| 1 | /* |
| 2 | * arch/ubicom32/crypto/des_check_key.c |
| 3 | * Ubicom32 architecture function for checking keys for the DES and |
| 4 | * Tripple DES Encryption algorithms. |
| 5 | * |
| 6 | * (C) Copyright 2009, Ubicom, Inc. |
| 7 | * |
| 8 | * Originally released as descore by Dana L. How <how@isl.stanford.edu>. |
| 9 | * Modified by Raimar Falke <rf13@inf.tu-dresden.de> for the Linux-Kernel. |
| 10 | * Derived from Cryptoapi and Nettle implementations, adapted for in-place |
| 11 | * scatterlist interface. Changed LGPL to GPL per section 3 of the LGPL. |
| 12 | * |
| 13 | * s390 Version: |
| 14 | * Copyright IBM Corp. 2003 |
| 15 | * Author(s): Thomas Spatzier |
| 16 | * Jan Glauber (jan.glauber@de.ibm.com) |
| 17 | * |
| 18 | * Derived from "crypto/des.c" |
| 19 | * Copyright (c) 1992 Dana L. How. |
| 20 | * Copyright (c) Raimar Falke <rf13@inf.tu-dresden.de> |
| 21 | * Copyright (c) Gisle Sflensminde <gisle@ii.uib.no> |
| 22 | * Copyright (C) 2001 Niels Mvller. |
| 23 | * Copyright (c) 2002 James Morris <jmorris@intercode.com.au> |
| 24 | * |
| 25 | * This file is part of the Ubicom32 Linux Kernel Port. |
| 26 | * |
| 27 | * The Ubicom32 Linux Kernel Port is free software: you can redistribute |
| 28 | * it and/or modify it under the terms of the GNU General Public License |
| 29 | * as published by the Free Software Foundation, either version 2 of the |
| 30 | * License, or (at your option) any later version. |
| 31 | * |
| 32 | * The Ubicom32 Linux Kernel Port is distributed in the hope that it |
| 33 | * will be useful, but WITHOUT ANY WARRANTY; without even the implied |
| 34 | * warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See |
| 35 | * the GNU General Public License for more details. |
| 36 | * |
| 37 | * You should have received a copy of the GNU General Public License |
| 38 | * along with the Ubicom32 Linux Kernel Port. If not, |
| 39 | * see <http://www.gnu.org/licenses/>. |
| 40 | * |
| 41 | * Ubicom32 implementation derived from (with many thanks): |
| 42 | * arch/m68knommu |
| 43 | * arch/blackfin |
| 44 | * arch/parisc |
| 45 | */ |
| 46 | #include <linux/init.h> |
| 47 | #include <linux/module.h> |
| 48 | #include <linux/errno.h> |
| 49 | #include <linux/crypto.h> |
| 50 | #include "crypto_des.h" |
| 51 | |
| 52 | #define ROR(d,c,o) ((d) = (d) >> (c) | (d) << (o)) |
| 53 | |
| 54 | static const u8 parity[] = { |
| 55 | 8,1,0,8,0,8,8,0,0,8,8,0,8,0,2,8,0,8,8,0,8,0,0,8,8,0,0,8,0,8,8,3, |
| 56 | 0,8,8,0,8,0,0,8,8,0,0,8,0,8,8,0,8,0,0,8,0,8,8,0,0,8,8,0,8,0,0,8, |
| 57 | 0,8,8,0,8,0,0,8,8,0,0,8,0,8,8,0,8,0,0,8,0,8,8,0,0,8,8,0,8,0,0,8, |
| 58 | 8,0,0,8,0,8,8,0,0,8,8,0,8,0,0,8,0,8,8,0,8,0,0,8,8,0,0,8,0,8,8,0, |
| 59 | 0,8,8,0,8,0,0,8,8,0,0,8,0,8,8,0,8,0,0,8,0,8,8,0,0,8,8,0,8,0,0,8, |
| 60 | 8,0,0,8,0,8,8,0,0,8,8,0,8,0,0,8,0,8,8,0,8,0,0,8,8,0,0,8,0,8,8,0, |
| 61 | 8,0,0,8,0,8,8,0,0,8,8,0,8,0,0,8,0,8,8,0,8,0,0,8,8,0,0,8,0,8,8,0, |
