arm-crypto-lib/mickey128/mickey128.c

/* mickey128.c */
/*
    This file is part of the ARM-Crypto-Lib.
    Copyright (C) 2006-2011  Daniel Otte (daniel.otte@rub.de)

    This program is free software: you can redistribute it and/or modify
    it under the terms of the GNU General Public License as published by
    the Free Software Foundation, either version 3 of the License, or
    (at your option) any later version.

    This program is distributed in the hope that it will be useful,
    but WITHOUT ANY WARRANTY; without even the implied warranty of
    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
    GNU General Public License for more details.

    You should have received a copy of the GNU General Public License
    along with this program.  If not, see <http://www.gnu.org/licenses/>.
*/

#include <stdint.h>
#include <string.h>
#include "memxor.h"
#include "mickey128.h"

/*
RTAPS = { 0,4,5,  8,10,11,14  ,16,20,  25,30,  32,35,36,38,
         42,43,46,  50,51,53,54,55,  56,57,60,61,62,63,  
         65,66,69,  73,74,76,79,  80,81,82,85,86,  90,91,92,95,  
         97,100,101,  105,106,107,108,109,111,  112,113,115,116,117,
         127,  128,129,130,131,133,135,  136,137,140,142,  145,148,150,  
         152,153,154,156,157 }
         
         0011.0001  0100.1101  0001.0001  0100.0010  0101.1001
         0100.1100  1110.1100  1111.0011 
         0010.0110  1001.0110  0110.0111  1001.1100 
         0011.0010  1011.1110  0011.1011
         1000.0000  1010.1111  0101.0011  0101.0010
         0011.0111
          
         1000110010110010100010000100001010011010001100100011011111001111011001
         0001101001111001100011100101001100011111011101110000000001111101011100
         101001001010111011
          
         1000.1100 1011.0010 1000.1000 0100.0010 1001.1010 0011.0010 
         0011.0111 1100.1111 0110.0100 0110.1001 1110.0110 0011.1001
         0100.1100 0111.1101 1101.1100 0000.0001 1111.0101 1100.1010
         0100.1010 1110.11
*/

uint8_t rtaps[] = {
	0x31, 0x4D, 0x11, 0x42,
	0x59, 0x4C, 0xEC, 0xF3,
	0x26, 0x96, 0x67, 0x9C,
	0x32, 0xBE, 0x3B, 0x80, 
	0xAF, 0x53, 0x52, 0x37
};
	
#define SHL0(a) c1=((a)>>7); (a)=(((a)<<1)|c0)
#define SHL1(a) c0=((a)>>7); (a)=(((a)<<1)|c1)

#define SHLX0(a) c1=((a)>>7); (a)^=(((a)<<1)|c0)
#define SHLX1(a) c0=((a)>>7); (a)^=(((a)<<1)|c1)

static
void clock_r(uint8_t* r, uint8_t ibit, uint8_t cbit){
	uint8_t i,c0=0,c1=0; /* carry */
	ibit ^= ((r[159/8])>>(159%8))&1; /* ibit is now the same as feedback_bit */
	if(cbit){
		for(i=0; i<10; ++i){
			SHLX0(r[2*i+0]);
			SHLX1(r[2*i+1]);
		}
	} else {
		for(i=0; i<10; ++i){
			SHL0(r[2*i+0]);
			SHL1(r[2*i+1]);
		}
	}
	if(ibit){
		memxor(r, rtaps, 20);
	}
}

