| Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 1 | /* | 
|  | 2 | *  An implementation of the ARCFOUR algorithm | 
|  | 3 | * | 
| Bence Szépkúti | 1e14827 | 2020-08-07 13:07:28 +0200 | [diff] [blame] | 4 | *  Copyright The Mbed TLS Contributors | 
| Manuel Pégourié-Gonnard | 37ff140 | 2015-09-04 14:21:07 +0200 | [diff] [blame] | 5 | *  SPDX-License-Identifier: Apache-2.0 | 
|  | 6 | * | 
|  | 7 | *  Licensed under the Apache License, Version 2.0 (the "License"); you may | 
|  | 8 | *  not use this file except in compliance with the License. | 
|  | 9 | *  You may obtain a copy of the License at | 
|  | 10 | * | 
|  | 11 | *  http://www.apache.org/licenses/LICENSE-2.0 | 
|  | 12 | * | 
|  | 13 | *  Unless required by applicable law or agreed to in writing, software | 
|  | 14 | *  distributed under the License is distributed on an "AS IS" BASIS, WITHOUT | 
|  | 15 | *  WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. | 
|  | 16 | *  See the License for the specific language governing permissions and | 
|  | 17 | *  limitations under the License. | 
| Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 18 | */ | 
|  | 19 | /* | 
|  | 20 | *  The ARCFOUR algorithm was publicly disclosed on 94/09. | 
|  | 21 | * | 
|  | 22 | *  http://groups.google.com/group/sci.crypt/msg/10a300c9d21afca0 | 
|  | 23 | */ | 
|  | 24 |  | 
| Gilles Peskine | db09ef6 | 2020-06-03 01:43:33 +0200 | [diff] [blame] | 25 | #include "common.h" | 
| Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 26 |  | 
| Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 27 | #if defined(MBEDTLS_ARC4_C) | 
| Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 28 |  | 
| Manuel Pégourié-Gonnard | 7f80997 | 2015-03-09 17:05:11 +0000 | [diff] [blame] | 29 | #include "mbedtls/arc4.h" | 
| Andres Amaya Garcia | 1f6301b | 2018-04-17 09:51:09 -0500 | [diff] [blame] | 30 | #include "mbedtls/platform_util.h" | 
| Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 31 |  | 
| Rich Evans | 00ab470 | 2015-02-06 13:43:58 +0000 | [diff] [blame] | 32 | #include <string.h> | 
|  | 33 |  | 
| Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 34 | #if defined(MBEDTLS_SELF_TEST) | 
|  | 35 | #if defined(MBEDTLS_PLATFORM_C) | 
| Manuel Pégourié-Gonnard | 7f80997 | 2015-03-09 17:05:11 +0000 | [diff] [blame] | 36 | #include "mbedtls/platform.h" | 
| Paul Bakker | 7dc4c44 | 2014-02-01 22:50:26 +0100 | [diff] [blame] | 37 | #else | 
| Rich Evans | 00ab470 | 2015-02-06 13:43:58 +0000 | [diff] [blame] | 38 | #include <stdio.h> | 
| Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 39 | #define mbedtls_printf printf | 
|  | 40 | #endif /* MBEDTLS_PLATFORM_C */ | 
|  | 41 | #endif /* MBEDTLS_SELF_TEST */ | 
| Paul Bakker | 7dc4c44 | 2014-02-01 22:50:26 +0100 | [diff] [blame] | 42 |  | 
| Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 43 | #if !defined(MBEDTLS_ARC4_ALT) | 
| Paul Bakker | 90995b5 | 2013-06-24 19:20:35 +0200 | [diff] [blame] | 44 |  | 
| Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 45 | void mbedtls_arc4_init( mbedtls_arc4_context *ctx ) | 
| Paul Bakker | c7ea99a | 2014-06-18 11:12:03 +0200 | [diff] [blame] | 46 | { | 
| Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 47 | memset( ctx, 0, sizeof( mbedtls_arc4_context ) ); | 
| Paul Bakker | c7ea99a | 2014-06-18 11:12:03 +0200 | [diff] [blame] | 48 | } | 
|  | 49 |  | 
| Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 50 | void mbedtls_arc4_free( mbedtls_arc4_context *ctx ) | 
| Paul Bakker | c7ea99a | 2014-06-18 11:12:03 +0200 | [diff] [blame] | 51 | { | 
|  | 52 | if( ctx == NULL ) | 
|  | 53 | return; | 
|  | 54 |  | 
| Andres Amaya Garcia | 1f6301b | 2018-04-17 09:51:09 -0500 | [diff] [blame] | 55 | mbedtls_platform_zeroize( ctx, sizeof( mbedtls_arc4_context ) ); | 
