<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/xhtml;charset=UTF-8"/>
<meta http-equiv="X-UA-Compatible" content="IE=9"/>
<meta name="generator" content="Doxygen 1.8.14"/>
<meta name="viewport" content="width=device-width, initial-scale=1"/>
<title>Crypto++: sm4.cpp Source File</title>
<link href="tabs.css" rel="stylesheet" type="text/css"/>
<script type="text/javascript" src="jquery.js"></script>
<script type="text/javascript" src="dynsections.js"></script>
<link href="doxygen.css" rel="stylesheet" type="text/css" />
</head>
<body>
<div id="top"><!-- do not remove this div, it is closed by doxygen! -->
<div id="titlearea">
<table cellspacing="0" cellpadding="0">
<tbody>
<tr style="height: 56px;">
<td id="projectalign" style="padding-left: 0.5em;">
<div id="projectname">Crypto++
 <span id="projectnumber">7.0</span>
</div>
<div id="projectbrief">Free C++ class library of cryptographic schemes</div>
</td>
</tr>
</tbody>
</table>
</div>
<!-- end header part -->
<!-- Generated by Doxygen 1.8.14 -->
<script type="text/javascript" src="menudata.js"></script>
<script type="text/javascript" src="menu.js"></script>
<script type="text/javascript">
/* @license magnet:?xt=urn:btih:cf05388f2679ee054f2beb29a391d25f4e673ac3&dn=gpl-2.0.txt GPL-v2 */
$(function() {
initMenu('',false,false,'search.php','Search');
});
/* @license-end */</script>
<div id="main-nav"></div>
</div><!-- top -->
<div class="header">
<div class="headertitle">
<div class="title">sm4.cpp</div> </div>
</div><!--header-->
<div class="contents">
<div class="fragment"><div class="line"><a name="l00001"></a><span class="lineno"> 1</span> <span class="comment">// sm4.cpp - written and placed in the public domain by Jeffrey Walton and Han Lulu</span></div><div class="line"><a name="l00002"></a><span class="lineno"> 2</span> <span class="comment">//</span></div><div class="line"><a name="l00003"></a><span class="lineno"> 3</span> <span class="comment">// We understand future ARMv8 enhancements are supposed</span></div><div class="line"><a name="l00004"></a><span class="lineno"> 4</span> <span class="comment">// to include SM3 and SM4 related instructions so the function</span></div><div class="line"><a name="l00005"></a><span class="lineno"> 5</span> <span class="comment">// is stubbed for an eventual SM4_Round_ARMV8.</span></div><div class="line"><a name="l00006"></a><span class="lineno"> 6</span> </div><div class="line"><a name="l00007"></a><span class="lineno"> 7</span> <span class="preprocessor">#include "<a class="code" href="pch_8h.html">pch.h</a>"</span></div><div class="line"><a name="l00008"></a><span class="lineno"> 8</span> <span class="preprocessor">#include "<a class="code" href="config_8h.html">config.h</a>"</span></div><div class="line"><a name="l00009"></a><span class="lineno"> 9</span> </div><div class="line"><a name="l00010"></a><span class="lineno"> 10</span> <span class="preprocessor">#include "<a class="code" href="sm4_8h.html">sm4.h</a>"</span></div><div class="line"><a name="l00011"></a><span class="lineno"> 11</span> <span class="preprocessor">#include "<a class="code" href="misc_8h.html">misc.h</a>"</span></div><div class="line"><a name="l00012"></a><span class="lineno"> 12</span> <span class="preprocessor">#include "<a class="code" href="cpu_8h.html">cpu.h</a>"</span></div><div class="line"><a name="l00013"></a><span class="lineno"> 13</span> </div><div class="line"><a name="l00014"></a><span class="lineno"> 14</span> ANONYMOUS_NAMESPACE_BEGIN</div><div class="line"><a name="l00015"></a><span class="lineno"> 15</span> </div><div class="line"><a name="l00016"></a><span class="lineno"> 16</span> <span class="keyword">using</span> CryptoPP::byte;</div><div class="line"><a name="l00017"></a><span class="lineno"> 17</span> <span