PandA-2024.02
aes_func.c
Go to the documentation of this file.
1 /*
2 +--------------------------------------------------------------------------+
3 | CHStone : a suite of benchmark programs for C-based High-Level Synthesis |
4 | ======================================================================== |
5 | |
6 | * Collected and Modified : Y. Hara, H. Tomiyama, S. Honda, |
7 | H. Takada and K. Ishii |
8 | Nagoya University, Japan |
9 | |
10 | * Remark : |
11 | 1. This source code is modified to unify the formats of the benchmark |
12 | programs in CHStone. |
13 | 2. Test vectors are added for CHStone. |
14 | 3. If "main_result" is 0 at the end of the program, the program is |
15 | correctly executed. |
16 | 4. Please follow the copyright of each benchmark program. |
17 +--------------------------------------------------------------------------+
18 */
19 /* aes_function.c */
20 /*
21  * Copyright (C) 2005
22  * Akira Iwata & Masayuki Sato
23  * Akira Iwata Laboratory,
24  * Nagoya Institute of Technology in Japan.
25  *
26  * All rights reserved.
27  *
28  * This software is written by Masayuki Sato.
29  * And if you want to contact us, send an email to Kimitake Wakayama
30  * (wakayama@elcom.nitech.ac.jp)
31  *
32  * Redistribution and use in source and binary forms, with or without modification,
33  * are permitted provided that the following conditions are met:
34  *
35  * 1. Redistributions of source code must retain the above copyright notice,
36  * this list of conditions and the following disclaimer.
37  *
38  * 2. Redistributions in binary form must reproduce the above copyright notice,
39  * this list of conditions and the following disclaimer in the documentation
40  * and/or other materials provided with the distribution.
41  *
42  * 3. All advertising materials mentioning features or use of this software must
43  * display the following acknowledgment:
44  * "This product includes software developed by Akira Iwata Laboratory,
45  * Nagoya Institute of Technology in Japan (http://mars.elcom.nitech.ac.jp/)."
46  *
47  * 4. Redistributions of any form whatsoever must retain the following
48  * acknowledgment:
49  * "This product includes software developed by Akira Iwata Laboratory,
50  * Nagoya Institute of Technology in Japan (http://mars.elcom.nitech.ac.jp/)."
51  *
52  * THIS SOFTWARE IS PROVIDED "AS IS" WITHOUT EXPRESS OR IMPLIED WARRANTY.
53  * AKIRA IWATA LABORATORY DISCLAIMS ALL WARRANTIES WITH REGARD TO THIS
54  * SOFTWARE, INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS,
55  * IN NO EVENT SHALL AKIRA IWATA LABORATORY BE LIABLE FOR ANY SPECIAL,
56  * INDIRECT OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING
57  * FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT,
