blob: 050c6cdb8bb2a308685296cc0f3a1d5b3124f899 [file] [log] [blame]
Paul Bakker38119b12009-01-10 23:31:23 +00001/**
2 * \file camellia.h
3 *
Paul Bakker37ca75d2011-01-06 12:28:03 +00004 * \brief Camellia block cipher
5 *
Paul Bakker90995b52013-06-24 19:20:35 +02006 * Copyright (C) 2006-2013, Brainspark B.V.
Paul Bakkerb96f1542010-07-18 20:36:00 +00007 *
8 * This file is part of PolarSSL (http://www.polarssl.org)
Paul Bakker84f12b72010-07-18 10:13:04 +00009 * Lead Maintainer: Paul Bakker <polarssl_maintainer at polarssl.org>
Paul Bakkerb96f1542010-07-18 20:36:00 +000010 *
Paul Bakker77b385e2009-07-28 17:23:11 +000011 * All rights reserved.
Paul Bakker38119b12009-01-10 23:31:23 +000012 *
13 * This program is free software; you can redistribute it and/or modify
14 * it under the terms of the GNU General Public License as published by
15 * the Free Software Foundation; either version 2 of the License, or
16 * (at your option) any later version.
17 *
18 * This program is distributed in the hope that it will be useful,
19 * but WITHOUT ANY WARRANTY; without even the implied warranty of
20 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
21 * GNU General Public License for more details.
22 *
23 * You should have received a copy of the GNU General Public License along
24 * with this program; if not, write to the Free Software Foundation, Inc.,
25 * 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
26 */
27#ifndef POLARSSL_CAMELLIA_H
28#define POLARSSL_CAMELLIA_H
Paul Bakker477fd322009-10-04 13:22:13 +000029
Paul Bakker90995b52013-06-24 19:20:35 +020030#include "config.h"
31
Paul Bakker23986e52011-04-24 08:57:21 +000032#include <string.h>
33
Paul Bakker477fd322009-10-04 13:22:13 +000034#ifdef _MSC_VER
35#include <basetsd.h>
36typedef UINT32 uint32_t;
Paul Bakker80ab9f52009-05-24 14:42:46 +000037#else
Paul Bakker477fd322009-10-04 13:22:13 +000038#include <inttypes.h>
Paul Bakker80ab9f52009-05-24 14:42:46 +000039#endif
Paul Bakkerc81f6c32009-05-03 13:09:15 +000040
Paul Bakker38119b12009-01-10 23:31:23 +000041#define CAMELLIA_ENCRYPT 1
42#define CAMELLIA_DECRYPT 0
43
Paul Bakker9d781402011-05-09 16:17:09 +000044#define POLARSSL_ERR_CAMELLIA_INVALID_KEY_LENGTH -0x0024 /**< Invalid key length. */
45#define POLARSSL_ERR_CAMELLIA_INVALID_INPUT_LENGTH -0x0026 /**< Invalid data input length. */
Paul Bakker2b222c82009-07-27 21:03:45 +000046
Paul Bakker90995b52013-06-24 19:20:35 +020047#if !defined(POLARSSL_CAMELLIA_ALT)
48// Regular implementation
49//
50
Paul Bakker38119b12009-01-10 23:31:23 +000051/**
52 * \brief CAMELLIA context structure
53 */
54typedef struct
55{
56 int nr; /*!< number of rounds */
Paul Bakkerc81f6c32009-05-03 13:09:15 +000057 uint32_t rk[68]; /*!< CAMELLIA round keys */
Paul Bakker38119b12009-01-10 23:31:23 +000058}
59camellia_context;
60
61#ifdef __cplusplus
62extern "C" {
63#endif
64
65/**
66 * \brief CAMELLIA key schedule (encryption)
67 *
68 * \param ctx CAMELLIA context to be initialized
69 * \param key encryption key
70 * \param keysize must be 128, 192 or 256
Paul Bakker2b222c82009-07-27 21:03:45 +000071 *
72 * \return 0 if successful, or POLARSSL_ERR_CAMELLIA_INVALID_KEY_LENGTH
Paul Bakker38119b12009-01-10 23:31:23 +000073 */
Paul Bakker23986e52011-04-24 08:57:21 +000074int camellia_setkey_enc( camellia_context *ctx, const unsigned char *key, unsigned int keysize );
Paul Bakker38119b12009-01-10 23:31:23 +000075
76/**
77 * \brief CAMELLIA key schedule (decryption)
78 *
79 * \param ctx CAMELLIA context to be initialized
80 * \param key decryption key
81 * \param keysize must be 128, 192 or 256
Paul Bakker2b222c82009-07-27 21:03:45 +000082 *
83 * \return 0 if successful, or POLARSSL_ERR_CAMELLIA_INVALID_KEY_LENGTH
Paul Bakker38119b12009-01-10 23:31:23 +000084 */
Paul Bakker23986e52011-04-24 08:57:21 +000085int camellia_setkey_dec( camellia_context *ctx, const unsigned char *key, unsigned int keysize );
Paul Bakker38119b12009-01-10 23:31:23 +000086
87/**
88 * \brief CAMELLIA-ECB block encryption/decryption
89 *
90 * \param ctx CAMELLIA context
91 * \param mode CAMELLIA_ENCRYPT or CAMELLIA_DECRYPT
92 * \param input 16-byte input block
93 * \param output 16-byte output block
Paul Bakkerf3ccc682010-03-18 21:21:02 +000094 *
Paul Bakker27caa8a2010-03-21 15:43:59 +000095 * \return 0 if successful
Paul Bakker38119b12009-01-10 23:31:23 +000096 */
Paul Bakkerf3ccc682010-03-18 21:21:02 +000097int camellia_crypt_ecb( camellia_context *ctx,
Paul Bakker38119b12009-01-10 23:31:23 +000098 int mode,
