xref: /openbmc/linux/include/crypto/aria.h (revision baf2c002)
1 /* SPDX-License-Identifier: GPL-2.0-or-later */
2 /*
3  * Cryptographic API.
4  *
5  * ARIA Cipher Algorithm.
6  *
7  * Documentation of ARIA can be found in RFC 5794.
8  * Copyright (c) 2022 Taehee Yoo <ap420073@gmail.com>
9  * Copyright (c) 2022 Taehee Yoo <ap420073@gmail.com>
10  *
11  * Information for ARIA
12  *     http://210.104.33.10/ARIA/index-e.html (English)
13  *     http://seed.kisa.or.kr/ (Korean)
14  *
15  * Public domain version is distributed above.
16  */
17 
18 #ifndef _CRYPTO_ARIA_H
19 #define _CRYPTO_ARIA_H
20 
21 #include <linux/module.h>
22 #include <linux/init.h>
23 #include <linux/types.h>
24 #include <linux/errno.h>
25 #include <linux/crypto.h>
26 #include <asm/byteorder.h>
27 
28 #define ARIA_MIN_KEY_SIZE	16
29 #define ARIA_MAX_KEY_SIZE	32
30 #define ARIA_BLOCK_SIZE		16
31 #define ARIA_MAX_RD_KEYS	17
32 #define ARIA_RD_KEY_WORDS	(ARIA_BLOCK_SIZE / sizeof(u32))
33 
34 struct aria_ctx {
35 	int key_length;
36 	int rounds;
37 	u32 enc_key[ARIA_MAX_RD_KEYS][ARIA_RD_KEY_WORDS];
38 	u32 dec_key[ARIA_MAX_RD_KEYS][ARIA_RD_KEY_WORDS];
39 };
40 
41 static const u32 key_rc[5][4] = {
42 	{ 0x517cc1b7, 0x27220a94, 0xfe13abe8, 0xfa9a6ee0 },
43 	{ 0x6db14acc, 0x9e21c820, 0xff28b1d5, 0xef5de2b0 },
44 	{ 0xdb92371d, 0x2126e970, 0x03249775, 0x04e8c90e },
45 	{ 0x517cc1b7, 0x27220a94, 0xfe13abe8, 0xfa9a6ee0 },
46 	{ 0x6db14acc, 0x9e21c820, 0xff28b1d5, 0xef5de2b0 }
47 };
48 
49 static const u32 s1[256] = {
50 	0x00636363, 0x007c7c7c, 0x00777777, 0x007b7b7b,
51 	0x00f2f2f2, 0x006b6b6b, 0x006f6f6f, 0x00c5c5c5,
52 	0x00303030, 0x00010101, 0x00676767, 0x002b2b2b,
53 	0x00fefefe, 0x00d7d7d7, 0x00ababab, 0x00767676,
54 	0x00cacaca, 0x00828282, 0x00c9c9c9, 0x007d7d7d,
55 	0x00fafafa, 0x00595959, 0x00474747, 0x00f0f0f0,
56 	0x00adadad, 0x00d4d4d4, 0x00a2a2a2, 0x00afafaf,
57 	0x009c9c9c, 0x00a4a4a4, 0x00727272, 0x00c0c0c0,
58 	0x00b7b7b7, 0x00fdfdfd, 0x00939393, 0x00262626,
59 	0x00363636, 0x003f3f3f, 0x00f7f7f7, 0x00cccccc,
60 	0x00343434, 0x00a5a5a5, 0x00e5e5e5, 0x00f1f1f1,
61 	0x00717171, 0x00d8d8d8, 0x00313131, 0x00151515,
62 	0x00040404, 0x00c7c7c7, 0x00232323, 0x00c3c3c3,
63 	0x00181818, 0x00969696, 0x00050505, 0x009a9a9a,
64 	0x00070707, 0x00121212, 0x00808080, 0x00e2e2e2,
65 	0x00ebebeb, 0x00272727, 0x00b2b2b2, 0x00757575,
66 	0x00090909, 0x00838383, 0x002c2c2c, 0x001a1a1a,
