Botan 1.10.17
serpent.cpp
Go to the documentation of this file.
1/*
2* Serpent
3* (C) 1999-2007 Jack Lloyd
4*
5* The sbox expressions used here were discovered by Dag Arne Osvik and
6* are described in his paper "Speeding Up Serpent".
7*
8* Distributed under the terms of the Botan license
9*/
10
11#include <botan/serpent.h>
12#include <botan/loadstor.h>
13#include <botan/rotate.h>
14
15namespace Botan {
16
17namespace {
18
19/*
20* Serpent Encryption S-Box 1
21*/
22inline void SBoxE1(u32bit& B0, u32bit& B1, u32bit& B2, u32bit& B3)
23 {
24 u32bit T0 = B0, T1 = B1, T2 = B2, T3 = B3, T4;
25 T3 ^= T0; T4 = T1; T1 &= T3; T4 ^= T2; T1 ^= T0; T0 |= T3; T0 ^= T4;
26 T4 ^= T3; T3 ^= T2; T2 |= T1; T2 ^= T4; T4 = ~T4; T4 |= T1; T1 ^= T3;
27 T1 ^= T4; T3 |= T0; T1 ^= T3; T4 ^= T3;
28 B0 = T1; B1 = T4; B2 = T2; B3 = T0;
29 }
30
31/*
32* Serpent Encryption S-Box 2
33*/
34inline void SBoxE2(u32bit& B0, u32bit& B1, u32bit& B2, u32bit& B3)
35 {
36 u32bit T0 = B0, T1 = B1, T2 = B2, T3 = B3, T4;
37 T0 = ~T0; T2 = ~T2; T4 = T0; T0 &= T1; T2 ^= T0; T0 |= T3; T3 ^= T2;
38 T1 ^= T0; T0 ^= T4; T4 |= T1; T1 ^= T3; T2 |= T0; T2 &= T4; T0 ^= T1;
39 T1 &= T2; T1 ^= T0; T0 &= T2; T0 ^= T4;
40 B0 = T2; B1 = T0; B2 = T3; B3 = T1;
41 }
42
43/*
44* Serpent Encryption S-Box 3
45*/
46inline void SBoxE3(u32bit& B0, u32bit& B1, u32bit& B2, u32bit& B3)
47 {
48 u32bit T0 = B0, T1 = B1, T2 = B2, T3 = B3, T4;
49 T4 = T0; T0 &= T2; T0 ^= T3; T2 ^= T1; T2 ^= T0; T3 |= T4; T3 ^= T1;
50 T4 ^= T2; T1 = T3; T3 |= T4; T3 ^= T0; T0 &= T1; T4 ^= T0; T1 ^= T3;
51 T1 ^= T4; T4 = ~T4;
52 B0 = T2; B1 = T3; B2 = T1; B3 = T4;
53 }
54
55/*
56* Serpent Encryption S-Box 4
57*/
58inline void SBoxE4(u32bit& B0, u32bit& B1, u32bit& B2, u32bit& B3)
59 {
60 u32bit T0 = B0, T1 = B1, T2 = B2, T3 = B3, T4;
61 T4 = T0; T0 |= T3; T3 ^= T1; T1 &= T4; T4 ^= T2; T2 ^= T3; T3 &= T0;
62 T4 |= T1; T3 ^= T4; T0 ^= T1; T4 &= T0; T1 ^= T3; T4 ^= T2; T1 |= T0;
63 T1 ^= T2; T0 ^= T3; T2 = T1; T1 |= T3; T1 ^= T0;
64 B0 = T1; B1 = T2; B2 = T3; B3 = T4;
65 }
66
67/*
68* Serpent Encryption S-Box 5
69*/
70inline void SBoxE5(u32bit& B0, u32bit& B1, u32bit& B2, u32bit& B3)
71 {
72 u32bit T0 = B0, T1 = B1, T2 = B2, T3 = B3, T4;
