crypto/anubis.c

   1 /*
   2  * Cryptographic API.
   3  *
   4  * Anubis Algorithm
   5  *
   6  * The Anubis algorithm was developed by Paulo S. L. M. Barreto and
   7  * Vincent Rijmen.
   8  *
   9  * See
  10  *
  11  *      P.S.L.M. Barreto, V. Rijmen,
  12  *      ``The Anubis block cipher,''
  13  *      NESSIE submission, 2000.
  14  *
  15  * This software implements the "tweaked" version of Anubis.
  16  * Only the S-box and (consequently) the rounds constants have been
  17  * changed.
  18  *
  19  * The original authors have disclaimed all copyright interest in this
  20  * code and thus put it in the public domain. The subsequent authors
  21  * have put this under the GNU General Public License.
  22  *
  23  * By Aaron Grothe ajgrothe@yahoo.com, October 28, 2004
  24  *
  25  * This program is free software; you can redistribute it and/or modify
  26  * it under the terms of the GNU General Public License as published by
  27  * the Free Software Foundation; either version 2 of the License, or
  28  * (at your option) any later version.
  29  *
  30  */
  31
  32 #include <linux/init.h>
  33 #include <linux/module.h>
  34 #include <linux/mm.h>
  35 #include <asm/scatterlist.h>
  36 #include <linux/crypto.h>
  37
  38 #define ANUBIS_MIN_KEY_SIZE     16
  39 #define ANUBIS_MAX_KEY_SIZE     40
  40 #define ANUBIS_BLOCK_SIZE       16
  41 #define ANUBIS_MAX_N            10
  42 #define ANUBIS_MAX_ROUNDS       (8 + ANUBIS_MAX_N)
  43
  44 struct anubis_ctx {
  45         int key_len; // in bits
  46         int R;
  47         u32 E[ANUBIS_MAX_ROUNDS + 1][4];
  48         u32 D[ANUBIS_MAX_ROUNDS + 1][4];
  49 };
  50
  51 static const u32 T0[256] = {
  52         0xba69d2bbU, 0x54a84de5U, 0x2f5ebce2U, 0x74e8cd25U,
  53         0x53a651f7U, 0xd3bb6bd0U, 0xd2b96fd6U, 0x4d9a29b3U,
  54         0x50a05dfdU, 0xac458acfU, 0x8d070e09U, 0xbf63c6a5U,
  55         0x70e0dd3dU, 0x52a455f1U, 0x9a29527bU, 0x4c982db5U,
  56         0xeac98f46U, 0xd5b773c4U, 0x97336655U, 0xd1bf63dcU,
  57         0x3366ccaaU, 0x51a259fbU, 0x5bb671c7U, 0xa651a2f3U,
  58         0xdea15ffeU, 0x48903dadU, 0xa84d9ad7U, 0x992f5e71U,
  59         0xdbab4be0U, 0x3264c8acU, 0xb773e695U, 0xfce5d732U,
  60         0xe3dbab70U, 0x9e214263U, 0x913f7e41U, 0x9b2b567dU,
  61         0xe2d9af76U, 0xbb6bd6bdU, 0x4182199bU, 0x6edca579U,
  62         0xa557aef9U, 0xcb8b0b80U, 0x6bd6b167U, 0x95376e59U,
  63         0xa15fbee1U, 0xf3fbeb10U, 0xb17ffe81U, 0x0204080cU,
  64         0xcc851792U, 0xc49537a2U, 0x1d3a744eU, 0x14285078U,
  65         0xc39b2bb0U, 0x63c69157U, 0xdaa94fe6U, 0x5dba69d3U,
  66         0x5fbe61dfU, 0xdca557f2U, 0x7dfae913U, 0xcd871394U,
  67         0x7ffee11fU, 0x5ab475c1U, 0x6cd8ad75U, 0x5cb86dd5U,
  68         0xf7f3fb08U, 0x264c98d4U, 0xffe3db38U, 0xedc79354U,
  69         0xe8cd874aU, 0x9d274e69U, 0x6fdea17fU, 0x8e010203U,
  70         0x19326456U, 0xa05dbae7U, 0xf0fde71aU, 0x890f1e11U,
  71         0x0f1e3c22U, 0x070e1c12U, 0xaf4386c5U, 0xfbebcb20U,
  72         0x08102030U, 0x152a547eU, 0x0d1a342eU, 0x04081018U,
  73         0x01020406U, 0x64c88d45U, 0xdfa35bf8U, 0x76ecc529U,
  74         0x79f2f90bU, 0xdda753f4U, 0x3d7af48eU, 0x162c5874U,
  75         0x3f7efc82U, 0x376edcb2U, 0x6ddaa973U, 0x3870e090U,
  76         0xb96fdeb1U, 0x73e6d137U, 0xe9cf834cU, 0x356ad4beU,
  77         0x55aa49e3U, 0x71e2d93bU, 0x7bf6f107U, 0x8c050a0fU,
  78         0x72e4d531U, 0x880d1a17U, 0xf6f1ff0eU, 0x2a54a8fcU,
  79         0x3e7cf884U, 0x5ebc65d9U, 0x274e9cd2U, 0x468c0589U,
  80         0x0c183028U, 0x65ca8943U, 0x68d0bd6dU, 0x61c2995bU,
  81         0x03060c0aU, 0xc19f23bcU, 0x57ae41efU, 0xd6b17fceU,
  82         0xd9af43ecU, 0x58b07dcdU, 0xd8ad47eaU, 0x66cc8549U,
  83         0xd7b37bc8U, 0x3a74e89cU, 0xc88d078aU, 0x3c78f088U,
  84         0xfae9cf26U, 0x96316253U, 0xa753a6f5U, 0x982d5a77U,
  85         0xecc59752U, 0xb86ddab7U, 0xc7933ba8U, 0xae4182c3U,
  86         0x69d2b96bU, 0x4b9631a7U, 0xab4b96ddU, 0xa94f9ed1U,
  87         0x67ce814fU, 0x0a14283cU, 0x478e018fU, 0xf2f9ef16U,
  88         0xb577ee99U, 0x224488ccU, 0xe5d7b364U, 0xeec19f5eU,
  89         0xbe61c2a3U, 0x2b56acfaU, 0x811f3e21U, 0x1224486cU,
  90         0x831b362dU, 0x1b366c5aU, 0x0e1c3824U, 0x23468ccaU,
  91         0xf5f7f304U, 0x458a0983U, 0x214284c6U, 0xce811f9eU,
  92         0x499239abU, 0x2c58b0e8U, 0xf9efc32cU, 0xe6d1bf6eU,
  93         0xb671e293U, 0x2850a0f0U, 0x172e5c72U, 0x8219322bU,
  94         0x1a34685cU, 0x8b0b161dU, 0xfee1df3eU, 0x8a09121bU,
  95         0x09122436U, 0xc98f038cU, 0x87132635U, 0x4e9c25b9U,
  96         0xe1dfa37cU, 0x2e5cb8e4U, 0xe4d5b762U, 0xe0dda77aU,
  97         0xebcb8b40U, 0x903d7a47U, 0xa455aaffU, 0x1e3c7844U,
  98         0x85172e39U, 0x60c09d5dU, 0x00000000U, 0x254a94deU,
  99         0xf4f5f702U, 0xf1ffe31cU, 0x94356a5fU, 0x0b162c3aU,
