libssh2

1
/* $OpenBSD: blowfish.c,v 1.18 2004/11/02 17:23:26 hshoexer Exp $ */
2
/*
3
 * Blowfish for OpenBSD - a fast block cipher designed by Bruce Schneier
4
 *
5
 * Copyright (C) Niels Provos <provos@physnet.uni-hamburg.de>
6
 * All rights reserved.
7
 *
8
 * Implementation advice by David Mazieres <dm@lcs.mit.edu>.
9
 *
10
 * Redistribution and use in source and binary forms, with or without
11
 * modification, are permitted provided that the following conditions
12
 * are met:
13
 * 1. Redistributions of source code must retain the above copyright
14
 *    notice, this list of conditions and the following disclaimer.
15
 * 2. Redistributions in binary form must reproduce the above copyright
16
 *    notice, this list of conditions and the following disclaimer in the
17
 *    documentation and/or other materials provided with the distribution.
18
 * 3. The name of the author may not be used to endorse or promote products
19
 *    derived from this software without specific prior written permission.
20
 *
21
 * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
22
 * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
23
 * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
24
 * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT,
25
 * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
26
 * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
27
 * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
28
 * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
29
 * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
30
 * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
31
 *
32
 * SPDX-License-Identifier: BSD-3-Clause
33
 */
34

35
/*
36
 * This code is derived from section 14.3 and the given source
37
 * in section V of Applied Cryptography, second edition.
38
 * Blowfish is an unpatented fast block cipher designed by
39
 * Bruce Schneier.
40
 */
41

42
#if defined(LIBSSH2_BCRYPT_PBKDF_C) || defined(_DEBUG_BLOWFISH)
43

44
#if !defined(HAVE_BCRYPT_PBKDF) && (!defined(HAVE_BLOWFISH_INITSTATE) || \
45
                                    !defined(HAVE_BLOWFISH_EXPAND0STATE) || \
46
                                    !defined(HAVE_BLF_ENC))
47

48
#ifdef _DEBUG_BLOWFISH
49
#include <stdio.h>
50
#include <string.h>
51
#include <inttypes.h>
52
#endif
53

54
/* Schneier specifies a maximum key length of 56 bytes.
55
 * This ensures that every key bit affects every cipher
56
 * bit.  However, the subkeys can hold up to 72 bytes.
57
 * Warning: For normal blowfish encryption only 56 bytes
58
 * of the key affect all cipherbits.
59
 */
60

61
#define BLF_N   16                      /* Number of Subkeys */
62
#define BLF_MAXKEYLEN ((BLF_N-2)*4)     /* 448 bits */
63
#define BLF_MAXUTILIZED ((BLF_N + 2)*4)   /* 576 bits */
64

65
/* Blowfish context */
66
typedef struct BlowfishContext {
67
    uint32_t S[4][256];     /* S-Boxes */
68
    uint32_t P[BLF_N + 2];  /* Subkeys */
69
} blf_ctx;
70

71
/* Raw access to customized Blowfish
72
 *      blf_key is just:
73
 *      Blowfish_initstate( state )
74
 *      Blowfish_expand0state( state, key, keylen )
75
 */
76

77
static void Blowfish_encipher(blf_ctx *, uint32_t *, uint32_t *);
78
#ifdef _DEBUG_BLOWFISH
79
static void Blowfish_decipher(blf_ctx *, uint32_t *, uint32_t *);
80
#endif
81
static void Blowfish_initstate(blf_ctx *);
82
static void Blowfish_expand0state(blf_ctx *, const uint8_t *, uint16_t);
83
static void Blowfish_expandstate
84
(blf_ctx *, const uint8_t *, uint16_t, const uint8_t *, uint16_t);
85

86
/* Standard Blowfish */
87

88
#ifdef _DEBUG_BLOWFISH
89
static void blf_key(blf_ctx *, const uint8_t *, uint16_t);
90
#endif
91
static void blf_enc(blf_ctx *, uint32_t *, uint16_t);
92
#ifdef _DEBUG_BLOWFISH
93
static void blf_dec(blf_ctx *, uint32_t *, uint16_t);
94
#endif
95

96
#if 0
97
static void blf_ecb_encrypt(blf_ctx *, uint8_t *, uint32_t);
98
static void blf_ecb_decrypt(blf_ctx *, uint8_t *, uint32_t);
99

100
static void blf_cbc_encrypt(blf_ctx *, uint8_t *, uint8_t *, uint32_t);
101
static void blf_cbc_decrypt(blf_ctx *, uint8_t *, uint8_t *, uint32_t);
102
#endif
103

104
/* Converts uint8_t to uint32_t */
105
static uint32_t Blowfish_stream2word(const uint8_t *, uint16_t, uint16_t *);
106

107
/* Function for Feistel Networks */
108

109
#define F(s, x) ((((s)[        (((x) >> 24) & 0xFF)]      \
110
                 + (s)[0x100 + (((x) >> 16) & 0xFF)])     \
111
                 ^ (s)[0x200 + (((x) >>  8) & 0xFF)])     \
112
                 + (s)[0x300 + ( (x)        & 0xFF)])
113

114
#define BLFRND(s,p,i,j,n) (i ^= F(s,j) ^ (p)[n])
115

116
static void
117
Blowfish_encipher(blf_ctx *c, uint32_t *xl, uint32_t *xr)
118
{
119
    uint32_t Xl;
120
    uint32_t Xr;
121
    uint32_t *s = c->S[0];
122
    uint32_t *p = c->P;
123