58  * NEGLIGENCE OR OTHER TORTUOUS ACTION, ARISING OUT OF OR IN CONNECTION
59  * WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
60  *
61  */
62 const int Sbox[16][16] = {
63  {0x63, 0x7c, 0x77, 0x7b, 0xf2, 0x6b, 0x6f, 0xc5, 0x30, 0x01, 0x67, 0x2b,
64  0xfe, 0xd7, 0xab, 0x76},
65  {0xca, 0x82, 0xc9, 0x7d, 0xfa, 0x59, 0x47, 0xf0, 0xad, 0xd4, 0xa2, 0xaf,
66  0x9c, 0xa4, 0x72, 0xc0},
67  {0xb7, 0xfd, 0x93, 0x26, 0x36, 0x3f, 0xf7, 0xcc, 0x34, 0xa5, 0xe5, 0xf1,
68  0x71, 0xd8, 0x31, 0x15},
69  {0x04, 0xc7, 0x23, 0xc3, 0x18, 0x96, 0x05, 0x9a, 0x07, 0x12, 0x80, 0xe2,
70  0xeb, 0x27, 0xb2, 0x75},
71  {0x09, 0x83, 0x2c, 0x1a, 0x1b, 0x6e, 0x5a, 0xa0, 0x52, 0x3b, 0xd6, 0xb3,
72  0x29, 0xe3, 0x2f, 0x84},
73  {0x53, 0xd1, 0x00, 0xed, 0x20, 0xfc, 0xb1, 0x5b, 0x6a, 0xcb, 0xbe, 0x39,
74  0x4a, 0x4c, 0x58, 0xcf},
75  {0xd0, 0xef, 0xaa, 0xfb, 0x43, 0x4d, 0x33, 0x85, 0x45, 0xf9, 0x02, 0x7f,
76  0x50, 0x3c, 0x9f, 0xa8},
77  {0x51, 0xa3, 0x40, 0x8f, 0x92, 0x9d, 0x38, 0xf5, 0xbc, 0xb6, 0xda, 0x21,
78  0x10, 0xff, 0xf3, 0xd2},
79  {0xcd, 0x0c, 0x13, 0xec, 0x5f, 0x97, 0x44, 0x17, 0xc4, 0xa7, 0x7e, 0x3d,
80  0x64, 0x5d, 0x19, 0x73},
81  {0x60, 0x81, 0x4f, 0xdc, 0x22, 0x2a, 0x90, 0x88, 0x46, 0xee, 0xb8, 0x14,
82  0xde, 0x5e, 0x0b, 0xdb},
83  {0xe0, 0x32, 0x3a, 0x0a, 0x49, 0x06, 0x24, 0x5c, 0xc2, 0xd3, 0xac, 0x62,
84  0x91, 0x95, 0xe4, 0x79},
85  {0xe7, 0xc8, 0x37, 0x6d, 0x8d, 0xd5, 0x4e, 0xa9, 0x6c, 0x56, 0xf4, 0xea,
86  0x65, 0x7a, 0xae, 0x08},
87  {0xba, 0x78, 0x25, 0x2e, 0x1c, 0xa6, 0xb4, 0xc6, 0xe8, 0xdd, 0x74, 0x1f,
88  0x4b, 0xbd, 0x8b, 0x8a},
89  {0x70, 0x3e, 0xb5, 0x66, 0x48, 0x03, 0xf6, 0x0e, 0x61, 0x35, 0x57, 0xb9,
90  0x86, 0xc1, 0x1d, 0x9e},
91  {0xe1, 0xf8, 0x98, 0x11, 0x69, 0xd9, 0x8e, 0x94, 0x9b, 0x1e, 0x87, 0xe9,
92  0xce, 0x55, 0x28, 0xdf},
93  {0x8c, 0xa1, 0x89, 0x0d, 0xbf, 0xe6, 0x42, 0x68, 0x41, 0x99, 0x2d, 0x0f,
94  0xb0, 0x54, 0xbb, 0x16}
95 };
96 const int invSbox[16][16] = {
97  {0x52, 0x09, 0x6a, 0xd5, 0x30, 0x36, 0xa5, 0x38, 0xbf, 0x40, 0xa3, 0x9e,
98  0x81, 0xf3, 0xd7, 0xfb},
99  {0x7c, 0xe3, 0x39, 0x82, 0x9b, 0x2f, 0xff, 0x87, 0x34, 0x8e, 0x43, 0x44,
100  0xc4, 0xde, 0xe9, 0xcb},
101  {0x54, 0x7b, 0x94, 0x32, 0xa6, 0xc2, 0x23, 0x3d, 0xee, 0x4c, 0x95, 0x0b,
102  0x42, 0xfa, 0xc3, 0x4e},
103  {0x08, 0x2e, 0xa1, 0x66, 0x28, 0xd9, 0x24, 0xb2, 0x76, 0x5b, 0xa2, 0x49,
104  0x6d, 0x8b, 0xd1, 0x25},
105  {0x72, 0xf8, 0xf6, 0x64, 0x86, 0x68, 0x98, 0x16, 0xd4, 0xa4, 0x5c, 0xcc,
106  0x5d, 0x65, 0xb6, 0x92},
107  {0x6c, 0x70, 0x48, 0x50, 0xfd, 0xed, 0xb9, 0xda, 0x5e, 0x15, 0x46, 0x57,
108  0xa7, 0x8d, 0x9d, 0x84},
109  {0x90, 0xd8, 0xab, 0x00, 0x8c, 0xbc, 0xd3, 0x0a, 0xf7, 0xe4, 0x58, 0x05,
110  0xb8, 0xb3, 0x45, 0x06},
111  {0xd0, 0x2c, 0x1e, 0x8f, 0xca, 0x3f, 0x0f, 0x02, 0xc1, 0xaf, 0xbd, 0x03,
