des.c

  1// SPDX-License-Identifier: GPL-2.0-or-later
  2/*
  3 * Cryptographic API.
  4 *
  5 * DES & Triple DES EDE Cipher Algorithms.
  6 *
  7 * Copyright (c) 2005 Dag Arne Osvik <da@osvik.no>
  8 */
  9
 10#include <crypto/des.h>
 11#include <crypto/internal/des.h>
 12#include <linux/bitops.h>
 13#include <linux/compiler.h>
 14#include <linux/crypto.h>
 15#include <linux/errno.h>
 16#include <linux/export.h>
 17#include <linux/fips.h>
 18#include <linux/init.h>
 19#include <linux/module.h>
 20#include <linux/string.h>
 21#include <linux/types.h>
 22#include <linux/unaligned.h>
 23
 24#define ROL(x, r) ((x) = rol32((x), (r)))
 25#define ROR(x, r) ((x) = ror32((x), (r)))
 26
 27/* Lookup tables for key expansion */
 28
 29static const u8 pc1[256] = {
 30	0x00, 0x00, 0x40, 0x04, 0x10, 0x10, 0x50, 0x14,
 31	0x04, 0x40, 0x44, 0x44, 0x14, 0x50, 0x54, 0x54,
 32	0x02, 0x02, 0x42, 0x06, 0x12, 0x12, 0x52, 0x16,
 33	0x06, 0x42, 0x46, 0x46, 0x16, 0x52, 0x56, 0x56,
 34	0x80, 0x08, 0xc0, 0x0c, 0x90, 0x18, 0xd0, 0x1c,
 35	0x84, 0x48, 0xc4, 0x4c, 0x94, 0x58, 0xd4, 0x5c,
 36	0x82, 0x0a, 0xc2, 0x0e, 0x92, 0x1a, 0xd2, 0x1e,
 37	0x86, 0x4a, 0xc6, 0x4e, 0x96, 0x5a, 0xd6, 0x5e,
 38	0x20, 0x20, 0x60, 0x24, 0x30, 0x30, 0x70, 0x34,
 39	0x24, 0x60, 0x64, 0x64, 0x34, 0x70, 0x74, 0x74,
 40	0x22, 0x22, 0x62, 0x26, 0x32, 0x32, 0x72, 0x36,
 41	0x26, 0x62, 0x66, 0x66, 0x36, 0x72, 0x76, 0x76,
 42	0xa0, 0x28, 0xe0, 0x2c, 0xb0, 0x38, 0xf0, 0x3c,
 43	0xa4, 0x68, 0xe4, 0x6c, 0xb4, 0x78, 0xf4, 0x7c,
 44	0xa2, 0x2a, 0xe2, 0x2e, 0xb2, 0x3a, 0xf2, 0x3e,
 45	0xa6, 0x6a, 0xe6, 0x6e, 0xb6, 0x7a, 0xf6, 0x7e,
 46	0x08, 0x80, 0x48, 0x84, 0x18, 0x90, 0x58, 0x94,
 47	0x0c, 0xc0, 0x4c, 0xc4, 0x1c, 0xd0, 0x5c, 0xd4,
 48	0x0a, 0x82, 0x4a, 0x86, 0x1a, 0x92, 0x5a, 0x96,
 49	0x0e, 0xc2, 0x4e, 0xc6, 0x1e, 0xd2, 0x5e, 0xd6,
 50	0x88, 0x88, 0xc8, 0x8c, 0x98, 0x98, 0xd8, 0x9c,
 51	0x8c, 0xc8, 0xcc, 0xcc, 0x9c, 0xd8, 0xdc, 0xdc,
 52	0x8a, 0x8a, 0xca, 0x8e, 0x9a, 0x9a, 0xda, 0x9e,
 53	0x8e, 0xca, 0xce, 0xce, 0x9e, 0xda, 0xde, 0xde,
 54	0x28, 0xa0, 0x68, 0xa4, 0x38, 0xb0, 0x78, 0xb4,
 55	0x2c, 0xe0, 0x6c, 0xe4, 0x3c, 0xf0, 0x7c, 0xf4,
 56	0x2a, 0xa2, 0x6a, 0xa6, 0x3a, 0xb2, 0x7a, 0xb6,
 57	0x2e, 0xe2, 0x6e, 0xe6, 0x3e, 0xf2, 0x7e, 0xf6,
 58	0xa8, 0xa8, 0xe8, 0xac, 0xb8, 0xb8, 0xf8, 0xbc,
 59	0xac, 0xe8, 0xec, 0xec, 0xbc, 0xf8, 0xfc, 0xfc,
 60	0xaa, 0xaa, 0xea, 0xae, 0xba, 0xba, 0xfa, 0xbe,
 61	0xae, 0xea, 0xee, 0xee, 0xbe, 0xfa, 0xfe, 0xfe
 62};
 63
 64static const u8 rs[256] = {
 65	0x00, 0x00, 0x80, 0x80, 0x02, 0x02, 0x82, 0x82,
 66	0x04, 0x04, 0x84, 0x84, 0x06, 0x06, 0x86, 0x86,
 67	0x08, 0x08, 0x88, 0x88, 0x0a, 0x0a, 0x8a, 0x8a,
 68	0x0c, 0x0c, 0x8c, 0x8c, 0x0e, 0x0e, 0x8e, 0x8e,
 69	0x10, 0x10, 0x90, 0x90, 0x12, 0x12, 0x92, 0x92,
 70	0x14, 0x14, 0x94, 0x94, 0x16, 0x16, 0x96, 0x96,
 71	0x18, 0x18, 0x98, 0x98, 0x1a, 0x1a, 0x9a, 0x9a,
 72	0x1c, 0x1c, 0x9c, 0x9c, 0x1e, 0x1e, 0x9e, 0x9e,
 73	0x20, 0x20, 0xa0, 0xa0, 0x22, 0x22, 0xa2, 0xa2,
 74	0x24, 0x24, 0xa4, 0xa4, 0x26, 0x26, 0xa6, 0xa6,
 75	0x28, 0x28, 0xa8, 0xa8, 0x2a, 0x2a, 0xaa, 0xaa,
 76	0x2c, 0x2c, 0xac, 0xac, 0x2e, 0x2e, 0xae, 0xae,
 77	0x30, 0x30, 0xb0, 0xb0, 0x32, 0x32, 0xb2, 0xb2,
 78	0x34, 0x34, 0xb4, 0xb4, 0x36, 0x36, 0xb6, 0xb6,
 79	0x38, 0x38, 0xb8, 0xb8, 0x3a, 0x3a, 0xba, 0xba,
 80	0x3c, 0x3c, 0xbc, 0xbc, 0x3e, 0x3e, 0xbe, 0xbe,
 81	0x40, 0x40, 0xc0, 0xc0, 0x42, 0x42, 0xc2, 0xc2,
 82	0x44, 0x44, 0xc4, 0xc4, 0x46, 0x46, 0xc6, 0xc6,
 83	0x48, 0x48, 0xc8, 0xc8, 0x4a, 0x4a, 0xca, 0xca,
 84	0x4c, 0x4c, 0xcc, 0xcc, 0x4e, 0x4e, 0xce, 0xce,
 85	0x50, 0x50, 0xd0, 0xd0, 0x52, 0x52, 0xd2, 0xd2,
 86	0x54, 0x54, 0xd4, 0xd4, 0x56, 0x56, 0xd6, 0xd6,
 87	0x58, 0x58, 0xd8, 0xd8, 0x5a, 0x5a, 0xda, 0xda,
 88	0x5c, 0x5c, 0xdc, 0xdc, 0x5e, 0x5e, 0xde, 0xde,
 89	0x60, 0x60, 0xe0, 0xe0, 0x62, 0x62, 0xe2, 0xe2,
 90	0x64, 0x64, 0xe4, 0xe4, 0x66, 0x66, 0xe6, 0xe6,
 91	0x68, 0x68, 0xe8, 0xe8, 0x6a, 0x6a, 0xea, 0xea,
 92	0x6c, 0x6c, 0xec, 0xec, 0x6e, 0x6e, 0xee, 0xee,
 93	0x70, 0x70, 0xf0, 0xf0, 0x72, 0x72, 0xf2, 0xf2,
 94	0x74, 0x74, 0xf4, 0xf4, 0x76, 0x76, 0xf6, 0xf6,
 95	0x78, 0x78, 0xf8, 0xf8, 0x7a, 0x7a, 0xfa, 0xfa,
 96	0x7c, 0x7c, 0xfc, 0xfc, 0x7e, 0x7e, 0xfe, 0xfe
 97};
 98
 99static const u32 pc2[1024] = {
100	0x00000000, 0x00000000, 0x00000000, 0x00000000,
101	0x00040000, 0x00000000, 0x04000000, 0x00100000,
102	0x00400000, 0x00000008, 0x00000800, 0x40000000,
103	0x00440000, 0x00000008, 0x04000800, 0x40100000,
104	0x00000400, 0x00000020, 0x08000000, 0x00000100,
105	0x00040400, 0x00000020, 0x0c000000, 0x00100100,
