2
* AES (Rijndael) cipher
4
* Modifications to public domain implementation:
5
* - support only 128-bit keys
7
* - use C pre-processor to make it easier to change S table access
8
* - added option (AES_SMALL_TABLES) for reducing code size by about 8 kB at
9
* cost of reduced throughput (quite small difference on Pentium 4,
10
* 10-25% when using -O1 or -O2 optimization)
12
* Copyright (c) 2003-2005, Jouni Malinen <j@w1.fi>
14
* This program is free software; you can redistribute it and/or modify
15
* it under the terms of the GNU General Public License version 2 as
16
* published by the Free Software Foundation.
18
* Alternatively, this software may be distributed under the terms of BSD
21
* See README and COPYING for more details.
29
* @version 3.0 (December 2000)
31
* Optimised ANSI C code for the Rijndael cipher (now AES)
33
* @author Vincent Rijmen <vincent.rijmen@esat.kuleuven.ac.be>
34
* @author Antoon Bosselaers <antoon.bosselaers@esat.kuleuven.ac.be>
35
* @author Paulo Barreto <paulo.barreto@terra.com.br>
37
* This code is hereby placed in the public domain.
39
* THIS SOFTWARE IS PROVIDED BY THE AUTHORS ''AS IS'' AND ANY EXPRESS
40
* OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
41
* WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
42
* ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHORS OR CONTRIBUTORS BE
43
* LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
44
* CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
45
* SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
46
* BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
47
* WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
48
* OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE,
49
* EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
52
/* #define FULL_UNROLL */
53
#define AES_SMALL_TABLES
57
Te0[x] = S [x].[02, 01, 01, 03];
58
Te1[x] = S [x].[03, 02, 01, 01];
59
Te2[x] = S [x].[01, 03, 02, 01];
60
Te3[x] = S [x].[01, 01, 03, 02];
61
Te4[x] = S [x].[01, 01, 01, 01];
63
Td0[x] = Si[x].[0e, 09, 0d, 0b];
64
Td1[x] = Si[x].[0b, 0e, 09, 0d];
65
Td2[x] = Si[x].[0d, 0b, 0e, 09];
66
Td3[x] = Si[x].[09, 0d, 0b, 0e];
67
Td4[x] = Si[x].[01, 01, 01, 01];
70
static const u32 Te0[256] = {
71
0xc66363a5U, 0xf87c7c84U, 0xee777799U, 0xf67b7b8dU,
72
0xfff2f20dU, 0xd66b6bbdU, 0xde6f6fb1U, 0x91c5c554U,
73
0x60303050U, 0x02010103U, 0xce6767a9U, 0x562b2b7dU,
74
0xe7fefe19U, 0xb5d7d762U, 0x4dababe6U, 0xec76769aU,
75
0x8fcaca45U, 0x1f82829dU, 0x89c9c940U, 0xfa7d7d87U,
76
0xeffafa15U, 0xb25959ebU, 0x8e4747c9U, 0xfbf0f00bU,
77
0x41adadecU, 0xb3d4d467U, 0x5fa2a2fdU, 0x45afafeaU,
78
0x239c9cbfU, 0x53a4a4f7U, 0xe4727296U, 0x9bc0c05bU,
79
0x75b7b7c2U, 0xe1fdfd1cU, 0x3d9393aeU, 0x4c26266aU,
80
0x6c36365aU, 0x7e3f3f41U, 0xf5f7f702U, 0x83cccc4fU,
81
0x6834345cU, 0x51a5a5f4U, 0xd1e5e534U, 0xf9f1f108U,
82
0xe2717193U, 0xabd8d873U, 0x62313153U, 0x2a15153fU,
83
0x0804040cU, 0x95c7c752U, 0x46232365U, 0x9dc3c35eU,
84
0x30181828U, 0x379696a1U, 0x0a05050fU, 0x2f9a9ab5U,
85
0x0e070709U, 0x24121236U, 0x1b80809bU, 0xdfe2e23dU,
86
0xcdebeb26U, 0x4e272769U, 0x7fb2b2cdU, 0xea75759fU,
87
0x1209091bU, 0x1d83839eU, 0x582c2c74U, 0x341a1a2eU,
88
0x361b1b2dU, 0xdc6e6eb2U, 0xb45a5aeeU, 0x5ba0a0fbU,
89
0xa45252f6U, 0x763b3b4dU, 0xb7d6d661U, 0x7db3b3ceU,
90
0x5229297bU, 0xdde3e33eU, 0x5e2f2f71U, 0x13848497U,
91
0xa65353f5U, 0xb9d1d168U, 0x00000000U, 0xc1eded2cU,
92
0x40202060U, 0xe3fcfc1fU, 0x79b1b1c8U, 0xb65b5bedU,
93
0xd46a6abeU, 0x8dcbcb46U, 0x67bebed9U, 0x7239394bU,
94
0x944a4adeU, 0x984c4cd4U, 0xb05858e8U, 0x85cfcf4aU,
95
0xbbd0d06bU, 0xc5efef2aU, 0x4faaaae5U, 0xedfbfb16U,
96
0x864343c5U, 0x9a4d4dd7U, 0x66333355U, 0x11858594U,
97
0x8a4545cfU, 0xe9f9f910U, 0x04020206U, 0xfe7f7f81U,
98
0xa05050f0U, 0x783c3c44U, 0x259f9fbaU, 0x4ba8a8e3U,
99
0xa25151f3U, 0x5da3a3feU, 0x804040c0U, 0x058f8f8aU,
100
0x3f9292adU, 0x219d9dbcU, 0x70383848U, 0xf1f5f504U,
101
0x63bcbcdfU, 0x77b6b6c1U, 0xafdada75U, 0x42212163U,
102
0x20101030U, 0xe5ffff1aU, 0xfdf3f30eU, 0xbfd2d26dU,
103
0x81cdcd4cU, 0x180c0c14U, 0x26131335U, 0xc3ecec2fU,
104
0xbe5f5fe1U, 0x359797a2U, 0x884444ccU, 0x2e171739U,
105
0x93c4c457U, 0x55a7a7f2U, 0xfc7e7e82U, 0x7a3d3d47U,
106
0xc86464acU, 0xba5d5de7U, 0x3219192bU, 0xe6737395U,
107
0xc06060a0U, 0x19818198U, 0x9e4f4fd1U, 0xa3dcdc7fU,
108
0x44222266U, 0x542a2a7eU, 0x3b9090abU, 0x0b888883U,
109
0x8c4646caU, 0xc7eeee29U, 0x6bb8b8d3U, 0x2814143cU,
110
0xa7dede79U, 0xbc5e5ee2U, 0x160b0b1dU, 0xaddbdb76U,
111
0xdbe0e03bU, 0x64323256U, 0x743a3a4eU, 0x140a0a1eU,
112
0x924949dbU, 0x0c06060aU, 0x4824246cU, 0xb85c5ce4U,
113
0x9fc2c25dU, 0xbdd3d36eU, 0x43acacefU, 0xc46262a6U,
114
0x399191a8U, 0x319595a4U, 0xd3e4e437U, 0xf279798bU,
115
0xd5e7e732U, 0x8bc8c843U, 0x6e373759U, 0xda6d6db7U,
116
0x018d8d8cU, 0xb1d5d564U, 0x9c4e4ed2U, 0x49a9a9e0U,
117
0xd86c6cb4U, 0xac5656faU, 0xf3f4f407U, 0xcfeaea25U,
118
0xca6565afU, 0xf47a7a8eU, 0x47aeaee9U, 0x10080818U,
119
0x6fbabad5U, 0xf0787888U, 0x4a25256fU, 0x5c2e2e72U,
120
0x381c1c24U, 0x57a6a6f1U, 0x73b4b4c7U, 0x97c6c651U,
121
0xcbe8e823U, 0xa1dddd7cU, 0xe874749cU, 0x3e1f1f21U,
122
0x964b4bddU, 0x61bdbddcU, 0x0d8b8b86U, 0x0f8a8a85U,
123
0xe0707090U, 0x7c3e3e42U, 0x71b5b5c4U, 0xcc6666aaU,
124
0x904848d8U, 0x06030305U, 0xf7f6f601U, 0x1c0e0e12U,
125
0xc26161a3U, 0x6a35355fU, 0xae5757f9U, 0x69b9b9d0U,
126
0x17868691U, 0x99c1c158U, 0x3a1d1d27U, 0x279e9eb9U,
127
0xd9e1e138U, 0xebf8f813U, 0x2b9898b3U, 0x22111133U,
128
0xd26969bbU, 0xa9d9d970U, 0x078e8e89U, 0x339494a7U,
129
0x2d9b9bb6U, 0x3c1e1e22U, 0x15878792U, 0xc9e9e920U,
130
0x87cece49U, 0xaa5555ffU, 0x50282878U, 0xa5dfdf7aU,
131
0x038c8c8fU, 0x59a1a1f8U, 0x09898980U, 0x1a0d0d17U,
132
0x65bfbfdaU, 0xd7e6e631U, 0x844242c6U, 0xd06868b8U,
133
0x824141c3U, 0x299999b0U, 0x5a2d2d77U, 0x1e0f0f11U,
134
0x7bb0b0cbU, 0xa85454fcU, 0x6dbbbbd6U, 0x2c16163aU,
136
#ifndef AES_SMALL_TABLES
137
static const u32 Te1[256] = {
138
0xa5c66363U, 0x84f87c7cU, 0x99ee7777U, 0x8df67b7bU,
139
0x0dfff2f2U, 0xbdd66b6bU, 0xb1de6f6fU, 0x5491c5c5U,
140
0x50603030U, 0x03020101U, 0xa9ce6767U, 0x7d562b2bU,
141