73 T1 ^= T3; T3 = ~T3; T2 ^= T3; T3 ^= T0; T4 = T1; T1 &= T3; T1 ^= T2;
74 T4 ^= T3; T0 ^= T4; T2 &= T4; T2 ^= T0; T0 &= T1; T3 ^= T0; T4 |= T1;
75 T4 ^= T0; T0 |= T3; T0 ^= T2; T2 &= T3; T0 = ~T0; T4 ^= T2;
76 B0 = T1; B1 = T4; B2 = T0; B3 = T3;
77 }
78
79/*
80* Serpent Encryption S-Box 6
81*/
82inline void SBoxE6(u32bit& B0, u32bit& B1, u32bit& B2, u32bit& B3)
83 {
84 u32bit T0 = B0, T1 = B1, T2 = B2, T3 = B3, T4;
85 T0 ^= T1; T1 ^= T3; T3 = ~T3; T4 = T1; T1 &= T0; T2 ^= T3; T1 ^= T2;
86 T2 |= T4; T4 ^= T3; T3 &= T1; T3 ^= T0; T4 ^= T1; T4 ^= T2; T2 ^= T0;
87 T0 &= T3; T2 = ~T2; T0 ^= T4; T4 |= T3; T2 ^= T4;
88 B0 = T1; B1 = T3; B2 = T0; B3 = T2;
89 }
90
91/*
92* Serpent Encryption S-Box 7
93*/
94inline void SBoxE7(u32bit& B0, u32bit& B1, u32bit& B2, u32bit& B3)
95 {
96 u32bit T0 = B0, T1 = B1, T2 = B2, T3 = B3, T4;
97 T2 = ~T2; T4 = T3; T3 &= T0; T0 ^= T4; T3 ^= T2; T2 |= T4; T1 ^= T3;
98 T2 ^= T0; T0 |= T1; T2 ^= T1; T4 ^= T0; T0 |= T3; T0 ^= T2; T4 ^= T3;
99 T4 ^= T0; T3 = ~T3; T2 &= T4; T2 ^= T3;
100 B0 = T0; B1 = T1; B2 = T4; B3 = T2;
101 }
102
103/*
104* Serpent Encryption S-Box 8
105*/
106inline void SBoxE8(u32bit& B0, u32bit& B1, u32bit& B2, u32bit& B3)
107 {
108 u32bit T0 = B0, T1 = B1, T2 = B2, T3 = B3, T4;
109 T4 = T1; T1 |= T2; T1 ^= T3; T4 ^= T2; T2 ^= T1; T3 |= T4; T3 &= T0;
110 T4 ^= T2; T3 ^= T1; T1 |= T4; T1 ^= T0; T0 |= T4; T0 ^= T2; T1 ^= T4;
111 T2 ^= T1; T1 &= T0; T1 ^= T4; T2 = ~T2; T2 |= T0; T4 ^= T2;
112 B0 = T4; B1 = T3; B2 = T1; B3 = T0;
113 }
114
115/*
116* Serpent Decryption S-Box 1
117*/
118inline void SBoxD1(u32bit& B0, u32bit& B1, u32bit& B2, u32bit& B3)
119 {
120 u32bit T0 = B0, T1 = B1, T2 = B2, T3 = B3, T4;
121 T2 = ~T2; T4 = T1; T1 |= T0; T4 = ~T4; T1 ^= T2; T2 |= T4; T1 ^= T3;
122 T0 ^= T4; T2 ^= T0; T0 &= T3; T4 ^= T0; T0 |= T1; T0 ^= T2; T3 ^= T4;
123 T2 ^= T1; T3 ^= T0; T3 ^= T1; T2 &= T3; T4 ^= T2;
124 B0 = T0; B1 = T4; B2 = T1; B3 = T3;
125 }
126
127/*
128* Serpent Decryption S-Box 2
129*/
130inline void SBoxD2(u32bit& B0, u32bit& B1, u32bit& B2, u32bit& B3)
131 {
132 u32bit T0 = B0, T1 = B1, T2 = B2, T3 = B3, T4;
133 T4 = T1; T1 ^= T3; T3 &= T1; T4 ^= T2; T3 ^= T0; T0 |= T1; T2 ^= T3;
134 T0 ^= T4; T0 |= T2; T1 ^= T3; T0 ^= T1; T1 |= T3; T1 ^= T0; T4 = ~T4;