class="keyword">using</span> CryptoPP::word32;</div><div class="line"><a name="l00018"></a><span class="lineno"> 18</span> <span class="keyword">using</span> <a class="code" href="misc_8h.html#a0ab6928faa40f6e56e7f4817d5d65a38">CryptoPP::rotlConstant</a>;</div><div class="line"><a name="l00019"></a><span class="lineno"> 19</span> </div><div class="line"><a name="l00020"></a><span class="lineno"> 20</span> <span class="keyword">const</span> byte S[256] =</div><div class="line"><a name="l00021"></a><span class="lineno"> 21</span> {</div><div class="line"><a name="l00022"></a><span class="lineno"> 22</span>  0xD6, 0x90, 0xE9, 0xFE, 0xCC, 0xE1, 0x3D, 0xB7, 0x16, 0xB6, 0x14, 0xC2, 0x28, 0xFB, 0x2C, 0x05,</div><div class="line"><a name="l00023"></a><span class="lineno"> 23</span>  0x2B, 0x67, 0x9A, 0x76, 0x2A, 0xBE, 0x04, 0xC3, 0xAA, 0x44, 0x13, 0x26, 0x49, 0x86, 0x06, 0x99,</div><div class="line"><a name="l00024"></a><span class="lineno"> 24</span>  0x9C, 0x42, 0x50, 0xF4, 0x91, 0xEF, 0x98, 0x7A, 0x33, 0x54, 0x0B, 0x43, 0xED, 0xCF, 0xAC, 0x62,</div><div class="line"><a name="l00025"></a><span class="lineno"> 25</span>  0xE4, 0xB3, 0x1C, 0xA9, 0xC9, 0x08, 0xE8, 0x95, 0x80, 0xDF, 0x94, 0xFA, 0x75, 0x8F, 0x3F, 0xA6,</div><div class="line"><a name="l00026"></a><span class="lineno"> 26</span>  0x47, 0x07, 0xA7, 0xFC, 0xF3, 0x73, 0x17, 0xBA, 0x83, 0x59, 0x3C, 0x19, 0xE6, 0x85, 0x4F, 0xA8,</div><div class="line"><a name="l00027"></a><span class="lineno"> 27</span>  0x68, 0x6B, 0x81, 0xB2, 0x71, 0x64, 0xDA, 0x8B, 0xF8, 0xEB, 0x0F, 0x4B, 0x70, 0x56, 0x9D, 0x35,</div><div class="line"><a name="l00028"></a><span class="lineno"> 28</span>  0x1E, 0x24, 0x0E, 0x5E, 0x63, 0x58, 0xD1, 0xA2, 0x25, 0x22, 0x7C, 0x3B, 0x01, 0x21, 0x78, 0x87,</div><div class="line"><a name="l00029"></a><span class="lineno"> 29</span>  0xD4, 0x00, 0x46, 0x57, 0x9F, 0xD3, 0x27, 0x52, 0x4C, 0x36, 0x02, 0xE7, 0xA0, 0xC4, 0xC8, 0x9E,</div><div class="line"><a name="l00030"></a><span class="lineno"> 30</span>  0xEA, 0xBF, 0x8A, 0xD2, 0x40, 0xC7, 0x38, 0xB5, 0xA3, 0xF7, 0xF2, 0xCE, 0xF9, 0x61, 0x15, 0xA1,</div><div class="line"><a name="l00031"></a><span class="lineno"> 31</span>  0xE0, 0xAE, 0x5D, 0xA4, 0x9B, 0x34, 0x1A, 0x55, 0xAD, 0x93, 0x32, 0x30, 0xF5, 0x8C, 0xB1, 0xE3,</div><div class="line"><a name="l00032"></a><span class="lineno"> 32</span>  0x1D, 0xF6, 0xE2, 0x2E, 0x82, 0x66, 0xCA, 0x60, 0xC0, 0x29, 0x23, 0xAB, 0x0D, 0x53, 0x4E, 0x6F,</div><div class="line"><a name="l00033"></a><span class="lineno"> 33</span>  0xD5, 0xDB, 0x37, 0x45, 0xDE, 0xFD, 0x8E, 0x2F, 0x03, 0xFF, 0x6A, 0x72, 0x6D, 0x6C, 0x5B, 0x51,</div><div class="line"><a name="l00034"></a><span class="lineno"> 34</span>  0x8D, 0x1B, 0xAF, 0x92, 0xBB, 0xDD, 0xBC, 0x7F, 0x11, 0xD9, 0x5C, 0x41, 0x1F, 0x10, 0x5A, 0xD8,</div><div class="line"><a name="l00035"></a><span class="lineno"> 35</span>  0x0A, 0xC1, 0x31, 0x88, 0xA5, 0xCD, 0x7B, 0xBD, 0x2D, 0x74, 0xD0, 0x12, 0xB8, 0xE5, 0xB4, 0xB0,</div><div class="line"><a name="l00036"></a><span class="lineno"> 36</span>  0x89, 0x69, 0x97, 0x4A, 0x0C, 0x96, 0x77, 0x7E, 0x65, 0xB9, 0xF1, 0x09, 0xC5, 0x6E, 0xC6, 0x84,</div><div class="line"><a name="l00037"></a><span class="lineno"> 37</span>  0x18, 0xF0, 0x7D, 0xEC, 0x3A, 0xDC, 0x4D, 0x20, 0x79, 0xEE, 0x5F, 0x3E, 0xD7, 0xCB, 0x39, 0x48</div><div class="line"><a name="l00038"></a><span class="lineno"> 38</span> };</div><div class="line"><a name="l00039"></a><span class="lineno"> 39</span> </div><div class="line"><a name="l00040"></a><span class="lineno"> 40</span> <span class="keyword">const</span> word32 CK[32] =</div><div class="line"><a name="l00041"></a><span class="lineno"> 41</span> {</div><div class="line"><a name="l00042"></a><span class="lineno"> 42</span>  0x00070E15, 0x1C232A31, 0x383F464D, 0x545B6269,</div><div