 100         0xe7d3bb68U, 0x75eac923U, 0xefc39b58U, 0x3468d0b8U,
 101         0x3162c4a6U, 0xd4b577c2U, 0xd0bd67daU, 0x86112233U,
 102         0x7efce519U, 0xad478ec9U, 0xfde7d334U, 0x2952a4f6U,
 103         0x3060c0a0U, 0x3b76ec9aU, 0x9f234665U, 0xf8edc72aU,
 104         0xc6913faeU, 0x13264c6aU, 0x060c1814U, 0x050a141eU,
 105         0xc59733a4U, 0x11224466U, 0x77eec12fU, 0x7cf8ed15U,
 106         0x7af4f501U, 0x78f0fd0dU, 0x366cd8b4U, 0x1c387048U,
 107         0x3972e496U, 0x59b279cbU, 0x18306050U, 0x56ac45e9U,
 108         0xb37bf68dU, 0xb07dfa87U, 0x244890d8U, 0x204080c0U,
 109         0xb279f28bU, 0x9239724bU, 0xa35bb6edU, 0xc09d27baU,
 110         0x44880d85U, 0x62c49551U, 0x10204060U, 0xb475ea9fU,
 111         0x84152a3fU, 0x43861197U, 0x933b764dU, 0xc2992fb6U,
 112         0x4a9435a1U, 0xbd67cea9U, 0x8f030605U, 0x2d5ab4eeU,
 113         0xbc65caafU, 0x9c254a6fU, 0x6ad4b561U, 0x40801d9dU,
 114         0xcf831b98U, 0xa259b2ebU, 0x801d3a27U, 0x4f9e21bfU,
 115         0x1f3e7c42U, 0xca890f86U, 0xaa4992dbU, 0x42841591U,
 116 };
 117
 118 static const u32 T1[256] = {
 119         0x69babbd2U, 0xa854e54dU, 0x5e2fe2bcU, 0xe87425cdU,
 120         0xa653f751U, 0xbbd3d06bU, 0xb9d2d66fU, 0x9a4db329U,
 121         0xa050fd5dU, 0x45accf8aU, 0x078d090eU, 0x63bfa5c6U,
 122         0xe0703dddU, 0xa452f155U, 0x299a7b52U, 0x984cb52dU,
 123         0xc9ea468fU, 0xb7d5c473U, 0x33975566U, 0xbfd1dc63U,
 124         0x6633aaccU, 0xa251fb59U, 0xb65bc771U, 0x51a6f3a2U,
 125         0xa1defe5fU, 0x9048ad3dU, 0x4da8d79aU, 0x2f99715eU,
 126         0xabdbe04bU, 0x6432acc8U, 0x73b795e6U, 0xe5fc32d7U,
 127         0xdbe370abU, 0x219e6342U, 0x3f91417eU, 0x2b9b7d56U,
 128         0xd9e276afU, 0x6bbbbdd6U, 0x82419b19U, 0xdc6e79a5U,
 129         0x57a5f9aeU, 0x8bcb800bU, 0xd66b67b1U, 0x3795596eU,
 130         0x5fa1e1beU, 0xfbf310ebU, 0x7fb181feU, 0x04020c08U,
 131         0x85cc9217U, 0x95c4a237U, 0x3a1d4e74U, 0x28147850U,
 132         0x9bc3b02bU, 0xc6635791U, 0xa9dae64fU, 0xba5dd369U,
 133         0xbe5fdf61U, 0xa5dcf257U, 0xfa7d13e9U, 0x87cd9413U,
 134         0xfe7f1fe1U, 0xb45ac175U, 0xd86c75adU, 0xb85cd56dU,
 135         0xf3f708fbU, 0x4c26d498U, 0xe3ff38dbU, 0xc7ed5493U,
 136         0xcde84a87U, 0x279d694eU, 0xde6f7fa1U, 0x018e0302U,
 137         0x32195664U, 0x5da0e7baU, 0xfdf01ae7U, 0x0f89111eU,
 138         0x1e0f223cU, 0x0e07121cU, 0x43afc586U, 0xebfb20cbU,
 139         0x10083020U, 0x2a157e54U, 0x1a0d2e34U, 0x08041810U,
 140         0x02010604U, 0xc864458dU, 0xa3dff85bU, 0xec7629c5U,
 141         0xf2790bf9U, 0xa7ddf453U, 0x7a3d8ef4U, 0x2c167458U,
 142         0x7e3f82fcU, 0x6e37b2dcU, 0xda6d73a9U, 0x703890e0U,
 143         0x6fb9b1deU, 0xe67337d1U, 0xcfe94c83U, 0x6a35bed4U,
 144         0xaa55e349U, 0xe2713bd9U, 0xf67b07f1U, 0x058c0f0aU,
 145         0xe47231d5U, 0x0d88171aU, 0xf1f60effU, 0x542afca8U,
 146         0x7c3e84f8U, 0xbc5ed965U, 0x4e27d29cU, 0x8c468905U,
 147         0x180c2830U, 0xca654389U, 0xd0686dbdU, 0xc2615b99U,
 148         0x06030a0cU, 0x9fc1bc23U, 0xae57ef41U, 0xb1d6ce7fU,
 149         0xafd9ec43U, 0xb058cd7dU, 0xadd8ea47U, 0xcc664985U,
 150         0xb3d7c87bU, 0x743a9ce8U, 0x8dc88a07U, 0x783c88f0U,
 151         0xe9fa26cfU, 0x31965362U, 0x53a7f5a6U, 0x2d98775aU,
 152         0xc5ec5297U, 0x6db8b7daU, 0x93c7a83bU, 0x41aec382U,
 153         0xd2696bb9U, 0x964ba731U, 0x4babdd96U, 0x4fa9d19eU,
 154         0xce674f81U, 0x140a3c28U, 0x8e478f01U, 0xf9f216efU,
 155         0x77b599eeU, 0x4422cc88U, 0xd7e564b3U, 0xc1ee5e9fU,
 156         0x61bea3c2U, 0x562bfaacU, 0x1f81213eU, 0x24126c48U,
 157         0x1b832d36U, 0x361b5a6cU, 0x1c0e2438U, 0x4623ca8cU,
 158         0xf7f504f3U, 0x8a458309U, 0x4221c684U, 0x81ce9e1fU,
 159         0x9249ab39U, 0x582ce8b0U, 0xeff92cc3U, 0xd1e66ebfU,
 160         0x71b693e2U, 0x5028f0a0U, 0x2e17725cU, 0x19822b32U,
 161         0x341a5c68U, 0x0b8b1d16U, 0xe1fe3edfU, 0x098a1b12U,
 162         0x12093624U, 0x8fc98c03U, 0x13873526U, 0x9c4eb925U,
 163         0xdfe17ca3U, 0x5c2ee4b8U, 0xd5e462b7U, 0xdde07aa7U,
 164         0xcbeb408bU, 0x3d90477aU, 0x55a4ffaaU, 0x3c1e4478U,
 165         0x1785392eU, 0xc0605d9dU, 0x00000000U, 0x4a25de94U,
 166         0xf5f402f7U, 0xfff11ce3U, 0x35945f6aU, 0x160b3a2cU,
 167         0xd3e768bbU, 0xea7523c9U, 0xc3ef589bU, 0x6834b8d0U,
 168         0x6231a6c4U, 0xb5d4c277U, 0xbdd0da67U, 0x11863322U,
 169         0xfc7e19e5U, 0x47adc98eU, 0xe7fd34d3U, 0x5229f6a4U,
 170         0x6030a0c0U, 0x763b9aecU, 0x239f6546U, 0xedf82ac7U,
 171         0x91c6ae3fU, 0x26136a4cU, 0x0c061418U, 0x0a051e14U,
 172         0x97c5a433U, 0x22116644U, 0xee772fc1U, 0xf87c15edU,
 173         0xf47a01f5U, 0xf0780dfdU, 0x6c36b4d8U, 0x381c4870U,
 174         0x723996e4U, 0xb259cb79U, 0x30185060U, 0xac56e945U,