135 T4 ^= T1; T1 |= T0; T1 ^= T0; T1 |= T4; T3 ^= T1;
136 B0 = T4; B1 = T0; B2 = T3; B3 = T2;
137 }
138
139/*
140* Serpent Decryption S-Box 3
141*/
142inline void SBoxD3(u32bit& B0, u32bit& B1, u32bit& B2, u32bit& B3)
143 {
144 u32bit T0 = B0, T1 = B1, T2 = B2, T3 = B3, T4;
145 T2 ^= T3; T3 ^= T0; T4 = T3; T3 &= T2; T3 ^= T1; T1 |= T2; T1 ^= T4;
146 T4 &= T3; T2 ^= T3; T4 &= T0; T4 ^= T2; T2 &= T1; T2 |= T0; T3 = ~T3;
147 T2 ^= T3; T0 ^= T3; T0 &= T1; T3 ^= T4; T3 ^= T0;
148 B0 = T1; B1 = T4; B2 = T2; B3 = T3;
149 }
150
151/*
152* Serpent Decryption S-Box 4
153*/
154inline void SBoxD4(u32bit& B0, u32bit& B1, u32bit& B2, u32bit& B3)
155 {
156 u32bit T0 = B0, T1 = B1, T2 = B2, T3 = B3, T4;
157 T4 = T2; T2 ^= T1; T0 ^= T2; T4 &= T2; T4 ^= T0; T0 &= T1; T1 ^= T3;
158 T3 |= T4; T2 ^= T3; T0 ^= T3; T1 ^= T4; T3 &= T2; T3 ^= T1; T1 ^= T0;
159 T1 |= T2; T0 ^= T3; T1 ^= T4; T0 ^= T1;
160 B0 = T2; B1 = T1; B2 = T3; B3 = T0;
161 }
162
163/*
164* Serpent Decryption S-Box 5
165*/
166inline void SBoxD5(u32bit& B0, u32bit& B1, u32bit& B2, u32bit& B3)
167 {
168 u32bit T0 = B0, T1 = B1, T2 = B2, T3 = B3, T4;
169 T4 = T2; T2 &= T3; T2 ^= T1; T1 |= T3; T1 &= T0; T4 ^= T2; T4 ^= T1;
170 T1 &= T2; T0 = ~T0; T3 ^= T4; T1 ^= T3; T3 &= T0; T3 ^= T2; T0 ^= T1;
171 T2 &= T0; T3 ^= T0; T2 ^= T4; T2 |= T3; T3 ^= T0; T2 ^= T1;
172 B0 = T0; B1 = T3; B2 = T2; B3 = T4;
173 }
174
175/*
176* Serpent Decryption S-Box 6
177*/
178inline void SBoxD6(u32bit& B0, u32bit& B1, u32bit& B2, u32bit& B3)
179 {
180 u32bit T0 = B0, T1 = B1, T2 = B2, T3 = B3, T4;
181 T1 = ~T1; T4 = T3; T2 ^= T1; T3 |= T0; T3 ^= T2; T2 |= T1; T2 &= T0;
182 T4 ^= T3; T2 ^= T4; T4 |= T0; T4 ^= T1; T1 &= T2; T1 ^= T3; T4 ^= T2;
183 T3 &= T4; T4 ^= T1; T3 ^= T4; T4 = ~T4; T3 ^= T0;
184 B0 = T1; B1 = T4; B2 = T3; B3 = T2;
185 }
186
187/*
188* Serpent Decryption S-Box 7
189*/
190inline void SBoxD7(u32bit& B0, u32bit& B1, u32bit& B2, u32bit& B3)
191 {
192 u32bit T0 = B0, T1 = B1, T2 = B2, T3 = B3, T4;
193 T0 ^= T2; T4 = T2; T2 &= T0; T4 ^= T3; T2 = ~T2; T3 ^= T1; T2 ^= T3;
194 T4 |= T0; T0 ^= T2; T3 ^= T4; T4 ^= T1; T1 &= T3; T1 ^= T0; T0 ^= T3;
195 T0 |= T2; T3 ^= T1; T4 ^= T0;
196 B0 = T1; B1 = T2; B2 = T4; B3 = T3;
197 }
198
199/*
200* Serpent Decryption S-Box 8