class="line"><a name="l00043"></a><span class="lineno"> 43</span>  0x70777E85, 0x8C939AA1, 0xA8AFB6BD, 0xC4CBD2D9,</div><div class="line"><a name="l00044"></a><span class="lineno"> 44</span>  0xE0E7EEF5, 0xFC030A11, 0x181F262D, 0x343B4249,</div><div class="line"><a name="l00045"></a><span class="lineno"> 45</span>  0x50575E65, 0x6C737A81, 0x888F969D, 0xA4ABB2B9,</div><div class="line"><a name="l00046"></a><span class="lineno"> 46</span>  0xC0C7CED5, 0xDCE3EAF1, 0xF8FF060D, 0x141B2229,</div><div class="line"><a name="l00047"></a><span class="lineno"> 47</span>  0x30373E45, 0x4C535A61, 0x686F767D, 0x848B9299,</div><div class="line"><a name="l00048"></a><span class="lineno"> 48</span>  0xA0A7AEB5, 0xBCC3CAD1, 0xD8DFE6ED, 0xF4FB0209,</div><div class="line"><a name="l00049"></a><span class="lineno"> 49</span>  0x10171E25, 0x2C333A41, 0x484F565D, 0x646B7279</div><div class="line"><a name="l00050"></a><span class="lineno"> 50</span> };</div><div class="line"><a name="l00051"></a><span class="lineno"> 51</span> </div><div class="line"><a name="l00052"></a><span class="lineno"> 52</span> <span class="keyword">inline</span> word32 SM4_H(word32 x)</div><div class="line"><a name="l00053"></a><span class="lineno"> 53</span> {</div><div class="line"><a name="l00054"></a><span class="lineno"> 54</span>  <span class="keywordflow">return</span> (S[GETBYTE(x, 3)] << 24) | (S[GETBYTE(x, 2)] << 16) | (S[GETBYTE(x, 1)] << 8) | (S[GETBYTE(x, 0)]);</div><div class="line"><a name="l00055"></a><span class="lineno"> 55</span> }</div><div class="line"><a name="l00056"></a><span class="lineno"> 56</span> </div><div class="line"><a name="l00057"></a><span class="lineno"> 57</span> <span class="keyword">inline</span> word32 SM4_G(word32 x)</div><div class="line"><a name="l00058"></a><span class="lineno"> 58</span> {</div><div class="line"><a name="l00059"></a><span class="lineno"> 59</span>  <span class="keyword">const</span> word32 t = SM4_H(x);</div><div class="line"><a name="l00060"></a><span class="lineno"> 60</span>  <span class="keywordflow">return</span> t ^ rotlConstant<13>(t) ^ rotlConstant<23>(t);</div><div class="line"><a name="l00061"></a><span class="lineno"> 61</span> }</div><div class="line"><a name="l00062"></a><span class="lineno"> 62</span> </div><div class="line"><a name="l00063"></a><span class="lineno"> 63</span> <span class="keyword">inline</span> word32 SM4_F(word32 x)</div><div class="line"><a name="l00064"></a><span class="lineno"> 64</span> {</div><div class="line"><a name="l00065"></a><span class="lineno"> 65</span>  <span class="keyword">const</span> word32 t = SM4_H(x);</div><div class="line"><a name="l00066"></a><span class="lineno"> 66</span>  <span class="keywordflow">return</span> t ^ rotlConstant<2>(t) ^ rotlConstant<10>(t) ^ rotlConstant<18>(t) ^ rotlConstant<24>(t);</div><div class="line"><a name="l00067"></a><span class="lineno"> 67</span> }</div><div class="line"><a name="l00068"></a><span class="lineno"> 68</span> </div><div class="line"><a name="l00069"></a><span class="lineno"> 69</span> <span class="keyword">template</span> <<span class="keywordtype">unsigned</span> <span class="keywordtype">int</span> R, <span class="keywordtype">bool</span> FWD></div><div class="line"><a name="l00070"></a><span class="lineno"> 70</span> <span class="keyword">inline</span> <span class="keywordtype">void</span> SM4_Round(word32 wspace[4], <span class="keyword">const</span> word32 rkeys[32])</div><div class="line"><a name="l00071"></a><span class="lineno"> 71</span> {</div><div class="line"><a name="l00072"></a><span class="lineno"> 72</span>  <span class="keywordflow">if</span> (FWD)</div><div class="line"><a name="l00073"></a><span class="lineno"> 73</span>  {</div><div class="line"><a name="l00074"></a><span class="lineno"> 74</span>  