--- /dev/null
+/*\r
+ * FIPS-46-3 compliant Triple-DES implementation\r
+ *\r
+ * Copyright (C) 2006-2015, ARM Limited, All Rights Reserved\r
+ * SPDX-License-Identifier: Apache-2.0\r
+ *\r
+ * Licensed under the Apache License, Version 2.0 (the "License"); you may\r
+ * not use this file except in compliance with the License.\r
+ * You may obtain a copy of the License at\r
+ *\r
+ * http://www.apache.org/licenses/LICENSE-2.0\r
+ *\r
+ * Unless required by applicable law or agreed to in writing, software\r
+ * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT\r
+ * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\r
+ * See the License for the specific language governing permissions and\r
+ * limitations under the License.\r
+ *\r
+ * This file is part of mbed TLS (https://tls.mbed.org)\r
+ */\r
+/*\r
+ * DES, on which TDES is based, was originally designed by Horst Feistel\r
+ * at IBM in 1974, and was adopted as a standard by NIST (formerly NBS).\r
+ *\r
+ * http://csrc.nist.gov/publications/fips/fips46-3/fips46-3.pdf\r
+ */\r
+\r
+#if !defined(MBEDTLS_CONFIG_FILE)\r
+#include "mbedtls/config.h"\r
+#else\r
+#include MBEDTLS_CONFIG_FILE\r
+#endif\r
+\r
+#if defined(MBEDTLS_DES_C)\r
+\r
+#include "mbedtls/des.h"\r
+#include "mbedtls/platform_util.h"\r
+\r
+#include <string.h>\r
+\r
+#if defined(MBEDTLS_SELF_TEST)\r
+#if defined(MBEDTLS_PLATFORM_C)\r
+#include "mbedtls/platform.h"\r
+#else\r
+#include <stdio.h>\r
+#define mbedtls_printf printf\r
+#endif /* MBEDTLS_PLATFORM_C */\r
+#endif /* MBEDTLS_SELF_TEST */\r
+\r
+#if !defined(MBEDTLS_DES_ALT)\r
+\r
+/*\r
+ * 32-bit integer manipulation macros (big endian)\r
+ */\r
+#ifndef GET_UINT32_BE\r
+#define GET_UINT32_BE(n,b,i) \\r
+{ \\r
+ (n) = ( (uint32_t) (b)[(i) ] << 24 ) \\r
+ | ( (uint32_t) (b)[(i) + 1] << 16 ) \\r
+ | ( (uint32_t) (b)[(i) + 2] << 8 ) \\r
+ | ( (uint32_t) (b)[(i) + 3] ); \\r
+}\r
+#endif\r
+\r
+#ifndef PUT_UINT32_BE\r
+#define PUT_UINT32_BE(n,b,i) \\r
+{ \\r
+ (b)[(i) ] = (unsigned char) ( (n) >> 24 ); \\r
+ (b)[(i) + 1] = (unsigned char) ( (n) >> 16 ); \\r
+ (b)[(i) + 2] = (unsigned char) ( (n) >> 8 ); \\r
+ (b)[(i) + 3] = (unsigned char) ( (n) ); \\r
+}\r
+#endif\r
+\r
+/*\r
+ * Expanded DES S-boxes\r
+ */\r
+static const uint32_t SB1[64] =\r
+{\r
+ 0x01010400, 0x00000000, 0x00010000, 0x01010404,\r
+ 0x01010004, 0x00010404, 0x00000004, 0x00010000,\r
+ 0x00000400, 0x01010400, 0x01010404, 0x00000400,\r
+ 0x01000404, 0x01010004, 0x01000000, 0x00000004,\r
+ 0x00000404, 0x01000400, 0x01000400, 0x00010400,\r
+ 0x00010400, 0x01010000, 0x01010000, 0x01000404,\r
+ 0x00010004, 0x01000004, 0x01000004, 0x00010004,\r
+ 0x00000000, 0x00000404, 0x00010404, 0x01000000,\r
+ 0x00010000, 0x01010404, 0x00000004, 0x01010000,\r
+ 0x01010400, 0x01000000, 0x01000000, 0x00000400,\r
+ 0x01010004, 0x00010000, 0x00010400, 0x01000004,\r
+ 0x00000400, 0x00000004, 0x01000404, 0x00010404,\r
+ 0x01010404, 0x00010004, 0x01010000, 0x01000404,\r
+ 0x01000004, 0x00000404, 0x00010404, 0x01010400,\r
+ 0x00000404, 0x01000400, 0x01000400, 0x00000000,\r
+ 0x00010004, 0x00010400, 0x00000000, 0x01010004\r
+};\r
+\r
+static const uint32_t SB2[64] =\r
+{\r
+ 0x80108020, 0x80008000, 0x00008000, 0x00108020,\r
+ 0x00100000, 0x00000020, 0x80100020, 0x80008020,\r
+ 0x80000020, 0x80108020, 0x80108000, 0x80000000,\r
+ 0x80008000, 0x00100000, 0x00000020, 0x80100020,\r
+ 0x00108000, 0x00100020, 0x80008020, 0x00000000,\r
+ 0x80000000, 0x00008000, 0x00108020, 0x80100000,\r
+ 0x00100020, 0x80000020, 0x00000000, 0x00108000,\r
+ 0x00008020, 0x80108000, 0x80100000, 0x00008020,\r
+ 0x00000000, 0x00108020, 0x80100020, 0x00100000,\r
+ 0x80008020, 0x80100000, 0x80108000, 0x00008000,\r
+ 0x80100000, 0x80008000, 0x00000020, 0x80108020,\r
+ 0x00108020, 0x00000020, 0x00008000, 0x80000000,\r