201*/
202inline void SBoxD8(u32bit& B0, u32bit& B1, u32bit& B2, u32bit& B3)
203 {
204 u32bit T0 = B0, T1 = B1, T2 = B2, T3 = B3, T4;
205 T4 = T2; T2 ^= T0; T0 &= T3; T4 |= T3; T2 = ~T2; T3 ^= T1; T1 |= T0;
206 T0 ^= T2; T2 &= T4; T3 &= T4; T1 ^= T2; T2 ^= T0; T0 |= T2; T4 ^= T1;
207 T0 ^= T3; T3 ^= T4; T4 |= T0; T3 ^= T2; T4 ^= T2;
208 B0 = T3; B1 = T0; B2 = T1; B3 = T4;
209 }
210
211/*
212* Serpent's Linear Transformation
213*/
214inline void transform(u32bit& B0, u32bit& B1, u32bit& B2, u32bit& B3)
215 {
216 B0 = rotate_left(B0, 13); B2 = rotate_left(B2, 3);
217 B1 ^= B0 ^ B2; B3 ^= B2 ^ (B0 << 3);
218 B1 = rotate_left(B1, 1); B3 = rotate_left(B3, 7);
219 B0 ^= B1 ^ B3; B2 ^= B3 ^ (B1 << 7);
220 B0 = rotate_left(B0, 5); B2 = rotate_left(B2, 22);
221 }
222
223/*
224* Serpent's Inverse Linear Transformation
225*/
226inline void i_transform(u32bit& B0, u32bit& B1, u32bit& B2, u32bit& B3)
227 {
228 B2 = rotate_right(B2, 22); B0 = rotate_right(B0, 5);
229 B2 ^= B3 ^ (B1 << 7); B0 ^= B1 ^ B3;
230 B3 = rotate_right(B3, 7); B1 = rotate_right(B1, 1);
231 B3 ^= B2 ^ (B0 << 3); B1 ^= B0 ^ B2;
232 B2 = rotate_right(B2, 3); B0 = rotate_right(B0, 13);
233 }
234
235}
236
237/*
238* XOR a key block with a data block
239*/
240#define key_xor(round, B0, B1, B2, B3) \
241 B0 ^= round_key[4*round ]; \
242 B1 ^= round_key[4*round+1]; \
243 B2 ^= round_key[4*round+2]; \
244 B3 ^= round_key[4*round+3];
245
246/*
247* Serpent Encryption
248*/
249void Serpent::encrypt_n(const byte in[], byte out[], size_t blocks) const
250 {
251 for(size_t i = 0; i != blocks; ++i)
252 {
253 u32bit B0 = load_le<u32bit>(in, 0);
254 u32bit B1 = load_le<u32bit>(in, 1);
255 u32bit B2 = load_le<u32bit>(in, 2);
256 u32bit B3 = load_le<u32bit>(in, 3);
257
258 key_xor( 0,B0,B1,B2,B3); SBoxE1(B0,B1,B2,B3); transform(B0,B1,B2,B3);
259 key_xor( 1,B0,B1,B2,B3); SBoxE2(B0,B1,B2,B3); transform(B0,B1,B2,B3);
260 key_xor( 2,B0,B1,B2,B3); SBoxE3(B0,B1,B2,B3); transform(B0,B1,B2,B3);
261 key_xor( 3,B0,B1,B2,B3); SBoxE4(B0,B1,B2,B3); transform(B0,B1,B2,B3);
262 key_xor( 4,B0,B1,B2,B3); SBoxE5(B0,B1,B2,B3); transform(B0,B1,B2,B3);
263 key_xor( 5,B0,B1,B2,B3); SBoxE6(B0,B1,B2,B3); transform(B0,B1,B2,B3);