wspace[0] ^= SM4_F(wspace[1] ^ wspace[2] ^ wspace[3] ^ rkeys[R+0]);</div><div class="line"><a name="l00075"></a><span class="lineno"> 75</span>  wspace[1] ^= SM4_F(wspace[0] ^ wspace[2] ^ wspace[3] ^ rkeys[R+1]);</div><div class="line"><a name="l00076"></a><span class="lineno"> 76</span>  wspace[2] ^= SM4_F(wspace[0] ^ wspace[1] ^ wspace[3] ^ rkeys[R+2]);</div><div class="line"><a name="l00077"></a><span class="lineno"> 77</span>  wspace[3] ^= SM4_F(wspace[0] ^ wspace[1] ^ wspace[2] ^ rkeys[R+3]);</div><div class="line"><a name="l00078"></a><span class="lineno"> 78</span>  }</div><div class="line"><a name="l00079"></a><span class="lineno"> 79</span>  <span class="keywordflow">else</span></div><div class="line"><a name="l00080"></a><span class="lineno"> 80</span>  {</div><div class="line"><a name="l00081"></a><span class="lineno"> 81</span>  wspace[0] ^= SM4_F(wspace[1] ^ wspace[2] ^ wspace[3] ^ rkeys[R-0]);</div><div class="line"><a name="l00082"></a><span class="lineno"> 82</span>  wspace[1] ^= SM4_F(wspace[0] ^ wspace[2] ^ wspace[3] ^ rkeys[R-1]);</div><div class="line"><a name="l00083"></a><span class="lineno"> 83</span>  wspace[2] ^= SM4_F(wspace[0] ^ wspace[1] ^ wspace[3] ^ rkeys[R-2]);</div><div class="line"><a name="l00084"></a><span class="lineno"> 84</span>  wspace[3] ^= SM4_F(wspace[0] ^ wspace[1] ^ wspace[2] ^ rkeys[R-3]);</div><div class="line"><a name="l00085"></a><span class="lineno"> 85</span>  }</div><div class="line"><a name="l00086"></a><span class="lineno"> 86</span> }</div><div class="line"><a name="l00087"></a><span class="lineno"> 87</span> </div><div class="line"><a name="l00088"></a><span class="lineno"> 88</span> ANONYMOUS_NAMESPACE_END</div><div class="line"><a name="l00089"></a><span class="lineno"> 89</span> </div><div class="line"><a name="l00090"></a><span class="lineno"> 90</span> NAMESPACE_BEGIN(<a class="code" href="namespace_crypto_p_p.html">CryptoPP</a>)</div><div class="line"><a name="l00091"></a><span class="lineno"> 91</span> </div><div class="line"><a name="l00092"></a><span class="lineno"> 92</span> <span class="keywordtype">void</span> SM4::Base::UncheckedSetKey(<span class="keyword">const</span> byte *userKey, <span class="keywordtype">unsigned</span> <span class="keywordtype">int</span> keyLength, <span class="keyword">const</span> <a class="code" href="class_name_value_pairs.html">NameValuePairs</a> &params)</div><div class="line"><a name="l00093"></a><span class="lineno"> 93</span> {</div><div class="line"><a name="l00094"></a><span class="lineno"> 94</span>  <a class="code" href="trap_8h.html#adf3b392588bc94cbeae9f415a78c7b95">CRYPTOPP_ASSERT</a>(keyLength == 16);</div><div class="line"><a name="l00095"></a><span class="lineno"> 95</span>  CRYPTOPP_UNUSED(params);</div><div class="line"><a name="l00096"></a><span class="lineno"> 96</span> </div><div class="line"><a name="l00097"></a><span class="lineno"> 97</span>  m_rkeys.<a class="code" href="class_sec_block.html#a90d46e577c951d81a2d25a4742a3e979">New</a>(32);</div><div class="line"><a name="l00098"></a><span class="lineno"> 98</span>  m_wspace.<a class="code" href="class_sec_block.html#a90d46e577c951d81a2d25a4742a3e979">New</a>(5);</div><div class="line"><a name="l00099"></a><span class="lineno"> 99</span> </div><div class="line"><a name="l00100"></a><span class="lineno"> 100</span>  GetUserKey(<a class="code" href="cryptlib_8h.html#aaeb92d42f5a6e27b8ba19f18d69d142baf0c3bb6c718cc7ff0bffef4e8f178c57">BIG_ENDIAN_ORDER</a>, m_wspace.