crypto

Published 29 Dec 2009, by Anders Rundgren
No tags
Embed: (wiki syntax)
« Back to documentation index
Show/hide line numbers AESProvider.cpp Source File
AESProvider.cpp

00001 /* ====================================================================
00002  * Copyright (c) 1998-2010 The OpenSSL Project.  All rights reserved.
00003  *
00004  * This product includes cryptographic software written by Eric Young
00005  * (eay@cryptsoft.com).  This product includes software written by Tim
00006  * Hudson (tjh@cryptsoft.com).
00007  *
00008  * ====================================================================
00009  * C++ adoption was made by Anders Rundgren (anders.rundgren@telia.com)
00010  * ====================================================================
00011  */
00012 
00013 #include <string.h>
00014 #include <stdlib.h>
00015 
00016 #include "crypto.h"
00017 
00018 typedef unsigned char CRYPTO_U8;
00019 
00020 #if defined(_MSC_VER) && (defined(_M_IX86) || defined(_M_AMD64) || defined(_M_X64))
00021 # define SWAP(x) (_lrotl(x, 8) & 0x00ff00ff | _lrotr(x, 8) & 0xff00ff00)
00022 # define GETU32(p) SWAP(*((CRYPTO_U32 *)(p)))
00023 # define PUTU32(ct, st) { *((CRYPTO_U32 *)(ct)) = SWAP((st)); }
00024 #else
00025 # define GETU32(pt) (((CRYPTO_U32)(pt)[0] << 24) ^ ((CRYPTO_U32)(pt)[1] << 16) ^ ((CRYPTO_U32)(pt)[2] <<  8) ^ ((CRYPTO_U32)(pt)[3]))
00026 # define PUTU32(ct, st) { (ct)[0] = (CRYPTO_U8)((st) >> 24); (ct)[1] = (CRYPTO_U8)((st) >> 16); (ct)[2] = (CRYPTO_U8)((st) >>  8); (ct)[3] = (CRYPTO_U8)(st); }
00027 #endif
00028 
00029 /* This controls loop-unrolling  */
00030 #undef FULL_UNROLL
00031 
00032 static const CRYPTO_U32 Te0[256] =
00033   {
00034     0xc66363a5U, 0xf87c7c84U, 0xee777799U, 0xf67b7b8dU,
00035     0xfff2f20dU, 0xd66b6bbdU, 0xde6f6fb1U, 0x91c5c554U,
00036     0x60303050U, 0x02010103U, 0xce6767a9U, 0x562b2b7dU,
00037     0xe7fefe19U, 0xb5d7d762U, 0x4dababe6U, 0xec76769aU,
00038     0x8fcaca45U, 0x1f82829dU, 0x89c9c940U, 0xfa7d7d87U,
00039     0xeffafa15U, 0xb25959ebU, 0x8e4747c9U, 0xfbf0f00bU,
00040     0x41adadecU, 0xb3d4d467U, 0x5fa2a2fdU, 0x45afafeaU,
00041     0x239c9cbfU, 0x53a4a4f7U, 0xe4727296U, 0x9bc0c05bU,
00042     0x75b7b7c2U, 0xe1fdfd1cU, 0x3d9393aeU, 0x4c26266aU,
00043     0x6c36365aU, 0x7e3f3f41U, 0xf5f7f702U, 0x83cccc4fU,
00044     0x6834345cU, 0x51a5a5f4U, 0xd1e5e534U, 0xf9f1f108U,
00045     0xe2717193U, 0xabd8d873U, 0x62313153U, 0x2a15153fU,
00046     0x0804040cU, 0x95c7c752U, 0x46232365U, 0x9dc3c35eU,
00047     0x30181828U, 0x379696a1U, 0x0a05050fU, 0x2f9a9ab5U,
00048     0x0e070709U, 0x24121236U, 0x1b80809bU, 0xdfe2e23dU,
00049     0xcdebeb26U, 0x4e272769U, 0x7fb2b2cdU, 0xea75759fU,
00050     0x1209091bU, 0x1d83839eU, 0x582c2c74U, 0x341a1a2eU,
00051     0x361b1b2dU, 0xdc6e6eb2U, 0xb45a5aeeU, 0x5ba0a0fbU,
00052     0xa45252f6U, 0x763b3b4dU, 0xb7d6d661U, 0x7db3b3ceU,
00053     0x5229297bU, 0xdde3e33eU, 0x5e2f2f71U, 0x13848497U,
00054     0xa65353f5U, 0xb9d1d168U, 0x00000000U, 0xc1eded2cU,
00055     0x40202060U, 0xe3fcfc1fU, 0x79b1b1c8U, 0xb65b5bedU,
00056     0xd46a6abeU, 0x8dcbcb46U, 0x67bebed9U, 0x7239394bU,
00057     0x944a4adeU, 0x984c4cd4U, 0xb05858e8U, 0x85cfcf4aU,
00058     0xbbd0d06bU, 0xc5efef2aU, 0x4faaaae5U, 0xedfbfb16U,
00059     0x864343c5U, 0x9a4d4dd7U, 0x66333355U, 0x11858594U,
00060     0x8a4545cfU, 0xe9f9f910U, 0x04020206U, 0xfe7f7f81U,
00061     0xa05050f0U, 0x783c3c44U, 0x259f9fbaU, 0x4ba8a8e3U,
00062     0xa25151f3U, 0x5da3a3feU, 0x804040c0U, 0x058f8f8aU,
00063     0x3f9292adU, 0x219d9dbcU, 0x70383848U, 0xf1f5f504U,
00064     0x63bcbcdfU, 0x77b6b6c1U, 0xafdada75U, 0x42212163U,
00065     0x20101030U, 0xe5ffff1aU, 0xfdf3f30eU, 0xbfd2d26dU,
00066     0x81cdcd4cU, 0x180c0c14U, 0x26131335U, 0xc3ecec2fU,
00067     0xbe5f5fe1U, 0x359797a2U, 0x884444ccU, 0x2e171739U,
00068     0x93c4c457U, 0x55a7a7f2U, 0xfc7e7e82U, 0x7a3d3d47U,
00069     0xc86464acU, 0xba5d5de7U, 0x3219192bU, 0xe6737395U,
00070     0xc06060a0U, 0x19818198U, 0x9e4f4fd1U, 0xa3dcdc7fU,
00071     0x44222266U, 0x542a2a7eU, 0x3b9090abU, 0x0b888883U,
00072     0x8c4646caU, 0xc7eeee29U, 0x6bb8b8d3U, 0x2814143cU,
00073     0xa7dede79U, 0xbc5e5ee2U, 0x160b0b1dU, 0xaddbdb76U,
00074     0xdbe0e03bU, 0x64323256U, 0x743a3a4eU, 0x140a0a1eU,
00075     0x924949dbU, 0x0c06060aU, 0x4824246cU, 0xb85c5ce4U,
00076     0x9fc2c25dU, 0xbdd3d36eU, 0x43acacefU, 0xc46262a6U,
00077     0x399191a8U, 0x319595a4U, 0xd3e4e437U, 0xf279798bU,
00078     0xd5e7e732U, 0x8bc8c843U, 0x6e373759U, 0xda6d6db7U,
00079     0x018d8d8cU, 0xb1d5d564U, 0x9c4e4ed2U, 0x49a9a9e0U,
00080     0xd86c6cb4U, 0xac5656faU, 0xf3f4f407U, 0xcfeaea25U,
00081     0xca6565afU, 0xf47a7a8eU, 0x47aeaee9U, 0x10080818U,
00082     0x6fbabad5U, 0xf0787888U, 0x4a25256fU, 0x5c2e2e72U,
00083     0x381c1c24U, 0x57a6a6f1U, 0x73b4b4c7U, 0x97c6c651U,
00084     0xcbe8e823U, 0xa1dddd7cU, 0xe874749cU, 0x3e1f1f21U,
00085     0x964b4bddU, 0x61bdbddcU, 0x0d8b8b86U, 0x0f8a8a85U,
00086     0xe0707090U, 0x7c3e3e42U, 0x71b5b5c4U, 0xcc6666aaU,
00087     0x904848d8U, 0x06030305U, 0xf7f6f601U, 0x1c0e0e12U,
00088     0xc26161a3U, 0x6a35355fU, 0xae5757f9U, 0x69b9b9d0U,
00089     0x17868691U, 0x99c1c158U, 0x3a1d1d27U, 0x279e9eb9U,
00090     0xd9e1e138U, 0xebf8f813U, 0x2b9898b3U, 0x22111133U,
00091     0xd26969bbU, 0xa9d9d970U, 0x078e8e89U, 0x339494a7U,
00092     0x2d9b9bb6U, 0x3c1e1e22U, 0x15878792U, 0xc9e9e920U,
00093     0x87cece49U, 0xaa5555ffU, 0x50282878U, 0xa5dfdf7aU,
00094     0x038c8c8fU, 0x59a1a1f8U, 0x09898980U, 0x1a0d0d17U,
00095     0x65bfbfdaU, 0xd7e6e631U, 0x844242c6U, 0xd06868b8U,
00096     0x824141c3U, 0x299999b0U, 0x5a2d2d77U, 0x1e0f0f11U,
00097     0x7bb0b0cbU, 0xa85454fcU, 0x6dbbbbd6U, 0x2c16163aU,
00098   };
00099 
00100 static const CRYPTO_U32 Te1[256] =
00101   {
00102     0xa5c66363U, 0x84f87c7cU, 0x99ee7777U, 0x8df67b7bU,
00103     0x0dfff2f2U, 0xbdd66b6bU, 0xb1de6f6fU, 0x5491c5c5U,
00104     0x50603030U, 0x03020101U, 0xa9ce6767U, 0x7d562b2bU,
00105     0x19e7fefeU, 0x62b5d7d7U, 0xe64dababU, 0x9aec7676U,
00106     0x458fcacaU, 0x9d1f8282U, 0x4089c9c9U, 0x87fa7d7dU,
00107     0x15effafaU, 0xebb25959U, 0xc98e4747U, 0x0bfbf0f0U,
00108     0xec41adadU, 0x67b3d4d4U, 0xfd5fa2a2U, 0xea45afafU,
00109     0xbf239c9cU, 0xf753a4a4U, 0x96e47272U, 0x5b9bc0c0U,
00110     0xc275b7b7U, 0x1ce1fdfdU, 0xae3d9393U, 0x6a4c2626U,
00111     0x5a6c3636U, 0x417e3f3fU, 0x02f5f7f7U, 0x4f83ccccU,
00112     0x5c683434U, 0xf451a5a5U, 0x34d1e5e5U, 0x08f9f1f1U,
00113     0x93e27171U, 0x73abd8d8U, 0x53623131U, 0x3f2a1515U,
00114     0x0c080404U, 0x5295c7c7U, 0x65462323U, 0x5e9dc3c3U,
00115     0x28301818U, 0xa1379696U, 0x0f0a0505U, 0xb52f9a9aU,
00116     0x090e0707U, 0x36241212U, 0x9b1b8080U, 0x3ddfe2e2U,
00117     0x26cdebebU, 0x694e2727U, 0xcd7fb2b2U, 0x9fea7575U,
00118     0x1b120909U, 0x9e1d8383U, 0x74582c2cU, 0x2e341a1aU,
00119     0x2d361b1bU, 0xb2dc6e6eU, 0xeeb45a5aU, 0xfb5ba0a0U,
00120     0xf6a45252U, 0x4d763b3bU, 0x61b7d6d6U, 0xce7db3b3U,
00121     0x7b522929U, 0x3edde3e3U, 0x715e2f2fU, 0x97138484U,
00122     0xf5a65353U, 0x68b9d1d1U, 0x00000000U, 0x2cc1ededU,
00123     0x60402020U, 0x1fe3fcfcU, 0xc879b1b1U, 0xedb65b5bU,
00124     0xbed46a6aU, 0x468dcbcbU, 0xd967bebeU, 0x4b723939U,
00125     0xde944a4aU, 0xd4984c4cU, 0xe8b05858U, 0x4a85cfcfU,
00126     0x6bbbd0d0U, 0x2ac5efefU, 0xe54faaaaU, 0x16edfbfbU,
00127     0xc5864343U, 0xd79a4d4dU, 0x55663333U, 0x94118585U,
00128     0xcf8a4545U, 0x10e9f9f9U, 0x06040202U, 0x81fe7f7fU,
00129     0xf0a05050U, 0x44783c3cU, 0xba259f9fU, 0xe34ba8a8U,
00130     0xf3a25151U, 0xfe5da3a3U, 0xc0804040U, 0x8a058f8fU,
00131     0xad3f9292U, 0xbc219d9dU, 0x48703838U, 0x04f1f5f5U,
00132     0xdf63bcbcU, 0xc177b6b6U, 0x75afdadaU, 0x63422121U,
00133     0x30201010U, 0x1ae5ffffU, 0x0efdf3f3U, 0x6dbfd2d2U,
00134     0x4c81cdcdU, 0x14180c0cU, 0x35261313U, 0x2fc3ececU,
00135     0xe1be5f5fU, 0xa2359797U, 0xcc884444U, 0x392e1717U,
00136     0x5793c4c4U, 0xf255a7a7U, 0x82fc7e7eU, 0x477a3d3dU,
00137     0xacc86464U, 0xe7ba5d5dU, 0x2b321919U, 0x95e67373U,
00138     0xa0c06060U, 0x98198181U, 0xd19e4f4fU, 0x7fa3dcdcU,
00139     0x66442222U, 0x7e542a2aU, 0xab3b9090U, 0x830b8888U,
00140     0xca8c4646U, 0x29c7eeeeU, 0xd36bb8b8U, 0x3c281414U,
00141     0x79a7dedeU, 0xe2bc5e5eU, 0x1d160b0bU, 0x76addbdbU,
00142     0x3bdbe0e0U, 0x56643232U, 0x4e743a3aU, 0x1e140a0aU,
00143     0xdb924949U, 0x0a0c0606U, 0x6c482424U, 0xe4b85c5cU,
