blob: 6729bab002ce8a3f3049fbef19c303e41b8f2631 [file] [log] [blame]
Paul Bakker5121ce52009-01-03 21:22:43 +00001/*
2 * An implementation of the ARCFOUR algorithm
3 *
Bence Szépkútia2947ac2020-08-19 16:37:36 +02004 * Copyright The Mbed TLS Contributors
Bence Szépkútif744bd72020-06-05 13:02:18 +02005 * SPDX-License-Identifier: Apache-2.0 OR GPL-2.0-or-later
6 *
7 * This file is provided under the Apache License 2.0, or the
8 * GNU General Public License v2.0 or later.
9 *
10 * **********
11 * Apache License 2.0:
Manuel Pégourié-Gonnard37ff1402015-09-04 14:21:07 +020012 *
13 * Licensed under the Apache License, Version 2.0 (the "License"); you may
14 * not use this file except in compliance with the License.
15 * You may obtain a copy of the License at
16 *
17 * http://www.apache.org/licenses/LICENSE-2.0
18 *
19 * Unless required by applicable law or agreed to in writing, software
20 * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
21 * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
22 * See the License for the specific language governing permissions and
23 * limitations under the License.
Paul Bakkerb96f1542010-07-18 20:36:00 +000024 *
Bence Szépkútif744bd72020-06-05 13:02:18 +020025 * **********
26 *
27 * **********
28 * GNU General Public License v2.0 or later:
29 *
30 * This program is free software; you can redistribute it and/or modify
31 * it under the terms of the GNU General Public License as published by
32 * the Free Software Foundation; either version 2 of the License, or
33 * (at your option) any later version.
34 *
35 * This program is distributed in the hope that it will be useful,
36 * but WITHOUT ANY WARRANTY; without even the implied warranty of
37 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
38 * GNU General Public License for more details.
39 *
40 * You should have received a copy of the GNU General Public License along
41 * with this program; if not, write to the Free Software Foundation, Inc.,
42 * 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
43 *
44 * **********
Paul Bakker5121ce52009-01-03 21:22:43 +000045 */
46/*
47 * The ARCFOUR algorithm was publicly disclosed on 94/09.
48 *
49 * http://groups.google.com/group/sci.crypt/msg/10a300c9d21afca0
50 */
51
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020052#if !defined(MBEDTLS_CONFIG_FILE)
Manuel Pégourié-Gonnard7f809972015-03-09 17:05:11 +000053#include "mbedtls/config.h"
Manuel Pégourié-Gonnardcef4ad22014-04-29 12:39:06 +020054#else
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020055#include MBEDTLS_CONFIG_FILE
Manuel Pégourié-Gonnardcef4ad22014-04-29 12:39:06 +020056#endif
Paul Bakker5121ce52009-01-03 21:22:43 +000057
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020058#if defined(MBEDTLS_ARC4_C)
Paul Bakker5121ce52009-01-03 21:22:43 +000059
Manuel Pégourié-Gonnard7f809972015-03-09 17:05:11 +000060#include "mbedtls/arc4.h"
Andres Amaya Garcia1f6301b2018-04-17 09:51:09 -050061#include "mbedtls/platform_util.h"
Paul Bakker5121ce52009-01-03 21:22:43 +000062
Rich Evans00ab4702015-02-06 13:43:58 +000063#include <string.h>
64
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020065#if defined(MBEDTLS_SELF_TEST)
66#if defined(MBEDTLS_PLATFORM_C)
Manuel Pégourié-Gonnard7f809972015-03-09 17:05:11 +000067#include "mbedtls/platform.h"