 175         0x7bb38df6U, 0x7db087faU, 0x4824d890U, 0x4020c080U,
 176         0x79b28bf2U, 0x39924b72U, 0x5ba3edb6U, 0x9dc0ba27U,
 177         0x8844850dU, 0xc4625195U, 0x20106040U, 0x75b49feaU,
 178         0x15843f2aU, 0x86439711U, 0x3b934d76U, 0x99c2b62fU,
 179         0x944aa135U, 0x67bda9ceU, 0x038f0506U, 0x5a2deeb4U,
 180         0x65bcafcaU, 0x259c6f4aU, 0xd46a61b5U, 0x80409d1dU,
 181         0x83cf981bU, 0x59a2ebb2U, 0x1d80273aU, 0x9e4fbf21U,
 182         0x3e1f427cU, 0x89ca860fU, 0x49aadb92U, 0x84429115U,
 183 };
 184
 185 static const u32 T2[256] = {
 186         0xd2bbba69U, 0x4de554a8U, 0xbce22f5eU, 0xcd2574e8U,
 187         0x51f753a6U, 0x6bd0d3bbU, 0x6fd6d2b9U, 0x29b34d9aU,
 188         0x5dfd50a0U, 0x8acfac45U, 0x0e098d07U, 0xc6a5bf63U,
 189         0xdd3d70e0U, 0x55f152a4U, 0x527b9a29U, 0x2db54c98U,
 190         0x8f46eac9U, 0x73c4d5b7U, 0x66559733U, 0x63dcd1bfU,
 191         0xccaa3366U, 0x59fb51a2U, 0x71c75bb6U, 0xa2f3a651U,
 192         0x5ffedea1U, 0x3dad4890U, 0x9ad7a84dU, 0x5e71992fU,
 193         0x4be0dbabU, 0xc8ac3264U, 0xe695b773U, 0xd732fce5U,
 194         0xab70e3dbU, 0x42639e21U, 0x7e41913fU, 0x567d9b2bU,
 195         0xaf76e2d9U, 0xd6bdbb6bU, 0x199b4182U, 0xa5796edcU,
 196         0xaef9a557U, 0x0b80cb8bU, 0xb1676bd6U, 0x6e599537U,
 197         0xbee1a15fU, 0xeb10f3fbU, 0xfe81b17fU, 0x080c0204U,
 198         0x1792cc85U, 0x37a2c495U, 0x744e1d3aU, 0x50781428U,
 199         0x2bb0c39bU, 0x915763c6U, 0x4fe6daa9U, 0x69d35dbaU,
 200         0x61df5fbeU, 0x57f2dca5U, 0xe9137dfaU, 0x1394cd87U,
 201         0xe11f7ffeU, 0x75c15ab4U, 0xad756cd8U, 0x6dd55cb8U,
 202         0xfb08f7f3U, 0x98d4264cU, 0xdb38ffe3U, 0x9354edc7U,
 203         0x874ae8cdU, 0x4e699d27U, 0xa17f6fdeU, 0x02038e01U,
 204         0x64561932U, 0xbae7a05dU, 0xe71af0fdU, 0x1e11890fU,
 205         0x3c220f1eU, 0x1c12070eU, 0x86c5af43U, 0xcb20fbebU,
 206         0x20300810U, 0x547e152aU, 0x342e0d1aU, 0x10180408U,
 207         0x04060102U, 0x8d4564c8U, 0x5bf8dfa3U, 0xc52976ecU,
 208         0xf90b79f2U, 0x53f4dda7U, 0xf48e3d7aU, 0x5874162cU,
 209         0xfc823f7eU, 0xdcb2376eU, 0xa9736ddaU, 0xe0903870U,
 210         0xdeb1b96fU, 0xd13773e6U, 0x834ce9cfU, 0xd4be356aU,
 211         0x49e355aaU, 0xd93b71e2U, 0xf1077bf6U, 0x0a0f8c05U,
 212         0xd53172e4U, 0x1a17880dU, 0xff0ef6f1U, 0xa8fc2a54U,
 213         0xf8843e7cU, 0x65d95ebcU, 0x9cd2274eU, 0x0589468cU,
 214         0x30280c18U, 0x894365caU, 0xbd6d68d0U, 0x995b61c2U,
 215         0x0c0a0306U, 0x23bcc19fU, 0x41ef57aeU, 0x7fced6b1U,
 216         0x43ecd9afU, 0x7dcd58b0U, 0x47ead8adU, 0x854966ccU,
 217         0x7bc8d7b3U, 0xe89c3a74U, 0x078ac88dU, 0xf0883c78U,
 218         0xcf26fae9U, 0x62539631U, 0xa6f5a753U, 0x5a77982dU,
 219         0x9752ecc5U, 0xdab7b86dU, 0x3ba8c793U, 0x82c3ae41U,
 220         0xb96b69d2U, 0x31a74b96U, 0x96ddab4bU, 0x9ed1a94fU,
 221         0x814f67ceU, 0x283c0a14U, 0x018f478eU, 0xef16f2f9U,
 222         0xee99b577U, 0x88cc2244U, 0xb364e5d7U, 0x9f5eeec1U,
 223         0xc2a3be61U, 0xacfa2b56U, 0x3e21811fU, 0x486c1224U,
 224         0x362d831bU, 0x6c5a1b36U, 0x38240e1cU, 0x8cca2346U,
 225         0xf304f5f7U, 0x0983458aU, 0x84c62142U, 0x1f9ece81U,
 226         0x39ab4992U, 0xb0e82c58U, 0xc32cf9efU, 0xbf6ee6d1U,
 227         0xe293b671U, 0xa0f02850U, 0x5c72172eU, 0x322b8219U,
 228         0x685c1a34U, 0x161d8b0bU, 0xdf3efee1U, 0x121b8a09U,
 229         0x24360912U, 0x038cc98fU, 0x26358713U, 0x25b94e9cU,
 230         0xa37ce1dfU, 0xb8e42e5cU, 0xb762e4d5U, 0xa77ae0ddU,
 231         0x8b40ebcbU, 0x7a47903dU, 0xaaffa455U, 0x78441e3cU,
 232         0x2e398517U, 0x9d5d60c0U, 0x00000000U, 0x94de254aU,
 233         0xf702f4f5U, 0xe31cf1ffU, 0x6a5f9435U, 0x2c3a0b16U,
 234         0xbb68e7d3U, 0xc92375eaU, 0x9b58efc3U, 0xd0b83468U,
 235         0xc4a63162U, 0x77c2d4b5U, 0x67dad0bdU, 0x22338611U,
 236         0xe5197efcU, 0x8ec9ad47U, 0xd334fde7U, 0xa4f62952U,
 237         0xc0a03060U, 0xec9a3b76U, 0x46659f23U, 0xc72af8edU,
 238         0x3faec691U, 0x4c6a1326U, 0x1814060cU, 0x141e050aU,
 239         0x33a4c597U, 0x44661122U, 0xc12f77eeU, 0xed157cf8U,
 240         0xf5017af4U, 0xfd0d78f0U, 0xd8b4366cU, 0x70481c38U,
 241         0xe4963972U, 0x79cb59b2U, 0x60501830U, 0x45e956acU,
 242         0xf68db37bU, 0xfa87b07dU, 0x90d82448U, 0x80c02040U,
 243         0xf28bb279U, 0x724b9239U, 0xb6eda35bU, 0x27bac09dU,
 244         0x0d854488U, 0x955162c4U, 0x40601020U, 0xea9fb475U,
 245         0x2a3f8415U, 0x11974386U, 0x764d933bU, 0x2fb6c299U,
 246         0x35a14a94U, 0xcea9bd67U, 0x06058f03U, 0xb4ee2d5aU,
 247         0xcaafbc65U, 0x4a6f9c25U, 0xb5616ad4U, 0x1d9d4080U,
 248         0x1b98cf83U, 0xb2eba259U, 0x3a27801dU, 0x21bf4f9eU,
 249         0x7c421f3eU, 0x0f86ca89U, 0x92dbaa49U, 0x15914284U,
 250 };
 251
 252 static const u32 T3[256] = {
