add OFB mode

12 files changed, 543 insertions, 0 deletions

diff --git a/examples/CMakeLists.txt b/examples/CMakeLists.txt
index 53e0361..080e382 100644
--- a/examples/CMakeLists.txt
+++ b/examples/CMakeLists.txt
@@ -8,9 +8,12 @@ endmacro()
 example(aes128ecb)
 example(aes128cbc)
 example(aes128cfb)
+example(aes128ofb)
 example(aes192ecb)
 example(aes192cbc)
 example(aes192cfb)
+example(aes192ofb)
 example(aes256ecb)
 example(aes256cbc)
 example(aes256cfb)
+example(aes256ofb)
diff --git a/examples/aes128ofb_example.c b/examples/aes128ofb_example.c
new file mode 100644
index 0000000..07137f6
--- /dev/null
+++ b/examples/aes128ofb_example.c
@@ -0,0 +1,51 @@
+/**
+ * \file
+ * \author Egor Tensin <Egor.Tensin@gmail.com>
+ * \date 2015
+ * \copyright This file is licensed under the terms of the MIT License.
+ *            See LICENSE.txt for details.
+ */
+
+#include <aesni/all.h>
+
+#include <stdio.h>
+
+int main()
+{
+    __declspec(align(16)) AesBlock128 plain, key, cypher, decrypted, iv;
+    __declspec(align(16)) Aes128KeySchedule key_schedule;
+
+    plain = make_aes_block128(0xffeeddcc, 0xbbaa9988, 0x77665544, 0x33221100);
+    key = make_aes_block128(0x0f0e0d0c, 0x0b0a0908, 0x07060504, 0x03020100);
+    iv = make_aes_block128(0xfedcba98, 0x76543210, 0xfedcba98, 0x76543210);
+
+    printf("Plain: %s\n", format_aes_block128(&plain).str);
+    print_aes_block128_fips_matrix_style(&plain);
+
+    printf("\n");
+    printf("Key: %s\n", format_aes_block128(&key).str);
+    print_aes_block128_fips_matrix_style(&key);
+
+    printf("\n");
+    printf("Initialization vector: %s\n", format_aes_block128(&iv).str);
+    print_aes_block128_fips_matrix_style(&iv);
+
+    aes128_expand_key_schedule(key, &key_schedule);
+
+    printf("\n");
+    printf("Key schedule:\n");
+    for (int i = 0; i < 11; ++i)
+        printf("\t[%d]: %s\n", i, format_aes_block128(&key_schedule.keys[i]).str);
+
+    cypher = aes128ofb_encrypt(plain, &key_schedule, iv);
+    printf("\n");
+    printf("Cypher: %s\n", format_aes_block128(&cypher).str);
+    print_aes_block128_fips_matrix_style(&cypher);
+
+    decrypted = aes128ofb_decrypt(cypher, &key_schedule, iv);
+    printf("\n");
+    printf("Decrypted: %s\n", format_aes_block128(&decrypted).str);
+    print_aes_block128_fips_matrix_style(&decrypted);
+
+    return 0;
+}
diff --git a/examples/aes192ofb_example.c b/examples/aes192ofb_example.c
new file mode 100644
index 0000000..6e611d0
--- /dev/null
+++ b/examples/aes192ofb_example.c
@@ -0,0 +1,52 @@
+/**
+ * \file
+ * \author Egor Tensin <Egor.Tensin@gmail.com>
+ * \date 2015
+ * \copyright This file is licensed under the terms of the MIT License.
+ *            See LICENSE.txt for details.