Paul Bakker7dc4c442014-02-01 22:50:26 +010068#else
Rich Evans00ab4702015-02-06 13:43:58 +000069#include <stdio.h>
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020070#define mbedtls_printf printf
71#endif /* MBEDTLS_PLATFORM_C */
72#endif /* MBEDTLS_SELF_TEST */
Paul Bakker7dc4c442014-02-01 22:50:26 +010073
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020074#if !defined(MBEDTLS_ARC4_ALT)
Paul Bakker90995b52013-06-24 19:20:35 +020075
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020076void mbedtls_arc4_init( mbedtls_arc4_context *ctx )
Paul Bakkerc7ea99a2014-06-18 11:12:03 +020077{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020078 memset( ctx, 0, sizeof( mbedtls_arc4_context ) );
Paul Bakkerc7ea99a2014-06-18 11:12:03 +020079}
80
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020081void mbedtls_arc4_free( mbedtls_arc4_context *ctx )
Paul Bakkerc7ea99a2014-06-18 11:12:03 +020082{
83 if( ctx == NULL )
84 return;
85
Andres Amaya Garcia1f6301b2018-04-17 09:51:09 -050086 mbedtls_platform_zeroize( ctx, sizeof( mbedtls_arc4_context ) );
Paul Bakkerc7ea99a2014-06-18 11:12:03 +020087}
88
Paul Bakker5121ce52009-01-03 21:22:43 +000089/*
90 * ARC4 key schedule
91 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020092void mbedtls_arc4_setup( mbedtls_arc4_context *ctx, const unsigned char *key,
Paul Bakkerb9e4e2c2014-05-01 14:18:25 +020093 unsigned int keylen )
Paul Bakker5121ce52009-01-03 21:22:43 +000094{
Paul Bakker23986e52011-04-24 08:57:21 +000095 int i, j, a;
96 unsigned int k;
Paul Bakker5121ce52009-01-03 21:22:43 +000097 unsigned char *m;
98
99 ctx->x = 0;
100 ctx->y = 0;
101 m = ctx->m;
102
103 for( i = 0; i < 256; i++ )
104 m[i] = (unsigned char) i;
105
106 j = k = 0;
107
108 for( i = 0; i < 256; i++, k++ )
109 {
110 if( k >= keylen ) k = 0;
111
112 a = m[i];
113 j = ( j + a + key[k] ) & 0xFF;
114 m[i] = m[j];
115 m[j] = (unsigned char) a;
116 }
117}
118
119/*
120 * ARC4 cipher function
121 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200122int mbedtls_arc4_crypt( mbedtls_arc4_context *ctx, size_t length, const unsigned char *input,
Paul Bakkerbaad6502010-03-21 15:42:15 +0000123 unsigned char *output )
Paul Bakker5121ce52009-01-03 21:22:43 +0000124{
Paul Bakker23986e52011-04-24 08:57:21 +0000125 int x, y, a, b;
126 size_t i;
Paul Bakker5121ce52009-01-03 21:22:43 +0000127 unsigned char *m;
128
129 x = ctx->x;
130 y = ctx->y;
131 m = ctx->m;
132
Paul Bakkerbaad6502010-03-21 15:42:15 +0000133 for( i = 0; i < length; i++ )
Paul Bakker5121ce52009-01-03 21:22:43 +0000134 {
135 x = ( x + 1 ) & 0xFF; a = m[x];
136 y = ( y + a ) & 0xFF; b = m[y];
137
138 m[x] = (unsigned char) b;
139 m[y] = (unsigned char) a;
140
Paul Bakkerbaad6502010-03-21 15:42:15 +0000141 output[i] = (unsigned char)
142 ( input[i] ^ m[(unsigned char)( a + b )] );
Paul Bakker5121ce52009-01-03 21:22:43 +0000143 }
144
145 ctx->x = x;
146 ctx->y = y;
Paul Bakkerf3ccc682010-03-18 21:21:02 +0000147
148 return( 0 );
Paul Bakker5121ce52009-01-03 21:22:43 +0000149}
150
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200151#endif /* !MBEDTLS_ARC4_ALT */
Paul Bakker90995b52013-06-24 19:20:35 +0200152
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200153#if defined(MBEDTLS_SELF_TEST)
Paul Bakker5121ce52009-01-03 21:22:43 +0000154/*
