blob: b34dc5e7541e4270dd893907ae000b21737d534e [file] [log] [blame]
Paul Bakker5121ce52009-01-03 21:22:43 +00001/*
2 * An implementation of the ARCFOUR algorithm
3 *
Bence Szépkúti1e148272020-08-07 13:07:28 +02004 * Copyright The Mbed TLS Contributors
Manuel Pégourié-Gonnard37ff1402015-09-04 14:21:07 +02005 * SPDX-License-Identifier: Apache-2.0
6 *
7 * Licensed under the Apache License, Version 2.0 (the "License"); you may
8 * not use this file except in compliance with the License.
9 * You may obtain a copy of the License at
10 *
11 * http://www.apache.org/licenses/LICENSE-2.0
12 *
13 * Unless required by applicable law or agreed to in writing, software
14 * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
15 * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
16 * See the License for the specific language governing permissions and
17 * limitations under the License.
Paul Bakker5121ce52009-01-03 21:22:43 +000018 */
19/*
20 * The ARCFOUR algorithm was publicly disclosed on 94/09.
21 *
22 * http://groups.google.com/group/sci.crypt/msg/10a300c9d21afca0
23 */
24
Gilles Peskinedb09ef62020-06-03 01:43:33 +020025#include "common.h"
Paul Bakker5121ce52009-01-03 21:22:43 +000026
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020027#if defined(MBEDTLS_ARC4_C)
Paul Bakker5121ce52009-01-03 21:22:43 +000028
Manuel Pégourié-Gonnard7f809972015-03-09 17:05:11 +000029#include "mbedtls/arc4.h"
Andres Amaya Garcia1f6301b2018-04-17 09:51:09 -050030#include "mbedtls/platform_util.h"
Paul Bakker5121ce52009-01-03 21:22:43 +000031
Rich Evans00ab4702015-02-06 13:43:58 +000032#include <string.h>
33
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020034#if defined(MBEDTLS_SELF_TEST)
35#if defined(MBEDTLS_PLATFORM_C)
Manuel Pégourié-Gonnard7f809972015-03-09 17:05:11 +000036#include "mbedtls/platform.h"
Paul Bakker7dc4c442014-02-01 22:50:26 +010037#else
Rich Evans00ab4702015-02-06 13:43:58 +000038#include <stdio.h>
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020039#define mbedtls_printf printf
40#endif /* MBEDTLS_PLATFORM_C */
41#endif /* MBEDTLS_SELF_TEST */
Paul Bakker7dc4c442014-02-01 22:50:26 +010042
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020043#if !defined(MBEDTLS_ARC4_ALT)
Paul Bakker90995b52013-06-24 19:20:35 +020044
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020045void mbedtls_arc4_init( mbedtls_arc4_context *ctx )
Paul Bakkerc7ea99a2014-06-18 11:12:03 +020046{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020047 memset( ctx, 0, sizeof( mbedtls_arc4_context ) );
Paul Bakkerc7ea99a2014-06-18 11:12:03 +020048}
49
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020050void mbedtls_arc4_free( mbedtls_arc4_context *ctx )
Paul Bakkerc7ea99a2014-06-18 11:12:03 +020051{
52 if( ctx == NULL )
53 return;
54
Andres Amaya Garcia1f6301b2018-04-17 09:51:09 -050055 mbedtls_platform_zeroize( ctx, sizeof( mbedtls_arc4_context ) );
Paul Bakkerc7ea99a2014-06-18 11:12:03 +020056}
57
Paul Bakker5121ce52009-01-03 21:22:43 +000058/*
59 * ARC4 key schedule
60 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020061void mbedtls_arc4_setup( mbedtls_arc4_context *ctx, const unsigned char *key,
Paul Bakkerb9e4e2c2014-05-01 14:18:25 +020062 unsigned int keylen )
Paul Bakker5121ce52009-01-03 21:22:43 +000063{
Paul Bakker23986e52011-04-24 08:57:21 +000064 int i, j, a;
65 unsigned int k;
Paul Bakker5121ce52009-01-03 21:22:43 +000066 unsigned char *m;
67
68 ctx->x = 0;
69 ctx->y = 0;
70 m = ctx->m;
71
72 for( i = 0; i < 256; i++ )
73 m[i] = (unsigned char) i;
74
75 j = k = 0;
76
77 for( i = 0; i < 256; i++, k++ )
78 {
79 if( k >= keylen ) k = 0;
80
81 a = m[i];
82 j = ( j + a + key[k] ) & 0xFF;
83 m[i] = m[j];
84 m[j] = (unsigned char) a;
85 }
86}
87
88/*
89 * ARC4 cipher function
90 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020091int mbedtls_arc4_crypt( mbedtls_arc4_context *ctx, size_t length, const unsigned char *input,
Paul Bakkerbaad6502010-03-21 15:42:15 +000092 unsigned char *output )
Paul Bakker5121ce52009-01-03 21:22:43 +000093{
Paul Bakker23986e52011-04-24 08:57:21 +000094 int x, y, a, b;
95 size_t i;
Paul Bakker5121ce52009-01-03 21:22:43 +000096 unsigned char *m;
97