106	0x00400400, 0x00000028, 0x08000800, 0x40000100,
107	0x00440400, 0x00000028, 0x0c000800, 0x40100100,
108	0x80000000, 0x00000010, 0x00000000, 0x00800000,
109	0x80040000, 0x00000010, 0x04000000, 0x00900000,
110	0x80400000, 0x00000018, 0x00000800, 0x40800000,
111	0x80440000, 0x00000018, 0x04000800, 0x40900000,
112	0x80000400, 0x00000030, 0x08000000, 0x00800100,
113	0x80040400, 0x00000030, 0x0c000000, 0x00900100,
114	0x80400400, 0x00000038, 0x08000800, 0x40800100,
115	0x80440400, 0x00000038, 0x0c000800, 0x40900100,
116	0x10000000, 0x00000000, 0x00200000, 0x00001000,
117	0x10040000, 0x00000000, 0x04200000, 0x00101000,
118	0x10400000, 0x00000008, 0x00200800, 0x40001000,
119	0x10440000, 0x00000008, 0x04200800, 0x40101000,
120	0x10000400, 0x00000020, 0x08200000, 0x00001100,
121	0x10040400, 0x00000020, 0x0c200000, 0x00101100,
122	0x10400400, 0x00000028, 0x08200800, 0x40001100,
123	0x10440400, 0x00000028, 0x0c200800, 0x40101100,
124	0x90000000, 0x00000010, 0x00200000, 0x00801000,
125	0x90040000, 0x00000010, 0x04200000, 0x00901000,
126	0x90400000, 0x00000018, 0x00200800, 0x40801000,
127	0x90440000, 0x00000018, 0x04200800, 0x40901000,
128	0x90000400, 0x00000030, 0x08200000, 0x00801100,
129	0x90040400, 0x00000030, 0x0c200000, 0x00901100,
130	0x90400400, 0x00000038, 0x08200800, 0x40801100,
131	0x90440400, 0x00000038, 0x0c200800, 0x40901100,
132	0x00000200, 0x00080000, 0x00000000, 0x00000004,
133	0x00040200, 0x00080000, 0x04000000, 0x00100004,
134	0x00400200, 0x00080008, 0x00000800, 0x40000004,
135	0x00440200, 0x00080008, 0x04000800, 0x40100004,
136	0x00000600, 0x00080020, 0x08000000, 0x00000104,
137	0x00040600, 0x00080020, 0x0c000000, 0x00100104,
138	0x00400600, 0x00080028, 0x08000800, 0x40000104,
139	0x00440600, 0x00080028, 0x0c000800, 0x40100104,
140	0x80000200, 0x00080010, 0x00000000, 0x00800004,
141	0x80040200, 0x00080010, 0x04000000, 0x00900004,
142	0x80400200, 0x00080018, 0x00000800, 0x40800004,
143	0x80440200, 0x00080018, 0x04000800, 0x40900004,
144	0x80000600, 0x00080030, 0x08000000, 0x00800104,
145	0x80040600, 0x00080030, 0x0c000000, 0x00900104,
146	0x80400600, 0x00080038, 0x08000800, 0x40800104,
147	0x80440600, 0x00080038, 0x0c000800, 0x40900104,
148	0x10000200, 0x00080000, 0x00200000, 0x00001004,
149	0x10040200, 0x00080000, 0x04200000, 0x00101004,
150	0x10400200, 0x00080008, 0x00200800, 0x40001004,
151	0x10440200, 0x00080008, 0x04200800, 0x40101004,
152	0x10000600, 0x00080020, 0x08200000, 0x00001104,
153	0x10040600, 0x00080020, 0x0c200000, 0x00101104,
154	0x10400600, 0x00080028, 0x08200800, 0x40001104,
155	0x10440600, 0x00080028, 0x0c200800, 0x40101104,
156	0x90000200, 0x00080010, 0x00200000, 0x00801004,
157	0x90040200, 0x00080010, 0x04200000, 0x00901004,
158	0x90400200, 0x00080018, 0x00200800, 0x40801004,
159	0x90440200, 0x00080018, 0x04200800, 0x40901004,
160	0x90000600, 0x00080030, 0x08200000, 0x00801104,
161	0x90040600, 0x00080030, 0x0c200000, 0x00901104,
162	0x90400600, 0x00080038, 0x08200800, 0x40801104,
163	0x90440600, 0x00080038, 0x0c200800, 0x40901104,
164	0x00000002, 0x00002000, 0x20000000, 0x00000001,
165	0x00040002, 0x00002000, 0x24000000, 0x00100001,
166	0x00400002, 0x00002008, 0x20000800, 0x40000001,
167	0x00440002, 0x00002008, 0x24000800, 0x40100001,
168	0x00000402, 0x00002020, 0x28000000, 0x00000101,
169	0x00040402, 0x00002020, 0x2c000000, 0x00100101,
170	0x00400402, 0x00002028, 0x28000800, 0x40000101,
171	0x00440402, 0x00002028, 0x2c000800, 0x40100101,
172	0x80000002, 0x00002010, 0x20000000, 0x00800001,
173	0x80040002, 0x00002010, 0x24000000, 0x00900001,
174	0x80400002, 0x00002018, 0x20000800, 0x40800001,
175	0x80440002, 0x00002018, 0x24000800, 0x40900001,
176	0x80000402, 0x00002030, 0x28000000, 0x00800101,
177	0x80040402, 0x00002030, 0x2c000000, 0x00900101,
178	0x80400402, 0x00002038, 0x28000800, 0x40800101,
179	0x80440402, 0x00002038, 0x2c000800, 0x40900101,
180	0x10000002, 0x00002000, 0x20200000, 0x00001001,
181	0x10040002, 0x00002000, 0x24200000, 0x00101001,
182	0x10400002, 0x00002008, 0x20200800, 0x40001001,
183	0x10440002, 0x00002008, 0x24200800, 0x40101001,
184	0x10000402, 0x00002020, 0x28200000, 0x00001101,
185	0x10040402, 0x00002020, 0x2c200000, 0x00101101,
186	0x10400402, 0x00002028, 0x28200800, 0x40001101,
187	0x10440402, 0x00002028, 0x2c200800, 0x40101101,
188	0x90000002, 0x00002010, 0x20200000, 0x00801001,
189	0x90040002, 0x00002010, 0x24200000, 0x00901001,
190	0x90400002, 0x00002018, 0x20200800, 0x40801001,
191	0x90440002, 0x00002018, 0x24200800, 0x40901001,
192	0x90000402, 0x00002030, 0x28200000, 0x00801101,