+ */
+
+#include <aesni/all.h>
+
+#include <stdio.h>
+
+int main()
+{
+    __declspec(align(16)) AesBlock128 plain, cypher, decrypted, iv;
+    __declspec(align(16)) AesBlock192 key;
+    __declspec(align(16)) Aes192KeySchedule key_schedule;
+
+    plain = make_aes_block128(0xffeeddcc, 0xbbaa9988, 0x77665544, 0x33221100);
+    key = make_aes_block192(0x17161514, 0x13121110, 0x0f0e0d0c, 0x0b0a0908, 0x07060504, 0x03020100);
+    iv = make_aes_block128(0xfedcba98, 0x76543210, 0xfedcba98, 0x76543210);
+
+    printf("Plain: %s\n", format_aes_block128(&plain).str);
+    print_aes_block128_fips_matrix_style(&plain);
+
+    printf("\n");
+    printf("Key: %s\n", format_aes_block192(&key).str);
+    print_aes_block192_fips_matrix_style(&key);
+
+    printf("\n");
+    printf("Initialization vector: %s\n", format_aes_block128(&iv).str);
+    print_aes_block128_fips_matrix_style(&iv);
+
+    aes192_expand_key_schedule(&key, &key_schedule);
+
+    printf("\n");
+    printf("Key schedule:\n");
+    for (int i = 0; i < 13; ++i)
+        printf("\t[%d]: %s\n", i, format_aes_block128(&key_schedule.keys[i]).str);
+
+    cypher = aes192ofb_encrypt(plain, &key_schedule, iv);
+    printf("\n");
+    printf("Cypher: %s\n", format_aes_block128(&cypher).str);
+    print_aes_block128_fips_matrix_style(&cypher);
+
+    decrypted = aes192ofb_decrypt(cypher, &key_schedule, iv);
+    printf("\n");
+    printf("Decrypted: %s\n", format_aes_block128(&decrypted).str);
+    print_aes_block128_fips_matrix_style(&decrypted);
+
+    return 0;
+}
diff --git a/examples/aes256ofb_example.c b/examples/aes256ofb_example.c
new file mode 100644
index 0000000..3481c0c
--- /dev/null
+++ b/examples/aes256ofb_example.c
@@ -0,0 +1,52 @@
+/**
+ * \file
+ * \author Egor Tensin <Egor.Tensin@gmail.com>
+ * \date 2015
+ * \copyright This file is licensed under the terms of the MIT License.
+ *            See LICENSE.txt for details.
+ */
+
+#include <aesni/all.h>
+
+#include <stdio.h>
+
+int main()
+{
+    __declspec(align(16)) AesBlock128 plain, cypher, decrypted, iv;
+    __declspec(align(16)) AesBlock256 key;
+    __declspec(align(16)) Aes256KeySchedule key_schedule;
+
+    plain = make_aes_block128(0xffeeddcc, 0xbbaa9988, 0x77665544, 0x33221100);
+    key = make_aes_block256(0x1f1e1d1c, 0x1b1a1918, 0x17161514, 0x13121110, 0x0f0e0d0c, 0x0b0a0908, 0x07060504, 0x03020100);
+    iv = make_aes_block128(0xfedcba98, 0x76543210, 0xfedcba98, 0x76543210);
+
+    printf("Plain: %s\n", format_aes_block128(&plain).str);
+    print_aes_block128_fips_matrix_style(&plain);
+
+    printf("\n");
+    printf("Key: %s\n", format_aes_block256(&key).str);
+    print_aes_block256_fips_matrix_style(&key);
+
+    printf("\n");
+    printf("Initialization vector: %s\n", format_aes_block128(&iv).str);
+    print_aes_block128_fips_matrix_style(&iv);
+
+    aes256_expand_key_schedule(&key, &key_schedule);
+
+    printf("\n");
+    printf("Key schedule:\n");
+    for (int i = 0; i < 15; ++i)
+        printf("\t[%d]: %s\n", i, format_aes_block128(&key_schedule.keys[i]).str);
+
+    cypher = aes256ofb_encrypt(plain, &key_schedule, iv);
+    printf("\n");
+    printf("Cypher: %s\n", format_aes_block128(&cypher).str);
+    print_aes_block128_fips_matrix_style(&cypher);
+
+    decrypted = aes256ofb_decrypt(cypher, &key_schedule, iv);
