/* MIT * * Copyright (c) 2019 Gaƫtan Cassiers * * Permission is hereby granted, free of charge, to any person obtaining a copy * of this software and associated documentation files (the "Software"), to deal * in the Software without restriction, including without limitation the rights * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell * copies of the Software, and to permit persons to whom the Software is * furnished to do so, subject to the following conditions: * * The above copyright notice and this permission notice shall be included in all * copies or substantial portions of the Software. * * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE * SOFTWARE. */ #include #include #include "primitives.h" #define SHADOW #include "primitives.c" #define CLYDE_128_NS 6 // Number of steps #define CLYDE_128_NR 2 * CLYDE_128_NS // Number of rounds #define SHADOW_NS 6 // Number of steps #define SHADOW_NR 2 * SHADOW_NS // Number of roundsv void shadow(shadow_state state) { uint32_t lfsr =0xf8737400; // LFSR for round constant set_poly_xtime(0x101); set_poly_lfsr(0xc5); for (unsigned int s = 0; s < SHADOW_NS; s++) { #pragma GCC unroll 0 for (unsigned int b = 0; b < MLS_BUNDLES; b++){ sbox_layer(state[b]); lbox(&state[b][0], &state[b][1]); lbox(&state[b][2], &state[b][3]); state[b][1] ^= lfsr; lfsr = update_lfsr(lfsr); sbox_layer(state[b]); } dbox_mls_layer(state,&lfsr); } }