193	0x90040402, 0x00002030, 0x2c200000, 0x00901101,
194	0x90400402, 0x00002038, 0x28200800, 0x40801101,
195	0x90440402, 0x00002038, 0x2c200800, 0x40901101,
196	0x00000202, 0x00082000, 0x20000000, 0x00000005,
197	0x00040202, 0x00082000, 0x24000000, 0x00100005,
198	0x00400202, 0x00082008, 0x20000800, 0x40000005,
199	0x00440202, 0x00082008, 0x24000800, 0x40100005,
200	0x00000602, 0x00082020, 0x28000000, 0x00000105,
201	0x00040602, 0x00082020, 0x2c000000, 0x00100105,
202	0x00400602, 0x00082028, 0x28000800, 0x40000105,
203	0x00440602, 0x00082028, 0x2c000800, 0x40100105,
204	0x80000202, 0x00082010, 0x20000000, 0x00800005,
205	0x80040202, 0x00082010, 0x24000000, 0x00900005,
206	0x80400202, 0x00082018, 0x20000800, 0x40800005,
207	0x80440202, 0x00082018, 0x24000800, 0x40900005,
208	0x80000602, 0x00082030, 0x28000000, 0x00800105,
209	0x80040602, 0x00082030, 0x2c000000, 0x00900105,
210	0x80400602, 0x00082038, 0x28000800, 0x40800105,
211	0x80440602, 0x00082038, 0x2c000800, 0x40900105,
212	0x10000202, 0x00082000, 0x20200000, 0x00001005,
213	0x10040202, 0x00082000, 0x24200000, 0x00101005,
214	0x10400202, 0x00082008, 0x20200800, 0x40001005,
215	0x10440202, 0x00082008, 0x24200800, 0x40101005,
216	0x10000602, 0x00082020, 0x28200000, 0x00001105,
217	0x10040602, 0x00082020, 0x2c200000, 0x00101105,
218	0x10400602, 0x00082028, 0x28200800, 0x40001105,
219	0x10440602, 0x00082028, 0x2c200800, 0x40101105,
220	0x90000202, 0x00082010, 0x20200000, 0x00801005,
221	0x90040202, 0x00082010, 0x24200000, 0x00901005,
222	0x90400202, 0x00082018, 0x20200800, 0x40801005,
223	0x90440202, 0x00082018, 0x24200800, 0x40901005,
224	0x90000602, 0x00082030, 0x28200000, 0x00801105,
225	0x90040602, 0x00082030, 0x2c200000, 0x00901105,
226	0x90400602, 0x00082038, 0x28200800, 0x40801105,
227	0x90440602, 0x00082038, 0x2c200800, 0x40901105,
228
229	0x00000000, 0x00000000, 0x00000000, 0x00000000,
230	0x00000000, 0x00000008, 0x00080000, 0x10000000,
231	0x02000000, 0x00000000, 0x00000080, 0x00001000,
232	0x02000000, 0x00000008, 0x00080080, 0x10001000,
233	0x00004000, 0x00000000, 0x00000040, 0x00040000,
234	0x00004000, 0x00000008, 0x00080040, 0x10040000,
235	0x02004000, 0x00000000, 0x000000c0, 0x00041000,
236	0x02004000, 0x00000008, 0x000800c0, 0x10041000,
237	0x00020000, 0x00008000, 0x08000000, 0x00200000,
238	0x00020000, 0x00008008, 0x08080000, 0x10200000,
239	0x02020000, 0x00008000, 0x08000080, 0x00201000,
240	0x02020000, 0x00008008, 0x08080080, 0x10201000,
241	0x00024000, 0x00008000, 0x08000040, 0x00240000,
242	0x00024000, 0x00008008, 0x08080040, 0x10240000,
243	0x02024000, 0x00008000, 0x080000c0, 0x00241000,
244	0x02024000, 0x00008008, 0x080800c0, 0x10241000,
245	0x00000000, 0x01000000, 0x00002000, 0x00000020,
246	0x00000000, 0x01000008, 0x00082000, 0x10000020,
247	0x02000000, 0x01000000, 0x00002080, 0x00001020,
248	0x02000000, 0x01000008, 0x00082080, 0x10001020,
249	0x00004000, 0x01000000, 0x00002040, 0x00040020,
250	0x00004000, 0x01000008, 0x00082040, 0x10040020,
251	0x02004000, 0x01000000, 0x000020c0, 0x00041020,
252	0x02004000, 0x01000008, 0x000820c0, 0x10041020,
253	0x00020000, 0x01008000, 0x08002000, 0x00200020,
254	0x00020000, 0x01008008, 0x08082000, 0x10200020,
255	0x02020000, 0x01008000, 0x08002080, 0x00201020,
256	0x02020000, 0x01008008, 0x08082080, 0x10201020,
257	0x00024000, 0x01008000, 0x08002040, 0x00240020,
258	0x00024000, 0x01008008, 0x08082040, 0x10240020,
259	0x02024000, 0x01008000, 0x080020c0, 0x00241020,
260	0x02024000, 0x01008008, 0x080820c0, 0x10241020,
261	0x00000400, 0x04000000, 0x00100000, 0x00000004,
262	0x00000400, 0x04000008, 0x00180000, 0x10000004,
263	0x02000400, 0x04000000, 0x00100080, 0x00001004,
264	0x02000400, 0x04000008, 0x00180080, 0x10001004,
265	0x00004400, 0x04000000, 0x00100040, 0x00040004,
266	0x00004400, 0x04000008, 0x00180040, 0x10040004,
267	0x02004400, 0x04000000, 0x001000c0, 0x00041004,
268	0x02004400, 0x04000008, 0x001800c0, 0x10041004,
269	0x00020400, 0x04008000, 0x08100000, 0x00200004,
270	0x00020400, 0x04008008, 0x08180000, 0x10200004,
271	0x02020400, 0x04008000, 0x08100080, 0x00201004,
272	0x02020400, 0x04008008, 0x08180080, 0x10201004,
273	0x00024400, 0x04008000, 0x08100040, 0x00240004,
274	0x00024400, 0x04008008, 0x08180040, 0x10240004,
275	0x02024400, 0x04008000, 0x081000c0, 0x00241004,
276	0x02024400, 0x04008008, 0x081800c0, 0x10241004,
277	0x00000400, 0x05000000, 0x00102000, 0x00000024,
278	0x00000400, 0x05000008, 0x00182000, 0x10000024,
279	0x02000400, 0x05000000, 0x00102080, 0x00001024,
280	0x02000400, 0x05000008, 0x00182080, 0x10001024,