67 	0x001b1b1b, 0x006e6e6e, 0x005a5a5a, 0x00a0a0a0,
68 	0x00525252, 0x003b3b3b, 0x00d6d6d6, 0x00b3b3b3,
69 	0x00292929, 0x00e3e3e3, 0x002f2f2f, 0x00848484,
70 	0x00535353, 0x00d1d1d1, 0x00000000, 0x00ededed,
71 	0x00202020, 0x00fcfcfc, 0x00b1b1b1, 0x005b5b5b,
72 	0x006a6a6a, 0x00cbcbcb, 0x00bebebe, 0x00393939,
73 	0x004a4a4a, 0x004c4c4c, 0x00585858, 0x00cfcfcf,
74 	0x00d0d0d0, 0x00efefef, 0x00aaaaaa, 0x00fbfbfb,
75 	0x00434343, 0x004d4d4d, 0x00333333, 0x00858585,
76 	0x00454545, 0x00f9f9f9, 0x00020202, 0x007f7f7f,
77 	0x00505050, 0x003c3c3c, 0x009f9f9f, 0x00a8a8a8,
78 	0x00515151, 0x00a3a3a3, 0x00404040, 0x008f8f8f,
79 	0x00929292, 0x009d9d9d, 0x00383838, 0x00f5f5f5,
80 	0x00bcbcbc, 0x00b6b6b6, 0x00dadada, 0x00212121,
81 	0x00101010, 0x00ffffff, 0x00f3f3f3, 0x00d2d2d2,
82 	0x00cdcdcd, 0x000c0c0c, 0x00131313, 0x00ececec,
83 	0x005f5f5f, 0x00979797, 0x00444444, 0x00171717,
84 	0x00c4c4c4, 0x00a7a7a7, 0x007e7e7e, 0x003d3d3d,
85 	0x00646464, 0x005d5d5d, 0x00191919, 0x00737373,
86 	0x00606060, 0x00818181, 0x004f4f4f, 0x00dcdcdc,
87 	0x00222222, 0x002a2a2a, 0x00909090, 0x00888888,
88 	0x00464646, 0x00eeeeee, 0x00b8b8b8, 0x00141414,
89 	0x00dedede, 0x005e5e5e, 0x000b0b0b, 0x00dbdbdb,
90 	0x00e0e0e0, 0x00323232, 0x003a3a3a, 0x000a0a0a,
91 	0x00494949, 0x00060606, 0x00242424, 0x005c5c5c,
92 	0x00c2c2c2, 0x00d3d3d3, 0x00acacac, 0x00626262,
93 	0x00919191, 0x00959595, 0x00e4e4e4, 0x00797979,
94 	0x00e7e7e7, 0x00c8c8c8, 0x00373737, 0x006d6d6d,
95 	0x008d8d8d, 0x00d5d5d5, 0x004e4e4e, 0x00a9a9a9,
96 	0x006c6c6c, 0x00565656, 0x00f4f4f4, 0x00eaeaea,
97 	0x00656565, 0x007a7a7a, 0x00aeaeae, 0x00080808,
98 	0x00bababa, 0x00787878, 0x00252525, 0x002e2e2e,
99 	0x001c1c1c, 0x00a6a6a6, 0x00b4b4b4, 0x00c6c6c6,
100 	0x00e8e8e8, 0x00dddddd, 0x00747474, 0x001f1f1f,
101 	0x004b4b4b, 0x00bdbdbd, 0x008b8b8b, 0x008a8a8a,
102 	0x00707070, 0x003e3e3e, 0x00b5b5b5, 0x00666666,
103 	0x00484848, 0x00030303, 0x00f6f6f6, 0x000e0e0e,
104 	0x00616161, 0x00353535, 0x00575757, 0x00b9b9b9,
105 	0x00868686, 0x00c1c1c1, 0x001d1d1d, 0x009e9e9e,
106 	0x00e1e1e1, 0x00f8f8f8, 0x00989898, 0x00111111,
107 	0x00696969, 0x00d9d9d9, 0x008e8e8e, 0x00949494,
108 	0x009b9b9b, 0x001e1e1e, 0x00878787, 0x00e9e9e9,
109 	0x00cecece, 0x00555555, 0x00282828, 0x00dfdfdf,
110 	0x008c8c8c, 0x00a1a1a1, 0x00898989, 0x000d0d0d,
111 	0x00bfbfbf, 0x00e6e6e6, 0x00424242, 0x00686868,