112  0x01, 0x13, 0x8a, 0x6b},
113  {0x3a, 0x91, 0x11, 0x41, 0x4f, 0x67, 0xdc, 0xea, 0x97, 0xf2, 0xcf, 0xce,
114  0xf0, 0xb4, 0xe6, 0x73},
115  {0x96, 0xac, 0x74, 0x22, 0xe7, 0xad, 0x35, 0x85, 0xe2, 0xf9, 0x37, 0xe8,
116  0x1c, 0x75, 0xdf, 0x6e},
117  {0x47, 0xf1, 0x1a, 0x71, 0x1d, 0x29, 0xc5, 0x89, 0x6f, 0xb7, 0x62, 0x0e,
118  0xaa, 0x18, 0xbe, 0x1b},
119  {0xfc, 0x56, 0x3e, 0x4b, 0xc6, 0xd2, 0x79, 0x20, 0x9a, 0xdb, 0xc0, 0xfe,
120  0x78, 0xcd, 0x5a, 0xf4},
121  {0x1f, 0xdd, 0xa8, 0x33, 0x88, 0x07, 0xc7, 0x31, 0xb1, 0x12, 0x10, 0x59,
122  0x27, 0x80, 0xec, 0x5f},
123  {0x60, 0x51, 0x7f, 0xa9, 0x19, 0xb5, 0x4a, 0x0d, 0x2d, 0xe5, 0x7a, 0x9f,
124  0x93, 0xc9, 0x9c, 0xef},
125  {0xa0, 0xe0, 0x3b, 0x4d, 0xae, 0x2a, 0xf5, 0xb0, 0xc8, 0xeb, 0xbb, 0x3c,
126  0x83, 0x53, 0x99, 0x61},
127  {0x17, 0x2b, 0x04, 0x7e, 0xba, 0x77, 0xd6, 0x26, 0xe1, 0x69, 0x14, 0x63,
128  0x55, 0x21, 0x0c, 0x7d}
129 };
130 
131 /* ********* ByteSub & ShiftRow ********* */
132 void
133 ByteSub_ShiftRow (int statemt[32], int nb)
134 {
135  int temp;
136 
137  switch (nb)
138  {
139  case 4:
140  temp = Sbox[statemt[1] >> 4][statemt[1] & 0xf];
141  statemt[1] = Sbox[statemt[5] >> 4][statemt[5] & 0xf];
142  statemt[5] = Sbox[statemt[9] >> 4][statemt[9] & 0xf];
143  statemt[9] = Sbox[statemt[13] >> 4][statemt[13] & 0xf];
144  statemt[13] = temp;
145 
146  temp = Sbox[statemt[2] >> 4][statemt[2] & 0xf];
147  statemt[2] = Sbox[statemt[10] >> 4][statemt[10] & 0xf];
148  statemt[10] = temp;
149  temp = Sbox[statemt[6] >> 4][statemt[6] & 0xf];
150  statemt[6] = Sbox[statemt[14] >> 4][statemt[14] & 0xf];
151  statemt[14] = temp;
152 
153  temp = Sbox[statemt[3] >> 4][statemt[3] & 0xf];
154  statemt[3] = Sbox[statemt[15] >> 4][statemt[15] & 0xf];
155  statemt[15] = Sbox[statemt[11] >> 4][statemt[11] & 0xf];
156  statemt[11] = Sbox[statemt[7] >> 4][statemt[7] & 0xf];
157  statemt[7] = temp;
158 
159  statemt[0] = Sbox[statemt[0] >> 4][statemt[0] & 0xf];
160  statemt[4] = Sbox[statemt[4] >> 4][statemt[4] & 0xf];
161  statemt[8] = Sbox[statemt[8] >> 4][statemt[8] & 0xf];
162  statemt[12] = Sbox[statemt[12] >> 4][statemt[12] & 0xf];
163  break;
164  case 6:
165  temp = Sbox[statemt[1] >> 4][statemt[1] & 0xf];
166  statemt[1] = Sbox[statemt[5] >> 4][statemt[5] & 0xf];
167  statemt[5] = Sbox[statemt[9] >> 4][statemt[9] & 0xf];
168  statemt[9] = Sbox[statemt[13] >> 4][statemt[13] & 0xf];
169  statemt[13] = Sbox[statemt[17] >> 4][statemt[17] & 0xf];
170  statemt[17] = Sbox[statemt[21] >> 4][statemt[21] & 0xf];
171  statemt[21] = temp;
172 
173  temp = Sbox[statemt[2] >> 4][statemt[2] & 0xf];
174  statemt[2] = Sbox[statemt[10] >> 4][statemt[10] & 0xf];
175  statemt[10] = Sbox[statemt[18] >> 4][statemt[18] & 0xf];
176  statemt[18] = temp;