264 key_xor( 6,B0,B1,B2,B3); SBoxE7(B0,B1,B2,B3); transform(B0,B1,B2,B3);
265 key_xor( 7,B0,B1,B2,B3); SBoxE8(B0,B1,B2,B3); transform(B0,B1,B2,B3);
266 key_xor( 8,B0,B1,B2,B3); SBoxE1(B0,B1,B2,B3); transform(B0,B1,B2,B3);
267 key_xor( 9,B0,B1,B2,B3); SBoxE2(B0,B1,B2,B3); transform(B0,B1,B2,B3);
268 key_xor(10,B0,B1,B2,B3); SBoxE3(B0,B1,B2,B3); transform(B0,B1,B2,B3);
269 key_xor(11,B0,B1,B2,B3); SBoxE4(B0,B1,B2,B3); transform(B0,B1,B2,B3);
270 key_xor(12,B0,B1,B2,B3); SBoxE5(B0,B1,B2,B3); transform(B0,B1,B2,B3);
271 key_xor(13,B0,B1,B2,B3); SBoxE6(B0,B1,B2,B3); transform(B0,B1,B2,B3);
272 key_xor(14,B0,B1,B2,B3); SBoxE7(B0,B1,B2,B3); transform(B0,B1,B2,B3);
273 key_xor(15,B0,B1,B2,B3); SBoxE8(B0,B1,B2,B3); transform(B0,B1,B2,B3);
274 key_xor(16,B0,B1,B2,B3); SBoxE1(B0,B1,B2,B3); transform(B0,B1,B2,B3);
275 key_xor(17,B0,B1,B2,B3); SBoxE2(B0,B1,B2,B3); transform(B0,B1,B2,B3);
276 key_xor(18,B0,B1,B2,B3); SBoxE3(B0,B1,B2,B3); transform(B0,B1,B2,B3);
277 key_xor(19,B0,B1,B2,B3); SBoxE4(B0,B1,B2,B3); transform(B0,B1,B2,B3);
278 key_xor(20,B0,B1,B2,B3); SBoxE5(B0,B1,B2,B3); transform(B0,B1,B2,B3);
279 key_xor(21,B0,B1,B2,B3); SBoxE6(B0,B1,B2,B3); transform(B0,B1,B2,B3);
280 key_xor(22,B0,B1,B2,B3); SBoxE7(B0,B1,B2,B3); transform(B0,B1,B2,B3);
281 key_xor(23,B0,B1,B2,B3); SBoxE8(B0,B1,B2,B3); transform(B0,B1,B2,B3);
282 key_xor(24,B0,B1,B2,B3); SBoxE1(B0,B1,B2,B3); transform(B0,B1,B2,B3);
283 key_xor(25,B0,B1,B2,B3); SBoxE2(B0,B1,B2,B3); transform(B0,B1,B2,B3);
284 key_xor(26,B0,B1,B2,B3); SBoxE3(B0,B1,B2,B3); transform(B0,B1,B2,B3);
285 key_xor(27,B0,B1,B2,B3); SBoxE4(B0,B1,B2,B3); transform(B0,B1,B2,B3);
286 key_xor(28,B0,B1,B2,B3); SBoxE5(B0,B1,B2,B3); transform(B0,B1,B2,B3);
287 key_xor(29,B0,B1,B2,B3); SBoxE6(B0,B1,B2,B3); transform(B0,B1,B2,B3);
288 key_xor(30,B0,B1,B2,B3); SBoxE7(B0,B1,B2,B3); transform(B0,B1,B2,B3);
289 key_xor(31,B0,B1,B2,B3); SBoxE8(B0,B1,B2,B3); key_xor(32,B0,B1,B2,B3);
290
291 store_le(out, B0, B1, B2, B3);
292
293 in += BLOCK_SIZE;
294 out += BLOCK_SIZE;
295 }
296 }
297
298/*
299* Serpent Decryption
300*/
301void Serpent::decrypt_n(const byte in[], byte out[], size_t blocks) const
302 {
303 for(size_t i = 0; i != blocks; ++i)
304 {
305 u32bit B0 = load_le<u32bit>(in, 0);