98 x = ctx->x;
99 y = ctx->y;
100 m = ctx->m;
101
Paul Bakkerbaad6502010-03-21 15:42:15 +0000102 for( i = 0; i < length; i++ )
Paul Bakker5121ce52009-01-03 21:22:43 +0000103 {
104 x = ( x + 1 ) & 0xFF; a = m[x];
105 y = ( y + a ) & 0xFF; b = m[y];
106
107 m[x] = (unsigned char) b;
108 m[y] = (unsigned char) a;
109
Paul Bakkerbaad6502010-03-21 15:42:15 +0000110 output[i] = (unsigned char)
111 ( input[i] ^ m[(unsigned char)( a + b )] );
Paul Bakker5121ce52009-01-03 21:22:43 +0000112 }
113
114 ctx->x = x;
115 ctx->y = y;
Paul Bakkerf3ccc682010-03-18 21:21:02 +0000116
117 return( 0 );
Paul Bakker5121ce52009-01-03 21:22:43 +0000118}
119
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200120#endif /* !MBEDTLS_ARC4_ALT */
Paul Bakker90995b52013-06-24 19:20:35 +0200121
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200122#if defined(MBEDTLS_SELF_TEST)
Paul Bakker5121ce52009-01-03 21:22:43 +0000123/*
124 * ARC4 tests vectors as posted by Eric Rescorla in sep. 1994:
125 *
126 * http://groups.google.com/group/comp.security.misc/msg/10a300c9d21afca0
127 */
128static const unsigned char arc4_test_key[3][8] =
129{
130 { 0x01, 0x23, 0x45, 0x67, 0x89, 0xAB, 0xCD, 0xEF },
131 { 0x01, 0x23, 0x45, 0x67, 0x89, 0xAB, 0xCD, 0xEF },
132 { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 }
133};
134
135static const unsigned char arc4_test_pt[3][8] =
136{
137 { 0x01, 0x23, 0x45, 0x67, 0x89, 0xAB, 0xCD, 0xEF },
138 { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
139 { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 }
140};
141
142static const unsigned char arc4_test_ct[3][8] =
143{
144 { 0x75, 0xB7, 0x87, 0x80, 0x99, 0xE0, 0xC5, 0x96 },
145 { 0x74, 0x94, 0xC2, 0xE7, 0x10, 0x4B, 0x08, 0x79 },
146 { 0xDE, 0x18, 0x89, 0x41, 0xA3, 0x37, 0x5D, 0x3A }
147};
148
149/*
150 * Checkup routine
151 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200152int mbedtls_arc4_self_test( int verbose )
Paul Bakker5121ce52009-01-03 21:22:43 +0000153{
Paul Bakkerc7ea99a2014-06-18 11:12:03 +0200154 int i, ret = 0;
Paul Bakkerbaad6502010-03-21 15:42:15 +0000155 unsigned char ibuf[8];
156 unsigned char obuf[8];
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200157 mbedtls_arc4_context ctx;
Paul Bakker5121ce52009-01-03 21:22:43 +0000158
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200159 mbedtls_arc4_init( &ctx );
Paul Bakkerc7ea99a2014-06-18 11:12:03 +0200160
Paul Bakker5121ce52009-01-03 21:22:43 +0000161 for( i = 0; i < 3; i++ )
162 {
163 if( verbose != 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200164 mbedtls_printf( " ARC4 test #%d: ", i + 1 );
Paul Bakker5121ce52009-01-03 21:22:43 +0000165
Paul Bakkerbaad6502010-03-21 15:42:15 +0000166 memcpy( ibuf, arc4_test_pt[i], 8 );
Paul Bakker5121ce52009-01-03 21:22:43 +0000167
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200168 mbedtls_arc4_setup( &ctx, arc4_test_key[i], 8 );
169 mbedtls_arc4_crypt( &ctx, 8, ibuf, obuf );
Paul Bakker5121ce52009-01-03 21:22:43 +0000170
Paul Bakkerbaad6502010-03-21 15:42:15 +0000171 if( memcmp( obuf, arc4_test_ct[i], 8 ) != 0 )
Paul Bakker5121ce52009-01-03 21:22:43 +0000172 {
173 if( verbose != 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200174 mbedtls_printf( "failed\n" );
Paul Bakker5121ce52009-01-03 21:22:43 +0000175
Paul Bakkerc7ea99a2014-06-18 11:12:03 +0200176 ret = 1;
177 goto exit;
Paul Bakker5121ce52009-01-03 21:22:43 +0000178 }
179
180 if( verbose != 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200181 mbedtls_printf( "passed\n" );
Paul Bakker5121ce52009-01-03 21:22:43 +0000182 }
183
184 if( verbose != 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200185 mbedtls_printf( "\n" );
Paul Bakker5121ce52009-01-03 21:22:43 +0000186
Paul Bakkerc7ea99a2014-06-18 11:12:03 +0200187exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200188 mbedtls_arc4_free( &ctx );
Paul Bakkerc7ea99a2014-06-18 11:12:03 +0200189
190 return( ret );
Paul Bakker5121ce52009-01-03 21:22:43 +0000191}
192
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200193#endif /* MBEDTLS_SELF_TEST */
Paul Bakker5121ce52009-01-03 21:22:43 +0000194
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200195#endif /* MBEDTLS_ARC4_C */