281	0x00004400, 0x05000000, 0x00102040, 0x00040024,
282	0x00004400, 0x05000008, 0x00182040, 0x10040024,
283	0x02004400, 0x05000000, 0x001020c0, 0x00041024,
284	0x02004400, 0x05000008, 0x001820c0, 0x10041024,
285	0x00020400, 0x05008000, 0x08102000, 0x00200024,
286	0x00020400, 0x05008008, 0x08182000, 0x10200024,
287	0x02020400, 0x05008000, 0x08102080, 0x00201024,
288	0x02020400, 0x05008008, 0x08182080, 0x10201024,
289	0x00024400, 0x05008000, 0x08102040, 0x00240024,
290	0x00024400, 0x05008008, 0x08182040, 0x10240024,
291	0x02024400, 0x05008000, 0x081020c0, 0x00241024,
292	0x02024400, 0x05008008, 0x081820c0, 0x10241024,
293	0x00000800, 0x00010000, 0x20000000, 0x00000010,
294	0x00000800, 0x00010008, 0x20080000, 0x10000010,
295	0x02000800, 0x00010000, 0x20000080, 0x00001010,
296	0x02000800, 0x00010008, 0x20080080, 0x10001010,
297	0x00004800, 0x00010000, 0x20000040, 0x00040010,
298	0x00004800, 0x00010008, 0x20080040, 0x10040010,
299	0x02004800, 0x00010000, 0x200000c0, 0x00041010,
300	0x02004800, 0x00010008, 0x200800c0, 0x10041010,
301	0x00020800, 0x00018000, 0x28000000, 0x00200010,
302	0x00020800, 0x00018008, 0x28080000, 0x10200010,
303	0x02020800, 0x00018000, 0x28000080, 0x00201010,
304	0x02020800, 0x00018008, 0x28080080, 0x10201010,
305	0x00024800, 0x00018000, 0x28000040, 0x00240010,
306	0x00024800, 0x00018008, 0x28080040, 0x10240010,
307	0x02024800, 0x00018000, 0x280000c0, 0x00241010,
308	0x02024800, 0x00018008, 0x280800c0, 0x10241010,
309	0x00000800, 0x01010000, 0x20002000, 0x00000030,
310	0x00000800, 0x01010008, 0x20082000, 0x10000030,
311	0x02000800, 0x01010000, 0x20002080, 0x00001030,
312	0x02000800, 0x01010008, 0x20082080, 0x10001030,
313	0x00004800, 0x01010000, 0x20002040, 0x00040030,
314	0x00004800, 0x01010008, 0x20082040, 0x10040030,
315	0x02004800, 0x01010000, 0x200020c0, 0x00041030,
316	0x02004800, 0x01010008, 0x200820c0, 0x10041030,
317	0x00020800, 0x01018000, 0x28002000, 0x00200030,
318	0x00020800, 0x01018008, 0x28082000, 0x10200030,
319	0x02020800, 0x01018000, 0x28002080, 0x00201030,
320	0x02020800, 0x01018008, 0x28082080, 0x10201030,
321	0x00024800, 0x01018000, 0x28002040, 0x00240030,
322	0x00024800, 0x01018008, 0x28082040, 0x10240030,
323	0x02024800, 0x01018000, 0x280020c0, 0x00241030,
324	0x02024800, 0x01018008, 0x280820c0, 0x10241030,
325	0x00000c00, 0x04010000, 0x20100000, 0x00000014,
326	0x00000c00, 0x04010008, 0x20180000, 0x10000014,
327	0x02000c00, 0x04010000, 0x20100080, 0x00001014,
328	0x02000c00, 0x04010008, 0x20180080, 0x10001014,
329	0x00004c00, 0x04010000, 0x20100040, 0x00040014,
330	0x00004c00, 0x04010008, 0x20180040, 0x10040014,
331	0x02004c00, 0x04010000, 0x201000c0, 0x00041014,
332	0x02004c00, 0x04010008, 0x201800c0, 0x10041014,
333	0x00020c00, 0x04018000, 0x28100000, 0x00200014,
334	0x00020c00, 0x04018008, 0x28180000, 0x10200014,
335	0x02020c00, 0x04018000, 0x28100080, 0x00201014,
336	0x02020c00, 0x04018008, 0x28180080, 0x10201014,
337	0x00024c00, 0x04018000, 0x28100040, 0x00240014,
338	0x00024c00, 0x04018008, 0x28180040, 0x10240014,
339	0x02024c00, 0x04018000, 0x281000c0, 0x00241014,
340	0x02024c00, 0x04018008, 0x281800c0, 0x10241014,
341	0x00000c00, 0x05010000, 0x20102000, 0x00000034,
342	0x00000c00, 0x05010008, 0x20182000, 0x10000034,
343	0x02000c00, 0x05010000, 0x20102080, 0x00001034,
344	0x02000c00, 0x05010008, 0x20182080, 0x10001034,
345	0x00004c00, 0x05010000, 0x20102040, 0x00040034,
346	0x00004c00, 0x05010008, 0x20182040, 0x10040034,
347	0x02004c00, 0x05010000, 0x201020c0, 0x00041034,
348	0x02004c00, 0x05010008, 0x201820c0, 0x10041034,
349	0x00020c00, 0x05018000, 0x28102000, 0x00200034,
350	0x00020c00, 0x05018008, 0x28182000, 0x10200034,
351	0x02020c00, 0x05018000, 0x28102080, 0x00201034,
352	0x02020c00, 0x05018008, 0x28182080, 0x10201034,
353	0x00024c00, 0x05018000, 0x28102040, 0x00240034,
354	0x00024c00, 0x05018008, 0x28182040, 0x10240034,
355	0x02024c00, 0x05018000, 0x281020c0, 0x00241034,
356	0x02024c00, 0x05018008, 0x281820c0, 0x10241034
357};
358
359/* S-box lookup tables */
360
361static const u32 S1[64] = {
362	0x01010400, 0x00000000, 0x00010000, 0x01010404,
363	0x01010004, 0x00010404, 0x00000004, 0x00010000,
364	0x00000400, 0x01010400, 0x01010404, 0x00000400,
365	0x01000404, 0x01010004, 0x01000000, 0x00000004,
366	0x00000404, 0x01000400, 0x01000400, 0x00010400,
367	0x00010400, 0x01010000, 0x01010000, 0x01000404,
368	0x00010004, 0x01000004, 0x01000004, 0x00010004,
369	0x00000000, 0x00000404, 0x00010404, 0x01000000,
370	0x00010000, 0x01010404, 0x00000004, 0x01010000,
