/* mickey128.c */
/*
This file is part of the ARM-Crypto-Lib.
Copyright (C) 2006-2011 Daniel Otte (daniel.otte@rub.de)
This program is free software: you can redistribute it and/or modify
it under the terms of the GNU General Public License as published by
the Free Software Foundation, either version 3 of the License, or
(at your option) any later version.
This program is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
GNU General Public License for more details.
You should have received a copy of the GNU General Public License
along with this program. If not, see .
*/
#include
#include
#include "memxor.h"
#include "mickey128.h"
/*
RTAPS = { 0,4,5, 8,10,11,14 ,16,20, 25,30, 32,35,36,38,
42,43,46, 50,51,53,54,55, 56,57,60,61,62,63,
65,66,69, 73,74,76,79, 80,81,82,85,86, 90,91,92,95,
97,100,101, 105,106,107,108,109,111, 112,113,115,116,117,
127, 128,129,130,131,133,135, 136,137,140,142, 145,148,150,
152,153,154,156,157 }
0011.0001 0100.1101 0001.0001 0100.0010 0101.1001
0100.1100 1110.1100 1111.0011
0010.0110 1001.0110 0110.0111 1001.1100
0011.0010 1011.1110 0011.1011
1000.0000 1010.1111 0101.0011 0101.0010
0011.0111
1000110010110010100010000100001010011010001100100011011111001111011001
0001101001111001100011100101001100011111011101110000000001111101011100
101001001010111011
1000.1100 1011.0010 1000.1000 0100.0010 1001.1010 0011.0010
0011.0111 1100.1111 0110.0100 0110.1001 1110.0110 0011.1001
0100.1100 0111.1101 1101.1100 0000.0001 1111.0101 1100.1010
0100.1010 1110.11
*/
uint8_t rtaps[] = {
0x31, 0x4D, 0x11, 0x42,
0x59, 0x4C, 0xEC, 0xF3,
0x26, 0x96, 0x67, 0x9C,
0x32, 0xBE, 0x3B, 0x80,
0xAF, 0x53, 0x52, 0x37
};
#define SHL0(a) c1=((a)>>7); (a)=(((a)<<1)|c0)
#define SHL1(a) c0=((a)>>7); (a)=(((a)<<1)|c1)
#define SHLX0(a) c1=((a)>>7); (a)^=(((a)<<1)|c0)
#define SHLX1(a) c0=((a)>>7); (a)^=(((a)<<1)|c1)
static
void clock_r(uint8_t* r, uint8_t ibit, uint8_t cbit){
uint8_t i,c0=0,c1=0; /* carry */
ibit ^= ((r[159/8])>>(159%8))&1; /* ibit is now the same as feedback_bit */
if(cbit){
for(i=0; i<10; ++i){
SHLX0(r[2*i+0]);
SHLX1(r[2*i+1]);
}
} else {
for(i=0; i<10; ++i){
SHL0(r[2*i+0]);
SHL1(r[2*i+1]);
}
}
if(ibit){
memxor(r, rtaps, 20);
}
}
/* comp0 (filling spaces with zero) (one at each side)
* 0101.1110 1111.0010 1101.0110 0101.1101
* 0101.0101 0000.1001 0010.0110 0111.1001
* 0110.0010 0111.0000 0000.0000 0111.1001
* 0011.0001 1101.1001 1010.1111 0011.0111
* 1011.1110 0000.0110 1011.1110 0000.1111
* --
* 5E F2 D6 5D
* 55 09 26 79
* 62 70 00 79
* 31 D9 AF 37
* BE 06 BE 0F
*/
uint8_t comp0[] = {
0x5E, 0xF2, 0xD6, 0x5D,
0x55, 0x09, 0x26, 0x79,
0x62, 0x70, 0x00, 0x79,
0x31, 0xD9, 0xAF, 0x37,
0xBE, 0x06, 0xBE, 0x0F
};
/* comp1 (shifting one bit right to make calculation easier, so inserting two zeros)
* 0110.0000 0011.1110 0011.0010 1111.1010
* 0011.0000 0111.1001 0110.1100 1111.1101
* 1100.0001 1000.0111 0000.0001 1111.1000
* 1000.1010 1100.0110 1100.0001 1100.1100
* 0110.1010 1011.0111 1110.1000 1111.1111
* --
* 60 3E 32 FA
* 30 79 6C FD
* C1 87 01 F8
* 8A C6 C1 CC
* 6A B7 E8 FF
*/
/*
uint8_t comp1[] PROGMEM = {
0x60, 0x3E, 0x32, 0xFA, 0x30, 0x79, 0x6C, 0xFD, 0xC1, 0x87,
0x01, 0xF8, 0x8A, 0xC6, 0xC1, 0xCC, 0x6A, 0xB7, 0xE8, 0xFF