Paul Bakkerff60ee62010-03-16 21:09:09 +000099 const unsigned char input[16],
Paul Bakker38119b12009-01-10 23:31:23 +0000100 unsigned char output[16] );
101
102/**
103 * \brief CAMELLIA-CBC buffer encryption/decryption
Paul Bakker4c067eb2009-05-17 10:25:19 +0000104 * Length should be a multiple of the block
105 * size (16 bytes)
Paul Bakker38119b12009-01-10 23:31:23 +0000106 *
107 * \param ctx CAMELLIA context
108 * \param mode CAMELLIA_ENCRYPT or CAMELLIA_DECRYPT
109 * \param length length of the input data
110 * \param iv initialization vector (updated after use)
111 * \param input buffer holding the input data
112 * \param output buffer holding the output data
Paul Bakkerf3ccc682010-03-18 21:21:02 +0000113 *
114 * \return 0 if successful, or POLARSSL_ERR_CAMELLIA_INVALID_INPUT_LENGTH
Paul Bakker38119b12009-01-10 23:31:23 +0000115 */
Paul Bakkerf3ccc682010-03-18 21:21:02 +0000116int camellia_crypt_cbc( camellia_context *ctx,
Paul Bakker38119b12009-01-10 23:31:23 +0000117 int mode,
Paul Bakker23986e52011-04-24 08:57:21 +0000118 size_t length,
Paul Bakker38119b12009-01-10 23:31:23 +0000119 unsigned char iv[16],
Paul Bakkerff60ee62010-03-16 21:09:09 +0000120 const unsigned char *input,
Paul Bakker38119b12009-01-10 23:31:23 +0000121 unsigned char *output );
122
123/**
124 * \brief CAMELLIA-CFB128 buffer encryption/decryption
125 *
Paul Bakkerca6f3e22011-10-06 13:11:08 +0000126 * Note: Due to the nature of CFB you should use the same key schedule for
127 * both encryption and decryption. So a context initialized with
128 * camellia_setkey_enc() for both CAMELLIA_ENCRYPT and CAMELLIE_DECRYPT.
129 *
Paul Bakker38119b12009-01-10 23:31:23 +0000130 * \param ctx CAMELLIA context
131 * \param mode CAMELLIA_ENCRYPT or CAMELLIA_DECRYPT
132 * \param length length of the input data
133 * \param iv_off offset in IV (updated after use)
134 * \param iv initialization vector (updated after use)
135 * \param input buffer holding the input data
136 * \param output buffer holding the output data
Paul Bakkerf3ccc682010-03-18 21:21:02 +0000137 *
138 * \return 0 if successful, or POLARSSL_ERR_CAMELLIA_INVALID_INPUT_LENGTH
Paul Bakker38119b12009-01-10 23:31:23 +0000139 */
Paul Bakkerf3ccc682010-03-18 21:21:02 +0000140int camellia_crypt_cfb128( camellia_context *ctx,
Paul Bakker38119b12009-01-10 23:31:23 +0000141 int mode,
Paul Bakker23986e52011-04-24 08:57:21 +0000142 size_t length,
Paul Bakker1ef71df2011-06-09 14:14:58 +0000143 size_t *iv_off,
Paul Bakker38119b12009-01-10 23:31:23 +0000144 unsigned char iv[16],
Paul Bakkerff60ee62010-03-16 21:09:09 +0000145 const unsigned char *input,
Paul Bakker38119b12009-01-10 23:31:23 +0000146 unsigned char *output );
147
Paul Bakker9a736322012-11-14 12:39:52 +0000148/**
Paul Bakker1ef71df2011-06-09 14:14:58 +0000149 * \brief CAMELLIA-CTR buffer encryption/decryption
150 *
151 * Warning: You have to keep the maximum use of your counter in mind!
152 *
Paul Bakkerca6f3e22011-10-06 13:11:08 +0000153 * Note: Due to the nature of CTR you should use the same key schedule for
154 * both encryption and decryption. So a context initialized with
155 * camellia_setkey_enc() for both CAMELLIA_ENCRYPT and CAMELLIA_DECRYPT.
156 *
Paul Bakker1ef71df2011-06-09 14:14:58 +0000157 * \param length The length of the data
158 * \param nc_off The offset in the current stream_block (for resuming
159 * within current cipher stream). The offset pointer to
160 * should be 0 at the start of a stream.
161 * \param nonce_counter The 128-bit nonce and counter.
162 * \param stream_block The saved stream-block for resuming. Is overwritten
163 * by the function.
164 * \param input The input data stream
165 * \param output The output data stream
166 *
167 * \return 0 if successful
168 */
169int camellia_crypt_ctr( camellia_context *ctx,
170 size_t length,
171 size_t *nc_off,
172 unsigned char nonce_counter[16],
173 unsigned char stream_block[16],
174 const unsigned char *input,
175 unsigned char *output );
176
Paul Bakker90995b52013-06-24 19:20:35 +0200177#ifdef __cplusplus
178}
179#endif
180
181#else /* POLARSSL_CAMELLIA_ALT */
182#include "camellia_alt.h"
183#endif /* POLARSSL_CAMELLIA_ALT */
184
185#ifdef __cplusplus
186extern "C" {
187#endif
188
Paul Bakker38119b12009-01-10 23:31:23 +0000189/**
190 * \brief Checkup routine
191 *
192 * \return 0 if successful, or 1 if the test failed
193 */
194int camellia_self_test( int verbose );
195
196#ifdef __cplusplus
197}
198#endif
199
200#endif /* camellia.h */