+    printf("\n");
+    printf("Decrypted: %s\n", format_aes_block128(&decrypted).str);
+    print_aes_block128_fips_matrix_style(&decrypted);
+
+    return 0;
+}
diff --git a/include/aesni/api.h b/include/aesni/api.h
index 6e30b65..6d275a5 100644
--- a/include/aesni/api.h
+++ b/include/aesni/api.h
@@ -71,6 +71,22 @@ static __inline AesBlock128 __fastcall aes128cfb_decrypt(
     return _mm_xor_si128(raw_aes128ecb_encrypt(init_vector, key_schedule), cypher);
 }
 
+static __inline AesBlock128 __fastcall aes128ofb_encrypt(
+    AesBlock128 plain,
+    Aes128KeySchedule* key_schedule,
+    AesBlock128 init_vector)
+{
+    return _mm_xor_si128(raw_aes128ecb_encrypt(init_vector, key_schedule), plain);
+}
+
+static __inline AesBlock128 __fastcall aes128ofb_decrypt(
+    AesBlock128 cypher,
+    Aes128KeySchedule* key_schedule,
+    AesBlock128 init_vector)
+{
+    return _mm_xor_si128(raw_aes128ecb_encrypt(init_vector, key_schedule), cypher);
+}
+
 static __inline void __fastcall aes192_expand_key_schedule(
     AesBlock192* key,
     Aes192KeySchedule* key_schedule)
@@ -131,6 +147,22 @@ static __inline AesBlock128 __fastcall aes192cfb_decrypt(
     return _mm_xor_si128(raw_aes192ecb_encrypt(init_vector, key_schedule), cypher);
 }
 
+static __inline AesBlock128 __fastcall aes192ofb_encrypt(
+    AesBlock128 plain,
+    Aes192KeySchedule* key_schedule,
+    AesBlock128 init_vector)
+{
+    return _mm_xor_si128(raw_aes192ecb_encrypt(init_vector, key_schedule), plain);
+}
+
+static __inline AesBlock128 __fastcall aes192ofb_decrypt(
+    AesBlock128 cypher,
+    Aes192KeySchedule* key_schedule,
+    AesBlock128 init_vector)
+{
+    return _mm_xor_si128(raw_aes192ecb_encrypt(init_vector, key_schedule), cypher);
+}
+
 static __inline void __fastcall aes256_expand_key_schedule(
     AesBlock256* key,
     Aes256KeySchedule* key_schedule)
@@ -190,3 +222,19 @@ static __inline AesBlock128 __fastcall aes256cfb_decrypt(
 {
     return _mm_xor_si128(raw_aes256ecb_encrypt(init_vector, key_schedule), cypher);
 }
+
+static __inline AesBlock128 __fastcall aes256ofb_encrypt(
+    AesBlock128 plain,
+    Aes256KeySchedule* key_schedule,
+    AesBlock128 init_vector)
+{
+    return _mm_xor_si128(raw_aes256ecb_encrypt(init_vector, key_schedule), plain);
+}
+
+static __inline AesBlock128 __fastcall aes256ofb_decrypt(
+    AesBlock128 cypher,
+    Aes256KeySchedule* key_schedule,
+    AesBlock128 init_vector)
+{
+    return _mm_xor_si128(raw_aes256ecb_encrypt(init_vector, key_schedule), cypher);
+}
diff --git a/test/CMakeLists.txt b/test/CMakeLists.txt
index 9ee72f4..2057b8f 100644
--- a/test/CMakeLists.txt
+++ b/test/CMakeLists.txt
@@ -11,9 +11,12 @@ endmacro()
 test(aes128ecb)
 test(aes128cbc)
 test(aes128cfb)
+test(aes128ofb)
 test(aes192ecb)
 test(aes192cbc)
 test(aes192cfb)
+test(aes192ofb)
 test(aes256ecb)
 test(aes256cbc)
 test(aes256cfb)
+test(aes256ofb)
diff --git a/test/aes128ofb_decrypt_block.c b/test/aes128ofb_decrypt_block.c
new file mode 100644
index 0000000..92add4b
--- /dev/null
+++ b/test/aes128ofb_decrypt_block.c
@@ -0,0 +1,55 @@
+/**
+ * \file
+ * \author Egor Tensin <Egor.Tensin@gmail.com>
+ * \date 2015
+ * \copyright This file is licensed under the terms of the MIT License.
+ *            See LICENSE.txt for details.