112 	0x00414141, 0x00999999, 0x002d2d2d, 0x000f0f0f,
113 	0x00b0b0b0, 0x00545454, 0x00bbbbbb, 0x00161616
114 };
115 
116 static const u32 s2[256] = {
117 	0xe200e2e2, 0x4e004e4e, 0x54005454, 0xfc00fcfc,
118 	0x94009494, 0xc200c2c2, 0x4a004a4a, 0xcc00cccc,
119 	0x62006262, 0x0d000d0d, 0x6a006a6a, 0x46004646,
120 	0x3c003c3c, 0x4d004d4d, 0x8b008b8b, 0xd100d1d1,
121 	0x5e005e5e, 0xfa00fafa, 0x64006464, 0xcb00cbcb,
122 	0xb400b4b4, 0x97009797, 0xbe00bebe, 0x2b002b2b,
123 	0xbc00bcbc, 0x77007777, 0x2e002e2e, 0x03000303,
124 	0xd300d3d3, 0x19001919, 0x59005959, 0xc100c1c1,
125 	0x1d001d1d, 0x06000606, 0x41004141, 0x6b006b6b,
126 	0x55005555, 0xf000f0f0, 0x99009999, 0x69006969,
127 	0xea00eaea, 0x9c009c9c, 0x18001818, 0xae00aeae,
128 	0x63006363, 0xdf00dfdf, 0xe700e7e7, 0xbb00bbbb,
129 	0x00000000, 0x73007373, 0x66006666, 0xfb00fbfb,
130 	0x96009696, 0x4c004c4c, 0x85008585, 0xe400e4e4,
131 	0x3a003a3a, 0x09000909, 0x45004545, 0xaa00aaaa,
132 	0x0f000f0f, 0xee00eeee, 0x10001010, 0xeb00ebeb,
133 	0x2d002d2d, 0x7f007f7f, 0xf400f4f4, 0x29002929,
134 	0xac00acac, 0xcf00cfcf, 0xad00adad, 0x91009191,
135 	0x8d008d8d, 0x78007878, 0xc800c8c8, 0x95009595,
136 	0xf900f9f9, 0x2f002f2f, 0xce00cece, 0xcd00cdcd,
137 	0x08000808, 0x7a007a7a, 0x88008888, 0x38003838,
138 	0x5c005c5c, 0x83008383, 0x2a002a2a, 0x28002828,
139 	0x47004747, 0xdb00dbdb, 0xb800b8b8, 0xc700c7c7,
140 	0x93009393, 0xa400a4a4, 0x12001212, 0x53005353,
141 	0xff00ffff, 0x87008787, 0x0e000e0e, 0x31003131,
142 	0x36003636, 0x21002121, 0x58005858, 0x48004848,
143 	0x01000101, 0x8e008e8e, 0x37003737, 0x74007474,
144 	0x32003232, 0xca00caca, 0xe900e9e9, 0xb100b1b1,
145 	0xb700b7b7, 0xab00abab, 0x0c000c0c, 0xd700d7d7,
146 	0xc400c4c4, 0x56005656, 0x42004242, 0x26002626,
147 	0x07000707, 0x98009898, 0x60006060, 0xd900d9d9,
148 	0xb600b6b6, 0xb900b9b9, 0x11001111, 0x40004040,
149 	0xec00ecec, 0x20002020, 0x8c008c8c, 0xbd00bdbd,
150 	0xa000a0a0, 0xc900c9c9, 0x84008484, 0x04000404,
151 	0x49004949, 0x23002323, 0xf100f1f1, 0x4f004f4f,
152 	0x50005050, 0x1f001f1f, 0x13001313, 0xdc00dcdc,
153 	0xd800d8d8, 0xc000c0c0, 0x9e009e9e, 0x57005757,
154 	0xe300e3e3, 0xc300c3c3, 0x7b007b7b, 0x65006565,
155 	0x3b003b3b, 0x02000202, 0x8f008f8f, 0x3e003e3e,
156 	0xe800e8e8, 0x25002525, 0x92009292, 0xe500e5e5,
157 	0x15001515, 0xdd00dddd, 0xfd00fdfd, 0x17001717,
158 	0xa900a9a9, 0xbf00bfbf, 0xd400d4d4, 0x9a009a9a,