371	0x01010400, 0x01000000, 0x01000000, 0x00000400,
372	0x01010004, 0x00010000, 0x00010400, 0x01000004,
373	0x00000400, 0x00000004, 0x01000404, 0x00010404,
374	0x01010404, 0x00010004, 0x01010000, 0x01000404,
375	0x01000004, 0x00000404, 0x00010404, 0x01010400,
376	0x00000404, 0x01000400, 0x01000400, 0x00000000,
377	0x00010004, 0x00010400, 0x00000000, 0x01010004
378};
379
380static const u32 S2[64] = {
381	0x80108020, 0x80008000, 0x00008000, 0x00108020,
382	0x00100000, 0x00000020, 0x80100020, 0x80008020,
383	0x80000020, 0x80108020, 0x80108000, 0x80000000,
384	0x80008000, 0x00100000, 0x00000020, 0x80100020,
385	0x00108000, 0x00100020, 0x80008020, 0x00000000,
386	0x80000000, 0x00008000, 0x00108020, 0x80100000,
387	0x00100020, 0x80000020, 0x00000000, 0x00108000,
388	0x00008020, 0x80108000, 0x80100000, 0x00008020,
389	0x00000000, 0x00108020, 0x80100020, 0x00100000,
390	0x80008020, 0x80100000, 0x80108000, 0x00008000,
391	0x80100000, 0x80008000, 0x00000020, 0x80108020,
392	0x00108020, 0x00000020, 0x00008000, 0x80000000,
393	0x00008020, 0x80108000, 0x00100000, 0x80000020,
394	0x00100020, 0x80008020, 0x80000020, 0x00100020,
395	0x00108000, 0x00000000, 0x80008000, 0x00008020,
396	0x80000000, 0x80100020, 0x80108020, 0x00108000
397};
398
399static const u32 S3[64] = {
400	0x00000208, 0x08020200, 0x00000000, 0x08020008,
401	0x08000200, 0x00000000, 0x00020208, 0x08000200,
402	0x00020008, 0x08000008, 0x08000008, 0x00020000,
403	0x08020208, 0x00020008, 0x08020000, 0x00000208,
404	0x08000000, 0x00000008, 0x08020200, 0x00000200,
405	0x00020200, 0x08020000, 0x08020008, 0x00020208,
406	0x08000208, 0x00020200, 0x00020000, 0x08000208,
407	0x00000008, 0x08020208, 0x00000200, 0x08000000,
408	0x08020200, 0x08000000, 0x00020008, 0x00000208,
409	0x00020000, 0x08020200, 0x08000200, 0x00000000,
410	0x00000200, 0x00020008, 0x08020208, 0x08000200,
411	0x08000008, 0x00000200, 0x00000000, 0x08020008,
412	0x08000208, 0x00020000, 0x08000000, 0x08020208,
413	0x00000008, 0x00020208, 0x00020200, 0x08000008,
414	0x08020000, 0x08000208, 0x00000208, 0x08020000,
415	0x00020208, 0x00000008, 0x08020008, 0x00020200
416};
417
418static const u32 S4[64] = {
419	0x00802001, 0x00002081, 0x00002081, 0x00000080,
420	0x00802080, 0x00800081, 0x00800001, 0x00002001,
421	0x00000000, 0x00802000, 0x00802000, 0x00802081,
422	0x00000081, 0x00000000, 0x00800080, 0x00800001,
423	0x00000001, 0x00002000, 0x00800000, 0x00802001,
424	0x00000080, 0x00800000, 0x00002001, 0x00002080,
425	0x00800081, 0x00000001, 0x00002080, 0x00800080,
426	0x00002000, 0x00802080, 0x00802081, 0x00000081,
427	0x00800080, 0x00800001, 0x00802000, 0x00802081,
428	0x00000081, 0x00000000, 0x00000000, 0x00802000,
429	0x00002080, 0x00800080, 0x00800081, 0x00000001,
430	0x00802001, 0x00002081, 0x00002081, 0x00000080,
431	0x00802081, 0x00000081, 0x00000001, 0x00002000,
432	0x00800001, 0x00002001, 0x00802080, 0x00800081,
433	0x00002001, 0x00002080, 0x00800000, 0x00802001,
434	0x00000080, 0x00800000, 0x00002000, 0x00802080
435};
436
437static const u32 S5[64] = {
438	0x00000100, 0x02080100, 0x02080000, 0x42000100,
439	0x00080000, 0x00000100, 0x40000000, 0x02080000,
440	0x40080100, 0x00080000, 0x02000100, 0x40080100,
441	0x42000100, 0x42080000, 0x00080100, 0x40000000,
442	0x02000000, 0x40080000, 0x40080000, 0x00000000,
443	0x40000100, 0x42080100, 0x42080100, 0x02000100,
444	0x42080000, 0x40000100, 0x00000000, 0x42000000,
445	0x02080100, 0x02000000, 0x42000000, 0x00080100,
446	0x00080000, 0x42000100, 0x00000100, 0x02000000,
447	0x40000000, 0x02080000, 0x42000100, 0x40080100,
448	0x02000100, 0x40000000, 0x42080000, 0x02080100,
449	0x40080100, 0x00000100, 0x02000000, 0x42080000,
450	0x42080100, 0x00080100, 0x42000000, 0x42080100,
451	0x02080000, 0x00000000, 0x40080000, 0x42000000,
452	0x00080100, 0x02000100, 0x40000100, 0x00080000,
453	0x00000000, 0x40080000, 0x02080100, 0x40000100
454};
455
456static const u32 S6[64] = {
457	0x20000010, 0x20400000, 0x00004000, 0x20404010,
458	0x20400000, 0x00000010, 0x20404010, 0x00400000,
459	0x20004000, 0x00404010, 0x00400000, 0x20000010,
460	0x00400010, 0x20004000, 0x20000000, 0x00004010,
461	0x00000000, 0x00400010, 0x20004010, 0x00004000,
462	0x00404000, 0x20004010, 0x00000010, 0x20400010,
463	0x20400010, 0x00000000, 0x00404010, 0x20404000,
464	0x00004010, 0x00404000, 0x20404000, 0x20000000,
465	0x20004000, 0x00000010, 0x20400010, 0x00404000,
466	0x20404010, 0x00400000, 0x00004010, 0x20000010,
467	0x00400000, 0x20004000, 0x20000000, 0x00004010,
468	0x20000010, 0x20404010, 0x00404000, 0x20400000,