+ */
+
+#include <aesni/all.h>
+
+#include <stdio.h>
+#include <stdlib.h>
+
+static void exit_with_usage(const char* argv0)
+{
+    printf("Usage: %s KEY INIT_VECTOR [CIPHER...]\n", argv0);
+    exit(EXIT_FAILURE);
+}
+
+int main(int argc, char** argv)
+{
+    __declspec(align(16)) AesBlock128 plain, key, cipher, iv;
+    __declspec(align(16)) Aes128KeySchedule key_schedule;
+
+    if (argc < 3)
+        exit_with_usage(argv[0]);
+
+    if (parse_aes_block128(&key, argv[1]) != 0)
+    {
+        fprintf(stderr, "Invalid 128-bit AES block '%s'\n", argv[1]);
+        exit_with_usage(argv[0]);
+    }
+
+    if (parse_aes_block128(&iv, argv[2]) != 0)
+    {
+        fprintf(stderr, "Invalid 128-bit AES block '%s'\n", argv[2]);
+        exit_with_usage(argv[0]);
+    }
+
+    aes128_expand_key_schedule(key, &key_schedule);
+
+    for (int i = 3; i < argc; ++i)
+    {
+        if (parse_aes_block128(&cipher, argv[i]) != 0)
+        {
+            fprintf(stderr, "Invalid 128-bit AES block '%s'\n", argv[i]);
+            continue;
+        }
+        plain = aes128cfb_decrypt(cipher, &key_schedule, iv);
+        iv = _mm_xor_si128(cipher, plain);
+        print_aes_block128(&plain);
+    }
+
+    return 0;
+}
diff --git a/test/aes128ofb_encrypt_block.c b/test/aes128ofb_encrypt_block.c
new file mode 100644
index 0000000..ef32a59
--- /dev/null
+++ b/test/aes128ofb_encrypt_block.c
@@ -0,0 +1,55 @@
+/**
+ * \file
+ * \author Egor Tensin <Egor.Tensin@gmail.com>
+ * \date 2015
+ * \copyright This file is licensed under the terms of the MIT License.
+ *            See LICENSE.txt for details.
+ */
+
+#include <aesni/all.h>
+
+#include <stdio.h>
+#include <stdlib.h>
+
+static void exit_with_usage(const char* argv0)
+{
+    printf("Usage: %s KEY INIT_VECTOR [PLAIN...]\n", argv0);
+    exit(EXIT_FAILURE);
+}
+
+int main(int argc, char** argv)
+{
+    __declspec(align(16)) AesBlock128 plain, key, cipher, iv;
+    __declspec(align(16)) Aes128KeySchedule key_schedule;
+
+    if (argc < 3)
+        exit_with_usage(argv[0]);
+
+    if (parse_aes_block128(&key, argv[1]) != 0)
+    {
+        fprintf(stderr, "Invalid 128-bit AES block '%s'\n", argv[1]);
+        exit_with_usage(argv[0]);
+    }
+
+    if (parse_aes_block128(&iv, argv[2]) != 0)
+    {
+        fprintf(stderr, "Invalid 128-bit AES block '%s'\n", argv[2]);
+        exit_with_usage(argv[0]);
+    }
+
+    aes128_expand_key_schedule(key, &key_schedule);
+
+    for (int i = 3; i < argc; ++i)
+    {
+        if (parse_aes_block128(&plain, argv[i]) != 0)
+        {
+            fprintf(stderr, "Invalid 128-bit AES block '%s'\n", argv[i]);
+            continue;
+        }
+        cipher = aes128ofb_encrypt(plain, &key_schedule, iv);
+        iv = _mm_xor_si128(cipher, plain);
+        print_aes_block128(&cipher);
+    }
+
+    return 0;
+}
diff --git a/test/aes192ofb_decrypt_block.c b/test/aes192ofb_decrypt_block.c
new file mode 100644
index 0000000..19c873f
--- /dev/null
+++ b/test/aes192ofb_decrypt_block.c
@@ -0,0 +1,56 @@
+/**
+ * \file
+ * \author Egor Tensin <Egor.Tensin@gmail.com>
+ * \date 2015
+ * \copyright This file is licensed under the terms of the MIT License.