00144     0x5d9fc2c2U, 0x6ebdd3d3U, 0xef43acacU, 0xa6c46262U,
00145     0xa8399191U, 0xa4319595U, 0x37d3e4e4U, 0x8bf27979U,
00146     0x32d5e7e7U, 0x438bc8c8U, 0x596e3737U, 0xb7da6d6dU,
00147     0x8c018d8dU, 0x64b1d5d5U, 0xd29c4e4eU, 0xe049a9a9U,
00148     0xb4d86c6cU, 0xfaac5656U, 0x07f3f4f4U, 0x25cfeaeaU,
00149     0xafca6565U, 0x8ef47a7aU, 0xe947aeaeU, 0x18100808U,
00150     0xd56fbabaU, 0x88f07878U, 0x6f4a2525U, 0x725c2e2eU,
00151     0x24381c1cU, 0xf157a6a6U, 0xc773b4b4U, 0x5197c6c6U,
00152     0x23cbe8e8U, 0x7ca1ddddU, 0x9ce87474U, 0x213e1f1fU,
00153     0xdd964b4bU, 0xdc61bdbdU, 0x860d8b8bU, 0x850f8a8aU,
00154     0x90e07070U, 0x427c3e3eU, 0xc471b5b5U, 0xaacc6666U,
00155     0xd8904848U, 0x05060303U, 0x01f7f6f6U, 0x121c0e0eU,
00156     0xa3c26161U, 0x5f6a3535U, 0xf9ae5757U, 0xd069b9b9U,
00157     0x91178686U, 0x5899c1c1U, 0x273a1d1dU, 0xb9279e9eU,
00158     0x38d9e1e1U, 0x13ebf8f8U, 0xb32b9898U, 0x33221111U,
00159     0xbbd26969U, 0x70a9d9d9U, 0x89078e8eU, 0xa7339494U,
00160     0xb62d9b9bU, 0x223c1e1eU, 0x92158787U, 0x20c9e9e9U,
00161     0x4987ceceU, 0xffaa5555U, 0x78502828U, 0x7aa5dfdfU,
00162     0x8f038c8cU, 0xf859a1a1U, 0x80098989U, 0x171a0d0dU,
00163     0xda65bfbfU, 0x31d7e6e6U, 0xc6844242U, 0xb8d06868U,
00164     0xc3824141U, 0xb0299999U, 0x775a2d2dU, 0x111e0f0fU,
00165     0xcb7bb0b0U, 0xfca85454U, 0xd66dbbbbU, 0x3a2c1616U,
00166   };
00167 
00168 static const CRYPTO_U32 Te2[256] =
00169   {
00170     0x63a5c663U, 0x7c84f87cU, 0x7799ee77U, 0x7b8df67bU,
00171     0xf20dfff2U, 0x6bbdd66bU, 0x6fb1de6fU, 0xc55491c5U,
00172     0x30506030U, 0x01030201U, 0x67a9ce67U, 0x2b7d562bU,
00173     0xfe19e7feU, 0xd762b5d7U, 0xabe64dabU, 0x769aec76U,
00174     0xca458fcaU, 0x829d1f82U, 0xc94089c9U, 0x7d87fa7dU,
00175     0xfa15effaU, 0x59ebb259U, 0x47c98e47U, 0xf00bfbf0U,
00176     0xadec41adU, 0xd467b3d4U, 0xa2fd5fa2U, 0xafea45afU,
00177     0x9cbf239cU, 0xa4f753a4U, 0x7296e472U, 0xc05b9bc0U,
00178     0xb7c275b7U, 0xfd1ce1fdU, 0x93ae3d93U, 0x266a4c26U,
00179     0x365a6c36U, 0x3f417e3fU, 0xf702f5f7U, 0xcc4f83ccU,
00180     0x345c6834U, 0xa5f451a5U, 0xe534d1e5U, 0xf108f9f1U,
00181     0x7193e271U, 0xd873abd8U, 0x31536231U, 0x153f2a15U,
00182     0x040c0804U, 0xc75295c7U, 0x23654623U, 0xc35e9dc3U,
00183     0x18283018U, 0x96a13796U, 0x050f0a05U, 0x9ab52f9aU,
00184     0x07090e07U, 0x12362412U, 0x809b1b80U, 0xe23ddfe2U,
00185     0xeb26cdebU, 0x27694e27U, 0xb2cd7fb2U, 0x759fea75U,
00186     0x091b1209U, 0x839e1d83U, 0x2c74582cU, 0x1a2e341aU,
00187     0x1b2d361bU, 0x6eb2dc6eU, 0x5aeeb45aU, 0xa0fb5ba0U,
00188     0x52f6a452U, 0x3b4d763bU, 0xd661b7d6U, 0xb3ce7db3U,
00189     0x297b5229U, 0xe33edde3U, 0x2f715e2fU, 0x84971384U,
00190     0x53f5a653U, 0xd168b9d1U, 0x00000000U, 0xed2cc1edU,
00191     0x20604020U, 0xfc1fe3fcU, 0xb1c879b1U, 0x5bedb65bU,
00192     0x6abed46aU, 0xcb468dcbU, 0xbed967beU, 0x394b7239U,
00193     0x4ade944aU, 0x4cd4984cU, 0x58e8b058U, 0xcf4a85cfU,
00194     0xd06bbbd0U, 0xef2ac5efU, 0xaae54faaU, 0xfb16edfbU,
00195     0x43c58643U, 0x4dd79a4dU, 0x33556633U, 0x85941185U,
00196     0x45cf8a45U, 0xf910e9f9U, 0x02060402U, 0x7f81fe7fU,
00197     0x50f0a050U, 0x3c44783cU, 0x9fba259fU, 0xa8e34ba8U,
00198     0x51f3a251U, 0xa3fe5da3U, 0x40c08040U, 0x8f8a058fU,
00199     0x92ad3f92U, 0x9dbc219dU, 0x38487038U, 0xf504f1f5U,
00200     0xbcdf63bcU, 0xb6c177b6U, 0xda75afdaU, 0x21634221U,
00201     0x10302010U, 0xff1ae5ffU, 0xf30efdf3U, 0xd26dbfd2U,
00202     0xcd4c81cdU, 0x0c14180cU, 0x13352613U, 0xec2fc3ecU,
00203     0x5fe1be5fU, 0x97a23597U, 0x44cc8844U, 0x17392e17U,
00204     0xc45793c4U, 0xa7f255a7U, 0x7e82fc7eU, 0x3d477a3dU,
00205     0x64acc864U, 0x5de7ba5dU, 0x192b3219U, 0x7395e673U,
00206     0x60a0c060U, 0x81981981U, 0x4fd19e4fU, 0xdc7fa3dcU,
00207     0x22664422U, 0x2a7e542aU, 0x90ab3b90U, 0x88830b88U,
00208     0x46ca8c46U, 0xee29c7eeU, 0xb8d36bb8U, 0x143c2814U,
00209     0xde79a7deU, 0x5ee2bc5eU, 0x0b1d160bU, 0xdb76addbU,
00210     0xe03bdbe0U, 0x32566432U, 0x3a4e743aU, 0x0a1e140aU,
00211     0x49db9249U, 0x060a0c06U, 0x246c4824U, 0x5ce4b85cU,
00212     0xc25d9fc2U, 0xd36ebdd3U, 0xacef43acU, 0x62a6c462U,
00213     0x91a83991U, 0x95a43195U, 0xe437d3e4U, 0x798bf279U,
00214     0xe732d5e7U, 0xc8438bc8U, 0x37596e37U, 0x6db7da6dU,
00215     0x8d8c018dU, 0xd564b1d5U, 0x4ed29c4eU, 0xa9e049a9U,
00216     0x6cb4d86cU, 0x56faac56U, 0xf407f3f4U, 0xea25cfeaU,
00217     0x65afca65U, 0x7a8ef47aU, 0xaee947aeU, 0x08181008U,
00218     0xbad56fbaU, 0x7888f078U, 0x256f4a25U, 0x2e725c2eU,
00219     0x1c24381cU, 0xa6f157a6U, 0xb4c773b4U, 0xc65197c6U,
00220     0xe823cbe8U, 0xdd7ca1ddU, 0x749ce874U, 0x1f213e1fU,
00221     0x4bdd964bU, 0xbddc61bdU, 0x8b860d8bU, 0x8a850f8aU,
00222     0x7090e070U, 0x3e427c3eU, 0xb5c471b5U, 0x66aacc66U,
00223     0x48d89048U, 0x03050603U, 0xf601f7f6U, 0x0e121c0eU,
00224     0x61a3c261U, 0x355f6a35U, 0x57f9ae57U, 0xb9d069b9U,
00225     0x86911786U, 0xc15899c1U, 0x1d273a1dU, 0x9eb9279eU,
00226     0xe138d9e1U, 0xf813ebf8U, 0x98b32b98U, 0x11332211U,
00227     0x69bbd269U, 0xd970a9d9U, 0x8e89078eU, 0x94a73394U,
00228     0x9bb62d9bU, 0x1e223c1eU, 0x87921587U, 0xe920c9e9U,
00229     0xce4987ceU, 0x55ffaa55U, 0x28785028U, 0xdf7aa5dfU,
00230     0x8c8f038cU, 0xa1f859a1U, 0x89800989U, 0x0d171a0dU,
00231     0xbfda65bfU, 0xe631d7e6U, 0x42c68442U, 0x68b8d068U,
00232     0x41c38241U, 0x99b02999U, 0x2d775a2dU, 0x0f111e0fU,
00233     0xb0cb7bb0U, 0x54fca854U, 0xbbd66dbbU, 0x163a2c16U,
00234   };
00235 
00236 static const CRYPTO_U32 Te3[256] =
00237   {
00238     0x6363a5c6U, 0x7c7c84f8U, 0x777799eeU, 0x7b7b8df6U,
00239     0xf2f20dffU, 0x6b6bbdd6U, 0x6f6fb1deU, 0xc5c55491U,
00240     0x30305060U, 0x01010302U, 0x6767a9ceU, 0x2b2b7d56U,
00241     0xfefe19e7U, 0xd7d762b5U, 0xababe64dU, 0x76769aecU,
00242     0xcaca458fU, 0x82829d1fU, 0xc9c94089U, 0x7d7d87faU,
00243     0xfafa15efU, 0x5959ebb2U, 0x4747c98eU, 0xf0f00bfbU,
00244     0xadadec41U, 0xd4d467b3U, 0xa2a2fd5fU, 0xafafea45U,
00245     0x9c9cbf23U, 0xa4a4f753U, 0x727296e4U, 0xc0c05b9bU,
00246     0xb7b7c275U, 0xfdfd1ce1U, 0x9393ae3dU, 0x26266a4cU,
00247     0x36365a6cU, 0x3f3f417eU, 0xf7f702f5U, 0xcccc4f83U,
00248     0x34345c68U, 0xa5a5f451U, 0xe5e534d1U, 0xf1f108f9U,
00249     0x717193e2U, 0xd8d873abU, 0x31315362U, 0x15153f2aU,
00250     0x04040c08U, 0xc7c75295U, 0x23236546U, 0xc3c35e9dU,
00251     0x18182830U, 0x9696a137U, 0x05050f0aU, 0x9a9ab52fU,
00252     0x0707090eU, 0x12123624U, 0x80809b1bU, 0xe2e23ddfU,
00253     0xebeb26cdU, 0x2727694eU, 0xb2b2cd7fU, 0x75759feaU,
00254     0x09091b12U, 0x83839e1dU, 0x2c2c7458U, 0x1a1a2e34U,
00255     0x1b1b2d36U, 0x6e6eb2dcU, 0x5a5aeeb4U, 0xa0a0fb5bU,
00256     0x5252f6a4U, 0x3b3b4d76U, 0xd6d661b7U, 0xb3b3ce7dU,
00257     0x29297b52U, 0xe3e33eddU, 0x2f2f715eU, 0x84849713U,
00258     0x5353f5a6U, 0xd1d168b9U, 0x00000000U, 0xeded2cc1U,
00259     0x20206040U, 0xfcfc1fe3U, 0xb1b1c879U, 0x5b5bedb6U,
00260     0x6a6abed4U, 0xcbcb468dU, 0xbebed967U, 0x39394b72U,
00261     0x4a4ade94U, 0x4c4cd498U, 0x5858e8b0U, 0xcfcf4a85U,
00262     0xd0d06bbbU, 0xefef2ac5U, 0xaaaae54fU, 0xfbfb16edU,
00263     0x4343c586U, 0x4d4dd79aU, 0x33335566U, 0x85859411U,
00264     0x4545cf8aU, 0xf9f910e9U, 0x02020604U, 0x7f7f81feU,
00265     0x5050f0a0U, 0x3c3c4478U, 0x9f9fba25U, 0xa8a8e34bU,
00266     0x5151f3a2U, 0xa3a3fe5dU, 0x4040c080U, 0x8f8f8a05U,
00267     0x9292ad3fU, 0x9d9dbc21U, 0x38384870U, 0xf5f504f1U,
00268     0xbcbcdf63U, 0xb6b6c177U, 0xdada75afU, 0x21216342U,
00269     0x10103020U, 0xffff1ae5U, 0xf3f30efdU, 0xd2d26dbfU,
00270     0xcdcd4c81U, 0x0c0c1418U, 0x13133526U, 0xecec2fc3U,
00271     0x5f5fe1beU, 0x9797a235U, 0x4444cc88U, 0x1717392eU,
00272     0xc4c45793U, 0xa7a7f255U, 0x7e7e82fcU, 0x3d3d477aU,
00273     0x6464acc8U, 0x5d5de7baU, 0x19192b32U, 0x737395e6U,
00274     0x6060a0c0U, 0x81819819U, 0x4f4fd19eU, 0xdcdc7fa3U,
00275     0x22226644U, 0x2a2a7e54U, 0x9090ab3bU, 0x8888830bU,
00276     0x4646ca8cU, 0xeeee29c7U, 0xb8b8d36bU, 0x14143c28U,
00277     0xdede79a7U, 0x5e5ee2bcU, 0x0b0b1d16U, 0xdbdb76adU,
00278     0xe0e03bdbU, 0x32325664U, 0x3a3a4e74U, 0x0a0a1e14U,
00279     0x4949db92U, 0x06060a0cU, 0x24246c48U, 0x5c5ce4b8U,
00280     0xc2c25d9fU, 0xd3d36ebdU, 0xacacef43U, 0x6262a6c4U,
00281     0x9191a839U, 0x9595a431U, 0xe4e437d3U, 0x79798bf2U,
00282     0xe7e732d5U, 0xc8c8438bU, 0x3737596eU, 0x6d6db7daU,
00283     0x8d8d8c01U, 0xd5d564b1U, 0x4e4ed29cU, 0xa9a9e049U,