469	0x00404010, 0x20404000, 0x00000000, 0x20400010,
470	0x00000010, 0x00004000, 0x20400000, 0x00404010,
471	0x00004000, 0x00400010, 0x20004010, 0x00000000,
472	0x20404000, 0x20000000, 0x00400010, 0x20004010
473};
474
475static const u32 S7[64] = {
476	0x00200000, 0x04200002, 0x04000802, 0x00000000,
477	0x00000800, 0x04000802, 0x00200802, 0x04200800,
478	0x04200802, 0x00200000, 0x00000000, 0x04000002,
479	0x00000002, 0x04000000, 0x04200002, 0x00000802,
480	0x04000800, 0x00200802, 0x00200002, 0x04000800,
481	0x04000002, 0x04200000, 0x04200800, 0x00200002,
482	0x04200000, 0x00000800, 0x00000802, 0x04200802,
483	0x00200800, 0x00000002, 0x04000000, 0x00200800,
484	0x04000000, 0x00200800, 0x00200000, 0x04000802,
485	0x04000802, 0x04200002, 0x04200002, 0x00000002,
486	0x00200002, 0x04000000, 0x04000800, 0x00200000,
487	0x04200800, 0x00000802, 0x00200802, 0x04200800,
488	0x00000802, 0x04000002, 0x04200802, 0x04200000,
489	0x00200800, 0x00000000, 0x00000002, 0x04200802,
490	0x00000000, 0x00200802, 0x04200000, 0x00000800,
491	0x04000002, 0x04000800, 0x00000800, 0x00200002
492};
493
494static const u32 S8[64] = {
495	0x10001040, 0x00001000, 0x00040000, 0x10041040,
496	0x10000000, 0x10001040, 0x00000040, 0x10000000,
497	0x00040040, 0x10040000, 0x10041040, 0x00041000,
498	0x10041000, 0x00041040, 0x00001000, 0x00000040,
499	0x10040000, 0x10000040, 0x10001000, 0x00001040,
500	0x00041000, 0x00040040, 0x10040040, 0x10041000,
501	0x00001040, 0x00000000, 0x00000000, 0x10040040,
502	0x10000040, 0x10001000, 0x00041040, 0x00040000,
503	0x00041040, 0x00040000, 0x10041000, 0x00001000,
504	0x00000040, 0x10040040, 0x00001000, 0x00041040,
505	0x10001000, 0x00000040, 0x10000040, 0x10040000,
506	0x10040040, 0x10000000, 0x00040000, 0x10001040,
507	0x00000000, 0x10041040, 0x00040040, 0x10000040,
508	0x10040000, 0x10001000, 0x10001040, 0x00000000,
509	0x10041040, 0x00041000, 0x00041000, 0x00001040,
510	0x00001040, 0x00040040, 0x10000000, 0x10041000
511};
512
513/* Encryption components: IP, FP, and round function */
514
515#define IP(L, R, T)		\
516	ROL(R, 4);		\
517	T  = L;			\
518	L ^= R;			\
519	L &= 0xf0f0f0f0;	\
520	R ^= L;			\
521	L ^= T;			\
522	ROL(R, 12);		\
523	T  = L;			\
524	L ^= R;			\
525	L &= 0xffff0000;	\
526	R ^= L;			\
527	L ^= T;			\
528	ROR(R, 14);		\
529	T  = L;			\
530	L ^= R;			\
531	L &= 0xcccccccc;	\
532	R ^= L;			\
533	L ^= T;			\
534	ROL(R, 6);		\
535	T  = L;			\
536	L ^= R;			\
537	L &= 0xff00ff00;	\
538	R ^= L;			\
539	L ^= T;			\
540	ROR(R, 7);		\
541	T  = L;			\
542	L ^= R;			\
543	L &= 0xaaaaaaaa;	\
544	R ^= L;			\
545	L ^= T;			\
546	ROL(L, 1);
547
548#define FP(L, R, T)		\
549	ROR(L, 1);		\
550	T  = L;			\
551	L ^= R;			\
552	L &= 0xaaaaaaaa;	\
553	R ^= L;			\
554	L ^= T;			\
555	ROL(R, 7);		\
556	T  = L;			\
557	L ^= R;			\
558	L &= 0xff00ff00;	\
559	R ^= L;			\
560	L ^= T;			\
561	ROR(R, 6);		\
562	T  = L;			\
563	L ^= R;			\
564	L &= 0xcccccccc;	\
565	R ^= L;			\
566	L ^= T;			\
567	ROL(R, 14);		\
568	T  = L;			\
569	L ^= R;			\
570	L &= 0xffff0000;	\
571	R ^= L;			\
572	L ^= T;			\
573	ROR(R, 12);		\
574	T  = L;			\
575	L ^= R;			\
576	L &= 0xf0f0f0f0;	\
577	R ^= L;			\
578	L ^= T;			\
579	ROR(R, 4);
580
581#define ROUND(L, R, A, B, K, d)					\
582	B = K[0];			A = K[1];	K += d;	\
583	B ^= R;				A ^= R;			\
584	B &= 0x3f3f3f3f;		ROR(A, 4);		\
585	L ^= S8[0xff & B];		A &= 0x3f3f3f3f;	\
586	L ^= S6[0xff & (B >> 8)];	B >>= 16;		\
587	L ^= S7[0xff & A];					\
588	L ^= S5[0xff & (A >> 8)];	A >>= 16;		\
589	L ^= S4[0xff & B];					\
590	L ^= S2[0xff & (B >> 8)];				\
591	L ^= S3[0xff & A];					\
592	L ^= S1[0xff & (A >> 8)];
593
594/*
595 * PC2 lookup tables are organized as 2 consecutive sets of 4 interleaved
596 * tables of 128 elements.  One set is for C_i and the other for D_i, while
597 * the 4 interleaved tables correspond to four 7-bit subsets of C_i or D_i.
598 *
599 * After PC1 each of the variables a,b,c,d contains a 7 bit subset of C_i
600 * or D_i in bits 7-1 (bit 0 being the least significant).
601 */
602
603#define T1(x) pt[2 * (x) + 0]
604#define T2(x) pt[2 * (x) + 1]
605#define T3(x) pt[2 * (x) + 2]
606#define T4(x) pt[2 * (x) + 3]
607
608#define DES_PC2(a, b, c, d) (T4(d) | T3(c) | T2(b) | T1(a))
609
610/*
611 * Encryption key expansion
612 *
613 * RFC2451: Weak key checks SHOULD be performed.
614 *
615 * FIPS 74:
616 *
617 *   Keys having duals are keys which produce all zeros, all ones, or
618 *   alternating zero-one patterns in the C and D registers after Permuted
619 *   Choice 1 has operated on the key.