};
*/
/* comp1
* 0000.1100 1111.1000 1001.1000 1011.1110
* 0001.1001 0011.1100 0110.1101 0111.1111
* 0000.0111 1100.0011 0000.0000 0011.1110
* 1010.0010 1100.0111 0000.0110 0110.0110
* 1010.1101 1101.1010 0010.1111 1111.1110
* --
* 0C F8 98 BE
* 19 3C 6D 7F
* 07 C3 00 3E
* A2 C7 06 66
* AD DA 2F FE
*/
/*
uint8_t comp1[] PROGMEM = {
0x0C, 0xF8, 0x98, 0xBE, 0x19, 0x3C, 0x6D, 0x7F, 0x07, 0xC3,
0x00, 0x3E, 0xA2, 0xC7, 0x06, 0x66, 0xAD, 0xDA, 0x2F, 0xFE
};
*/
/* comp1
* 0011.0000 0001.1111 0001.1001 0111.1101
* 1001.1000 0011.1100 1011.0110 1111.1110
* 1110.0000 1100.0011 0000.0000 0111.1100
* 0100.0101 1110.0011 0110.0000 0110.0110
* 1011.0101 0101.1011 1111.0100 0111.1111
* --
* 30 1F 19 7D
* 98 3C B6 FE
* E0 C3 00 7C
* 45 E3 60 66
* B5 5B F4 7F
*/
uint8_t comp1[] = {
0x30, 0x1F, 0x19, 0x7D,
0x98, 0x3C, 0xB6, 0xFE,
0xE0, 0xC3, 0x00, 0x7C,
0x45, 0xE3, 0x60, 0x66,
0xB5, 0x5B, 0xF4, 0x7F
};
/* fb0
* 1010.1111 0001.1111 0011.1100 1100.0100
* 0010.0010 1010.0011 0010.1111 0000.1110
* 1000.0001 0100.1101 1110.0101 0110.0110
* 1001.0001 0100.1011 0101.0100 1101.0100
* 1100.0001 0000.1011 0110.0011 1000.0011
* --
* AF 1F 3C C4
* 22 A3 2F 0E
* 81 4D E5 66
* 91 4B 54 D4
* C1 0B 63 83
*/
uint8_t fb0[] = {
0xAF, 0x1F, 0x3C, 0xC4,
0x22, 0xA3, 0x2F, 0x0E,
0x81, 0x4D, 0xE5, 0x66,
0x91, 0x4B, 0x54, 0xD4,
0xC1, 0x0B, 0x63, 0x83
};
/* fb1
* 1010.1011 0111.0111 1111.0100 1001.1011
* 1001.0000 1000.1100 0111.1001 0111.0000
* 1011.0110 0001.1000 1001.1010 0110.1111
* 1110.0111 0111.1110 0100.1011 0110.1100
* 1110.1111 1000.0000 1010.0111 0001.0001
* --
* AB 77 F4 9B
* 90 8C 79 70
* B6 18 9A 6F
* E7 7E 4B 6C
* EF 80 A7 11
*/
uint8_t fb1[] = {
0xAB, 0x77, 0xF4, 0x9B,
0x90, 0x8C, 0x79, 0x70,
0xB6, 0x18, 0x9A, 0x6F,
0xE7, 0x7E, 0x4B, 0x6C,
0xEF, 0x80, 0xA7, 0x11
};
static
void clock_s(uint8_t* s, uint8_t ibit, uint8_t cbit){
uint8_t s0[20], s1[20];
uint8_t i,c=0, c2=0;
ibit ^= (s[19])>>7;
memcpy(s0,s,20);
memxor(s0, comp0, 20);
for(i=0; i<20; ++i){
s1[19-i]= c|((s[19-i])>>1);
c = (s[19-i])<<7;
}
memxor(s1, comp1, 20);
c=0;
for(i=0; i<20; ++i){
c2=(s[i])>>7;
s[i]=((s[i])<<1) ^ ((s0[i])&(s1[i])) ^ c;
c=c2;
}
s[0] &= 0xFE;
if(ibit){
memxor(s, cbit?fb1:fb0, 20);
}
}
static
void clock_kg(uint8_t* r, uint8_t* s, uint8_t mixing, uint8_t input){
uint8_t rb, sb;
rb = ((s[ 54/8])>>(( 54%8))) ^ ((r[106/8])>>(((106%8))));
sb = ((s[106/8])>>((106%8))) ^ ((r[ 53/8])>>((( 53%8))));
rb &= 1;
sb &= 1;
mixing = input ^ (mixing & ((s[80/8]>>((80%8))) & 1));
clock_r(r, mixing, rb);
clock_s(s, input, sb);
}
void mickey128_init(void* key, uint16_t keysize_b,
void* iv, uint16_t ivsize_b,
mickey128_ctx_t* ctx){
uint16_t i;
memset(ctx->r, 0, 20);
memset(ctx->s, 0, 20);
for(i=0; ir, ctx->s, 1, 1&((((uint8_t*)iv)[i/8])>>(7-(i%8))));
}
for(i=0; ir, ctx->s, 1, 1&((((uint8_t*)key)[i/8])>>(7-(i%8))));
}
for(i=0; i<160; ++i){
clock_kg(ctx->r, ctx->s, 1, 0);
}
}
uint8_t mickey128_getbit(mickey128_ctx_t* ctx){
uint8_t ret;
ret = 1&(*(ctx->r) ^ *(ctx->s));
clock_kg(ctx->r, ctx->s, 0, 0);
return ret;
}
uint8_t mickey128_getbyte(mickey128_ctx_t* ctx){
uint8_t i,ret=0;
for(i=0; i<8; ++i){
ret<<=1;
ret |= 1&(((ctx->r)[0]) ^ ((ctx->s)[0]));
clock_kg(ctx->r, ctx->s, 0, 0);
}
return ret;
}