177  temp = Sbox[statemt[6] >> 4][statemt[6] & 0xf];
178  statemt[6] = Sbox[statemt[14] >> 4][statemt[14] & 0xf];
179  statemt[14] = Sbox[statemt[22] >> 4][statemt[22] & 0xf];
180  statemt[22] = temp;
181 
182  temp = Sbox[statemt[3] >> 4][statemt[3] & 0xf];
183  statemt[3] = Sbox[statemt[15] >> 4][statemt[15] & 0xf];
184  statemt[15] = temp;
185  temp = Sbox[statemt[7] >> 4][statemt[7] & 0xf];
186  statemt[7] = Sbox[statemt[19] >> 4][statemt[19] & 0xf];
187  statemt[19] = temp;
188  temp = Sbox[statemt[11] >> 4][statemt[11] & 0xf];
189  statemt[11] = Sbox[statemt[23] >> 4][statemt[23] & 0xf];
190  statemt[23] = temp;
191 
192  statemt[0] = Sbox[statemt[0] >> 4][statemt[0] & 0xf];
193  statemt[4] = Sbox[statemt[4] >> 4][statemt[4] & 0xf];
194  statemt[8] = Sbox[statemt[8] >> 4][statemt[8] & 0xf];
195  statemt[12] = Sbox[statemt[12] >> 4][statemt[12] & 0xf];
196  statemt[16] = Sbox[statemt[16] >> 4][statemt[16] & 0xf];
197  statemt[20] = Sbox[statemt[20] >> 4][statemt[20] & 0xf];
198  break;
199  case 8:
200  temp = Sbox[statemt[1] >> 4][statemt[1] & 0xf];
201  statemt[1] = Sbox[statemt[5] >> 4][statemt[5] & 0xf];
202  statemt[5] = Sbox[statemt[9] >> 4][statemt[9] & 0xf];
203  statemt[9] = Sbox[statemt[13] >> 4][statemt[13] & 0xf];
204  statemt[13] = Sbox[statemt[17] >> 4][statemt[17] & 0xf];
205  statemt[17] = Sbox[statemt[21] >> 4][statemt[21] & 0xf];
206  statemt[21] = Sbox[statemt[25] >> 4][statemt[25] & 0xf];
207  statemt[25] = Sbox[statemt[29] >> 4][statemt[29] & 0xf];
208  statemt[29] = temp;
209 
210  temp = Sbox[statemt[2] >> 4][statemt[2] & 0xf];
211  statemt[2] = Sbox[statemt[14] >> 4][statemt[14] & 0xf];
212  statemt[14] = Sbox[statemt[26] >> 4][statemt[26] & 0xf];
213  statemt[26] = Sbox[statemt[6] >> 4][statemt[6] & 0xf];
214  statemt[6] = Sbox[statemt[18] >> 4][statemt[18] & 0xf];
215  statemt[18] = Sbox[statemt[30] >> 4][statemt[30] & 0xf];
216  statemt[30] = Sbox[statemt[10] >> 4][statemt[10] & 0xf];
217  statemt[10] = Sbox[statemt[22] >> 4][statemt[22] & 0xf];
218  statemt[22] = temp;
219 
220  temp = Sbox[statemt[3] >> 4][statemt[3] & 0xf];
221  statemt[3] = Sbox[statemt[19] >> 4][statemt[19] & 0xf];
222  statemt[19] = temp;
223  temp = Sbox[statemt[7] >> 4][statemt[7] & 0xf];
224  statemt[7] = Sbox[statemt[23] >> 4][statemt[23] & 0xf];
225  statemt[23] = temp;
226  temp = Sbox[statemt[11] >> 4][statemt[11] & 0xf];
227  statemt[11] = Sbox[statemt[27] >> 4][statemt[27] & 0xf];
228  statemt[27] = temp;
229  temp = Sbox[statemt[15] >> 4][statemt[15] & 0xf];
230  statemt[15] = Sbox[statemt[31] >> 4][statemt[31] & 0xf];
231  statemt[31] = temp;
232 
233  statemt[0] = Sbox[statemt[0] >> 4][statemt[0] & 0xf];
234  statemt[4] = Sbox[statemt[4] >> 4][statemt[4] & 0xf];
