The Tor Browser / annotate

security/nss/lib/freebl/seed.c@6474c204b198 (annotated)

security/nss/lib/freebl/seed.c

Wed, 31 Dec 2014 06:09:35 +0100

author
Michael Schloh von Bennewitz <michael@schloh.com>
date
Wed, 31 Dec 2014 06:09:35 +0100
changeset 0
6474c204b198
permissions
-rw-r--r--

Cloned upstream origin tor-browser at tor-browser-31.3.0esr-4.5-1-build1
revision ID fc1c9ff7c1b2defdbc039f12214767608f46423f for hacking purpose.

michael@0 1 /* This Source Code Form is subject to the terms of the Mozilla Public
michael@0 2 * License, v. 2.0. If a copy of the MPL was not distributed with this
michael@0 3 * file, You can obtain one at http://mozilla.org/MPL/2.0/. */
michael@0 4
michael@0 5 #ifdef FREEBL_NO_DEPEND
michael@0 6 #include "stubs.h"
michael@0 7 #endif
michael@0 8
michael@0 9 #include <stdio.h>
michael@0 10 #include <stdlib.h>
michael@0 11 #include <string.h>
michael@0 12 #include <stddef.h>
michael@0 13 #ifdef WIN32
michael@0 14 #include <memory.h>
michael@0 15 #endif
michael@0 16
michael@0 17 #include "seed.h"
michael@0 18 #include "secerr.h"
michael@0 19
michael@0 20 static const seed_word SS[4][256] = {
michael@0 21 {
michael@0 22 0x2989a1a8, 0x05858184, 0x16c6d2d4, 0x13c3d3d0,
michael@0 23 0x14445054, 0x1d0d111c, 0x2c8ca0ac, 0x25052124,
michael@0 24 0x1d4d515c, 0x03434340, 0x18081018, 0x1e0e121c,
michael@0 25 0x11415150, 0x3cccf0fc, 0x0acac2c8, 0x23436360,
michael@0 26 0x28082028, 0x04444044, 0x20002020, 0x1d8d919c,
michael@0 27 0x20c0e0e0, 0x22c2e2e0, 0x08c8c0c8, 0x17071314,
michael@0 28 0x2585a1a4, 0x0f8f838c, 0x03030300, 0x3b4b7378,
michael@0 29 0x3b8bb3b8, 0x13031310, 0x12c2d2d0, 0x2ecee2ec,
michael@0 30 0x30407070, 0x0c8c808c, 0x3f0f333c, 0x2888a0a8,
michael@0 31 0x32023230, 0x1dcdd1dc, 0x36c6f2f4, 0x34447074,
michael@0 32 0x2ccce0ec, 0x15859194, 0x0b0b0308, 0x17475354,
michael@0 33 0x1c4c505c, 0x1b4b5358, 0x3d8db1bc, 0x01010100,
michael@0 34 0x24042024, 0x1c0c101c, 0x33437370, 0x18889098,
michael@0 35 0x10001010, 0x0cccc0cc, 0x32c2f2f0, 0x19c9d1d8,
michael@0 36 0x2c0c202c, 0x27c7e3e4, 0x32427270, 0x03838380,
michael@0 37 0x1b8b9398, 0x11c1d1d0, 0x06868284, 0x09c9c1c8,
michael@0 38 0x20406060, 0x10405050, 0x2383a3a0, 0x2bcbe3e8,
michael@0 39 0x0d0d010c, 0x3686b2b4, 0x1e8e929c, 0x0f4f434c,
michael@0 40 0x3787b3b4, 0x1a4a5258, 0x06c6c2c4, 0x38487078,
michael@0 41 0x2686a2a4, 0x12021210, 0x2f8fa3ac, 0x15c5d1d4,
michael@0 42 0x21416160, 0x03c3c3c0, 0x3484b0b4, 0x01414140,
michael@0 43 0x12425250, 0x3d4d717c, 0x0d8d818c, 0x08080008,
michael@0 44 0x1f0f131c, 0x19899198, 0x00000000, 0x19091118,
michael@0 45 0x04040004, 0x13435350, 0x37c7f3f4, 0x21c1e1e0,
michael@0 46 0x3dcdf1fc, 0x36467274, 0x2f0f232c, 0x27072324,
michael@0 47 0x3080b0b0, 0x0b8b8388, 0x0e0e020c, 0x2b8ba3a8,
michael@0 48 0x2282a2a0, 0x2e4e626c, 0x13839390, 0x0d4d414c,
michael@0 49 0x29496168, 0x3c4c707c, 0x09090108, 0x0a0a0208,
michael@0 50 0x3f8fb3bc, 0x2fcfe3ec, 0x33c3f3f0, 0x05c5c1c4,
michael@0 51 0x07878384, 0x14041014, 0x3ecef2fc, 0x24446064,
michael@0 52 0x1eced2dc, 0x2e0e222c, 0x0b4b4348, 0x1a0a1218,
michael@0 53 0x06060204, 0x21012120, 0x2b4b6368, 0x26466264,
michael@0 54 0x02020200, 0x35c5f1f4, 0x12829290, 0x0a8a8288,
michael@0 55 0x0c0c000c, 0x3383b3b0, 0x3e4e727c, 0x10c0d0d0,
michael@0 56 0x3a4a7278, 0x07474344, 0x16869294, 0x25c5e1e4,
michael@0 57 0x26062224, 0x00808080, 0x2d8da1ac, 0x1fcfd3dc,
michael@0 58 0x2181a1a0, 0x30003030, 0x37073334, 0x2e8ea2ac,
michael@0 59 0x36063234, 0x15051114, 0x22022220, 0x38083038,
michael@0 60 0x34c4f0f4, 0x2787a3a4, 0x05454144, 0x0c4c404c,
michael@0 61 0x01818180, 0x29c9e1e8, 0x04848084, 0x17879394,
michael@0 62 0x35053134, 0x0bcbc3c8, 0x0ecec2cc, 0x3c0c303c,
michael@0 63 0x31417170, 0x11011110, 0x07c7c3c4, 0x09898188,