620 *
621 */
622static unsigned long des_ekey(u32 *pe, const u8 *k)
623{
624	/* K&R: long is at least 32 bits */
625	unsigned long a, b, c, d, w;
626	const u32 *pt = pc2;
627
628	d = k[4]; d &= 0x0e; d <<= 4; d |= k[0] & 0x1e; d = pc1[d];
629	c = k[5]; c &= 0x0e; c <<= 4; c |= k[1] & 0x1e; c = pc1[c];
630	b = k[6]; b &= 0x0e; b <<= 4; b |= k[2] & 0x1e; b = pc1[b];
631	a = k[7]; a &= 0x0e; a <<= 4; a |= k[3] & 0x1e; a = pc1[a];
632
633	pe[15 * 2 + 0] = DES_PC2(a, b, c, d); d = rs[d];
634	pe[14 * 2 + 0] = DES_PC2(d, a, b, c); c = rs[c]; b = rs[b];
635	pe[13 * 2 + 0] = DES_PC2(b, c, d, a); a = rs[a]; d = rs[d];
636	pe[12 * 2 + 0] = DES_PC2(d, a, b, c); c = rs[c]; b = rs[b];
637	pe[11 * 2 + 0] = DES_PC2(b, c, d, a); a = rs[a]; d = rs[d];
638	pe[10 * 2 + 0] = DES_PC2(d, a, b, c); c = rs[c]; b = rs[b];
639	pe[ 9 * 2 + 0] = DES_PC2(b, c, d, a); a = rs[a]; d = rs[d];
640	pe[ 8 * 2 + 0] = DES_PC2(d, a, b, c); c = rs[c];
641	pe[ 7 * 2 + 0] = DES_PC2(c, d, a, b); b = rs[b]; a = rs[a];
642	pe[ 6 * 2 + 0] = DES_PC2(a, b, c, d); d = rs[d]; c = rs[c];
643	pe[ 5 * 2 + 0] = DES_PC2(c, d, a, b); b = rs[b]; a = rs[a];
644	pe[ 4 * 2 + 0] = DES_PC2(a, b, c, d); d = rs[d]; c = rs[c];
645	pe[ 3 * 2 + 0] = DES_PC2(c, d, a, b); b = rs[b]; a = rs[a];
646	pe[ 2 * 2 + 0] = DES_PC2(a, b, c, d); d = rs[d]; c = rs[c];
647	pe[ 1 * 2 + 0] = DES_PC2(c, d, a, b); b = rs[b];
648	pe[ 0 * 2 + 0] = DES_PC2(b, c, d, a);
649
650	/* Check if first half is weak */
651	w  = (a ^ c) | (b ^ d) | (rs[a] ^ c) | (b ^ rs[d]);
652
653	/* Skip to next table set */
654	pt += 512;
655
656	d = k[0]; d &= 0xe0; d >>= 4; d |= k[4] & 0xf0; d = pc1[d + 1];
657	c = k[1]; c &= 0xe0; c >>= 4; c |= k[5] & 0xf0; c = pc1[c + 1];
658	b = k[2]; b &= 0xe0; b >>= 4; b |= k[6] & 0xf0; b = pc1[b + 1];
659	a = k[3]; a &= 0xe0; a >>= 4; a |= k[7] & 0xf0; a = pc1[a + 1];
660
661	/* Check if second half is weak */
662	w |= (a ^ c) | (b ^ d) | (rs[a] ^ c) | (b ^ rs[d]);
663
664	pe[15 * 2 + 1] = DES_PC2(a, b, c, d); d = rs[d];
665	pe[14 * 2 + 1] = DES_PC2(d, a, b, c); c = rs[c]; b = rs[b];
666	pe[13 * 2 + 1] = DES_PC2(b, c, d, a); a = rs[a]; d = rs[d];
667	pe[12 * 2 + 1] = DES_PC2(d, a, b, c); c = rs[c]; b = rs[b];
668	pe[11 * 2 + 1] = DES_PC2(b, c, d, a); a = rs[a]; d = rs[d];
669	pe[10 * 2 + 1] = DES_PC2(d, a, b, c); c = rs[c]; b = rs[b];
670	pe[ 9 * 2 + 1] = DES_PC2(b, c, d, a); a = rs[a]; d = rs[d];
671	pe[ 8 * 2 + 1] = DES_PC2(d, a, b, c); c = rs[c];
672	pe[ 7 * 2 + 1] = DES_PC2(c, d, a, b); b = rs[b]; a = rs[a];
673	pe[ 6 * 2 + 1] = DES_PC2(a, b, c, d); d = rs[d]; c = rs[c];
674	pe[ 5 * 2 + 1] = DES_PC2(c, d, a, b); b = rs[b]; a = rs[a];
675	pe[ 4 * 2 + 1] = DES_PC2(a, b, c, d); d = rs[d]; c = rs[c];
676	pe[ 3 * 2 + 1] = DES_PC2(c, d, a, b); b = rs[b]; a = rs[a];
677	pe[ 2 * 2 + 1] = DES_PC2(a, b, c, d); d = rs[d]; c = rs[c];
678	pe[ 1 * 2 + 1] = DES_PC2(c, d, a, b); b = rs[b];
679	pe[ 0 * 2 + 1] = DES_PC2(b, c, d, a);
680
681	/* Fixup: 2413 5768 -> 1357 2468 */
682	for (d = 0; d < 16; ++d) {
683		a = pe[2 * d];
684		b = pe[2 * d + 1];
685		c = a ^ b;
686		c &= 0xffff0000;
687		a ^= c;
688		b ^= c;
689		ROL(b, 18);
690		pe[2 * d] = a;
691		pe[2 * d + 1] = b;
692	}
693
694	/* Zero if weak key */
695	return w;
696}
697
698int des_expand_key(struct des_ctx *ctx, const u8 *key, unsigned int keylen)
699{
700	if (keylen != DES_KEY_SIZE)
701		return -EINVAL;
702
703	return des_ekey(ctx->expkey, key) ? 0 : -ENOKEY;
704}
705EXPORT_SYMBOL_GPL(des_expand_key);
706
707/*
708 * Decryption key expansion
709 *
710 * No weak key checking is performed, as this is only used by triple DES
711 *
712 */
713static void dkey(u32 *pe, const u8 *k)
714{
715	/* K&R: long is at least 32 bits */
716	unsigned long a, b, c, d;
717	const u32 *pt = pc2;
718
719	d = k[4]; d &= 0x0e; d <<= 4; d |= k[0] & 0x1e; d = pc1[d];
720	c = k[5]; c &= 0x0e; c <<= 4; c |= k[1] & 0x1e; c = pc1[c];
721	b = k[6]; b &= 0x0e; b <<= 4; b |= k[2] & 0x1e; b = pc1[b];
722	a = k[7]; a &= 0x0e; a <<= 4; a |= k[3] & 0x1e; a = pc1[a];
723
724	pe[ 0 * 2] = DES_PC2(a, b, c, d); d = rs[d];
725	pe[ 1 * 2] = DES_PC2(d, a, b, c); c = rs[c]; b = rs[b];
726	pe[ 2 * 2] = DES_PC2(b, c, d, a); a = rs[a]; d = rs[d];
727	pe[ 3 * 2] = DES_PC2(d, a, b, c); c = rs[c]; b = rs[b];
728	pe[ 4 * 2] = DES_PC2(b, c, d, a); a = rs[a]; d = rs[d];
729	pe[ 5 * 2] = DES_PC2(d, a, b, c); c = rs[c]; b = rs[b];
730	pe[ 6 * 2] = DES_PC2(b, c, d, a); a = rs[a]; d = rs[d];
731	pe[ 7 * 2] = DES_PC2(d, a, b, c); c = rs[c];
732	pe[ 8 * 2] = DES_PC2(c, d, a, b); b = rs[b]; a = rs[a];
733	pe[ 9 * 2] = DES_PC2(a, b, c, d); d = rs[d]; c = rs[c];
734	pe[10 * 2] = DES_PC2(c, d, a, b); b = rs[b]; a = rs[a];
735	pe[11 * 2] = DES_PC2(a, b, c, d); d = rs[d]; c = rs[c];