0x19e7fefeU, 0x62b5d7d7U, 0xe64dababU, 0x9aec7676U,
142
0x458fcacaU, 0x9d1f8282U, 0x4089c9c9U, 0x87fa7d7dU,
143
0x15effafaU, 0xebb25959U, 0xc98e4747U, 0x0bfbf0f0U,
144
0xec41adadU, 0x67b3d4d4U, 0xfd5fa2a2U, 0xea45afafU,
145
0xbf239c9cU, 0xf753a4a4U, 0x96e47272U, 0x5b9bc0c0U,
146
0xc275b7b7U, 0x1ce1fdfdU, 0xae3d9393U, 0x6a4c2626U,
147
0x5a6c3636U, 0x417e3f3fU, 0x02f5f7f7U, 0x4f83ccccU,
148
0x5c683434U, 0xf451a5a5U, 0x34d1e5e5U, 0x08f9f1f1U,
149
0x93e27171U, 0x73abd8d8U, 0x53623131U, 0x3f2a1515U,
150
0x0c080404U, 0x5295c7c7U, 0x65462323U, 0x5e9dc3c3U,
151
0x28301818U, 0xa1379696U, 0x0f0a0505U, 0xb52f9a9aU,
152
0x090e0707U, 0x36241212U, 0x9b1b8080U, 0x3ddfe2e2U,
153
0x26cdebebU, 0x694e2727U, 0xcd7fb2b2U, 0x9fea7575U,
154
0x1b120909U, 0x9e1d8383U, 0x74582c2cU, 0x2e341a1aU,
155
0x2d361b1bU, 0xb2dc6e6eU, 0xeeb45a5aU, 0xfb5ba0a0U,
156
0xf6a45252U, 0x4d763b3bU, 0x61b7d6d6U, 0xce7db3b3U,
157
0x7b522929U, 0x3edde3e3U, 0x715e2f2fU, 0x97138484U,
158
0xf5a65353U, 0x68b9d1d1U, 0x00000000U, 0x2cc1ededU,
159
0x60402020U, 0x1fe3fcfcU, 0xc879b1b1U, 0xedb65b5bU,
160
0xbed46a6aU, 0x468dcbcbU, 0xd967bebeU, 0x4b723939U,
161
0xde944a4aU, 0xd4984c4cU, 0xe8b05858U, 0x4a85cfcfU,
162
0x6bbbd0d0U, 0x2ac5efefU, 0xe54faaaaU, 0x16edfbfbU,
163
0xc5864343U, 0xd79a4d4dU, 0x55663333U, 0x94118585U,
164
0xcf8a4545U, 0x10e9f9f9U, 0x06040202U, 0x81fe7f7fU,
165
0xf0a05050U, 0x44783c3cU, 0xba259f9fU, 0xe34ba8a8U,
166
0xf3a25151U, 0xfe5da3a3U, 0xc0804040U, 0x8a058f8fU,
167
0xad3f9292U, 0xbc219d9dU, 0x48703838U, 0x04f1f5f5U,
168
0xdf63bcbcU, 0xc177b6b6U, 0x75afdadaU, 0x63422121U,
169
0x30201010U, 0x1ae5ffffU, 0x0efdf3f3U, 0x6dbfd2d2U,
170
0x4c81cdcdU, 0x14180c0cU, 0x35261313U, 0x2fc3ececU,
171
0xe1be5f5fU, 0xa2359797U, 0xcc884444U, 0x392e1717U,
172
0x5793c4c4U, 0xf255a7a7U, 0x82fc7e7eU, 0x477a3d3dU,
173
0xacc86464U, 0xe7ba5d5dU, 0x2b321919U, 0x95e67373U,
174
0xa0c06060U, 0x98198181U, 0xd19e4f4fU, 0x7fa3dcdcU,
175
0x66442222U, 0x7e542a2aU, 0xab3b9090U, 0x830b8888U,
176
0xca8c4646U, 0x29c7eeeeU, 0xd36bb8b8U, 0x3c281414U,
177
0x79a7dedeU, 0xe2bc5e5eU, 0x1d160b0bU, 0x76addbdbU,
178
0x3bdbe0e0U, 0x56643232U, 0x4e743a3aU, 0x1e140a0aU,
179
0xdb924949U, 0x0a0c0606U, 0x6c482424U, 0xe4b85c5cU,
180
0x5d9fc2c2U, 0x6ebdd3d3U, 0xef43acacU, 0xa6c46262U,
181
0xa8399191U, 0xa4319595U, 0x37d3e4e4U, 0x8bf27979U,
182
0x32d5e7e7U, 0x438bc8c8U, 0x596e3737U, 0xb7da6d6dU,
183
0x8c018d8dU, 0x64b1d5d5U, 0xd29c4e4eU, 0xe049a9a9U,
184
0xb4d86c6cU, 0xfaac5656U, 0x07f3f4f4U, 0x25cfeaeaU,
185
0xafca6565U, 0x8ef47a7aU, 0xe947aeaeU, 0x18100808U,
186
0xd56fbabaU, 0x88f07878U, 0x6f4a2525U, 0x725c2e2eU,
187
0x24381c1cU, 0xf157a6a6U, 0xc773b4b4U, 0x5197c6c6U,
188
0x23cbe8e8U, 0x7ca1ddddU, 0x9ce87474U, 0x213e1f1fU,
189
0xdd964b4bU, 0xdc61bdbdU, 0x860d8b8bU, 0x850f8a8aU,
190
0x90e07070U, 0x427c3e3eU, 0xc471b5b5U, 0xaacc6666U,
191
0xd8904848U, 0x05060303U, 0x01f7f6f6U, 0x121c0e0eU,
192
0xa3c26161U, 0x5f6a3535U, 0xf9ae5757U, 0xd069b9b9U,
193
0x91178686U, 0x5899c1c1U, 0x273a1d1dU, 0xb9279e9eU,
194
0x38d9e1e1U, 0x13ebf8f8U, 0xb32b9898U, 0x33221111U,
195
0xbbd26969U, 0x70a9d9d9U, 0x89078e8eU, 0xa7339494U,
196
0xb62d9b9bU, 0x223c1e1eU, 0x92158787U, 0x20c9e9e9U,
197
0x4987ceceU, 0xffaa5555U, 0x78502828U, 0x7aa5dfdfU,
198
0x8f038c8cU, 0xf859a1a1U, 0x80098989U, 0x171a0d0dU,
199
0xda65bfbfU, 0x31d7e6e6U, 0xc6844242U, 0xb8d06868U,
200
0xc3824141U, 0xb0299999U, 0x775a2d2dU, 0x111e0f0fU,
201
0xcb7bb0b0U, 0xfca85454U, 0xd66dbbbbU, 0x3a2c1616U,
203
static const u32 Te2[256] = {
204
0x63a5c663U, 0x7c84f87cU, 0x7799ee77U, 0x7b8df67bU,
205
0xf20dfff2U, 0x6bbdd66bU, 0x6fb1de6fU, 0xc55491c5U,
206
0x30506030U, 0x01030201U, 0x67a9ce67U, 0x2b7d562bU,
207
0xfe19e7feU, 0xd762b5d7U, 0xabe64dabU, 0x769aec76U,
208
0xca458fcaU, 0x829d1f82U, 0xc94089c9U, 0x7d87fa7dU,
209
0xfa15effaU, 0x59ebb259U, 0x47c98e47U, 0xf00bfbf0U,
210
0xadec41adU, 0xd467b3d4U, 0xa2fd5fa2U, 0xafea45afU,
211
0x9cbf239cU, 0xa4f753a4U, 0x7296e472U, 0xc05b9bc0U,
212
0xb7c275b7U, 0xfd1ce1fdU, 0x93ae3d93U, 0x266a4c26U,
213
0x365a6c36U, 0x3f417e3fU, 0xf702f5f7U, 0xcc4f83ccU,
214
0x345c6834U, 0xa5f451a5U, 0xe534d1e5U, 0xf108f9f1U,
215
0x7193e271U, 0xd873abd8U, 0x31536231U, 0x153f2a15U,
216
0x040c0804U, 0xc75295c7U, 0x23654623U, 0xc35e9dc3U,
217
0x18283018U, 0x96a13796U, 0x050f0a05U, 0x9ab52f9aU,
218
0x07090e07U, 0x12362412U, 0x809b1b80U, 0xe23ddfe2U,
219
0xeb26cdebU, 0x27694e27U, 0xb2cd7fb2U, 0x759fea75U,
220
0x091b1209U, 0x839e1d83U, 0x2c74582cU, 0x1a2e341aU,
221
0x1b2d361bU, 0x6eb2dc6eU, 0x5aeeb45aU, 0xa0fb5ba0U,
222
0x52f6a452U, 0x3b4d763bU, 0xd661b7d6U, 0xb3ce7db3U,
223
0x297b5229U, 0xe33edde3U, 0x2f715e2fU, 0x84971384U,
224
0x53f5a653U, 0xd168b9d1U, 0x00000000U, 0xed2cc1edU,
225
0x20604020U, 0xfc1fe3fcU, 0xb1c879b1U, 0x5bedb65bU,
226
0x6abed46aU, 0xcb468dcbU, 0xbed967beU, 0x394b7239U,
227
0x4ade944aU, 0x4cd4984cU, 0x58e8b058U, 0xcf4a85cfU,
228
0xd06bbbd0U, 0xef2ac5efU, 0xaae54faaU, 0xfb16edfbU,
229
0x43c58643U, 0x4dd79a4dU, 0x33556633U, 0x85941185U,
230
0x45cf8a45U, 0xf910e9f9U, 0x02060402U, 0x7f81fe7fU,
231
0x50f0a050U, 0x3c44783cU, 0x9fba259fU, 0xa8e34ba8U,
232
0x51f3a251U, 0xa3fe5da3U, 0x40c08040U, 0x8f8a058fU,
233
0x92ad3f92U, 0x9dbc219dU, 0x38487038U, 0xf504f1f5U,
234
0xbcdf63bcU, 0xb6c177b6U, 0xda75afdaU, 0x21634221U,
235
0x10302010U, 0xff1ae5ffU, 0xf30efdf3U, 0xd26dbfd2U,
236
0xcd4c81cdU, 0x0c14180cU, 0x13352613U, 0xec2fc3ecU,
237
0x5fe1be5fU, 0x97a23597U, 0x44cc8844U, 0x17392e17U,
238
0xc45793c4U, 0xa7f255a7U, 0x7e82fc7eU, 0x3d477a3dU,
239
0x64acc864U, 0x5de7ba5dU, 0x192b3219U, 0x7395e673U,
240
0x60a0c060U, 0x81981981U, 0x4fd19e4fU, 0xdc7fa3dcU,
241
0x22664422U, 0x2a7e542aU, 0x90ab3b90U, 0x88830b88U,
242
0x46ca8c46U, 0xee29c7eeU, 0xb8d36bb8U, 0x143c2814U,
243
0xde79a7deU, 0x5ee2bc5eU, 0x0b1d160bU, 0xdb76addbU,
244
0xe03bdbe0U, 0x32566432U, 0x3a4e743aU, 0x0a1e140aU,
245
0x49db9249U, 0x060a0c06U, 0x246c4824U, 0x5ce4b85cU,
246
0xc25d9fc2U, 0xd36ebdd3U, 0xacef43acU, 0x62a6c462U,
247
0x91a83991U, 0x95a43195U, 0xe437d3e4U, 0x798bf279U,
248
0xe732d5e7U, 0xc8438bc8U, 0x37596e37U, 0x6db7da6dU,
249
0x8d8c018dU, 0xd564b1d5U, 0x4ed29c4eU, 0xa9e049a9U,
250