235  statemt[8] = Sbox[statemt[8] >> 4][statemt[8] & 0xf];
236  statemt[12] = Sbox[statemt[12] >> 4][statemt[12] & 0xf];
237  statemt[16] = Sbox[statemt[16] >> 4][statemt[16] & 0xf];
238  statemt[20] = Sbox[statemt[20] >> 4][statemt[20] & 0xf];
239  statemt[24] = Sbox[statemt[24] >> 4][statemt[24] & 0xf];
240  statemt[28] = Sbox[statemt[28] >> 4][statemt[28] & 0xf];
241  break;
242  }
243 }
244 
245 int
246 SubByte (int in)
247 {
248  return Sbox[(in / 16)][(in % 16)];
249 }
250 
251 /* ********* InversShiftRow & ByteSub ********* */
252 void
253 InversShiftRow_ByteSub (int statemt[32], int nb)
254 {
255  int temp;
256 
257  switch (nb)
258  {
259  case 4:
260  temp = invSbox[statemt[13] >> 4][statemt[13] & 0xf];
261  statemt[13] = invSbox[statemt[9] >> 4][statemt[9] & 0xf];
262  statemt[9] = invSbox[statemt[5] >> 4][statemt[5] & 0xf];
263  statemt[5] = invSbox[statemt[1] >> 4][statemt[1] & 0xf];
264  statemt[1] = temp;
265 
266  temp = invSbox[statemt[14] >> 4][statemt[14] & 0xf];
267  statemt[14] = invSbox[statemt[6] >> 4][statemt[6] & 0xf];
268  statemt[6] = temp;
269  temp = invSbox[statemt[2] >> 4][statemt[2] & 0xf];
270  statemt[2] = invSbox[statemt[10] >> 4][statemt[10] & 0xf];
271  statemt[10] = temp;
272 
273  temp = invSbox[statemt[15] >> 4][statemt[15] & 0xf];
274  statemt[15] = invSbox[statemt[3] >> 4][statemt[3] & 0xf];
275  statemt[3] = invSbox[statemt[7] >> 4][statemt[7] & 0xf];
276  statemt[7] = invSbox[statemt[11] >> 4][statemt[11] & 0xf];
277  statemt[11] = temp;
278 
279  statemt[0] = invSbox[statemt[0] >> 4][statemt[0] & 0xf];
280  statemt[4] = invSbox[statemt[4] >> 4][statemt[4] & 0xf];
281  statemt[8] = invSbox[statemt[8] >> 4][statemt[8] & 0xf];
282  statemt[12] = invSbox[statemt[12] >> 4][statemt[12] & 0xf];
283  break;
284  case 6:
285  temp = invSbox[statemt[21] >> 4][statemt[21] & 0xf];
286  statemt[21] = invSbox[statemt[17] >> 4][statemt[17] & 0xf];
287  statemt[17] = invSbox[statemt[13] >> 4][statemt[13] & 0xf];
288  statemt[13] = invSbox[statemt[9] >> 4][statemt[9] & 0xf];
289  statemt[9] = invSbox[statemt[5] >> 4][statemt[5] & 0xf];
290  statemt[5] = invSbox[statemt[1] >> 4][statemt[1] & 0xf];
291  statemt[1] = temp;
292 
293  temp = invSbox[statemt[22] >> 4][statemt[22] & 0xf];
294  statemt[22] = invSbox[statemt[14] >> 4][statemt[14] & 0xf];
295  statemt[14] = invSbox[statemt[6] >> 4][statemt[6] & 0xf];
296  statemt[6] = temp;
297  temp = invSbox[statemt[18] >> 4][statemt[18] & 0xf];
298  statemt[18] = invSbox[statemt[10] >> 4][statemt[10] & 0xf];
299  statemt[10] = invSbox[statemt[2] >> 4][statemt[2] & 0xf];
300  statemt[2] = temp;
301 
302  temp = invSbox[statemt[15] >> 4][statemt[15] & 0xf];
303  statemt[15] = invSbox[statemt[3] >> 4][statemt[3] & 0xf];
304  statemt[3] = temp;