124
    Xl = *xl;
125
    Xr = *xr;
126

127
    Xl ^= p[0];
128
    BLFRND(s, p, Xr, Xl, 1); BLFRND(s, p, Xl, Xr, 2);
129
    BLFRND(s, p, Xr, Xl, 3); BLFRND(s, p, Xl, Xr, 4);
130
    BLFRND(s, p, Xr, Xl, 5); BLFRND(s, p, Xl, Xr, 6);
131
    BLFRND(s, p, Xr, Xl, 7); BLFRND(s, p, Xl, Xr, 8);
132
    BLFRND(s, p, Xr, Xl, 9); BLFRND(s, p, Xl, Xr, 10);
133
    BLFRND(s, p, Xr, Xl, 11); BLFRND(s, p, Xl, Xr, 12);
134
    BLFRND(s, p, Xr, Xl, 13); BLFRND(s, p, Xl, Xr, 14);
135
    BLFRND(s, p, Xr, Xl, 15); BLFRND(s, p, Xl, Xr, 16);
136

137
    *xl = Xr ^ p[17];
138
    *xr = Xl;
139
}
140

141
#ifdef _DEBUG_BLOWFISH
142
static void
143
Blowfish_decipher(blf_ctx *c, uint32_t *xl, uint32_t *xr)
144
{
145
    uint32_t Xl;
146
    uint32_t Xr;
147
    uint32_t *s = c->S[0];
148
    uint32_t *p = c->P;
149

150
    Xl = *xl;
151
    Xr = *xr;
152

153
    Xl ^= p[17];
154
    BLFRND(s, p, Xr, Xl, 16); BLFRND(s, p, Xl, Xr, 15);
155
    BLFRND(s, p, Xr, Xl, 14); BLFRND(s, p, Xl, Xr, 13);
156
    BLFRND(s, p, Xr, Xl, 12); BLFRND(s, p, Xl, Xr, 11);
157
    BLFRND(s, p, Xr, Xl, 10); BLFRND(s, p, Xl, Xr, 9);
158
    BLFRND(s, p, Xr, Xl, 8); BLFRND(s, p, Xl, Xr, 7);
159
    BLFRND(s, p, Xr, Xl, 6); BLFRND(s, p, Xl, Xr, 5);
160
    BLFRND(s, p, Xr, Xl, 4); BLFRND(s, p, Xl, Xr, 3);
161
    BLFRND(s, p, Xr, Xl, 2); BLFRND(s, p, Xl, Xr, 1);
162

163
    *xl = Xr ^ p[0];
164
    *xr = Xl;
165
}
166
#endif
167

168
static void
169
Blowfish_initstate(blf_ctx *c)
170
{
171
    /* P-box and S-box tables initialized with digits of Pi */
172