0x6cb4d86cU, 0x56faac56U, 0xf407f3f4U, 0xea25cfeaU,
251
0x65afca65U, 0x7a8ef47aU, 0xaee947aeU, 0x08181008U,
252
0xbad56fbaU, 0x7888f078U, 0x256f4a25U, 0x2e725c2eU,
253
0x1c24381cU, 0xa6f157a6U, 0xb4c773b4U, 0xc65197c6U,
254
0xe823cbe8U, 0xdd7ca1ddU, 0x749ce874U, 0x1f213e1fU,
255
0x4bdd964bU, 0xbddc61bdU, 0x8b860d8bU, 0x8a850f8aU,
256
0x7090e070U, 0x3e427c3eU, 0xb5c471b5U, 0x66aacc66U,
257
0x48d89048U, 0x03050603U, 0xf601f7f6U, 0x0e121c0eU,
258
0x61a3c261U, 0x355f6a35U, 0x57f9ae57U, 0xb9d069b9U,
259
0x86911786U, 0xc15899c1U, 0x1d273a1dU, 0x9eb9279eU,
260
0xe138d9e1U, 0xf813ebf8U, 0x98b32b98U, 0x11332211U,
261
0x69bbd269U, 0xd970a9d9U, 0x8e89078eU, 0x94a73394U,
262
0x9bb62d9bU, 0x1e223c1eU, 0x87921587U, 0xe920c9e9U,
263
0xce4987ceU, 0x55ffaa55U, 0x28785028U, 0xdf7aa5dfU,
264
0x8c8f038cU, 0xa1f859a1U, 0x89800989U, 0x0d171a0dU,
265
0xbfda65bfU, 0xe631d7e6U, 0x42c68442U, 0x68b8d068U,
266
0x41c38241U, 0x99b02999U, 0x2d775a2dU, 0x0f111e0fU,
267
0xb0cb7bb0U, 0x54fca854U, 0xbbd66dbbU, 0x163a2c16U,
269
static const u32 Te3[256] = {
271
0x6363a5c6U, 0x7c7c84f8U, 0x777799eeU, 0x7b7b8df6U,
272
0xf2f20dffU, 0x6b6bbdd6U, 0x6f6fb1deU, 0xc5c55491U,
273
0x30305060U, 0x01010302U, 0x6767a9ceU, 0x2b2b7d56U,
274
0xfefe19e7U, 0xd7d762b5U, 0xababe64dU, 0x76769aecU,
275
0xcaca458fU, 0x82829d1fU, 0xc9c94089U, 0x7d7d87faU,
276
0xfafa15efU, 0x5959ebb2U, 0x4747c98eU, 0xf0f00bfbU,
277
0xadadec41U, 0xd4d467b3U, 0xa2a2fd5fU, 0xafafea45U,
278
0x9c9cbf23U, 0xa4a4f753U, 0x727296e4U, 0xc0c05b9bU,
279
0xb7b7c275U, 0xfdfd1ce1U, 0x9393ae3dU, 0x26266a4cU,
280
0x36365a6cU, 0x3f3f417eU, 0xf7f702f5U, 0xcccc4f83U,
281
0x34345c68U, 0xa5a5f451U, 0xe5e534d1U, 0xf1f108f9U,
282
0x717193e2U, 0xd8d873abU, 0x31315362U, 0x15153f2aU,
283
0x04040c08U, 0xc7c75295U, 0x23236546U, 0xc3c35e9dU,
284
0x18182830U, 0x9696a137U, 0x05050f0aU, 0x9a9ab52fU,
285
0x0707090eU, 0x12123624U, 0x80809b1bU, 0xe2e23ddfU,
286
0xebeb26cdU, 0x2727694eU, 0xb2b2cd7fU, 0x75759feaU,
287
0x09091b12U, 0x83839e1dU, 0x2c2c7458U, 0x1a1a2e34U,
288
0x1b1b2d36U, 0x6e6eb2dcU, 0x5a5aeeb4U, 0xa0a0fb5bU,
289
0x5252f6a4U, 0x3b3b4d76U, 0xd6d661b7U, 0xb3b3ce7dU,
290
0x29297b52U, 0xe3e33eddU, 0x2f2f715eU, 0x84849713U,
291
0x5353f5a6U, 0xd1d168b9U, 0x00000000U, 0xeded2cc1U,
292
0x20206040U, 0xfcfc1fe3U, 0xb1b1c879U, 0x5b5bedb6U,
293
0x6a6abed4U, 0xcbcb468dU, 0xbebed967U, 0x39394b72U,
294
0x4a4ade94U, 0x4c4cd498U, 0x5858e8b0U, 0xcfcf4a85U,
295
0xd0d06bbbU, 0xefef2ac5U, 0xaaaae54fU, 0xfbfb16edU,
296
0x4343c586U, 0x4d4dd79aU, 0x33335566U, 0x85859411U,
297
0x4545cf8aU, 0xf9f910e9U, 0x02020604U, 0x7f7f81feU,
298
0x5050f0a0U, 0x3c3c4478U, 0x9f9fba25U, 0xa8a8e34bU,
299
0x5151f3a2U, 0xa3a3fe5dU, 0x4040c080U, 0x8f8f8a05U,
300
0x9292ad3fU, 0x9d9dbc21U, 0x38384870U, 0xf5f504f1U,
301
0xbcbcdf63U, 0xb6b6c177U, 0xdada75afU, 0x21216342U,
302
0x10103020U, 0xffff1ae5U, 0xf3f30efdU, 0xd2d26dbfU,
303
0xcdcd4c81U, 0x0c0c1418U, 0x13133526U, 0xecec2fc3U,
304
0x5f5fe1beU, 0x9797a235U, 0x4444cc88U, 0x1717392eU,
305
0xc4c45793U, 0xa7a7f255U, 0x7e7e82fcU, 0x3d3d477aU,
306
0x6464acc8U, 0x5d5de7baU, 0x19192b32U, 0x737395e6U,
307
0x6060a0c0U, 0x81819819U, 0x4f4fd19eU, 0xdcdc7fa3U,
308
0x22226644U, 0x2a2a7e54U, 0x9090ab3bU, 0x8888830bU,
309
0x4646ca8cU, 0xeeee29c7U, 0xb8b8d36bU, 0x14143c28U,
310
0xdede79a7U, 0x5e5ee2bcU, 0x0b0b1d16U, 0xdbdb76adU,
311
0xe0e03bdbU, 0x32325664U, 0x3a3a4e74U, 0x0a0a1e14U,
312
0x4949db92U, 0x06060a0cU, 0x24246c48U, 0x5c5ce4b8U,
313
0xc2c25d9fU, 0xd3d36ebdU, 0xacacef43U, 0x6262a6c4U,
314
0x9191a839U, 0x9595a431U, 0xe4e437d3U, 0x79798bf2U,
315
0xe7e732d5U, 0xc8c8438bU, 0x3737596eU, 0x6d6db7daU,
316
0x8d8d8c01U, 0xd5d564b1U, 0x4e4ed29cU, 0xa9a9e049U,
317
0x6c6cb4d8U, 0x5656faacU, 0xf4f407f3U, 0xeaea25cfU,
318
0x6565afcaU, 0x7a7a8ef4U, 0xaeaee947U, 0x08081810U,
319
0xbabad56fU, 0x787888f0U, 0x25256f4aU, 0x2e2e725cU,
320
0x1c1c2438U, 0xa6a6f157U, 0xb4b4c773U, 0xc6c65197U,
321
0xe8e823cbU, 0xdddd7ca1U, 0x74749ce8U, 0x1f1f213eU,
322
0x4b4bdd96U, 0xbdbddc61U, 0x8b8b860dU, 0x8a8a850fU,
323
0x707090e0U, 0x3e3e427cU, 0xb5b5c471U, 0x6666aaccU,
324
0x4848d890U, 0x03030506U, 0xf6f601f7U, 0x0e0e121cU,
325
0x6161a3c2U, 0x35355f6aU, 0x5757f9aeU, 0xb9b9d069U,
326
0x86869117U, 0xc1c15899U, 0x1d1d273aU, 0x9e9eb927U,
327
0xe1e138d9U, 0xf8f813ebU, 0x9898b32bU, 0x11113322U,
328
0x6969bbd2U, 0xd9d970a9U, 0x8e8e8907U, 0x9494a733U,
329
0x9b9bb62dU, 0x1e1e223cU, 0x87879215U, 0xe9e920c9U,
330
0xcece4987U, 0x5555ffaaU, 0x28287850U, 0xdfdf7aa5U,
331
0x8c8c8f03U, 0xa1a1f859U, 0x89898009U, 0x0d0d171aU,
332
0xbfbfda65U, 0xe6e631d7U, 0x4242c684U, 0x6868b8d0U,
333
0x4141c382U, 0x9999b029U, 0x2d2d775aU, 0x0f0f111eU,
334
0xb0b0cb7bU, 0x5454fca8U, 0xbbbbd66dU, 0x16163a2cU,
336
static const u32 Te4[256] = {
337
0x63636363U, 0x7c7c7c7cU, 0x77777777U, 0x7b7b7b7bU,
338
0xf2f2f2f2U, 0x6b6b6b6bU, 0x6f6f6f6fU, 0xc5c5c5c5U,
339
0x30303030U, 0x01010101U, 0x67676767U, 0x2b2b2b2bU,
340
0xfefefefeU, 0xd7d7d7d7U, 0xababababU, 0x76767676U,
341
0xcacacacaU, 0x82828282U, 0xc9c9c9c9U, 0x7d7d7d7dU,
342
0xfafafafaU, 0x59595959U, 0x47474747U, 0xf0f0f0f0U,
343
0xadadadadU, 0xd4d4d4d4U, 0xa2a2a2a2U, 0xafafafafU,
344
0x9c9c9c9cU, 0xa4a4a4a4U, 0x72727272U, 0xc0c0c0c0U,
345
0xb7b7b7b7U, 0xfdfdfdfdU, 0x93939393U, 0x26262626U,
346
0x36363636U, 0x3f3f3f3fU, 0xf7f7f7f7U, 0xccccccccU,
347
0x34343434U, 0xa5a5a5a5U, 0xe5e5e5e5U, 0xf1f1f1f1U,
348
0x71717171U, 0xd8d8d8d8U, 0x31313131U, 0x15151515U,
349
0x04040404U, 0xc7c7c7c7U, 0x23232323U, 0xc3c3c3c3U,
350
0x18181818U, 0x96969696U, 0x05050505U, 0x9a9a9a9aU,
351
0x07070707U, 0x12121212U, 0x80808080U, 0xe2e2e2e2U,
352
0xebebebebU, 0x27272727U, 0xb2b2b2b2U, 0x75757575U,
353
0x09090909U, 0x83838383U, 0x2c2c2c2cU, 0x1a1a1a1aU,
354
0x1b1b1b1bU, 0x6e6e6e6eU, 0x5a5a5a5aU, 0xa0a0a0a0U,
355
0x52525252U, 0x3b3b3b3bU, 0xd6d6d6d6U, 0xb3b3b3b3U,
356
0x29292929U, 0xe3e3e3e3U, 0x2f2f2f2fU, 0x84848484U,
357
0x53535353U, 0xd1d1d1d1U, 0x00000000U, 0xededededU,
358
0x20202020U, 0xfcfcfcfcU, 0xb1b1b1b1U, 0x5b5b5b5bU,
359
0x6a6a6a6aU, 0xcbcbcbcbU, 0xbebebebeU, 0x39393939U,
360
0x4a4a4a4aU, 0x4c4c4c4cU, 0x58585858U, 0xcfcfcfcfU,
361
0xd0d0d0d0U, 0xefefefefU, 0xaaaaaaaaU, 0xfbfbfbfbU,
