43 /* Use the low bit in the context's inf.b[2] as a flag to
47 #define MARK_AS_ENCRYPTION_CTX(cx) (cx)->inf.b[2] |= (uint8_t)0x01
48 #define MARK_AS_DECRYPTION_CTX(cx) (cx)->inf.b[2] &= (uint8_t)0xfe
85 #define ke4(k,i) \  argument
86 {   k[4*(i)+4] = ss[0] ^= ls_box(ss[3],3) ^ t_use(r,c)[i]; \
87     k[4*(i)+5] = ss[1] ^= ss[0]; \
88     k[4*(i)+6] = ss[2] ^= ss[1]; \
89     k[4*(i)+7] = ss[3] ^= ss[2]; \
97     cx->ks[2] = ss[2] = word_in(key, 2);  in aes_xi()
102     ke4(cx->ks, 2);  ke4(cx->ks, 3);  in aes_xi()
128 #define kef6(k,i) \  argument
129 {   k[6*(i)+ 6] = ss[0] ^= ls_box(ss[5],3) ^ t_use(r,c)[i]; \
130     k[6*(i)+ 7] = ss[1] ^= ss[0]; \
131     k[6*(i)+ 8] = ss[2] ^= ss[1]; \
132     k[6*(i)+ 9] = ss[3] ^= ss[2]; \
135 #define ke6(k,i) \  argument
136 {   kef6(k,i); \
137     k[6*(i)+10] = ss[4] ^= ss[3]; \
138     k[6*(i)+11] = ss[5] ^= ss[4]; \
146     cx->ks[2] = ss[2] = word_in(key, 2);  in aes_xi()
153     ke6(cx->ks, 2);  ke6(cx->ks, 3);  in aes_xi()
178 #define kef8(k,i) \  argument
179 {   k[8*(i)+ 8] = ss[0] ^= ls_box(ss[7],3) ^ t_use(r,c)[i]; \
180     k[8*(i)+ 9] = ss[1] ^= ss[0]; \
181     k[8*(i)+10] = ss[2] ^= ss[1]; \
182     k[8*(i)+11] = ss[3] ^= ss[2]; \
185 #define ke8(k,i) \  argument
186 {   kef8(k,i); \
187     k[8*(i)+12] = ss[4] ^= ls_box(ss[3],0); \
188     k[8*(i)+13] = ss[5] ^= ss[4]; \
189     k[8*(i)+14] = ss[6] ^= ss[5]; \
190     k[8*(i)+15] = ss[7] ^= ss[6]; \
198     cx->ks[2] = ss[2] = word_in(key, 2);  in aes_xi()
207     ke8(cx->ks, 2); ke8(cx->ks, 3);  in aes_xi()
237 #define v(n,i)  ((n) - (i) + 2 * ((i) & 3))
253 #define k4e(k,i) \  argument
254 {   k[v(40,(4*(i))+4)] = ss[0] ^= ls_box(ss[3],3) ^ t_use(r,c)[i]; \
255     k[v(40,(4*(i))+5)] = ss[1] ^= ss[0]; \
256     k[v(40,(4*(i))+6)] = ss[2] ^= ss[1]; \
257     k[v(40,(4*(i))+7)] = ss[3] ^= ss[2]; \
262 #define kdf4(k,i) \  argument
263 {   ss[0] = ss[0] ^ ss[2] ^ ss[1] ^ ss[3]; \
265     ss[2] = ss[2] ^ ss[3]; \
268     ss[4] ^= k[v(40,(4*(i)))];   k[v(40,(4*(i))+4)] = ff(ss[4]); \
269     ss[4] ^= k[v(40,(4*(i))+1)]; k[v(40,(4*(i))+5)] = ff(ss[4]); \
270     ss[4] ^= k[v(40,(4*(i))+2)]; k[v(40,(4*(i))+6)] = ff(ss[4]); \
271     ss[4] ^= k[v(40,(4*(i))+3)]; k[v(40,(4*(i))+7)] = ff(ss[4]); \
274 #define kd4(k,i) \  argument
277     k[v(40,(4*(i))+4)] = ss[4] ^= k[v(40,(4*(i)))]; \
278     k[v(40,(4*(i))+5)] = ss[4] ^= k[v(40,(4*(i))+1)]; \
279     k[v(40,(4*(i))+6)] = ss[4] ^= k[v(40,(4*(i))+2)]; \
280     k[v(40,(4*(i))+7)] = ss[4] ^= k[v(40,(4*(i))+3)]; \
283 #define kdl4(k,i) \  argument