+ 0x00008020, 0x80108000, 0x00100000, 0x80000020,\r
+ 0x00100020, 0x80008020, 0x80000020, 0x00100020,\r
+ 0x00108000, 0x00000000, 0x80008000, 0x00008020,\r
+ 0x80000000, 0x80100020, 0x80108020, 0x00108000\r
+};\r
+\r
+static const uint32_t SB3[64] =\r
+{\r
+ 0x00000208, 0x08020200, 0x00000000, 0x08020008,\r
+ 0x08000200, 0x00000000, 0x00020208, 0x08000200,\r
+ 0x00020008, 0x08000008, 0x08000008, 0x00020000,\r
+ 0x08020208, 0x00020008, 0x08020000, 0x00000208,\r
+ 0x08000000, 0x00000008, 0x08020200, 0x00000200,\r
+ 0x00020200, 0x08020000, 0x08020008, 0x00020208,\r
+ 0x08000208, 0x00020200, 0x00020000, 0x08000208,\r
+ 0x00000008, 0x08020208, 0x00000200, 0x08000000,\r
+ 0x08020200, 0x08000000, 0x00020008, 0x00000208,\r
+ 0x00020000, 0x08020200, 0x08000200, 0x00000000,\r
+ 0x00000200, 0x00020008, 0x08020208, 0x08000200,\r
+ 0x08000008, 0x00000200, 0x00000000, 0x08020008,\r
+ 0x08000208, 0x00020000, 0x08000000, 0x08020208,\r
+ 0x00000008, 0x00020208, 0x00020200, 0x08000008,\r
+ 0x08020000, 0x08000208, 0x00000208, 0x08020000,\r
+ 0x00020208, 0x00000008, 0x08020008, 0x00020200\r
+};\r
+\r
+static const uint32_t SB4[64] =\r
+{\r
+ 0x00802001, 0x00002081, 0x00002081, 0x00000080,\r
+ 0x00802080, 0x00800081, 0x00800001, 0x00002001,\r
+ 0x00000000, 0x00802000, 0x00802000, 0x00802081,\r
+ 0x00000081, 0x00000000, 0x00800080, 0x00800001,\r
+ 0x00000001, 0x00002000, 0x00800000, 0x00802001,\r
+ 0x00000080, 0x00800000, 0x00002001, 0x00002080,\r
+ 0x00800081, 0x00000001, 0x00002080, 0x00800080,\r
+ 0x00002000, 0x00802080, 0x00802081, 0x00000081,\r
+ 0x00800080, 0x00800001, 0x00802000, 0x00802081,\r
+ 0x00000081, 0x00000000, 0x00000000, 0x00802000,\r
+ 0x00002080, 0x00800080, 0x00800081, 0x00000001,\r
+ 0x00802001, 0x00002081, 0x00002081, 0x00000080,\r
+ 0x00802081, 0x00000081, 0x00000001, 0x00002000,\r
+ 0x00800001, 0x00002001, 0x00802080, 0x00800081,\r
+ 0x00002001, 0x00002080, 0x00800000, 0x00802001,\r
+ 0x00000080, 0x00800000, 0x00002000, 0x00802080\r
+};\r
+\r
+static const uint32_t SB5[64] =\r
+{\r
+ 0x00000100, 0x02080100, 0x02080000, 0x42000100,\r
+ 0x00080000, 0x00000100, 0x40000000, 0x02080000,\r
+ 0x40080100, 0x00080000, 0x02000100, 0x40080100,\r
+ 0x42000100, 0x42080000, 0x00080100, 0x40000000,\r
+ 0x02000000, 0x40080000, 0x40080000, 0x00000000,\r
+ 0x40000100, 0x42080100, 0x42080100, 0x02000100,\r
+ 0x42080000, 0x40000100, 0x00000000, 0x42000000,\r
+ 0x02080100, 0x02000000, 0x42000000, 0x00080100,\r
+ 0x00080000, 0x42000100, 0x00000100, 0x02000000,\r
+ 0x40000000, 0x02080000, 0x42000100, 0x40080100,\r
+ 0x02000100, 0x40000000, 0x42080000, 0x02080100,\r
+ 0x40080100, 0x00000100, 0x02000000, 0x42080000,\r
+ 0x42080100, 0x00080100, 0x42000000, 0x42080100,\r
+ 0x02080000, 0x00000000, 0x40080000, 0x42000000,\r
+ 0x00080100, 0x02000100, 0x40000100, 0x00080000,\r
+ 0x00000000, 0x40080000, 0x02080100, 0x40000100\r
+};\r
+\r
+static const uint32_t SB6[64] =\r
+{\r
+ 0x20000010, 0x20400000, 0x00004000, 0x20404010,\r
+ 0x20400000, 0x00000010, 0x20404010, 0x00400000,\r
+ 0x20004000, 0x00404010, 0x00400000, 0x20000010,\r
+ 0x00400010, 0x20004000, 0x20000000, 0x00004010,\r
+ 0x00000000, 0x00400010, 0x20004010, 0x00004000,\r
+ 0x00404000, 0x20004010, 0x00000010, 0x20400010,\r
+ 0x20400010, 0x00000000, 0x00404010, 0x20404000,\r
+ 0x00004010, 0x00404000, 0x20404000, 0x20000000,\r
+ 0x20004000, 0x00000010, 0x20400010, 0x00404000,\r
+ 0x20404010, 0x00400000, 0x00004010, 0x20000010,\r
+ 0x00400000, 0x20004000, 0x20000000, 0x00004010,\r
+ 0x20000010, 0x20404010, 0x00404000, 0x20400000,\r
+ 0x00404010, 0x20404000, 0x00000000, 0x20400010,\r
+ 0x00000010, 0x00004000, 0x20400000, 0x00404010,\r
+ 0x00004000, 0x00400010, 0x20004010, 0x00000000,\r
+ 0x20404000, 0x20000000, 0x00400010, 0x20004010\r
+};\r
+\r
+static const uint32_t SB7[64] =\r