<a class="code" href="class_sec_block.html#a11a05906688172579cd3520816799446">begin</a>(), 4, userKey, keyLength);</div><div class="line"><a name="l00101"></a><span class="lineno"> 101</span>  m_wspace[0] ^= 0xa3b1bac6; m_wspace[1] ^= 0x56aa3350;</div><div class="line"><a name="l00102"></a><span class="lineno"> 102</span>  m_wspace[2] ^= 0x677d9197; m_wspace[3] ^= 0xb27022dc;</div><div class="line"><a name="l00103"></a><span class="lineno"> 103</span> </div><div class="line"><a name="l00104"></a><span class="lineno"> 104</span>  <span class="keywordtype">size_t</span> i=0;</div><div class="line"><a name="l00105"></a><span class="lineno"> 105</span>  <span class="keywordflow">do</span></div><div class="line"><a name="l00106"></a><span class="lineno"> 106</span>  {</div><div class="line"><a name="l00107"></a><span class="lineno"> 107</span>  m_rkeys[i] = (m_wspace[0] ^= SM4_G(m_wspace[1] ^ m_wspace[2] ^ m_wspace[3] ^ CK[i])); i++;</div><div class="line"><a name="l00108"></a><span class="lineno"> 108</span>  m_rkeys[i] = (m_wspace[1] ^= SM4_G(m_wspace[2] ^ m_wspace[3] ^ m_wspace[0] ^ CK[i])); i++;</div><div class="line"><a name="l00109"></a><span class="lineno"> 109</span>  m_rkeys[i] = (m_wspace[2] ^= SM4_G(m_wspace[3] ^ m_wspace[0] ^ m_wspace[1] ^ CK[i])); i++;</div><div class="line"><a name="l00110"></a><span class="lineno"> 110</span>  m_rkeys[i] = (m_wspace[3] ^= SM4_G(m_wspace[0] ^ m_wspace[1] ^ m_wspace[2] ^ CK[i])); i++;</div><div class="line"><a name="l00111"></a><span class="lineno"> 111</span>  }</div><div class="line"><a name="l00112"></a><span class="lineno"> 112</span>  <span class="keywordflow">while</span> (i < 32);</div><div class="line"><a name="l00113"></a><span class="lineno"> 113</span> }</div><div class="line"><a name="l00114"></a><span class="lineno"> 114</span> </div><div class="line"><a name="l00115"></a><span class="lineno"> 115</span> <span class="keywordtype">void</span> SM4::Enc::ProcessAndXorBlock(<span class="keyword">const</span> byte *inBlock, <span class="keyword">const</span> byte *xorBlock, byte *outBlock)<span class="keyword"> const</span></div><div class="line"><a name="l00116"></a><span class="lineno"> 116</span> <span class="keyword"></span>{</div><div class="line"><a name="l00117"></a><span class="lineno"> 117</span>  <span class="comment">// Reverse bytes on LittleEndian; align pointer on BigEndian</span></div><div class="line"><a name="l00118"></a><span class="lineno"> 118</span>  <span class="keyword">typedef</span> <a class="code" href="class_get_block.html">GetBlock<word32, BigEndian, false></a> InBlock;</div><div class="line"><a name="l00119"></a><span class="lineno"> 119</span>  InBlock iblk(inBlock); iblk(m_wspace[0])(m_wspace[1])(m_wspace[2])(m_wspace[3]);</div><div class="line"><a name="l00120"></a><span class="lineno"> 120</span> </div><div class="line"><a name="l00121"></a><span class="lineno"> 121</span>  <span class="comment">// Timing attack countermeasure, see comments in Rijndael for more details.</span></div><div class="line"><a name="l00122"></a><span class="lineno"> 122</span>  <span class="comment">// The hardening does not materially affect benchmarks. SM4 runs at</span></div><div class="line"><a name="l00123"></a><span class="lineno"> 123</span>  <span class="comment">// 30.5 cpb on a Core i5 Skylake with and without the code below.</span></div><div class="line"><a name="l00124"></a><span class="lineno"> 124</span>  <span class="keyword">const</span> <span class="keywordtype">int</span> cacheLineSize = <a class="code" href="cpu_8h.html#a7c008779986afa9c0463b2bc8fe17042">GetCacheLineSize</a>();</div><div class="line"><a name="l00125"></a><span class="lineno"> 125</span>  <span class="keyword">volatile</span> word32 _u = 0;</div><div class="line"><a name="l00126"></a><span class="lineno"> 126</span>  word32 u = _u;</div><div class="line"><a name="l00127"></a><span class="lineno"> 127</span> </div><div class="line"><a name="l00128"></a><span class="lineno"> 128</span>  <span class="keywordflow">for</span> (<span class="keywordtype">unsigned</span> <span