00284     0x6c6cb4d8U, 0x5656faacU, 0xf4f407f3U, 0xeaea25cfU,
00285     0x6565afcaU, 0x7a7a8ef4U, 0xaeaee947U, 0x08081810U,
00286     0xbabad56fU, 0x787888f0U, 0x25256f4aU, 0x2e2e725cU,
00287     0x1c1c2438U, 0xa6a6f157U, 0xb4b4c773U, 0xc6c65197U,
00288     0xe8e823cbU, 0xdddd7ca1U, 0x74749ce8U, 0x1f1f213eU,
00289     0x4b4bdd96U, 0xbdbddc61U, 0x8b8b860dU, 0x8a8a850fU,
00290     0x707090e0U, 0x3e3e427cU, 0xb5b5c471U, 0x6666aaccU,
00291     0x4848d890U, 0x03030506U, 0xf6f601f7U, 0x0e0e121cU,
00292     0x6161a3c2U, 0x35355f6aU, 0x5757f9aeU, 0xb9b9d069U,
00293     0x86869117U, 0xc1c15899U, 0x1d1d273aU, 0x9e9eb927U,
00294     0xe1e138d9U, 0xf8f813ebU, 0x9898b32bU, 0x11113322U,
00295     0x6969bbd2U, 0xd9d970a9U, 0x8e8e8907U, 0x9494a733U,
00296     0x9b9bb62dU, 0x1e1e223cU, 0x87879215U, 0xe9e920c9U,
00297     0xcece4987U, 0x5555ffaaU, 0x28287850U, 0xdfdf7aa5U,
00298     0x8c8c8f03U, 0xa1a1f859U, 0x89898009U, 0x0d0d171aU,
00299     0xbfbfda65U, 0xe6e631d7U, 0x4242c684U, 0x6868b8d0U,
00300     0x4141c382U, 0x9999b029U, 0x2d2d775aU, 0x0f0f111eU,
00301     0xb0b0cb7bU, 0x5454fca8U, 0xbbbbd66dU, 0x16163a2cU,
00302   };
00303 
00304 static const CRYPTO_U32 Td0[256] =
00305   {
00306     0x51f4a750U, 0x7e416553U, 0x1a17a4c3U, 0x3a275e96U,
00307     0x3bab6bcbU, 0x1f9d45f1U, 0xacfa58abU, 0x4be30393U,
00308     0x2030fa55U, 0xad766df6U, 0x88cc7691U, 0xf5024c25U,
00309     0x4fe5d7fcU, 0xc52acbd7U, 0x26354480U, 0xb562a38fU,
00310     0xdeb15a49U, 0x25ba1b67U, 0x45ea0e98U, 0x5dfec0e1U,
00311     0xc32f7502U, 0x814cf012U, 0x8d4697a3U, 0x6bd3f9c6U,
00312     0x038f5fe7U, 0x15929c95U, 0xbf6d7aebU, 0x955259daU,
00313     0xd4be832dU, 0x587421d3U, 0x49e06929U, 0x8ec9c844U,
00314     0x75c2896aU, 0xf48e7978U, 0x99583e6bU, 0x27b971ddU,
00315     0xbee14fb6U, 0xf088ad17U, 0xc920ac66U, 0x7dce3ab4U,
00316     0x63df4a18U, 0xe51a3182U, 0x97513360U, 0x62537f45U,
00317     0xb16477e0U, 0xbb6bae84U, 0xfe81a01cU, 0xf9082b94U,
00318     0x70486858U, 0x8f45fd19U, 0x94de6c87U, 0x527bf8b7U,
00319     0xab73d323U, 0x724b02e2U, 0xe31f8f57U, 0x6655ab2aU,
00320     0xb2eb2807U, 0x2fb5c203U, 0x86c57b9aU, 0xd33708a5U,
00321     0x302887f2U, 0x23bfa5b2U, 0x02036abaU, 0xed16825cU,
00322     0x8acf1c2bU, 0xa779b492U, 0xf307f2f0U, 0x4e69e2a1U,
00323     0x65daf4cdU, 0x0605bed5U, 0xd134621fU, 0xc4a6fe8aU,
00324     0x342e539dU, 0xa2f355a0U, 0x058ae132U, 0xa4f6eb75U,
00325     0x0b83ec39U, 0x4060efaaU, 0x5e719f06U, 0xbd6e1051U,
00326     0x3e218af9U, 0x96dd063dU, 0xdd3e05aeU, 0x4de6bd46U,
00327     0x91548db5U, 0x71c45d05U, 0x0406d46fU, 0x605015ffU,
00328     0x1998fb24U, 0xd6bde997U, 0x894043ccU, 0x67d99e77U,
00329     0xb0e842bdU, 0x07898b88U, 0xe7195b38U, 0x79c8eedbU,
00330     0xa17c0a47U, 0x7c420fe9U, 0xf8841ec9U, 0x00000000U,
00331     0x09808683U, 0x322bed48U, 0x1e1170acU, 0x6c5a724eU,
00332     0xfd0efffbU, 0x0f853856U, 0x3daed51eU, 0x362d3927U,
00333     0x0a0fd964U, 0x685ca621U, 0x9b5b54d1U, 0x24362e3aU,
00334     0x0c0a67b1U, 0x9357e70fU, 0xb4ee96d2U, 0x1b9b919eU,
00335     0x80c0c54fU, 0x61dc20a2U, 0x5a774b69U, 0x1c121a16U,
00336     0xe293ba0aU, 0xc0a02ae5U, 0x3c22e043U, 0x121b171dU,
00337     0x0e090d0bU, 0xf28bc7adU, 0x2db6a8b9U, 0x141ea9c8U,
00338     0x57f11985U, 0xaf75074cU, 0xee99ddbbU, 0xa37f60fdU,
00339     0xf701269fU, 0x5c72f5bcU, 0x44663bc5U, 0x5bfb7e34U,
00340     0x8b432976U, 0xcb23c6dcU, 0xb6edfc68U, 0xb8e4f163U,
00341     0xd731dccaU, 0x42638510U, 0x13972240U, 0x84c61120U,
00342     0x854a247dU, 0xd2bb3df8U, 0xaef93211U, 0xc729a16dU,
00343     0x1d9e2f4bU, 0xdcb230f3U, 0x0d8652ecU, 0x77c1e3d0U,
00344     0x2bb3166cU, 0xa970b999U, 0x119448faU, 0x47e96422U,
00345     0xa8fc8cc4U, 0xa0f03f1aU, 0x567d2cd8U, 0x223390efU,
00346     0x87494ec7U, 0xd938d1c1U, 0x8ccaa2feU, 0x98d40b36U,
00347     0xa6f581cfU, 0xa57ade28U, 0xdab78e26U, 0x3fadbfa4U,
00348     0x2c3a9de4U, 0x5078920dU, 0x6a5fcc9bU, 0x547e4662U,
00349     0xf68d13c2U, 0x90d8b8e8U, 0x2e39f75eU, 0x82c3aff5U,
00350     0x9f5d80beU, 0x69d0937cU, 0x6fd52da9U, 0xcf2512b3U,
00351     0xc8ac993bU, 0x10187da7U, 0xe89c636eU, 0xdb3bbb7bU,
00352     0xcd267809U, 0x6e5918f4U, 0xec9ab701U, 0x834f9aa8U,
00353     0xe6956e65U, 0xaaffe67eU, 0x21bccf08U, 0xef15e8e6U,
00354     0xbae79bd9U, 0x4a6f36ceU, 0xea9f09d4U, 0x29b07cd6U,
00355     0x31a4b2afU, 0x2a3f2331U, 0xc6a59430U, 0x35a266c0U,
00356     0x744ebc37U, 0xfc82caa6U, 0xe090d0b0U, 0x33a7d815U,
00357     0xf104984aU, 0x41ecdaf7U, 0x7fcd500eU, 0x1791f62fU,
00358     0x764dd68dU, 0x43efb04dU, 0xccaa4d54U, 0xe49604dfU,
00359     0x9ed1b5e3U, 0x4c6a881bU, 0xc12c1fb8U, 0x4665517fU,
00360     0x9d5eea04U, 0x018c355dU, 0xfa877473U, 0xfb0b412eU,
00361     0xb3671d5aU, 0x92dbd252U, 0xe9105633U, 0x6dd64713U,
00362     0x9ad7618cU, 0x37a10c7aU, 0x59f8148eU, 0xeb133c89U,
00363     0xcea927eeU, 0xb761c935U, 0xe11ce5edU, 0x7a47b13cU,
00364     0x9cd2df59U, 0x55f2733fU, 0x1814ce79U, 0x73c737bfU,
00365     0x53f7cdeaU, 0x5ffdaa5bU, 0xdf3d6f14U, 0x7844db86U,
00366     0xcaaff381U, 0xb968c43eU, 0x3824342cU, 0xc2a3405fU,
00367     0x161dc372U, 0xbce2250cU, 0x283c498bU, 0xff0d9541U,
00368     0x39a80171U, 0x080cb3deU, 0xd8b4e49cU, 0x6456c190U,
00369     0x7bcb8461U, 0xd532b670U, 0x486c5c74U, 0xd0b85742U,
00370   };
00371 
00372 static const CRYPTO_U32 Td1[256] =
00373   {
00374     0x5051f4a7U, 0x537e4165U, 0xc31a17a4U, 0x963a275eU,
00375     0xcb3bab6bU, 0xf11f9d45U, 0xabacfa58U, 0x934be303U,
00376     0x552030faU, 0xf6ad766dU, 0x9188cc76U, 0x25f5024cU,
00377     0xfc4fe5d7U, 0xd7c52acbU, 0x80263544U, 0x8fb562a3U,
00378     0x49deb15aU, 0x6725ba1bU, 0x9845ea0eU, 0xe15dfec0U,
00379     0x02c32f75U, 0x12814cf0U, 0xa38d4697U, 0xc66bd3f9U,
00380     0xe7038f5fU, 0x9515929cU, 0xebbf6d7aU, 0xda955259U,
00381     0x2dd4be83U, 0xd3587421U, 0x2949e069U, 0x448ec9c8U,
00382     0x6a75c289U, 0x78f48e79U, 0x6b99583eU, 0xdd27b971U,
00383     0xb6bee14fU, 0x17f088adU, 0x66c920acU, 0xb47dce3aU,
00384     0x1863df4aU, 0x82e51a31U, 0x60975133U, 0x4562537fU,
00385     0xe0b16477U, 0x84bb6baeU, 0x1cfe81a0U, 0x94f9082bU,
00386     0x58704868U, 0x198f45fdU, 0x8794de6cU, 0xb7527bf8U,
00387     0x23ab73d3U, 0xe2724b02U, 0x57e31f8fU, 0x2a6655abU,
00388     0x07b2eb28U, 0x032fb5c2U, 0x9a86c57bU, 0xa5d33708U,
00389     0xf2302887U, 0xb223bfa5U, 0xba02036aU, 0x5ced1682U,
00390     0x2b8acf1cU, 0x92a779b4U, 0xf0f307f2U, 0xa14e69e2U,
00391     0xcd65daf4U, 0xd50605beU, 0x1fd13462U, 0x8ac4a6feU,
00392     0x9d342e53U, 0xa0a2f355U, 0x32058ae1U, 0x75a4f6ebU,
00393     0x390b83ecU, 0xaa4060efU, 0x065e719fU, 0x51bd6e10U,
00394     0xf93e218aU, 0x3d96dd06U, 0xaedd3e05U, 0x464de6bdU,
00395     0xb591548dU, 0x0571c45dU, 0x6f0406d4U, 0xff605015U,
00396     0x241998fbU, 0x97d6bde9U, 0xcc894043U, 0x7767d99eU,
00397     0xbdb0e842U, 0x8807898bU, 0x38e7195bU, 0xdb79c8eeU,
00398     0x47a17c0aU, 0xe97c420fU, 0xc9f8841eU, 0x00000000U,
00399     0x83098086U, 0x48322bedU, 0xac1e1170U, 0x4e6c5a72U,
00400     0xfbfd0effU, 0x560f8538U, 0x1e3daed5U, 0x27362d39U,
00401     0x640a0fd9U, 0x21685ca6U, 0xd19b5b54U, 0x3a24362eU,
00402     0xb10c0a67U, 0x0f9357e7U, 0xd2b4ee96U, 0x9e1b9b91U,
00403     0x4f80c0c5U, 0xa261dc20U, 0x695a774bU, 0x161c121aU,
00404     0x0ae293baU, 0xe5c0a02aU, 0x433c22e0U, 0x1d121b17U,
00405     0x0b0e090dU, 0xadf28bc7U, 0xb92db6a8U, 0xc8141ea9U,
00406     0x8557f119U, 0x4caf7507U, 0xbbee99ddU, 0xfda37f60U,
00407     0x9ff70126U, 0xbc5c72f5U, 0xc544663bU, 0x345bfb7eU,
00408     0x768b4329U, 0xdccb23c6U, 0x68b6edfcU, 0x63b8e4f1U,
00409     0xcad731dcU, 0x10426385U, 0x40139722U, 0x2084c611U,
00410     0x7d854a24U, 0xf8d2bb3dU, 0x11aef932U, 0x6dc729a1U,
00411     0x4b1d9e2fU, 0xf3dcb230U, 0xec0d8652U, 0xd077c1e3U,
00412     0x6c2bb316U, 0x99a970b9U, 0xfa119448U, 0x2247e964U,
00413     0xc4a8fc8cU, 0x1aa0f03fU, 0xd8567d2cU, 0xef223390U,
00414     0xc787494eU, 0xc1d938d1U, 0xfe8ccaa2U, 0x3698d40bU,
00415     0xcfa6f581U, 0x28a57adeU, 0x26dab78eU, 0xa43fadbfU,
00416     0xe42c3a9dU, 0x0d507892U, 0x9b6a5fccU, 0x62547e46U,
00417     0xc2f68d13U, 0xe890d8b8U, 0x5e2e39f7U, 0xf582c3afU,
00418     0xbe9f5d80U, 0x7c69d093U, 0xa96fd52dU, 0xb3cf2512U,
00419     0x3bc8ac99U, 0xa710187dU, 0x6ee89c63U, 0x7bdb3bbbU,
00420     0x09cd2678U, 0xf46e5918U, 0x01ec9ab7U, 0xa8834f9aU,
00421     0x65e6956eU, 0x7eaaffe6U, 0x0821bccfU, 0xe6ef15e8U,
00422     0xd9bae79bU, 0xce4a6f36U, 0xd4ea9f09U, 0xd629b07cU,