173
    static const blf_ctx initstate =
174
        { {
175
                {
176
                    0xd1310ba6, 0x98dfb5ac, 0x2ffd72db, 0xd01adfb7,
177
                    0xb8e1afed, 0x6a267e96, 0xba7c9045, 0xf12c7f99,
178
                    0x24a19947, 0xb3916cf7, 0x0801f2e2, 0x858efc16,
179
                    0x636920d8, 0x71574e69, 0xa458fea3, 0xf4933d7e,
180
                    0x0d95748f, 0x728eb658, 0x718bcd58, 0x82154aee,
181
                    0x7b54a41d, 0xc25a59b5, 0x9c30d539, 0x2af26013,
182
                    0xc5d1b023, 0x286085f0, 0xca417918, 0xb8db38ef,
183
                    0x8e79dcb0, 0x603a180e, 0x6c9e0e8b, 0xb01e8a3e,
184
                    0xd71577c1, 0xbd314b27, 0x78af2fda, 0x55605c60,
185
                    0xe65525f3, 0xaa55ab94, 0x57489862, 0x63e81440,
186
                    0x55ca396a, 0x2aab10b6, 0xb4cc5c34, 0x1141e8ce,
187
                    0xa15486af, 0x7c72e993, 0xb3ee1411, 0x636fbc2a,
188
                    0x2ba9c55d, 0x741831f6, 0xce5c3e16, 0x9b87931e,
189
                    0xafd6ba33, 0x6c24cf5c, 0x7a325381, 0x28958677,
190
                    0x3b8f4898, 0x6b4bb9af, 0xc4bfe81b, 0x66282193,
191
                    0x61d809cc, 0xfb21a991, 0x487cac60, 0x5dec8032,
192
                    0xef845d5d, 0xe98575b1, 0xdc262302, 0xeb651b88,
193
                    0x23893e81, 0xd396acc5, 0x0f6d6ff3, 0x83f44239,
194
                    0x2e0b4482, 0xa4842004, 0x69c8f04a, 0x9e1f9b5e,
195
                    0x21c66842, 0xf6e96c9a, 0x670c9c61, 0xabd388f0,
196
                    0x6a51a0d2, 0xd8542f68, 0x960fa728, 0xab5133a3,
197
                    0x6eef0b6c, 0x137a3be4, 0xba3bf050, 0x7efb2a98,
198
                    0xa1f1651d, 0x39af0176, 0x66ca593e, 0x82430e88,
199
                    0x8cee8619, 0x456f9fb4, 0x7d84a5c3, 0x3b8b5ebe,
200
                    0xe06f75d8, 0x85c12073, 0x401a449f, 0x56c16aa6,
201
                    0x4ed3aa62, 0x363f7706, 0x1bfedf72, 0x429b023d,
202
                    0x37d0d724, 0xd00a1248, 0xdb0fead3, 0x49f1c09b,
203
                    0x075372c9, 0x80991b7b, 0x25d479d8, 0xf6e8def7,
204
                    0xe3fe501a, 0xb6794c3b, 0x976ce0bd, 0x04c006ba,
205
                    0xc1a94fb6, 0x409f60c4, 0x5e5c9ec2, 0x196a2463,
206
                    0x68fb6faf, 0x3e6c53b5, 0x1339b2eb, 0x3b52ec6f,
207
                    0x6dfc511f, 0x9b30952c, 0xcc814544, 0xaf5ebd09,
208
                    0xbee3d004, 0xde334afd, 0x660f2807, 0x192e4bb3,
209
                    0xc0cba857, 0x45c8740f, 0xd20b5f39, 0xb9d3fbdb,
210
                    0x5579c0bd, 0x1a60320a, 0xd6a100c6, 0x402c7279,
211
                    0x679f25fe, 0xfb1fa3cc, 0x8ea5e9f8, 0xdb3222f8,
212
                    0x3c7516df, 0xfd616b15, 0x2f501ec8, 0xad0552ab,
213
                    0x323db5fa, 0xfd238760, 0x53317b48, 0x3e00df82,
214
                    0x9e5c57bb, 0xca6f8ca0, 0x1a87562e, 0xdf1769db,
215
                    0xd542a8f6, 0x287effc3, 0xac6732c6, 0x8c4f5573,
216
                    0x695b27b0, 0xbbca58c8, 0xe1ffa35d, 0xb8f011a0,
217
                    0x10fa3d98, 0xfd2183b8, 0x4afcb56c, 0x2dd1d35b,
218
                    0x9a53e479, 0xb6f84565, 0xd28e49bc, 0x4bfb9790,
219
                    0xe1ddf2da, 0xa4cb7e33, 0x62fb1341, 0xcee4c6e8,
220
                    0xef20cada, 0x36774c01, 0xd07e9efe, 0x2bf11fb4,
221
                    0x95dbda4d, 0xae909198, 0xeaad8e71, 0x6b93d5a0,
222
                    0xd08ed1d0, 0xafc725e0, 0x8e3c5b2f, 0x8e7594b7,
223
                    0x8ff6e2fb, 0xf2122b64, 0x8888b812, 0x900df01c,
224
                    0x4fad5ea0, 0x688fc31c, 0xd1cff191, 0xb3a8c1ad,
225
                    0x2f2f2218, 0xbe0e1777, 0xea752dfe, 0x8b021fa1,
226
                    0xe5a0cc0f, 0xb56f74e8, 0x18acf3d6, 0xce89e299,
227
                    0xb4a84fe0, 0xfd13e0b7, 0x7cc43b81, 0xd2ada8d9,
228
                    0x165fa266, 0x80957705, 0x93cc7314, 0x211a1477,
229
                    0xe6ad2065, 0x77b5fa86, 0xc75442f5, 0xfb9d35cf,
230
                    0xebcdaf0c, 0x7b3e89a0, 0xd6411bd3, 0xae1e7e49,
231
                    0x00250e2d, 0x2071b35e, 0x226800bb, 0x57b8e0af,
232
                    0x2464369b, 0xf009b91e, 0x5563911d, 0x59dfa6aa,
233
                    0x78c14389, 0xd95a537f, 0x207d5ba2, 0x02e5b9c5,
234
                    0x83260376, 0x6295cfa9, 0x11c81968, 0x4e734a41,
235
                    0xb3472dca, 0x7b14a94a, 0x1b510052, 0x9a532915,
236
                    0xd60f573f, 0xbc9bc6e4, 0x2b60a476, 0x81e67400,
237
                    0x08ba6fb5, 0x571be91f, 0xf296ec6b, 0x2a0dd915,
238
                    0xb6636521, 0xe7b9f9b6, 0xff34052e, 0xc5855664,
239
                    0x53b02d5d, 0xa99f8fa1, 0x08ba4799, 0x6e85076a},
240
                {
241