| Paul Bakker | c7ea99a | 2014-06-18 11:12:03 +0200 | [diff] [blame] | 56 | } | 
|  | 57 |  | 
| Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 58 | /* | 
|  | 59 | * ARC4 key schedule | 
|  | 60 | */ | 
| Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 61 | void mbedtls_arc4_setup( mbedtls_arc4_context *ctx, const unsigned char *key, | 
| Paul Bakker | b9e4e2c | 2014-05-01 14:18:25 +0200 | [diff] [blame] | 62 | unsigned int keylen ) | 
| Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 63 | { | 
| Paul Bakker | 23986e5 | 2011-04-24 08:57:21 +0000 | [diff] [blame] | 64 | int i, j, a; | 
|  | 65 | unsigned int k; | 
| Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 66 | unsigned char *m; | 
|  | 67 |  | 
|  | 68 | ctx->x = 0; | 
|  | 69 | ctx->y = 0; | 
|  | 70 | m = ctx->m; | 
|  | 71 |  | 
|  | 72 | for( i = 0; i < 256; i++ ) | 
|  | 73 | m[i] = (unsigned char) i; | 
|  | 74 |  | 
|  | 75 | j = k = 0; | 
|  | 76 |  | 
|  | 77 | for( i = 0; i < 256; i++, k++ ) | 
|  | 78 | { | 
|  | 79 | if( k >= keylen ) k = 0; | 
|  | 80 |  | 
|  | 81 | a = m[i]; | 
|  | 82 | j = ( j + a + key[k] ) & 0xFF; | 
|  | 83 | m[i] = m[j]; | 
|  | 84 | m[j] = (unsigned char) a; | 
|  | 85 | } | 
|  | 86 | } | 
|  | 87 |  | 
|  | 88 | /* | 
|  | 89 | * ARC4 cipher function | 
|  | 90 | */ | 
| Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 91 | int mbedtls_arc4_crypt( mbedtls_arc4_context *ctx, size_t length, const unsigned char *input, | 
| Paul Bakker | baad650 | 2010-03-21 15:42:15 +0000 | [diff] [blame] | 92 | unsigned char *output ) | 
| Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 93 | { | 
| Paul Bakker | 23986e5 | 2011-04-24 08:57:21 +0000 | [diff] [blame] | 94 | int x, y, a, b; | 
|  | 95 | size_t i; | 
| Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 96 | unsigned char *m; | 
|  | 97 |  | 
|  | 98 | x = ctx->x; | 
|  | 99 | y = ctx->y; | 
|  | 100 | m = ctx->m; | 
|  | 101 |  | 
| Paul Bakker | baad650 | 2010-03-21 15:42:15 +0000 | [diff] [blame] | 102 | for( i = 0; i < length; i++ ) | 
| Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 103 | { | 
|  | 104 | x = ( x + 1 ) & 0xFF; a = m[x]; | 
|  | 105 | y = ( y + a ) & 0xFF; b = m[y]; | 
|  | 106 |  | 
|  | 107 | m[x] = (unsigned char) b; | 
|  | 108 | m[y] = (unsigned char) a; | 
|  | 109 |  | 
| Paul Bakker | baad650 | 2010-03-21 15:42:15 +0000 | [diff] [blame] | 110 | output[i] = (unsigned char) | 
|  | 111 | ( input[i] ^ m[(unsigned char)( a + b )] ); | 
| Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 112 | } | 
|  | 113 |  | 
|  | 114 | ctx->x = x; | 
|  | 115 | ctx->y = y; | 
| Paul Bakker | f3ccc68 | 2010-03-18 21:21:02 +0000 | [diff] [blame] | 116 |  | 
|  | 117 | return( 0 ); | 
| Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 118 | } | 
|  | 119 |  | 
| Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 120 | #endif /* !MBEDTLS_ARC4_ALT */ | 
| Paul Bakker | 90995b5 | 2013-06-24 19:20:35 +0200 | [diff] [blame] | 121 |  | 
| Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 122 | #if defined(MBEDTLS_SELF_TEST) | 
| Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 123 | /* | 
|  | 124 | * ARC4 tests vectors as posted by Eric Rescorla in sep. 1994: | 
|  | 125 | * | 
|  | 126 | * http://groups.google.com/group/comp.security.misc/msg/10a300c9d21afca0 | 
|  | 127 | */ | 
|  | 128 | static const unsigned char arc4_test_key[3][8] = | 
|  | 129 | { | 
|  | 130 | { 0x01, 0x23, 0x45, 0x67, 0x89, 0xAB, 0xCD, 0xEF }, | 
|  | 131 | { 0x01, 0x23, 0x45, 0x67, 0x89, 0xAB, 0xCD, 0xEF }, | 
|  | 132 | { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 } | 
|  | 133 | }; | 
|  | 134 |  | 