00423     0xaf31a4b2U, 0x312a3f23U, 0x30c6a594U, 0xc035a266U,
00424     0x37744ebcU, 0xa6fc82caU, 0xb0e090d0U, 0x1533a7d8U,
00425     0x4af10498U, 0xf741ecdaU, 0x0e7fcd50U, 0x2f1791f6U,
00426     0x8d764dd6U, 0x4d43efb0U, 0x54ccaa4dU, 0xdfe49604U,
00427     0xe39ed1b5U, 0x1b4c6a88U, 0xb8c12c1fU, 0x7f466551U,
00428     0x049d5eeaU, 0x5d018c35U, 0x73fa8774U, 0x2efb0b41U,
00429     0x5ab3671dU, 0x5292dbd2U, 0x33e91056U, 0x136dd647U,
00430     0x8c9ad761U, 0x7a37a10cU, 0x8e59f814U, 0x89eb133cU,
00431     0xeecea927U, 0x35b761c9U, 0xede11ce5U, 0x3c7a47b1U,
00432     0x599cd2dfU, 0x3f55f273U, 0x791814ceU, 0xbf73c737U,
00433     0xea53f7cdU, 0x5b5ffdaaU, 0x14df3d6fU, 0x867844dbU,
00434     0x81caaff3U, 0x3eb968c4U, 0x2c382434U, 0x5fc2a340U,
00435     0x72161dc3U, 0x0cbce225U, 0x8b283c49U, 0x41ff0d95U,
00436     0x7139a801U, 0xde080cb3U, 0x9cd8b4e4U, 0x906456c1U,
00437     0x617bcb84U, 0x70d532b6U, 0x74486c5cU, 0x42d0b857U,
00438   };
00439 
00440 static const CRYPTO_U32 Td2[256] =
00441   {
00442     0xa75051f4U, 0x65537e41U, 0xa4c31a17U, 0x5e963a27U,
00443     0x6bcb3babU, 0x45f11f9dU, 0x58abacfaU, 0x03934be3U,
00444     0xfa552030U, 0x6df6ad76U, 0x769188ccU, 0x4c25f502U,
00445     0xd7fc4fe5U, 0xcbd7c52aU, 0x44802635U, 0xa38fb562U,
00446     0x5a49deb1U, 0x1b6725baU, 0x0e9845eaU, 0xc0e15dfeU,
00447     0x7502c32fU, 0xf012814cU, 0x97a38d46U, 0xf9c66bd3U,
00448     0x5fe7038fU, 0x9c951592U, 0x7aebbf6dU, 0x59da9552U,
00449     0x832dd4beU, 0x21d35874U, 0x692949e0U, 0xc8448ec9U,
00450     0x896a75c2U, 0x7978f48eU, 0x3e6b9958U, 0x71dd27b9U,
00451     0x4fb6bee1U, 0xad17f088U, 0xac66c920U, 0x3ab47dceU,
00452     0x4a1863dfU, 0x3182e51aU, 0x33609751U, 0x7f456253U,
00453     0x77e0b164U, 0xae84bb6bU, 0xa01cfe81U, 0x2b94f908U,
00454     0x68587048U, 0xfd198f45U, 0x6c8794deU, 0xf8b7527bU,
00455     0xd323ab73U, 0x02e2724bU, 0x8f57e31fU, 0xab2a6655U,
00456     0x2807b2ebU, 0xc2032fb5U, 0x7b9a86c5U, 0x08a5d337U,
00457     0x87f23028U, 0xa5b223bfU, 0x6aba0203U, 0x825ced16U,
00458     0x1c2b8acfU, 0xb492a779U, 0xf2f0f307U, 0xe2a14e69U,
00459     0xf4cd65daU, 0xbed50605U, 0x621fd134U, 0xfe8ac4a6U,
00460     0x539d342eU, 0x55a0a2f3U, 0xe132058aU, 0xeb75a4f6U,
00461     0xec390b83U, 0xefaa4060U, 0x9f065e71U, 0x1051bd6eU,
00462     0x8af93e21U, 0x063d96ddU, 0x05aedd3eU, 0xbd464de6U,
00463     0x8db59154U, 0x5d0571c4U, 0xd46f0406U, 0x15ff6050U,
00464     0xfb241998U, 0xe997d6bdU, 0x43cc8940U, 0x9e7767d9U,
00465     0x42bdb0e8U, 0x8b880789U, 0x5b38e719U, 0xeedb79c8U,
00466     0x0a47a17cU, 0x0fe97c42U, 0x1ec9f884U, 0x00000000U,
00467     0x86830980U, 0xed48322bU, 0x70ac1e11U, 0x724e6c5aU,
00468     0xfffbfd0eU, 0x38560f85U, 0xd51e3daeU, 0x3927362dU,
00469     0xd9640a0fU, 0xa621685cU, 0x54d19b5bU, 0x2e3a2436U,
00470     0x67b10c0aU, 0xe70f9357U, 0x96d2b4eeU, 0x919e1b9bU,
00471     0xc54f80c0U, 0x20a261dcU, 0x4b695a77U, 0x1a161c12U,
00472     0xba0ae293U, 0x2ae5c0a0U, 0xe0433c22U, 0x171d121bU,
00473     0x0d0b0e09U, 0xc7adf28bU, 0xa8b92db6U, 0xa9c8141eU,
00474     0x198557f1U, 0x074caf75U, 0xddbbee99U, 0x60fda37fU,
00475     0x269ff701U, 0xf5bc5c72U, 0x3bc54466U, 0x7e345bfbU,
00476     0x29768b43U, 0xc6dccb23U, 0xfc68b6edU, 0xf163b8e4U,
00477     0xdccad731U, 0x85104263U, 0x22401397U, 0x112084c6U,
00478     0x247d854aU, 0x3df8d2bbU, 0x3211aef9U, 0xa16dc729U,
00479     0x2f4b1d9eU, 0x30f3dcb2U, 0x52ec0d86U, 0xe3d077c1U,
00480     0x166c2bb3U, 0xb999a970U, 0x48fa1194U, 0x642247e9U,
00481     0x8cc4a8fcU, 0x3f1aa0f0U, 0x2cd8567dU, 0x90ef2233U,
00482     0x4ec78749U, 0xd1c1d938U, 0xa2fe8ccaU, 0x0b3698d4U,
00483     0x81cfa6f5U, 0xde28a57aU, 0x8e26dab7U, 0xbfa43fadU,
00484     0x9de42c3aU, 0x920d5078U, 0xcc9b6a5fU, 0x4662547eU,
00485     0x13c2f68dU, 0xb8e890d8U, 0xf75e2e39U, 0xaff582c3U,
00486     0x80be9f5dU, 0x937c69d0U, 0x2da96fd5U, 0x12b3cf25U,
00487     0x993bc8acU, 0x7da71018U, 0x636ee89cU, 0xbb7bdb3bU,
00488     0x7809cd26U, 0x18f46e59U, 0xb701ec9aU, 0x9aa8834fU,
00489     0x6e65e695U, 0xe67eaaffU, 0xcf0821bcU, 0xe8e6ef15U,
00490     0x9bd9bae7U, 0x36ce4a6fU, 0x09d4ea9fU, 0x7cd629b0U,
00491     0xb2af31a4U, 0x23312a3fU, 0x9430c6a5U, 0x66c035a2U,
00492     0xbc37744eU, 0xcaa6fc82U, 0xd0b0e090U, 0xd81533a7U,
00493     0x984af104U, 0xdaf741ecU, 0x500e7fcdU, 0xf62f1791U,
00494     0xd68d764dU, 0xb04d43efU, 0x4d54ccaaU, 0x04dfe496U,
00495     0xb5e39ed1U, 0x881b4c6aU, 0x1fb8c12cU, 0x517f4665U,
00496     0xea049d5eU, 0x355d018cU, 0x7473fa87U, 0x412efb0bU,
00497     0x1d5ab367U, 0xd25292dbU, 0x5633e910U, 0x47136dd6U,
00498     0x618c9ad7U, 0x0c7a37a1U, 0x148e59f8U, 0x3c89eb13U,
00499     0x27eecea9U, 0xc935b761U, 0xe5ede11cU, 0xb13c7a47U,
00500     0xdf599cd2U, 0x733f55f2U, 0xce791814U, 0x37bf73c7U,
00501     0xcdea53f7U, 0xaa5b5ffdU, 0x6f14df3dU, 0xdb867844U,
00502     0xf381caafU, 0xc43eb968U, 0x342c3824U, 0x405fc2a3U,
00503     0xc372161dU, 0x250cbce2U, 0x498b283cU, 0x9541ff0dU,
00504     0x017139a8U, 0xb3de080cU, 0xe49cd8b4U, 0xc1906456U,
00505     0x84617bcbU, 0xb670d532U, 0x5c74486cU, 0x5742d0b8U,
00506   };
00507 
00508 static const CRYPTO_U32 Td3[256] =
00509   {
00510     0xf4a75051U, 0x4165537eU, 0x17a4c31aU, 0x275e963aU,
00511     0xab6bcb3bU, 0x9d45f11fU, 0xfa58abacU, 0xe303934bU,
00512     0x30fa5520U, 0x766df6adU, 0xcc769188U, 0x024c25f5U,
00513     0xe5d7fc4fU, 0x2acbd7c5U, 0x35448026U, 0x62a38fb5U,
00514     0xb15a49deU, 0xba1b6725U, 0xea0e9845U, 0xfec0e15dU,
00515     0x2f7502c3U, 0x4cf01281U, 0x4697a38dU, 0xd3f9c66bU,
00516     0x8f5fe703U, 0x929c9515U, 0x6d7aebbfU, 0x5259da95U,
00517     0xbe832dd4U, 0x7421d358U, 0xe0692949U, 0xc9c8448eU,
00518     0xc2896a75U, 0x8e7978f4U, 0x583e6b99U, 0xb971dd27U,
00519     0xe14fb6beU, 0x88ad17f0U, 0x20ac66c9U, 0xce3ab47dU,
00520     0xdf4a1863U, 0x1a3182e5U, 0x51336097U, 0x537f4562U,
00521     0x6477e0b1U, 0x6bae84bbU, 0x81a01cfeU, 0x082b94f9U,
00522     0x48685870U, 0x45fd198fU, 0xde6c8794U, 0x7bf8b752U,
00523     0x73d323abU, 0x4b02e272U, 0x1f8f57e3U, 0x55ab2a66U,
00524     0xeb2807b2U, 0xb5c2032fU, 0xc57b9a86U, 0x3708a5d3U,
00525     0x2887f230U, 0xbfa5b223U, 0x036aba02U, 0x16825cedU,
00526     0xcf1c2b8aU, 0x79b492a7U, 0x07f2f0f3U, 0x69e2a14eU,
00527     0xdaf4cd65U, 0x05bed506U, 0x34621fd1U, 0xa6fe8ac4U,
00528     0x2e539d34U, 0xf355a0a2U, 0x8ae13205U, 0xf6eb75a4U,
00529     0x83ec390bU, 0x60efaa40U, 0x719f065eU, 0x6e1051bdU,
00530     0x218af93eU, 0xdd063d96U, 0x3e05aeddU, 0xe6bd464dU,
00531     0x548db591U, 0xc45d0571U, 0x06d46f04U, 0x5015ff60U,
00532     0x98fb2419U, 0xbde997d6U, 0x4043cc89U, 0xd99e7767U,
00533     0xe842bdb0U, 0x898b8807U, 0x195b38e7U, 0xc8eedb79U,
00534     0x7c0a47a1U, 0x420fe97cU, 0x841ec9f8U, 0x00000000U,
00535     0x80868309U, 0x2bed4832U, 0x1170ac1eU, 0x5a724e6cU,
00536     0x0efffbfdU, 0x8538560fU, 0xaed51e3dU, 0x2d392736U,
00537     0x0fd9640aU, 0x5ca62168U, 0x5b54d19bU, 0x362e3a24U,
00538     0x0a67b10cU, 0x57e70f93U, 0xee96d2b4U, 0x9b919e1bU,
00539     0xc0c54f80U, 0xdc20a261U, 0x774b695aU, 0x121a161cU,
00540     0x93ba0ae2U, 0xa02ae5c0U, 0x22e0433cU, 0x1b171d12U,
00541     0x090d0b0eU, 0x8bc7adf2U, 0xb6a8b92dU, 0x1ea9c814U,
00542     0xf1198557U, 0x75074cafU, 0x99ddbbeeU, 0x7f60fda3U,
00543     0x01269ff7U, 0x72f5bc5cU, 0x663bc544U, 0xfb7e345bU,
00544     0x4329768bU, 0x23c6dccbU, 0xedfc68b6U, 0xe4f163b8U,
00545     0x31dccad7U, 0x63851042U, 0x97224013U, 0xc6112084U,
00546     0x4a247d85U, 0xbb3df8d2U, 0xf93211aeU, 0x29a16dc7U,
00547     0x9e2f4b1dU, 0xb230f3dcU, 0x8652ec0dU, 0xc1e3d077U,
00548     0xb3166c2bU, 0x70b999a9U, 0x9448fa11U, 0xe9642247U,
00549     0xfc8cc4a8U, 0xf03f1aa0U, 0x7d2cd856U, 0x3390ef22U,
00550     0x494ec787U, 0x38d1c1d9U, 0xcaa2fe8cU, 0xd40b3698U,
00551     0xf581cfa6U, 0x7ade28a5U, 0xb78e26daU, 0xadbfa43fU,
00552     0x3a9de42cU, 0x78920d50U, 0x5fcc9b6aU, 0x7e466254U,
00553     0x8d13c2f6U, 0xd8b8e890U, 0x39f75e2eU, 0xc3aff582U,
00554     0x5d80be9fU, 0xd0937c69U, 0xd52da96fU, 0x2512b3cfU,
00555     0xac993bc8U, 0x187da710U, 0x9c636ee8U, 0x3bbb7bdbU,
00556     0x267809cdU, 0x5918f46eU, 0x9ab701ecU, 0x4f9aa883U,
00557     0x956e65e6U, 0xffe67eaaU, 0xbccf0821U, 0x15e8e6efU,
00558     0xe79bd9baU, 0x6f36ce4aU, 0x9f09d4eaU, 0xb07cd629U,
00559     0xa4b2af31U, 0x3f23312aU, 0xa59430c6U, 0xa266c035U,
00560     0x4ebc3774U, 0x82caa6fcU, 0x90d0b0e0U, 0xa7d81533U,
00561     0x04984af1U, 0xecdaf741U, 0xcd500e7fU, 0x91f62f17U,
00562     0x4dd68d76U, 0xefb04d43U, 0xaa4d54ccU, 0x9604dfe4U,