 253         0xbbd269baU, 0xe54da854U, 0xe2bc5e2fU, 0x25cde874U,
 254         0xf751a653U, 0xd06bbbd3U, 0xd66fb9d2U, 0xb3299a4dU,
 255         0xfd5da050U, 0xcf8a45acU, 0x090e078dU, 0xa5c663bfU,
 256         0x3ddde070U, 0xf155a452U, 0x7b52299aU, 0xb52d984cU,
 257         0x468fc9eaU, 0xc473b7d5U, 0x55663397U, 0xdc63bfd1U,
 258         0xaacc6633U, 0xfb59a251U, 0xc771b65bU, 0xf3a251a6U,
 259         0xfe5fa1deU, 0xad3d9048U, 0xd79a4da8U, 0x715e2f99U,
 260         0xe04babdbU, 0xacc86432U, 0x95e673b7U, 0x32d7e5fcU,
 261         0x70abdbe3U, 0x6342219eU, 0x417e3f91U, 0x7d562b9bU,
 262         0x76afd9e2U, 0xbdd66bbbU, 0x9b198241U, 0x79a5dc6eU,
 263         0xf9ae57a5U, 0x800b8bcbU, 0x67b1d66bU, 0x596e3795U,
 264         0xe1be5fa1U, 0x10ebfbf3U, 0x81fe7fb1U, 0x0c080402U,
 265         0x921785ccU, 0xa23795c4U, 0x4e743a1dU, 0x78502814U,
 266         0xb02b9bc3U, 0x5791c663U, 0xe64fa9daU, 0xd369ba5dU,
 267         0xdf61be5fU, 0xf257a5dcU, 0x13e9fa7dU, 0x941387cdU,
 268         0x1fe1fe7fU, 0xc175b45aU, 0x75add86cU, 0xd56db85cU,
 269         0x08fbf3f7U, 0xd4984c26U, 0x38dbe3ffU, 0x5493c7edU,
 270         0x4a87cde8U, 0x694e279dU, 0x7fa1de6fU, 0x0302018eU,
 271         0x56643219U, 0xe7ba5da0U, 0x1ae7fdf0U, 0x111e0f89U,
 272         0x223c1e0fU, 0x121c0e07U, 0xc58643afU, 0x20cbebfbU,
 273         0x30201008U, 0x7e542a15U, 0x2e341a0dU, 0x18100804U,
 274         0x06040201U, 0x458dc864U, 0xf85ba3dfU, 0x29c5ec76U,
 275         0x0bf9f279U, 0xf453a7ddU, 0x8ef47a3dU, 0x74582c16U,
 276         0x82fc7e3fU, 0xb2dc6e37U, 0x73a9da6dU, 0x90e07038U,
 277         0xb1de6fb9U, 0x37d1e673U, 0x4c83cfe9U, 0xbed46a35U,
 278         0xe349aa55U, 0x3bd9e271U, 0x07f1f67bU, 0x0f0a058cU,
 279         0x31d5e472U, 0x171a0d88U, 0x0efff1f6U, 0xfca8542aU,
 280         0x84f87c3eU, 0xd965bc5eU, 0xd29c4e27U, 0x89058c46U,
 281         0x2830180cU, 0x4389ca65U, 0x6dbdd068U, 0x5b99c261U,
 282         0x0a0c0603U, 0xbc239fc1U, 0xef41ae57U, 0xce7fb1d6U,
 283         0xec43afd9U, 0xcd7db058U, 0xea47add8U, 0x4985cc66U,
 284         0xc87bb3d7U, 0x9ce8743aU, 0x8a078dc8U, 0x88f0783cU,
 285         0x26cfe9faU, 0x53623196U, 0xf5a653a7U, 0x775a2d98U,
 286         0x5297c5ecU, 0xb7da6db8U, 0xa83b93c7U, 0xc38241aeU,
 287         0x6bb9d269U, 0xa731964bU, 0xdd964babU, 0xd19e4fa9U,
 288         0x4f81ce67U, 0x3c28140aU, 0x8f018e47U, 0x16eff9f2U,
 289         0x99ee77b5U, 0xcc884422U, 0x64b3d7e5U, 0x5e9fc1eeU,
 290         0xa3c261beU, 0xfaac562bU, 0x213e1f81U, 0x6c482412U,
 291         0x2d361b83U, 0x5a6c361bU, 0x24381c0eU, 0xca8c4623U,
 292         0x04f3f7f5U, 0x83098a45U, 0xc6844221U, 0x9e1f81ceU,
 293         0xab399249U, 0xe8b0582cU, 0x2cc3eff9U, 0x6ebfd1e6U,
 294         0x93e271b6U, 0xf0a05028U, 0x725c2e17U, 0x2b321982U,
 295         0x5c68341aU, 0x1d160b8bU, 0x3edfe1feU, 0x1b12098aU,
 296         0x36241209U, 0x8c038fc9U, 0x35261387U, 0xb9259c4eU,
 297         0x7ca3dfe1U, 0xe4b85c2eU, 0x62b7d5e4U, 0x7aa7dde0U,
 298         0x408bcbebU, 0x477a3d90U, 0xffaa55a4U, 0x44783c1eU,
 299         0x392e1785U, 0x5d9dc060U, 0x00000000U, 0xde944a25U,
 300         0x02f7f5f4U, 0x1ce3fff1U, 0x5f6a3594U, 0x3a2c160bU,
 301         0x68bbd3e7U, 0x23c9ea75U, 0x589bc3efU, 0xb8d06834U,
 302         0xa6c46231U, 0xc277b5d4U, 0xda67bdd0U, 0x33221186U,
 303         0x19e5fc7eU, 0xc98e47adU, 0x34d3e7fdU, 0xf6a45229U,
 304         0xa0c06030U, 0x9aec763bU, 0x6546239fU, 0x2ac7edf8U,
 305         0xae3f91c6U, 0x6a4c2613U, 0x14180c06U, 0x1e140a05U,
 306         0xa43397c5U, 0x66442211U, 0x2fc1ee77U, 0x15edf87cU,
 307         0x01f5f47aU, 0x0dfdf078U, 0xb4d86c36U, 0x4870381cU,
 308         0x96e47239U, 0xcb79b259U, 0x50603018U, 0xe945ac56U,
 309         0x8df67bb3U, 0x87fa7db0U, 0xd8904824U, 0xc0804020U,
 310         0x8bf279b2U, 0x4b723992U, 0xedb65ba3U, 0xba279dc0U,
 311         0x850d8844U, 0x5195c462U, 0x60402010U, 0x9fea75b4U,
 312         0x3f2a1584U, 0x97118643U, 0x4d763b93U, 0xb62f99c2U,
 313         0xa135944aU, 0xa9ce67bdU, 0x0506038fU, 0xeeb45a2dU,
 314         0xafca65bcU, 0x6f4a259cU, 0x61b5d46aU, 0x9d1d8040U,
 315         0x981b83cfU, 0xebb259a2U, 0x273a1d80U, 0xbf219e4fU,
 316         0x427c3e1fU, 0x860f89caU, 0xdb9249aaU, 0x91158442U,
 317 };
 318
 319 static const u32 T4[256] = {
 320         0xbabababaU, 0x54545454U, 0x2f2f2f2fU, 0x74747474U,
 321         0x53535353U, 0xd3d3d3d3U, 0xd2d2d2d2U, 0x4d4d4d4dU,
 322         0x50505050U, 0xacacacacU, 0x8d8d8d8dU, 0xbfbfbfbfU,
 323         0x70707070U, 0x52525252U, 0x9a9a9a9aU, 0x4c4c4c4cU,
 324         0xeaeaeaeaU, 0xd5d5d5d5U, 0x97979797U, 0xd1d1d1d1U,
 325         0x33333333U, 0x51515151U, 0x5b5b5b5bU, 0xa6a6a6a6U,
 326         0xdedededeU, 0x48484848U, 0xa8a8a8a8U, 0x99999999U,
 327         0xdbdbdbdbU, 0x32323232U, 0xb7b7b7b7U, 0xfcfcfcfcU,
 328         0xe3e3e3e3U, 0x9e9e9e9eU, 0x91919191U, 0x9b9b9b9bU,