/* comp0 (filling spaces with zero) (one at each side)
 * 0101.1110 1111.0010 1101.0110 0101.1101 
 * 0101.0101 0000.1001 0010.0110 0111.1001
 * 0110.0010 0111.0000 0000.0000 0111.1001
 * 0011.0001 1101.1001 1010.1111 0011.0111
 * 1011.1110 0000.0110 1011.1110 0000.1111
 * --
 * 5E F2 D6 5D
 * 55 09 26 79
 * 62 70 00 79
 * 31 D9 AF 37
 * BE 06 BE 0F
 */ 
uint8_t comp0[] = {
	0x5E, 0xF2, 0xD6, 0x5D,
	0x55, 0x09, 0x26, 0x79,
	0x62, 0x70, 0x00, 0x79, 
	0x31, 0xD9, 0xAF, 0x37, 
	0xBE, 0x06, 0xBE, 0x0F
};


/* comp1 (shifting one bit right to make calculation easier, so inserting two zeros)
 * 0110.0000 0011.1110 0011.0010 1111.1010 
 * 0011.0000 0111.1001 0110.1100 1111.1101
 * 1100.0001 1000.0111 0000.0001 1111.1000
 * 1000.1010 1100.0110 1100.0001 1100.1100
 * 0110.1010 1011.0111 1110.1000 1111.1111
 * --
 * 60 3E 32 FA
 * 30 79 6C FD
 * C1 87 01 F8
 * 8A C6 C1 CC
 * 6A B7 E8 FF
*/
/*
uint8_t comp1[] PROGMEM = {
	0x60, 0x3E, 0x32, 0xFA, 0x30, 0x79, 0x6C, 0xFD, 0xC1, 0x87, 
	0x01, 0xF8, 0x8A, 0xC6, 0xC1, 0xCC, 0x6A, 0xB7, 0xE8, 0xFF
};
*/
/* comp1
 * 0000.1100 1111.1000 1001.1000 1011.1110
 * 0001.1001 0011.1100 0110.1101 0111.1111
 * 0000.0111 1100.0011 0000.0000 0011.1110
 * 1010.0010 1100.0111 0000.0110 0110.0110
 * 1010.1101 1101.1010 0010.1111 1111.1110
 * --
 * 0C F8 98 BE
 * 19 3C 6D 7F
 * 07 C3 00 3E
 * A2 C7 06 66
 * AD DA 2F FE
*/
/*
uint8_t comp1[] PROGMEM = {
	0x0C, 0xF8, 0x98, 0xBE, 0x19, 0x3C, 0x6D, 0x7F, 0x07, 0xC3,
	0x00, 0x3E, 0xA2, 0xC7, 0x06, 0x66, 0xAD, 0xDA, 0x2F, 0xFE
};
*/
/* comp1
 * 0011.0000 0001.1111 0001.1001 0111.1101
 * 1001.1000 0011.1100 1011.0110 1111.1110
 * 1110.0000 1100.0011 0000.0000 0111.1100
 * 0100.0101 1110.0011 0110.0000 0110.0110
 * 1011.0101 0101.1011 1111.0100 0111.1111
 * --
 * 30 1F 19 7D
 * 98 3C B6 FE
 * E0 C3 00 7C
 * 45 E3 60 66
 * B5 5B F4 7F
*/

uint8_t comp1[] = {
	0x30, 0x1F, 0x19, 0x7D,
	0x98, 0x3C, 0xB6, 0xFE, 
	0xE0, 0xC3, 0x00, 0x7C, 
	0x45, 0xE3, 0x60, 0x66, 
	0xB5, 0x5B, 0xF4, 0x7F
};

/* fb0
 * 1010.1111 0001.1111 0011.1100 1100.0100
 * 0010.0010 1010.0011 0010.1111 0000.1110
 * 1000.0001 0100.1101 1110.0101 0110.0110
 * 1001.0001 0100.1011 0101.0100 1101.0100
 * 1100.0001 0000.1011 0110.0011 1000.0011
 * --
 * AF 1F 3C C4
 * 22 A3 2F 0E
 * 81 4D E5 66
 * 91 4B 54 D4
 * C1 0B 63 83
 */ 
uint8_t fb0[] = {
	0xAF, 0x1F, 0x3C, 0xC4, 
	0x22, 0xA3, 0x2F, 0x0E, 
	0x81, 0x4D, 0xE5, 0x66, 
	0x91, 0x4B, 0x54, 0xD4, 
	0xC1, 0x0B, 0x63, 0x83
};