00563     0xd1b5e39eU, 0x6a881b4cU, 0x2c1fb8c1U, 0x65517f46U,
00564     0x5eea049dU, 0x8c355d01U, 0x877473faU, 0x0b412efbU,
00565     0x671d5ab3U, 0xdbd25292U, 0x105633e9U, 0xd647136dU,
00566     0xd7618c9aU, 0xa10c7a37U, 0xf8148e59U, 0x133c89ebU,
00567     0xa927eeceU, 0x61c935b7U, 0x1ce5ede1U, 0x47b13c7aU,
00568     0xd2df599cU, 0xf2733f55U, 0x14ce7918U, 0xc737bf73U,
00569     0xf7cdea53U, 0xfdaa5b5fU, 0x3d6f14dfU, 0x44db8678U,
00570     0xaff381caU, 0x68c43eb9U, 0x24342c38U, 0xa3405fc2U,
00571     0x1dc37216U, 0xe2250cbcU, 0x3c498b28U, 0x0d9541ffU,
00572     0xa8017139U, 0x0cb3de08U, 0xb4e49cd8U, 0x56c19064U,
00573     0xcb84617bU, 0x32b670d5U, 0x6c5c7448U, 0xb85742d0U,
00574   };
00575 
00576 static const CRYPTO_U8 Td4[256] =
00577   {
00578     0x52U, 0x09U, 0x6aU, 0xd5U, 0x30U, 0x36U, 0xa5U, 0x38U,
00579     0xbfU, 0x40U, 0xa3U, 0x9eU, 0x81U, 0xf3U, 0xd7U, 0xfbU,
00580     0x7cU, 0xe3U, 0x39U, 0x82U, 0x9bU, 0x2fU, 0xffU, 0x87U,
00581     0x34U, 0x8eU, 0x43U, 0x44U, 0xc4U, 0xdeU, 0xe9U, 0xcbU,
00582     0x54U, 0x7bU, 0x94U, 0x32U, 0xa6U, 0xc2U, 0x23U, 0x3dU,
00583     0xeeU, 0x4cU, 0x95U, 0x0bU, 0x42U, 0xfaU, 0xc3U, 0x4eU,
00584     0x08U, 0x2eU, 0xa1U, 0x66U, 0x28U, 0xd9U, 0x24U, 0xb2U,
00585     0x76U, 0x5bU, 0xa2U, 0x49U, 0x6dU, 0x8bU, 0xd1U, 0x25U,
00586     0x72U, 0xf8U, 0xf6U, 0x64U, 0x86U, 0x68U, 0x98U, 0x16U,
00587     0xd4U, 0xa4U, 0x5cU, 0xccU, 0x5dU, 0x65U, 0xb6U, 0x92U,
00588     0x6cU, 0x70U, 0x48U, 0x50U, 0xfdU, 0xedU, 0xb9U, 0xdaU,
00589     0x5eU, 0x15U, 0x46U, 0x57U, 0xa7U, 0x8dU, 0x9dU, 0x84U,
00590     0x90U, 0xd8U, 0xabU, 0x00U, 0x8cU, 0xbcU, 0xd3U, 0x0aU,
00591     0xf7U, 0xe4U, 0x58U, 0x05U, 0xb8U, 0xb3U, 0x45U, 0x06U,
00592     0xd0U, 0x2cU, 0x1eU, 0x8fU, 0xcaU, 0x3fU, 0x0fU, 0x02U,
00593     0xc1U, 0xafU, 0xbdU, 0x03U, 0x01U, 0x13U, 0x8aU, 0x6bU,
00594     0x3aU, 0x91U, 0x11U, 0x41U, 0x4fU, 0x67U, 0xdcU, 0xeaU,
00595     0x97U, 0xf2U, 0xcfU, 0xceU, 0xf0U, 0xb4U, 0xe6U, 0x73U,
00596     0x96U, 0xacU, 0x74U, 0x22U, 0xe7U, 0xadU, 0x35U, 0x85U,
00597     0xe2U, 0xf9U, 0x37U, 0xe8U, 0x1cU, 0x75U, 0xdfU, 0x6eU,
00598     0x47U, 0xf1U, 0x1aU, 0x71U, 0x1dU, 0x29U, 0xc5U, 0x89U,
00599     0x6fU, 0xb7U, 0x62U, 0x0eU, 0xaaU, 0x18U, 0xbeU, 0x1bU,
00600     0xfcU, 0x56U, 0x3eU, 0x4bU, 0xc6U, 0xd2U, 0x79U, 0x20U,
00601     0x9aU, 0xdbU, 0xc0U, 0xfeU, 0x78U, 0xcdU, 0x5aU, 0xf4U,
00602     0x1fU, 0xddU, 0xa8U, 0x33U, 0x88U, 0x07U, 0xc7U, 0x31U,
00603     0xb1U, 0x12U, 0x10U, 0x59U, 0x27U, 0x80U, 0xecU, 0x5fU,
00604     0x60U, 0x51U, 0x7fU, 0xa9U, 0x19U, 0xb5U, 0x4aU, 0x0dU,
00605     0x2dU, 0xe5U, 0x7aU, 0x9fU, 0x93U, 0xc9U, 0x9cU, 0xefU,
00606     0xa0U, 0xe0U, 0x3bU, 0x4dU, 0xaeU, 0x2aU, 0xf5U, 0xb0U,
00607     0xc8U, 0xebU, 0xbbU, 0x3cU, 0x83U, 0x53U, 0x99U, 0x61U,
00608     0x17U, 0x2bU, 0x04U, 0x7eU, 0xbaU, 0x77U, 0xd6U, 0x26U,
00609     0xe1U, 0x69U, 0x14U, 0x63U, 0x55U, 0x21U, 0x0cU, 0x7dU,
00610   };
00611 
00612 static const CRYPTO_U32 rcon[] =
00613   {
00614     0x01000000, 0x02000000, 0x04000000, 0x08000000,
00615     0x10000000, 0x20000000, 0x40000000, 0x80000000,
00616     0x1B000000, 0x36000000, /* for 128-bit blocks, Rijndael never uses more than 10 rcon values */
00617 };
00618 
00619 namespace webpki
00620 {
00621 
00622 /*
00623  * Encrypt a single block
00624  * in and out can overlap
00625  */
00626 void AESProvider::AES_encrypt (const unsigned char *in, unsigned char *out)
00627   {
00628 
00629     const CRYPTO_U32 *rk;
00630     CRYPTO_U32 s0, s1, s2, s3, t0, t1, t2, t3;
00631 #ifndef FULL_UNROLL
00632     int r;
00633 #endif /* ?FULL_UNROLL */
00634 
00635     rk = m_the_key.rd_key;
00636 
00637     /*
00638      * map byte array block to cipher state
00639      * and add initial round key:
00640      */
00641     s0 = GETU32(in     ) ^ rk[0];
00642     s1 = GETU32(in +  4) ^ rk[1];
00643     s2 = GETU32(in +  8) ^ rk[2];
00644     s3 = GETU32(in + 12) ^ rk[3];
00645 #ifdef FULL_UNROLL
00646     /* round 1: */
00647     t0 = Te0[s0 >> 24] ^ Te1[(s1 >> 16) & 0xff] ^ Te2[(s2 >>  8) & 0xff] ^ Te3[s3 & 0xff] ^ rk[ 4];
00648     t1 = Te0[s1 >> 24] ^ Te1[(s2 >> 16) & 0xff] ^ Te2[(s3 >>  8) & 0xff] ^ Te3[s0 & 0xff] ^ rk[ 5];
00649     t2 = Te0[s2 >> 24] ^ Te1[(s3 >> 16) & 0xff] ^ Te2[(s0 >>  8) & 0xff] ^ Te3[s1 & 0xff] ^ rk[ 6];
00650     t3 = Te0[s3 >> 24] ^ Te1[(s0 >> 16) & 0xff] ^ Te2[(s1 >>  8) & 0xff] ^ Te3[s2 & 0xff] ^ rk[ 7];
00651     /* round 2: */
00652     s0 = Te0[t0 >> 24] ^ Te1[(t1 >> 16) & 0xff] ^ Te2[(t2 >>  8) & 0xff] ^ Te3[t3 & 0xff] ^ rk[ 8];
00653     s1 = Te0[t1 >> 24] ^ Te1[(t2 >> 16) & 0xff] ^ Te2[(t3 >>  8) & 0xff] ^ Te3[t0 & 0xff] ^ rk[ 9];
00654     s2 = Te0[t2 >> 24] ^ Te1[(t3 >> 16) & 0xff] ^ Te2[(t0 >>  8) & 0xff] ^ Te3[t1 & 0xff] ^ rk[10];
00655     s3 = Te0[t3 >> 24] ^ Te1[(t0 >> 16) & 0xff] ^ Te2[(t1 >>  8) & 0xff] ^ Te3[t2 & 0xff] ^ rk[11];
00656     /* round 3: */
00657     t0 = Te0[s0 >> 24] ^ Te1[(s1 >> 16) & 0xff] ^ Te2[(s2 >>  8) & 0xff] ^ Te3[s3 & 0xff] ^ rk[12];
00658     t1 = Te0[s1 >> 24] ^ Te1[(s2 >> 16) & 0xff] ^ Te2[(s3 >>  8) & 0xff] ^ Te3[s0 & 0xff] ^ rk[13];
00659     t2 = Te0[s2 >> 24] ^ Te1[(s3 >> 16) & 0xff] ^ Te2[(s0 >>  8) & 0xff] ^ Te3[s1 & 0xff] ^ rk[14];
00660     t3 = Te0[s3 >> 24] ^ Te1[(s0 >> 16) & 0xff] ^ Te2[(s1 >>  8) & 0xff] ^ Te3[s2 & 0xff] ^ rk[15];
00661     /* round 4: */
00662     s0 = Te0[t0 >> 24] ^ Te1[(t1 >> 16) & 0xff] ^ Te2[(t2 >>  8) & 0xff] ^ Te3[t3 & 0xff] ^ rk[16];
00663     s1 = Te0[t1 >> 24] ^ Te1[(t2 >> 16) & 0xff] ^ Te2[(t3 >>  8) & 0xff] ^ Te3[t0 & 0xff] ^ rk[17];
00664     s2 = Te0[t2 >> 24] ^ Te1[(t3 >> 16) & 0xff] ^ Te2[(t0 >>  8) & 0xff] ^ Te3[t1 & 0xff] ^ rk[18];
00665     s3 = Te0[t3 >> 24] ^ Te1[(t0 >> 16) & 0xff] ^ Te2[(t1 >>  8) & 0xff] ^ Te3[t2 & 0xff] ^ rk[19];
00666     /* round 5: */
00667     t0 = Te0[s0 >> 24] ^ Te1[(s1 >> 16) & 0xff] ^ Te2[(s2 >>  8) & 0xff] ^ Te3[s3 & 0xff] ^ rk[20];
00668     t1 = Te0[s1 >> 24] ^ Te1[(s2 >> 16) & 0xff] ^ Te2[(s3 >>  8) & 0xff] ^ Te3[s0 & 0xff] ^ rk[21];
00669     t2 = Te0[s2 >> 24] ^ Te1[(s3 >> 16) & 0xff] ^ Te2[(s0 >>  8) & 0xff] ^ Te3[s1 & 0xff] ^ rk[22];
00670     t3 = Te0[s3 >> 24] ^ Te1[(s0 >> 16) & 0xff] ^ Te2[(s1 >>  8) & 0xff] ^ Te3[s2 & 0xff] ^ rk[23];
00671     /* round 6: */
00672     s0 = Te0[t0 >> 24] ^ Te1[(t1 >> 16) & 0xff] ^ Te2[(t2 >>  8) & 0xff] ^ Te3[t3 & 0xff] ^ rk[24];
00673     s1 = Te0[t1 >> 24] ^ Te1[(t2 >> 16) & 0xff] ^ Te2[(t3 >>  8) & 0xff] ^ Te3[t0 & 0xff] ^ rk[25];
00674     s2 = Te0[t2 >> 24] ^ Te1[(t3 >> 16) & 0xff] ^ Te2[(t0 >>  8) & 0xff] ^ Te3[t1 & 0xff] ^ rk[26];
00675     s3 = Te0[t3 >> 24] ^ Te1[(t0 >> 16) & 0xff] ^ Te2[(t1 >>  8) & 0xff] ^ Te3[t2 & 0xff] ^ rk[27];
00676     /* round 7: */
00677     t0 = Te0[s0 >> 24] ^ Te1[(s1 >> 16) & 0xff] ^ Te2[(s2 >>  8) & 0xff] ^ Te3[s3 & 0xff] ^ rk[28];
00678     t1 = Te0[s1 >> 24] ^ Te1[(s2 >> 16) & 0xff] ^ Te2[(s3 >>  8) & 0xff] ^ Te3[s0 & 0xff] ^ rk[29];
00679     t2 = Te0[s2 >> 24] ^ Te1[(s3 >> 16) & 0xff] ^ Te2[(s0 >>  8) & 0xff] ^ Te3[s1 & 0xff] ^ rk[30];
00680     t3 = Te0[s3 >> 24] ^ Te1[(s0 >> 16) & 0xff] ^ Te2[(s1 >>  8) & 0xff] ^ Te3[s2 & 0xff] ^ rk[31];
00681     /* round 8: */
00682     s0 = Te0[t0 >> 24] ^ Te1[(t1 >> 16) & 0xff] ^ Te2[(t2 >>  8) & 0xff] ^ Te3[t3 & 0xff] ^ rk[32];
00683     s1 = Te0[t1 >> 24] ^ Te1[(t2 >> 16) & 0xff] ^ Te2[(t3 >>  8) & 0xff] ^ Te3[t0 & 0xff] ^ rk[33];
00684     s2 = Te0[t2 >> 24] ^ Te1[(t3 >> 16) & 0xff] ^ Te2[(t0 >>  8) & 0xff] ^ Te3[t1 & 0xff] ^ rk[34];
00685     s3 = Te0[t3 >> 24] ^ Te1[(t0 >> 16) & 0xff] ^ Te2[(t1 >>  8) & 0xff] ^ Te3[t2 & 0xff] ^ rk[35];
00686     /* round 9: */
00687     t0 = Te0[s0 >> 24] ^ Te1[(s1 >> 16) & 0xff] ^ Te2[(s2 >>  8) & 0xff] ^ Te3[s3 & 0xff] ^ rk[36];
00688     t1 = Te0[s1 >> 24] ^ Te1[(s2 >> 16) & 0xff] ^ Te2[(s3 >>  8) & 0xff] ^ Te3[s0 & 0xff] ^ rk[37];
00689     t2 = Te0[s2 >> 24] ^ Te1[(s3 >> 16) & 0xff] ^ Te2[(s0 >>  8) & 0xff] ^ Te3[s1 & 0xff] ^ rk[38];
00690     t3 = Te0[s3 >> 24] ^ Te1[(s0 >> 16) & 0xff] ^ Te2[(s1 >>  8) & 0xff] ^ Te3[s2 & 0xff] ^ rk[39];
00691     if (key->rounds > 10)
00692       {
00693         /* round 10: */
00694         s0 = Te0[t0 >> 24] ^ Te1[(t1 >> 16) & 0xff] ^ Te2[(t2 >>  8) & 0xff] ^ Te3[t3 & 0xff] ^ rk[40];
00695         s1 = Te0[t1 >> 24] ^ Te1[(t2 >> 16) & 0xff] ^ Te2[(t3 >>  8) & 0xff] ^ Te3[t0 & 0xff] ^ rk[41];
00696         s2 = Te0[t2 >> 24] ^ Te1[(t3 >> 16) & 0xff] ^ Te2[(t0 >>  8) & 0xff] ^ Te3[t1 & 0xff] ^ rk[42];
