[e16e8f2] | 1 | /* |
---|
| 2 | * The ARC4 stream cipher. |
---|
| 3 | * |
---|
| 4 | * Copyright (c) 2009 Joshua Oreman <oremanj@rwcr.net>. |
---|
| 5 | * |
---|
| 6 | * This program is free software; you can redistribute it and/or |
---|
| 7 | * modify it under the terms of the GNU General Public License as |
---|
| 8 | * published by the Free Software Foundation; either version 2 of the |
---|
| 9 | * License, or any later version. |
---|
| 10 | * |
---|
| 11 | * This program is distributed in the hope that it will be useful, but |
---|
| 12 | * WITHOUT ANY WARRANTY; without even the implied warranty of |
---|
| 13 | * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU |
---|
| 14 | * General Public License for more details. |
---|
| 15 | * |
---|
| 16 | * You should have received a copy of the GNU General Public License |
---|
| 17 | * along with this program; if not, write to the Free Software |
---|
| 18 | * Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA. |
---|
| 19 | */ |
---|
| 20 | |
---|
| 21 | FILE_LICENCE ( GPL2_OR_LATER ); |
---|
| 22 | |
---|
| 23 | #include <gpxe/crypto.h> |
---|
| 24 | #include <gpxe/arc4.h> |
---|
| 25 | |
---|
| 26 | #define SWAP( ary, i, j ) \ |
---|
| 27 | ({ u8 temp = ary[i]; ary[i] = ary[j]; ary[j] = temp; }) |
---|
| 28 | |
---|
| 29 | /** |
---|
| 30 | * Set ARC4 key |
---|
| 31 | * |
---|
| 32 | * @v ctxv ARC4 encryption context |
---|
| 33 | * @v keyv Key to set |
---|
| 34 | * @v keylen Length of key |
---|
| 35 | * |
---|
| 36 | * If an initialisation vector is to be used, it should be prepended |
---|
| 37 | * to the key; ARC4 does not implement the @c setiv function because |
---|
| 38 | * there is no standard length for an initialisation vector in the |
---|
| 39 | * cipher. |
---|
| 40 | */ |
---|
| 41 | static int arc4_setkey ( void *ctxv, const void *keyv, size_t keylen ) |
---|
| 42 | { |
---|
| 43 | struct arc4_ctx *ctx = ctxv; |
---|
| 44 | const u8 *key = keyv; |
---|
| 45 | u8 *S = ctx->state; |
---|
| 46 | int i, j; |
---|
| 47 | |
---|
| 48 | for ( i = 0; i < 256; i++ ) { |
---|
| 49 | S[i] = i; |
---|
| 50 | } |
---|
| 51 | |
---|
| 52 | for ( i = j = 0; i < 256; i++ ) { |
---|
| 53 | j = ( j + S[i] + key[i % keylen] ) & 0xff; |
---|
| 54 | SWAP ( S, i, j ); |
---|
| 55 | } |
---|
| 56 | |
---|
| 57 | ctx->i = ctx->j = 0; |
---|
| 58 | return 0; |
---|
| 59 | } |
---|
| 60 | |
---|
| 61 | /** |
---|
| 62 | * Perform ARC4 encryption or decryption |
---|
| 63 | * |
---|
| 64 | * @v ctxv ARC4 encryption context |
---|
| 65 | * @v srcv Data to encrypt or decrypt |
---|
| 66 | * @v dstv Location to store encrypted or decrypted data |
---|
| 67 | * @v len Length of data to operate on |
---|
| 68 | * |
---|
| 69 | * ARC4 is a stream cipher that works by generating a stream of PRNG |
---|
| 70 | * data based on the key, and XOR'ing it with the data to be |
---|
| 71 | * encrypted. Since XOR is symmetric, encryption and decryption in |
---|
| 72 | * ARC4 are the same operation. |
---|
| 73 | * |
---|
| 74 | * If you pass a @c NULL source or destination pointer, @a len |
---|
| 75 | * keystream bytes will be consumed without encrypting any data. |
---|
| 76 | */ |
---|
| 77 | static void arc4_xor ( void *ctxv, const void *srcv, void *dstv, |
---|
| 78 | size_t len ) |
---|
| 79 | { |
---|
| 80 | struct arc4_ctx *ctx = ctxv; |
---|
| 81 | const u8 *src = srcv; |
---|
| 82 | u8 *dst = dstv; |
---|
| 83 | u8 *S = ctx->state; |
---|
| 84 | int i = ctx->i, j = ctx->j; |
---|
| 85 | |
---|
| 86 | while ( len-- ) { |
---|
| 87 | i = ( i + 1 ) & 0xff; |
---|
| 88 | j = ( j + S[i] ) & 0xff; |
---|
| 89 | SWAP ( S, i, j ); |
---|
| 90 | if ( srcv && dstv ) |
---|
| 91 | *dst++ = *src++ ^ S[(S[i] + S[j]) & 0xff]; |
---|
| 92 | } |
---|
| 93 | |
---|
| 94 | ctx->i = i; |
---|
| 95 | ctx->j = j; |
---|
| 96 | } |
---|
| 97 | |
---|
| 98 | static void arc4_setiv ( void *ctx __unused, const void *iv __unused ) |
---|
| 99 | { |
---|
| 100 | /* ARC4 does not use a fixed-length IV */ |
---|
| 101 | } |
---|
| 102 | |
---|
| 103 | |
---|
| 104 | /** |
---|
| 105 | * Perform ARC4 encryption or decryption, skipping initial keystream bytes |
---|
| 106 | * |
---|
| 107 | * @v key ARC4 encryption key |
---|
| 108 | * @v keylen Key length |
---|
| 109 | * @v skip Number of bytes of keystream to skip |
---|
| 110 | * @v src Message to encrypt or decrypt |
---|
| 111 | * @v msglen Length of message |
---|
| 112 | * @ret dst Encrypted or decrypted message |
---|
| 113 | */ |
---|
| 114 | void arc4_skip ( const void *key, size_t keylen, size_t skip, |
---|
| 115 | const void *src, void *dst, size_t msglen ) |
---|
| 116 | { |
---|
| 117 | struct arc4_ctx ctx; |
---|
| 118 | arc4_setkey ( &ctx, key, keylen ); |
---|
| 119 | arc4_xor ( &ctx, NULL, NULL, skip ); |
---|
| 120 | arc4_xor ( &ctx, src, dst, msglen ); |
---|
| 121 | } |
---|
| 122 | |
---|
| 123 | struct cipher_algorithm arc4_algorithm = { |
---|
| 124 | .name = "ARC4", |
---|
| 125 | .ctxsize = ARC4_CTX_SIZE, |
---|
| 126 | .blocksize = 1, |
---|
| 127 | .setkey = arc4_setkey, |
---|
| 128 | .setiv = arc4_setiv, |
---|
| 129 | .encrypt = arc4_xor, |
---|
| 130 | .decrypt = arc4_xor, |
---|
| 131 | }; |
---|