|  | 135 | static const unsigned char arc4_test_pt[3][8] = | 
|  | 136 | { | 
|  | 137 | { 0x01, 0x23, 0x45, 0x67, 0x89, 0xAB, 0xCD, 0xEF }, | 
|  | 138 | { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 }, | 
|  | 139 | { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 } | 
|  | 140 | }; | 
|  | 141 |  | 
|  | 142 | static const unsigned char arc4_test_ct[3][8] = | 
|  | 143 | { | 
|  | 144 | { 0x75, 0xB7, 0x87, 0x80, 0x99, 0xE0, 0xC5, 0x96 }, | 
|  | 145 | { 0x74, 0x94, 0xC2, 0xE7, 0x10, 0x4B, 0x08, 0x79 }, | 
|  | 146 | { 0xDE, 0x18, 0x89, 0x41, 0xA3, 0x37, 0x5D, 0x3A } | 
|  | 147 | }; | 
|  | 148 |  | 
|  | 149 | /* | 
|  | 150 | * Checkup routine | 
|  | 151 | */ | 
| Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 152 | int mbedtls_arc4_self_test( int verbose ) | 
| Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 153 | { | 
| Paul Bakker | c7ea99a | 2014-06-18 11:12:03 +0200 | [diff] [blame] | 154 | int i, ret = 0; | 
| Paul Bakker | baad650 | 2010-03-21 15:42:15 +0000 | [diff] [blame] | 155 | unsigned char ibuf[8]; | 
|  | 156 | unsigned char obuf[8]; | 
| Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 157 | mbedtls_arc4_context ctx; | 
| Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 158 |  | 
| Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 159 | mbedtls_arc4_init( &ctx ); | 
| Paul Bakker | c7ea99a | 2014-06-18 11:12:03 +0200 | [diff] [blame] | 160 |  | 
| Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 161 | for( i = 0; i < 3; i++ ) | 
|  | 162 | { | 
|  | 163 | if( verbose != 0 ) | 
| Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 164 | mbedtls_printf( "  ARC4 test #%d: ", i + 1 ); | 
| Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 165 |  | 
| Paul Bakker | baad650 | 2010-03-21 15:42:15 +0000 | [diff] [blame] | 166 | memcpy( ibuf, arc4_test_pt[i], 8 ); | 
| Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 167 |  | 
| Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 168 | mbedtls_arc4_setup( &ctx, arc4_test_key[i], 8 ); | 
|  | 169 | mbedtls_arc4_crypt( &ctx, 8, ibuf, obuf ); | 
| Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 170 |  | 
| Paul Bakker | baad650 | 2010-03-21 15:42:15 +0000 | [diff] [blame] | 171 | if( memcmp( obuf, arc4_test_ct[i], 8 ) != 0 ) | 
| Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 172 | { | 
|  | 173 | if( verbose != 0 ) | 
| Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 174 | mbedtls_printf( "failed\n" ); | 
| Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 175 |  | 
| Paul Bakker | c7ea99a | 2014-06-18 11:12:03 +0200 | [diff] [blame] | 176 | ret = 1; | 
|  | 177 | goto exit; | 
| Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 178 | } | 
|  | 179 |  | 
|  | 180 | if( verbose != 0 ) | 
| Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 181 | mbedtls_printf( "passed\n" ); | 
| Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 182 | } | 
|  | 183 |  | 
|  | 184 | if( verbose != 0 ) | 
| Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 185 | mbedtls_printf( "\n" ); | 
| Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 186 |  | 
| Paul Bakker | c7ea99a | 2014-06-18 11:12:03 +0200 | [diff] [blame] | 187 | exit: | 
| Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 188 | mbedtls_arc4_free( &ctx ); | 
| Paul Bakker | c7ea99a | 2014-06-18 11:12:03 +0200 | [diff] [blame] | 189 |  | 
|  | 190 | return( ret ); | 
| Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 191 | } | 
|  | 192 |  | 
| Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 193 | #endif /* MBEDTLS_SELF_TEST */ | 
| Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 194 |  | 
| Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 195 | #endif /* MBEDTLS_ARC4_C */ |