362
0x43434343U, 0x4d4d4d4dU, 0x33333333U, 0x85858585U,
363
0x45454545U, 0xf9f9f9f9U, 0x02020202U, 0x7f7f7f7fU,
364
0x50505050U, 0x3c3c3c3cU, 0x9f9f9f9fU, 0xa8a8a8a8U,
365
0x51515151U, 0xa3a3a3a3U, 0x40404040U, 0x8f8f8f8fU,
366
0x92929292U, 0x9d9d9d9dU, 0x38383838U, 0xf5f5f5f5U,
367
0xbcbcbcbcU, 0xb6b6b6b6U, 0xdadadadaU, 0x21212121U,
368
0x10101010U, 0xffffffffU, 0xf3f3f3f3U, 0xd2d2d2d2U,
369
0xcdcdcdcdU, 0x0c0c0c0cU, 0x13131313U, 0xececececU,
370
0x5f5f5f5fU, 0x97979797U, 0x44444444U, 0x17171717U,
371
0xc4c4c4c4U, 0xa7a7a7a7U, 0x7e7e7e7eU, 0x3d3d3d3dU,
372
0x64646464U, 0x5d5d5d5dU, 0x19191919U, 0x73737373U,
373
0x60606060U, 0x81818181U, 0x4f4f4f4fU, 0xdcdcdcdcU,
374
0x22222222U, 0x2a2a2a2aU, 0x90909090U, 0x88888888U,
375
0x46464646U, 0xeeeeeeeeU, 0xb8b8b8b8U, 0x14141414U,
376
0xdedededeU, 0x5e5e5e5eU, 0x0b0b0b0bU, 0xdbdbdbdbU,
377
0xe0e0e0e0U, 0x32323232U, 0x3a3a3a3aU, 0x0a0a0a0aU,
378
0x49494949U, 0x06060606U, 0x24242424U, 0x5c5c5c5cU,
379
0xc2c2c2c2U, 0xd3d3d3d3U, 0xacacacacU, 0x62626262U,
380
0x91919191U, 0x95959595U, 0xe4e4e4e4U, 0x79797979U,
381
0xe7e7e7e7U, 0xc8c8c8c8U, 0x37373737U, 0x6d6d6d6dU,
382
0x8d8d8d8dU, 0xd5d5d5d5U, 0x4e4e4e4eU, 0xa9a9a9a9U,
383
0x6c6c6c6cU, 0x56565656U, 0xf4f4f4f4U, 0xeaeaeaeaU,
384
0x65656565U, 0x7a7a7a7aU, 0xaeaeaeaeU, 0x08080808U,
385
0xbabababaU, 0x78787878U, 0x25252525U, 0x2e2e2e2eU,
386
0x1c1c1c1cU, 0xa6a6a6a6U, 0xb4b4b4b4U, 0xc6c6c6c6U,
387
0xe8e8e8e8U, 0xddddddddU, 0x74747474U, 0x1f1f1f1fU,
388
0x4b4b4b4bU, 0xbdbdbdbdU, 0x8b8b8b8bU, 0x8a8a8a8aU,
389
0x70707070U, 0x3e3e3e3eU, 0xb5b5b5b5U, 0x66666666U,
390
0x48484848U, 0x03030303U, 0xf6f6f6f6U, 0x0e0e0e0eU,
391
0x61616161U, 0x35353535U, 0x57575757U, 0xb9b9b9b9U,
392
0x86868686U, 0xc1c1c1c1U, 0x1d1d1d1dU, 0x9e9e9e9eU,
393
0xe1e1e1e1U, 0xf8f8f8f8U, 0x98989898U, 0x11111111U,
394
0x69696969U, 0xd9d9d9d9U, 0x8e8e8e8eU, 0x94949494U,
395
0x9b9b9b9bU, 0x1e1e1e1eU, 0x87878787U, 0xe9e9e9e9U,
396
0xcecececeU, 0x55555555U, 0x28282828U, 0xdfdfdfdfU,
397
0x8c8c8c8cU, 0xa1a1a1a1U, 0x89898989U, 0x0d0d0d0dU,
398
0xbfbfbfbfU, 0xe6e6e6e6U, 0x42424242U, 0x68686868U,
399
0x41414141U, 0x99999999U, 0x2d2d2d2dU, 0x0f0f0f0fU,
400
0xb0b0b0b0U, 0x54545454U, 0xbbbbbbbbU, 0x16161616U,
402
#endif /* AES_SMALL_TABLES */
403
static const u32 Td0[256] = {
404
0x51f4a750U, 0x7e416553U, 0x1a17a4c3U, 0x3a275e96U,
405
0x3bab6bcbU, 0x1f9d45f1U, 0xacfa58abU, 0x4be30393U,
406
0x2030fa55U, 0xad766df6U, 0x88cc7691U, 0xf5024c25U,
407
0x4fe5d7fcU, 0xc52acbd7U, 0x26354480U, 0xb562a38fU,
408
0xdeb15a49U, 0x25ba1b67U, 0x45ea0e98U, 0x5dfec0e1U,
409
0xc32f7502U, 0x814cf012U, 0x8d4697a3U, 0x6bd3f9c6U,
410
0x038f5fe7U, 0x15929c95U, 0xbf6d7aebU, 0x955259daU,
411
0xd4be832dU, 0x587421d3U, 0x49e06929U, 0x8ec9c844U,
412
0x75c2896aU, 0xf48e7978U, 0x99583e6bU, 0x27b971ddU,
413
0xbee14fb6U, 0xf088ad17U, 0xc920ac66U, 0x7dce3ab4U,
414
0x63df4a18U, 0xe51a3182U, 0x97513360U, 0x62537f45U,
415
0xb16477e0U, 0xbb6bae84U, 0xfe81a01cU, 0xf9082b94U,
416
0x70486858U, 0x8f45fd19U, 0x94de6c87U, 0x527bf8b7U,
417
0xab73d323U, 0x724b02e2U, 0xe31f8f57U, 0x6655ab2aU,
418
0xb2eb2807U, 0x2fb5c203U, 0x86c57b9aU, 0xd33708a5U,
419
0x302887f2U, 0x23bfa5b2U, 0x02036abaU, 0xed16825cU,
420
0x8acf1c2bU, 0xa779b492U, 0xf307f2f0U, 0x4e69e2a1U,
421
0x65daf4cdU, 0x0605bed5U, 0xd134621fU, 0xc4a6fe8aU,
422
0x342e539dU, 0xa2f355a0U, 0x058ae132U, 0xa4f6eb75U,
423
0x0b83ec39U, 0x4060efaaU, 0x5e719f06U, 0xbd6e1051U,
424
0x3e218af9U, 0x96dd063dU, 0xdd3e05aeU, 0x4de6bd46U,
425
0x91548db5U, 0x71c45d05U, 0x0406d46fU, 0x605015ffU,
426
0x1998fb24U, 0xd6bde997U, 0x894043ccU, 0x67d99e77U,
427
0xb0e842bdU, 0x07898b88U, 0xe7195b38U, 0x79c8eedbU,
428
0xa17c0a47U, 0x7c420fe9U, 0xf8841ec9U, 0x00000000U,
429
0x09808683U, 0x322bed48U, 0x1e1170acU, 0x6c5a724eU,
430
0xfd0efffbU, 0x0f853856U, 0x3daed51eU, 0x362d3927U,
431
0x0a0fd964U, 0x685ca621U, 0x9b5b54d1U, 0x24362e3aU,
432
0x0c0a67b1U, 0x9357e70fU, 0xb4ee96d2U, 0x1b9b919eU,
433
0x80c0c54fU, 0x61dc20a2U, 0x5a774b69U, 0x1c121a16U,
434
0xe293ba0aU, 0xc0a02ae5U, 0x3c22e043U, 0x121b171dU,
435
0x0e090d0bU, 0xf28bc7adU, 0x2db6a8b9U, 0x141ea9c8U,
436
0x57f11985U, 0xaf75074cU, 0xee99ddbbU, 0xa37f60fdU,
437
0xf701269fU, 0x5c72f5bcU, 0x44663bc5U, 0x5bfb7e34U,
438
0x8b432976U, 0xcb23c6dcU, 0xb6edfc68U, 0xb8e4f163U,
439
0xd731dccaU, 0x42638510U, 0x13972240U, 0x84c61120U,
440
0x854a247dU, 0xd2bb3df8U, 0xaef93211U, 0xc729a16dU,
441
0x1d9e2f4bU, 0xdcb230f3U, 0x0d8652ecU, 0x77c1e3d0U,
442
0x2bb3166cU, 0xa970b999U, 0x119448faU, 0x47e96422U,
443
0xa8fc8cc4U, 0xa0f03f1aU, 0x567d2cd8U, 0x223390efU,
444
0x87494ec7U, 0xd938d1c1U, 0x8ccaa2feU, 0x98d40b36U,
445
0xa6f581cfU, 0xa57ade28U, 0xdab78e26U, 0x3fadbfa4U,
446
0x2c3a9de4U, 0x5078920dU, 0x6a5fcc9bU, 0x547e4662U,
447
0xf68d13c2U, 0x90d8b8e8U, 0x2e39f75eU, 0x82c3aff5U,
448
0x9f5d80beU, 0x69d0937cU, 0x6fd52da9U, 0xcf2512b3U,
449
0xc8ac993bU, 0x10187da7U, 0xe89c636eU, 0xdb3bbb7bU,
450
0xcd267809U, 0x6e5918f4U, 0xec9ab701U, 0x834f9aa8U,
451
0xe6956e65U, 0xaaffe67eU, 0x21bccf08U, 0xef15e8e6U,
452
0xbae79bd9U, 0x4a6f36ceU, 0xea9f09d4U, 0x29b07cd6U,
453
0x31a4b2afU, 0x2a3f2331U, 0xc6a59430U, 0x35a266c0U,
454
0x744ebc37U, 0xfc82caa6U, 0xe090d0b0U, 0x33a7d815U,
455
0xf104984aU, 0x41ecdaf7U, 0x7fcd500eU, 0x1791f62fU,
456
0x764dd68dU, 0x43efb04dU, 0xccaa4d54U, 0xe49604dfU,
457
0x9ed1b5e3U, 0x4c6a881bU, 0xc12c1fb8U, 0x4665517fU,
458
0x9d5eea04U, 0x018c355dU, 0xfa877473U, 0xfb0b412eU,
459
0xb3671d5aU, 0x92dbd252U, 0xe9105633U, 0x6dd64713U,
460
0x9ad7618cU, 0x37a10c7aU, 0x59f8148eU, 0xeb133c89U,
461
0xcea927eeU, 0xb761c935U, 0xe11ce5edU, 0x7a47b13cU,
462
0x9cd2df59U, 0x55f2733fU, 0x1814ce79U, 0x73c737bfU,
463
0x53f7cdeaU, 0x5ffdaa5bU, 0xdf3d6f14U, 0x7844db86U,
464
0xcaaff381U, 0xb968c43eU, 0x3824342cU, 0xc2a3405fU,
465
0x161dc372U, 0xbce2250cU, 0x283c498bU, 0xff0d9541U,
466
0x39a80171U, 0x080cb3deU, 0xd8b4e49cU, 0x6456c190U,
467
0x7bcb8461U, 0xd532b670U, 0x486c5c74U, 0xd0b85742U,
469
#ifndef AES_SMALL_TABLES
470
static const u32 Td1[256] = {
471
0x5051f4a7U, 0x537e4165U, 0xc31a17a4U, 0x963a275eU,
472
0xcb3bab6bU, 0xf11f9d45U, 0xabacfa58U, 0x934be303U,
473