+{\r
+ 0x00200000, 0x04200002, 0x04000802, 0x00000000,\r
+ 0x00000800, 0x04000802, 0x00200802, 0x04200800,\r
+ 0x04200802, 0x00200000, 0x00000000, 0x04000002,\r
+ 0x00000002, 0x04000000, 0x04200002, 0x00000802,\r
+ 0x04000800, 0x00200802, 0x00200002, 0x04000800,\r
+ 0x04000002, 0x04200000, 0x04200800, 0x00200002,\r
+ 0x04200000, 0x00000800, 0x00000802, 0x04200802,\r
+ 0x00200800, 0x00000002, 0x04000000, 0x00200800,\r
+ 0x04000000, 0x00200800, 0x00200000, 0x04000802,\r
+ 0x04000802, 0x04200002, 0x04200002, 0x00000002,\r
+ 0x00200002, 0x04000000, 0x04000800, 0x00200000,\r
+ 0x04200800, 0x00000802, 0x00200802, 0x04200800,\r
+ 0x00000802, 0x04000002, 0x04200802, 0x04200000,\r
+ 0x00200800, 0x00000000, 0x00000002, 0x04200802,\r
+ 0x00000000, 0x00200802, 0x04200000, 0x00000800,\r
+ 0x04000002, 0x04000800, 0x00000800, 0x00200002\r
+};\r
+\r
+static const uint32_t SB8[64] =\r
+{\r
+ 0x10001040, 0x00001000, 0x00040000, 0x10041040,\r
+ 0x10000000, 0x10001040, 0x00000040, 0x10000000,\r
+ 0x00040040, 0x10040000, 0x10041040, 0x00041000,\r
+ 0x10041000, 0x00041040, 0x00001000, 0x00000040,\r
+ 0x10040000, 0x10000040, 0x10001000, 0x00001040,\r
+ 0x00041000, 0x00040040, 0x10040040, 0x10041000,\r
+ 0x00001040, 0x00000000, 0x00000000, 0x10040040,\r
+ 0x10000040, 0x10001000, 0x00041040, 0x00040000,\r
+ 0x00041040, 0x00040000, 0x10041000, 0x00001000,\r
+ 0x00000040, 0x10040040, 0x00001000, 0x00041040,\r
+ 0x10001000, 0x00000040, 0x10000040, 0x10040000,\r
+ 0x10040040, 0x10000000, 0x00040000, 0x10001040,\r
+ 0x00000000, 0x10041040, 0x00040040, 0x10000040,\r
+ 0x10040000, 0x10001000, 0x10001040, 0x00000000,\r
+ 0x10041040, 0x00041000, 0x00041000, 0x00001040,\r
+ 0x00001040, 0x00040040, 0x10000000, 0x10041000\r
+};\r
+\r
+/*\r
+ * PC1: left and right halves bit-swap\r
+ */\r
+static const uint32_t LHs[16] =\r
+{\r
+ 0x00000000, 0x00000001, 0x00000100, 0x00000101,\r
+ 0x00010000, 0x00010001, 0x00010100, 0x00010101,\r
+ 0x01000000, 0x01000001, 0x01000100, 0x01000101,\r
+ 0x01010000, 0x01010001, 0x01010100, 0x01010101\r
+};\r
+\r
+static const uint32_t RHs[16] =\r
+{\r
+ 0x00000000, 0x01000000, 0x00010000, 0x01010000,\r
+ 0x00000100, 0x01000100, 0x00010100, 0x01010100,\r
+ 0x00000001, 0x01000001, 0x00010001, 0x01010001,\r
+ 0x00000101, 0x01000101, 0x00010101, 0x01010101,\r
+};\r
+\r
+/*\r
+ * Initial Permutation macro\r
+ */\r
+#define DES_IP(X,Y) \\r
+ do \\r
+ { \\r
+ T = (((X) >> 4) ^ (Y)) & 0x0F0F0F0F; (Y) ^= T; (X) ^= (T << 4); \\r
+ T = (((X) >> 16) ^ (Y)) & 0x0000FFFF; (Y) ^= T; (X) ^= (T << 16); \\r
+ T = (((Y) >> 2) ^ (X)) & 0x33333333; (X) ^= T; (Y) ^= (T << 2); \\r
+ T = (((Y) >> 8) ^ (X)) & 0x00FF00FF; (X) ^= T; (Y) ^= (T << 8); \\r
+ (Y) = (((Y) << 1) | ((Y) >> 31)) & 0xFFFFFFFF; \\r
+ T = ((X) ^ (Y)) & 0xAAAAAAAA; (Y) ^= T; (X) ^= T; \\r
+ (X) = (((X) << 1) | ((X) >> 31)) & 0xFFFFFFFF; \\r
+ } while( 0 )\r
+\r
+/*\r
+ * Final Permutation macro\r
+ */\r
+#define DES_FP(X,Y) \\r
+ do \\r
+ { \\r
+ (X) = (((X) << 31) | ((X) >> 1)) & 0xFFFFFFFF; \\r
+ T = ((X) ^ (Y)) & 0xAAAAAAAA; (X) ^= T; (Y) ^= T; \\r
+ (Y) = (((Y) << 31) | ((Y) >> 1)) & 0xFFFFFFFF; \\r
+ T = (((Y) >> 8) ^ (X)) & 0x00FF00FF; (X) ^= T; (Y) ^= (T << 8); \\r
+ T = (((Y) >> 2) ^ (X)) & 0x33333333; (X) ^= T; (Y) ^= (T << 2); \\r
+ T = (((X) >> 16) ^ (Y)) & 0x0000FFFF; (Y) ^= T; (X) ^= (T << 16); \\r
+ T = (((X) >> 4) ^ (Y)) & 0x0F0F0F0F; (Y) ^= T; (X) ^= (T << 4); \\r
+ } while( 0 )\r
+\r
+/*\r
+ * DES round macro\r
+ */\r
+#define DES_ROUND(X,Y) \\r
+ do \\r
+ { \\r
+ T = *SK++ ^ (X); \\r
+ (Y) ^= SB8[ (T ) & 0x3F ] ^ \\r
+ SB6[ (T >> 8) & 0x3F ] ^ \\r
+ SB4[ (T >> 16) & 0x3F ] ^ \\r
+ SB2[ (T >> 24) & 0x3F ]; \\r
+ \\r
+ T = *SK++ ^ (((X) << 28) | ((X) >> 4)); \\r
+ (Y) ^= SB7[ (T ) & 0x3F ] ^ \\r
+ SB5[ (T >> 8) & 0x3F ] ^ \\r
