blob: 9dbdb8570c7d9d714ee8c081ac40523a9540ae2f [file] [log] [blame]
Paul Bakker38119b12009-01-10 23:31:23 +00001/**
2 * \file camellia.h
3 *
Paul Bakker37ca75d2011-01-06 12:28:03 +00004 * \brief Camellia block cipher
5 *
Paul Bakker90995b52013-06-24 19:20:35 +02006 * Copyright (C) 2006-2013, Brainspark B.V.
Paul Bakkerb96f1542010-07-18 20:36:00 +00007 *
8 * This file is part of PolarSSL (http://www.polarssl.org)
Paul Bakker84f12b72010-07-18 10:13:04 +00009 * Lead Maintainer: Paul Bakker <polarssl_maintainer at polarssl.org>
Paul Bakkerb96f1542010-07-18 20:36:00 +000010 *
Paul Bakker77b385e2009-07-28 17:23:11 +000011 * All rights reserved.
Paul Bakker38119b12009-01-10 23:31:23 +000012 *
13 * This program is free software; you can redistribute it and/or modify
14 * it under the terms of the GNU General Public License as published by
15 * the Free Software Foundation; either version 2 of the License, or
16 * (at your option) any later version.
17 *
18 * This program is distributed in the hope that it will be useful,
19 * but WITHOUT ANY WARRANTY; without even the implied warranty of
20 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
21 * GNU General Public License for more details.
22 *
23 * You should have received a copy of the GNU General Public License along
24 * with this program; if not, write to the Free Software Foundation, Inc.,
25 * 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
26 */
27#ifndef POLARSSL_CAMELLIA_H
28#define POLARSSL_CAMELLIA_H
Paul Bakker477fd322009-10-04 13:22:13 +000029
Manuel Pégourié-Gonnardcef4ad22014-04-29 12:39:06 +020030#if !defined(POLARSSL_CONFIG_FILE)
Paul Bakker90995b52013-06-24 19:20:35 +020031#include "config.h"
Manuel Pégourié-Gonnardcef4ad22014-04-29 12:39:06 +020032#else
33#include POLARSSL_CONFIG_FILE
34#endif
Paul Bakker90995b52013-06-24 19:20:35 +020035
Paul Bakker23986e52011-04-24 08:57:21 +000036#include <string.h>
37
Paul Bakkerfa6a6202013-10-28 18:48:30 +010038#if defined(_MSC_VER) && !defined(EFIX64) && !defined(EFI32)
Paul Bakker477fd322009-10-04 13:22:13 +000039#include <basetsd.h>
40typedef UINT32 uint32_t;
Paul Bakker80ab9f52009-05-24 14:42:46 +000041#else
Paul Bakker477fd322009-10-04 13:22:13 +000042#include <inttypes.h>
Paul Bakker80ab9f52009-05-24 14:42:46 +000043#endif
Paul Bakkerc81f6c32009-05-03 13:09:15 +000044
Paul Bakker38119b12009-01-10 23:31:23 +000045#define CAMELLIA_ENCRYPT 1
46#define CAMELLIA_DECRYPT 0
47
Paul Bakker9d781402011-05-09 16:17:09 +000048#define POLARSSL_ERR_CAMELLIA_INVALID_KEY_LENGTH -0x0024 /**< Invalid key length. */
49#define POLARSSL_ERR_CAMELLIA_INVALID_INPUT_LENGTH -0x0026 /**< Invalid data input length. */
Paul Bakker2b222c82009-07-27 21:03:45 +000050
Paul Bakker90995b52013-06-24 19:20:35 +020051#if !defined(POLARSSL_CAMELLIA_ALT)
52// Regular implementation
53//
54
Paul Bakker407a0da2013-06-27 14:29:21 +020055#ifdef __cplusplus
56extern "C" {
57#endif
58
Paul Bakker38119b12009-01-10 23:31:23 +000059/**
60 * \brief CAMELLIA context structure
61 */
62typedef struct
63{
64 int nr; /*!< number of rounds */
Paul Bakkerc81f6c32009-05-03 13:09:15 +000065 uint32_t rk[68]; /*!< CAMELLIA round keys */
Paul Bakker38119b12009-01-10 23:31:23 +000066}
67camellia_context;
68
Paul Bakker38119b12009-01-10 23:31:23 +000069/**
70 * \brief CAMELLIA key schedule (encryption)
71 *
72 * \param ctx CAMELLIA context to be initialized
73 * \param key encryption key
74 * \param keysize must be 128, 192 or 256
Paul Bakker9af723c2014-05-01 13:03:14 +020075 *