michael@0 64 0x35457174, 0x3bcbf3f8, 0x1acad2d8, 0x38c8f0f8,
michael@0 65 0x14849094, 0x19495158, 0x02828280, 0x04c4c0c4,
michael@0 66 0x3fcff3fc, 0x09494148, 0x39093138, 0x27476364,
michael@0 67 0x00c0c0c0, 0x0fcfc3cc, 0x17c7d3d4, 0x3888b0b8,
michael@0 68 0x0f0f030c, 0x0e8e828c, 0x02424240, 0x23032320,
michael@0 69 0x11819190, 0x2c4c606c, 0x1bcbd3d8, 0x2484a0a4,
michael@0 70 0x34043034, 0x31c1f1f0, 0x08484048, 0x02c2c2c0,
michael@0 71 0x2f4f636c, 0x3d0d313c, 0x2d0d212c, 0x00404040,
michael@0 72 0x3e8eb2bc, 0x3e0e323c, 0x3c8cb0bc, 0x01c1c1c0,
michael@0 73 0x2a8aa2a8, 0x3a8ab2b8, 0x0e4e424c, 0x15455154,
michael@0 74 0x3b0b3338, 0x1cccd0dc, 0x28486068, 0x3f4f737c,
michael@0 75 0x1c8c909c, 0x18c8d0d8, 0x0a4a4248, 0x16465254,
michael@0 76 0x37477374, 0x2080a0a0, 0x2dcde1ec, 0x06464244,
michael@0 77 0x3585b1b4, 0x2b0b2328, 0x25456164, 0x3acaf2f8,
michael@0 78 0x23c3e3e0, 0x3989b1b8, 0x3181b1b0, 0x1f8f939c,
michael@0 79 0x1e4e525c, 0x39c9f1f8, 0x26c6e2e4, 0x3282b2b0,
michael@0 80 0x31013130, 0x2acae2e8, 0x2d4d616c, 0x1f4f535c,
michael@0 81 0x24c4e0e4, 0x30c0f0f0, 0x0dcdc1cc, 0x08888088,
michael@0 82 0x16061214, 0x3a0a3238, 0x18485058, 0x14c4d0d4,
michael@0 83 0x22426260, 0x29092128, 0x07070304, 0x33033330,
michael@0 84 0x28c8e0e8, 0x1b0b1318, 0x05050104, 0x39497178,
michael@0 85 0x10809090, 0x2a4a6268, 0x2a0a2228, 0x1a8a9298
michael@0 86 },
michael@0 87 {
michael@0 88 0x38380830, 0xe828c8e0, 0x2c2d0d21, 0xa42686a2,
michael@0 89 0xcc0fcfc3, 0xdc1eced2, 0xb03383b3, 0xb83888b0,
michael@0 90 0xac2f8fa3, 0x60204060, 0x54154551, 0xc407c7c3,
michael@0 91 0x44044440, 0x6c2f4f63, 0x682b4b63, 0x581b4b53,
michael@0 92 0xc003c3c3, 0x60224262, 0x30330333, 0xb43585b1,
michael@0 93 0x28290921, 0xa02080a0, 0xe022c2e2, 0xa42787a3,
michael@0 94 0xd013c3d3, 0x90118191, 0x10110111, 0x04060602,
michael@0 95 0x1c1c0c10, 0xbc3c8cb0, 0x34360632, 0x480b4b43,
michael@0 96 0xec2fcfe3, 0x88088880, 0x6c2c4c60, 0xa82888a0,
michael@0 97 0x14170713, 0xc404c4c0, 0x14160612, 0xf434c4f0,
michael@0 98 0xc002c2c2, 0x44054541, 0xe021c1e1, 0xd416c6d2,
michael@0 99 0x3c3f0f33, 0x3c3d0d31, 0x8c0e8e82, 0x98188890,
michael@0 100 0x28280820, 0x4c0e4e42, 0xf436c6f2, 0x3c3e0e32,
michael@0 101 0xa42585a1, 0xf839c9f1, 0x0c0d0d01, 0xdc1fcfd3,
michael@0 102 0xd818c8d0, 0x282b0b23, 0x64264662, 0x783a4a72,
michael@0 103 0x24270723, 0x2c2f0f23, 0xf031c1f1, 0x70324272,
michael@0 104 0x40024242, 0xd414c4d0, 0x40014141, 0xc000c0c0,
michael@0 105 0x70334373, 0x64274763, 0xac2c8ca0, 0x880b8b83,
michael@0 106 0xf437c7f3, 0xac2d8da1, 0x80008080, 0x1c1f0f13,
michael@0 107 0xc80acac2, 0x2c2c0c20, 0xa82a8aa2, 0x34340430,
michael@0 108 0xd012c2d2, 0x080b0b03, 0xec2ecee2, 0xe829c9e1,
michael@0 109 0x5c1d4d51, 0x94148490, 0x18180810, 0xf838c8f0,
michael@0 110 0x54174753, 0xac2e8ea2, 0x08080800, 0xc405c5c1,
michael@0 111 0x10130313, 0xcc0dcdc1, 0x84068682, 0xb83989b1,
michael@0 112 0xfc3fcff3, 0x7c3d4d71, 0xc001c1c1, 0x30310131,
michael@0 113 0xf435c5f1, 0x880a8a82, 0x682a4a62, 0xb03181b1,
michael@0 114 0xd011c1d1, 0x20200020, 0xd417c7d3, 0x00020202,
michael@0 115 0x20220222, 0x04040400, 0x68284860, 0x70314171,
michael@0 116 0x04070703, 0xd81bcbd3, 0x9c1d8d91, 0x98198991,
michael@0 117 0x60214161, 0xbc3e8eb2, 0xe426c6e2, 0x58194951,
michael@0 118 0xdc1dcdd1, 0x50114151, 0x90108090, 0xdc1cccd0,
michael@0 119 0x981a8a92, 0xa02383a3, 0xa82b8ba3, 0xd010c0d0,
michael@0 120 0x80018181, 0x0c0f0f03, 0x44074743, 0x181a0a12,
michael@0 121 0xe023c3e3, 0xec2ccce0, 0x8c0d8d81, 0xbc3f8fb3,
michael@0 122 0x94168692, 0x783b4b73, 0x5c1c4c50, 0xa02282a2,
michael@0 123 0xa02181a1, 0x60234363, 0x20230323, 0x4c0d4d41,
michael@0 124 0xc808c8c0, 0x9c1e8e92, 0x9c1c8c90, 0x383a0a32,
michael@0 125 0x0c0c0c00, 0x2c2e0e22, 0xb83a8ab2, 0x6c2e4e62,
michael@0 126 0x9c1f8f93, 0x581a4a52, 0xf032c2f2, 0x90128292,