class="keywordtype">int</span> i=0; i<<span class="keyword">sizeof</span>(S); i+=cacheLineSize)</div><div class="line"><a name="l00129"></a><span class="lineno"> 129</span>  u |= *(<span class="keyword">const</span> word32 *)(<span class="keywordtype">void</span>*)(S+i);</div><div class="line"><a name="l00130"></a><span class="lineno"> 130</span>  m_wspace[4] = u;</div><div class="line"><a name="l00131"></a><span class="lineno"> 131</span> </div><div class="line"><a name="l00132"></a><span class="lineno"> 132</span>  SM4_Round< 0, true>(m_wspace, m_rkeys);</div><div class="line"><a name="l00133"></a><span class="lineno"> 133</span>  SM4_Round< 4, true>(m_wspace, m_rkeys);</div><div class="line"><a name="l00134"></a><span class="lineno"> 134</span>  SM4_Round< 8, true>(m_wspace, m_rkeys);</div><div class="line"><a name="l00135"></a><span class="lineno"> 135</span>  SM4_Round<12, true>(m_wspace, m_rkeys);</div><div class="line"><a name="l00136"></a><span class="lineno"> 136</span>  SM4_Round<16, true>(m_wspace, m_rkeys);</div><div class="line"><a name="l00137"></a><span class="lineno"> 137</span>  SM4_Round<20, true>(m_wspace, m_rkeys);</div><div class="line"><a name="l00138"></a><span class="lineno"> 138</span>  SM4_Round<24, true>(m_wspace, m_rkeys);</div><div class="line"><a name="l00139"></a><span class="lineno"> 139</span>  SM4_Round<28, true>(m_wspace, m_rkeys);</div><div class="line"><a name="l00140"></a><span class="lineno"> 140</span> </div><div class="line"><a name="l00141"></a><span class="lineno"> 141</span>  <span class="comment">// Reverse bytes on LittleEndian; align pointer on BigEndian</span></div><div class="line"><a name="l00142"></a><span class="lineno"> 142</span>  <span class="keyword">typedef</span> <a class="code" href="class_put_block.html">PutBlock<word32, BigEndian, false></a> OutBlock;</div><div class="line"><a name="l00143"></a><span class="lineno"> 143</span>  OutBlock oblk(xorBlock, outBlock); oblk(m_wspace[3])(m_wspace[2])(m_wspace[1])(m_wspace[0]);</div><div class="line"><a name="l00144"></a><span class="lineno"> 144</span> }</div><div class="line"><a name="l00145"></a><span class="lineno"> 145</span> </div><div class="line"><a name="l00146"></a><span class="lineno"> 146</span> <span class="keywordtype">void</span> SM4::Dec::ProcessAndXorBlock(<span class="keyword">const</span> byte *inBlock, <span class="keyword">const</span> byte *xorBlock, byte *outBlock)<span class="keyword"> const</span></div><div class="line"><a name="l00147"></a><span class="lineno"> 147</span> <span class="keyword"></span>{</div><div class="line"><a name="l00148"></a><span class="lineno"> 148</span>  <span class="comment">// Reverse bytes on LittleEndian; align pointer on BigEndian</span></div><div class="line"><a name="l00149"></a><span class="lineno"> 149</span>  <span class="keyword">typedef</span> <a class="code" href="class_get_block.html">GetBlock<word32, BigEndian, false></a> InBlock;</div><div class="line"><a name="l00150"></a><span class="lineno"> 150</span>  InBlock iblk(inBlock); iblk(m_wspace[0])(m_wspace[1])(m_wspace[2])(m_wspace[3]);</div><div class="line"><a name="l00151"></a><span class="lineno"> 151</span> </div><div class="line"><a name="l00152"></a><span class="lineno"> 152</span>  <span class="comment">// Timing attack countermeasure, see comments in Rijndael for more details.</span></div><div class="line"><a name="l00153"></a><span class="lineno"> 153</span>  <span class="comment">// The hardening does not materially affect benchmarks. SM4 runs at</span></div><div class="line"><a name="l00154"></a><span class="lineno"> 154</span>  <span class="comment">// 30.5 cpb on a Core i5 Skylake with and without the code below.