306 u32bit B1 = load_le<u32bit>(in, 1);
307 u32bit B2 = load_le<u32bit>(in, 2);
308 u32bit B3 = load_le<u32bit>(in, 3);
309
310 key_xor(32,B0,B1,B2,B3); SBoxD8(B0,B1,B2,B3); key_xor(31,B0,B1,B2,B3);
311 i_transform(B0,B1,B2,B3); SBoxD7(B0,B1,B2,B3); key_xor(30,B0,B1,B2,B3);
312 i_transform(B0,B1,B2,B3); SBoxD6(B0,B1,B2,B3); key_xor(29,B0,B1,B2,B3);
313 i_transform(B0,B1,B2,B3); SBoxD5(B0,B1,B2,B3); key_xor(28,B0,B1,B2,B3);
314 i_transform(B0,B1,B2,B3); SBoxD4(B0,B1,B2,B3); key_xor(27,B0,B1,B2,B3);
315 i_transform(B0,B1,B2,B3); SBoxD3(B0,B1,B2,B3); key_xor(26,B0,B1,B2,B3);
316 i_transform(B0,B1,B2,B3); SBoxD2(B0,B1,B2,B3); key_xor(25,B0,B1,B2,B3);
317 i_transform(B0,B1,B2,B3); SBoxD1(B0,B1,B2,B3); key_xor(24,B0,B1,B2,B3);
318 i_transform(B0,B1,B2,B3); SBoxD8(B0,B1,B2,B3); key_xor(23,B0,B1,B2,B3);
319 i_transform(B0,B1,B2,B3); SBoxD7(B0,B1,B2,B3); key_xor(22,B0,B1,B2,B3);
320 i_transform(B0,B1,B2,B3); SBoxD6(B0,B1,B2,B3); key_xor(21,B0,B1,B2,B3);
321 i_transform(B0,B1,B2,B3); SBoxD5(B0,B1,B2,B3); key_xor(20,B0,B1,B2,B3);
322 i_transform(B0,B1,B2,B3); SBoxD4(B0,B1,B2,B3); key_xor(19,B0,B1,B2,B3);
323 i_transform(B0,B1,B2,B3); SBoxD3(B0,B1,B2,B3); key_xor(18,B0,B1,B2,B3);
324 i_transform(B0,B1,B2,B3); SBoxD2(B0,B1,B2,B3); key_xor(17,B0,B1,B2,B3);
325 i_transform(B0,B1,B2,B3); SBoxD1(B0,B1,B2,B3); key_xor(16,B0,B1,B2,B3);
326 i_transform(B0,B1,B2,B3); SBoxD8(B0,B1,B2,B3); key_xor(15,B0,B1,B2,B3);
327 i_transform(B0,B1,B2,B3); SBoxD7(B0,B1,B2,B3); key_xor(14,B0,B1,B2,B3);
328 i_transform(B0,B1,B2,B3); SBoxD6(B0,B1,B2,B3); key_xor(13,B0,B1,B2,B3);
329 i_transform(B0,B1,B2,B3); SBoxD5(B0,B1,B2,B3); key_xor(12,B0,B1,B2,B3);
330 i_transform(B0,B1,B2,B3); SBoxD4(B0,B1,B2,B3); key_xor(11,B0,B1,B2,B3);
331 i_transform(B0,B1,B2,B3); SBoxD3(B0,B1,B2,B3); key_xor(10,B0,B1,B2,B3);
332 i_transform(B0,B1,B2,B3); SBoxD2(B0,B1,B2,B3); key_xor( 9,B0,B1,B2,B3);
333 i_transform(B0,B1,B2,B3); SBoxD1(B0,B1,B2,B3); key_xor( 8,B0,B1,B2,B3);
334 i_transform(B0,B1,B2,B3); SBoxD8(B0,B1,B2,B3); key_xor( 7,B0,B1,B2,B3);
335 i_transform(B0,B1,B2,B3); SBoxD7(B0,B1,B2,B3); key_xor( 6,B0,B1,B2,B3);
336 i_transform(B0,B1,B2,B3); SBoxD6(B0,B1,B2,B3); key_xor( 5,B0,B1,B2,B3);
337 i_transform(B0,B1,B2,B3); SBoxD5(B0,B1,B2,B3); key_xor( 4,B0,B1,B2,B3);