00697         s3 = Te0[t3 >> 24] ^ Te1[(t0 >> 16) & 0xff] ^ Te2[(t1 >>  8) & 0xff] ^ Te3[t2 & 0xff] ^ rk[43];
00698         /* round 11: */
00699         t0 = Te0[s0 >> 24] ^ Te1[(s1 >> 16) & 0xff] ^ Te2[(s2 >>  8) & 0xff] ^ Te3[s3 & 0xff] ^ rk[44];
00700         t1 = Te0[s1 >> 24] ^ Te1[(s2 >> 16) & 0xff] ^ Te2[(s3 >>  8) & 0xff] ^ Te3[s0 & 0xff] ^ rk[45];
00701         t2 = Te0[s2 >> 24] ^ Te1[(s3 >> 16) & 0xff] ^ Te2[(s0 >>  8) & 0xff] ^ Te3[s1 & 0xff] ^ rk[46];
00702         t3 = Te0[s3 >> 24] ^ Te1[(s0 >> 16) & 0xff] ^ Te2[(s1 >>  8) & 0xff] ^ Te3[s2 & 0xff] ^ rk[47];
00703         if (key->rounds > 12)
00704           {
00705             /* round 12: */
00706             s0 = Te0[t0 >> 24] ^ Te1[(t1 >> 16) & 0xff] ^ Te2[(t2 >>  8) & 0xff] ^ Te3[t3 & 0xff] ^ rk[48];
00707             s1 = Te0[t1 >> 24] ^ Te1[(t2 >> 16) & 0xff] ^ Te2[(t3 >>  8) & 0xff] ^ Te3[t0 & 0xff] ^ rk[49];
00708             s2 = Te0[t2 >> 24] ^ Te1[(t3 >> 16) & 0xff] ^ Te2[(t0 >>  8) & 0xff] ^ Te3[t1 & 0xff] ^ rk[50];
00709             s3 = Te0[t3 >> 24] ^ Te1[(t0 >> 16) & 0xff] ^ Te2[(t1 >>  8) & 0xff] ^ Te3[t2 & 0xff] ^ rk[51];
00710             /* round 13: */
00711             t0 = Te0[s0 >> 24] ^ Te1[(s1 >> 16) & 0xff] ^ Te2[(s2 >>  8) & 0xff] ^ Te3[s3 & 0xff] ^ rk[52];
00712             t1 = Te0[s1 >> 24] ^ Te1[(s2 >> 16) & 0xff] ^ Te2[(s3 >>  8) & 0xff] ^ Te3[s0 & 0xff] ^ rk[53];
00713             t2 = Te0[s2 >> 24] ^ Te1[(s3 >> 16) & 0xff] ^ Te2[(s0 >>  8) & 0xff] ^ Te3[s1 & 0xff] ^ rk[54];
00714             t3 = Te0[s3 >> 24] ^ Te1[(s0 >> 16) & 0xff] ^ Te2[(s1 >>  8) & 0xff] ^ Te3[s2 & 0xff] ^ rk[55];
00715           }
00716       }
00717     rk += key->rounds << 2;
00718 #else  /* !FULL_UNROLL */
00719     /*
00720      * Nr - 1 full rounds:
00721      */
00722     r = m_the_key.rounds >> 1;
00723     while (true)
00724       {
00725         t0 =
00726             Te0[(s0 >> 24)       ] ^
00727             Te1[(s1 >> 16) & 0xff] ^
00728             Te2[(s2 >>  8) & 0xff] ^
00729             Te3[(s3      ) & 0xff] ^
00730             rk[4];
00731         t1 =
00732             Te0[(s1 >> 24)       ] ^
00733             Te1[(s2 >> 16) & 0xff] ^
00734             Te2[(s3 >>  8) & 0xff] ^
00735             Te3[(s0      ) & 0xff] ^
00736             rk[5];
00737         t2 =
00738             Te0[(s2 >> 24)       ] ^
00739             Te1[(s3 >> 16) & 0xff] ^
00740             Te2[(s0 >>  8) & 0xff] ^
00741             Te3[(s1      ) & 0xff] ^
00742             rk[6];
00743         t3 =
00744             Te0[(s3 >> 24)       ] ^
00745             Te1[(s0 >> 16) & 0xff] ^
00746             Te2[(s1 >>  8) & 0xff] ^
00747             Te3[(s2      ) & 0xff] ^
00748             rk[7];
00749 
00750         rk += 8;
00751         if (--r == 0)
00752           {
00753             break;
00754           }
00755 
00756         s0 =
00757             Te0[(t0 >> 24)       ] ^
00758             Te1[(t1 >> 16) & 0xff] ^
00759             Te2[(t2 >>  8) & 0xff] ^
00760             Te3[(t3      ) & 0xff] ^
00761             rk[0];
00762         s1 =
00763             Te0[(t1 >> 24)       ] ^
00764             Te1[(t2 >> 16) & 0xff] ^
00765             Te2[(t3 >>  8) & 0xff] ^
00766             Te3[(t0      ) & 0xff] ^
00767             rk[1];
00768         s2 =
00769             Te0[(t2 >> 24)       ] ^
00770             Te1[(t3 >> 16) & 0xff] ^
00771             Te2[(t0 >>  8) & 0xff] ^
00772             Te3[(t1      ) & 0xff] ^
00773             rk[2];
00774         s3 =
00775             Te0[(t3 >> 24)       ] ^
00776             Te1[(t0 >> 16) & 0xff] ^
00777             Te2[(t1 >>  8) & 0xff] ^
00778             Te3[(t2      ) & 0xff] ^
00779             rk[3];
00780     }
00781 #endif /* ?FULL_UNROLL */
00782     /*
00783      * apply last round and
00784      * map cipher state to byte array block:
00785      */
00786     s0 =
00787         (Te2[(t0 >> 24)       ] & 0xff000000) ^
00788         (Te3[(t1 >> 16) & 0xff] & 0x00ff0000) ^
00789         (Te0[(t2 >>  8) & 0xff] & 0x0000ff00) ^
00790         (Te1[(t3      ) & 0xff] & 0x000000ff) ^
00791         rk[0];
00792     PUTU32(out     , s0);
00793     s1 =
00794         (Te2[(t1 >> 24)       ] & 0xff000000) ^
00795         (Te3[(t2 >> 16) & 0xff] & 0x00ff0000) ^
00796         (Te0[(t3 >>  8) & 0xff] & 0x0000ff00) ^
00797         (Te1[(t0      ) & 0xff] & 0x000000ff) ^
00798         rk[1];
00799     PUTU32(out +  4, s1);
00800     s2 =
00801         (Te2[(t2 >> 24)       ] & 0xff000000) ^
00802         (Te3[(t3 >> 16) & 0xff] & 0x00ff0000) ^
00803         (Te0[(t0 >>  8) & 0xff] & 0x0000ff00) ^
00804         (Te1[(t1      ) & 0xff] & 0x000000ff) ^
00805         rk[2];
00806     PUTU32(out +  8, s2);
00807     s3 =
00808         (Te2[(t3 >> 24)       ] & 0xff000000) ^
00809         (Te3[(t0 >> 16) & 0xff] & 0x00ff0000) ^
00810         (Te0[(t1 >>  8) & 0xff] & 0x0000ff00) ^
00811         (Te1[(t2      ) & 0xff] & 0x000000ff) ^
00812         rk[3];
00813     PUTU32(out + 12, s3);
00814   }
00815 
00816 
00817 /*
00818  * Decrypt a single block in and out can overlap
00819  */
00820 void AESProvider::AES_decrypt (const unsigned char *in, unsigned char *out)
00821   {
00822     const CRYPTO_U32 *rk;
00823     CRYPTO_U32 s0, s1, s2, s3, t0, t1, t2, t3;
00824 #ifndef FULL_UNROLL
00825     int r;
00826 #endif /* ?FULL_UNROLL */
00827 
00828     rk = m_the_key.rd_key;
00829 
00830     /*
00831      * map byte array block to cipher state
00832      * and add initial round key:
00833      */
00834     s0 = GETU32(in     ) ^ rk[0];
00835     s1 = GETU32(in +  4) ^ rk[1];
00836     s2 = GETU32(in +  8) ^ rk[2];
00837     s3 = GETU32(in + 12) ^ rk[3];
00838 #ifdef FULL_UNROLL
00839     /* round 1: */
00840     t0 = Td0[s0 >> 24] ^ Td1[(s3 >> 16) & 0xff] ^ Td2[(s2 >>  8) & 0xff] ^ Td3[s1 & 0xff] ^ rk[ 4];
00841     t1 = Td0[s1 >> 24] ^ Td1[(s0 >> 16) & 0xff] ^ Td2[(s3 >>  8) & 0xff] ^ Td3[s2 & 0xff] ^ rk[ 5];
00842     t2 = Td0[s2 >> 24] ^ Td1[(s1 >> 16) & 0xff] ^ Td2[(s0 >>  8) & 0xff] ^ Td3[s3 & 0xff] ^ rk[ 6];
00843     t3 = Td0[s3 >> 24] ^ Td1[(s2 >> 16) & 0xff] ^ Td2[(s1 >>  8) & 0xff] ^ Td3[s0 & 0xff] ^ rk[ 7];
00844     /* round 2: */
00845     s0 = Td0[t0 >> 24] ^ Td1[(t3 >> 16) & 0xff] ^ Td2[(t2 >>  8) & 0xff] ^ Td3[t1 & 0xff] ^ rk[ 8];
00846     s1 = Td0[t1 >> 24] ^ Td1[(t0 >> 16) & 0xff] ^ Td2[(t3 >>  8) & 0xff] ^ Td3[t2 & 0xff] ^ rk[ 9];
00847     s2 = Td0[t2 >> 24] ^ Td1[(t1 >> 16) & 0xff] ^ Td2[(t0 >>  8) & 0xff] ^ Td3[t3 & 0xff] ^ rk[10];
00848     s3 = Td0[t3 >> 24] ^ Td1[(t2 >> 16) & 0xff] ^ Td2[(t1 >>  8) & 0xff] ^ Td3[t0 & 0xff] ^ rk[11];
00849     /* round 3: */
00850     t0 = Td0[s0 >> 24] ^ Td1[(s3 >> 16) & 0xff] ^ Td2[(s2 >>  8) & 0xff] ^ Td3[s1 & 0xff] ^ rk[12];
00851     t1 = Td0[s1 >> 24] ^ Td1[(s0 >> 16) & 0xff] ^ Td2[(s3 >>  8) & 0xff] ^ Td3[s2 & 0xff] ^ rk[13];
00852     t2 = Td0[s2 >> 24] ^ Td1[(s1 >> 16) & 0xff] ^ Td2[(s0 >>  8) & 0xff] ^ Td3[s3 & 0xff] ^ rk[14];
00853     t3 = Td0[s3 >> 24] ^ Td1[(s2 >> 16) & 0xff] ^ Td2[(s1 >>  8) & 0xff] ^ Td3[s0 & 0xff] ^ rk[15];
00854     /* round 4: */
00855     s0 = Td0[t0 >> 24] ^ Td1[(t3 >> 16) & 0xff] ^ Td2[(t2 >>  8) & 0xff] ^ Td3[t1 & 0xff] ^ rk[16];
00856     s1 = Td0[t1 >> 24] ^ Td1[(t0 >> 16) & 0xff] ^ Td2[(t3 >>  8) & 0xff] ^ Td3[t2 & 0xff] ^ rk[17];
00857     s2 = Td0[t2 >> 24] ^ Td1[(t1 >> 16) & 0xff] ^ Td2[(t0 >>  8) & 0xff] ^ Td3[t3 & 0xff] ^ rk[18];
00858     s3 = Td0[t3 >> 24] ^ Td1[(t2 >> 16) & 0xff] ^ Td2[(t1 >>  8) & 0xff] ^ Td3[t0 & 0xff] ^ rk[19];
00859     /* round 5: */
00860     t0 = Td0[s0 >> 24] ^ Td1[(s3 >> 16) & 0xff] ^ Td2[(s2 >>  8) & 0xff] ^ Td3[s1 & 0xff] ^ rk[20];
00861     t1 = Td0[s1 >> 24] ^ Td1[(s0 >> 16) & 0xff] ^ Td2[(s3 >>  8) & 0xff] ^ Td3[s2 & 0xff] ^ rk[21];
00862     t2 = Td0[s2 >> 24] ^ Td1[(s1 >> 16) & 0xff] ^ Td2[(s0 >>  8) & 0xff] ^ Td3[s3 & 0xff] ^ rk[22];
00863     t3 = Td0[s3 >> 24] ^ Td1[(s2 >> 16) & 0xff] ^ Td2[(s1 >>  8) & 0xff] ^ Td3[s0 & 0xff] ^ rk[23];
00864     /* round 6: */
00865     s0 = Td0[t0 >> 24] ^ Td1[(t3 >> 16) & 0xff] ^ Td2[(t2 >>  8) & 0xff] ^ Td3[t1 & 0xff] ^ rk[24];
00866     s1 = Td0[t1 >> 24] ^ Td1[(t0 >> 16) & 0xff] ^ Td2[(t3 >>  8) & 0xff] ^ Td3[t2 & 0xff] ^ rk[25];
00867     s2 = Td0[t2 >> 24] ^ Td1[(t1 >> 16) & 0xff] ^ Td2[(t0 >>  8) & 0xff] ^ Td3[t3 & 0xff] ^ rk[26];