+ SB3[ (T >> 16) & 0x3F ] ^ \\r
+ SB1[ (T >> 24) & 0x3F ]; \\r
+ } while( 0 )\r
+\r
+#define SWAP(a,b) \\r
+ do \\r
+ { \\r
+ uint32_t t = (a); (a) = (b); (b) = t; t = 0; \\r
+ } while( 0 )\r
+\r
+void mbedtls_des_init( mbedtls_des_context *ctx )\r
+{\r
+ memset( ctx, 0, sizeof( mbedtls_des_context ) );\r
+}\r
+\r
+void mbedtls_des_free( mbedtls_des_context *ctx )\r
+{\r
+ if( ctx == NULL )\r
+ return;\r
+\r
+ mbedtls_platform_zeroize( ctx, sizeof( mbedtls_des_context ) );\r
+}\r
+\r
+void mbedtls_des3_init( mbedtls_des3_context *ctx )\r
+{\r
+ memset( ctx, 0, sizeof( mbedtls_des3_context ) );\r
+}\r
+\r
+void mbedtls_des3_free( mbedtls_des3_context *ctx )\r
+{\r
+ if( ctx == NULL )\r
+ return;\r
+\r
+ mbedtls_platform_zeroize( ctx, sizeof( mbedtls_des3_context ) );\r
+}\r
+\r
+static const unsigned char odd_parity_table[128] = { 1, 2, 4, 7, 8,\r
+ 11, 13, 14, 16, 19, 21, 22, 25, 26, 28, 31, 32, 35, 37, 38, 41, 42, 44,\r
+ 47, 49, 50, 52, 55, 56, 59, 61, 62, 64, 67, 69, 70, 73, 74, 76, 79, 81,\r
+ 82, 84, 87, 88, 91, 93, 94, 97, 98, 100, 103, 104, 107, 109, 110, 112,\r
+ 115, 117, 118, 121, 122, 124, 127, 128, 131, 133, 134, 137, 138, 140,\r
+ 143, 145, 146, 148, 151, 152, 155, 157, 158, 161, 162, 164, 167, 168,\r
+ 171, 173, 174, 176, 179, 181, 182, 185, 186, 188, 191, 193, 194, 196,\r
+ 199, 200, 203, 205, 206, 208, 211, 213, 214, 217, 218, 220, 223, 224,\r
+ 227, 229, 230, 233, 234, 236, 239, 241, 242, 244, 247, 248, 251, 253,\r
+ 254 };\r
+\r
+void mbedtls_des_key_set_parity( unsigned char key[MBEDTLS_DES_KEY_SIZE] )\r
+{\r
+ int i;\r
+\r
+ for( i = 0; i < MBEDTLS_DES_KEY_SIZE; i++ )\r
+ key[i] = odd_parity_table[key[i] / 2];\r
+}\r
+\r
+/*\r
+ * Check the given key's parity, returns 1 on failure, 0 on SUCCESS\r
+ */\r
+int mbedtls_des_key_check_key_parity( const unsigned char key[MBEDTLS_DES_KEY_SIZE] )\r
+{\r
+ int i;\r
+\r
+ for( i = 0; i < MBEDTLS_DES_KEY_SIZE; i++ )\r
+ if( key[i] != odd_parity_table[key[i] / 2] )\r
+ return( 1 );\r
+\r
+ return( 0 );\r
+}\r
+\r
+/*\r
+ * Table of weak and semi-weak keys\r
+ *\r
+ * Source: http://en.wikipedia.org/wiki/Weak_key\r
+ *\r
+ * Weak:\r
+ * Alternating ones + zeros (0x0101010101010101)\r
+ * Alternating 'F' + 'E' (0xFEFEFEFEFEFEFEFE)\r
+ * '0xE0E0E0E0F1F1F1F1'\r
+ * '0x1F1F1F1F0E0E0E0E'\r
+ *\r
+ * Semi-weak:\r
+ * 0x011F011F010E010E and 0x1F011F010E010E01\r
+ * 0x01E001E001F101F1 and 0xE001E001F101F101\r
+ * 0x01FE01FE01FE01FE and 0xFE01FE01FE01FE01\r
+ * 0x1FE01FE00EF10EF1 and 0xE01FE01FF10EF10E\r
+ * 0x1FFE1FFE0EFE0EFE and 0xFE1FFE1FFE0EFE0E\r
+ * 0xE0FEE0FEF1FEF1FE and 0xFEE0FEE0FEF1FEF1\r
+ *\r
+ */\r
+\r
+#define WEAK_KEY_COUNT 16\r
+\r
+static const unsigned char weak_key_table[WEAK_KEY_COUNT][MBEDTLS_DES_KEY_SIZE] =\r
+{\r
+ { 0x01, 0x01, 0x01, 0x01, 0x01, 0x01, 0x01, 0x01 },\r
+ { 0xFE, 0xFE, 0xFE, 0xFE, 0xFE, 0xFE, 0xFE, 0xFE },\r
+ { 0x1F, 0x1F, 0x1F, 0x1F, 0x0E, 0x0E, 0x0E, 0x0E },\r
+ { 0xE0, 0xE0, 0xE0, 0xE0, 0xF1, 0xF1, 0xF1, 0xF1 },\r
+\r
+ { 0x01, 0x1F, 0x01, 0x1F, 0x01, 0x0E, 0x01, 0x0E },\r
+ { 0x1F, 0x01, 0x1F, 0x01, 0x0E, 0x01, 0x0E, 0x01 },\r
+ { 0x01, 0xE0, 0x01, 0xE0, 0x01, 0xF1, 0x01, 0xF1 },\r
+ { 0xE0, 0x01, 0xE0, 0x01, 0xF1, 0x01, 0xF1, 0x01 },\r
+ { 0x01, 0xFE, 0x01, 0xFE, 0x01, 0xFE, 0x01, 0xFE },\r
+ { 0xFE, 0x01, 0xFE, 0x01, 0xFE, 0x01, 0xFE, 0x01 },\r
+ { 0x1F, 0xE0, 0x1F, 0xE0, 0x0E, 0xF1, 0x0E, 0xF1 },\r
+ { 0xE0, 0x1F, 0xE0, 0x1F, 0xF1, 0x0E, 0xF1, 0x0E },\r
+ { 0x1F, 0xFE, 0x1F, 0xFE, 0x0E, 0xFE, 0x0E, 0xFE },\r
+ { 0xFE, 0x1F, 0xFE, 0x1F, 0xFE, 0x0E, 0xFE, 0x0E },\r
+ { 0xE0, 0xFE, 0xE0, 0xFE, 0xF1, 0xFE, 0xF1, 0xFE },\r
+ { 0xFE, 0xE0, 0xFE, 0xE0, 0xFE, 0xF1, 0xFE, 0xF1 }\r
+};\r
+\r
+int mbedtls_des_key_check_weak( const unsigned char key[MBEDTLS_DES_KEY_SIZE] )\r
+{\r
+ int i;\r
+\r
+ for( i = 0; i < WEAK_KEY_COUNT; i++ )\r