285     k[v(40,(4*(i))+4)] = (ss[0] ^= ss[1]) ^ ss[2] ^ ss[3]; \
286     k[v(40,(4*(i))+5)] = ss[1] ^ ss[3]; \
287     k[v(40,(4*(i))+6)] = ss[0]; \
288     k[v(40,(4*(i))+7)] = ss[1]; \
293 #define kdf4(k,i) \  argument
294 {   ss[0] ^= ls_box(ss[3],3) ^ t_use(r,c)[i]; k[v(40,(4*(i))+ 4)] = ff(ss[0]); \
295     ss[1] ^= ss[0]; k[v(40,(4*(i))+ 5)] = ff(ss[1]); \
296     ss[2] ^= ss[1]; k[v(40,(4*(i))+ 6)] = ff(ss[2]); \
297     ss[3] ^= ss[2]; k[v(40,(4*(i))+ 7)] = ff(ss[3]); \
300 #define kd4(k,i) \  argument
302     ss[0] ^= ss[4]; ss[4] = ff(ss[4]); k[v(40,(4*(i))+ 4)] = ss[4] ^= k[v(40,(4*(i)))]; \
303     ss[1] ^= ss[0]; k[v(40,(4*(i))+ 5)] = ss[4] ^= k[v(40,(4*(i))+ 1)]; \
304     ss[2] ^= ss[1]; k[v(40,(4*(i))+ 6)] = ss[4] ^= k[v(40,(4*(i))+ 2)]; \
305     ss[3] ^= ss[2]; k[v(40,(4*(i))+ 7)] = ss[4] ^= k[v(40,(4*(i))+ 3)]; \
308 #define kdl4(k,i) \  argument
309 {   ss[0] ^= ls_box(ss[3],3) ^ t_use(r,c)[i]; k[v(40,(4*(i))+ 4)] = ss[0]; \
310     ss[1] ^= ss[0]; k[v(40,(4*(i))+ 5)] = ss[1]; \
311     ss[2] ^= ss[1]; k[v(40,(4*(i))+ 6)] = ss[2]; \
312     ss[3] ^= ss[2]; k[v(40,(4*(i))+ 7)] = ss[3]; \
325     cx->ks[v(40,(2))] = ss[2] = word_in(key, 2);  in aes_xi()
330      kd4(cx->ks, 2);  kd4(cx->ks, 3);  in aes_xi()
359 #define k6ef(k,i) \  argument
360 {   k[v(48,(6*(i))+ 6)] = ss[0] ^= ls_box(ss[5],3) ^ t_use(r,c)[i]; \
361     k[v(48,(6*(i))+ 7)] = ss[1] ^= ss[0]; \
362     k[v(48,(6*(i))+ 8)] = ss[2] ^= ss[1]; \
363     k[v(48,(6*(i))+ 9)] = ss[3] ^= ss[2]; \
366 #define k6e(k,i) \  argument
367 {   k6ef(k,i); \
368     k[v(48,(6*(i))+10)] = ss[4] ^= ss[3]; \
369     k[v(48,(6*(i))+11)] = ss[5] ^= ss[4]; \
372 #define kdf6(k,i) \  argument
373 {   ss[0] ^= ls_box(ss[5],3) ^ t_use(r,c)[i]; k[v(48,(6*(i))+ 6)] = ff(ss[0]); \
374     ss[1] ^= ss[0]; k[v(48,(6*(i))+ 7)] = ff(ss[1]); \
375     ss[2] ^= ss[1]; k[v(48,(6*(i))+ 8)] = ff(ss[2]); \
376     ss[3] ^= ss[2]; k[v(48,(6*(i))+ 9)] = ff(ss[3]); \
377     ss[4] ^= ss[3]; k[v(48,(6*(i))+10)] = ff(ss[4]); \
378     ss[5] ^= ss[4]; k[v(48,(6*(i))+11)] = ff(ss[5]); \
381 #define kd6(k,i) \  argument
383     ss[0] ^= ss[6]; ss[6] = ff(ss[6]); k[v(48,(6*(i))+ 6)] = ss[6] ^= k[v(48,(6*(i)))]; \
384     ss[1] ^= ss[0]; k[v(48,(6*(i))+ 7)] = ss[6] ^= k[v(48,(6*(i))+ 1)]; \
385     ss[2] ^= ss[1]; k[v(48,(6*(i))+ 8)] = ss[6] ^= k[v(48,(6*(i))+ 2)]; \
386     ss[3] ^= ss[2]; k[v(48,(6*(i))+ 9)] = ss[6] ^= k[v(48,(6*(i))+ 3)]; \
387     ss[4] ^= ss[3]; k[v(48,(6*(i))+10)] = ss[6] ^= k[v(48,(6*(i))+ 4)]; \
388     ss[5] ^= ss[4]; k[v(48,(6*(i))+11)] = ss[6] ^= k[v(48,(6*(i))+ 5)]; \
