7, 6>(N1, N2, m_SBOX, m_EK); |
127 | 0 | GOST_ROUND2<5, 4>(N1, N2, m_SBOX, m_EK); |
128 | 0 | GOST_ROUND2<3, 2>(N1, N2, m_SBOX, m_EK); |
129 | 0 | GOST_ROUND2<1, 0>(N1, N2, m_SBOX, m_EK); |
130 | |
|
131 | 0 | store_le(out, N2, N1); |
132 | |
|
133 | 0 | in += BLOCK_SIZE; |
134 | 0 | out += BLOCK_SIZE; |
135 | 0 | } |
136 | 0 | } |
137 | | |
138 | | /* |
139 | | * GOST Decryption |
140 | | */ |
141 | | void GOST_28147_89::decrypt_n(const uint8_t in[], uint8_t out[], size_t blocks) const |
142 | 0 | { |
143 | 0 | verify_key_set(m_EK.empty() == false); |
144 | |
|
145 | 0 | for(size_t i = 0; i != blocks; ++i) |
146 | 0 | { |
147 | 0 | uint32_t N1 = load_le<uint32_t>(in, 0); |
148 | 0 | uint32_t N2 = load_le<uint32_t>(in, 1); |
149 | |
|
150 | 0 | GOST_ROUND2<0, 1>(N1, N2, m_SBOX, m_EK); |
151 | 0 | GOST_ROUND2<2, 3>(N1, N2, m_SBOX, m_EK); |
152 | 0 | GOST_ROUND2<4, 5>(N1, N2, m_SBOX, m_EK); |
153 | 0 | GOST_ROUND2<6, 7>(N1, N2, m_SBOX, m_EK); |
154 | |
|
155 | 0 | for(size_t j = 0; j != 3; ++j) |
156 | 0 | { |
157 | 0 | GOST_ROUND2<7, 6>(N1, N2, m_SBOX, m_EK); |
158 | 0 | GOST_ROUND2<5, 4>(N1, N2, m_SBOX, m_EK); |
159 | 0 | GOST_ROUND2<3, 2>(N1, N2, m_SBOX, m_EK); |
160 | 0 | GOST_ROUND2<1, 0>(N1, N2, m_SBOX, m_EK); |
161 | 0 | } |
162 | |
|
163 | 0 | store_le(out, N2, N1); |
164 | 0 | in += BLOCK_SIZE; |
165 | 0 | out += BLOCK_SIZE; |
166 | 0 | } |
167 | 0 | } |
168 | | |
169 | | /* |
170 | | * GOST Key Schedule |
171 | | */ |
172 | | void GOST_28147_89::key_schedule(const uint8_t key[], size_t /*length*/) |
173 | 0 | { |
174 | 0 | m_EK.resize(8); |
175 | 0 | for(size_t i = 0; i != 8; ++i) |
176 | 0 | m_EK[i] = load_le<uint32_t>(key, i); |
177 | 0 | } |
178 | | |
179 | | void GOST_28147_89::clear() |
180 | 0 | { |
181 | 0 | zap(m_EK); |
182 | 0 | } |
183 | | |
184 | | } |