</span></div><div class="line"><a name="l00155"></a><span class="lineno"> 155</span>  <span class="keyword">const</span> <span class="keywordtype">int</span> cacheLineSize = <a class="code" href="cpu_8h.html#a7c008779986afa9c0463b2bc8fe17042">GetCacheLineSize</a>();</div><div class="line"><a name="l00156"></a><span class="lineno"> 156</span>  <span class="keyword">volatile</span> word32 _u = 0;</div><div class="line"><a name="l00157"></a><span class="lineno"> 157</span>  word32 u = _u;</div><div class="line"><a name="l00158"></a><span class="lineno"> 158</span> </div><div class="line"><a name="l00159"></a><span class="lineno"> 159</span>  <span class="keywordflow">for</span> (<span class="keywordtype">unsigned</span> <span class="keywordtype">int</span> i=0; i<<span class="keyword">sizeof</span>(S); i+=cacheLineSize)</div><div class="line"><a name="l00160"></a><span class="lineno"> 160</span>  u |= *(<span class="keyword">const</span> word32 *)(<span class="keywordtype">void</span>*)(S+i);</div><div class="line"><a name="l00161"></a><span class="lineno"> 161</span>  m_wspace[4] = u;</div><div class="line"><a name="l00162"></a><span class="lineno"> 162</span> </div><div class="line"><a name="l00163"></a><span class="lineno"> 163</span>  SM4_Round<31, false>(m_wspace, m_rkeys);</div><div class="line"><a name="l00164"></a><span class="lineno"> 164</span>  SM4_Round<27, false>(m_wspace, m_rkeys);</div><div class="line"><a name="l00165"></a><span class="lineno"> 165</span>  SM4_Round<23, false>(m_wspace, m_rkeys);</div><div class="line"><a name="l00166"></a><span class="lineno"> 166</span>  SM4_Round<19, false>(m_wspace, m_rkeys);</div><div class="line"><a name="l00167"></a><span class="lineno"> 167</span>  SM4_Round<15, false>(m_wspace, m_rkeys);</div><div class="line"><a name="l00168"></a><span class="lineno"> 168</span>  SM4_Round<11, false>(m_wspace, m_rkeys);</div><div class="line"><a name="l00169"></a><span class="lineno"> 169</span>  SM4_Round< 7, false>(m_wspace, m_rkeys);</div><div class="line"><a name="l00170"></a><span class="lineno"> 170</span>  SM4_Round< 3, false>(m_wspace, m_rkeys);</div><div class="line"><a name="l00171"></a><span class="lineno"> 171</span> </div><div class="line"><a name="l00172"></a><span class="lineno"> 172</span>  <span class="comment">// Reverse bytes on LittleEndian; align pointer on BigEndian</span></div><div class="line"><a name="l00173"></a><span class="lineno"> 173</span>  <span class="keyword">typedef</span> <a class="code" href="class_put_block.html">PutBlock<word32, BigEndian, false></a> OutBlock;</div><div class="line"><a name="l00174"></a><span class="lineno"> 174</span>  OutBlock oblk(xorBlock, outBlock); oblk(m_wspace[3])(m_wspace[2])(m_wspace[1])(m_wspace[0]);</div><div class="line"><a name="l00175"></a><span class="lineno"> 175</span> }</div><div class="line"><a name="l00176"></a><span class="lineno"> 176</span> </div><div class="line"><a name="l00177"></a><span class="lineno"> 177</span> NAMESPACE_END</div><div class="ttc" id="misc_8h_html"><div class="ttname"><a href="misc_8h.html">misc.h</a></div><div class="ttdoc">Utility functions for the Crypto++ library. </div></div>
<div class="ttc" id="config_8h_html"><div class="ttname"><a href="config_8h.html">config.h</a></div><div class="ttdoc">Library configuration file. </div></div>
<div class="ttc" id="cpu_8h_html_a7c008779986afa9c0463b2bc8fe17042"><div class="ttname"><a href="cpu_8h.html#a7c008779986afa9c0463b2bc8fe17042">GetCacheLineSize</a></div><div class="ttdeci">int GetCacheLineSize()</div><div class="ttdoc">Provides the cache line size. </div><div class="ttdef"><b>Definition:</b> <a href="cpu_8h_source.html#l00298">cpu.h:298</a></div></div>