00868     s3 = Td0[t3 >> 24] ^ Td1[(t2 >> 16) & 0xff] ^ Td2[(t1 >>  8) & 0xff] ^ Td3[t0 & 0xff] ^ rk[27];
00869     /* round 7: */
00870     t0 = Td0[s0 >> 24] ^ Td1[(s3 >> 16) & 0xff] ^ Td2[(s2 >>  8) & 0xff] ^ Td3[s1 & 0xff] ^ rk[28];
00871     t1 = Td0[s1 >> 24] ^ Td1[(s0 >> 16) & 0xff] ^ Td2[(s3 >>  8) & 0xff] ^ Td3[s2 & 0xff] ^ rk[29];
00872     t2 = Td0[s2 >> 24] ^ Td1[(s1 >> 16) & 0xff] ^ Td2[(s0 >>  8) & 0xff] ^ Td3[s3 & 0xff] ^ rk[30];
00873     t3 = Td0[s3 >> 24] ^ Td1[(s2 >> 16) & 0xff] ^ Td2[(s1 >>  8) & 0xff] ^ Td3[s0 & 0xff] ^ rk[31];
00874     /* round 8: */
00875     s0 = Td0[t0 >> 24] ^ Td1[(t3 >> 16) & 0xff] ^ Td2[(t2 >>  8) & 0xff] ^ Td3[t1 & 0xff] ^ rk[32];
00876     s1 = Td0[t1 >> 24] ^ Td1[(t0 >> 16) & 0xff] ^ Td2[(t3 >>  8) & 0xff] ^ Td3[t2 & 0xff] ^ rk[33];
00877     s2 = Td0[t2 >> 24] ^ Td1[(t1 >> 16) & 0xff] ^ Td2[(t0 >>  8) & 0xff] ^ Td3[t3 & 0xff] ^ rk[34];
00878     s3 = Td0[t3 >> 24] ^ Td1[(t2 >> 16) & 0xff] ^ Td2[(t1 >>  8) & 0xff] ^ Td3[t0 & 0xff] ^ rk[35];
00879     /* round 9: */
00880     t0 = Td0[s0 >> 24] ^ Td1[(s3 >> 16) & 0xff] ^ Td2[(s2 >>  8) & 0xff] ^ Td3[s1 & 0xff] ^ rk[36];
00881     t1 = Td0[s1 >> 24] ^ Td1[(s0 >> 16) & 0xff] ^ Td2[(s3 >>  8) & 0xff] ^ Td3[s2 & 0xff] ^ rk[37];
00882     t2 = Td0[s2 >> 24] ^ Td1[(s1 >> 16) & 0xff] ^ Td2[(s0 >>  8) & 0xff] ^ Td3[s3 & 0xff] ^ rk[38];
00883     t3 = Td0[s3 >> 24] ^ Td1[(s2 >> 16) & 0xff] ^ Td2[(s1 >>  8) & 0xff] ^ Td3[s0 & 0xff] ^ rk[39];
00884     if (key->rounds > 10)
00885       {
00886         /* round 10: */
00887         s0 = Td0[t0 >> 24] ^ Td1[(t3 >> 16) & 0xff] ^ Td2[(t2 >>  8) & 0xff] ^ Td3[t1 & 0xff] ^ rk[40];
00888         s1 = Td0[t1 >> 24] ^ Td1[(t0 >> 16) & 0xff] ^ Td2[(t3 >>  8) & 0xff] ^ Td3[t2 & 0xff] ^ rk[41];
00889         s2 = Td0[t2 >> 24] ^ Td1[(t1 >> 16) & 0xff] ^ Td2[(t0 >>  8) & 0xff] ^ Td3[t3 & 0xff] ^ rk[42];
00890         s3 = Td0[t3 >> 24] ^ Td1[(t2 >> 16) & 0xff] ^ Td2[(t1 >>  8) & 0xff] ^ Td3[t0 & 0xff] ^ rk[43];
00891         /* round 11: */
00892         t0 = Td0[s0 >> 24] ^ Td1[(s3 >> 16) & 0xff] ^ Td2[(s2 >>  8) & 0xff] ^ Td3[s1 & 0xff] ^ rk[44];
00893         t1 = Td0[s1 >> 24] ^ Td1[(s0 >> 16) & 0xff] ^ Td2[(s3 >>  8) & 0xff] ^ Td3[s2 & 0xff] ^ rk[45];
00894         t2 = Td0[s2 >> 24] ^ Td1[(s1 >> 16) & 0xff] ^ Td2[(s0 >>  8) & 0xff] ^ Td3[s3 & 0xff] ^ rk[46];
00895         t3 = Td0[s3 >> 24] ^ Td1[(s2 >> 16) & 0xff] ^ Td2[(s1 >>  8) & 0xff] ^ Td3[s0 & 0xff] ^ rk[47];
00896         if (key->rounds > 12)
00897           {
00898             /* round 12: */
00899             s0 = Td0[t0 >> 24] ^ Td1[(t3 >> 16) & 0xff] ^ Td2[(t2 >>  8) & 0xff] ^ Td3[t1 & 0xff] ^ rk[48];
00900             s1 = Td0[t1 >> 24] ^ Td1[(t0 >> 16) & 0xff] ^ Td2[(t3 >>  8) & 0xff] ^ Td3[t2 & 0xff] ^ rk[49];
00901             s2 = Td0[t2 >> 24] ^ Td1[(t1 >> 16) & 0xff] ^ Td2[(t0 >>  8) & 0xff] ^ Td3[t3 & 0xff] ^ rk[50];
00902             s3 = Td0[t3 >> 24] ^ Td1[(t2 >> 16) & 0xff] ^ Td2[(t1 >>  8) & 0xff] ^ Td3[t0 & 0xff] ^ rk[51];
00903             /* round 13: */
00904             t0 = Td0[s0 >> 24] ^ Td1[(s3 >> 16) & 0xff] ^ Td2[(s2 >>  8) & 0xff] ^ Td3[s1 & 0xff] ^ rk[52];
00905             t1 = Td0[s1 >> 24] ^ Td1[(s0 >> 16) & 0xff] ^ Td2[(s3 >>  8) & 0xff] ^ Td3[s2 & 0xff] ^ rk[53];
00906             t2 = Td0[s2 >> 24] ^ Td1[(s1 >> 16) & 0xff] ^ Td2[(s0 >>  8) & 0xff] ^ Td3[s3 & 0xff] ^ rk[54];
00907             t3 = Td0[s3 >> 24] ^ Td1[(s2 >> 16) & 0xff] ^ Td2[(s1 >>  8) & 0xff] ^ Td3[s0 & 0xff] ^ rk[55];
00908           }
00909       }
00910     rk += key->rounds << 2;
00911 #else  /* !FULL_UNROLL */
00912     /*
00913      * Nr - 1 full rounds:
00914      */
00915     r = m_the_key.rounds >> 1;
00916     while (true)
00917       {
00918         t0 =
00919             Td0[(s0 >> 24)       ] ^
00920             Td1[(s3 >> 16) & 0xff] ^
00921             Td2[(s2 >>  8) & 0xff] ^
00922             Td3[(s1      ) & 0xff] ^
00923             rk[4];
00924         t1 =
00925             Td0[(s1 >> 24)       ] ^
00926             Td1[(s0 >> 16) & 0xff] ^
00927             Td2[(s3 >>  8) & 0xff] ^
00928             Td3[(s2      ) & 0xff] ^
00929             rk[5];
00930         t2 =
00931             Td0[(s2 >> 24)       ] ^
00932             Td1[(s1 >> 16) & 0xff] ^
00933             Td2[(s0 >>  8) & 0xff] ^
00934             Td3[(s3      ) & 0xff] ^
00935             rk[6];
00936         t3 =
00937             Td0[(s3 >> 24)       ] ^
00938             Td1[(s2 >> 16) & 0xff] ^
00939             Td2[(s1 >>  8) & 0xff] ^
00940             Td3[(s0      ) & 0xff] ^
00941             rk[7];
00942 
00943         rk += 8;
00944         if (--r == 0)
00945           {
00946             break;
00947           }
00948 
00949         s0 =
00950             Td0[(t0 >> 24)       ] ^
00951             Td1[(t3 >> 16) & 0xff] ^
00952             Td2[(t2 >>  8) & 0xff] ^
00953             Td3[(t1      ) & 0xff] ^
00954             rk[0];
00955         s1 =
00956             Td0[(t1 >> 24)       ] ^
00957             Td1[(t0 >> 16) & 0xff] ^
00958             Td2[(t3 >>  8) & 0xff] ^
00959             Td3[(t2      ) & 0xff] ^
00960             rk[1];
00961         s2 =
00962             Td0[(t2 >> 24)       ] ^
00963             Td1[(t1 >> 16) & 0xff] ^
00964             Td2[(t0 >>  8) & 0xff] ^
00965             Td3[(t3      ) & 0xff] ^
00966             rk[2];
00967         s3 =
00968             Td0[(t3 >> 24)       ] ^
00969             Td1[(t2 >> 16) & 0xff] ^
00970             Td2[(t1 >>  8) & 0xff] ^
00971             Td3[(t0      ) & 0xff] ^
00972             rk[3];
00973       }
00974 #endif /* ?FULL_UNROLL */
00975     /*
00976      * apply last round and
00977      * map cipher state to byte array block:
00978      */
00979     s0 =
00980         (Td4[(t0 >> 24)       ] << 24) ^
00981         (Td4[(t3 >> 16) & 0xff] << 16) ^
00982         (Td4[(t2 >>  8) & 0xff] <<  8) ^
00983         (Td4[(t1      ) & 0xff])       ^
00984         rk[0];
00985     PUTU32(out     , s0);
00986     s1 =
00987         (Td4[(t1 >> 24)       ] << 24) ^
00988         (Td4[(t0 >> 16) & 0xff] << 16) ^
00989         (Td4[(t3 >>  8) & 0xff] <<  8) ^
00990         (Td4[(t2      ) & 0xff])       ^
00991         rk[1];
00992     PUTU32(out +  4, s1);
00993     s2 =
00994         (Td4[(t2 >> 24)       ] << 24) ^
00995         (Td4[(t1 >> 16) & 0xff] << 16) ^
00996         (Td4[(t0 >>  8) & 0xff] <<  8) ^
00997         (Td4[(t3      ) & 0xff])       ^
00998         rk[2];
00999     PUTU32(out +  8, s2);
01000     s3 =
01001         (Td4[(t3 >> 24)       ] << 24) ^
01002         (Td4[(t2 >> 16) & 0xff] << 16) ^
01003         (Td4[(t1 >>  8) & 0xff] <<  8) ^
01004         (Td4[(t0      ) & 0xff])       ^
01005         rk[3];
01006     PUTU32(out + 12, s3);
01007   }
01008 
01009 
01010 void AESProvider::AES_cbc_ecb_encrypt (const unsigned char* in, unsigned char* out, int length, const unsigned char* iv)
01011   {
01012     if (m_encrypt)
01013       {
01014         while (length >= AES_BLOCK_SIZE)
01015           {
01016             if (iv)
01017               {
01018                 for (int n = 0; n < AES_BLOCK_SIZE; ++n)
01019                   {
01020                     out[n] = in[n] ^ iv[n];
01021                   }
01022                 AES_encrypt (out, out);
01023                 iv = out;
01024               }
01025             else
01026               {
01027                 AES_encrypt (in, out);
01028               }
01029             length -= AES_BLOCK_SIZE;
01030             in += AES_BLOCK_SIZE;
01031             out += AES_BLOCK_SIZE;
01032           }
01033       }
01034     else
01035       {
01036         unsigned char next_iv[AES_BLOCK_SIZE];
01037         unsigned char curr_iv[AES_BLOCK_SIZE];
01038         if (iv)
01039           {
01040             memcpy (curr_iv, iv, AES_BLOCK_SIZE);
01041           }
01042         while (length >= AES_BLOCK_SIZE)
01043           {
01044             memcpy (next_iv, in, AES_BLOCK_SIZE);
01045             AES_decrypt (in, out);
01046             if (iv)
01047               {
01048                 for (int n = 0; n < AES_BLOCK_SIZE; ++n)
01049                   {
01050                     out[n] ^= curr_iv[n];
01051                   }
01052                 memcpy (curr_iv, next_iv, AES_BLOCK_SIZE);
01053               }