+ if( memcmp( weak_key_table[i], key, MBEDTLS_DES_KEY_SIZE) == 0 )\r
+ return( 1 );\r
+\r
+ return( 0 );\r
+}\r
+\r
+#if !defined(MBEDTLS_DES_SETKEY_ALT)\r
+void mbedtls_des_setkey( uint32_t SK[32], const unsigned char key[MBEDTLS_DES_KEY_SIZE] )\r
+{\r
+ int i;\r
+ uint32_t X, Y, T;\r
+\r
+ GET_UINT32_BE( X, key, 0 );\r
+ GET_UINT32_BE( Y, key, 4 );\r
+\r
+ /*\r
+ * Permuted Choice 1\r
+ */\r
+ T = ((Y >> 4) ^ X) & 0x0F0F0F0F; X ^= T; Y ^= (T << 4);\r
+ T = ((Y ) ^ X) & 0x10101010; X ^= T; Y ^= (T );\r
+\r
+ X = (LHs[ (X ) & 0xF] << 3) | (LHs[ (X >> 8) & 0xF ] << 2)\r
+ | (LHs[ (X >> 16) & 0xF] << 1) | (LHs[ (X >> 24) & 0xF ] )\r
+ | (LHs[ (X >> 5) & 0xF] << 7) | (LHs[ (X >> 13) & 0xF ] << 6)\r
+ | (LHs[ (X >> 21) & 0xF] << 5) | (LHs[ (X >> 29) & 0xF ] << 4);\r
+\r
+ Y = (RHs[ (Y >> 1) & 0xF] << 3) | (RHs[ (Y >> 9) & 0xF ] << 2)\r
+ | (RHs[ (Y >> 17) & 0xF] << 1) | (RHs[ (Y >> 25) & 0xF ] )\r
+ | (RHs[ (Y >> 4) & 0xF] << 7) | (RHs[ (Y >> 12) & 0xF ] << 6)\r
+ | (RHs[ (Y >> 20) & 0xF] << 5) | (RHs[ (Y >> 28) & 0xF ] << 4);\r
+\r
+ X &= 0x0FFFFFFF;\r
+ Y &= 0x0FFFFFFF;\r
+\r
+ /*\r
+ * calculate subkeys\r
+ */\r
+ for( i = 0; i < 16; i++ )\r
+ {\r
+ if( i < 2 || i == 8 || i == 15 )\r
+ {\r
+ X = ((X << 1) | (X >> 27)) & 0x0FFFFFFF;\r
+ Y = ((Y << 1) | (Y >> 27)) & 0x0FFFFFFF;\r
+ }\r
+ else\r
+ {\r
+ X = ((X << 2) | (X >> 26)) & 0x0FFFFFFF;\r
+ Y = ((Y << 2) | (Y >> 26)) & 0x0FFFFFFF;\r
+ }\r
+\r
+ *SK++ = ((X << 4) & 0x24000000) | ((X << 28) & 0x10000000)\r
+ | ((X << 14) & 0x08000000) | ((X << 18) & 0x02080000)\r
+ | ((X << 6) & 0x01000000) | ((X << 9) & 0x00200000)\r
+ | ((X >> 1) & 0x00100000) | ((X << 10) & 0x00040000)\r
+ | ((X << 2) & 0x00020000) | ((X >> 10) & 0x00010000)\r
+ | ((Y >> 13) & 0x00002000) | ((Y >> 4) & 0x00001000)\r
+ | ((Y << 6) & 0x00000800) | ((Y >> 1) & 0x00000400)\r
+ | ((Y >> 14) & 0x00000200) | ((Y ) & 0x00000100)\r
+ | ((Y >> 5) & 0x00000020) | ((Y >> 10) & 0x00000010)\r
+ | ((Y >> 3) & 0x00000008) | ((Y >> 18) & 0x00000004)\r
+ | ((Y >> 26) & 0x00000002) | ((Y >> 24) & 0x00000001);\r
+\r
+ *SK++ = ((X << 15) & 0x20000000) | ((X << 17) & 0x10000000)\r
+ | ((X << 10) & 0x08000000) | ((X << 22) & 0x04000000)\r
+ | ((X >> 2) & 0x02000000) | ((X << 1) & 0x01000000)\r
+ | ((X << 16) & 0x00200000) | ((X << 11) & 0x00100000)\r
+ | ((X << 3) & 0x00080000) | ((X >> 6) & 0x00040000)\r
+ | ((X << 15) & 0x00020000) | ((X >> 4) & 0x00010000)\r
+ | ((Y >> 2) & 0x00002000) | ((Y << 8) & 0x00001000)\r
+ | ((Y >> 14) & 0x00000808) | ((Y >> 9) & 0x00000400)\r
+ | ((Y ) & 0x00000200) | ((Y << 7) & 0x00000100)\r
+ | ((Y >> 7) & 0x00000020) | ((Y >> 3) & 0x00000011)\r
+ | ((Y << 2) & 0x00000004) | ((Y >> 21) & 0x00000002);\r
+ }\r
+}\r
+#endif /* !MBEDTLS_DES_SETKEY_ALT */\r
+\r
+/*\r
+ * DES key schedule (56-bit, encryption)\r
+ */\r
+int mbedtls_des_setkey_enc( mbedtls_des_context *ctx, const unsigned char key[MBEDTLS_DES_KEY_SIZE] )\r
+{\r
+ mbedtls_des_setkey( ctx->sk, key );\r
+\r
+ return( 0 );\r
+}\r
+\r
+/*\r
+ * DES key schedule (56-bit, decryption)\r
+ */\r
+int mbedtls_des_setkey_dec( mbedtls_des_context *ctx, const unsigned char key[MBEDTLS_DES_KEY_SIZE] )\r
+{\r
+ int i;\r
+\r
+ mbedtls_des_setkey( ctx->sk, key );\r
+\r
+ for( i = 0; i < 16; i += 2 )\r
+ {\r
+ SWAP( ctx->sk[i ], ctx->sk[30 - i] );\r
+ SWAP( ctx->sk[i + 1], ctx->sk[31 - i] );\r
+ }\r
+\r
+ return( 0 );\r
+}\r
+\r
+static void des3_set2key( uint32_t esk[96],\r
+ uint32_t dsk[96],\r
+ const unsigned char key[MBEDTLS_DES_KEY_SIZE*2] )\r
+{\r
+ int i;\r
+\r
+ mbedtls_des_setkey( esk, key );\r
+ mbedtls_des_setkey( dsk + 32, key + 8 );\r
+\r
+ for( i = 0; i < 32; i += 2 )\r
+ {\r
+ dsk[i ] = esk[30 - i];\r
+ dsk[i + 1] = esk[31 - i];\r
+\r
+ esk[i + 32] = dsk[62 - i];\r
+ esk[i + 33] = dsk[63 - i];\r
+\r