                    0x4b7a70e9, 0xb5b32944, 0xdb75092e, 0xc4192623,
242
                    0xad6ea6b0, 0x49a7df7d, 0x9cee60b8, 0x8fedb266,
243
                    0xecaa8c71, 0x699a17ff, 0x5664526c, 0xc2b19ee1,
244
                    0x193602a5, 0x75094c29, 0xa0591340, 0xe4183a3e,
245
                    0x3f54989a, 0x5b429d65, 0x6b8fe4d6, 0x99f73fd6,
246
                    0xa1d29c07, 0xefe830f5, 0x4d2d38e6, 0xf0255dc1,
247
                    0x4cdd2086, 0x8470eb26, 0x6382e9c6, 0x021ecc5e,
248
                    0x09686b3f, 0x3ebaefc9, 0x3c971814, 0x6b6a70a1,
249
                    0x687f3584, 0x52a0e286, 0xb79c5305, 0xaa500737,
250
                    0x3e07841c, 0x7fdeae5c, 0x8e7d44ec, 0x5716f2b8,
251
                    0xb03ada37, 0xf0500c0d, 0xf01c1f04, 0x0200b3ff,
252
                    0xae0cf51a, 0x3cb574b2, 0x25837a58, 0xdc0921bd,
253
                    0xd19113f9, 0x7ca92ff6, 0x94324773, 0x22f54701,
254
                    0x3ae5e581, 0x37c2dadc, 0xc8b57634, 0x9af3dda7,
255
                    0xa9446146, 0x0fd0030e, 0xecc8c73e, 0xa4751e41,
256
                    0xe238cd99, 0x3bea0e2f, 0x3280bba1, 0x183eb331,
257
                    0x4e548b38, 0x4f6db908, 0x6f420d03, 0xf60a04bf,
258
                    0x2cb81290, 0x24977c79, 0x5679b072, 0xbcaf89af,
259
                    0xde9a771f, 0xd9930810, 0xb38bae12, 0xdccf3f2e,
260
                    0x5512721f, 0x2e6b7124, 0x501adde6, 0x9f84cd87,
261
                    0x7a584718, 0x7408da17, 0xbc9f9abc, 0xe94b7d8c,
262
                    0xec7aec3a, 0xdb851dfa, 0x63094366, 0xc464c3d2,
263
                    0xef1c1847, 0x3215d908, 0xdd433b37, 0x24c2ba16,
264
                    0x12a14d43, 0x2a65c451, 0x50940002, 0x133ae4dd,
265
                    0x71dff89e, 0x10314e55, 0x81ac77d6, 0x5f11199b,
266
                    0x043556f1, 0xd7a3c76b, 0x3c11183b, 0x5924a509,
267
                    0xf28fe6ed, 0x97f1fbfa, 0x9ebabf2c, 0x1e153c6e,
268
                    0x86e34570, 0xeae96fb1, 0x860e5e0a, 0x5a3e2ab3,
269
                    0x771fe71c, 0x4e3d06fa, 0x2965dcb9, 0x99e71d0f,
270
                    0x803e89d6, 0x5266c825, 0x2e4cc978, 0x9c10b36a,
271
                    0xc6150eba, 0x94e2ea78, 0xa5fc3c53, 0x1e0a2df4,
272
                    0xf2f74ea7, 0x361d2b3d, 0x1939260f, 0x19c27960,
273
                    0x5223a708, 0xf71312b6, 0xebadfe6e, 0xeac31f66,
274
                    0xe3bc4595, 0xa67bc883, 0xb17f37d1, 0x018cff28,
275
                    0xc332ddef, 0xbe6c5aa5, 0x65582185, 0x68ab9802,
276
                    0xeecea50f, 0xdb2f953b, 0x2aef7dad, 0x5b6e2f84,
277
                    0x1521b628, 0x29076170, 0xecdd4775, 0x619f1510,
278
                    0x13cca830, 0xeb61bd96, 0x0334fe1e, 0xaa0363cf,
279
                    0xb5735c90, 0x4c70a239, 0xd59e9e0b, 0xcbaade14,
280
                    0xeecc86bc, 0x60622ca7, 0x9cab5cab, 0xb2f3846e,
281
                    0x648b1eaf, 0x19bdf0ca, 0xa02369b9, 0x655abb50,
282
                    0x40685a32, 0x3c2ab4b3, 0x319ee9d5, 0xc021b8f7,
283
                    0x9b540b19, 0x875fa099, 0x95f7997e, 0x623d7da8,
284
                    0xf837889a, 0x97e32d77, 0x11ed935f, 0x16681281,
285
                    0x0e358829, 0xc7e61fd6, 0x96dedfa1, 0x7858ba99,
286
                    0x57f584a5, 0x1b227263, 0x9b83c3ff, 0x1ac24696,
287
                    0xcdb30aeb, 0x532e3054, 0x8fd948e4, 0x6dbc3128,
288
                    0x58ebf2ef, 0x34c6ffea, 0xfe28ed61, 0xee7c3c73,
289
                    0x5d4a14d9, 0xe864b7e3, 0x42105d14, 0x203e13e0,
290
                    0x45eee2b6, 0xa3aaabea, 0xdb6c4f15, 0xfacb4fd0,
291
                    0xc742f442, 0xef6abbb5, 0x654f3b1d, 0x41cd2105,
292
                    0xd81e799e, 0x86854dc7, 0xe44b476a, 0x3d816250,
293
                    0xcf62a1f2, 0x5b8d2646, 0xfc8883a0, 0xc1c7b6a3,
294
                    0x7f1524c3, 0x69cb7492, 0x47848a0b, 0x5692b285,
295
                    0x095bbf00, 0xad19489d, 0x1462b174, 0x23820e00,
296
                    0x58428d2a, 0x0c55f5ea, 0x1dadf43e, 0x233f7061,
297
                    0x3372f092, 0x8d937e41, 0xd65fecf1, 0x6c223bdb,
298
                    0x7cde3759, 0xcbee7460, 0x4085f2a7, 0xce77326e,
299
                    0xa6078084, 0x19f8509e, 0xe8efd855, 0x61d99735,
300
                    0xa969a7aa, 0xc50c06c2, 0x5a04abfc, 0x800bcadc,
301
                    0x9e447a2e, 0xc3453484, 0xfdd56705, 0x0e1e9ec9,
302
                    0xdb73dbd3, 0x105588cd, 0x675fda79, 0xe3674340,
303
                    0xc5c43465, 0x713e38d8, 0x3d28f89e, 0xf16dff20,
304
                    0x153e21e7, 0x8fb03d4a, 0xe6e39f2b, 0xdb83adf7},
305
                {
306
                    0xe93d5a68, 0x948140f7, 0xf64c261c, 0x94692934,
307
                    0x411520f7, 0x7602d4f7, 0xbcf46b2e, 0xd4a20068,