736	pe[12 * 2] = DES_PC2(c, d, a, b); b = rs[b]; a = rs[a];
737	pe[13 * 2] = DES_PC2(a, b, c, d); d = rs[d]; c = rs[c];
738	pe[14 * 2] = DES_PC2(c, d, a, b); b = rs[b];
739	pe[15 * 2] = DES_PC2(b, c, d, a);
740
741	/* Skip to next table set */
742	pt += 512;
743
744	d = k[0]; d &= 0xe0; d >>= 4; d |= k[4] & 0xf0; d = pc1[d + 1];
745	c = k[1]; c &= 0xe0; c >>= 4; c |= k[5] & 0xf0; c = pc1[c + 1];
746	b = k[2]; b &= 0xe0; b >>= 4; b |= k[6] & 0xf0; b = pc1[b + 1];
747	a = k[3]; a &= 0xe0; a >>= 4; a |= k[7] & 0xf0; a = pc1[a + 1];
748
749	pe[ 0 * 2 + 1] = DES_PC2(a, b, c, d); d = rs[d];
750	pe[ 1 * 2 + 1] = DES_PC2(d, a, b, c); c = rs[c]; b = rs[b];
751	pe[ 2 * 2 + 1] = DES_PC2(b, c, d, a); a = rs[a]; d = rs[d];
752	pe[ 3 * 2 + 1] = DES_PC2(d, a, b, c); c = rs[c]; b = rs[b];
753	pe[ 4 * 2 + 1] = DES_PC2(b, c, d, a); a = rs[a]; d = rs[d];
754	pe[ 5 * 2 + 1] = DES_PC2(d, a, b, c); c = rs[c]; b = rs[b];
755	pe[ 6 * 2 + 1] = DES_PC2(b, c, d, a); a = rs[a]; d = rs[d];
756	pe[ 7 * 2 + 1] = DES_PC2(d, a, b, c); c = rs[c];
757	pe[ 8 * 2 + 1] = DES_PC2(c, d, a, b); b = rs[b]; a = rs[a];
758	pe[ 9 * 2 + 1] = DES_PC2(a, b, c, d); d = rs[d]; c = rs[c];
759	pe[10 * 2 + 1] = DES_PC2(c, d, a, b); b = rs[b]; a = rs[a];
760	pe[11 * 2 + 1] = DES_PC2(a, b, c, d); d = rs[d]; c = rs[c];
761	pe[12 * 2 + 1] = DES_PC2(c, d, a, b); b = rs[b]; a = rs[a];
762	pe[13 * 2 + 1] = DES_PC2(a, b, c, d); d = rs[d]; c = rs[c];
763	pe[14 * 2 + 1] = DES_PC2(c, d, a, b); b = rs[b];
764	pe[15 * 2 + 1] = DES_PC2(b, c, d, a);
765
766	/* Fixup: 2413 5768 -> 1357 2468 */
767	for (d = 0; d < 16; ++d) {
768		a = pe[2 * d];
769		b = pe[2 * d + 1];
770		c = a ^ b;
771		c &= 0xffff0000;
772		a ^= c;
773		b ^= c;
774		ROL(b, 18);
775		pe[2 * d] = a;
776		pe[2 * d + 1] = b;
777	}
778}
779
780void des_encrypt(const struct des_ctx *ctx, u8 *dst, const u8 *src)
781{
782	const u32 *K = ctx->expkey;
783	u32 L, R, A, B;
784	int i;
785
786	L = get_unaligned_le32(src);
787	R = get_unaligned_le32(src + 4);
788
789	IP(L, R, A);
790	for (i = 0; i < 8; i++) {
791		ROUND(L, R, A, B, K, 2);
792		ROUND(R, L, A, B, K, 2);
793	}
794	FP(R, L, A);
795
796	put_unaligned_le32(R, dst);
797	put_unaligned_le32(L, dst + 4);
798}
799EXPORT_SYMBOL_GPL(des_encrypt);
800
801void des_decrypt(const struct des_ctx *ctx, u8 *dst, const u8 *src)
802{
803	const u32 *K = ctx->expkey + DES_EXPKEY_WORDS - 2;
804	u32 L, R, A, B;
805	int i;
806
807	L = get_unaligned_le32(src);
808	R = get_unaligned_le32(src + 4);
809
810	IP(L, R, A);
811	for (i = 0; i < 8; i++) {
812		ROUND(L, R, A, B, K, -2);
813		ROUND(R, L, A, B, K, -2);
814	}
815	FP(R, L, A);
816
817	put_unaligned_le32(R, dst);
818	put_unaligned_le32(L, dst + 4);
819}
820EXPORT_SYMBOL_GPL(des_decrypt);
821
822int des3_ede_expand_key(struct des3_ede_ctx *ctx, const u8 *key,
823			unsigned int keylen)
824{
825	u32 *pe = ctx->expkey;
826	int err;
827
828	if (keylen != DES3_EDE_KEY_SIZE)
829		return -EINVAL;
830
831	err = des3_ede_verify_key(key, keylen, true);
832	if (err && err != -ENOKEY)
833		return err;
834
835	des_ekey(pe, key); pe += DES_EXPKEY_WORDS; key += DES_KEY_SIZE;
836	dkey(pe, key); pe += DES_EXPKEY_WORDS; key += DES_KEY_SIZE;
837	des_ekey(pe, key);
838
839	return err;
840}
841EXPORT_SYMBOL_GPL(des3_ede_expand_key);
842
843void des3_ede_encrypt(const struct des3_ede_ctx *dctx, u8 *dst, const u8 *src)
844{
845	const u32 *K = dctx->expkey;
846	u32 L, R, A, B;
847	int i;
848
849	L = get_unaligned_le32(src);
850	R = get_unaligned_le32(src + 4);
851
852	IP(L, R, A);
853	for (i = 0; i < 8; i++) {
854		ROUND(L, R, A, B, K, 2);
855		ROUND(R, L, A, B, K, 2);
856	}
857	for (i = 0; i < 8; i++) {
858		ROUND(R, L, A, B, K, 2);
859		ROUND(L, R, A, B, K, 2);
860	}
861	for (i = 0; i < 8; i++) {
862		ROUND(L, R, A, B, K, 2);
863		ROUND(R, L, A, B, K, 2);
864	}
865	FP(R, L, A);
866
867	put_unaligned_le32(R, dst);
868	put_unaligned_le32(L, dst + 4);
869}
870EXPORT_SYMBOL_GPL(des3_ede_encrypt);
871
872void des3_ede_decrypt(const struct des3_ede_ctx *dctx, u8 *dst, const u8 *src)
873{
874	const u32 *K = dctx->expkey + DES3_EDE_EXPKEY_WORDS - 2;
875	u32 L, R, A, B;
876	int i;
877
878	L = get_unaligned_le32(src);
879	R = get_unaligned_le32(src + 4);
880
881	IP(L, R, A);
882	for (i = 0; i < 8; i++) {
883		ROUND(L, R, A, B, K, -2);
884		ROUND(R, L, A, B, K, -2);
885	}
886	for (i = 0; i < 8; i++) {
887		ROUND(R, L, A, B, K, -2);
888		ROUND(L, R, A, B, K, -2);
889	}
890	for (i = 0; i < 8; i++) {
891		ROUND(L, R, A, B, K, -2);
892		ROUND(R, L, A, B, K, -2);
893	}
894	FP(R, L, A);
895
896	put_unaligned_le32(R, dst);
897	put_unaligned_le32(L, dst + 4);
898}
899EXPORT_SYMBOL_GPL(des3_ede_decrypt);
900
901MODULE_DESCRIPTION("DES & Triple DES EDE Cipher Algorithms");
902MODULE_LICENSE("GPL");