159 	0x7e007e7e, 0xc500c5c5, 0x39003939, 0x67006767,
160 	0xfe00fefe, 0x76007676, 0x9d009d9d, 0x43004343,
161 	0xa700a7a7, 0xe100e1e1, 0xd000d0d0, 0xf500f5f5,
162 	0x68006868, 0xf200f2f2, 0x1b001b1b, 0x34003434,
163 	0x70007070, 0x05000505, 0xa300a3a3, 0x8a008a8a,
164 	0xd500d5d5, 0x79007979, 0x86008686, 0xa800a8a8,
165 	0x30003030, 0xc600c6c6, 0x51005151, 0x4b004b4b,
166 	0x1e001e1e, 0xa600a6a6, 0x27002727, 0xf600f6f6,
167 	0x35003535, 0xd200d2d2, 0x6e006e6e, 0x24002424,
168 	0x16001616, 0x82008282, 0x5f005f5f, 0xda00dada,
169 	0xe600e6e6, 0x75007575, 0xa200a2a2, 0xef00efef,
170 	0x2c002c2c, 0xb200b2b2, 0x1c001c1c, 0x9f009f9f,
171 	0x5d005d5d, 0x6f006f6f, 0x80008080, 0x0a000a0a,
172 	0x72007272, 0x44004444, 0x9b009b9b, 0x6c006c6c,
173 	0x90009090, 0x0b000b0b, 0x5b005b5b, 0x33003333,
174 	0x7d007d7d, 0x5a005a5a, 0x52005252, 0xf300f3f3,
175 	0x61006161, 0xa100a1a1, 0xf700f7f7, 0xb000b0b0,
176 	0xd600d6d6, 0x3f003f3f, 0x7c007c7c, 0x6d006d6d,
177 	0xed00eded, 0x14001414, 0xe000e0e0, 0xa500a5a5,
178 	0x3d003d3d, 0x22002222, 0xb300b3b3, 0xf800f8f8,
179 	0x89008989, 0xde00dede, 0x71007171, 0x1a001a1a,
180 	0xaf00afaf, 0xba00baba, 0xb500b5b5, 0x81008181
181 };
182 
183 static const u32 x1[256] = {
184 	0x52520052, 0x09090009, 0x6a6a006a, 0xd5d500d5,
185 	0x30300030, 0x36360036, 0xa5a500a5, 0x38380038,
186 	0xbfbf00bf, 0x40400040, 0xa3a300a3, 0x9e9e009e,
187 	0x81810081, 0xf3f300f3, 0xd7d700d7, 0xfbfb00fb,
188 	0x7c7c007c, 0xe3e300e3, 0x39390039, 0x82820082,
189 	0x9b9b009b, 0x2f2f002f, 0xffff00ff, 0x87870087,
190 	0x34340034, 0x8e8e008e, 0x43430043, 0x44440044,
191 	0xc4c400c4, 0xdede00de, 0xe9e900e9, 0xcbcb00cb,
192 	0x54540054, 0x7b7b007b, 0x94940094, 0x32320032,
193 	0xa6a600a6, 0xc2c200c2, 0x23230023, 0x3d3d003d,
194 	0xeeee00ee, 0x4c4c004c, 0x95950095, 0x0b0b000b,
195 	0x42420042, 0xfafa00fa, 0xc3c300c3, 0x4e4e004e,
196 	0x08080008, 0x2e2e002e, 0xa1a100a1, 0x66660066,
197 	0x28280028, 0xd9d900d9, 0x24240024, 0xb2b200b2,
198 	0x76760076, 0x5b5b005b, 0xa2a200a2, 0x49490049,
199 	0x6d6d006d, 0x8b8b008b, 0xd1d100d1, 0x25250025,
200 	0x72720072, 0xf8f800f8, 0xf6f600f6, 0x64640064,
201 	0x86860086, 0x68680068, 0x98980098, 0x16160016,
202 	0xd4d400d4, 0xa4a400a4, 0x5c5c005c, 0xcccc00cc,
203 	0x5d5d005d, 0x65650065, 0xb6b600b6, 0x92920092,
204 	0x6c6c006c, 0x70700070, 0x48480048, 0x50500050,
205 	0xfdfd00fd, 0xeded00ed, 0xb9b900b9, 0xdada00da,