 329         0xe2e2e2e2U, 0xbbbbbbbbU, 0x41414141U, 0x6e6e6e6eU,
 330         0xa5a5a5a5U, 0xcbcbcbcbU, 0x6b6b6b6bU, 0x95959595U,
 331         0xa1a1a1a1U, 0xf3f3f3f3U, 0xb1b1b1b1U, 0x02020202U,
 332         0xccccccccU, 0xc4c4c4c4U, 0x1d1d1d1dU, 0x14141414U,
 333         0xc3c3c3c3U, 0x63636363U, 0xdadadadaU, 0x5d5d5d5dU,
 334         0x5f5f5f5fU, 0xdcdcdcdcU, 0x7d7d7d7dU, 0xcdcdcdcdU,
 335         0x7f7f7f7fU, 0x5a5a5a5aU, 0x6c6c6c6cU, 0x5c5c5c5cU,
 336         0xf7f7f7f7U, 0x26262626U, 0xffffffffU, 0xededededU,
 337         0xe8e8e8e8U, 0x9d9d9d9dU, 0x6f6f6f6fU, 0x8e8e8e8eU,
 338         0x19191919U, 0xa0a0a0a0U, 0xf0f0f0f0U, 0x89898989U,
 339         0x0f0f0f0fU, 0x07070707U, 0xafafafafU, 0xfbfbfbfbU,
 340         0x08080808U, 0x15151515U, 0x0d0d0d0dU, 0x04040404U,
 341         0x01010101U, 0x64646464U, 0xdfdfdfdfU, 0x76767676U,
 342         0x79797979U, 0xddddddddU, 0x3d3d3d3dU, 0x16161616U,
 343         0x3f3f3f3fU, 0x37373737U, 0x6d6d6d6dU, 0x38383838U,
 344         0xb9b9b9b9U, 0x73737373U, 0xe9e9e9e9U, 0x35353535U,
 345         0x55555555U, 0x71717171U, 0x7b7b7b7bU, 0x8c8c8c8cU,
 346         0x72727272U, 0x88888888U, 0xf6f6f6f6U, 0x2a2a2a2aU,
 347         0x3e3e3e3eU, 0x5e5e5e5eU, 0x27272727U, 0x46464646U,
 348         0x0c0c0c0cU, 0x65656565U, 0x68686868U, 0x61616161U,
 349         0x03030303U, 0xc1c1c1c1U, 0x57575757U, 0xd6d6d6d6U,
 350         0xd9d9d9d9U, 0x58585858U, 0xd8d8d8d8U, 0x66666666U,
 351         0xd7d7d7d7U, 0x3a3a3a3aU, 0xc8c8c8c8U, 0x3c3c3c3cU,
 352         0xfafafafaU, 0x96969696U, 0xa7a7a7a7U, 0x98989898U,
 353         0xececececU, 0xb8b8b8b8U, 0xc7c7c7c7U, 0xaeaeaeaeU,
 354         0x69696969U, 0x4b4b4b4bU, 0xababababU, 0xa9a9a9a9U,
 355         0x67676767U, 0x0a0a0a0aU, 0x47474747U, 0xf2f2f2f2U,
 356         0xb5b5b5b5U, 0x22222222U, 0xe5e5e5e5U, 0xeeeeeeeeU,
 357         0xbebebebeU, 0x2b2b2b2bU, 0x81818181U, 0x12121212U,
 358         0x83838383U, 0x1b1b1b1bU, 0x0e0e0e0eU, 0x23232323U,
 359         0xf5f5f5f5U, 0x45454545U, 0x21212121U, 0xcecececeU,
 360         0x49494949U, 0x2c2c2c2cU, 0xf9f9f9f9U, 0xe6e6e6e6U,
 361         0xb6b6b6b6U, 0x28282828U, 0x17171717U, 0x82828282U,
 362         0x1a1a1a1aU, 0x8b8b8b8bU, 0xfefefefeU, 0x8a8a8a8aU,
 363         0x09090909U, 0xc9c9c9c9U, 0x87878787U, 0x4e4e4e4eU,
 364         0xe1e1e1e1U, 0x2e2e2e2eU, 0xe4e4e4e4U, 0xe0e0e0e0U,
 365         0xebebebebU, 0x90909090U, 0xa4a4a4a4U, 0x1e1e1e1eU,
 366         0x85858585U, 0x60606060U, 0x00000000U, 0x25252525U,
 367         0xf4f4f4f4U, 0xf1f1f1f1U, 0x94949494U, 0x0b0b0b0bU,
 368         0xe7e7e7e7U, 0x75757575U, 0xefefefefU, 0x34343434U,
 369         0x31313131U, 0xd4d4d4d4U, 0xd0d0d0d0U, 0x86868686U,
 370         0x7e7e7e7eU, 0xadadadadU, 0xfdfdfdfdU, 0x29292929U,
 371         0x30303030U, 0x3b3b3b3bU, 0x9f9f9f9fU, 0xf8f8f8f8U,
 372         0xc6c6c6c6U, 0x13131313U, 0x06060606U, 0x05050505U,
 373         0xc5c5c5c5U, 0x11111111U, 0x77777777U, 0x7c7c7c7cU,
 374         0x7a7a7a7aU, 0x78787878U, 0x36363636U, 0x1c1c1c1cU,
 375         0x39393939U, 0x59595959U, 0x18181818U, 0x56565656U,
 376         0xb3b3b3b3U, 0xb0b0b0b0U, 0x24242424U, 0x20202020U,
 377         0xb2b2b2b2U, 0x92929292U, 0xa3a3a3a3U, 0xc0c0c0c0U,
 378         0x44444444U, 0x62626262U, 0x10101010U, 0xb4b4b4b4U,
 379         0x84848484U, 0x43434343U, 0x93939393U, 0xc2c2c2c2U,
 380         0x4a4a4a4aU, 0xbdbdbdbdU, 0x8f8f8f8fU, 0x2d2d2d2dU,
 381         0xbcbcbcbcU, 0x9c9c9c9cU, 0x6a6a6a6aU, 0x40404040U,
 382         0xcfcfcfcfU, 0xa2a2a2a2U, 0x80808080U, 0x4f4f4f4fU,
 383         0x1f1f1f1fU, 0xcacacacaU, 0xaaaaaaaaU, 0x42424242U,
 384 };
 385
 386 static const u32 T5[256] = {
 387         0x00000000U, 0x01020608U, 0x02040c10U, 0x03060a18U,
 388         0x04081820U, 0x050a1e28U, 0x060c1430U, 0x070e1238U,
 389         0x08103040U, 0x09123648U, 0x0a143c50U, 0x0b163a58U,
 390         0x0c182860U, 0x0d1a2e68U, 0x0e1c2470U, 0x0f1e2278U,
 391         0x10206080U, 0x11226688U, 0x12246c90U, 0x13266a98U,
 392         0x142878a0U, 0x152a7ea8U, 0x162c74b0U, 0x172e72b8U,
 393         0x183050c0U, 0x193256c8U, 0x1a345cd0U, 0x1b365ad8U,
 394         0x1c3848e0U, 0x1d3a4ee8U, 0x1e3c44f0U, 0x1f3e42f8U,
 395         0x2040c01dU, 0x2142c615U, 0x2244cc0dU, 0x2346ca05U,
 396         0x2448d83dU, 0x254ade35U, 0x264cd42dU, 0x274ed225U,
 397         0x2850f05dU, 0x2952f655U, 0x2a54fc4dU, 0x2b56fa45U,
 398         0x2c58e87dU, 0x2d5aee75U, 0x2e5ce46dU, 0x2f5ee265U,
 399         0x3060a09dU, 0x3162a695U, 0x3264ac8dU, 0x3366aa85U,
 400         0x3468b8bdU, 0x356abeb5U, 0x366cb4adU, 0x376eb2a5U,
 401         0x387090ddU, 0x397296d5U, 0x3a749ccdU, 0x3b769ac5U,
 402         0x3c7888fdU, 0x3d7a8ef5U, 0x3e7c84edU, 0x3f7e82e5U,
 403         0x40809d3aU, 0x41829b32U, 0x4284912aU, 0x43869722U,
 404         0x4488851aU, 0x458a8312U, 0x468c890aU, 0x478e8f02U,