0x552030faU, 0xf6ad766dU, 0x9188cc76U, 0x25f5024cU,
474
0xfc4fe5d7U, 0xd7c52acbU, 0x80263544U, 0x8fb562a3U,
475
0x49deb15aU, 0x6725ba1bU, 0x9845ea0eU, 0xe15dfec0U,
476
0x02c32f75U, 0x12814cf0U, 0xa38d4697U, 0xc66bd3f9U,
477
0xe7038f5fU, 0x9515929cU, 0xebbf6d7aU, 0xda955259U,
478
0x2dd4be83U, 0xd3587421U, 0x2949e069U, 0x448ec9c8U,
479
0x6a75c289U, 0x78f48e79U, 0x6b99583eU, 0xdd27b971U,
480
0xb6bee14fU, 0x17f088adU, 0x66c920acU, 0xb47dce3aU,
481
0x1863df4aU, 0x82e51a31U, 0x60975133U, 0x4562537fU,
482
0xe0b16477U, 0x84bb6baeU, 0x1cfe81a0U, 0x94f9082bU,
483
0x58704868U, 0x198f45fdU, 0x8794de6cU, 0xb7527bf8U,
484
0x23ab73d3U, 0xe2724b02U, 0x57e31f8fU, 0x2a6655abU,
485
0x07b2eb28U, 0x032fb5c2U, 0x9a86c57bU, 0xa5d33708U,
486
0xf2302887U, 0xb223bfa5U, 0xba02036aU, 0x5ced1682U,
487
0x2b8acf1cU, 0x92a779b4U, 0xf0f307f2U, 0xa14e69e2U,
488
0xcd65daf4U, 0xd50605beU, 0x1fd13462U, 0x8ac4a6feU,
489
0x9d342e53U, 0xa0a2f355U, 0x32058ae1U, 0x75a4f6ebU,
490
0x390b83ecU, 0xaa4060efU, 0x065e719fU, 0x51bd6e10U,
491
0xf93e218aU, 0x3d96dd06U, 0xaedd3e05U, 0x464de6bdU,
492
0xb591548dU, 0x0571c45dU, 0x6f0406d4U, 0xff605015U,
493
0x241998fbU, 0x97d6bde9U, 0xcc894043U, 0x7767d99eU,
494
0xbdb0e842U, 0x8807898bU, 0x38e7195bU, 0xdb79c8eeU,
495
0x47a17c0aU, 0xe97c420fU, 0xc9f8841eU, 0x00000000U,
496
0x83098086U, 0x48322bedU, 0xac1e1170U, 0x4e6c5a72U,
497
0xfbfd0effU, 0x560f8538U, 0x1e3daed5U, 0x27362d39U,
498
0x640a0fd9U, 0x21685ca6U, 0xd19b5b54U, 0x3a24362eU,
499
0xb10c0a67U, 0x0f9357e7U, 0xd2b4ee96U, 0x9e1b9b91U,
500
0x4f80c0c5U, 0xa261dc20U, 0x695a774bU, 0x161c121aU,
501
0x0ae293baU, 0xe5c0a02aU, 0x433c22e0U, 0x1d121b17U,
502
0x0b0e090dU, 0xadf28bc7U, 0xb92db6a8U, 0xc8141ea9U,
503
0x8557f119U, 0x4caf7507U, 0xbbee99ddU, 0xfda37f60U,
504
0x9ff70126U, 0xbc5c72f5U, 0xc544663bU, 0x345bfb7eU,
505
0x768b4329U, 0xdccb23c6U, 0x68b6edfcU, 0x63b8e4f1U,
506
0xcad731dcU, 0x10426385U, 0x40139722U, 0x2084c611U,
507
0x7d854a24U, 0xf8d2bb3dU, 0x11aef932U, 0x6dc729a1U,
508
0x4b1d9e2fU, 0xf3dcb230U, 0xec0d8652U, 0xd077c1e3U,
509
0x6c2bb316U, 0x99a970b9U, 0xfa119448U, 0x2247e964U,
510
0xc4a8fc8cU, 0x1aa0f03fU, 0xd8567d2cU, 0xef223390U,
511
0xc787494eU, 0xc1d938d1U, 0xfe8ccaa2U, 0x3698d40bU,
512
0xcfa6f581U, 0x28a57adeU, 0x26dab78eU, 0xa43fadbfU,
513
0xe42c3a9dU, 0x0d507892U, 0x9b6a5fccU, 0x62547e46U,
514
0xc2f68d13U, 0xe890d8b8U, 0x5e2e39f7U, 0xf582c3afU,
515
0xbe9f5d80U, 0x7c69d093U, 0xa96fd52dU, 0xb3cf2512U,
516
0x3bc8ac99U, 0xa710187dU, 0x6ee89c63U, 0x7bdb3bbbU,
517
0x09cd2678U, 0xf46e5918U, 0x01ec9ab7U, 0xa8834f9aU,
518
0x65e6956eU, 0x7eaaffe6U, 0x0821bccfU, 0xe6ef15e8U,
519
0xd9bae79bU, 0xce4a6f36U, 0xd4ea9f09U, 0xd629b07cU,
520
0xaf31a4b2U, 0x312a3f23U, 0x30c6a594U, 0xc035a266U,
521
0x37744ebcU, 0xa6fc82caU, 0xb0e090d0U, 0x1533a7d8U,
522
0x4af10498U, 0xf741ecdaU, 0x0e7fcd50U, 0x2f1791f6U,
523
0x8d764dd6U, 0x4d43efb0U, 0x54ccaa4dU, 0xdfe49604U,
524
0xe39ed1b5U, 0x1b4c6a88U, 0xb8c12c1fU, 0x7f466551U,
525
0x049d5eeaU, 0x5d018c35U, 0x73fa8774U, 0x2efb0b41U,
526
0x5ab3671dU, 0x5292dbd2U, 0x33e91056U, 0x136dd647U,
527
0x8c9ad761U, 0x7a37a10cU, 0x8e59f814U, 0x89eb133cU,
528
0xeecea927U, 0x35b761c9U, 0xede11ce5U, 0x3c7a47b1U,
529
0x599cd2dfU, 0x3f55f273U, 0x791814ceU, 0xbf73c737U,
530
0xea53f7cdU, 0x5b5ffdaaU, 0x14df3d6fU, 0x867844dbU,
531
0x81caaff3U, 0x3eb968c4U, 0x2c382434U, 0x5fc2a340U,
532
0x72161dc3U, 0x0cbce225U, 0x8b283c49U, 0x41ff0d95U,
533
0x7139a801U, 0xde080cb3U, 0x9cd8b4e4U, 0x906456c1U,
534
0x617bcb84U, 0x70d532b6U, 0x74486c5cU, 0x42d0b857U,
536
static const u32 Td2[256] = {
537
0xa75051f4U, 0x65537e41U, 0xa4c31a17U, 0x5e963a27U,
538
0x6bcb3babU, 0x45f11f9dU, 0x58abacfaU, 0x03934be3U,
539
0xfa552030U, 0x6df6ad76U, 0x769188ccU, 0x4c25f502U,
540
0xd7fc4fe5U, 0xcbd7c52aU, 0x44802635U, 0xa38fb562U,
541
0x5a49deb1U, 0x1b6725baU, 0x0e9845eaU, 0xc0e15dfeU,
542
0x7502c32fU, 0xf012814cU, 0x97a38d46U, 0xf9c66bd3U,
543
0x5fe7038fU, 0x9c951592U, 0x7aebbf6dU, 0x59da9552U,
544
0x832dd4beU, 0x21d35874U, 0x692949e0U, 0xc8448ec9U,
545
0x896a75c2U, 0x7978f48eU, 0x3e6b9958U, 0x71dd27b9U,
546
0x4fb6bee1U, 0xad17f088U, 0xac66c920U, 0x3ab47dceU,
547
0x4a1863dfU, 0x3182e51aU, 0x33609751U, 0x7f456253U,
548
0x77e0b164U, 0xae84bb6bU, 0xa01cfe81U, 0x2b94f908U,
549
0x68587048U, 0xfd198f45U, 0x6c8794deU, 0xf8b7527bU,
550
0xd323ab73U, 0x02e2724bU, 0x8f57e31fU, 0xab2a6655U,
551
0x2807b2ebU, 0xc2032fb5U, 0x7b9a86c5U, 0x08a5d337U,
552
0x87f23028U, 0xa5b223bfU, 0x6aba0203U, 0x825ced16U,
553
0x1c2b8acfU, 0xb492a779U, 0xf2f0f307U, 0xe2a14e69U,
554
0xf4cd65daU, 0xbed50605U, 0x621fd134U, 0xfe8ac4a6U,
555
0x539d342eU, 0x55a0a2f3U, 0xe132058aU, 0xeb75a4f6U,
556
0xec390b83U, 0xefaa4060U, 0x9f065e71U, 0x1051bd6eU,
558
0x8af93e21U, 0x063d96ddU, 0x05aedd3eU, 0xbd464de6U,
559
0x8db59154U, 0x5d0571c4U, 0xd46f0406U, 0x15ff6050U,
560
0xfb241998U, 0xe997d6bdU, 0x43cc8940U, 0x9e7767d9U,
561
0x42bdb0e8U, 0x8b880789U, 0x5b38e719U, 0xeedb79c8U,
562
0x0a47a17cU, 0x0fe97c42U, 0x1ec9f884U, 0x00000000U,
563
0x86830980U, 0xed48322bU, 0x70ac1e11U, 0x724e6c5aU,
564
0xfffbfd0eU, 0x38560f85U, 0xd51e3daeU, 0x3927362dU,
565
0xd9640a0fU, 0xa621685cU, 0x54d19b5bU, 0x2e3a2436U,
566
0x67b10c0aU, 0xe70f9357U, 0x96d2b4eeU, 0x919e1b9bU,
567
0xc54f80c0U, 0x20a261dcU, 0x4b695a77U, 0x1a161c12U,
568
0xba0ae293U, 0x2ae5c0a0U, 0xe0433c22U, 0x171d121bU,
569
0x0d0b0e09U, 0xc7adf28bU, 0xa8b92db6U, 0xa9c8141eU,
570
0x198557f1U, 0x074caf75U, 0xddbbee99U, 0x60fda37fU,
571
0x269ff701U, 0xf5bc5c72U, 0x3bc54466U, 0x7e345bfbU,
572
0x29768b43U, 0xc6dccb23U, 0xfc68b6edU, 0xf163b8e4U,
573
0xdccad731U, 0x85104263U, 0x22401397U, 0x112084c6U,
574
0x247d854aU, 0x3df8d2bbU, 0x3211aef9U, 0xa16dc729U,
575
0x2f4b1d9eU, 0x30f3dcb2U, 0x52ec0d86U, 0xe3d077c1U,
576
0x166c2bb3U, 0xb999a970U, 0x48fa1194U, 0x642247e9U,
577
0x8cc4a8fcU, 0x3f1aa0f0U, 0x2cd8567dU, 0x90ef2233U,
578
0x4ec78749U, 0xd1c1d938U, 0xa2fe8ccaU, 0x0b3698d4U,
579
0x81cfa6f5U, 0xde28a57aU, 0x8e26dab7U, 0xbfa43fadU,
580
0x9de42c3aU, 0x920d5078U, 0xcc9b6a5fU, 0x4662547eU,
581
0x13c2f68dU, 0xb8e890d8U, 0xf75e2e39U, 0xaff582c3U,
582
0x80be9f5dU, 0x937c69d0U, 0x2da96fd5U, 0x12b3cf25U,
583