/* fb1
 * 1010.1011 0111.0111 1111.0100 1001.1011 
 * 1001.0000 1000.1100 0111.1001 0111.0000
 * 1011.0110 0001.1000 1001.1010 0110.1111
 * 1110.0111 0111.1110 0100.1011 0110.1100 
 * 1110.1111 1000.0000 1010.0111 0001.0001
 * --
 * AB 77 F4 9B
 * 90 8C 79 70
 * B6 18 9A 6F
 * E7 7E 4B 6C
 * EF 80 A7 11
 */ 
uint8_t fb1[] = {
	0xAB, 0x77, 0xF4, 0x9B, 
	0x90, 0x8C, 0x79, 0x70, 
	0xB6, 0x18, 0x9A, 0x6F, 
	0xE7, 0x7E, 0x4B, 0x6C, 
	0xEF, 0x80, 0xA7, 0x11
};

static
void clock_s(uint8_t* s, uint8_t ibit, uint8_t cbit){
	uint8_t s0[20], s1[20];
	uint8_t i,c=0, c2=0;
	ibit ^= (s[19])>>7;
	memcpy(s0,s,20);
	memxor(s0, comp0, 20);
	for(i=0; i<20; ++i){
		s1[19-i]= c|((s[19-i])>>1);
		c = (s[19-i])<<7;
	}
	memxor(s1, comp1, 20);
	c=0;
	for(i=0; i<20; ++i){
		c2=(s[i])>>7;
		s[i]=((s[i])<<1) ^ ((s0[i])&(s1[i])) ^ c;
		c=c2;
	}
	s[0] &= 0xFE;
	if(ibit){
		memxor(s, cbit?fb1:fb0, 20);
	}
}

static
void clock_kg(uint8_t* r, uint8_t* s, uint8_t mixing, uint8_t input){
	uint8_t rb, sb;
	rb = ((s[ 54/8])>>(( 54%8))) ^ ((r[106/8])>>(((106%8))));
	sb = ((s[106/8])>>((106%8))) ^ ((r[ 53/8])>>((( 53%8))));
	rb &= 1;
	sb &= 1;
	mixing = input ^ (mixing & ((s[80/8]>>((80%8))) & 1)); 
	clock_r(r, mixing, rb);
	clock_s(s, input, sb);
}

void mickey128_init(void* key, uint16_t keysize_b, 
                    void* iv,  uint16_t ivsize_b, 
                    mickey128_ctx_t* ctx){
	uint16_t i;
	memset(ctx->r, 0, 20);
	memset(ctx->s, 0, 20);
	for(i=0; i<ivsize_b; ++i){
		clock_kg(ctx->r, ctx->s, 1, 1&((((uint8_t*)iv)[i/8])>>(7-(i%8))));
	}
	for(i=0; i<keysize_b; ++i){
		clock_kg(ctx->r, ctx->s, 1, 1&((((uint8_t*)key)[i/8])>>(7-(i%8))));
	}                  
	for(i=0; i<160; ++i){
		clock_kg(ctx->r, ctx->s, 1, 0);
	}                  
} 

uint8_t mickey128_getbit(mickey128_ctx_t* ctx){
	uint8_t ret;
	ret = 1&(*(ctx->r) ^ *(ctx->s));
	clock_kg(ctx->r, ctx->s, 0, 0);
	return ret;
}

uint8_t mickey128_getbyte(mickey128_ctx_t* ctx){
	uint8_t i,ret=0;
	for(i=0; i<8; ++i){
		ret<<=1;
		ret |= 1&(((ctx->r)[0]) ^ ((ctx->s)[0]));
		clock_kg(ctx->r, ctx->s, 0, 0);
	}
	return ret;
}