OpenCoverage

cts128.c

Absolute File Name:/home/opencoverage/opencoverage/guest-scripts/libressl/src/crypto/modes/cts128.c
Source codeSwitch to Preprocessed file
LineSourceCount
1/* $OpenBSD: cts128.c,v 1.5 2015/07/19 18:27:26 miod Exp $ */-
2/* ====================================================================-
3 * Copyright (c) 2008 The OpenSSL Project. All rights reserved.-
4 *-
5 * Rights for redistribution and usage in source and binary-
6 * forms are granted according to the OpenSSL license.-
7 */-
8-
9#include <openssl/crypto.h>-
10#include "modes_lcl.h"-
11#include <string.h>-
12-
13#ifndef MODES_DEBUG-
14# ifndef NDEBUG-
15# define NDEBUG-
16# endif-
17#endif-
18-
19/*-
20 * Trouble with Ciphertext Stealing, CTS, mode is that there is no-
21 * common official specification, but couple of cipher/application-
22 * specific ones: RFC2040 and RFC3962. Then there is 'Proposal to-
23 * Extend CBC Mode By "Ciphertext Stealing"' at NIST site, which-
24 * deviates from mentioned RFCs. Most notably it allows input to be-
25 * of block length and it doesn't flip the order of the last two-
26 * blocks. CTS is being discussed even in ECB context, but it's not-
27 * adopted for any known application. This implementation provides-
28 * two interfaces: one compliant with above mentioned RFCs and one-
29 * compliant with the NIST proposal, both extending CBC mode.-
30 */-
31-
32size_t CRYPTO_cts128_encrypt_block(const unsigned char *in, unsigned char *out,-
33 size_t len, const void *key,-
34 unsigned char ivec[16], block128_f block)-
35{ size_t residue, n;-
36-
37 if (len <= 16) return 0;
never executed: return 0;
len <= 16Description
TRUEnever evaluated
FALSEevaluated 6 times by 1 test
Evaluated by:
  • cts128test
0-6
38-
39 if ((residue=len%16) == 0) residue = 16;
executed 3 times by 1 test: residue = 16;
Executed by:
  • cts128test
(residue=len%16) == 0Description
TRUEevaluated 3 times by 1 test
Evaluated by:
  • cts128test
FALSEevaluated 3 times by 1 test
Evaluated by:
  • cts128test
3
40-
41 len -= residue;-
42-
43 CRYPTO_cbc128_encrypt(in,out,len,key,ivec,block);-
44-
45 in += len;-
46 out += len;-
47-
48 for (n=0; n<residue; ++n)
n<residueDescription
TRUEevaluated 79 times by 1 test
Evaluated by:
  • cts128test
FALSEevaluated 6 times by 1 test
Evaluated by:
  • cts128test
6-79
49 ivec[n] ^= in[n];
executed 79 times by 1 test: ivec[n] ^= in[n];
Executed by:
  • cts128test
79
50 (*block)(ivec,ivec,key);-
51 memcpy(out,out-16,residue);-
52 memcpy(out-16,ivec,16); -
53-
54 return len+residue;
executed 6 times by 1 test: return len+residue;
Executed by:
  • cts128test
6
55}-
56-
57size_t CRYPTO_nistcts128_encrypt_block(const unsigned char *in, unsigned char *out,-
58 size_t len, const void *key,-
59 unsigned char ivec[16], block128_f block)-
60{ size_t residue, n;-
61-
62 if (len < 16) return 0;
never executed: return 0;
len < 16Description
TRUEnever evaluated
FALSEevaluated 6 times by 1 test
Evaluated by:
  • cts128test
0-6
63-
64 residue=len%16;-
65-
66 len -= residue;-
67-
68 CRYPTO_cbc128_encrypt(in,out,len,key,ivec,block);-
69-
70 if (residue==0) return len;
executed 3 times by 1 test: return len;
Executed by:
  • cts128test
residue==0Description