Paul Bakker2b222c82009-07-27 21:03:45 +000076 * \return 0 if successful, or POLARSSL_ERR_CAMELLIA_INVALID_KEY_LENGTH
Paul Bakker38119b12009-01-10 23:31:23 +000077 */
Paul Bakker23986e52011-04-24 08:57:21 +000078int camellia_setkey_enc( camellia_context *ctx, const unsigned char *key, unsigned int keysize );
Paul Bakker38119b12009-01-10 23:31:23 +000079
80/**
81 * \brief CAMELLIA key schedule (decryption)
82 *
83 * \param ctx CAMELLIA context to be initialized
84 * \param key decryption key
85 * \param keysize must be 128, 192 or 256
Paul Bakker9af723c2014-05-01 13:03:14 +020086 *
Paul Bakker2b222c82009-07-27 21:03:45 +000087 * \return 0 if successful, or POLARSSL_ERR_CAMELLIA_INVALID_KEY_LENGTH
Paul Bakker38119b12009-01-10 23:31:23 +000088 */
Paul Bakker23986e52011-04-24 08:57:21 +000089int camellia_setkey_dec( camellia_context *ctx, const unsigned char *key, unsigned int keysize );
Paul Bakker38119b12009-01-10 23:31:23 +000090
91/**
92 * \brief CAMELLIA-ECB block encryption/decryption
93 *
94 * \param ctx CAMELLIA context
95 * \param mode CAMELLIA_ENCRYPT or CAMELLIA_DECRYPT
96 * \param input 16-byte input block
97 * \param output 16-byte output block
Paul Bakker9af723c2014-05-01 13:03:14 +020098 *
Paul Bakker27caa8a2010-03-21 15:43:59 +000099 * \return 0 if successful
Paul Bakker38119b12009-01-10 23:31:23 +0000100 */
Paul Bakkerf3ccc682010-03-18 21:21:02 +0000101int camellia_crypt_ecb( camellia_context *ctx,
Paul Bakker38119b12009-01-10 23:31:23 +0000102 int mode,
Paul Bakkerff60ee62010-03-16 21:09:09 +0000103 const unsigned char input[16],
Paul Bakker38119b12009-01-10 23:31:23 +0000104 unsigned char output[16] );
105
Manuel Pégourié-Gonnard92cb1d32013-09-13 16:24:20 +0200106#if defined(POLARSSL_CIPHER_MODE_CBC)
Paul Bakker38119b12009-01-10 23:31:23 +0000107/**
108 * \brief CAMELLIA-CBC buffer encryption/decryption
Paul Bakker4c067eb2009-05-17 10:25:19 +0000109 * Length should be a multiple of the block
110 * size (16 bytes)
Paul Bakker38119b12009-01-10 23:31:23 +0000111 *
112 * \param ctx CAMELLIA context
113 * \param mode CAMELLIA_ENCRYPT or CAMELLIA_DECRYPT
114 * \param length length of the input data
115 * \param iv initialization vector (updated after use)
116 * \param input buffer holding the input data
117 * \param output buffer holding the output data
Paul Bakker9af723c2014-05-01 13:03:14 +0200118 *
Paul Bakkerf3ccc682010-03-18 21:21:02 +0000119 * \return 0 if successful, or POLARSSL_ERR_CAMELLIA_INVALID_INPUT_LENGTH
Paul Bakker38119b12009-01-10 23:31:23 +0000120 */
Paul Bakkerf3ccc682010-03-18 21:21:02 +0000121int camellia_crypt_cbc( camellia_context *ctx,
Paul Bakker38119b12009-01-10 23:31:23 +0000122 int mode,
Paul Bakker23986e52011-04-24 08:57:21 +0000123 size_t length,
Paul Bakker38119b12009-01-10 23:31:23 +0000124 unsigned char iv[16],
Paul Bakkerff60ee62010-03-16 21:09:09 +0000125 const unsigned char *input,
Paul Bakker38119b12009-01-10 23:31:23 +0000126 unsigned char *output );
Manuel Pégourié-Gonnard92cb1d32013-09-13 16:24:20 +0200127#endif /* POLARSSL_CIPHER_MODE_CBC */
Paul Bakker38119b12009-01-10 23:31:23 +0000128
Manuel Pégourié-Gonnard92cb1d32013-09-13 16:24:20 +0200129#if defined(POLARSSL_CIPHER_MODE_CFB)
Paul Bakker38119b12009-01-10 23:31:23 +0000130/**
131 * \brief CAMELLIA-CFB128 buffer encryption/decryption
132 *
Paul Bakkerca6f3e22011-10-06 13:11:08 +0000133 * Note: Due to the nature of CFB you should use the same key schedule for
134 * both encryption and decryption. So a context initialized with
135 * camellia_setkey_enc() for both CAMELLIA_ENCRYPT and CAMELLIE_DECRYPT.