| 62 | 4,8,8,0,8,0,0,8,8,0,0,8,0,8,8,0,8,5,0,8,0,8,8,0,0,8,8,0,8,0,6,8, |
| 63 | }; |
| 64 | |
| 65 | /* |
| 66 | * RFC2451: Weak key checks SHOULD be performed. |
| 67 | */ |
| 68 | int |
| 69 | crypto_des_check_key(const u8 *key, unsigned int keylen, u32 *flags) |
| 70 | { |
| 71 | u32 n, w; |
| 72 | |
| 73 | n = parity[key[0]]; n <<= 4; |
| 74 | n |= parity[key[1]]; n <<= 4; |
| 75 | n |= parity[key[2]]; n <<= 4; |
| 76 | n |= parity[key[3]]; n <<= 4; |
| 77 | n |= parity[key[4]]; n <<= 4; |
| 78 | n |= parity[key[5]]; n <<= 4; |
| 79 | n |= parity[key[6]]; n <<= 4; |
| 80 | n |= parity[key[7]]; |
| 81 | w = 0x88888888L; |
| 82 | |
| 83 | if ((*flags & CRYPTO_TFM_REQ_WEAK_KEY) |
| 84 | && !((n - (w >> 3)) & w)) { /* 1 in 10^10 keys passes this test */ |
| 85 | if (n < 0x41415151) { |
| 86 | if (n < 0x31312121) { |
| 87 | if (n < 0x14141515) { |
| 88 | /* 01 01 01 01 01 01 01 01 */ |
| 89 | if (n == 0x11111111) goto weak; |
| 90 | /* 01 1F 01 1F 01 0E 01 0E */ |
| 91 | if (n == 0x13131212) goto weak; |
| 92 | } else { |
| 93 | /* 01 E0 01 E0 01 F1 01 F1 */ |
| 94 | if (n == 0x14141515) goto weak; |
| 95 | /* 01 FE 01 FE 01 FE 01 FE */ |
| 96 | if (n == 0x16161616) goto weak; |
| 97 | } |
| 98 | } else { |
| 99 | if (n < 0x34342525) { |
| 100 | /* 1F 01 1F 01 0E 01 0E 01 */ |
| 101 | if (n == 0x31312121) goto weak; |
| 102 | /* 1F 1F 1F 1F 0E 0E 0E 0E (?) */ |
| 103 | if (n == 0x33332222) goto weak; |
| 104 | } else { |
| 105 | /* 1F E0 1F E0 0E F1 0E F1 */ |
| 106 | if (n == 0x34342525) goto weak; |
| 107 | /* 1F FE 1F FE 0E FE 0E FE */ |
| 108 | if (n == 0x36362626) goto weak; |
| 109 | } |
| 110 | } |
| 111 | } else { |
| 112 | if (n < 0x61616161) { |
| 113 | if (n < 0x44445555) { |
| 114 | /* E0 01 E0 01 F1 01 F1 01 */ |
| 115 | if (n == 0x41415151) goto weak; |
| 116 | /* E0 1F E0 1F F1 0E F1 0E */ |
| 117 | if (n == 0x43435252) goto weak; |
| 118 | } else { |
| 119 | /* E0 E0 E0 E0 F1 F1 F1 F1 (?) */ |
| 120 | if (n == 0x44445555) goto weak; |
| 121 | /* E0 FE E0 FE F1 FE F1 FE */ |
| 122 | if (n == 0x46465656) goto weak; |
| 123 | } |
| 124 | } else { |
| 125 | if (n < 0x64646565) { |
| 126 | /* FE 01 FE 01 FE 01 FE 01 */ |
| 127 | if (n == 0x61616161) goto weak; |
| 128 | /* FE 1F FE 1F FE 0E FE 0E */ |
| 129 | if (n == 0x63636262) goto weak; |
| 130 | } else { |
| 131 | /* FE E0 FE E0 FE F1 FE F1 */ |
| 132 | if (n == 0x64646565) goto weak; |
| 133 | /* FE FE FE FE FE FE FE FE */ |
| 134 | if (n == 0x66666666) goto weak; |
| 135 | } |
| 136 | } |
| 137 | } |
| 138 | } |
| 139 | return 0; |
| 140 | weak: |
| 141 | *flags |= CRYPTO_TFM_RES_WEAK_KEY; |
| 142 | return -EINVAL; |
| 143 | } |
| 144 | |
| 145 | EXPORT_SYMBOL(crypto_des_check_key); |
| 146 | |
| 147 | MODULE_LICENSE("GPL"); |
| 148 | MODULE_DESCRIPTION("Key Check function for DES & DES3 Cipher Algorithms"); |
| 149 | |