206 	0x5e5e005e, 0x15150015, 0x46460046, 0x57570057,
207 	0xa7a700a7, 0x8d8d008d, 0x9d9d009d, 0x84840084,
208 	0x90900090, 0xd8d800d8, 0xabab00ab, 0x00000000,
209 	0x8c8c008c, 0xbcbc00bc, 0xd3d300d3, 0x0a0a000a,
210 	0xf7f700f7, 0xe4e400e4, 0x58580058, 0x05050005,
211 	0xb8b800b8, 0xb3b300b3, 0x45450045, 0x06060006,
212 	0xd0d000d0, 0x2c2c002c, 0x1e1e001e, 0x8f8f008f,
213 	0xcaca00ca, 0x3f3f003f, 0x0f0f000f, 0x02020002,
214 	0xc1c100c1, 0xafaf00af, 0xbdbd00bd, 0x03030003,
215 	0x01010001, 0x13130013, 0x8a8a008a, 0x6b6b006b,
216 	0x3a3a003a, 0x91910091, 0x11110011, 0x41410041,
217 	0x4f4f004f, 0x67670067, 0xdcdc00dc, 0xeaea00ea,
218 	0x97970097, 0xf2f200f2, 0xcfcf00cf, 0xcece00ce,
219 	0xf0f000f0, 0xb4b400b4, 0xe6e600e6, 0x73730073,
220 	0x96960096, 0xacac00ac, 0x74740074, 0x22220022,
221 	0xe7e700e7, 0xadad00ad, 0x35350035, 0x85850085,
222 	0xe2e200e2, 0xf9f900f9, 0x37370037, 0xe8e800e8,
223 	0x1c1c001c, 0x75750075, 0xdfdf00df, 0x6e6e006e,
224 	0x47470047, 0xf1f100f1, 0x1a1a001a, 0x71710071,
225 	0x1d1d001d, 0x29290029, 0xc5c500c5, 0x89890089,
226 	0x6f6f006f, 0xb7b700b7, 0x62620062, 0x0e0e000e,
227 	0xaaaa00aa, 0x18180018, 0xbebe00be, 0x1b1b001b,
228 	0xfcfc00fc, 0x56560056, 0x3e3e003e, 0x4b4b004b,
229 	0xc6c600c6, 0xd2d200d2, 0x79790079, 0x20200020,
230 	0x9a9a009a, 0xdbdb00db, 0xc0c000c0, 0xfefe00fe,
231 	0x78780078, 0xcdcd00cd, 0x5a5a005a, 0xf4f400f4,
232 	0x1f1f001f, 0xdddd00dd, 0xa8a800a8, 0x33330033,
233 	0x88880088, 0x07070007, 0xc7c700c7, 0x31310031,
234 	0xb1b100b1, 0x12120012, 0x10100010, 0x59590059,
235 	0x27270027, 0x80800080, 0xecec00ec, 0x5f5f005f,
236 	0x60600060, 0x51510051, 0x7f7f007f, 0xa9a900a9,
237 	0x19190019, 0xb5b500b5, 0x4a4a004a, 0x0d0d000d,
238 	0x2d2d002d, 0xe5e500e5, 0x7a7a007a, 0x9f9f009f,
239 	0x93930093, 0xc9c900c9, 0x9c9c009c, 0xefef00ef,
240 	0xa0a000a0, 0xe0e000e0, 0x3b3b003b, 0x4d4d004d,
241 	0xaeae00ae, 0x2a2a002a, 0xf5f500f5, 0xb0b000b0,
242 	0xc8c800c8, 0xebeb00eb, 0xbbbb00bb, 0x3c3c003c,
243 	0x83830083, 0x53530053, 0x99990099, 0x61610061,
244 	0x17170017, 0x2b2b002b, 0x04040004, 0x7e7e007e,
245 	0xbaba00ba, 0x77770077, 0xd6d600d6, 0x26260026,
246 	0xe1e100e1, 0x69690069, 0x14140014, 0x63630063,
247 	0x55550055, 0x21210021, 0x0c0c000c, 0x7d7d007d
248 };
249 
250 static const u32 x2[256] = {
251 	0x30303000, 0x68686800, 0x99999900, 0x1b1b1b00,
252 	0x87878700, 0xb9b9b900, 0x21212100, 0x78787800,