michael@0 127 0xf033c3f3, 0x48094941, 0x78384870, 0xcc0cccc0,
michael@0 128 0x14150511, 0xf83bcbf3, 0x70304070, 0x74354571,
michael@0 129 0x7c3f4f73, 0x34350531, 0x10100010, 0x00030303,
michael@0 130 0x64244460, 0x6c2d4d61, 0xc406c6c2, 0x74344470,
michael@0 131 0xd415c5d1, 0xb43484b0, 0xe82acae2, 0x08090901,
michael@0 132 0x74364672, 0x18190911, 0xfc3ecef2, 0x40004040,
michael@0 133 0x10120212, 0xe020c0e0, 0xbc3d8db1, 0x04050501,
michael@0 134 0xf83acaf2, 0x00010101, 0xf030c0f0, 0x282a0a22,
michael@0 135 0x5c1e4e52, 0xa82989a1, 0x54164652, 0x40034343,
michael@0 136 0x84058581, 0x14140410, 0x88098981, 0x981b8b93,
michael@0 137 0xb03080b0, 0xe425c5e1, 0x48084840, 0x78394971,
michael@0 138 0x94178793, 0xfc3cccf0, 0x1c1e0e12, 0x80028282,
michael@0 139 0x20210121, 0x8c0c8c80, 0x181b0b13, 0x5c1f4f53,
michael@0 140 0x74374773, 0x54144450, 0xb03282b2, 0x1c1d0d11,
michael@0 141 0x24250521, 0x4c0f4f43, 0x00000000, 0x44064642,
michael@0 142 0xec2dcde1, 0x58184850, 0x50124252, 0xe82bcbe3,
michael@0 143 0x7c3e4e72, 0xd81acad2, 0xc809c9c1, 0xfc3dcdf1,
michael@0 144 0x30300030, 0x94158591, 0x64254561, 0x3c3c0c30,
michael@0 145 0xb43686b2, 0xe424c4e0, 0xb83b8bb3, 0x7c3c4c70,
michael@0 146 0x0c0e0e02, 0x50104050, 0x38390931, 0x24260622,
michael@0 147 0x30320232, 0x84048480, 0x68294961, 0x90138393,
michael@0 148 0x34370733, 0xe427c7e3, 0x24240420, 0xa42484a0,
michael@0 149 0xc80bcbc3, 0x50134353, 0x080a0a02, 0x84078783,
michael@0 150 0xd819c9d1, 0x4c0c4c40, 0x80038383, 0x8c0f8f83,
michael@0 151 0xcc0ecec2, 0x383b0b33, 0x480a4a42, 0xb43787b3
michael@0 152 },
michael@0 153 {
michael@0 154 0xa1a82989, 0x81840585, 0xd2d416c6, 0xd3d013c3,
michael@0 155 0x50541444, 0x111c1d0d, 0xa0ac2c8c, 0x21242505,
michael@0 156 0x515c1d4d, 0x43400343, 0x10181808, 0x121c1e0e,
michael@0 157 0x51501141, 0xf0fc3ccc, 0xc2c80aca, 0x63602343,
michael@0 158 0x20282808, 0x40440444, 0x20202000, 0x919c1d8d,
michael@0 159 0xe0e020c0, 0xe2e022c2, 0xc0c808c8, 0x13141707,
michael@0 160 0xa1a42585, 0x838c0f8f, 0x03000303, 0x73783b4b,
michael@0 161 0xb3b83b8b, 0x13101303, 0xd2d012c2, 0xe2ec2ece,
michael@0 162 0x70703040, 0x808c0c8c, 0x333c3f0f, 0xa0a82888,
michael@0 163 0x32303202, 0xd1dc1dcd, 0xf2f436c6, 0x70743444,
michael@0 164 0xe0ec2ccc, 0x91941585, 0x03080b0b, 0x53541747,
michael@0 165 0x505c1c4c, 0x53581b4b, 0xb1bc3d8d, 0x01000101,
michael@0 166 0x20242404, 0x101c1c0c, 0x73703343, 0x90981888,
michael@0 167 0x10101000, 0xc0cc0ccc, 0xf2f032c2, 0xd1d819c9,
michael@0 168 0x202c2c0c, 0xe3e427c7, 0x72703242, 0x83800383,
michael@0 169 0x93981b8b, 0xd1d011c1, 0x82840686, 0xc1c809c9,
michael@0 170 0x60602040, 0x50501040, 0xa3a02383, 0xe3e82bcb,
michael@0 171 0x010c0d0d, 0xb2b43686, 0x929c1e8e, 0x434c0f4f,
michael@0 172 0xb3b43787, 0x52581a4a, 0xc2c406c6, 0x70783848,
michael@0 173 0xa2a42686, 0x12101202, 0xa3ac2f8f, 0xd1d415c5,
michael@0 174 0x61602141, 0xc3c003c3, 0xb0b43484, 0x41400141,
michael@0 175 0x52501242, 0x717c3d4d, 0x818c0d8d, 0x00080808,
michael@0 176 0x131c1f0f, 0x91981989, 0x00000000, 0x11181909,
michael@0 177 0x00040404, 0x53501343, 0xf3f437c7, 0xe1e021c1,
michael@0 178 0xf1fc3dcd, 0x72743646, 0x232c2f0f, 0x23242707,
michael@0 179 0xb0b03080, 0x83880b8b, 0x020c0e0e, 0xa3a82b8b,
michael@0 180 0xa2a02282, 0x626c2e4e, 0x93901383, 0x414c0d4d,
michael@0 181 0x61682949, 0x707c3c4c, 0x01080909, 0x02080a0a,
michael@0 182 0xb3bc3f8f, 0xe3ec2fcf, 0xf3f033c3, 0xc1c405c5,
michael@0 183 0x83840787, 0x10141404, 0xf2fc3ece, 0x60642444,
michael@0 184 0xd2dc1ece, 0x222c2e0e, 0x43480b4b, 0x12181a0a,
michael@0 185 0x02040606, 0x21202101, 0x63682b4b, 0x62642646,
michael@0 186 0x02000202, 0xf1f435c5, 0x92901282, 0x82880a8a,
michael@0 187 0x000c0c0c, 0xb3b03383, 0x727c3e4e, 0xd0d010c0,
michael@0 188 0x72783a4a, 0x43440747, 0x92941686, 0xe1e425c5,