0x993bc8acU, 0x7da71018U, 0x636ee89cU, 0xbb7bdb3bU,
584
0x7809cd26U, 0x18f46e59U, 0xb701ec9aU, 0x9aa8834fU,
585
0x6e65e695U, 0xe67eaaffU, 0xcf0821bcU, 0xe8e6ef15U,
586
0x9bd9bae7U, 0x36ce4a6fU, 0x09d4ea9fU, 0x7cd629b0U,
587
0xb2af31a4U, 0x23312a3fU, 0x9430c6a5U, 0x66c035a2U,
588
0xbc37744eU, 0xcaa6fc82U, 0xd0b0e090U, 0xd81533a7U,
589
0x984af104U, 0xdaf741ecU, 0x500e7fcdU, 0xf62f1791U,
590
0xd68d764dU, 0xb04d43efU, 0x4d54ccaaU, 0x04dfe496U,
591
0xb5e39ed1U, 0x881b4c6aU, 0x1fb8c12cU, 0x517f4665U,
592
0xea049d5eU, 0x355d018cU, 0x7473fa87U, 0x412efb0bU,
593
0x1d5ab367U, 0xd25292dbU, 0x5633e910U, 0x47136dd6U,
594
0x618c9ad7U, 0x0c7a37a1U, 0x148e59f8U, 0x3c89eb13U,
595
0x27eecea9U, 0xc935b761U, 0xe5ede11cU, 0xb13c7a47U,
596
0xdf599cd2U, 0x733f55f2U, 0xce791814U, 0x37bf73c7U,
597
0xcdea53f7U, 0xaa5b5ffdU, 0x6f14df3dU, 0xdb867844U,
598
0xf381caafU, 0xc43eb968U, 0x342c3824U, 0x405fc2a3U,
599
0xc372161dU, 0x250cbce2U, 0x498b283cU, 0x9541ff0dU,
600
0x017139a8U, 0xb3de080cU, 0xe49cd8b4U, 0xc1906456U,
601
0x84617bcbU, 0xb670d532U, 0x5c74486cU, 0x5742d0b8U,
603
static const u32 Td3[256] = {
604
0xf4a75051U, 0x4165537eU, 0x17a4c31aU, 0x275e963aU,
605
0xab6bcb3bU, 0x9d45f11fU, 0xfa58abacU, 0xe303934bU,
606
0x30fa5520U, 0x766df6adU, 0xcc769188U, 0x024c25f5U,
607
0xe5d7fc4fU, 0x2acbd7c5U, 0x35448026U, 0x62a38fb5U,
608
0xb15a49deU, 0xba1b6725U, 0xea0e9845U, 0xfec0e15dU,
609
0x2f7502c3U, 0x4cf01281U, 0x4697a38dU, 0xd3f9c66bU,
610
0x8f5fe703U, 0x929c9515U, 0x6d7aebbfU, 0x5259da95U,
611
0xbe832dd4U, 0x7421d358U, 0xe0692949U, 0xc9c8448eU,
612
0xc2896a75U, 0x8e7978f4U, 0x583e6b99U, 0xb971dd27U,
613
0xe14fb6beU, 0x88ad17f0U, 0x20ac66c9U, 0xce3ab47dU,
614
0xdf4a1863U, 0x1a3182e5U, 0x51336097U, 0x537f4562U,
615
0x6477e0b1U, 0x6bae84bbU, 0x81a01cfeU, 0x082b94f9U,
616
0x48685870U, 0x45fd198fU, 0xde6c8794U, 0x7bf8b752U,
617
0x73d323abU, 0x4b02e272U, 0x1f8f57e3U, 0x55ab2a66U,
618
0xeb2807b2U, 0xb5c2032fU, 0xc57b9a86U, 0x3708a5d3U,
619
0x2887f230U, 0xbfa5b223U, 0x036aba02U, 0x16825cedU,
620
0xcf1c2b8aU, 0x79b492a7U, 0x07f2f0f3U, 0x69e2a14eU,
621
0xdaf4cd65U, 0x05bed506U, 0x34621fd1U, 0xa6fe8ac4U,
622
0x2e539d34U, 0xf355a0a2U, 0x8ae13205U, 0xf6eb75a4U,
623
0x83ec390bU, 0x60efaa40U, 0x719f065eU, 0x6e1051bdU,
624
0x218af93eU, 0xdd063d96U, 0x3e05aeddU, 0xe6bd464dU,
625
0x548db591U, 0xc45d0571U, 0x06d46f04U, 0x5015ff60U,
626
0x98fb2419U, 0xbde997d6U, 0x4043cc89U, 0xd99e7767U,
627
0xe842bdb0U, 0x898b8807U, 0x195b38e7U, 0xc8eedb79U,
628
0x7c0a47a1U, 0x420fe97cU, 0x841ec9f8U, 0x00000000U,
629
0x80868309U, 0x2bed4832U, 0x1170ac1eU, 0x5a724e6cU,
630
0x0efffbfdU, 0x8538560fU, 0xaed51e3dU, 0x2d392736U,
631
0x0fd9640aU, 0x5ca62168U, 0x5b54d19bU, 0x362e3a24U,
632
0x0a67b10cU, 0x57e70f93U, 0xee96d2b4U, 0x9b919e1bU,
633
0xc0c54f80U, 0xdc20a261U, 0x774b695aU, 0x121a161cU,
634
0x93ba0ae2U, 0xa02ae5c0U, 0x22e0433cU, 0x1b171d12U,
635
0x090d0b0eU, 0x8bc7adf2U, 0xb6a8b92dU, 0x1ea9c814U,
636
0xf1198557U, 0x75074cafU, 0x99ddbbeeU, 0x7f60fda3U,
637
0x01269ff7U, 0x72f5bc5cU, 0x663bc544U, 0xfb7e345bU,
638
0x4329768bU, 0x23c6dccbU, 0xedfc68b6U, 0xe4f163b8U,
639
0x31dccad7U, 0x63851042U, 0x97224013U, 0xc6112084U,
640
0x4a247d85U, 0xbb3df8d2U, 0xf93211aeU, 0x29a16dc7U,
641
0x9e2f4b1dU, 0xb230f3dcU, 0x8652ec0dU, 0xc1e3d077U,
642
0xb3166c2bU, 0x70b999a9U, 0x9448fa11U, 0xe9642247U,
643
0xfc8cc4a8U, 0xf03f1aa0U, 0x7d2cd856U, 0x3390ef22U,
644
0x494ec787U, 0x38d1c1d9U, 0xcaa2fe8cU, 0xd40b3698U,
645
0xf581cfa6U, 0x7ade28a5U, 0xb78e26daU, 0xadbfa43fU,
646
0x3a9de42cU, 0x78920d50U, 0x5fcc9b6aU, 0x7e466254U,
647
0x8d13c2f6U, 0xd8b8e890U, 0x39f75e2eU, 0xc3aff582U,
648
0x5d80be9fU, 0xd0937c69U, 0xd52da96fU, 0x2512b3cfU,
649
0xac993bc8U, 0x187da710U, 0x9c636ee8U, 0x3bbb7bdbU,
650
0x267809cdU, 0x5918f46eU, 0x9ab701ecU, 0x4f9aa883U,
651
0x956e65e6U, 0xffe67eaaU, 0xbccf0821U, 0x15e8e6efU,
652
0xe79bd9baU, 0x6f36ce4aU, 0x9f09d4eaU, 0xb07cd629U,
653
0xa4b2af31U, 0x3f23312aU, 0xa59430c6U, 0xa266c035U,
654
0x4ebc3774U, 0x82caa6fcU, 0x90d0b0e0U, 0xa7d81533U,
655
0x04984af1U, 0xecdaf741U, 0xcd500e7fU, 0x91f62f17U,
656
0x4dd68d76U, 0xefb04d43U, 0xaa4d54ccU, 0x9604dfe4U,
657
0xd1b5e39eU, 0x6a881b4cU, 0x2c1fb8c1U, 0x65517f46U,
658
0x5eea049dU, 0x8c355d01U, 0x877473faU, 0x0b412efbU,
659
0x671d5ab3U, 0xdbd25292U, 0x105633e9U, 0xd647136dU,
660
0xd7618c9aU, 0xa10c7a37U, 0xf8148e59U, 0x133c89ebU,
661
0xa927eeceU, 0x61c935b7U, 0x1ce5ede1U, 0x47b13c7aU,
662
0xd2df599cU, 0xf2733f55U, 0x14ce7918U, 0xc737bf73U,
663
0xf7cdea53U, 0xfdaa5b5fU, 0x3d6f14dfU, 0x44db8678U,
664
0xaff381caU, 0x68c43eb9U, 0x24342c38U, 0xa3405fc2U,
665
0x1dc37216U, 0xe2250cbcU, 0x3c498b28U, 0x0d9541ffU,
666
0xa8017139U, 0x0cb3de08U, 0xb4e49cd8U, 0x56c19064U,
667
0xcb84617bU, 0x32b670d5U, 0x6c5c7448U, 0xb85742d0U,
669
static const u32 Td4[256] = {
670
0x52525252U, 0x09090909U, 0x6a6a6a6aU, 0xd5d5d5d5U,
671
0x30303030U, 0x36363636U, 0xa5a5a5a5U, 0x38383838U,
672
0xbfbfbfbfU, 0x40404040U, 0xa3a3a3a3U, 0x9e9e9e9eU,
673
0x81818181U, 0xf3f3f3f3U, 0xd7d7d7d7U, 0xfbfbfbfbU,
674
0x7c7c7c7cU, 0xe3e3e3e3U, 0x39393939U, 0x82828282U,
675
0x9b9b9b9bU, 0x2f2f2f2fU, 0xffffffffU, 0x87878787U,
676
0x34343434U, 0x8e8e8e8eU, 0x43434343U, 0x44444444U,
677
0xc4c4c4c4U, 0xdedededeU, 0xe9e9e9e9U, 0xcbcbcbcbU,
678
0x54545454U, 0x7b7b7b7bU, 0x94949494U, 0x32323232U,
679
0xa6a6a6a6U, 0xc2c2c2c2U, 0x23232323U, 0x3d3d3d3dU,
680
0xeeeeeeeeU, 0x4c4c4c4cU, 0x95959595U, 0x0b0b0b0bU,
681
0x42424242U, 0xfafafafaU, 0xc3c3c3c3U, 0x4e4e4e4eU,
682
0x08080808U, 0x2e2e2e2eU, 0xa1a1a1a1U, 0x66666666U,
683
0x28282828U, 0xd9d9d9d9U, 0x24242424U, 0xb2b2b2b2U,
684
0x76767676U, 0x5b5b5b5bU, 0xa2a2a2a2U, 0x49494949U,
685
0x6d6d6d6dU, 0x8b8b8b8bU, 0xd1d1d1d1U, 0x25252525U,
686
0x72727272U, 0xf8f8f8f8U, 0xf6f6f6f6U, 0x64646464U,
687
0x86868686U, 0x68686868U, 0x98989898U, 0x16161616U,
688
0xd4d4d4d4U, 0xa4a4a4a4U, 0x5c5c5c5cU, 0xccccccccU,
689
0x5d5d5d5dU, 0x65656565U, 0xb6b6b6b6U, 0x92929292U,
690
0x6c6c6c6cU, 0x70707070U, 0x48484848U, 0x50505050U,
691
0xfdfdfdfdU, 0xededededU, 0xb9b9b9b9U, 0xdadadadaU,
692
0x5e5e5e5eU, 0x15151515U, 0x46464646U, 0x57575757U,
693
0xa7a7a7a7U, 0x8d8d8d8dU, 0x9d9d9d9dU, 0x84848484U,