338 i_transform(B0,B1,B2,B3); SBoxD4(B0,B1,B2,B3); key_xor( 3,B0,B1,B2,B3);
339 i_transform(B0,B1,B2,B3); SBoxD3(B0,B1,B2,B3); key_xor( 2,B0,B1,B2,B3);
340 i_transform(B0,B1,B2,B3); SBoxD2(B0,B1,B2,B3); key_xor( 1,B0,B1,B2,B3);
341 i_transform(B0,B1,B2,B3); SBoxD1(B0,B1,B2,B3); key_xor( 0,B0,B1,B2,B3);
342
343 store_le(out, B0, B1, B2, B3);
344
345 in += BLOCK_SIZE;
346 out += BLOCK_SIZE;
347 }
348 }
349
350#undef key_xor
351#undef transform
352#undef i_transform
353
354/*
355* Serpent Key Schedule
356*/
357void Serpent::key_schedule(const byte key[], size_t length)
358 {
359 const u32bit PHI = 0x9E3779B9;
360
361 SecureVector<u32bit> W(140);
362 for(size_t i = 0; i != length / 4; ++i)
363 W[i] = load_le<u32bit>(key, i);
364
365 W[length / 4] |= u32bit(1) << ((length%4)*8);
366
367 for(size_t i = 8; i != 140; ++i)
368 {
369 u32bit wi = W[i-8] ^ W[i-5] ^ W[i-3] ^ W[i-1] ^ PHI ^ u32bit(i-8);
370 W[i] = rotate_left(wi, 11);
371 }
372
373 SBoxE4(W[ 8],W[ 9],W[ 10],W[ 11]); SBoxE3(W[ 12],W[ 13],W[ 14],W[ 15]);
374 SBoxE2(W[ 16],W[ 17],W[ 18],W[ 19]); SBoxE1(W[ 20],W[ 21],W[ 22],W[ 23]);
375 SBoxE8(W[ 24],W[ 25],W[ 26],W[ 27]); SBoxE7(W[ 28],W[ 29],W[ 30],W[ 31]);
376 SBoxE6(W[ 32],W[ 33],W[ 34],W[ 35]); SBoxE5(W[ 36],W[ 37],W[ 38],W[ 39]);
377 SBoxE4(W[ 40],W[ 41],W[ 42],W[ 43]); SBoxE3(W[ 44],W[ 45],W[ 46],W[ 47]);
378 SBoxE2(W[ 48],W[ 49],W[ 50],W[ 51]); SBoxE1(W[ 52],W[ 53],W[ 54],W[ 55]);
379 SBoxE8(W[ 56],W[ 57],W[ 58],W[ 59]); SBoxE7(W[ 60],W[ 61],W[ 62],W[ 63]);
380 SBoxE6(W[ 64],W[ 65],W[ 66],W[ 67]); SBoxE5(W[ 68],W[ 69],W[ 70],W[ 71]);
381 SBoxE4(W[ 72],W[ 73],W[ 74],W[ 75]); SBoxE3(W[ 76],W[ 77],W[ 78],W[ 79]);
382 SBoxE2(W[ 80],W[ 81],W[ 82],W[ 83]); SBoxE1(W[ 84],W[ 85],W[ 86],W[ 87]);
383 SBoxE8(W[ 88],W[ 89],W[ 90],W[ 91]); SBoxE7(W[ 92],W[ 93],W[ 94],W[ 95]);
384 SBoxE6(W[ 96],W[ 97],W[ 98],W[ 99]); SBoxE5(W[100],W[101],W[102],W[103]);
385 SBoxE4(W[104],W[105],W[106],W[107]); SBoxE3(W[108],W[109],W[110],W[111]);
386 SBoxE2(W[112],W[113],W[114],W[115]); SBoxE1(W[116],W[117],W[118],W[119]);
387 SBoxE8(W[120],W[121],W[122],W[123]); SBoxE7(W[124],W[125],W[126],W[127]);
388 SBoxE6(W[128],W[129],W[130],W[131]); SBoxE5(W[132],W[133],W[134],W[135]);
