1/*
2 * Copyright 1995-2017 The OpenSSL Project Authors. All Rights Reserved.
3 *
4 * Licensed under the Apache License 2.0 (the "License"). You may not use
5 * this file except in compliance with the License. You can obtain a copy
6 * in the file LICENSE in the source distribution or at
7 * https://www.openssl.org/source/license.html
8 */
9
10#include "des_local.h"
11
12/*
13 * The input and output encrypted as though 64bit cfb mode is being used.
14 * The extra state information to record how much of the 64bit block we have
15 * used is contained in *num;
16 */
17
18void DES_ede3_cfb64_encrypt(const unsigned char *in, unsigned char *out,
19 long length, DES_key_schedule *ks1,
20 DES_key_schedule *ks2, DES_key_schedule *ks3,
21 DES_cblock *ivec, int *num, int enc)
22{
23 register DES_LONG v0, v1;
24 register long l = length;
25 register int n = *num;
26 DES_LONG ti[2];
27 unsigned char *iv, c, cc;
28
29 iv = &(*ivec)[0];
30 if (enc) {
31 while (l--) {
32 if (n == 0) {
33 c2l(iv, v0);
34 c2l(iv, v1);
35
36 ti[0] = v0;
37 ti[1] = v1;
38 DES_encrypt3(ti, ks1, ks2, ks3);
39 v0 = ti[0];
40 v1 = ti[1];
41
42 iv = &(*ivec)[0];
43 l2c(v0, iv);
44 l2c(v1, iv);
45 iv = &(*ivec)[0];
46 }
47 c = *(in++) ^ iv[n];
48 *(out++) = c;
49 iv[n] = c;
50 n = (n + 1) & 0x07;
51 }
52 } else {
53 while (l--) {
54 if (n == 0) {
55 c2l(iv, v0);
56 c2l(iv, v1);
57
58 ti[0] = v0;
59 ti[1] = v1;
60 DES_encrypt3(ti, ks1, ks2, ks3);
61 v0 = ti[0];
62 v1 = ti[1];
63
64 iv = &(*ivec)[0];
65 l2c(v0, iv);
66 l2c(v1, iv);
67 iv = &(*ivec)[0];
68 }
69 cc = *(in++);
70 c = iv[n];
71 iv[n] = cc;
72 *(out++) = c ^ cc;
73 n = (n + 1) & 0x07;
74 }
75 }
76 v0 = v1 = ti[0] = ti[1] = c = cc = 0;
77 *num = n;
78}
79
80/*
81 * This is compatible with the single key CFB-r for DES, even thought that's
82 * not what EVP needs.
83 */
84
85void DES_ede3_cfb_encrypt(const unsigned char *in, unsigned char *out,
86 int numbits, long length, DES_key_schedule *ks1,
87 DES_key_schedule *ks2, DES_key_schedule *ks3,
88 DES_cblock *ivec, int enc)
89{
90 register DES_LONG d0, d1, v0, v1;
91 register unsigned long l = length, n = ((unsigned int)numbits + 7) / 8;
92 register int num = numbits, i;
93 DES_LONG ti[2];
94 unsigned char *iv;
95 unsigned char ovec[16];
96
97 if (num > 64)
98 return;
99 iv = &(*ivec)[0];
100 c2l(iv, v0);
101 c2l(iv, v1);
102 if (enc) {
103 while (l >= n) {
104 l -= n;
105 ti[0] = v0;
106 ti[1] = v1;
107 DES_encrypt3(ti, ks1, ks2, ks3);
108 c2ln(in, d0, d1, n);
109 in += n;
110 d0 ^= ti[0];
111 d1 ^= ti[1];
112 l2cn(d0, d1, out, n);
113 out += n;
114 /*
115 * 30-08-94 - eay - changed because l>>32 and l<<32 are bad under
116 * gcc :-(
117 */
118 if (num == 32) {
119 v0 = v1;
120 v1 = d0;
121 } else if (num == 64) {
122 v0 = d0;
123 v1 = d1;
124 } else {
125 iv = &ovec[0];
126 l2c(v0, iv);
127 l2c(v1, iv);
128 l2c(d0, iv);
129 l2c(d1, iv);
130 /* shift ovec left most of the bits... */
131 memmove(ovec, ovec + num / 8, 8 + (num % 8 ? 1 : 0));
132 /* now the remaining bits */
133 if (num % 8 != 0)
134 for (i = 0; i < 8; ++i) {
135 ovec[i] <<= num % 8;
136 ovec[i] |= ovec[i + 1] >> (8 - num % 8);
137 }
138 iv = &ovec[0];
139 c2l(iv, v0);
140 c2l(iv, v1);
141 }
142 }
143 } else {
144 while (l >= n) {
145 l -= n;
146 ti[0] = v0;
147 ti[1] = v1;
148 DES_encrypt3(ti, ks1, ks2, ks3);
149 c2ln(in, d0, d1, n);
150 in += n;
151 /*
152 * 30-08-94 - eay - changed because l>>32 and l<<32 are bad under
153 * gcc :-(
154 */
155 if (num == 32) {
156 v0 = v1;
157 v1 = d0;
158 } else if (num == 64) {
159 v0 = d0;
160 v1 = d1;
161 } else {
162 iv = &ovec[0];
163 l2c(v0, iv);
164 l2c(v1, iv);
165 l2c(d0, iv);
166 l2c(d1, iv);
167 /* shift ovec left most of the bits... */
168 memmove(ovec, ovec + num / 8, 8 + (num % 8 ? 1 : 0));
169 /* now the remaining bits */
170 if (num % 8 != 0)
171 for (i = 0; i < 8; ++i) {
172 ovec[i] <<= num % 8;
173 ovec[i] |= ovec[i + 1] >> (8 - num % 8);
174 }
175 iv = &ovec[0];
176 c2l(iv, v0);
177 c2l(iv, v1);
178 }
179 d0 ^= ti[0];
180 d1 ^= ti[1];
181 l2cn(d0, d1, out, n);
182 out += n;
183 }
184 }
185 iv = &(*ivec)[0];
186 l2c(v0, iv);
187 l2c(v1, iv);
188 v0 = v1 = d0 = d1 = ti[0] = ti[1] = 0;
189}
190