TRUEevaluated 3 times by 1 test
Evaluated by:
  • cts128test
FALSEevaluated 3 times by 1 test
Evaluated by:
  • cts128test
3
71-
72 in += len;-
73 out += len;-
74-
75 for (n=0; n<residue; ++n)
n<residueDescription
TRUEevaluated 31 times by 1 test
Evaluated by:
  • cts128test
FALSEevaluated 3 times by 1 test
Evaluated by:
  • cts128test
3-31
76 ivec[n] ^= in[n];
executed 31 times by 1 test: ivec[n] ^= in[n];
Executed by:
  • cts128test
31
77 (*block)(ivec,ivec,key);-
78 memcpy(out-16+residue,ivec,16);-
79-
80 return len+residue;
executed 3 times by 1 test: return len+residue;
Executed by:
  • cts128test
3
81}-
82-
83size_t CRYPTO_cts128_encrypt(const unsigned char *in, unsigned char *out,-
84 size_t len, const void *key,-
85 unsigned char ivec[16], cbc128_f cbc)-
86{ size_t residue;-
87 union { size_t align; unsigned char c[16]; } tmp;-
88-
89 if (len <= 16) return 0;
never executed: return 0;
len <= 16Description
TRUEnever evaluated
FALSEevaluated 6 times by 1 test
Evaluated by:
  • cts128test
0-6
90-
91 if ((residue=len%16) == 0) residue = 16;
executed 3 times by 1 test: residue = 16;
Executed by:
  • cts128test
(residue=len%16) == 0Description
TRUEevaluated 3 times by 1 test
Evaluated by:
  • cts128test
FALSEevaluated 3 times by 1 test
Evaluated by:
  • cts128test
3
92-
93 len -= residue;-
94-
95 (*cbc)(in,out,len,key,ivec,1);-
96-
97 in += len;-
98 out += len;-
99-
100 memset(tmp.c,0,sizeof(tmp));-
101 memcpy(tmp.c,in,residue);-
102 memcpy(out,out-16,residue);-
103 (*cbc)(tmp.c,out-16,16,key,ivec,1);-
104 return len+residue;
executed 6 times by 1 test: return len+residue;
Executed by:
  • cts128test
6
105}-
106-
107size_t CRYPTO_nistcts128_encrypt(const unsigned char *in, unsigned char *out,-
108 size_t len, const void *key,-
109 unsigned char ivec[16], cbc128_f cbc)-
110{ size_t residue;-
111 union { size_t align; unsigned char c[16]; } tmp;-
112-
113 if (len < 16) return 0;
never executed: return 0;
len < 16Description
TRUEnever evaluated
FALSEevaluated 6 times by 1 test
Evaluated by:
  • cts128test
0-6
114-
115 residue=len%16;-
116-
117 len -= residue;-
118-
119 (*cbc)(in,out,len,key,ivec,1);-
120-
121 if (residue==0) return len;
executed 3 times by 1 test: return len;
Executed by:
  • cts128test
residue==0Description
TRUEevaluated 3 times by 1 test
Evaluated by:
  • cts128test
FALSEevaluated 3 times by 1 test
Evaluated by:
  • cts128test
3
122-
123 in += len;-
124 out += len;-
125-
126 memset(tmp.c,0,sizeof(tmp));-
127 memcpy(tmp.c,in,residue);-
128 (*cbc)(tmp.c,out-16+residue,16,key,ivec,1);-
129 return len+residue;
executed 3 times by 1 test: return len+residue;
Executed by:
  • cts128test
3
130}-
131-
132size_t CRYPTO_cts128_decrypt_block(const unsigned char *in, unsigned char *out,-
133 size_t len, const void *key,-
134 unsigned char ivec[16], block128_f block)-
135{ size_t residue, n;-
136 union { size_t align; unsigned char c[32]; } tmp;-
137-
138 if (len<=16) return 0;
never executed: return 0;
len<=16Description
TRUEnever evaluated
FALSEevaluated 6 times by 1 test
Evaluated by:
  • cts128test
0-6
139-
140 if ((residue=len%16) == 0) residue = 16;
executed 3 times by 1 test: residue = 16;
Executed by:
  • cts128test