michael@0 189 0x22242606, 0x80800080, 0xa1ac2d8d, 0xd3dc1fcf,
michael@0 190 0xa1a02181, 0x30303000, 0x33343707, 0xa2ac2e8e,
michael@0 191 0x32343606, 0x11141505, 0x22202202, 0x30383808,
michael@0 192 0xf0f434c4, 0xa3a42787, 0x41440545, 0x404c0c4c,
michael@0 193 0x81800181, 0xe1e829c9, 0x80840484, 0x93941787,
michael@0 194 0x31343505, 0xc3c80bcb, 0xc2cc0ece, 0x303c3c0c,
michael@0 195 0x71703141, 0x11101101, 0xc3c407c7, 0x81880989,
michael@0 196 0x71743545, 0xf3f83bcb, 0xd2d81aca, 0xf0f838c8,
michael@0 197 0x90941484, 0x51581949, 0x82800282, 0xc0c404c4,
michael@0 198 0xf3fc3fcf, 0x41480949, 0x31383909, 0x63642747,
michael@0 199 0xc0c000c0, 0xc3cc0fcf, 0xd3d417c7, 0xb0b83888,
michael@0 200 0x030c0f0f, 0x828c0e8e, 0x42400242, 0x23202303,
michael@0 201 0x91901181, 0x606c2c4c, 0xd3d81bcb, 0xa0a42484,
michael@0 202 0x30343404, 0xf1f031c1, 0x40480848, 0xc2c002c2,
michael@0 203 0x636c2f4f, 0x313c3d0d, 0x212c2d0d, 0x40400040,
michael@0 204 0xb2bc3e8e, 0x323c3e0e, 0xb0bc3c8c, 0xc1c001c1,
michael@0 205 0xa2a82a8a, 0xb2b83a8a, 0x424c0e4e, 0x51541545,
michael@0 206 0x33383b0b, 0xd0dc1ccc, 0x60682848, 0x737c3f4f,
michael@0 207 0x909c1c8c, 0xd0d818c8, 0x42480a4a, 0x52541646,
michael@0 208 0x73743747, 0xa0a02080, 0xe1ec2dcd, 0x42440646,
michael@0 209 0xb1b43585, 0x23282b0b, 0x61642545, 0xf2f83aca,
michael@0 210 0xe3e023c3, 0xb1b83989, 0xb1b03181, 0x939c1f8f,
michael@0 211 0x525c1e4e, 0xf1f839c9, 0xe2e426c6, 0xb2b03282,
michael@0 212 0x31303101, 0xe2e82aca, 0x616c2d4d, 0x535c1f4f,
michael@0 213 0xe0e424c4, 0xf0f030c0, 0xc1cc0dcd, 0x80880888,
michael@0 214 0x12141606, 0x32383a0a, 0x50581848, 0xd0d414c4,
michael@0 215 0x62602242, 0x21282909, 0x03040707, 0x33303303,
michael@0 216 0xe0e828c8, 0x13181b0b, 0x01040505, 0x71783949,
michael@0 217 0x90901080, 0x62682a4a, 0x22282a0a, 0x92981a8a
michael@0 218 },
michael@0 219 {
michael@0 220 0x08303838, 0xc8e0e828, 0x0d212c2d, 0x86a2a426,
michael@0 221 0xcfc3cc0f, 0xced2dc1e, 0x83b3b033, 0x88b0b838,
michael@0 222 0x8fa3ac2f, 0x40606020, 0x45515415, 0xc7c3c407,
michael@0 223 0x44404404, 0x4f636c2f, 0x4b63682b, 0x4b53581b,
michael@0 224 0xc3c3c003, 0x42626022, 0x03333033, 0x85b1b435,
michael@0 225 0x09212829, 0x80a0a020, 0xc2e2e022, 0x87a3a427,
michael@0 226 0xc3d3d013, 0x81919011, 0x01111011, 0x06020406,
michael@0 227 0x0c101c1c, 0x8cb0bc3c, 0x06323436, 0x4b43480b,
michael@0 228 0xcfe3ec2f, 0x88808808, 0x4c606c2c, 0x88a0a828,
michael@0 229 0x07131417, 0xc4c0c404, 0x06121416, 0xc4f0f434,
michael@0 230 0xc2c2c002, 0x45414405, 0xc1e1e021, 0xc6d2d416,
michael@0 231 0x0f333c3f, 0x0d313c3d, 0x8e828c0e, 0x88909818,
michael@0 232 0x08202828, 0x4e424c0e, 0xc6f2f436, 0x0e323c3e,
michael@0 233 0x85a1a425, 0xc9f1f839, 0x0d010c0d, 0xcfd3dc1f,
michael@0 234 0xc8d0d818, 0x0b23282b, 0x46626426, 0x4a72783a,
michael@0 235 0x07232427, 0x0f232c2f, 0xc1f1f031, 0x42727032,
michael@0 236 0x42424002, 0xc4d0d414, 0x41414001, 0xc0c0c000,
michael@0 237 0x43737033, 0x47636427, 0x8ca0ac2c, 0x8b83880b,
michael@0 238 0xc7f3f437, 0x8da1ac2d, 0x80808000, 0x0f131c1f,
michael@0 239 0xcac2c80a, 0x0c202c2c, 0x8aa2a82a, 0x04303434,
michael@0 240 0xc2d2d012, 0x0b03080b, 0xcee2ec2e, 0xc9e1e829,
michael@0 241 0x4d515c1d, 0x84909414, 0x08101818, 0xc8f0f838,
michael@0 242 0x47535417, 0x8ea2ac2e, 0x08000808, 0xc5c1c405,
michael@0 243 0x03131013, 0xcdc1cc0d, 0x86828406, 0x89b1b839,
michael@0 244 0xcff3fc3f, 0x4d717c3d, 0xc1c1c001, 0x01313031,
michael@0 245 0xc5f1f435, 0x8a82880a, 0x4a62682a, 0x81b1b031,
michael@0 246 0xc1d1d011, 0x00202020, 0xc7d3d417, 0x02020002,
michael@0 247 0x02222022, 0x04000404, 0x48606828, 0x41717031,
michael@0 248 0x07030407, 0xcbd3d81b, 0x8d919c1d, 0x89919819,
michael@0 249 0x41616021, 0x8eb2bc3e, 0xc6e2e426, 0x49515819,
michael@0 250 0xcdd1dc1d, 0x41515011, 0x80909010, 0xccd0dc1c,