+ esk[i + 64] = esk[i ];\r
+ esk[i + 65] = esk[i + 1];\r
+\r
+ dsk[i + 64] = dsk[i ];\r
+ dsk[i + 65] = dsk[i + 1];\r
+ }\r
+}\r
+\r
+/*\r
+ * Triple-DES key schedule (112-bit, encryption)\r
+ */\r
+int mbedtls_des3_set2key_enc( mbedtls_des3_context *ctx,\r
+ const unsigned char key[MBEDTLS_DES_KEY_SIZE * 2] )\r
+{\r
+ uint32_t sk[96];\r
+\r
+ des3_set2key( ctx->sk, sk, key );\r
+ mbedtls_platform_zeroize( sk, sizeof( sk ) );\r
+\r
+ return( 0 );\r
+}\r
+\r
+/*\r
+ * Triple-DES key schedule (112-bit, decryption)\r
+ */\r
+int mbedtls_des3_set2key_dec( mbedtls_des3_context *ctx,\r
+ const unsigned char key[MBEDTLS_DES_KEY_SIZE * 2] )\r
+{\r
+ uint32_t sk[96];\r
+\r
+ des3_set2key( sk, ctx->sk, key );\r
+ mbedtls_platform_zeroize( sk, sizeof( sk ) );\r
+\r
+ return( 0 );\r
+}\r
+\r
+static void des3_set3key( uint32_t esk[96],\r
+ uint32_t dsk[96],\r
+ const unsigned char key[24] )\r
+{\r
+ int i;\r
+\r
+ mbedtls_des_setkey( esk, key );\r
+ mbedtls_des_setkey( dsk + 32, key + 8 );\r
+ mbedtls_des_setkey( esk + 64, key + 16 );\r
+\r
+ for( i = 0; i < 32; i += 2 )\r
+ {\r
+ dsk[i ] = esk[94 - i];\r
+ dsk[i + 1] = esk[95 - i];\r
+\r
+ esk[i + 32] = dsk[62 - i];\r
+ esk[i + 33] = dsk[63 - i];\r
+\r
+ dsk[i + 64] = esk[30 - i];\r
+ dsk[i + 65] = esk[31 - i];\r
+ }\r
+}\r
+\r
+/*\r
+ * Triple-DES key schedule (168-bit, encryption)\r
+ */\r
+int mbedtls_des3_set3key_enc( mbedtls_des3_context *ctx,\r
+ const unsigned char key[MBEDTLS_DES_KEY_SIZE * 3] )\r
+{\r
+ uint32_t sk[96];\r
+\r
+ des3_set3key( ctx->sk, sk, key );\r
+ mbedtls_platform_zeroize( sk, sizeof( sk ) );\r
+\r
+ return( 0 );\r
+}\r
+\r
+/*\r
+ * Triple-DES key schedule (168-bit, decryption)\r
+ */\r
+int mbedtls_des3_set3key_dec( mbedtls_des3_context *ctx,\r
+ const unsigned char key[MBEDTLS_DES_KEY_SIZE * 3] )\r
+{\r
+ uint32_t sk[96];\r
+\r
+ des3_set3key( sk, ctx->sk, key );\r
+ mbedtls_platform_zeroize( sk, sizeof( sk ) );\r
+\r
+ return( 0 );\r
+}\r
+\r
+/*\r
+ * DES-ECB block encryption/decryption\r
+ */\r
+#if !defined(MBEDTLS_DES_CRYPT_ECB_ALT)\r
+int mbedtls_des_crypt_ecb( mbedtls_des_context *ctx,\r
+ const unsigned char input[8],\r
+ unsigned char output[8] )\r
+{\r
+ int i;\r
+ uint32_t X, Y, T, *SK;\r
+\r
+ SK = ctx->sk;\r
+\r
+ GET_UINT32_BE( X, input, 0 );\r
+ GET_UINT32_BE( Y, input, 4 );\r
+\r
+ DES_IP( X, Y );\r
+\r
+ for( i = 0; i < 8; i++ )\r
+ {\r
+ DES_ROUND( Y, X );\r
+ DES_ROUND( X, Y );\r
+ }\r
+\r
+ DES_FP( Y, X );\r
+\r
+ PUT_UINT32_BE( Y, output, 0 );\r
+ PUT_UINT32_BE( X, output, 4 );\r
+\r
+ return( 0 );\r
+}\r
+#endif /* !MBEDTLS_DES_CRYPT_ECB_ALT */\r
+\r
+#if defined(MBEDTLS_CIPHER_MODE_CBC)\r
+/*\r
+ * DES-CBC buffer encryption/decryption\r
+ */\r
+int mbedtls_des_crypt_cbc( mbedtls_des_context *ctx,\r
+ int mode,\r
+ size_t length,\r
+ unsigned char iv[8],\r
+ const unsigned char *input,\r
+ unsigned char *output )\r
+{\r
+ int i;\r
+ unsigned char temp[8];\r
+\r
+ if( length % 8 )\r
+ return( MBEDTLS_ERR_DES_INVALID_INPUT_LENGTH );\r
+\r
+ if( mode == MBEDTLS_DES_ENCRYPT )\r
+ {\r
+ while( length > 0 )\r
+ {\r
+ for( i = 0; i < 8; i++ )\r
+ output[i] = (unsigned char)( input[i] ^ iv[i] );\r
+\r
+ mbedtls_des_crypt_ecb( ctx, output, output );\r
+ memcpy( iv, output, 8 );\r
+\r
+ input += 8;\r
+ output += 8;\r
+ length -= 8;\r
+ }\r
+ }\r
+ else /* MBEDTLS_DES_DECRYPT */\r
+ {\r
+ while( length > 0 )\r
+ {\r
+ memcpy( temp, input, 8 );\r
+ mbedtls_des_crypt_ecb( ctx, input, output );\r
+\r
+ for( i = 0; i < 8; i++ )\r
+ output[i] = (unsigned char)( output[i] ^ iv[i] );\r
+\r
+ memcpy( iv, temp, 8 );\r
+\r
+ input += 8;\r
+ output += 8;\r
+ length -= 8;\r
+ }\r
+ }\r
+\r
+ return( 0 );\r
+}\r
+#endif /* MBEDTLS_CIPHER_MODE_CBC */\r
+\r
+/*\r
+ * 3DES-ECB block encryption/decryption\r
+ */\r