01054             length -= AES_BLOCK_SIZE;
01055             in += AES_BLOCK_SIZE;
01056             out += AES_BLOCK_SIZE;
01057           }
01058       }
01059   }
01060 
01061 
01062   /**
01063    * Expand the cipher key into the encryption key schedule.
01064    */
01065 void AESProvider::AES_set_encrypt_key (const unsigned char* raw_key)
01066   {
01067     CRYPTO_U32 *rk;
01068     int i = 0;
01069     CRYPTO_U32 temp;
01070 
01071     rk = m_the_key.rd_key;
01072     if (m_the_key.length_in_bytes == 16)
01073       {
01074         m_the_key.rounds = 10;
01075       }
01076     else if (m_the_key.length_in_bytes == 24)
01077       {
01078         m_the_key.rounds = 12;
01079       }
01080     else
01081       {
01082         m_the_key.rounds = 14;
01083       }
01084 
01085     rk[0] = GETU32(raw_key     );
01086     rk[1] = GETU32(raw_key +  4);
01087     rk[2] = GETU32(raw_key +  8);
01088     rk[3] = GETU32(raw_key + 12);
01089     if (m_the_key.length_in_bytes == 16)
01090       {
01091         while (true)
01092           {
01093             temp  = rk[3];
01094             rk[4] = rk[0] ^
01095                 (Te2[(temp >> 16) & 0xff] & 0xff000000) ^
01096                 (Te3[(temp >>  8) & 0xff] & 0x00ff0000) ^
01097                 (Te0[(temp      ) & 0xff] & 0x0000ff00) ^
01098                 (Te1[(temp >> 24)       ] & 0x000000ff) ^
01099                 rcon[i];
01100             rk[5] = rk[1] ^ rk[4];
01101             rk[6] = rk[2] ^ rk[5];
01102             rk[7] = rk[3] ^ rk[6];
01103             if (++i == 10)
01104               {
01105                 return;
01106               }
01107             rk += 4;
01108           }
01109       }
01110     rk[4] = GETU32(raw_key + 16);
01111     rk[5] = GETU32(raw_key + 20);
01112     if (m_the_key.length_in_bytes == 24)
01113       {
01114         while (true)
01115           {
01116             temp = rk[ 5];
01117             rk[ 6] = rk[ 0] ^
01118                 (Te2[(temp >> 16) & 0xff] & 0xff000000) ^
01119                 (Te3[(temp >>  8) & 0xff] & 0x00ff0000) ^
01120                 (Te0[(temp      ) & 0xff] & 0x0000ff00) ^
01121                 (Te1[(temp >> 24)       ] & 0x000000ff) ^
01122                 rcon[i];
01123             rk[ 7] = rk[ 1] ^ rk[ 6];
01124             rk[ 8] = rk[ 2] ^ rk[ 7];
01125             rk[ 9] = rk[ 3] ^ rk[ 8];
01126             if (++i == 8)
01127               {
01128                 return;
01129               }
01130             rk[10] = rk[ 4] ^ rk[ 9];
01131             rk[11] = rk[ 5] ^ rk[10];
01132             rk += 6;
01133           }
01134       }
01135     rk[6] = GETU32(raw_key + 24);
01136     rk[7] = GETU32(raw_key + 28);
01137     if (m_the_key.length_in_bytes == 32)
01138       {
01139         while (true)
01140           {
01141             temp = rk[ 7];
01142             rk[ 8] = rk[ 0] ^
01143                 (Te2[(temp >> 16) & 0xff] & 0xff000000) ^
01144                 (Te3[(temp >>  8) & 0xff] & 0x00ff0000) ^
01145                 (Te0[(temp      ) & 0xff] & 0x0000ff00) ^
01146                 (Te1[(temp >> 24)       ] & 0x000000ff) ^
01147                 rcon[i];
01148             rk[ 9] = rk[ 1] ^ rk[ 8];
01149             rk[10] = rk[ 2] ^ rk[ 9];
01150             rk[11] = rk[ 3] ^ rk[10];
01151             if (++i == 7)
01152               {
01153                 return;
01154               }
01155             temp = rk[11];
01156             rk[12] = rk[ 4] ^
01157                 (Te2[(temp >> 24)       ] & 0xff000000) ^
01158                 (Te3[(temp >> 16) & 0xff] & 0x00ff0000) ^
01159                 (Te0[(temp >>  8) & 0xff] & 0x0000ff00) ^
01160                 (Te1[(temp      ) & 0xff] & 0x000000ff);
01161             rk[13] = rk[ 5] ^ rk[12];
01162             rk[14] = rk[ 6] ^ rk[13];
01163             rk[15] = rk[ 7] ^ rk[14];
01164 
01165             rk += 8;
01166           }
01167       }
01168   }
01169 
01170 
01171 /**
01172  * Expand the cipher key into the decryption key schedule.
01173  */
01174 void AESProvider::AES_set_decrypt_key (const unsigned char* raw_key)
01175   {
01176     CRYPTO_U32 *rk;
01177     int i, j;
01178     CRYPTO_U32 temp;
01179 
01180     /* first, start with an encryption schedule */
01181     AES_set_encrypt_key (raw_key);
01182 
01183     rk = m_the_key.rd_key;
01184 
01185     /* invert the order of the round keys: */
01186     for (i = 0, j = 4*(m_the_key.rounds); i < j; i += 4, j -= 4)
01187       {
01188         temp = rk[i    ]; rk[i    ] = rk[j    ]; rk[j    ] = temp;
01189         temp = rk[i + 1]; rk[i + 1] = rk[j + 1]; rk[j + 1] = temp;
01190         temp = rk[i + 2]; rk[i + 2] = rk[j + 2]; rk[j + 2] = temp;
01191         temp = rk[i + 3]; rk[i + 3] = rk[j + 3]; rk[j + 3] = temp;
01192       }
01193     /* apply the inverse MixColumn transform to all round keys but the first and the last: */
01194     for (i = 1; i < (m_the_key.rounds); i++)
01195       {
01196         rk += 4;
01197         rk[0] =
01198             Td0[Te1[(rk[0] >> 24)       ] & 0xff] ^
01199             Td1[Te1[(rk[0] >> 16) & 0xff] & 0xff] ^
01200             Td2[Te1[(rk[0] >>  8) & 0xff] & 0xff] ^
01201             Td3[Te1[(rk[0]      ) & 0xff] & 0xff];
01202         rk[1] =
01203             Td0[Te1[(rk[1] >> 24)       ] & 0xff] ^
01204             Td1[Te1[(rk[1] >> 16) & 0xff] & 0xff] ^
01205             Td2[Te1[(rk[1] >>  8) & 0xff] & 0xff] ^
01206             Td3[Te1[(rk[1]      ) & 0xff] & 0xff];
01207         rk[2] =
01208             Td0[Te1[(rk[2] >> 24)       ] & 0xff] ^
01209             Td1[Te1[(rk[2] >> 16) & 0xff] & 0xff] ^
01210             Td2[Te1[(rk[2] >>  8) & 0xff] & 0xff] ^
01211             Td3[Te1[(rk[2]      ) & 0xff] & 0xff];
01212         rk[3] =
01213             Td0[Te1[(rk[3] >> 24)       ] & 0xff] ^
01214             Td1[Te1[(rk[3] >> 16) & 0xff] & 0xff] ^
01215             Td2[Te1[(rk[3] >>  8) & 0xff] & 0xff] ^
01216             Td3[Te1[(rk[3]      ) & 0xff] & 0xff];
01217       }
01218   }
01219 
01220 
01221 const int AESProvider::AES_BLOCK_SIZE;
01222 
01223 const int AESProvider::AES_MAXNR;
01224 
01225 
01226 AESProvider::AESProvider ()
01227   {
01228     m_error = NULL;
01229   }
01230 
01231 
01232 void AESProvider::setKey (const unsigned char* raw_key, int key_length, bool encrypt)
01233   {
01234     m_error = NULL;
01235     m_the_key.length_in_bytes = key_length;
01236     if (key_length == 16 || key_length == 24 || key_length == 32)
01237       {
01238         if ((m_encrypt = encrypt))
01239           {
01240             AES_set_encrypt_key (raw_key);
01241           }
01242         else
01243           {
01244             AES_set_decrypt_key (raw_key);
01245           }
01246       }
01247     else
01248       {
01249         m_error = "Keys may only be 128, 192, or 256 bits";
01250       }
01251   }
01252 
01253 
01254 const char* AESProvider::encrypt (unsigned char* out, int& in_out_len, const unsigned char* in, const unsigned char* iv, bool pad)
01255   {
01256     if (m_error)
01257       {
01258         return m_error;
01259       }
01260     if (!pad && in_out_len % AES_BLOCK_SIZE != 0)
01261       {
01262         return "Non-padded mode requires multiples of 16 bytes";
01263       }
01264     if (m_encrypt)
01265       {
01266         if (pad)
01267           {
01268             for (int i = 0; i < in_out_len; i++)
01269               {
01270                 out[i] = in[i];
01271               }
01272             int p = AES_BLOCK_SIZE - in_out_len % AES_BLOCK_SIZE;
01273             for (int i = 0; i < p; i++)
01274               {
01275                 out[in_out_len++] = p;
01276               }
01277             in = out;
01278           }
01279         AES_cbc_ecb_encrypt (in, out, in_out_len, iv);
01280       }
01281     else
01282       {
01283         AES_cbc_ecb_encrypt (in, out, in_out_len, iv);
01284         if (pad)
01285           {
01286             int p = out[--in_out_len];
01287             for (int i = 1; i < p; i++)
01288               {
01289                 if (out[--in_out_len] != p)
01290                   {
01291                     return m_error ? m_error : "bad padding";
01292                   }
01293               }
01294           }
01295       }
01296     return m_error;
01297   }
01298 
01299 }