michael@0 251 0x8a92981a, 0x83a3a023, 0x8ba3a82b, 0xc0d0d010,
michael@0 252 0x81818001, 0x0f030c0f, 0x47434407, 0x0a12181a,
michael@0 253 0xc3e3e023, 0xcce0ec2c, 0x8d818c0d, 0x8fb3bc3f,
michael@0 254 0x86929416, 0x4b73783b, 0x4c505c1c, 0x82a2a022,
michael@0 255 0x81a1a021, 0x43636023, 0x03232023, 0x4d414c0d,
michael@0 256 0xc8c0c808, 0x8e929c1e, 0x8c909c1c, 0x0a32383a,
michael@0 257 0x0c000c0c, 0x0e222c2e, 0x8ab2b83a, 0x4e626c2e,
michael@0 258 0x8f939c1f, 0x4a52581a, 0xc2f2f032, 0x82929012,
michael@0 259 0xc3f3f033, 0x49414809, 0x48707838, 0xccc0cc0c,
michael@0 260 0x05111415, 0xcbf3f83b, 0x40707030, 0x45717435,
michael@0 261 0x4f737c3f, 0x05313435, 0x00101010, 0x03030003,
michael@0 262 0x44606424, 0x4d616c2d, 0xc6c2c406, 0x44707434,
michael@0 263 0xc5d1d415, 0x84b0b434, 0xcae2e82a, 0x09010809,
michael@0 264 0x46727436, 0x09111819, 0xcef2fc3e, 0x40404000,
michael@0 265 0x02121012, 0xc0e0e020, 0x8db1bc3d, 0x05010405,
michael@0 266 0xcaf2f83a, 0x01010001, 0xc0f0f030, 0x0a22282a,
michael@0 267 0x4e525c1e, 0x89a1a829, 0x46525416, 0x43434003,
michael@0 268 0x85818405, 0x04101414, 0x89818809, 0x8b93981b,
michael@0 269 0x80b0b030, 0xc5e1e425, 0x48404808, 0x49717839,
michael@0 270 0x87939417, 0xccf0fc3c, 0x0e121c1e, 0x82828002,
michael@0 271 0x01212021, 0x8c808c0c, 0x0b13181b, 0x4f535c1f,
michael@0 272 0x47737437, 0x44505414, 0x82b2b032, 0x0d111c1d,
michael@0 273 0x05212425, 0x4f434c0f, 0x00000000, 0x46424406,
michael@0 274 0xcde1ec2d, 0x48505818, 0x42525012, 0xcbe3e82b,
michael@0 275 0x4e727c3e, 0xcad2d81a, 0xc9c1c809, 0xcdf1fc3d,
michael@0 276 0x00303030, 0x85919415, 0x45616425, 0x0c303c3c,
michael@0 277 0x86b2b436, 0xc4e0e424, 0x8bb3b83b, 0x4c707c3c,
michael@0 278 0x0e020c0e, 0x40505010, 0x09313839, 0x06222426,
michael@0 279 0x02323032, 0x84808404, 0x49616829, 0x83939013,
michael@0 280 0x07333437, 0xc7e3e427, 0x04202424, 0x84a0a424,
michael@0 281 0xcbc3c80b, 0x43535013, 0x0a02080a, 0x87838407,
michael@0 282 0xc9d1d819, 0x4c404c0c, 0x83838003, 0x8f838c0f,
michael@0 283 0xcec2cc0e, 0x0b33383b, 0x4a42480a, 0x87b3b437
michael@0 284 }
michael@0 285 };
michael@0 286
michael@0 287 /* key schedule constants - golden ratio */
michael@0 288 #define KC0 0x9e3779b9
michael@0 289 #define KC1 0x3c6ef373
michael@0 290 #define KC2 0x78dde6e6
michael@0 291 #define KC3 0xf1bbcdcc
michael@0 292 #define KC4 0xe3779b99
michael@0 293 #define KC5 0xc6ef3733
michael@0 294 #define KC6 0x8dde6e67
michael@0 295 #define KC7 0x1bbcdccf
michael@0 296 #define KC8 0x3779b99e
michael@0 297 #define KC9 0x6ef3733c
michael@0 298 #define KC10 0xdde6e678
michael@0 299 #define KC11 0xbbcdccf1
michael@0 300 #define KC12 0x779b99e3
michael@0 301 #define KC13 0xef3733c6
michael@0 302 #define KC14 0xde6e678d
michael@0 303 #define KC15 0xbcdccf1b
michael@0 304
michael@0 305
michael@0 306 void SEED_set_key(const unsigned char rawkey[SEED_KEY_LENGTH],
michael@0 307 SEED_KEY_SCHEDULE *ks)
michael@0 308 {
michael@0 309 seed_word K0, K1, K2, K3;
michael@0 310 seed_word t0, t1;
michael@0 311
michael@0 312 char2word(rawkey , K0);
michael@0 313 char2word(rawkey+4 , K1);
michael@0 314 char2word(rawkey+8 , K2);
michael@0 315 char2word(rawkey+12, K3);
michael@0 316
michael@0 317 t0 = (K0 + K2 - KC0);
michael@0 318 t1 = (K1 - K3 + KC0);
michael@0 319 KEYUPDATE_TEMP(t0, t1, &ks->data[0]);
michael@0 320 KEYSCHEDULE_UPDATE1(t0, t1, K0, K1, K2, K3, KC1);
michael@0 321 KEYUPDATE_TEMP(t0, t1, &ks->data[2]);
michael@0 322 KEYSCHEDULE_UPDATE0(t0, t1, K0, K1, K2, K3, KC2);
michael@0 323 KEYUPDATE_TEMP(t0, t1, &ks->data[4]);
michael@0 324 KEYSCHEDULE_UPDATE1(t0, t1, K0, K1, K2, K3, KC3);
michael@0 325 KEYUPDATE_TEMP(t0, t1, &ks->data[6]);
michael@0 326 KEYSCHEDULE_UPDATE0(t0, t1, K0, K1, K2, K3, KC4);
michael@0 327 KEYUPDATE_TEMP(t0, t1, &ks->data[8]);