+#if !defined(MBEDTLS_DES3_CRYPT_ECB_ALT)\r
+int mbedtls_des3_crypt_ecb( mbedtls_des3_context *ctx,\r
+ const unsigned char input[8],\r
+ unsigned char output[8] )\r
+{\r
+ int i;\r
+ uint32_t X, Y, T, *SK;\r
+\r
+ SK = ctx->sk;\r
+\r
+ GET_UINT32_BE( X, input, 0 );\r
+ GET_UINT32_BE( Y, input, 4 );\r
+\r
+ DES_IP( X, Y );\r
+\r
+ for( i = 0; i < 8; i++ )\r
+ {\r
+ DES_ROUND( Y, X );\r
+ DES_ROUND( X, Y );\r
+ }\r
+\r
+ for( i = 0; i < 8; i++ )\r
+ {\r
+ DES_ROUND( X, Y );\r
+ DES_ROUND( Y, X );\r
+ }\r
+\r
+ for( i = 0; i < 8; i++ )\r
+ {\r
+ DES_ROUND( Y, X );\r
+ DES_ROUND( X, Y );\r
+ }\r
+\r
+ DES_FP( Y, X );\r
+\r
+ PUT_UINT32_BE( Y, output, 0 );\r
+ PUT_UINT32_BE( X, output, 4 );\r
+\r
+ return( 0 );\r
+}\r
+#endif /* !MBEDTLS_DES3_CRYPT_ECB_ALT */\r
+\r
+#if defined(MBEDTLS_CIPHER_MODE_CBC)\r
+/*\r
+ * 3DES-CBC buffer encryption/decryption\r
+ */\r
+int mbedtls_des3_crypt_cbc( mbedtls_des3_context *ctx,\r
+ int mode,\r
+ size_t length,\r
+ unsigned char iv[8],\r
+ const unsigned char *input,\r
+ unsigned char *output )\r
+{\r
+ int i;\r
+ unsigned char temp[8];\r
+\r
+ if( length % 8 )\r
+ return( MBEDTLS_ERR_DES_INVALID_INPUT_LENGTH );\r
+\r
+ if( mode == MBEDTLS_DES_ENCRYPT )\r
+ {\r
+ while( length > 0 )\r
+ {\r
+ for( i = 0; i < 8; i++ )\r
+ output[i] = (unsigned char)( input[i] ^ iv[i] );\r
+\r
+ mbedtls_des3_crypt_ecb( ctx, output, output );\r
+ memcpy( iv, output, 8 );\r
+\r
+ input += 8;\r
+ output += 8;\r
+ length -= 8;\r
+ }\r
+ }\r
+ else /* MBEDTLS_DES_DECRYPT */\r
+ {\r
+ while( length > 0 )\r
+ {\r
+ memcpy( temp, input, 8 );\r
+ mbedtls_des3_crypt_ecb( ctx, input, output );\r
+\r
+ for( i = 0; i < 8; i++ )\r
+ output[i] = (unsigned char)( output[i] ^ iv[i] );\r
+\r
+ memcpy( iv, temp, 8 );\r
+\r
+ input += 8;\r
+ output += 8;\r
+ length -= 8;\r
+ }\r
+ }\r
+\r
+ return( 0 );\r
+}\r
+#endif /* MBEDTLS_CIPHER_MODE_CBC */\r
+\r
+#endif /* !MBEDTLS_DES_ALT */\r
+\r
+#if defined(MBEDTLS_SELF_TEST)\r
+/*\r
+ * DES and 3DES test vectors from:\r
+ *\r
+ * http://csrc.nist.gov/groups/STM/cavp/documents/des/tripledes-vectors.zip\r
+ */\r
+static const unsigned char des3_test_keys[24] =\r
+{\r
+ 0x01, 0x23, 0x45, 0x67, 0x89, 0xAB, 0xCD, 0xEF,\r
+ 0x23, 0x45, 0x67, 0x89, 0xAB, 0xCD, 0xEF, 0x01,\r
+ 0x45, 0x67, 0x89, 0xAB, 0xCD, 0xEF, 0x01, 0x23\r
+};\r
+\r
+static const unsigned char des3_test_buf[8] =\r
+{\r
+ 0x4E, 0x6F, 0x77, 0x20, 0x69, 0x73, 0x20, 0x74\r
+};\r
+\r
+static const unsigned char des3_test_ecb_dec[3][8] =\r
+{\r
+ { 0xCD, 0xD6, 0x4F, 0x2F, 0x94, 0x27, 0xC1, 0x5D },\r
+ { 0x69, 0x96, 0xC8, 0xFA, 0x47, 0xA2, 0xAB, 0xEB },\r
+ { 0x83, 0x25, 0x39, 0x76, 0x44, 0x09, 0x1A, 0x0A }\r
+};\r
+\r
+static const unsigned char des3_test_ecb_enc[3][8] =\r
+{\r
+ { 0x6A, 0x2A, 0x19, 0xF4, 0x1E, 0xCA, 0x85, 0x4B },\r
+ { 0x03, 0xE6, 0x9F, 0x5B, 0xFA, 0x58, 0xEB, 0x42 },\r
+ { 0xDD, 0x17, 0xE8, 0xB8, 0xB4, 0x37, 0xD2, 0x32 }\r
+};\r
+\r
+#if defined(MBEDTLS_CIPHER_MODE_CBC)\r
+static const unsigned char des3_test_iv[8] =\r
+{\r
+ 0x12, 0x34, 0x56, 0x78, 0x90, 0xAB, 0xCD, 0xEF,\r
+};\r
+\r
+static const unsigned char des3_test_cbc_dec[3][8] =\r
+{\r
+ { 0x12, 0x9F, 0x40, 0xB9, 0xD2, 0x00, 0x56, 0xB3 },\r
+ { 0x47, 0x0E, 0xFC, 0x9A, 0x6B, 0x8E, 0xE3, 0x93 },\r
+ { 0xC5, 0xCE, 0xCF, 0x63, 0xEC, 0xEC, 0x51, 0x4C }\r
+};\r
+\r
+static const unsigned char des3_test_cbc_enc[3][8] =\r
+{\r
+ { 0x54, 0xF1, 0x5A, 0xF6, 0xEB, 0xE3, 0xA4, 0xB4 },\r
+ { 0x35, 0x76, 0x11, 0x56, 0x5F, 0xA1, 0x8E, 0x4D },\r
+ { 0xCB, 0x19, 0x1F, 0x85, 0xD1, 0xED, 0x84, 0x39 }\r
+};\r
+#endif /* MBEDTLS_CIPHER_MODE_CBC */\r
+\r
+/*\r
+ * Checkup routine\r
+ */\r
+int mbedtls_des_self_test( int verbose )\r
+{\r
+ int i, j, u, v, ret = 0;\r
+ mbedtls_des_context ctx;\r
+ mbedtls_des3_context ctx3;\r
+ unsigned char buf[8];\r