+ *            See LICENSE.txt for details.
+ */
+
+#include <aesni/all.h>
+
+#include <stdio.h>
+#include <stdlib.h>
+
+static void exit_with_usage(const char* argv0)
+{
+    printf("Usage: %s KEY INIT_VECTOR [CIPHER...]\n", argv0);
+    exit(EXIT_FAILURE);
+}
+
+int main(int argc, char** argv)
+{
+    __declspec(align(16)) AesBlock128 plain, cipher, iv;
+    __declspec(align(16)) AesBlock192 key;
+    __declspec(align(16)) Aes192KeySchedule key_schedule;
+
+    if (argc < 3)
+        exit_with_usage(argv[0]);
+
+    if (parse_aes_block192(&key, argv[1]) != 0)
+    {
+        fprintf(stderr, "Invalid 192-bit AES block '%s'\n", argv[1]);
+        exit_with_usage(argv[0]);
+    }
+
+    if (parse_aes_block128(&iv, argv[2]) != 0)
+    {
+        fprintf(stderr, "Invalid 128-bit AES block '%s'\n", argv[2]);
+        exit_with_usage(argv[0]);
+    }
+
+    aes192_expand_key_schedule(&key, &key_schedule);
+
+    for (int i = 3; i < argc; ++i)
+    {
+        if (parse_aes_block128(&cipher, argv[i]) != 0)
+        {
+            fprintf(stderr, "Invalid 128-bit AES block '%s'\n", argv[i]);
+            continue;
+        }
+        plain = aes192cfb_decrypt(cipher, &key_schedule, iv);
+        iv = _mm_xor_si128(cipher, plain);
+        print_aes_block128(&plain);
+    }
+
+    return 0;
+}
diff --git a/test/aes192ofb_encrypt_block.c b/test/aes192ofb_encrypt_block.c
new file mode 100644
index 0000000..a3fb944
--- /dev/null
+++ b/test/aes192ofb_encrypt_block.c
@@ -0,0 +1,56 @@
+/**
+ * \file
+ * \author Egor Tensin <Egor.Tensin@gmail.com>
+ * \date 2015
+ * \copyright This file is licensed under the terms of the MIT License.
+ *            See LICENSE.txt for details.
+ */
+
+#include <aesni/all.h>
+
+#include <stdio.h>
+#include <stdlib.h>
+
+static void exit_with_usage(const char* argv0)
+{
+    printf("Usage: %s KEY INIT_VECTOR [PLAIN...]\n", argv0);
+    exit(EXIT_FAILURE);
+}
+
+int main(int argc, char** argv)
+{
+    __declspec(align(16)) AesBlock128 plain, cipher, iv;
+    __declspec(align(16)) AesBlock192 key;
+    __declspec(align(16)) Aes192KeySchedule key_schedule;
+
+    if (argc < 3)
+        exit_with_usage(argv[0]);
+
+    if (parse_aes_block192(&key, argv[1]) != 0)
+    {
+        fprintf(stderr, "Invalid 192-bit AES block '%s'\n", argv[1]);
+        exit_with_usage(argv[0]);
+    }
+
+    if (parse_aes_block128(&iv, argv[2]) != 0)
+    {
+        fprintf(stderr, "Invalid 128-bit AES block '%s'\n", argv[2]);
+        exit_with_usage(argv[0]);
+    }
+
+    aes192_expand_key_schedule(&key, &key_schedule);
+
+    for (int i = 3; i < argc; ++i)
+    {
+        if (parse_aes_block128(&plain, argv[i]) != 0)
+        {
+            fprintf(stderr, "Invalid 128-bit AES block '%s'\n", argv[i]);
+            continue;
+        }
+        cipher = aes192cfb_encrypt(plain, &key_schedule, iv);
+        iv = _mm_xor_si128(cipher, plain);
+        print_aes_block128(&cipher);
+    }
+
+    return 0;
+}
diff --git a/test/aes256ofb_decrypt_block.c b/test/aes256ofb_decrypt_block.c
new file mode 100644
index 0000000..45dcd7b
--- /dev/null
+++ b/test/aes256ofb_decrypt_block.c
@@ -0,0 +1,56 @@
+/**
+ * \file
+ * \author Egor Tensin <Egor.Tensin@gmail.com>
+ * \date 2015
+ * \copyright This file is licensed under the terms of the MIT License.