michael@0 328 KEYSCHEDULE_UPDATE1(t0, t1, K0, K1, K2, K3, KC5);
michael@0 329 KEYUPDATE_TEMP(t0, t1, &ks->data[10]);
michael@0 330 KEYSCHEDULE_UPDATE0(t0, t1, K0, K1, K2, K3, KC6);
michael@0 331 KEYUPDATE_TEMP(t0, t1, &ks->data[12]);
michael@0 332 KEYSCHEDULE_UPDATE1(t0, t1, K0, K1, K2, K3, KC7);
michael@0 333 KEYUPDATE_TEMP(t0, t1, &ks->data[14]);
michael@0 334 KEYSCHEDULE_UPDATE0(t0, t1, K0, K1, K2, K3, KC8);
michael@0 335 KEYUPDATE_TEMP(t0, t1, &ks->data[16]);
michael@0 336 KEYSCHEDULE_UPDATE1(t0, t1, K0, K1, K2, K3, KC9);
michael@0 337 KEYUPDATE_TEMP(t0, t1, &ks->data[18]);
michael@0 338 KEYSCHEDULE_UPDATE0(t0, t1, K0, K1, K2, K3, KC10);
michael@0 339 KEYUPDATE_TEMP(t0, t1, &ks->data[20]);
michael@0 340 KEYSCHEDULE_UPDATE1(t0, t1, K0, K1, K2, K3, KC11);
michael@0 341 KEYUPDATE_TEMP(t0, t1, &ks->data[22]);
michael@0 342 KEYSCHEDULE_UPDATE0(t0, t1, K0, K1, K2, K3, KC12);
michael@0 343 KEYUPDATE_TEMP(t0, t1, &ks->data[24]);
michael@0 344 KEYSCHEDULE_UPDATE1(t0, t1, K0, K1, K2, K3, KC13);
michael@0 345 KEYUPDATE_TEMP(t0, t1, &ks->data[26]);
michael@0 346 KEYSCHEDULE_UPDATE0(t0, t1, K0, K1, K2, K3, KC14);
michael@0 347 KEYUPDATE_TEMP(t0, t1, &ks->data[28]);
michael@0 348 KEYSCHEDULE_UPDATE1(t0, t1, K0, K1, K2, K3, KC15);
michael@0 349 KEYUPDATE_TEMP(t0, t1, &ks->data[30]);
michael@0 350 }
michael@0 351
michael@0 352 void SEED_encrypt(const unsigned char s[SEED_BLOCK_SIZE],
michael@0 353 unsigned char d[SEED_BLOCK_SIZE],
michael@0 354 const SEED_KEY_SCHEDULE *ks)
michael@0 355 {
michael@0 356 seed_word L0, L1, R0, R1;
michael@0 357 seed_word t0, t1;
michael@0 358
michael@0 359 char2word(s, L0);
michael@0 360 char2word(s+4, L1);
michael@0 361 char2word(s+8, R0);
michael@0 362 char2word(s+12, R1);
michael@0 363
michael@0 364 E_SEED(t0, t1, L0, L1, R0, R1, 0);
michael@0 365 E_SEED(t0, t1, R0, R1, L0, L1, 2);
michael@0 366 E_SEED(t0, t1, L0, L1, R0, R1, 4);
michael@0 367 E_SEED(t0, t1, R0, R1, L0, L1, 6);
michael@0 368 E_SEED(t0, t1, L0, L1, R0, R1, 8);
michael@0 369 E_SEED(t0, t1, R0, R1, L0, L1, 10);
michael@0 370 E_SEED(t0, t1, L0, L1, R0, R1, 12);
michael@0 371 E_SEED(t0, t1, R0, R1, L0, L1, 14);
michael@0 372 E_SEED(t0, t1, L0, L1, R0, R1, 16);
michael@0 373 E_SEED(t0, t1, R0, R1, L0, L1, 18);
michael@0 374 E_SEED(t0, t1, L0, L1, R0, R1, 20);
michael@0 375 E_SEED(t0, t1, R0, R1, L0, L1, 22);
michael@0 376 E_SEED(t0, t1, L0, L1, R0, R1, 24);
michael@0 377 E_SEED(t0, t1, R0, R1, L0, L1, 26);
michael@0 378 E_SEED(t0, t1, L0, L1, R0, R1, 28);
michael@0 379 E_SEED(t0, t1, R0, R1, L0, L1, 30);
michael@0 380
michael@0 381 word2char(R0, d);
michael@0 382 word2char(R1, d+4);
michael@0 383 word2char(L0, d+8);
michael@0 384 word2char(L1, d+12);
michael@0 385 }
michael@0 386
michael@0 387 void SEED_decrypt(const unsigned char s[SEED_BLOCK_SIZE],
michael@0 388 unsigned char d[SEED_BLOCK_SIZE],
michael@0 389 const SEED_KEY_SCHEDULE *ks)
michael@0 390 {
michael@0 391 seed_word L0, L1, R0, R1;
michael@0 392 seed_word t0, t1;
michael@0 393
michael@0 394 char2word(s, L0);
michael@0 395 char2word(s+4, L1);
michael@0 396 char2word(s+8, R0);
michael@0 397 char2word(s+12, R1);
michael@0 398
michael@0 399 E_SEED(t0, t1, L0, L1, R0, R1, 30);
michael@0 400 E_SEED(t0, t1, R0, R1, L0, L1, 28);
michael@0 401 E_SEED(t0, t1, L0, L1, R0, R1, 26);
michael@0 402 E_SEED(t0, t1, R0, R1, L0, L1, 24);
michael@0 403 E_SEED(t0, t1, L0, L1, R0, R1, 22);
michael@0 404 E_SEED(t0, t1, R0, R1, L0, L1, 20);
michael@0 405 E_SEED(t0, t1, L0, L1, R0, R1, 18);
michael@0 406 E_SEED(t0, t1, R0, R1, L0, L1, 16);
michael@0 407 E_SEED(t0, t1, L0, L1, R0, R1, 14);
michael@0 408 E_SEED(t0, t1, R0, R1, L0, L1, 12);
michael@0 409 E_SEED(t0, t1, L0, L1, R0, R1, 10);
michael@0 410 E_SEED(t0, t1, R0, R1, L0, L1, 8);