305  temp = invSbox[statemt[19] >> 4][statemt[19] & 0xf];
306  statemt[19] = invSbox[statemt[7] >> 4][statemt[7] & 0xf];
307  statemt[7] = temp;
308  temp = invSbox[statemt[23] >> 4][statemt[23] & 0xf];
309  statemt[23] = invSbox[statemt[11] >> 4][statemt[11] & 0xf];
310  statemt[11] = temp;
311 
312  statemt[0] = invSbox[statemt[0] >> 4][statemt[0] & 0xf];
313  statemt[4] = invSbox[statemt[4] >> 4][statemt[4] & 0xf];
314  statemt[8] = invSbox[statemt[8] >> 4][statemt[8] & 0xf];
315  statemt[12] = invSbox[statemt[12] >> 4][statemt[12] & 0xf];
316  statemt[16] = invSbox[statemt[16] >> 4][statemt[16] & 0xf];
317  statemt[20] = invSbox[statemt[20] >> 4][statemt[20] & 0xf];
318  break;
319  case 8:
320  temp = invSbox[statemt[29] >> 4][statemt[29] & 0xf];
321  statemt[29] = invSbox[statemt[25] >> 4][statemt[25] & 0xf];
322  statemt[25] = invSbox[statemt[21] >> 4][statemt[21] & 0xf];
323  statemt[21] = invSbox[statemt[17] >> 4][statemt[17] & 0xf];
324  statemt[17] = invSbox[statemt[13] >> 4][statemt[13] & 0xf];
325  statemt[13] = invSbox[statemt[9] >> 4][statemt[9] & 0xf];
326  statemt[9] = invSbox[statemt[5] >> 4][statemt[5] & 0xf];
327  statemt[5] = invSbox[statemt[1] >> 4][statemt[1] & 0xf];
328  statemt[1] = temp;
329 
330  temp = invSbox[statemt[30] >> 4][statemt[30] & 0xf];
331  statemt[30] = invSbox[statemt[18] >> 4][statemt[18] & 0xf];
332  statemt[18] = invSbox[statemt[6] >> 4][statemt[6] & 0xf];
333  statemt[6] = invSbox[statemt[26] >> 4][statemt[26] & 0xf];
334  statemt[26] = invSbox[statemt[14] >> 4][statemt[14] & 0xf];
335  statemt[14] = invSbox[statemt[2] >> 4][statemt[2] & 0xf];
336  statemt[2] = invSbox[statemt[22] >> 4][statemt[22] & 0xf];
337  statemt[22] = invSbox[statemt[10] >> 4][statemt[10] & 0xf];
338  statemt[10] = temp;
339 
340  temp = invSbox[statemt[31] >> 4][statemt[31] & 0xf];
341  statemt[31] = invSbox[statemt[15] >> 4][statemt[15] & 0xf];
342  statemt[15] = temp;
343  temp = invSbox[statemt[27] >> 4][statemt[27] & 0xf];
344  statemt[27] = invSbox[statemt[11] >> 4][statemt[11] & 0xf];
345  statemt[11] = temp;
346  temp = invSbox[statemt[23] >> 4][statemt[23] & 0xf];
347  statemt[23] = invSbox[statemt[7] >> 4][statemt[7] & 0xf];
348  statemt[7] = temp;
349  temp = invSbox[statemt[19] >> 4][statemt[19] & 0xf];
350  statemt[19] = invSbox[statemt[3] >> 4][statemt[3] & 0xf];
351  statemt[3] = temp;
352 
353  statemt[0] = invSbox[statemt[0] >> 4][statemt[0] & 0xf];
354  statemt[4] = invSbox[statemt[4] >> 4][statemt[4] & 0xf];
355  statemt[8] = invSbox[statemt[8] >> 4][statemt[8] & 0xf];
356  statemt[12] = invSbox[statemt[12] >> 4][statemt[12] & 0xf];
357  statemt[16] = invSbox[statemt[16] >> 4][statemt[16] & 0xf];
358  statemt[20] = invSbox[statemt[20] >> 4][statemt[20] & 0xf];