+ *            See LICENSE.txt for details.
+ */
+
+#include <aesni/all.h>
+
+#include <stdio.h>
+#include <stdlib.h>
+
+static void exit_with_usage(const char* argv0)
+{
+    printf("Usage: %s KEY INIT_VECTOR [CIPHER...]\n", argv0);
+    exit(EXIT_FAILURE);
+}
+
+int main(int argc, char** argv)
+{
+    __declspec(align(16)) AesBlock128 plain, cipher, iv;
+    __declspec(align(16)) AesBlock256 key;
+    __declspec(align(16)) Aes256KeySchedule key_schedule;
+
+    if (argc < 3)
+        exit_with_usage(argv[0]);
+
+    if (parse_aes_block256(&key, argv[1]) != 0)
+    {
+        fprintf(stderr, "Invalid 256-bit AES block '%s'\n", argv[1]);
+        exit_with_usage(argv[0]);
+    }
+
+    if (parse_aes_block128(&iv, argv[2]) != 0)
+    {
+        fprintf(stderr, "Invalid 128-bit AES block '%s'\n", argv[2]);
+        exit_with_usage(argv[0]);
+    }
+
+    aes256_expand_key_schedule(&key, &key_schedule);
+
+    for (int i = 3; i < argc; ++i)
+    {
+        if (parse_aes_block128(&cipher, argv[i]) != 0)
+        {
+            fprintf(stderr, "Invalid 128-bit AES block '%s'\n", argv[i]);
+            continue;
+        }
+        plain = aes256cfb_decrypt(cipher, &key_schedule, iv);
+        iv = _mm_xor_si128(cipher, plain);
+        print_aes_block128(&plain);
+    }
+
+    return 0;
+}
diff --git a/test/aes256ofb_encrypt_block.c b/test/aes256ofb_encrypt_block.c
new file mode 100644
index 0000000..4498bc8
--- /dev/null
+++ b/test/aes256ofb_encrypt_block.c
@@ -0,0 +1,56 @@
+/**
+ * \file
+ * \author Egor Tensin <Egor.Tensin@gmail.com>
+ * \date 2015
+ * \copyright This file is licensed under the terms of the MIT License.
+ *            See LICENSE.txt for details.
+ */
+
+#include <aesni/all.h>
+
+#include <stdio.h>
+#include <stdlib.h>
+
+static void exit_with_usage(const char* argv0)
+{
+    printf("Usage: %s KEY INIT_VECTOR [PLAIN...]\n", argv0);
+    exit(EXIT_FAILURE);
+}
+
+int main(int argc, char** argv)
+{
+    __declspec(align(16)) AesBlock128 plain, cipher, iv;
+    __declspec(align(16)) AesBlock256 key;
+    __declspec(align(16)) Aes256KeySchedule key_schedule;
+
+    if (argc < 3)
+        exit_with_usage(argv[0]);
+
+    if (parse_aes_block256(&key, argv[1]) != 0)
+    {
+        fprintf(stderr, "Invalid 256-bit AES block '%s'\n", argv[1]);
+        exit_with_usage(argv[0]);
+    }
+
+    if (parse_aes_block128(&iv, argv[2]) != 0)
+    {
+        fprintf(stderr, "Invalid 128-bit AES block '%s'\n", argv[2]);
+        exit_with_usage(argv[0]);
+    }
+
+    aes256_expand_key_schedule(&key, &key_schedule);
+
+    for (int i = 3; i < argc; ++i)
+    {
+        if (parse_aes_block128(&plain, argv[i]) != 0)
+        {
+            fprintf(stderr, "Invalid 128-bit AES block '%s'\n", argv[i]);
+            continue;
+        }
+        cipher = aes256cfb_encrypt(plain, &key_schedule, iv);
+        iv = _mm_xor_si128(cipher, plain);
+        print_aes_block128(&cipher);
+    }
+
+    return 0;
+}