308
                    0xd4082471, 0x3320f46a, 0x43b7d4b7, 0x500061af,
309
                    0x1e39f62e, 0x97244546, 0x14214f74, 0xbf8b8840,
310
                    0x4d95fc1d, 0x96b591af, 0x70f4ddd3, 0x66a02f45,
311
                    0xbfbc09ec, 0x03bd9785, 0x7fac6dd0, 0x31cb8504,
312
                    0x96eb27b3, 0x55fd3941, 0xda2547e6, 0xabca0a9a,
313
                    0x28507825, 0x530429f4, 0x0a2c86da, 0xe9b66dfb,
314
                    0x68dc1462, 0xd7486900, 0x680ec0a4, 0x27a18dee,
315
                    0x4f3ffea2, 0xe887ad8c, 0xb58ce006, 0x7af4d6b6,
316
                    0xaace1e7c, 0xd3375fec, 0xce78a399, 0x406b2a42,
317
                    0x20fe9e35, 0xd9f385b9, 0xee39d7ab, 0x3b124e8b,
318
                    0x1dc9faf7, 0x4b6d1856, 0x26a36631, 0xeae397b2,
319
                    0x3a6efa74, 0xdd5b4332, 0x6841e7f7, 0xca7820fb,
320
                    0xfb0af54e, 0xd8feb397, 0x454056ac, 0xba489527,
321
                    0x55533a3a, 0x20838d87, 0xfe6ba9b7, 0xd096954b,
322
                    0x55a867bc, 0xa1159a58, 0xcca92963, 0x99e1db33,
323
                    0xa62a4a56, 0x3f3125f9, 0x5ef47e1c, 0x9029317c,
324
                    0xfdf8e802, 0x04272f70, 0x80bb155c, 0x05282ce3,
325
                    0x95c11548, 0xe4c66d22, 0x48c1133f, 0xc70f86dc,
326
                    0x07f9c9ee, 0x41041f0f, 0x404779a4, 0x5d886e17,
327
                    0x325f51eb, 0xd59bc0d1, 0xf2bcc18f, 0x41113564,
328
                    0x257b7834, 0x602a9c60, 0xdff8e8a3, 0x1f636c1b,
329
                    0x0e12b4c2, 0x02e1329e, 0xaf664fd1, 0xcad18115,
330
                    0x6b2395e0, 0x333e92e1, 0x3b240b62, 0xeebeb922,
331
                    0x85b2a20e, 0xe6ba0d99, 0xde720c8c, 0x2da2f728,
332
                    0xd0127845, 0x95b794fd, 0x647d0862, 0xe7ccf5f0,
333
                    0x5449a36f, 0x877d48fa, 0xc39dfd27, 0xf33e8d1e,
334
                    0x0a476341, 0x992eff74, 0x3a6f6eab, 0xf4f8fd37,
335
                    0xa812dc60, 0xa1ebddf8, 0x991be14c, 0xdb6e6b0d,
336
                    0xc67b5510, 0x6d672c37, 0x2765d43b, 0xdcd0e804,
337
                    0xf1290dc7, 0xcc00ffa3, 0xb5390f92, 0x690fed0b,
338
                    0x667b9ffb, 0xcedb7d9c, 0xa091cf0b, 0xd9155ea3,
339
                    0xbb132f88, 0x515bad24, 0x7b9479bf, 0x763bd6eb,
340
                    0x37392eb3, 0xcc115979, 0x8026e297, 0xf42e312d,
341
                    0x6842ada7, 0xc66a2b3b, 0x12754ccc, 0x782ef11c,
342
                    0x6a124237, 0xb79251e7, 0x06a1bbe6, 0x4bfb6350,
343
                    0x1a6b1018, 0x11caedfa, 0x3d25bdd8, 0xe2e1c3c9,
344
                    0x44421659, 0x0a121386, 0xd90cec6e, 0xd5abea2a,
345
                    0x64af674e, 0xda86a85f, 0xbebfe988, 0x64e4c3fe,
346
                    0x9dbc8057, 0xf0f7c086, 0x60787bf8, 0x6003604d,
347
                    0xd1fd8346, 0xf6381fb0, 0x7745ae04, 0xd736fccc,
348
                    0x83426b33, 0xf01eab71, 0xb0804187, 0x3c005e5f,
349
                    0x77a057be, 0xbde8ae24, 0x55464299, 0xbf582e61,
350
                    0x4e58f48f, 0xf2ddfda2, 0xf474ef38, 0x8789bdc2,
351
                    0x5366f9c3, 0xc8b38e74, 0xb475f255, 0x46fcd9b9,
352
                    0x7aeb2661, 0x8b1ddf84, 0x846a0e79, 0x915f95e2,
353
                    0x466e598e, 0x20b45770, 0x8cd55591, 0xc902de4c,
354
                    0xb90bace1, 0xbb8205d0, 0x11a86248, 0x7574a99e,
355
                    0xb77f19b6, 0xe0a9dc09, 0x662d09a1, 0xc4324633,
356
                    0xe85a1f02, 0x09f0be8c, 0x4a99a025, 0x1d6efe10,
357
                    0x1ab93d1d, 0x0ba5a4df, 0xa186f20f, 0x2868f169,
358
                    0xdcb7da83, 0x573906fe, 0xa1e2ce9b, 0x4fcd7f52,
359
                    0x50115e01, 0xa70683fa, 0xa002b5c4, 0x0de6d027,
360
                    0x9af88c27, 0x773f8641, 0xc3604c06, 0x61a806b5,
361
                    0xf0177a28, 0xc0f586e0, 0x006058aa, 0x30dc7d62,
362
                    0x11e69ed7, 0x2338ea63, 0x53c2dd94, 0xc2c21634,
363
                    0xbbcbee56, 0x90bcb6de, 0xebfc7da1, 0xce591d76,
364
                    0x6f05e409, 0x4b7c0188, 0x39720a3d, 0x7c927c24,
365
                    0x86e3725f, 0x724d9db9, 0x1ac15bb4, 0xd39eb8fc,
366
                    0xed545578, 0x08fca5b5, 0xd83d7cd3, 0x4dad0fc4,
367
                    0x1e50ef5e, 0xb161e6f8, 0xa28514d9, 0x6c51133c,
368
                    0x6fd5c7e7, 0x56e14ec4, 0x362abfce, 0xddc6c837,
369
                    0xd79a3234, 0x92638212, 0x670efa8e, 0x406000e0},
370
                {
371
                    0x3a39ce37, 0xd3faf5cf, 0xabc27737, 0x5ac52d1b,
372
                    0x5cb0679e, 0x4fa33742, 0xd3822740, 0x99bc9bbe,
373
                    0xd5118e9d, 0xbf0f7315, 0xd62d1c7e, 0xc700c47b,
374