253 	0x50505000, 0x39393900, 0xdbdbdb00, 0xe1e1e100,
254 	0x72727200, 0x09090900, 0x62626200, 0x3c3c3c00,
255 	0x3e3e3e00, 0x7e7e7e00, 0x5e5e5e00, 0x8e8e8e00,
256 	0xf1f1f100, 0xa0a0a000, 0xcccccc00, 0xa3a3a300,
257 	0x2a2a2a00, 0x1d1d1d00, 0xfbfbfb00, 0xb6b6b600,
258 	0xd6d6d600, 0x20202000, 0xc4c4c400, 0x8d8d8d00,
259 	0x81818100, 0x65656500, 0xf5f5f500, 0x89898900,
260 	0xcbcbcb00, 0x9d9d9d00, 0x77777700, 0xc6c6c600,
261 	0x57575700, 0x43434300, 0x56565600, 0x17171700,
262 	0xd4d4d400, 0x40404000, 0x1a1a1a00, 0x4d4d4d00,
263 	0xc0c0c000, 0x63636300, 0x6c6c6c00, 0xe3e3e300,
264 	0xb7b7b700, 0xc8c8c800, 0x64646400, 0x6a6a6a00,
265 	0x53535300, 0xaaaaaa00, 0x38383800, 0x98989800,
266 	0x0c0c0c00, 0xf4f4f400, 0x9b9b9b00, 0xededed00,
267 	0x7f7f7f00, 0x22222200, 0x76767600, 0xafafaf00,
268 	0xdddddd00, 0x3a3a3a00, 0x0b0b0b00, 0x58585800,
269 	0x67676700, 0x88888800, 0x06060600, 0xc3c3c300,
270 	0x35353500, 0x0d0d0d00, 0x01010100, 0x8b8b8b00,
271 	0x8c8c8c00, 0xc2c2c200, 0xe6e6e600, 0x5f5f5f00,
272 	0x02020200, 0x24242400, 0x75757500, 0x93939300,
273 	0x66666600, 0x1e1e1e00, 0xe5e5e500, 0xe2e2e200,
274 	0x54545400, 0xd8d8d800, 0x10101000, 0xcecece00,
275 	0x7a7a7a00, 0xe8e8e800, 0x08080800, 0x2c2c2c00,
276 	0x12121200, 0x97979700, 0x32323200, 0xababab00,
277 	0xb4b4b400, 0x27272700, 0x0a0a0a00, 0x23232300,
278 	0xdfdfdf00, 0xefefef00, 0xcacaca00, 0xd9d9d900,
279 	0xb8b8b800, 0xfafafa00, 0xdcdcdc00, 0x31313100,
280 	0x6b6b6b00, 0xd1d1d100, 0xadadad00, 0x19191900,
281 	0x49494900, 0xbdbdbd00, 0x51515100, 0x96969600,
282 	0xeeeeee00, 0xe4e4e400, 0xa8a8a800, 0x41414100,
283 	0xdadada00, 0xffffff00, 0xcdcdcd00, 0x55555500,
284 	0x86868600, 0x36363600, 0xbebebe00, 0x61616100,
285 	0x52525200, 0xf8f8f800, 0xbbbbbb00, 0x0e0e0e00,
286 	0x82828200, 0x48484800, 0x69696900, 0x9a9a9a00,
287 	0xe0e0e000, 0x47474700, 0x9e9e9e00, 0x5c5c5c00,
288 	0x04040400, 0x4b4b4b00, 0x34343400, 0x15151500,
289 	0x79797900, 0x26262600, 0xa7a7a700, 0xdedede00,
290 	0x29292900, 0xaeaeae00, 0x92929200, 0xd7d7d700,
291 	0x84848400, 0xe9e9e900, 0xd2d2d200, 0xbababa00,
292 	0x5d5d5d00, 0xf3f3f300, 0xc5c5c500, 0xb0b0b000,
293 	0xbfbfbf00, 0xa4a4a400, 0x3b3b3b00, 0x71717100,
294 	0x44444400, 0x46464600, 0x2b2b2b00, 0xfcfcfc00,
295 	0xebebeb00, 0x6f6f6f00, 0xd5d5d500, 0xf6f6f600,
296 	0x14141400, 0xfefefe00, 0x7c7c7c00, 0x70707000,
297 	0x5a5a5a00, 0x7d7d7d00, 0xfdfdfd00, 0x2f2f2f00,