155 * ARC4 tests vectors as posted by Eric Rescorla in sep. 1994:
156 *
157 * http://groups.google.com/group/comp.security.misc/msg/10a300c9d21afca0
158 */
159static const unsigned char arc4_test_key[3][8] =
160{
161 { 0x01, 0x23, 0x45, 0x67, 0x89, 0xAB, 0xCD, 0xEF },
162 { 0x01, 0x23, 0x45, 0x67, 0x89, 0xAB, 0xCD, 0xEF },
163 { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 }
164};
165
166static const unsigned char arc4_test_pt[3][8] =
167{
168 { 0x01, 0x23, 0x45, 0x67, 0x89, 0xAB, 0xCD, 0xEF },
169 { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
170 { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 }
171};
172
173static const unsigned char arc4_test_ct[3][8] =
174{
175 { 0x75, 0xB7, 0x87, 0x80, 0x99, 0xE0, 0xC5, 0x96 },
176 { 0x74, 0x94, 0xC2, 0xE7, 0x10, 0x4B, 0x08, 0x79 },
177 { 0xDE, 0x18, 0x89, 0x41, 0xA3, 0x37, 0x5D, 0x3A }
178};
179
180/*
181 * Checkup routine
182 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200183int mbedtls_arc4_self_test( int verbose )
Paul Bakker5121ce52009-01-03 21:22:43 +0000184{
Paul Bakkerc7ea99a2014-06-18 11:12:03 +0200185 int i, ret = 0;
Paul Bakkerbaad6502010-03-21 15:42:15 +0000186 unsigned char ibuf[8];
187 unsigned char obuf[8];
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200188 mbedtls_arc4_context ctx;
Paul Bakker5121ce52009-01-03 21:22:43 +0000189
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200190 mbedtls_arc4_init( &ctx );
Paul Bakkerc7ea99a2014-06-18 11:12:03 +0200191
Paul Bakker5121ce52009-01-03 21:22:43 +0000192 for( i = 0; i < 3; i++ )
193 {
194 if( verbose != 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200195 mbedtls_printf( " ARC4 test #%d: ", i + 1 );
Paul Bakker5121ce52009-01-03 21:22:43 +0000196
Paul Bakkerbaad6502010-03-21 15:42:15 +0000197 memcpy( ibuf, arc4_test_pt[i], 8 );
Paul Bakker5121ce52009-01-03 21:22:43 +0000198
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200199 mbedtls_arc4_setup( &ctx, arc4_test_key[i], 8 );
200 mbedtls_arc4_crypt( &ctx, 8, ibuf, obuf );
Paul Bakker5121ce52009-01-03 21:22:43 +0000201
Paul Bakkerbaad6502010-03-21 15:42:15 +0000202 if( memcmp( obuf, arc4_test_ct[i], 8 ) != 0 )
Paul Bakker5121ce52009-01-03 21:22:43 +0000203 {
204 if( verbose != 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200205 mbedtls_printf( "failed\n" );
Paul Bakker5121ce52009-01-03 21:22:43 +0000206
Paul Bakkerc7ea99a2014-06-18 11:12:03 +0200207 ret = 1;
208 goto exit;
Paul Bakker5121ce52009-01-03 21:22:43 +0000209 }
210
211 if( verbose != 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200212 mbedtls_printf( "passed\n" );
Paul Bakker5121ce52009-01-03 21:22:43 +0000213 }
214
215 if( verbose != 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200216 mbedtls_printf( "\n" );
Paul Bakker5121ce52009-01-03 21:22:43 +0000217
Paul Bakkerc7ea99a2014-06-18 11:12:03 +0200218exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200219 mbedtls_arc4_free( &ctx );
Paul Bakkerc7ea99a2014-06-18 11:12:03 +0200220
221 return( ret );
Paul Bakker5121ce52009-01-03 21:22:43 +0000222}
223
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200224#endif /* MBEDTLS_SELF_TEST */
Paul Bakker5121ce52009-01-03 21:22:43 +0000225
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200226#endif /* MBEDTLS_ARC4_C */