                    0xb78c1b6b, 0x21a19045, 0xb26eb1be, 0x6a366eb4,
375
                    0x5748ab2f, 0xbc946e79, 0xc6a376d2, 0x6549c2c8,
376
                    0x530ff8ee, 0x468dde7d, 0xd5730a1d, 0x4cd04dc6,
377
                    0x2939bbdb, 0xa9ba4650, 0xac9526e8, 0xbe5ee304,
378
                    0xa1fad5f0, 0x6a2d519a, 0x63ef8ce2, 0x9a86ee22,
379
                    0xc089c2b8, 0x43242ef6, 0xa51e03aa, 0x9cf2d0a4,
380
                    0x83c061ba, 0x9be96a4d, 0x8fe51550, 0xba645bd6,
381
                    0x2826a2f9, 0xa73a3ae1, 0x4ba99586, 0xef5562e9,
382
                    0xc72fefd3, 0xf752f7da, 0x3f046f69, 0x77fa0a59,
383
                    0x80e4a915, 0x87b08601, 0x9b09e6ad, 0x3b3ee593,
384
                    0xe990fd5a, 0x9e34d797, 0x2cf0b7d9, 0x022b8b51,
385
                    0x96d5ac3a, 0x017da67d, 0xd1cf3ed6, 0x7c7d2d28,
386
                    0x1f9f25cf, 0xadf2b89b, 0x5ad6b472, 0x5a88f54c,
387
                    0xe029ac71, 0xe019a5e6, 0x47b0acfd, 0xed93fa9b,
388
                    0xe8d3c48d, 0x283b57cc, 0xf8d56629, 0x79132e28,
389
                    0x785f0191, 0xed756055, 0xf7960e44, 0xe3d35e8c,
390
                    0x15056dd4, 0x88f46dba, 0x03a16125, 0x0564f0bd,
391
                    0xc3eb9e15, 0x3c9057a2, 0x97271aec, 0xa93a072a,
392
                    0x1b3f6d9b, 0x1e6321f5, 0xf59c66fb, 0x26dcf319,
393
                    0x7533d928, 0xb155fdf5, 0x03563482, 0x8aba3cbb,
394
                    0x28517711, 0xc20ad9f8, 0xabcc5167, 0xccad925f,
395
                    0x4de81751, 0x3830dc8e, 0x379d5862, 0x9320f991,
396
                    0xea7a90c2, 0xfb3e7bce, 0x5121ce64, 0x774fbe32,
397
                    0xa8b6e37e, 0xc3293d46, 0x48de5369, 0x6413e680,
398
                    0xa2ae0810, 0xdd6db224, 0x69852dfd, 0x09072166,
399
                    0xb39a460a, 0x6445c0dd, 0x586cdecf, 0x1c20c8ae,
400
                    0x5bbef7dd, 0x1b588d40, 0xccd2017f, 0x6bb4e3bb,
401
                    0xdda26a7e, 0x3a59ff45, 0x3e350a44, 0xbcb4cdd5,
402
                    0x72eacea8, 0xfa6484bb, 0x8d6612ae, 0xbf3c6f47,
403
                    0xd29be463, 0x542f5d9e, 0xaec2771b, 0xf64e6370,
404
                    0x740e0d8d, 0xe75b1357, 0xf8721671, 0xaf537d5d,
405
                    0x4040cb08, 0x4eb4e2cc, 0x34d2466a, 0x0115af84,
406
                    0xe1b00428, 0x95983a1d, 0x06b89fb4, 0xce6ea048,
407
                    0x6f3f3b82, 0x3520ab82, 0x011a1d4b, 0x277227f8,
408
                    0x611560b1, 0xe7933fdc, 0xbb3a792b, 0x344525bd,
409
                    0xa08839e1, 0x51ce794b, 0x2f32c9b7, 0xa01fbac9,
410
                    0xe01cc87e, 0xbcc7d1f6, 0xcf0111c3, 0xa1e8aac7,
411
                    0x1a908749, 0xd44fbd9a, 0xd0dadecb, 0xd50ada38,
412
                    0x0339c32a, 0xc6913667, 0x8df9317c, 0xe0b12b4f,
413
                    0xf79e59b7, 0x43f5bb3a, 0xf2d519ff, 0x27d9459c,
414
                    0xbf97222c, 0x15e6fc2a, 0x0f91fc71, 0x9b941525,
415
                    0xfae59361, 0xceb69ceb, 0xc2a86459, 0x12baa8d1,
416
                    0xb6c1075e, 0xe3056a0c, 0x10d25065, 0xcb03a442,
417
                    0xe0ec6e0e, 0x1698db3b, 0x4c98a0be, 0x3278e964,
418
                    0x9f1f9532, 0xe0d392df, 0xd3a0342b, 0x8971f21e,
419
                    0x1b0a7441, 0x4ba3348c, 0xc5be7120, 0xc37632d8,
420
                    0xdf359f8d, 0x9b992f2e, 0xe60b6f47, 0x0fe3f11d,
421
                    0xe54cda54, 0x1edad891, 0xce6279cf, 0xcd3e7e6f,
422
                    0x1618b166, 0xfd2c1d05, 0x848fd2c5, 0xf6fb2299,
423
                    0xf523f357, 0xa6327623, 0x93a83531, 0x56cccd02,
424
                    0xacf08162, 0x5a75ebb5, 0x6e163697, 0x88d273cc,
425
                    0xde966292, 0x81b949d0, 0x4c50901b, 0x71c65614,
426
                    0xe6c6c7bd, 0x327a140a, 0x45e1d006, 0xc3f27b9a,
427
                    0xc9aa53fd, 0x62a80f00, 0xbb25bfe2, 0x35bdd2f6,
428
                    0x71126905, 0xb2040222, 0xb6cbcf7c, 0xcd769c2b,
429
                    0x53113ec0, 0x1640e3d3, 0x38abbd60, 0x2547adf0,
430
                    0xba38209c, 0xf746ce76, 0x77afa1c5, 0x20756060,
431
                    0x85cbfe4e, 0x8ae88dd8, 0x7aaaf9b0, 0x4cf9aa7e,
432
                    0x1948c25c, 0x02fb8a8c, 0x01c36ae4, 0xd6ebe1f9,
433
                    0x90d4f869, 0xa65cdea0, 0x3f09252d, 0xc208e69f,
434
                    0xb74e6132, 0xce77e25b, 0x578fdfe3, 0x3ac372e6}
435
            },
436
          {
437
              0x243f6a88, 0x85a308d3, 0x13198a2e, 0x03707344,
438
              0xa4093822, 0x299f31d0, 0x082efa98, 0xec4e6c89,
439
              0x452821e6, 0x38d01377, 0xbe5466cf, 0x34e90c6c,
440
              0xc0ac29b7, 0xc97c50dd, 0x3f84d5b5, 0xb5470917,
441
              0x9216d5d9, 0x8979fb1b
442
          } };
443