298 	0x18181800, 0x83838300, 0x16161600, 0xa5a5a500,
299 	0x91919100, 0x1f1f1f00, 0x05050500, 0x95959500,
300 	0x74747400, 0xa9a9a900, 0xc1c1c100, 0x5b5b5b00,
301 	0x4a4a4a00, 0x85858500, 0x6d6d6d00, 0x13131300,
302 	0x07070700, 0x4f4f4f00, 0x4e4e4e00, 0x45454500,
303 	0xb2b2b200, 0x0f0f0f00, 0xc9c9c900, 0x1c1c1c00,
304 	0xa6a6a600, 0xbcbcbc00, 0xececec00, 0x73737300,
305 	0x90909000, 0x7b7b7b00, 0xcfcfcf00, 0x59595900,
306 	0x8f8f8f00, 0xa1a1a100, 0xf9f9f900, 0x2d2d2d00,
307 	0xf2f2f200, 0xb1b1b100, 0x00000000, 0x94949400,
308 	0x37373700, 0x9f9f9f00, 0xd0d0d000, 0x2e2e2e00,
309 	0x9c9c9c00, 0x6e6e6e00, 0x28282800, 0x3f3f3f00,
310 	0x80808000, 0xf0f0f000, 0x3d3d3d00, 0xd3d3d300,
311 	0x25252500, 0x8a8a8a00, 0xb5b5b500, 0xe7e7e700,
312 	0x42424200, 0xb3b3b300, 0xc7c7c700, 0xeaeaea00,
313 	0xf7f7f700, 0x4c4c4c00, 0x11111100, 0x33333300,
314 	0x03030300, 0xa2a2a200, 0xacacac00, 0x60606000
315 };
316 
317 static inline u32 rotl32(u32 v, u32 r)
318 {
319 	return ((v << r) | (v >> (32 - r)));
320 }
321 
322 static inline u32 rotr32(u32 v, u32 r)
323 {
324 	return ((v >> r) | (v << (32 - r)));
325 }
326 
327 static inline u32 bswap32(u32 v)
328 {
329 	return ((v << 24) ^
330 		(v >> 24) ^
331 		((v & 0x0000ff00) << 8) ^
332 		((v & 0x00ff0000) >> 8));
333 }
334 
335 static inline u8 get_u8(u32 x, u32 y)
336 {
337 	return (x >> ((3 - y) * 8));
338 }
339 
340 static inline u32 make_u32(u8 v0, u8 v1, u8 v2, u8 v3)
341 {
342 	return ((u32)v0 << 24) | ((u32)v1 << 16) | ((u32)v2 <<  8) | ((u32)v3);
343 }
344 
345 static inline u32 aria_m(u32 t0)
346 {
347 	return rotr32(t0, 8) ^ rotr32(t0 ^ rotr32(t0, 8), 16);
348 }
349 
350 /* S-Box Layer 1 + M */
351 static inline void aria_sbox_layer1_with_pre_diff(u32 *t0, u32 *t1, u32 *t2,
352 						  u32 *t3)
353 {
354 	*t0 = s1[get_u8(*t0, 0)] ^
355 	      s2[get_u8(*t0, 1)] ^
356 	      x1[get_u8(*t0, 2)] ^
357 	      x2[get_u8(*t0, 3)];
358 	*t1 = s1[get_u8(*t1, 0)] ^
359 	      s2[get_u8(*t1, 1)] ^
360 	      x1[get_u8(*t1, 2)] ^
361 	      x2[get_u8(*t1, 3)];
362 	*t2 = s1[get_u8(*t2, 0)] ^
363 	      s2[get_u8(*t2, 1)] ^
364 	      x1[get_u8(*t2, 2)] ^
365 	      x2[get_u8(*t2, 3)];
366 	*t3 = s1[get_u8(*t3, 0)] ^
367 	      s2[get_u8(*t3, 1)] ^
368 	      x1[get_u8(*t3, 2)] ^
369 	      x2[get_u8(*t3, 3)];
370 }
371 
372 /* S-Box Layer 2 + M */
373 static inline void aria_sbox_layer2_with_pre_diff(u32 *t0, u32 *t1, u32 *t2,