(residue=len%16) == 0Description
TRUEevaluated 3 times by 1 test
Evaluated by:
  • cts128test
FALSEevaluated 3 times by 1 test
Evaluated by:
  • cts128test
3
141-
142 len -= 16+residue;-
143-
144 if (len) {
lenDescription
TRUEevaluated 3 times by 1 test
Evaluated by:
  • cts128test
FALSEevaluated 3 times by 1 test
Evaluated by:
  • cts128test
3
145 CRYPTO_cbc128_decrypt(in,out,len,key,ivec,block);-
146 in += len;-
147 out += len;-
148 }
executed 3 times by 1 test: end of block
Executed by:
  • cts128test
3
149-
150 (*block)(in,tmp.c+16,key);-
151-
152 memcpy(tmp.c,tmp.c+16,16);-
153 memcpy(tmp.c,in+16,residue);-
154 (*block)(tmp.c,tmp.c,key);-
155-
156 for(n=0; n<16; ++n) {
n<16Description
TRUEevaluated 96 times by 1 test
Evaluated by:
  • cts128test
FALSEevaluated 6 times by 1 test
Evaluated by:
  • cts128test
6-96
157 unsigned char c = in[n];-
158 out[n] = tmp.c[n] ^ ivec[n];-
159 ivec[n] = c;-
160 }
executed 96 times by 1 test: end of block
Executed by:
  • cts128test
96
161 for(residue+=16; n<residue; ++n)
n<residueDescription
TRUEevaluated 79 times by 1 test
Evaluated by:
  • cts128test
FALSEevaluated 6 times by 1 test
Evaluated by:
  • cts128test
6-79
162 out[n] = tmp.c[n] ^ in[n];
executed 79 times by 1 test: out[n] = tmp.c[n] ^ in[n];
Executed by:
  • cts128test
79
163-
164 return 16+len+residue;
executed 6 times by 1 test: return 16+len+residue;
Executed by:
  • cts128test
6
165}-
166-
167size_t CRYPTO_nistcts128_decrypt_block(const unsigned char *in, unsigned char *out,-
168 size_t len, const void *key,-
169 unsigned char ivec[16], block128_f block)-
170{ size_t residue, n;-
171 union { size_t align; unsigned char c[32]; } tmp;-
172-
173 if (len<16) return 0;
never executed: return 0;
len<16Description
TRUEnever evaluated
FALSEevaluated 6 times by 1 test
Evaluated by:
  • cts128test
0-6
174-
175 residue=len%16;-
176-
177 if (residue==0) {
residue==0Description
TRUEevaluated 3 times by 1 test
Evaluated by:
  • cts128test
FALSEevaluated 3 times by 1 test
Evaluated by:
  • cts128test
3
178 CRYPTO_cbc128_decrypt(in,out,len,key,ivec,block);-
179 return len;
executed 3 times by 1 test: return len;
Executed by:
  • cts128test
3
180 }-
181-
182 len -= 16+residue;-
183-
184 if (len) {
lenDescription
TRUEevaluated 1 time by 1 test
Evaluated by:
  • cts128test
FALSEevaluated 2 times by 1 test
Evaluated by:
  • cts128test
1-2
185 CRYPTO_cbc128_decrypt(in,out,len,key,ivec,block);-
186 in += len;-
187 out += len;-
188 }
executed 1 time by 1 test: end of block
Executed by:
  • cts128test
1
189-
190 (*block)(in+residue,tmp.c+16,key);-
191-
192 memcpy(tmp.c,tmp.c+16,16);-
193 memcpy(tmp.c,in,residue);-
194 (*block)(tmp.c,tmp.c,key);-
195-
196 for(n=0; n<16; ++n) {
n<16Description
TRUEevaluated 48 times by 1 test
Evaluated by:
  • cts128test
FALSEevaluated 3 times by 1 test
Evaluated by:
  • cts128test
3-48
197 unsigned char c = in[n];-
198 out[n] = tmp.c[n] ^ ivec[n];-
199 ivec[n] = in[n+residue];-
200 tmp.c[n] = c;-
201 }
executed 48 times by 1 test: end of block
Executed by:
  • cts128test
48
202 for(residue+=16; n<residue; ++n)
n<residueDescription
TRUEevaluated 31 times by 1 test
Evaluated by:
  • cts128test
FALSEevaluated 3 times by 1 test