359  statemt[24] = invSbox[statemt[24] >> 4][statemt[24] & 0xf];
360  statemt[28] = invSbox[statemt[28] >> 4][statemt[28] & 0xf];
361  break;
362  }
363 }
364 
365 /* ******** MixColumn ********** */
366 int
367 MixColumn_AddRoundKey (int statemt[32], int nb, int n)
368 {
369  int ret[8 * 4], j;
370  register int x;
371 
372  for (j = 0; j < nb; ++j)
373  {
374  ret[j * 4] = (statemt[j * 4] << 1);
375  if ((ret[j * 4] >> 8) == 1)
376  ret[j * 4] ^= 283;
377  x = statemt[1 + j * 4];
378  x ^= (x << 1);
379  if ((x >> 8) == 1)
380  ret[j * 4] ^= (x ^ 283);
381  else
382  ret[j * 4] ^= x;
383  ret[j * 4] ^=
384  statemt[2 + j * 4] ^ statemt[3 + j * 4] ^ word[0][j + nb * n];
385 
386  ret[1 + j * 4] = (statemt[1 + j * 4] << 1);
387  if ((ret[1 + j * 4] >> 8) == 1)
388  ret[1 + j * 4] ^= 283;
389  x = statemt[2 + j * 4];
390  x ^= (x << 1);
391  if ((x >> 8) == 1)
392  ret[1 + j * 4] ^= (x ^ 283);
393  else
394  ret[1 + j * 4] ^= x;
395  ret[1 + j * 4] ^=
396  statemt[3 + j * 4] ^ statemt[j * 4] ^ word[1][j + nb * n];
397 
398  ret[2 + j * 4] = (statemt[2 + j * 4] << 1);
399  if ((ret[2 + j * 4] >> 8) == 1)
400  ret[2 + j * 4] ^= 283;
401  x = statemt[3 + j * 4];
402  x ^= (x << 1);
403  if ((x >> 8) == 1)
404  ret[2 + j * 4] ^= (x ^ 283);
405  else
406  ret[2 + j * 4] ^= x;
407  ret[2 + j * 4] ^=
408  statemt[j * 4] ^ statemt[1 + j * 4] ^ word[2][j + nb * n];
409 
410  ret[3 + j * 4] = (statemt[3 + j * 4] << 1);
411  if ((ret[3 + j * 4] >> 8) == 1)
412  ret[3 + j * 4] ^= 283;
413  x = statemt[j * 4];
414  x ^= (x << 1);
415  if ((x >> 8) == 1)
416  ret[3 + j * 4] ^= (x ^ 283);
417  else
418  ret[3 + j * 4] ^= x;
419  ret[3 + j * 4] ^=
420  statemt[1 + j * 4] ^ statemt[2 + j * 4] ^ word[3][j + nb * n];
421  }
422  for (j = 0; j < nb; ++j)
423  {
424  statemt[j * 4] = ret[j * 4];
425  statemt[1 + j * 4] = ret[1 + j * 4];
426  statemt[2 + j * 4] = ret[2 + j * 4];
427  statemt[3 + j * 4] = ret[3 + j * 4];
428  }
429  return 0;
430 }
431 
432 /* ******** InversMixColumn ********** */
433 int
434 AddRoundKey_InversMixColumn (int statemt[32], int nb, int n)
435 {
436  int ret[8 * 4], i, j;
437  register int x;
438 
439  for (j = 0; j < nb; ++j)
440  {
441  statemt[j * 4] ^= word[0][j + nb * n];
442  statemt[1 + j * 4] ^= word[1][j + nb * n];
443  statemt[2 + j * 4] ^= word[2][j + nb * n];
444  statemt[3 + j * 4] ^= word[3][j + nb * n];
445  }
446  for (j = 0; j < nb; ++j)
447  for (i = 0; i < 4; ++i)
448  {
449  x = (statemt[i + j * 4] << 1);
450  if ((x >> 8) == 1)
451  x ^= 283;
452  x ^= statemt[i + j * 4];
453  x = (x << 1);
454  if ((x >> 8) == 1)
455  x ^= 283;
456  x ^= statemt[i + j * 4];
457  x = (x << 1);
458  if ((x >> 8) == 1)
459  x ^= 283;
460  ret[i + j * 4] = x;
461 
462  x = (statemt[(i + 1) % 4 + j * 4] << 1);