389 SBoxE4(W[136],W[137],W[138],W[139]);
390 round_key.copy(&W[8], 132);
391 }
392
393}
Botan::Block_Cipher_Fixed_Params< 16, 16, 32, 8 >::BLOCK_SIZE
@ BLOCK_SIZE
Definition block_cipher.h:107
Botan::MemoryRegion::copy
void copy(const T in[], size_t n)
Definition secmem.h:126
Botan::Serpent::encrypt_n
void encrypt_n(const byte in[], byte out[], size_t blocks) const
Definition serpent.cpp:249
Botan::Serpent::decrypt_n
void decrypt_n(const byte in[], byte out[], size_t blocks) const
Definition serpent.cpp:301
Botan::rotate_right
T rotate_right(T input, size_t rot)
Definition rotate.h:34
Botan::rotate_left
T rotate_left(T input, size_t rot)
Definition rotate.h:21
Botan::load_le
T load_le(const byte in[], size_t off)
Definition loadstor.h:116
Botan::u32bit
unsigned int u32bit
Definition types.h:32
Botan::store_le
void store_le(u16bit in, byte out[2])
Definition loadstor.h:427
SBoxE7
#define SBoxE7(B0, B1, B2, B3)
Definition serp_simd.cpp:170
SBoxE1
#define SBoxE1(B0, B1, B2, B3)
Definition serp_simd.cpp:16
SBoxE5
#define SBoxE5(B0, B1, B2, B3)
Definition serp_simd.cpp:116
SBoxD6
#define SBoxD6(B0, B1, B2, B3)
Definition serp_simd.cpp:351
SBoxD8
#define SBoxD8(B0, B1, B2, B3)
Definition serp_simd.cpp:403
SBoxD1
#define SBoxD1(B0, B1, B2, B3)
Definition serp_simd.cpp:221
i_transform
#define i_transform(B0, B1, B2, B3)
Definition serp_simd.cpp:455
SBoxD7
#define SBoxD7(B0, B1, B2, B3)
Definition serp_simd.cpp:379
SBoxE4
#define SBoxE4(B0, B1, B2, B3)
Definition serp_simd.cpp:90
SBoxE3
#define SBoxE3(B0, B1, B2, B3)
Definition serp_simd.cpp:67
SBoxE2
#define SBoxE2(B0, B1, B2, B3)
Definition serp_simd.cpp:41
SBoxD5
#define SBoxD5(B0, B1, B2, B3)
Definition serp_simd.cpp:325
transform
#define transform(B0, B1, B2, B3)
Definition serp_simd.cpp:441
SBoxE6
#define SBoxE6(B0, B1, B2, B3)
Definition serp_simd.cpp:143
SBoxD2
#define SBoxD2(B0, B1, B2, B3)
Definition serp_simd.cpp:246
SBoxE8
#define SBoxE8(B0, B1, B2, B3)
Definition serp_simd.cpp:193
SBoxD4
#define SBoxD4(B0, B1, B2, B3)
Definition serp_simd.cpp:299
SBoxD3
#define SBoxD3(B0, B1, B2, B3)
Definition serp_simd.cpp:274
key_xor
#define key_xor(round, B0, B1, B2, B3)
Definition serpent.cpp:240
Generated by doxygen 1.18.0