694
0x90909090U, 0xd8d8d8d8U, 0xababababU, 0x00000000U,
695
0x8c8c8c8cU, 0xbcbcbcbcU, 0xd3d3d3d3U, 0x0a0a0a0aU,
696
0xf7f7f7f7U, 0xe4e4e4e4U, 0x58585858U, 0x05050505U,
697
0xb8b8b8b8U, 0xb3b3b3b3U, 0x45454545U, 0x06060606U,
698
0xd0d0d0d0U, 0x2c2c2c2cU, 0x1e1e1e1eU, 0x8f8f8f8fU,
699
0xcacacacaU, 0x3f3f3f3fU, 0x0f0f0f0fU, 0x02020202U,
700
0xc1c1c1c1U, 0xafafafafU, 0xbdbdbdbdU, 0x03030303U,
701
0x01010101U, 0x13131313U, 0x8a8a8a8aU, 0x6b6b6b6bU,
702
0x3a3a3a3aU, 0x91919191U, 0x11111111U, 0x41414141U,
703
0x4f4f4f4fU, 0x67676767U, 0xdcdcdcdcU, 0xeaeaeaeaU,
704
0x97979797U, 0xf2f2f2f2U, 0xcfcfcfcfU, 0xcecececeU,
705
0xf0f0f0f0U, 0xb4b4b4b4U, 0xe6e6e6e6U, 0x73737373U,
706
0x96969696U, 0xacacacacU, 0x74747474U, 0x22222222U,
707
0xe7e7e7e7U, 0xadadadadU, 0x35353535U, 0x85858585U,
708
0xe2e2e2e2U, 0xf9f9f9f9U, 0x37373737U, 0xe8e8e8e8U,
709
0x1c1c1c1cU, 0x75757575U, 0xdfdfdfdfU, 0x6e6e6e6eU,
710
0x47474747U, 0xf1f1f1f1U, 0x1a1a1a1aU, 0x71717171U,
711
0x1d1d1d1dU, 0x29292929U, 0xc5c5c5c5U, 0x89898989U,
712
0x6f6f6f6fU, 0xb7b7b7b7U, 0x62626262U, 0x0e0e0e0eU,
713
0xaaaaaaaaU, 0x18181818U, 0xbebebebeU, 0x1b1b1b1bU,
714
0xfcfcfcfcU, 0x56565656U, 0x3e3e3e3eU, 0x4b4b4b4bU,
715
0xc6c6c6c6U, 0xd2d2d2d2U, 0x79797979U, 0x20202020U,
716
0x9a9a9a9aU, 0xdbdbdbdbU, 0xc0c0c0c0U, 0xfefefefeU,
717
0x78787878U, 0xcdcdcdcdU, 0x5a5a5a5aU, 0xf4f4f4f4U,
718
0x1f1f1f1fU, 0xddddddddU, 0xa8a8a8a8U, 0x33333333U,
719
0x88888888U, 0x07070707U, 0xc7c7c7c7U, 0x31313131U,
720
0xb1b1b1b1U, 0x12121212U, 0x10101010U, 0x59595959U,
721
0x27272727U, 0x80808080U, 0xececececU, 0x5f5f5f5fU,
722
0x60606060U, 0x51515151U, 0x7f7f7f7fU, 0xa9a9a9a9U,
723
0x19191919U, 0xb5b5b5b5U, 0x4a4a4a4aU, 0x0d0d0d0dU,
724
0x2d2d2d2dU, 0xe5e5e5e5U, 0x7a7a7a7aU, 0x9f9f9f9fU,
725
0x93939393U, 0xc9c9c9c9U, 0x9c9c9c9cU, 0xefefefefU,
726
0xa0a0a0a0U, 0xe0e0e0e0U, 0x3b3b3b3bU, 0x4d4d4d4dU,
727
0xaeaeaeaeU, 0x2a2a2a2aU, 0xf5f5f5f5U, 0xb0b0b0b0U,
728
0xc8c8c8c8U, 0xebebebebU, 0xbbbbbbbbU, 0x3c3c3c3cU,
729
0x83838383U, 0x53535353U, 0x99999999U, 0x61616161U,
730
0x17171717U, 0x2b2b2b2bU, 0x04040404U, 0x7e7e7e7eU,
731
0xbabababaU, 0x77777777U, 0xd6d6d6d6U, 0x26262626U,
732
0xe1e1e1e1U, 0x69696969U, 0x14141414U, 0x63636363U,
733
0x55555555U, 0x21212121U, 0x0c0c0c0cU, 0x7d7d7d7dU,
735
static const u32 rcon[] = {
736
0x01000000, 0x02000000, 0x04000000, 0x08000000,
737
0x10000000, 0x20000000, 0x40000000, 0x80000000,
738
0x1B000000, 0x36000000, /* for 128-bit blocks, Rijndael never uses more than 10 rcon values */
740
#else /* AES_SMALL_TABLES */
741
static const u8 Td4s[256] = {
742
0x52U, 0x09U, 0x6aU, 0xd5U, 0x30U, 0x36U, 0xa5U, 0x38U,
743
0xbfU, 0x40U, 0xa3U, 0x9eU, 0x81U, 0xf3U, 0xd7U, 0xfbU,
744
0x7cU, 0xe3U, 0x39U, 0x82U, 0x9bU, 0x2fU, 0xffU, 0x87U,
745
0x34U, 0x8eU, 0x43U, 0x44U, 0xc4U, 0xdeU, 0xe9U, 0xcbU,
746
0x54U, 0x7bU, 0x94U, 0x32U, 0xa6U, 0xc2U, 0x23U, 0x3dU,
747
0xeeU, 0x4cU, 0x95U, 0x0bU, 0x42U, 0xfaU, 0xc3U, 0x4eU,
748
0x08U, 0x2eU, 0xa1U, 0x66U, 0x28U, 0xd9U, 0x24U, 0xb2U,
749
0x76U, 0x5bU, 0xa2U, 0x49U, 0x6dU, 0x8bU, 0xd1U, 0x25U,
750
0x72U, 0xf8U, 0xf6U, 0x64U, 0x86U, 0x68U, 0x98U, 0x16U,
751
0xd4U, 0xa4U, 0x5cU, 0xccU, 0x5dU, 0x65U, 0xb6U, 0x92U,
752
0x6cU, 0x70U, 0x48U, 0x50U, 0xfdU, 0xedU, 0xb9U, 0xdaU,
753
0x5eU, 0x15U, 0x46U, 0x57U, 0xa7U, 0x8dU, 0x9dU, 0x84U,
754
0x90U, 0xd8U, 0xabU, 0x00U, 0x8cU, 0xbcU, 0xd3U, 0x0aU,
755
0xf7U, 0xe4U, 0x58U, 0x05U, 0xb8U, 0xb3U, 0x45U, 0x06U,
756
0xd0U, 0x2cU, 0x1eU, 0x8fU, 0xcaU, 0x3fU, 0x0fU, 0x02U,
757
0xc1U, 0xafU, 0xbdU, 0x03U, 0x01U, 0x13U, 0x8aU, 0x6bU,
758
0x3aU, 0x91U, 0x11U, 0x41U, 0x4fU, 0x67U, 0xdcU, 0xeaU,
759
0x97U, 0xf2U, 0xcfU, 0xceU, 0xf0U, 0xb4U, 0xe6U, 0x73U,
760
0x96U, 0xacU, 0x74U, 0x22U, 0xe7U, 0xadU, 0x35U, 0x85U,
761
0xe2U, 0xf9U, 0x37U, 0xe8U, 0x1cU, 0x75U, 0xdfU, 0x6eU,
762
0x47U, 0xf1U, 0x1aU, 0x71U, 0x1dU, 0x29U, 0xc5U, 0x89U,
763
0x6fU, 0xb7U, 0x62U, 0x0eU, 0xaaU, 0x18U, 0xbeU, 0x1bU,
764
0xfcU, 0x56U, 0x3eU, 0x4bU, 0xc6U, 0xd2U, 0x79U, 0x20U,
765
0x9aU, 0xdbU, 0xc0U, 0xfeU, 0x78U, 0xcdU, 0x5aU, 0xf4U,
766
0x1fU, 0xddU, 0xa8U, 0x33U, 0x88U, 0x07U, 0xc7U, 0x31U,
767
0xb1U, 0x12U, 0x10U, 0x59U, 0x27U, 0x80U, 0xecU, 0x5fU,
768
0x60U, 0x51U, 0x7fU, 0xa9U, 0x19U, 0xb5U, 0x4aU, 0x0dU,
769
0x2dU, 0xe5U, 0x7aU, 0x9fU, 0x93U, 0xc9U, 0x9cU, 0xefU,
770
0xa0U, 0xe0U, 0x3bU, 0x4dU, 0xaeU, 0x2aU, 0xf5U, 0xb0U,
771
0xc8U, 0xebU, 0xbbU, 0x3cU, 0x83U, 0x53U, 0x99U, 0x61U,
772
0x17U, 0x2bU, 0x04U, 0x7eU, 0xbaU, 0x77U, 0xd6U, 0x26U,
773
0xe1U, 0x69U, 0x14U, 0x63U, 0x55U, 0x21U, 0x0cU, 0x7dU,
775
static const u8 rcons[] = {
776
0x01, 0x02, 0x04, 0x08, 0x10, 0x20, 0x40, 0x80, 0x1B, 0x36
777
/* for 128-bit blocks, Rijndael never uses more than 10 rcon values */
779
#endif /* AES_SMALL_TABLES */
782
#ifndef AES_SMALL_TABLES
784
#define RCON(i) rcon[(i)]
786
#define TE0(i) Te0[((i) >> 24) & 0xff]
787
#define TE1(i) Te1[((i) >> 16) & 0xff]
788
#define TE2(i) Te2[((i) >> 8) & 0xff]
789
#define TE3(i) Te3[(i) & 0xff]
790
#define TE41(i) (Te4[((i) >> 24) & 0xff] & 0xff000000)
791
#define TE42(i) (Te4[((i) >> 16) & 0xff] & 0x00ff0000)
792
#define TE43(i) (Te4[((i) >> 8) & 0xff] & 0x0000ff00)
793
#define TE44(i) (Te4[(i) & 0xff] & 0x000000ff)
794
#define TE421(i) (Te4[((i) >> 16) & 0xff] & 0xff000000)
795
#define TE432(i) (Te4[((i) >> 8) & 0xff] & 0x00ff0000)
796
#define TE443(i) (Te4[(i) & 0xff] & 0x0000ff00)
797
#define TE414(i) (Te4[((i) >> 24) & 0xff] & 0x000000ff)
798
#define TE4(i) (Te4[(i)] & 0x000000ff)
800
#define TD0(i) Td0[((i) >> 24) & 0xff]
801
#define TD1(i) Td1[((i) >> 16) & 0xff]
802
#define TD2(i) Td2[((i) >> 8) & 0xff]
803
#define TD3(i) Td3[(i) & 0xff]
804
#define TD41(i) (Td4[((i) >> 24) & 0xff] & 0xff000000)
805
#define TD42(i) (Td4[((i) >> 16) & 0xff] & 0x00ff0000)
806
#define TD43(i) (Td4[((i) >> 8) & 0xff] & 0x0000ff00)
807
#define TD44(i) (Td4[(i) & 0xff] & 0x000000ff)
808
#define TD0_(i) Td0[(i) & 0xff]
809
#define TD1_(i) Td1[(i) & 0xff]
810
#define TD2_(i) Td2[(i) & 0xff]
811
#define TD3_(i) Td3[(i) & 0xff]
813
#else /* AES_SMALL_TABLES */
815
#define RCON(i) (rcons[(i)] << 24)
817