374 						  u32 *t3)
375 {
376 	*t0 = x1[get_u8(*t0, 0)] ^
377 	      x2[get_u8(*t0, 1)] ^
378 	      s1[get_u8(*t0, 2)] ^
379 	      s2[get_u8(*t0, 3)];
380 	*t1 = x1[get_u8(*t1, 0)] ^
381 	      x2[get_u8(*t1, 1)] ^
382 	      s1[get_u8(*t1, 2)] ^
383 	      s2[get_u8(*t1, 3)];
384 	*t2 = x1[get_u8(*t2, 0)] ^
385 	      x2[get_u8(*t2, 1)] ^
386 	      s1[get_u8(*t2, 2)] ^
387 	      s2[get_u8(*t2, 3)];
388 	*t3 = x1[get_u8(*t3, 0)] ^
389 	      x2[get_u8(*t3, 1)] ^
390 	      s1[get_u8(*t3, 2)] ^
391 	      s2[get_u8(*t3, 3)];
392 }
393 
394 /* Word-level diffusion */
395 static inline void aria_diff_word(u32 *t0, u32 *t1, u32 *t2, u32 *t3)
396 {
397 	*t1 ^= *t2;
398 	*t2 ^= *t3;
399 	*t0 ^= *t1;
400 
401 	*t3 ^= *t1;
402 	*t2 ^= *t0;
403 	*t1 ^= *t2;
404 }
405 
406 /* Byte-level diffusion */
407 static inline void aria_diff_byte(u32 *t1, u32 *t2, u32 *t3)
408 {
409 	*t1 = ((*t1 << 8) & 0xff00ff00) ^ ((*t1 >> 8) & 0x00ff00ff);
410 	*t2 = rotr32(*t2, 16);
411 	*t3 = bswap32(*t3);
412 }
413 
414 /* Key XOR Layer */
415 static inline void aria_add_round_key(u32 *rk, u32 *t0, u32 *t1, u32 *t2,
416 				      u32 *t3)
417 {
418 	*t0 ^= rk[0];
419 	*t1 ^= rk[1];
420 	*t2 ^= rk[2];
421 	*t3 ^= rk[3];
422 }
423 /* Odd round Substitution & Diffusion */
424 static inline void aria_subst_diff_odd(u32 *t0, u32 *t1, u32 *t2, u32 *t3)
425 {
426 	aria_sbox_layer1_with_pre_diff(t0, t1, t2, t3);
427 	aria_diff_word(t0, t1, t2, t3);
428 	aria_diff_byte(t1, t2, t3);
429 	aria_diff_word(t0, t1, t2, t3);
430 }
431 
432 /* Even round Substitution & Diffusion */
433 static inline void aria_subst_diff_even(u32 *t0, u32 *t1, u32 *t2, u32 *t3)
434 {
435 	aria_sbox_layer2_with_pre_diff(t0, t1, t2, t3);
436 	aria_diff_word(t0, t1, t2, t3);
437 	aria_diff_byte(t3, t0, t1);
438 	aria_diff_word(t0, t1, t2, t3);
439 }
440 
441 /* Q, R Macro expanded ARIA GSRK */
442 static inline void aria_gsrk(u32 *rk, u32 *x, u32 *y, u32 n)
443 {
444 	int q = 4 - (n / 32);
445 	int r = n % 32;
446 
447 	rk[0] = (x[0]) ^
448 		((y[q % 4]) >> r) ^
449 		((y[(q + 3) % 4]) << (32 - r));
450 	rk[1] = (x[1]) ^
451 		((y[(q + 1) % 4]) >> r) ^
452 		((y[q % 4]) << (32 - r));
453 	rk[2] = (x[2]) ^
454 		((y[(q + 2) % 4]) >> r) ^
455 		((y[(q + 1) % 4]) << (32 - r));
456 	rk[3] =	(x[3]) ^
457 		((y[(q + 3) % 4]) >> r) ^
458 		((y[(q + 2) % 4]) << (32 - r));
459 }
460 
461 #endif
462