136 *
Paul Bakker38119b12009-01-10 23:31:23 +0000137 * \param ctx CAMELLIA context
138 * \param mode CAMELLIA_ENCRYPT or CAMELLIA_DECRYPT
139 * \param length length of the input data
140 * \param iv_off offset in IV (updated after use)
141 * \param iv initialization vector (updated after use)
142 * \param input buffer holding the input data
143 * \param output buffer holding the output data
Paul Bakkerdcbfdcc2013-09-10 16:16:50 +0200144 *
Paul Bakkerf3ccc682010-03-18 21:21:02 +0000145 * \return 0 if successful, or POLARSSL_ERR_CAMELLIA_INVALID_INPUT_LENGTH
Paul Bakker38119b12009-01-10 23:31:23 +0000146 */
Paul Bakkerf3ccc682010-03-18 21:21:02 +0000147int camellia_crypt_cfb128( camellia_context *ctx,
Paul Bakker38119b12009-01-10 23:31:23 +0000148 int mode,
Paul Bakker23986e52011-04-24 08:57:21 +0000149 size_t length,
Paul Bakker1ef71df2011-06-09 14:14:58 +0000150 size_t *iv_off,
Paul Bakker38119b12009-01-10 23:31:23 +0000151 unsigned char iv[16],
Paul Bakkerff60ee62010-03-16 21:09:09 +0000152 const unsigned char *input,
Paul Bakker38119b12009-01-10 23:31:23 +0000153 unsigned char *output );
Manuel Pégourié-Gonnard92cb1d32013-09-13 16:24:20 +0200154#endif /* POLARSSL_CIPHER_MODE_CFB */
Paul Bakker38119b12009-01-10 23:31:23 +0000155
Manuel Pégourié-Gonnard92cb1d32013-09-13 16:24:20 +0200156#if defined(POLARSSL_CIPHER_MODE_CTR)
Paul Bakker9a736322012-11-14 12:39:52 +0000157/**
Paul Bakker1ef71df2011-06-09 14:14:58 +0000158 * \brief CAMELLIA-CTR buffer encryption/decryption
159 *
160 * Warning: You have to keep the maximum use of your counter in mind!
161 *
Paul Bakkerca6f3e22011-10-06 13:11:08 +0000162 * Note: Due to the nature of CTR you should use the same key schedule for
163 * both encryption and decryption. So a context initialized with
164 * camellia_setkey_enc() for both CAMELLIA_ENCRYPT and CAMELLIA_DECRYPT.
165 *
Paul Bakkerdcbfdcc2013-09-10 16:16:50 +0200166 * \param ctx CAMELLIA context
Paul Bakker1ef71df2011-06-09 14:14:58 +0000167 * \param length The length of the data
168 * \param nc_off The offset in the current stream_block (for resuming
169 * within current cipher stream). The offset pointer to
170 * should be 0 at the start of a stream.
171 * \param nonce_counter The 128-bit nonce and counter.
172 * \param stream_block The saved stream-block for resuming. Is overwritten
173 * by the function.
174 * \param input The input data stream
175 * \param output The output data stream
176 *
177 * \return 0 if successful
178 */
179int camellia_crypt_ctr( camellia_context *ctx,
180 size_t length,
181 size_t *nc_off,
182 unsigned char nonce_counter[16],
183 unsigned char stream_block[16],
184 const unsigned char *input,
185 unsigned char *output );
Manuel Pégourié-Gonnard92cb1d32013-09-13 16:24:20 +0200186#endif /* POLARSSL_CIPHER_MODE_CTR */
Paul Bakker1ef71df2011-06-09 14:14:58 +0000187
Paul Bakker90995b52013-06-24 19:20:35 +0200188#ifdef __cplusplus
189}
190#endif
191
192#else /* POLARSSL_CAMELLIA_ALT */
193#include "camellia_alt.h"
194#endif /* POLARSSL_CAMELLIA_ALT */
195
196#ifdef __cplusplus
197extern "C" {
198#endif
199
Paul Bakker38119b12009-01-10 23:31:23 +0000200/**
201 * \brief Checkup routine
202 *
203 * \return 0 if successful, or 1 if the test failed
204 */
205int camellia_self_test( int verbose );
206
207#ifdef __cplusplus
208}
209#endif
210
211#endif /* camellia.h */