444
    *c = initstate;
445
}
446

447
static uint32_t
448
Blowfish_stream2word(const uint8_t *data, uint16_t databytes,
449
                     uint16_t *current)
450
{
451
    uint8_t i;
452
    uint16_t j;
453
    uint32_t temp;
454

455
    temp = 0x00000000;
456
    j = *current;
457

458
    for(i = 0; i < 4; i++, j++) {
459
        if(j >= databytes)
460
            j = 0;
461
        temp = (temp << 8) | data[j];
462
    }
463

464
    *current = j;
465
    return temp;
466
}
467

468
static void
469
Blowfish_expand0state(blf_ctx *c, const uint8_t *key, uint16_t keybytes)
470
{
471
    int i;
472
    int k;
473
    uint16_t j;
474
    uint32_t temp;
475
    uint32_t datal;
476
    uint32_t datar;
477

478
    j = 0;
479
    for(i = 0; i < BLF_N + 2; i++) {
480
        /* Extract 4 int8 to 1 int32 from keystream */
481
        temp = Blowfish_stream2word(key, keybytes, &j);
482
        c->P[i] = c->P[i] ^ temp;
483
    }
484

485
    j = 0;
486
    datal = 0x00000000;
487
    datar = 0x00000000;
488
    for(i = 0; i < BLF_N + 2; i += 2) {
489
        Blowfish_encipher(c, &datal, &datar);
490

491
        c->P[i] = datal;
492
        c->P[i + 1] = datar;
493
    }
494

495
    for(i = 0; i < 4; i++) {
496
        for(k = 0; k < 256; k += 2) {
497
            Blowfish_encipher(c, &datal, &datar);
498

499
            c->S[i][k] = datal;
500
            c->S[i][k + 1] = datar;
501
        }
502
    }
503
}
504

505
static void
506
Blowfish_expandstate(blf_ctx *c, const uint8_t *data, uint16_t databytes,
507
                     const uint8_t *key, uint16_t keybytes)
508
{
509
    int i;
510
    int k;
511
    uint16_t j;
512
    uint32_t temp;
513
    uint32_t datal;
514
    uint32_t datar;
515

516
    j = 0;
517
    for(i = 0; i < BLF_N + 2; i++) {
518
        /* Extract 4 int8 to 1 int32 from keystream */
519
        temp = Blowfish_stream2word(key, keybytes, &j);
520
        c->P[i] = c->P[i] ^ temp;
521
    }
522

523
    j = 0;
524
    datal = 0x00000000;
525
    datar = 0x00000000;
526
    for(i = 0; i < BLF_N + 2; i += 2) {
527
        datal ^= Blowfish_stream2word(data, databytes, &j);
528
        datar ^= Blowfish_stream2word(data, databytes, &j);
529
        Blowfish_encipher(c, &datal, &datar);
530

531
        c->P[i] = datal;
532
        c->P[i + 1] = datar;
533
    }
534

535
    for(i = 0; i < 4; i++) {
536
        for(k = 0; k < 256; k += 2) {
537
            datal ^= Blowfish_stream2word(data, databytes, &j);
538
            datar ^= Blowfish_stream2word(data, databytes, &j);
539
            Blowfish_encipher(c, &datal, &datar);
540

541
            c->S[i][k] = datal;
542
            c->S[i][k + 1] = datar;
543
        }
544
    }
545

546
}
547

548
#ifdef _DEBUG_BLOWFISH
549
static void
550
blf_key(blf_ctx *c, const uint8_t *k, uint16_t len)
551
{
552
    /* Initialize S-boxes and subkeys with Pi */
553
    Blowfish_initstate(c);
554

555
    /* Transform S-boxes and subkeys with key */
556
    Blowfish_expand0state(c, k, len);
557
}
558
#endif
559

560
static void
561
blf_enc(blf_ctx *c, uint32_t *data, uint16_t blocks)
562
{
563
    uint32_t *d;
564
    uint16_t i;
565

566
    d = data;
567
    for(i = 0; i < blocks; i++) {
568
        Blowfish_encipher(c, d, d + 1);
569
        d += 2;
570
    }
571
}
572

573
#ifdef _DEBUG_BLOWFISH
574
static void
575
blf_dec(blf_ctx *c, uint32_t *data, uint16_t blocks)
576
{
577
    uint32_t *d;
578
    uint16_t i;
579

580
    d = data;
581
    for(i = 0; i < blocks; i++) {
582
        Blowfish_decipher(c, d, d + 1);
583
        d += 2;
584
    }
585
}
586
#endif
587

588
#if 0
589
static void
590
blf_ecb_encrypt(blf_ctx *c, uint8_t *data, uint32_t len)
591
{
592
    uint32_t l, r;
593
    uint32_t i;
594

595
    for(i = 0; i < len; i += 8) {
596
        l = data[0] << 24 | data[1] << 16 | data[2] << 8 | data[3];
597
        r = data[4] << 24 | data[5] << 16 | data[6] << 8 | data[7];
598
        Blowfish_encipher(c, &l, &r);
599
        data[0] = (uint8_t)(l >> 24 & 0xff);
600
        data[1] = l >> 16 & 0xff;
601
        data[2] = l >> 8 & 0xff;
602
        data[3] = l & 0xff;
603
        data[4] = (uint8_t)(r >> 24 & 0xff);
604
        data[5] = r >> 16 & 0xff;
605
        data[6] = r >> 8 & 0xff;
606
        data[7] = r & 0xff;
607
        data += 8;
608
    }
609
}
610

611
static void
612
blf_ecb_decrypt(blf_ctx *c, uint8_t *data, uint32_t len)
613
{
614
    uint32_t l, r;
615
    uint32_t i;
616