 405         0x4890ad7aU, 0x4992ab72U, 0x4a94a16aU, 0x4b96a762U,
 406         0x4c98b55aU, 0x4d9ab352U, 0x4e9cb94aU, 0x4f9ebf42U,
 407         0x50a0fdbaU, 0x51a2fbb2U, 0x52a4f1aaU, 0x53a6f7a2U,
 408         0x54a8e59aU, 0x55aae392U, 0x56ace98aU, 0x57aeef82U,
 409         0x58b0cdfaU, 0x59b2cbf2U, 0x5ab4c1eaU, 0x5bb6c7e2U,
 410         0x5cb8d5daU, 0x5dbad3d2U, 0x5ebcd9caU, 0x5fbedfc2U,
 411         0x60c05d27U, 0x61c25b2fU, 0x62c45137U, 0x63c6573fU,
 412         0x64c84507U, 0x65ca430fU, 0x66cc4917U, 0x67ce4f1fU,
 413         0x68d06d67U, 0x69d26b6fU, 0x6ad46177U, 0x6bd6677fU,
 414         0x6cd87547U, 0x6dda734fU, 0x6edc7957U, 0x6fde7f5fU,
 415         0x70e03da7U, 0x71e23bafU, 0x72e431b7U, 0x73e637bfU,
 416         0x74e82587U, 0x75ea238fU, 0x76ec2997U, 0x77ee2f9fU,
 417         0x78f00de7U, 0x79f20befU, 0x7af401f7U, 0x7bf607ffU,
 418         0x7cf815c7U, 0x7dfa13cfU, 0x7efc19d7U, 0x7ffe1fdfU,
 419         0x801d2774U, 0x811f217cU, 0x82192b64U, 0x831b2d6cU,
 420         0x84153f54U, 0x8517395cU, 0x86113344U, 0x8713354cU,
 421         0x880d1734U, 0x890f113cU, 0x8a091b24U, 0x8b0b1d2cU,
 422         0x8c050f14U, 0x8d07091cU, 0x8e010304U, 0x8f03050cU,
 423         0x903d47f4U, 0x913f41fcU, 0x92394be4U, 0x933b4decU,
 424         0x94355fd4U, 0x953759dcU, 0x963153c4U, 0x973355ccU,
 425         0x982d77b4U, 0x992f71bcU, 0x9a297ba4U, 0x9b2b7dacU,
 426         0x9c256f94U, 0x9d27699cU, 0x9e216384U, 0x9f23658cU,
 427         0xa05de769U, 0xa15fe161U, 0xa259eb79U, 0xa35bed71U,
 428         0xa455ff49U, 0xa557f941U, 0xa651f359U, 0xa753f551U,
 429         0xa84dd729U, 0xa94fd121U, 0xaa49db39U, 0xab4bdd31U,
 430         0xac45cf09U, 0xad47c901U, 0xae41c319U, 0xaf43c511U,
 431         0xb07d87e9U, 0xb17f81e1U, 0xb2798bf9U, 0xb37b8df1U,
 432         0xb4759fc9U, 0xb57799c1U, 0xb67193d9U, 0xb77395d1U,
 433         0xb86db7a9U, 0xb96fb1a1U, 0xba69bbb9U, 0xbb6bbdb1U,
 434         0xbc65af89U, 0xbd67a981U, 0xbe61a399U, 0xbf63a591U,
 435         0xc09dba4eU, 0xc19fbc46U, 0xc299b65eU, 0xc39bb056U,
 436         0xc495a26eU, 0xc597a466U, 0xc691ae7eU, 0xc793a876U,
 437         0xc88d8a0eU, 0xc98f8c06U, 0xca89861eU, 0xcb8b8016U,
 438         0xcc85922eU, 0xcd879426U, 0xce819e3eU, 0xcf839836U,
 439         0xd0bddaceU, 0xd1bfdcc6U, 0xd2b9d6deU, 0xd3bbd0d6U,
 440         0xd4b5c2eeU, 0xd5b7c4e6U, 0xd6b1cefeU, 0xd7b3c8f6U,
 441         0xd8adea8eU, 0xd9afec86U, 0xdaa9e69eU, 0xdbabe096U,
 442         0xdca5f2aeU, 0xdda7f4a6U, 0xdea1febeU, 0xdfa3f8b6U,
 443         0xe0dd7a53U, 0xe1df7c5bU, 0xe2d97643U, 0xe3db704bU,
 444         0xe4d56273U, 0xe5d7647bU, 0xe6d16e63U, 0xe7d3686bU,
 445         0xe8cd4a13U, 0xe9cf4c1bU, 0xeac94603U, 0xebcb400bU,
 446         0xecc55233U, 0xedc7543bU, 0xeec15e23U, 0xefc3582bU,
 447         0xf0fd1ad3U, 0xf1ff1cdbU, 0xf2f916c3U, 0xf3fb10cbU,
 448         0xf4f502f3U, 0xf5f704fbU, 0xf6f10ee3U, 0xf7f308ebU,
 449         0xf8ed2a93U, 0xf9ef2c9bU, 0xfae92683U, 0xfbeb208bU,
 450         0xfce532b3U, 0xfde734bbU, 0xfee13ea3U, 0xffe338abU,
 451 };
 452
 453 static const u32 rc[] = {
 454         0xba542f74U, 0x53d3d24dU, 0x50ac8dbfU, 0x70529a4cU,
 455         0xead597d1U, 0x33515ba6U, 0xde48a899U, 0xdb32b7fcU,
 456         0xe39e919bU, 0xe2bb416eU, 0xa5cb6b95U, 0xa1f3b102U,
 457         0xccc41d14U, 0xc363da5dU, 0x5fdc7dcdU, 0x7f5a6c5cU,
 458         0xf726ffedU, 0xe89d6f8eU, 0x19a0f089U,
 459 };
 460
 461 static int anubis_setkey(void *ctx_arg, const u8 *in_key,
 462                          unsigned int key_len, u32 *flags)
 463 {
 464
 465         int N, R, i, pos, r;
 466         u32 kappa[ANUBIS_MAX_N];
 467         u32 inter[ANUBIS_MAX_N];
 468
 469         struct anubis_ctx *ctx = ctx_arg;
 470
 471         switch (key_len)
 472         {
 473                 case 16: case 20: case 24: case 28:
 474                 case 32: case 36: case 40:
 475                         break;
 476                 default:
 477                         *flags |= CRYPTO_TFM_RES_BAD_KEY_LEN;
 478                         return - EINVAL;
 479         }
 480
 481         ctx->key_len = key_len * 8;
 482         N = ctx->key_len >> 5;
 483         ctx->R = R = 8 + N;
 484
 485         /* * map cipher key to initial key state (mu): */
 486                 for (i = 0, pos = 0; i < N; i++, pos += 4) {
 487                 kappa[i] =
 488                         (in_key[pos    ] << 24) ^
 489                         (in_key[pos + 1] << 16) ^
 490                         (in_key[pos + 2] <<  8) ^
 491                         (in_key[pos + 3]      );
 492         }
 493
 494         /*
 495          * generate R + 1 round keys:
 496          */
 497         for (r = 0; r <= R; r++) {
 498                 u32 K0, K1, K2, K3;
 499                 /*
 500                  * generate r-th round key K^r:
 501                  */