michael@0 411 E_SEED(t0, t1, L0, L1, R0, R1, 6);
michael@0 412 E_SEED(t0, t1, R0, R1, L0, L1, 4);
michael@0 413 E_SEED(t0, t1, L0, L1, R0, R1, 2);
michael@0 414 E_SEED(t0, t1, R0, R1, L0, L1, 0);
michael@0 415
michael@0 416 word2char(R0, d);
michael@0 417 word2char(R1, d+4);
michael@0 418 word2char(L0, d+8);
michael@0 419 word2char(L1, d+12);
michael@0 420 }
michael@0 421
michael@0 422 void SEED_ecb_encrypt(const unsigned char *in,
michael@0 423 unsigned char *out,
michael@0 424 const SEED_KEY_SCHEDULE *ks, int enc)
michael@0 425 {
michael@0 426 if (enc) {
michael@0 427 SEED_encrypt(in, out, ks);
michael@0 428 } else {
michael@0 429 SEED_decrypt(in, out, ks);
michael@0 430 }
michael@0 431 }
michael@0 432
michael@0 433
michael@0 434 void SEED_cbc_encrypt(const unsigned char *in, unsigned char *out,
michael@0 435 size_t len, const SEED_KEY_SCHEDULE *ks,
michael@0 436 unsigned char ivec[SEED_BLOCK_SIZE], int enc)
michael@0 437 {
michael@0 438 size_t n;
michael@0 439 unsigned char tmp[SEED_BLOCK_SIZE];
michael@0 440 const unsigned char *iv = ivec;
michael@0 441
michael@0 442 if (enc) {
michael@0 443 while (len >= SEED_BLOCK_SIZE) {
michael@0 444 for (n = 0; n < SEED_BLOCK_SIZE; ++n)
michael@0 445 out[n] = in[n] ^ iv[n];
michael@0 446
michael@0 447 SEED_encrypt(out, out, ks);
michael@0 448 iv = out;
michael@0 449 len -= SEED_BLOCK_SIZE;
michael@0 450 in += SEED_BLOCK_SIZE;
michael@0 451 out += SEED_BLOCK_SIZE;
michael@0 452 }
michael@0 453
michael@0 454 if (len) {
michael@0 455 for (n = 0; n < len; ++n)
michael@0 456 out[n] = in[n] ^ iv[n];
michael@0 457
michael@0 458 for (n = len; n < SEED_BLOCK_SIZE; ++n)
michael@0 459 out[n] = iv[n];
michael@0 460
michael@0 461 SEED_encrypt(out, out, ks);
michael@0 462 iv = out;
michael@0 463 }
michael@0 464
michael@0 465 memcpy(ivec, iv, SEED_BLOCK_SIZE);
michael@0 466 } else if (in != out) {
michael@0 467 while (len >= SEED_BLOCK_SIZE) {
michael@0 468 SEED_decrypt(in, out, ks);
michael@0 469
michael@0 470 for (n = 0; n < SEED_BLOCK_SIZE; ++n)
michael@0 471 out[n] ^= iv[n];
michael@0 472
michael@0 473 iv = in;
michael@0 474 len -= SEED_BLOCK_SIZE;
michael@0 475 in += SEED_BLOCK_SIZE;
michael@0 476 out += SEED_BLOCK_SIZE;
michael@0 477 }
michael@0 478
michael@0 479 if (len) {
michael@0 480 SEED_decrypt(in, tmp, ks);
michael@0 481
michael@0 482 for (n = 0; n < len; ++n)
michael@0 483 out[n] = tmp[n] ^ iv[n];
michael@0 484
michael@0 485 iv = in;
michael@0 486 }
michael@0 487
michael@0 488 memcpy(ivec, iv, SEED_BLOCK_SIZE);
michael@0 489 } else {
michael@0 490 while (len >= SEED_BLOCK_SIZE) {
michael@0 491 memcpy(tmp, in, SEED_BLOCK_SIZE);
michael@0 492 SEED_decrypt(in, out, ks);
michael@0 493
michael@0 494 for (n = 0; n < SEED_BLOCK_SIZE; ++n)
michael@0 495 out[n] ^= ivec[n];
michael@0 496
michael@0 497 memcpy(ivec, tmp, SEED_BLOCK_SIZE);
michael@0 498 len -= SEED_BLOCK_SIZE;
michael@0 499 in += SEED_BLOCK_SIZE;
michael@0 500 out += SEED_BLOCK_SIZE;
michael@0 501 }
michael@0 502
michael@0 503 if (len) {
michael@0 504 memcpy(tmp, in, SEED_BLOCK_SIZE);
michael@0 505 SEED_decrypt(tmp, tmp, ks);
michael@0 506
michael@0 507 for (n = 0; n < len; ++n)
michael@0 508 out[n] = tmp[n] ^ ivec[n];
michael@0 509
michael@0 510 memcpy(ivec, tmp, SEED_BLOCK_SIZE);
michael@0 511 }
michael@0 512 }
michael@0 513 }
michael@0 514
michael@0 515 SEEDContext *
michael@0 516 SEED_AllocateContext(void)
michael@0 517 {
michael@0 518 return PORT_ZNew(SEEDContext);
michael@0 519 }
michael@0 520
michael@0 521 SECStatus
michael@0 522 SEED_InitContext(SEEDContext *cx, const unsigned char *key,
michael@0 523 unsigned int keylen, const unsigned char *iv,
michael@0 524 int mode, unsigned int encrypt,unsigned int unused)
michael@0 525 {
michael@0 526 if (!cx) {
