2 chacha-merged.c version 20080118
22 #define U8V(v) ((u8)(v) & U8C(0xFF))
23 #define U32V(v) ((u32)(v) & U32C(0xFFFFFFFF))
26   (U32V((v) << (n)) | ((v) >> (32 - (n))))
29   (((u32)((p)[0])      ) | \
36     (p)[0] = U8V((v)      ); \
40   } while (0)
53 static const char sigma[16] = "expand 32-byte k";
54 static const char tau[16] = "expand 16-byte k";
61   x->input[4] = U8TO32_LITTLE(k + 0);  in chacha_keysetup()
62   x->input[5] = U8TO32_LITTLE(k + 4);  in chacha_keysetup()
63   x->input[6] = U8TO32_LITTLE(k + 8);  in chacha_keysetup()
64   x->input[7] = U8TO32_LITTLE(k + 12);  in chacha_keysetup()
71   x->input[8] = U8TO32_LITTLE(k + 0);  in chacha_keysetup()
72   x->input[9] = U8TO32_LITTLE(k + 4);  in chacha_keysetup()
73   x->input[10] = U8TO32_LITTLE(k + 8);  in chacha_keysetup()
74   x->input[11] = U8TO32_LITTLE(k + 12);  in chacha_keysetup()
75   x->input[0] = U8TO32_LITTLE(constants + 0);  in chacha_keysetup()
76   x->input[1] = U8TO32_LITTLE(constants + 4);  in chacha_keysetup()
77   x->input[2] = U8TO32_LITTLE(constants + 8);  in chacha_keysetup()
78   x->input[3] = U8TO32_LITTLE(constants + 12);  in chacha_keysetup()
85   x->input[12] = counter == NULL ? 0 : U8TO32_LITTLE(counter + 0);  in chacha_ivsetup()
86   x->input[13] = counter == NULL ? 0 : U8TO32_LITTLE(counter + 4);  in chacha_ivsetup()
87   x->input[14] = U8TO32_LITTLE(iv + 0);  in chacha_ivsetup()
88   x->input[15] = U8TO32_LITTLE(iv + 4);  in chacha_ivsetup()
92   x->input[12] = U8TO32_LITTLE(counter + 0);  in chacha_ivsetup()
93   x->input[13] = U8TO32_LITTLE(counter + 4);  in chacha_ivsetup()
94   x->input[14] = U8TO32_LITTLE(counter + 8);  in chacha_ivsetup()
95   x->input[15] = U8TO32_LITTLE(counter + 12);  in chacha_ivsetup()
103     U32TO8_LITTLE(counter + 0, x->input[12]);  in chacha_ctrsave()
104     U32TO8_LITTLE(counter + 4, x->input[13]);  in chacha_ctrsave()
105     U32TO8_LITTLE(counter + 8, x->input[14]);  in chacha_ctrsave()
106     U32TO8_LITTLE(counter + 12, x->input[15]);  in chacha_ctrsave()
113   u32 x0, x1, x2, x3, x4, x5, x6, x7, x8, x9, x10, x11, x12, x13, x14, x15;  in chacha_encrypt_bytes()  local
121   j0 = x->input[0];  in chacha_encrypt_bytes()
122   j1 = x->input[1];  in chacha_encrypt_bytes()
123   j2 = x->input[2];  in chacha_encrypt_bytes()
124   j3 = x->input[3];  in chacha_encrypt_bytes()
125   j4 = x->input[4];  in chacha_encrypt_bytes()
126   j5 = x->input[5];  in chacha_encrypt_bytes()
127   j6 = x->input[6];  in chacha_encrypt_bytes()
128   j7 = x->input[7];  in chacha_encrypt_bytes()
129   j8 = x->input[8];  in chacha_encrypt_bytes()
130   j9 = x->input[9];  in chacha_encrypt_bytes()
131   j10 = x->input[10];  in chacha_encrypt_bytes()
132   j11 = x->input[11];  in chacha_encrypt_bytes()
133   j12 = x->input[12];  in chacha_encrypt_bytes()
134   j13 = x->input[13];  in chacha_encrypt_bytes()
135   j14 = x->input[14];  in chacha_encrypt_bytes()
136   j15 = x->input[15];  in chacha_encrypt_bytes()
141       for (i = 0; i < bytes; ++i) tmp[i] = m[i];  in chacha_encrypt_bytes()
157     x10 = j10;  in chacha_encrypt_bytes()
161     x14 = j14;  in chacha_encrypt_bytes()
163     for (i = 20; i > 0; i -= 2) {  in chacha_encrypt_bytes()
166       QUARTERROUND( x2, x6,x10,x14)  in chacha_encrypt_bytes()
168       QUARTERROUND( x0, x5,x10,x15)  in chacha_encrypt_bytes()
171       QUARTERROUND( x3, x4, x9,x14)  in chacha_encrypt_bytes()
183     x10 = PLUS(x10,j10);  in chacha_encrypt_bytes()
187     x14 = PLUS(x14,j14);  in chacha_encrypt_bytes()
191     x0 = XOR(x0,U8TO32_LITTLE(m + 0));  in chacha_encrypt_bytes()
201     x10 = XOR(x10,U8TO32_LITTLE(m + 40));  in chacha_encrypt_bytes()
205     x14 = XOR(x14,U8TO32_LITTLE(m + 56));  in chacha_encrypt_bytes()
224     U32TO8_LITTLE(c + 0,x0);  in chacha_encrypt_bytes()
234     U32TO8_LITTLE(c + 40,x10);  in chacha_encrypt_bytes()
238     U32TO8_LITTLE(c + 56,x14);  in chacha_encrypt_bytes()
243         for (i = 0; i < bytes; ++i) ctarget[i] = c[i];  in chacha_encrypt_bytes()
245       x->input[12] = j12;  in chacha_encrypt_bytes()
246       x->input[13] = j13;  in chacha_encrypt_bytes()
248       x->input[14] = j14;  in chacha_encrypt_bytes()
249       x->input[15] = j15;  in chacha_encrypt_bytes()
253     bytes -= 64;  in chacha_encrypt_bytes()