 502                 K0 = T4[(kappa[N - 1] >> 24)       ];
 503                 K1 = T4[(kappa[N - 1] >> 16) & 0xff];
 504                 K2 = T4[(kappa[N - 1] >>  8) & 0xff];
 505                 K3 = T4[(kappa[N - 1]      ) & 0xff];
 506                 for (i = N - 2; i >= 0; i--) {
 507                         K0 = T4[(kappa[i] >> 24)       ] ^
 508                                 (T5[(K0 >> 24)       ] & 0xff000000U) ^
 509                                 (T5[(K0 >> 16) & 0xff] & 0x00ff0000U) ^
 510                                 (T5[(K0 >>  8) & 0xff] & 0x0000ff00U) ^
 511                                 (T5[(K0      ) & 0xff] & 0x000000ffU);
 512                         K1 = T4[(kappa[i] >> 16) & 0xff] ^
 513                                 (T5[(K1 >> 24)       ] & 0xff000000U) ^
 514                                 (T5[(K1 >> 16) & 0xff] & 0x00ff0000U) ^
 515                                 (T5[(K1 >>  8) & 0xff] & 0x0000ff00U) ^
 516                                 (T5[(K1      ) & 0xff] & 0x000000ffU);
 517                         K2 = T4[(kappa[i] >>  8) & 0xff] ^
 518                                 (T5[(K2 >> 24)       ] & 0xff000000U) ^
 519                                 (T5[(K2 >> 16) & 0xff] & 0x00ff0000U) ^
 520                                 (T5[(K2 >>  8) & 0xff] & 0x0000ff00U) ^
 521                                 (T5[(K2      ) & 0xff] & 0x000000ffU);
 522                         K3 = T4[(kappa[i]      ) & 0xff] ^
 523                                 (T5[(K3 >> 24)       ] & 0xff000000U) ^
 524                                 (T5[(K3 >> 16) & 0xff] & 0x00ff0000U) ^
 525                                 (T5[(K3 >>  8) & 0xff] & 0x0000ff00U) ^
 526                                 (T5[(K3      ) & 0xff] & 0x000000ffU);
 527                 }
 528
 529                 ctx->E[r][0] = K0;
 530                 ctx->E[r][1] = K1;
 531                 ctx->E[r][2] = K2;
 532                 ctx->E[r][3] = K3;
 533
 534                 /*
 535                  * compute kappa^{r+1} from kappa^r:
 536                  */
 537                 if (r == R) {
 538                         break;
 539                 }
 540                 for (i = 0; i < N; i++) {
 541                         int j = i;
 542                         inter[i]  = T0[(kappa[j--] >> 24)       ];
 543                         if (j < 0) j = N - 1;
 544                         inter[i] ^= T1[(kappa[j--] >> 16) & 0xff];
 545                         if (j < 0) j = N - 1;
 546                         inter[i] ^= T2[(kappa[j--] >>  8) & 0xff];
 547                         if (j < 0) j = N - 1;
 548                         inter[i] ^= T3[(kappa[j  ]      ) & 0xff];
 549                 }
 550                 kappa[0] = inter[0] ^ rc[r];
 551                 for (i = 1; i < N; i++) {
 552                         kappa[i] = inter[i];
 553                 }
 554         }
 555
 556         /*
 557          * generate inverse key schedule: K'^0 = K^R, K'^R =
 558          *                                K^0, K'^r = theta(K^{R-r}):
 559          */
 560         for (i = 0; i < 4; i++) {
 561                 ctx->D[0][i] = ctx->E[R][i];
 562                 ctx->D[R][i] = ctx->E[0][i];
 563         }
 564         for (r = 1; r < R; r++) {
 565                 for (i = 0; i < 4; i++) {
 566                         u32 v = ctx->E[R - r][i];
 567                         ctx->D[r][i] =
 568                                 T0[T4[(v >> 24)       ] & 0xff] ^
 569                                 T1[T4[(v >> 16) & 0xff] & 0xff] ^
 570                                 T2[T4[(v >>  8) & 0xff] & 0xff] ^
 571                                 T3[T4[(v      ) & 0xff] & 0xff];
 572                 }
 573         }
 574
 575         return 0;
 576 }
 577
 578 static void anubis_crypt(u32 roundKey[ANUBIS_MAX_ROUNDS + 1][4],
 579                 u8 *ciphertext, const u8 *plaintext, const int R)
 580 {
 581         int i, pos, r;
 582         u32 state[4];
 583         u32 inter[4];
 584
 585         /*
 586          * map plaintext block to cipher state (mu)
 587          * and add initial round key (sigma[K^0]):
 588          */
 589         for (i = 0, pos = 0; i < 4; i++, pos += 4) {
 590                 state[i] =
 591                         (plaintext[pos    ] << 24) ^
 592                         (plaintext[pos + 1] << 16) ^
 593                         (plaintext[pos + 2] <<  8) ^
 594                         (plaintext[pos + 3]      ) ^
 595                         roundKey[0][i];
 596         }
 597
 598         /*
 599          * R - 1 full rounds:
 600          */
 601
 602         for (r = 1; r < R; r++) {
 603                 inter[0] =
 604                         T0[(state[0] >> 24)       ] ^
 605                         T1[(state[1] >> 24)       ] ^