michael@0 527 PORT_SetError(SEC_ERROR_INVALID_ARGS);
michael@0 528 return SECFailure;
michael@0 529 }
michael@0 530
michael@0 531 switch (mode) {
michael@0 532 case NSS_SEED:
michael@0 533 SEED_set_key(key, &cx->ks);
michael@0 534 cx->mode = NSS_SEED;
michael@0 535 cx->encrypt = encrypt;
michael@0 536 break;
michael@0 537
michael@0 538 case NSS_SEED_CBC:
michael@0 539 memcpy(cx->iv, iv, 16);
michael@0 540 SEED_set_key(key, &cx->ks);
michael@0 541 cx->mode = NSS_SEED_CBC;
michael@0 542 cx->encrypt = encrypt;
michael@0 543 break;
michael@0 544
michael@0 545 default:
michael@0 546 PORT_SetError(SEC_ERROR_INVALID_ARGS);
michael@0 547 return SECFailure;
michael@0 548 }
michael@0 549
michael@0 550 return SECSuccess;
michael@0 551 }
michael@0 552
michael@0 553 SEEDContext *
michael@0 554 SEED_CreateContext(const unsigned char * key, const unsigned char *iv,
michael@0 555 int mode, PRBool encrypt)
michael@0 556 {
michael@0 557 SEEDContext *cx = PORT_ZNew(SEEDContext);
michael@0 558 SECStatus rv = SEED_InitContext(cx, key, SEED_KEY_LENGTH, iv, mode,
michael@0 559 encrypt, 0);
michael@0 560
michael@0 561 if (rv != SECSuccess) {
michael@0 562 PORT_ZFree(cx, sizeof *cx);
michael@0 563 cx = NULL;
michael@0 564 }
michael@0 565
michael@0 566 return cx;
michael@0 567 }
michael@0 568
michael@0 569 void
michael@0 570 SEED_DestroyContext(SEEDContext *cx, PRBool freeit)
michael@0 571 {
michael@0 572 if (cx) {
michael@0 573 memset(cx, 0, sizeof *cx);
michael@0 574
michael@0 575 if (freeit)
michael@0 576 PORT_Free(cx);
michael@0 577 }
michael@0 578 }
michael@0 579
michael@0 580 SECStatus
michael@0 581 SEED_Encrypt(SEEDContext *cx, unsigned char *out, unsigned int *outLen,
michael@0 582 unsigned int maxOutLen, const unsigned char *in,
michael@0 583 unsigned int inLen)
michael@0 584 {
michael@0 585 if (!cx) {
michael@0 586 PORT_SetError(SEC_ERROR_INVALID_ARGS);
michael@0 587 return SECFailure;
michael@0 588 }
michael@0 589
michael@0 590 if (!cx->encrypt) {
michael@0 591 PORT_SetError(SEC_ERROR_INVALID_ARGS);
michael@0 592 return SECFailure;
michael@0 593 }
michael@0 594
michael@0 595 switch (cx->mode) {
michael@0 596 case NSS_SEED:
michael@0 597 SEED_ecb_encrypt(in, out, &cx->ks, 1);
michael@0 598 *outLen = inLen;
michael@0 599 break;
michael@0 600
michael@0 601 case NSS_SEED_CBC:
michael@0 602 SEED_cbc_encrypt(in, out, inLen, &cx->ks, cx->iv, 1);
michael@0 603 *outLen = inLen;
michael@0 604 break;
michael@0 605
michael@0 606 default:
michael@0 607 PORT_SetError(SEC_ERROR_INVALID_ARGS);
michael@0 608 return SECFailure;
michael@0 609 }
michael@0 610
michael@0 611 return SECSuccess;
michael@0 612 }
michael@0 613
michael@0 614 SECStatus
michael@0 615 SEED_Decrypt(SEEDContext *cx, unsigned char *out, unsigned int *outLen,
michael@0 616 unsigned int maxOutLen, const unsigned char *in,
michael@0 617 unsigned int inLen)
michael@0 618 {
michael@0 619 if (!cx) {
michael@0 620 PORT_SetError(SEC_ERROR_INVALID_ARGS);
michael@0 621 return SECFailure;
michael@0 622 }
michael@0 623
michael@0 624 if (cx->encrypt) {
michael@0 625 PORT_SetError(SEC_ERROR_INVALID_ARGS);
michael@0 626 return SECFailure;
michael@0 627 }
michael@0 628
michael@0 629 switch (cx->mode) {
michael@0 630 case NSS_SEED:
michael@0 631 SEED_ecb_encrypt(in, out, &cx->ks, 0);
michael@0 632 *outLen = inLen;
michael@0 633 break;
michael@0 634
michael@0 635 case NSS_SEED_CBC:
michael@0 636 SEED_cbc_encrypt(in, out, inLen, &cx->ks, cx->iv, 0);
michael@0 637 *outLen = inLen;
michael@0 638 break;
michael@0 639
michael@0 640 default:
michael@0 641 PORT_SetError(SEC_ERROR_INVALID_ARGS);
michael@0 642 return SECFailure;
michael@0 643 }
michael@0 644
michael@0 645 return SECSuccess;
michael@0 646 }

Mercurial Repository: The Tor Browser

Europalab SCM Repository Server

mercurial