+#if defined(MBEDTLS_CIPHER_MODE_CBC)\r
+ unsigned char prv[8];\r
+ unsigned char iv[8];\r
+#endif\r
+\r
+ mbedtls_des_init( &ctx );\r
+ mbedtls_des3_init( &ctx3 );\r
+ /*\r
+ * ECB mode\r
+ */\r
+ for( i = 0; i < 6; i++ )\r
+ {\r
+ u = i >> 1;\r
+ v = i & 1;\r
+\r
+ if( verbose != 0 )\r
+ mbedtls_printf( " DES%c-ECB-%3d (%s): ",\r
+ ( u == 0 ) ? ' ' : '3', 56 + u * 56,\r
+ ( v == MBEDTLS_DES_DECRYPT ) ? "dec" : "enc" );\r
+\r
+ memcpy( buf, des3_test_buf, 8 );\r
+\r
+ switch( i )\r
+ {\r
+ case 0:\r
+ mbedtls_des_setkey_dec( &ctx, des3_test_keys );\r
+ break;\r
+\r
+ case 1:\r
+ mbedtls_des_setkey_enc( &ctx, des3_test_keys );\r
+ break;\r
+\r
+ case 2:\r
+ mbedtls_des3_set2key_dec( &ctx3, des3_test_keys );\r
+ break;\r
+\r
+ case 3:\r
+ mbedtls_des3_set2key_enc( &ctx3, des3_test_keys );\r
+ break;\r
+\r
+ case 4:\r
+ mbedtls_des3_set3key_dec( &ctx3, des3_test_keys );\r
+ break;\r
+\r
+ case 5:\r
+ mbedtls_des3_set3key_enc( &ctx3, des3_test_keys );\r
+ break;\r
+\r
+ default:\r
+ return( 1 );\r
+ }\r
+\r
+ for( j = 0; j < 10000; j++ )\r
+ {\r
+ if( u == 0 )\r
+ mbedtls_des_crypt_ecb( &ctx, buf, buf );\r
+ else\r
+ mbedtls_des3_crypt_ecb( &ctx3, buf, buf );\r
+ }\r
+\r
+ if( ( v == MBEDTLS_DES_DECRYPT &&\r
+ memcmp( buf, des3_test_ecb_dec[u], 8 ) != 0 ) ||\r
+ ( v != MBEDTLS_DES_DECRYPT &&\r
+ memcmp( buf, des3_test_ecb_enc[u], 8 ) != 0 ) )\r
+ {\r
+ if( verbose != 0 )\r
+ mbedtls_printf( "failed\n" );\r
+\r
+ ret = 1;\r
+ goto exit;\r
+ }\r
+\r
+ if( verbose != 0 )\r
+ mbedtls_printf( "passed\n" );\r
+ }\r
+\r
+ if( verbose != 0 )\r
+ mbedtls_printf( "\n" );\r
+\r
+#if defined(MBEDTLS_CIPHER_MODE_CBC)\r
+ /*\r
+ * CBC mode\r
+ */\r
+ for( i = 0; i < 6; i++ )\r
+ {\r
+ u = i >> 1;\r
+ v = i & 1;\r
+\r
+ if( verbose != 0 )\r
+ mbedtls_printf( " DES%c-CBC-%3d (%s): ",\r
+ ( u == 0 ) ? ' ' : '3', 56 + u * 56,\r
+ ( v == MBEDTLS_DES_DECRYPT ) ? "dec" : "enc" );\r
+\r
+ memcpy( iv, des3_test_iv, 8 );\r
+ memcpy( prv, des3_test_iv, 8 );\r
+ memcpy( buf, des3_test_buf, 8 );\r
+\r
+ switch( i )\r
+ {\r
+ case 0:\r
+ mbedtls_des_setkey_dec( &ctx, des3_test_keys );\r
+ break;\r
+\r
+ case 1:\r
+ mbedtls_des_setkey_enc( &ctx, des3_test_keys );\r
+ break;\r
+\r
+ case 2:\r
+ mbedtls_des3_set2key_dec( &ctx3, des3_test_keys );\r
+ break;\r
+\r
+ case 3:\r
+ mbedtls_des3_set2key_enc( &ctx3, des3_test_keys );\r
+ break;\r
+\r
+ case 4:\r
+ mbedtls_des3_set3key_dec( &ctx3, des3_test_keys );\r
+ break;\r
+\r
+ case 5:\r
+ mbedtls_des3_set3key_enc( &ctx3, des3_test_keys );\r
+ break;\r
+\r
+ default:\r
+ return( 1 );\r
+ }\r
+\r
+ if( v == MBEDTLS_DES_DECRYPT )\r
+ {\r
+ for( j = 0; j < 10000; j++ )\r
+ {\r
+ if( u == 0 )\r
+ mbedtls_des_crypt_cbc( &ctx, v, 8, iv, buf, buf );\r
+ else\r
+ mbedtls_des3_crypt_cbc( &ctx3, v, 8, iv, buf, buf );\r
+ }\r
+ }\r
+ else\r
+ {\r
+ for( j = 0; j < 10000; j++ )\r
+ {\r
+ unsigned char tmp[8];\r
+\r
+ if( u == 0 )\r
+ mbedtls_des_crypt_cbc( &ctx, v, 8, iv, buf, buf );\r
+ else\r
+ mbedtls_des3_crypt_cbc( &ctx3, v, 8, iv, buf, buf );\r
+\r
+ memcpy( tmp, prv, 8 );\r
+ memcpy( prv, buf, 8 );\r
+ memcpy( buf, tmp, 8 );\r
+ }\r
+\r
+ memcpy( buf, prv, 8 );\r
+ }\r
+\r
+ if( ( v == MBEDTLS_DES_DECRYPT &&\r
+ memcmp( buf, des3_test_cbc_dec[u], 8 ) != 0 ) ||\r
+ ( v != MBEDTLS_DES_DECRYPT &&\r
+ memcmp( buf, des3_test_cbc_enc[u], 8 ) != 0 ) )\r
+ {\r
+ if( verbose != 0 )\r
+ mbedtls_printf( "failed\n" );\r
+\r
+ ret = 1;\r
+ goto exit;\r
+ }\r
+\r
+ if( verbose != 0 )\r
+ mbedtls_printf( "passed\n" );\r
+ }\r
+#endif /* MBEDTLS_CIPHER_MODE_CBC */\r
+\r
+ if( verbose != 0 )\r
+ mbedtls_printf( "\n" );\r
+\r
+exit:\r
+ mbedtls_des_free( &ctx );\r
+ mbedtls_des3_free( &ctx3 );\r
+\r
+ return( ret );\r
+}\r
+\r
+#endif /* MBEDTLS_SELF_TEST */\r
+\r
+#endif /* MBEDTLS_DES_C */\r
projects / freertos / blobdiff