 606                         T2[(state[2] >> 24)       ] ^
 607                         T3[(state[3] >> 24)       ] ^
 608                         roundKey[r][0];
 609                 inter[1] =
 610                         T0[(state[0] >> 16) & 0xff] ^
 611                         T1[(state[1] >> 16) & 0xff] ^
 612                         T2[(state[2] >> 16) & 0xff] ^
 613                         T3[(state[3] >> 16) & 0xff] ^
 614                         roundKey[r][1];
 615                 inter[2] =
 616                         T0[(state[0] >>  8) & 0xff] ^
 617                         T1[(state[1] >>  8) & 0xff] ^
 618                         T2[(state[2] >>  8) & 0xff] ^
 619                         T3[(state[3] >>  8) & 0xff] ^
 620                         roundKey[r][2];
 621                 inter[3] =
 622                         T0[(state[0]      ) & 0xff] ^
 623                         T1[(state[1]      ) & 0xff] ^
 624                         T2[(state[2]      ) & 0xff] ^
 625                         T3[(state[3]      ) & 0xff] ^
 626                         roundKey[r][3];
 627                 state[0] = inter[0];
 628                 state[1] = inter[1];
 629                 state[2] = inter[2];
 630                 state[3] = inter[3];
 631         }
 632
 633         /*
 634          * last round:
 635          */
 636
 637         inter[0] =
 638                 (T0[(state[0] >> 24)       ] & 0xff000000U) ^
 639                 (T1[(state[1] >> 24)       ] & 0x00ff0000U) ^
 640                 (T2[(state[2] >> 24)       ] & 0x0000ff00U) ^
 641                 (T3[(state[3] >> 24)       ] & 0x000000ffU) ^
 642                 roundKey[R][0];
 643         inter[1] =
 644                 (T0[(state[0] >> 16) & 0xff] & 0xff000000U) ^
 645                 (T1[(state[1] >> 16) & 0xff] & 0x00ff0000U) ^
 646                 (T2[(state[2] >> 16) & 0xff] & 0x0000ff00U) ^
 647                 (T3[(state[3] >> 16) & 0xff] & 0x000000ffU) ^
 648                 roundKey[R][1];
 649         inter[2] =
 650                 (T0[(state[0] >>  8) & 0xff] & 0xff000000U) ^
 651                 (T1[(state[1] >>  8) & 0xff] & 0x00ff0000U) ^
 652                 (T2[(state[2] >>  8) & 0xff] & 0x0000ff00U) ^
 653                 (T3[(state[3] >>  8) & 0xff] & 0x000000ffU) ^
 654                 roundKey[R][2];
 655         inter[3] =
 656                 (T0[(state[0]      ) & 0xff] & 0xff000000U) ^
 657                 (T1[(state[1]      ) & 0xff] & 0x00ff0000U) ^
 658                 (T2[(state[2]      ) & 0xff] & 0x0000ff00U) ^
 659                 (T3[(state[3]      ) & 0xff] & 0x000000ffU) ^
 660                 roundKey[R][3];
 661
 662         /*
 663          * map cipher state to ciphertext block (mu^{-1}):
 664          */
 665
 666         for (i = 0, pos = 0; i < 4; i++, pos += 4) {
 667                 u32 w = inter[i];
 668                 ciphertext[pos    ] = (u8)(w >> 24);
 669                 ciphertext[pos + 1] = (u8)(w >> 16);
 670                 ciphertext[pos + 2] = (u8)(w >>  8);
 671                 ciphertext[pos + 3] = (u8)(w      );
 672         }
 673 }
 674
 675 static void anubis_encrypt(void *ctx_arg, u8 *dst, const u8 *src)
 676 {
 677         struct anubis_ctx *ctx = ctx_arg;
 678         anubis_crypt(ctx->E, dst, src, ctx->R);
 679 }
 680
 681 static void anubis_decrypt(void *ctx_arg, u8 *dst, const u8 *src)
 682 {
 683         struct anubis_ctx *ctx = ctx_arg;
 684         anubis_crypt(ctx->D, dst, src, ctx->R);
 685 }
 686
 687 static struct crypto_alg anubis_alg = {
 688         .cra_name               =       "anubis",
 689         .cra_flags              =       CRYPTO_ALG_TYPE_CIPHER,
 690         .cra_blocksize          =       ANUBIS_BLOCK_SIZE,
 691         .cra_ctxsize            =       sizeof (struct anubis_ctx),
 692         .cra_module             =       THIS_MODULE,
 693         .cra_list               =       LIST_HEAD_INIT(anubis_alg.cra_list),
 694         .cra_u                  =       { .cipher = {
 695         .cia_min_keysize        =       ANUBIS_MIN_KEY_SIZE,
 696         .cia_max_keysize        =       ANUBIS_MAX_KEY_SIZE,
 697         .cia_setkey             =       anubis_setkey,
 698         .cia_encrypt            =       anubis_encrypt,
 699         .cia_decrypt            =       anubis_decrypt } }
 700 };
 701
 702 static int __init init(void)
 703 {
 704         int ret = 0;
 705
 706         ret = crypto_register_alg(&anubis_alg);
 707         return ret;
 708 }
 709
 710 static void __exit fini(void)
 711 {
 712         crypto_unregister_alg(&anubis_alg);
 713 }
 714
 715 module_init(init);
 716 module_exit(fini);
 717
 718 MODULE_LICENSE("GPL");
 719 MODULE_DESCRIPTION("Anubis Cryptographic Algorithm");