aes-set-encrypt-key.c 2.12 KB
Newer Older
Niels Möller's avatar
Niels Möller committed
1 2 3 4 5 6 7
/* aes-set-encrypt-key.c
 *
 * Key setup for the aes/rijndael block cipher.
 */

/* nettle, low-level cryptographics library
 *
Niels Möller's avatar
Niels Möller committed
8
 * Copyright (C) 2000, 2001, 2002 Rafael R. Sevilla, Niels Möller
Niels Möller's avatar
Niels Möller committed
9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27
 *  
 * The nettle library is free software; you can redistribute it and/or modify
 * it under the terms of the GNU Lesser General Public License as published by
 * the Free Software Foundation; either version 2.1 of the License, or (at your
 * option) any later version.
 * 
 * The nettle library is distributed in the hope that it will be useful, but
 * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY
 * or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU Lesser General Public
 * License for more details.
 * 
 * You should have received a copy of the GNU Lesser General Public License
 * along with the nettle library; see the file COPYING.LIB.  If not, write to
 * the Free Software Foundation, Inc., 59 Temple Place - Suite 330, Boston,
 * MA 02111-1307, USA.
 */

/* Originally written by Rafael R. Sevilla <dido@pacific.net.ph> */

28 29 30
#if HAVE_CONFIG_H
# include "config.h"
#endif
Niels Möller's avatar
Niels Möller committed
31 32 33

#include <assert.h>

34
#include "aes-internal.h"
Niels Möller's avatar
Niels Möller committed
35
#include "macros.h"
36

Niels Möller's avatar
Niels Möller committed
37 38 39 40
void
aes_set_encrypt_key(struct aes_ctx *ctx,
		    unsigned keysize, const uint8_t *key)
{
41 42 43
  static const uint8_t rcon[10] = {
    0x01,0x02,0x04,0x08,0x10,0x20,0x40,0x80,0x1b,0x36,
  };
Niels Möller's avatar
Niels Möller committed
44
  unsigned nk, nr, i, lastkey;
45 46
  uint32_t temp;
  const uint8_t *rp;
Niels Möller's avatar
Niels Möller committed
47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64

  assert(keysize >= AES_MIN_KEY_SIZE);
  assert(keysize <= AES_MAX_KEY_SIZE);
  
  /* Truncate keysizes to the valid key sizes provided by Rijndael */
  if (keysize == 32) {
    nk = 8;
    nr = 14;
  } else if (keysize >= 24) {
    nk = 6;
    nr = 12;
  } else { /* must be 16 or more */
    nk = 4;
    nr = 10;
  }

  lastkey = (AES_BLOCK_SIZE/4) * (nr + 1);
  ctx->nrounds = nr;
65 66 67

  for (i=0, rp = rcon; i<nk; i++)
    ctx->keys[i] = LE_READ_UINT32(key + i*4);
Niels Möller's avatar
Niels Möller committed
68 69 70 71 72

  for (i=nk; i<lastkey; i++)
    {
      temp = ctx->keys[i-1];
      if (i % nk == 0)
73 74
	temp = SUBBYTE(ROTL32(24, temp), aes_sbox) ^ *rp++;

Niels Möller's avatar
Niels Möller committed
75
      else if (nk > 6 && (i%nk) == 4)
76 77
	temp = SUBBYTE(temp, aes_sbox);

Niels Möller's avatar
Niels Möller committed
78 79 80 81
      ctx->keys[i] = ctx->keys[i-nk] ^ temp;
    }
}