<div class="ttc" id="class_sec_block_html_a90d46e577c951d81a2d25a4742a3e979"><div class="ttname"><a href="class_sec_block.html#a90d46e577c951d81a2d25a4742a3e979">SecBlock::New</a></div><div class="ttdeci">void New(size_type newSize)</div><div class="ttdoc">Change size without preserving contents. </div><div class="ttdef"><b>Definition:</b> <a href="secblock_8h_source.html#l00729">secblock.h:729</a></div></div>
<div class="ttc" id="misc_8h_html_a0ab6928faa40f6e56e7f4817d5d65a38"><div class="ttname"><a href="misc_8h.html#a0ab6928faa40f6e56e7f4817d5d65a38">rotlConstant</a></div><div class="ttdeci">T rotlConstant(T x)</div><div class="ttdoc">Performs a left rotate. </div><div class="ttdef"><b>Definition:</b> <a href="misc_8h_source.html#l01365">misc.h:1365</a></div></div>
<div class="ttc" id="pch_8h_html"><div class="ttname"><a href="pch_8h.html">pch.h</a></div><div class="ttdoc">Precompiled header file. </div></div>
<div class="ttc" id="cryptlib_8h_html_aaeb92d42f5a6e27b8ba19f18d69d142baf0c3bb6c718cc7ff0bffef4e8f178c57"><div class="ttname"><a href="cryptlib_8h.html#aaeb92d42f5a6e27b8ba19f18d69d142baf0c3bb6c718cc7ff0bffef4e8f178c57">BIG_ENDIAN_ORDER</a></div><div class="ttdoc">byte order is big-endian </div><div class="ttdef"><b>Definition:</b> <a href="cryptlib_8h_source.html#l00144">cryptlib.h:144</a></div></div>
<div class="ttc" id="trap_8h_html_adf3b392588bc94cbeae9f415a78c7b95"><div class="ttname"><a href="trap_8h.html#adf3b392588bc94cbeae9f415a78c7b95">CRYPTOPP_ASSERT</a></div><div class="ttdeci">#define CRYPTOPP_ASSERT(exp)</div><div class="ttdoc">Debugging and diagnostic assertion. </div><div class="ttdef"><b>Definition:</b> <a href="trap_8h_source.html#l00060">trap.h:60</a></div></div>
<div class="ttc" id="cpu_8h_html"><div class="ttname"><a href="cpu_8h.html">cpu.h</a></div><div class="ttdoc">Functions for CPU features and intrinsics. </div></div>
<div class="ttc" id="class_sec_block_html_a11a05906688172579cd3520816799446"><div class="ttname"><a href="class_sec_block.html#a11a05906688172579cd3520816799446">SecBlock::begin</a></div><div class="ttdeci">iterator begin()</div><div class="ttdoc">Provides an iterator pointing to the first element in the memory block. </div><div class="ttdef"><b>Definition:</b> <a href="secblock_8h_source.html#l00536">secblock.h:536</a></div></div>
<div class="ttc" id="sm4_8h_html"><div class="ttname"><a href="sm4_8h.html">sm4.h</a></div><div class="ttdoc">Classes for the SM4 block cipher. </div></div>
<div class="ttc" id="class_get_block_html"><div class="ttname"><a href="class_get_block.html">GetBlock</a></div><div class="ttdoc">Access a block of memory. </div><div class="ttdef"><b>Definition:</b> <a href="misc_8h_source.html#l02324">misc.h:2324</a></div></div>
<div class="ttc" id="class_put_block_html"><div class="ttname"><a href="class_put_block.html">PutBlock</a></div><div class="ttdoc">Access a block of memory. </div><div class="ttdef"><b>Definition:</b> <a href="misc_8h_source.html#l02365">misc.h:2365</a></div></div>
<div class="ttc" id="namespace_crypto_p_p_html"><div class="ttname"><a href="namespace_crypto_p_p.html">CryptoPP</a></div><div class="ttdoc">Crypto++ library namespace. </div></div>
<div class="ttc" id="class_name_value_pairs_html"><div class="ttname"><a href="class_name_value_pairs.html">NameValuePairs</a></div><div class="ttdoc">Interface for retrieving values given their names. </div><div class="ttdef"><b>Definition:</b> <a href="cryptlib_8h_source.html#l00290">cryptlib.h:290</a></div></div>
</div><!-- fragment --></div><!-- contents -->
<!-- start footer part -->
<hr class="footer"/><address class="footer"><small>
Generated on Sun Sep 16 2018 07:58:05 for Crypto++ by  <a href="http://www.doxygen.org/index.html">
<img class="footer" src="doxygen.png" alt="doxygen"/>
</a> 1.8.14
</small></address>
</body>
</html>
distrib
>
Mageia
>
7
>
armv7hl
>
media
>
core-release
>
by-pkgid
>
0a67b807a02637f2cae68649d519a89d
>
files
>
2606