463  if ((x >> 8) == 1)
464  x ^= 283;
465  x = (x << 1);
466  if ((x >> 8) == 1)
467  x ^= 283;
468  x ^= statemt[(i + 1) % 4 + j * 4];
469  x = (x << 1);
470  if ((x >> 8) == 1)
471  x ^= 283;
472  x ^= statemt[(i + 1) % 4 + j * 4];
473  ret[i + j * 4] ^= x;
474 
475  x = (statemt[(i + 2) % 4 + j * 4] << 1);
476  if ((x >> 8) == 1)
477  x ^= 283;
478  x ^= statemt[(i + 2) % 4 + j * 4];
479  x = (x << 1);
480  if ((x >> 8) == 1)
481  x ^= 283;
482  x = (x << 1);
483  if ((x >> 8) == 1)
484  x ^= 283;
485  x ^= statemt[(i + 2) % 4 + j * 4];
486  ret[i + j * 4] ^= x;
487 
488  x = (statemt[(i + 3) % 4 + j * 4] << 1);
489  if ((x >> 8) == 1)
490  x ^= 283;
491  x = (x << 1);
492  if ((x >> 8) == 1)
493  x ^= 283;
494  x = (x << 1);
495  if ((x >> 8) == 1)
496  x ^= 283;
497  x ^= statemt[(i + 3) % 4 + j * 4];
498  ret[i + j * 4] ^= x;
499  }
500  for (i = 0; i < nb; ++i)
501  {
502  statemt[i * 4] = ret[i * 4];
503  statemt[1 + i * 4] = ret[1 + i * 4];
504  statemt[2 + i * 4] = ret[2 + i * 4];
505  statemt[3 + i * 4] = ret[3 + i * 4];
506  }
507  return 0;
508 }
509 
510 /* ******** AddRoundKey ********** */
511 int
512 AddRoundKey (int statemt[32], int type, int n)
513 {
514  int j, nb;
515 
516  switch (type)
517  {
518  case 128128:
519  case 192128:
520  case 256128:
521  nb = 4;
522  break;
523  case 128192:
524  case 192192:
525  case 256192:
526  nb = 6;
527  break;
528  case 128256:
529  case 192256:
530  case 256256:
531  nb = 8;
532  break;
533  }
534  for (j = 0; j < nb; ++j)
535  {
536  statemt[j * 4] ^= word[0][j + nb * n];
537  statemt[1 + j * 4] ^= word[1][j + nb * n];
538  statemt[2 + j * 4] ^= word[2][j + nb * n];
539  statemt[3 + j * 4] ^= word[3][j + nb * n];
540  }
541  return 0;
542 }
test_panda.type
type
Definition: test_panda.py:447
AddRoundKey_InversMixColumn
int AddRoundKey_InversMixColumn(int statemt[32], int nb, int n)
Definition: aes_func.c:434
statemt
int statemt[32]
Definition: aes.h:68
SubByte
int SubByte(int in)
Definition: aes_func.c:246
invSbox
const int invSbox[16][16]
Definition: aes_func.c:96
Sbox
const int Sbox[16][16]
Definition: aes_func.c:62
InversShiftRow_ByteSub
void InversShiftRow_ByteSub(int statemt[32], int nb)
Definition: aes_func.c:253
MixColumn_AddRoundKey
int MixColumn_AddRoundKey(int statemt[32], int nb, int n)
Definition: aes_func.c:367
AddRoundKey
int AddRoundKey(int statemt[32], int type, int n)
Definition: aes_func.c:512
ByteSub_ShiftRow
void ByteSub_ShiftRow(int statemt[32], int nb)
Definition: aes_func.c:133
nb
int nb
Definition: aes.h:65
word
short word
Definition: private.h:30
x
x
Return the smallest n such that 2^n >= _x.
Definition: math_function.hpp:170
Generated on Mon Feb 12 2024 13:02:48 for PandA-2024.02 by doxygen 1.8.13