Evaluated by:
  • cts128test
3-31
203 out[n] = tmp.c[n] ^ tmp.c[n-16];
executed 31 times by 1 test: out[n] = tmp.c[n] ^ tmp.c[n-16];
Executed by:
  • cts128test
31
204-
205 return 16+len+residue;
executed 3 times by 1 test: return 16+len+residue;
Executed by:
  • cts128test
3
206}-
207-
208size_t CRYPTO_cts128_decrypt(const unsigned char *in, unsigned char *out,-
209 size_t len, const void *key,-
210 unsigned char ivec[16], cbc128_f cbc)-
211{ size_t residue;-
212 union { size_t align; unsigned char c[32]; } tmp;-
213-
214 if (len<=16) return 0;
never executed: return 0;
len<=16Description
TRUEnever evaluated
FALSEevaluated 6 times by 1 test
Evaluated by:
  • cts128test
0-6
215-
216 if ((residue=len%16) == 0) residue = 16;
executed 3 times by 1 test: residue = 16;
Executed by:
  • cts128test
(residue=len%16) == 0Description
TRUEevaluated 3 times by 1 test
Evaluated by:
  • cts128test
FALSEevaluated 3 times by 1 test
Evaluated by:
  • cts128test
3
217-
218 len -= 16+residue;-
219-
220 if (len) {
lenDescription
TRUEevaluated 3 times by 1 test
Evaluated by:
  • cts128test
FALSEevaluated 3 times by 1 test
Evaluated by:
  • cts128test
3
221 (*cbc)(in,out,len,key,ivec,0);-
222 in += len;-
223 out += len;-
224 }
executed 3 times by 1 test: end of block
Executed by:
  • cts128test
3
225-
226 memset(tmp.c,0,sizeof(tmp));-
227 /* this places in[16] at &tmp.c[16] and decrypted block at &tmp.c[0] */-
228 (*cbc)(in,tmp.c,16,key,tmp.c+16,0);-
229-
230 memcpy(tmp.c,in+16,residue);-
231 (*cbc)(tmp.c,tmp.c,32,key,ivec,0);-
232 memcpy(out,tmp.c,16+residue);-
233 return 16+len+residue;
executed 6 times by 1 test: return 16+len+residue;
Executed by:
  • cts128test
6
234}-
235-
236size_t CRYPTO_nistcts128_decrypt(const unsigned char *in, unsigned char *out,-
237 size_t len, const void *key,-
238 unsigned char ivec[16], cbc128_f cbc)-
239{ size_t residue;-
240 union { size_t align; unsigned char c[32]; } tmp;-
241-
242 if (len<16) return 0;
never executed: return 0;
len<16Description
TRUEnever evaluated
FALSEevaluated 6 times by 1 test
Evaluated by:
  • cts128test
0-6
243-
244 residue=len%16;-
245-
246 if (residue==0) {
residue==0Description
TRUEevaluated 3 times by 1 test
Evaluated by:
  • cts128test
FALSEevaluated 3 times by 1 test
Evaluated by:
  • cts128test
3
247 (*cbc)(in,out,len,key,ivec,0);-
248 return len;
executed 3 times by 1 test: return len;
Executed by:
  • cts128test
3
249 }-
250-
251 len -= 16+residue;-
252-
253 if (len) {
lenDescription
TRUEevaluated 1 time by 1 test
Evaluated by:
  • cts128test
FALSEevaluated 2 times by 1 test
Evaluated by:
  • cts128test
1-2
254 (*cbc)(in,out,len,key,ivec,0);-
255 in += len;-
256 out += len;-
257 }
executed 1 time by 1 test: end of block
Executed by:
  • cts128test
1
258-
259 memset(tmp.c,0,sizeof(tmp));-
260 /* this places in[16] at &tmp.c[16] and decrypted block at &tmp.c[0] */-
261 (*cbc)(in+residue,tmp.c,16,key,tmp.c+16,0);-
262-
263 memcpy(tmp.c,in,residue);-
264 (*cbc)(tmp.c,tmp.c,32,key,ivec,0);-
265 memcpy(out,tmp.c,16+residue);-
266 return 16+len+residue;
executed 3 times by 1 test: return 16+len+residue;
Executed by:
  • cts128test
3
267}-
Source codeSwitch to Preprocessed file
Generated by Squish Coco 4.2.2