static inline u32 rotr(u32 val, int bits)
819
return (val >> bits) | (val << (32 - bits));
822
#define TE0(i) Te0[((i) >> 24) & 0xff]
823
#define TE1(i) rotr(Te0[((i) >> 16) & 0xff], 8)
824
#define TE2(i) rotr(Te0[((i) >> 8) & 0xff], 16)
825
#define TE3(i) rotr(Te0[(i) & 0xff], 24)
826
#define TE41(i) ((Te0[((i) >> 24) & 0xff] << 8) & 0xff000000)
827
#define TE42(i) (Te0[((i) >> 16) & 0xff] & 0x00ff0000)
828
#define TE43(i) (Te0[((i) >> 8) & 0xff] & 0x0000ff00)
829
#define TE44(i) ((Te0[(i) & 0xff] >> 8) & 0x000000ff)
830
#define TE421(i) ((Te0[((i) >> 16) & 0xff] << 8) & 0xff000000)
831
#define TE432(i) (Te0[((i) >> 8) & 0xff] & 0x00ff0000)
832
#define TE443(i) (Te0[(i) & 0xff] & 0x0000ff00)
833
#define TE414(i) ((Te0[((i) >> 24) & 0xff] >> 8) & 0x000000ff)
834
#define TE4(i) ((Te0[(i)] >> 8) & 0x000000ff)
836
#define TD0(i) Td0[((i) >> 24) & 0xff]
837
#define TD1(i) rotr(Td0[((i) >> 16) & 0xff], 8)
838
#define TD2(i) rotr(Td0[((i) >> 8) & 0xff], 16)
839
#define TD3(i) rotr(Td0[(i) & 0xff], 24)
840
#define TD41(i) (Td4s[((i) >> 24) & 0xff] << 24)
841
#define TD42(i) (Td4s[((i) >> 16) & 0xff] << 16)
842
#define TD43(i) (Td4s[((i) >> 8) & 0xff] << 8)
843
#define TD44(i) (Td4s[(i) & 0xff])
844
#define TD0_(i) Td0[(i) & 0xff]
845
#define TD1_(i) rotr(Td0[(i) & 0xff], 8)
846
#define TD2_(i) rotr(Td0[(i) & 0xff], 16)
847
#define TD3_(i) rotr(Td0[(i) & 0xff], 24)
849
#endif /* AES_SMALL_TABLES */
851
#define SWAP(x) (_lrotl(x, 8) & 0x00ff00ff | _lrotr(x, 8) & 0xff00ff00)
854
#define GETU32(p) SWAP(*((u32 *)(p)))
855
#define PUTU32(ct, st) { *((u32 *)(ct)) = SWAP((st)); }
857
#define GETU32(pt) (((u32)(pt)[0] << 24) ^ ((u32)(pt)[1] << 16) ^ \
858
((u32)(pt)[2] << 8) ^ ((u32)(pt)[3]))
859
#define PUTU32(ct, st) { \
860
(ct)[0] = (u8)((st) >> 24); (ct)[1] = (u8)((st) >> 16); \
861
(ct)[2] = (u8)((st) >> 8); (ct)[3] = (u8)(st); }
865
* Expand the cipher key into the encryption key schedule.
867
* @return the number of rounds for the given cipher key size.
869
void rijndaelKeySetupEnc(u32 rk[/*44*/], const u8 cipherKey[])
874
rk[0] = GETU32(cipherKey );
875
rk[1] = GETU32(cipherKey + 4);
876
rk[2] = GETU32(cipherKey + 8);
877
rk[3] = GETU32(cipherKey + 12);
878
for (i = 0; i < 10; i++) {
881
TE421(temp) ^ TE432(temp) ^ TE443(temp) ^ TE414(temp) ^
883
rk[5] = rk[1] ^ rk[4];
884
rk[6] = rk[2] ^ rk[5];
885
rk[7] = rk[3] ^ rk[6];
891
* Expand the cipher key into the decryption key schedule.
893
* @return the number of rounds for the given cipher key size.
895
void rijndaelKeySetupDec(u32 rk[/*44*/], const u8 cipherKey[])
900
/* expand the cipher key: */
901
rijndaelKeySetupEnc(rk, cipherKey);
902
/* invert the order of the round keys: */
903
for (i = 0, j = 4*Nr; i < j; i += 4, j -= 4) {
904
temp = rk[i ]; rk[i ] = rk[j ]; rk[j ] = temp;
905
temp = rk[i + 1]; rk[i + 1] = rk[j + 1]; rk[j + 1] = temp;
906
temp = rk[i + 2]; rk[i + 2] = rk[j + 2]; rk[j + 2] = temp;
907
temp = rk[i + 3]; rk[i + 3] = rk[j + 3]; rk[j + 3] = temp;
909
/* apply the inverse MixColumn transform to all round keys but the
910
* first and the last: */
911
for (i = 1; i < Nr; i++) {
913
for (j = 0; j < 4; j++) {
914
rk[j] = TD0_(TE4((rk[j] >> 24) )) ^
915
TD1_(TE4((rk[j] >> 16) & 0xff)) ^
916
TD2_(TE4((rk[j] >> 8) & 0xff)) ^
917
TD3_(TE4((rk[j] ) & 0xff));
922
void rijndaelEncrypt(const u32 rk[/*44*/], const u8 pt[16], u8 ct[16])
924
u32 s0, s1, s2, s3, t0, t1, t2, t3;
928
#endif /* ?FULL_UNROLL */
931
* map byte array block to cipher state
932
* and add initial round key:
934
s0 = GETU32(pt ) ^ rk[0];
935
s1 = GETU32(pt + 4) ^ rk[1];
936
s2 = GETU32(pt + 8) ^ rk[2];
937
s3 = GETU32(pt + 12) ^ rk[3];
939
#define ROUND(i,d,s) \
940
d##0 = TE0(s##0) ^ TE1(s##1) ^ TE2(s##2) ^ TE3(s##3) ^ rk[4 * i]; \
941
d##1 = TE0(s##1) ^ TE1(s##2) ^ TE2(s##3) ^ TE3(s##0) ^ rk[4 * i + 1]; \
942
d##2 = TE0(s##2) ^ TE1(s##3) ^ TE2(s##0) ^ TE3(s##1) ^ rk[4 * i + 2]; \
943
d##3 = TE0(s##3) ^ TE1(s##0) ^ TE2(s##1) ^ TE3(s##2) ^ rk[4 * i + 3]
959
#else /* !FULL_UNROLL */
961
/* Nr - 1 full rounds: */
971
#endif /* ?FULL_UNROLL */
976
* apply last round and
977
* map cipher state to byte array block:
979
s0 = TE41(t0) ^ TE42(t1) ^ TE43(t2) ^ TE44(t3) ^ rk[0];
981
s1 = TE41(t1) ^ TE42(t2) ^ TE43(t3) ^ TE44(t0) ^ rk[1];
983
s2 = TE41(t2) ^ TE42(t3) ^ TE43(t0) ^ TE44(t1) ^ rk[2];
985
s3 = TE41(t3) ^ TE42(t0) ^ TE43(t1) ^ TE44(t2) ^ rk[3];
989
void rijndaelDecrypt(const u32 rk[/*44*/], const u8 ct[16], u8 pt[16])
991
u32 s0, s1, s2, s3, t0, t1, t2, t3;
995
#endif /* ?FULL_UNROLL */
998
* map byte array block to cipher state
999
* and add initial round key:
1001
s0 = GETU32(ct ) ^ rk[0];
1002
s1 = GETU32(ct + 4) ^ rk[1];
1003
s2 = GETU32(ct + 8) ^ rk[2];
1004
s3 = GETU32(ct + 12) ^ rk[3];
1006
#define ROUND(i,d,s) \
1007
d##0 = TD0(s##0) ^ TD1(s##3) ^ TD2(s##2) ^ TD3(s##1) ^ rk[4 * i]; \
1008
d##1 = TD0(s##1) ^ TD1(s##0) ^ TD2(s##3) ^ TD3(s##2) ^ rk[4 * i + 1]; \
1009
d##2 = TD0(s##2) ^ TD1(s##1) ^ TD2(s##0) ^ TD3(s##3) ^ rk[4 * i + 2]; \
1010
d##3 = TD0(s##3) ^ TD1(s##2) ^ TD2(s##1) ^ TD3(s##0) ^ rk[4 * i + 3]
1026
#else /* !FULL_UNROLL */
1028
/* Nr - 1 full rounds: */
1038
#endif /* ?FULL_UNROLL */
1043
* apply last round and
1044
* map cipher state to byte array block:
1046
s0 = TD41(t0) ^ TD42(t3) ^ TD43(t2) ^ TD44(t1) ^ rk[0];
1048
s1 = TD41(t1) ^ TD42(t0) ^ TD43(t3) ^ TD44(t2) ^ rk[1];
1050
s2 = TD41(t2) ^ TD42(t1) ^ TD43(t0) ^ TD44(t3) ^ rk[2];
1052
s3 = TD41(t3) ^ TD42(t2) ^ TD43(t1) ^ TD44(t0) ^ rk[3];
1053
PUTU32(pt + 12, s3);
1058
/* Generic wrapper functions for AES functions */
1060
void * aes_encrypt_init(const u8 *key, size_t len)
1065
rk = os_malloc(4 * 44);
1068
rijndaelKeySetupEnc(rk, key);
1073
void aes_encrypt(void *ctx, const u8 *plain, u8 *crypt)
1075
rijndaelEncrypt(ctx, plain, crypt);
1079
void aes_encrypt_deinit(void *ctx)
1085
void * aes_decrypt_init(const u8 *key, size_t len)
1090
rk = os_malloc(4 * 44);
1093
rijndaelKeySetupDec(rk, key);
1098
void aes_decrypt(void *ctx, const u8 *crypt, u8 *plain)
1100
rijndaelDecrypt(ctx, crypt, plain);
1104
void aes_decrypt_deinit(void *ctx)