391 #define kdl6(k,i) \  argument
392 {   ss[0] ^= ls_box(ss[5],3) ^ t_use(r,c)[i]; k[v(48,(6*(i))+ 6)] = ss[0]; \
393     ss[1] ^= ss[0]; k[v(48,(6*(i))+ 7)] = ss[1]; \
394     ss[2] ^= ss[1]; k[v(48,(6*(i))+ 8)] = ss[2]; \
395     ss[3] ^= ss[2]; k[v(48,(6*(i))+ 9)] = ss[3]; \
406     cx->ks[v(48,(2))] = ss[2] = word_in(key, 2);  in aes_xi()
415     kd6(cx->ks, 2);  kd6(cx->ks, 3);  in aes_xi()
447 #define k8ef(k,i) \  argument
448 {   k[v(56,(8*(i))+ 8)] = ss[0] ^= ls_box(ss[7],3) ^ t_use(r,c)[i]; \
449     k[v(56,(8*(i))+ 9)] = ss[1] ^= ss[0]; \
450     k[v(56,(8*(i))+10)] = ss[2] ^= ss[1]; \
451     k[v(56,(8*(i))+11)] = ss[3] ^= ss[2]; \
454 #define k8e(k,i) \  argument
455 {   k8ef(k,i); \
456     k[v(56,(8*(i))+12)] = ss[4] ^= ls_box(ss[3],0); \
457     k[v(56,(8*(i))+13)] = ss[5] ^= ss[4]; \
458     k[v(56,(8*(i))+14)] = ss[6] ^= ss[5]; \
459     k[v(56,(8*(i))+15)] = ss[7] ^= ss[6]; \
462 #define kdf8(k,i) \  argument
463 {   ss[0] ^= ls_box(ss[7],3) ^ t_use(r,c)[i]; k[v(56,(8*(i))+ 8)] = ff(ss[0]); \
464     ss[1] ^= ss[0]; k[v(56,(8*(i))+ 9)] = ff(ss[1]); \
465     ss[2] ^= ss[1]; k[v(56,(8*(i))+10)] = ff(ss[2]); \
466     ss[3] ^= ss[2]; k[v(56,(8*(i))+11)] = ff(ss[3]); \
467     ss[4] ^= ls_box(ss[3],0); k[v(56,(8*(i))+12)] = ff(ss[4]); \
468     ss[5] ^= ss[4]; k[v(56,(8*(i))+13)] = ff(ss[5]); \
469     ss[6] ^= ss[5]; k[v(56,(8*(i))+14)] = ff(ss[6]); \
470     ss[7] ^= ss[6]; k[v(56,(8*(i))+15)] = ff(ss[7]); \
473 #define kd8(k,i) \  argument
475     ss[0] ^= ss[8]; ss[8] = ff(ss[8]); k[v(56,(8*(i))+ 8)] = ss[8] ^= k[v(56,(8*(i)))]; \
476     ss[1] ^= ss[0]; k[v(56,(8*(i))+ 9)] = ss[8] ^= k[v(56,(8*(i))+ 1)]; \
477     ss[2] ^= ss[1]; k[v(56,(8*(i))+10)] = ss[8] ^= k[v(56,(8*(i))+ 2)]; \
478     ss[3] ^= ss[2]; k[v(56,(8*(i))+11)] = ss[8] ^= k[v(56,(8*(i))+ 3)]; \
480     ss[4] ^= ss[8]; ss[8] = ff(ss[8]); k[v(56,(8*(i))+12)] = ss[8] ^= k[v(56,(8*(i))+ 4)]; \
481     ss[5] ^= ss[4]; k[v(56,(8*(i))+13)] = ss[8] ^= k[v(56,(8*(i))+ 5)]; \
482     ss[6] ^= ss[5]; k[v(56,(8*(i))+14)] = ss[8] ^= k[v(56,(8*(i))+ 6)]; \
483     ss[7] ^= ss[6]; k[v(56,(8*(i))+15)] = ss[8] ^= k[v(56,(8*(i))+ 7)]; \
486 #define kdl8(k,i) \  argument
487 {   ss[0] ^= ls_box(ss[7],3) ^ t_use(r,c)[i]; k[v(56,(8*(i))+ 8)] = ss[0]; \
488     ss[1] ^= ss[0]; k[v(56,(8*(i))+ 9)] = ss[1]; \
489     ss[2] ^= ss[1]; k[v(56,(8*(i))+10)] = ss[2]; \
490     ss[3] ^= ss[2]; k[v(56,(8*(i))+11)] = ss[3]; \
501     cx->ks[v(56,(2))] = ss[2] = word_in(key, 2);  in aes_xi()
514     kd8(cx->ks, 2);  kd8(cx->ks, 3);  in aes_xi()