617
    for(i = 0; i < len; i += 8) {
618
        l = data[0] << 24 | data[1] << 16 | data[2] << 8 | data[3];
619
        r = data[4] << 24 | data[5] << 16 | data[6] << 8 | data[7];
620
        Blowfish_decipher(c, &l, &r);
621
        data[0] = (uint8_t)(l >> 24 & 0xff);
622
        data[1] = l >> 16 & 0xff;
623
        data[2] = l >> 8 & 0xff;
624
        data[3] = l & 0xff;
625
        data[4] = (uint8_t)(r >> 24 & 0xff);
626
        data[5] = r >> 16 & 0xff;
627
        data[6] = r >> 8 & 0xff;
628
        data[7] = r & 0xff;
629
        data += 8;
630
    }
631
}
632

633
static void
634
blf_cbc_encrypt(blf_ctx *c, uint8_t *iv, uint8_t *data, uint32_t len)
635
{
636
    uint32_t l, r;
637
    uint32_t i, j;
638

639
    for(i = 0; i < len; i += 8) {
640
        for(j = 0; j < 8; j++)
641
            data[j] ^= iv[j];
642
        l = data[0] << 24 | data[1] << 16 | data[2] << 8 | data[3];
643
        r = data[4] << 24 | data[5] << 16 | data[6] << 8 | data[7];
644
        Blowfish_encipher(c, &l, &r);
645
        data[0] = (uint8_t)(l >> 24 & 0xff);
646
        data[1] = l >> 16 & 0xff;
647
        data[2] = l >> 8 & 0xff;
648
        data[3] = l & 0xff;
649
        data[4] = (uint8_t)(r >> 24 & 0xff);
650
        data[5] = r >> 16 & 0xff;
651
        data[6] = r >> 8 & 0xff;
652
        data[7] = r & 0xff;
653
        iv = data;
654
        data += 8;
655
    }
656
}
657

658
static void
659
blf_cbc_decrypt(blf_ctx *c, uint8_t *iva, uint8_t *data, uint32_t len)
660
{
661
    uint32_t l, r;
662
    uint8_t *iv;
663
    uint32_t i, j;
664

665
    iv = data + len - 16;
666
    data = data + len - 8;
667
    for(i = len - 8; i >= 8; i -= 8) {
668
        l = data[0] << 24 | data[1] << 16 | data[2] << 8 | data[3];
669
        r = data[4] << 24 | data[5] << 16 | data[6] << 8 | data[7];
670
        Blowfish_decipher(c, &l, &r);
671
        data[0] = (uint8_t)(l >> 24 & 0xff);
672
        data[1] = l >> 16 & 0xff;
673
        data[2] = l >> 8 & 0xff;
674
        data[3] = l & 0xff;
675
        data[4] = (uint8_t)(r >> 24 & 0xff);
676
        data[5] = r >> 16 & 0xff;
677
        data[6] = r >> 8 & 0xff;
678
        data[7] = r & 0xff;
679
        for(j = 0; j < 8; j++)
680
            data[j] ^= iv[j];
681
        iv -= 8;
682
        data -= 8;
683
    }
684
    l = data[0] << 24 | data[1] << 16 | data[2] << 8 | data[3];
685
    r = data[4] << 24 | data[5] << 16 | data[6] << 8 | data[7];
686
    Blowfish_decipher(c, &l, &r);
687
    data[0] = (uint8_t)(l >> 24 & 0xff);
688
    data[1] = l >> 16 & 0xff;
689
    data[2] = l >> 8 & 0xff;
690
    data[3] = l & 0xff;
691
    data[4] = (uint8_t)(r >> 24 & 0xff);
692
    data[5] = r >> 16 & 0xff;
693
    data[6] = r >> 8 & 0xff;
694
    data[7] = r & 0xff;
695
    for(j = 0; j < 8; j++)
696
        data[j] ^= iva[j];
697
}
698
#endif
699

700
#ifdef _DEBUG_BLOWFISH
701
static void
702
report(uint32_t data[], uint16_t len)
703
{
704
    int i;
705
    for(i = 0; i < len; i += 2)
706
        printf("Block %d: 0x%08lx 0x%08lx.\n",
707
               i / 2, (unsigned long)data[i], (unsigned long)data[i + 1]);
708
}
709
int
710
main(void)
711
{
712
    blf_ctx c;
713
    char    key[] = "AAAAA";
714
    char    key2[] = "abcdefghijklmnopqrstuvwxyz";
715

716
    uint32_t data[10];
717
    uint32_t data2[] =
718
        {0x424c4f57l, 0x46495348l};
719

720
    uint16_t i;
721

722
    /* First test */
723
    for(i = 0; i < 10; i++)
724
        data[i] = i;
725

726
    blf_key(&c, (uint8_t *) key, 5);
727
    blf_enc(&c, data, 5);
728
    blf_dec(&c, data, 1);
729
    blf_dec(&c, data + 2, 4);
730
    printf("Should read as 0 - 9.\n");
731
    report(data, 10);
732

733
    /* Second test */
734
    blf_key(&c, (uint8_t *) key2, (uint16_t)strlen(key2));
735
    blf_enc(&c, data2, 1);
736
    printf("\nShould read as: 0x324ed0fe 0xf413a203.\n");
737
    report(data2, 2);
738
    blf_dec(&c, data2, 1);
739
    printf("\nShould read as: 0x424c4f57 0x46495348.\n");
740
    report(data2, 2);
741

742
    return 0;
743
}
744
#endif
745

746
#endif /* !defined(HAVE_BCRYPT_PBKDF) && \
747
          (!defined(HAVE_BLOWFISH_INITSTATE) ||   \
748
          !defined(HAVE_BLOWFISH_EXPAND0STATE) || \
749
          '!defined(HAVE_BLF_ENC)) */
750

751
#endif /* defined(LIBSSH2_BCRYPT_PBKDF_C) || defined(_DEBUG_BLOWFISH) */
752