qemu/crypto/aes.c

   1 /**
   2  *
   3  * aes.c - integrated in QEMU by Fabrice Bellard from the OpenSSL project.
   4  */
   5 /*
   6  * rijndael-alg-fst.c
   7  *
   8  * @version 3.0 (December 2000)
   9  *
  10  * Optimised ANSI C code for the Rijndael cipher (now AES)
  11  *
  12  * @author Vincent Rijmen <vincent.rijmen@esat.kuleuven.ac.be>
  13  * @author Antoon Bosselaers <antoon.bosselaers@esat.kuleuven.ac.be>
  14  * @author Paulo Barreto <paulo.barreto@terra.com.br>
  15  *
  16  * This code is hereby placed in the public domain.
  17  *
  18  * THIS SOFTWARE IS PROVIDED BY THE AUTHORS ''AS IS'' AND ANY EXPRESS
  19  * OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
  20  * WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
  21  * ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHORS OR CONTRIBUTORS BE
  22  * LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
  23  * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
  24  * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
  25  * BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
  26  * WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
  27  * OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE,
  28  * EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
  29  */
  30 #include "qemu-common.h"
  31 #include "crypto/aes.h"
  32
  33 typedef uint32_t u32;
  34 typedef uint8_t u8;
  35
  36 /* This controls loop-unrolling in aes_core.c */
  37 #undef FULL_UNROLL
  38 # define GETU32(pt) (((u32)(pt)[0] << 24) ^ ((u32)(pt)[1] << 16) ^ ((u32)(pt)[2] <<  8) ^ ((u32)(pt)[3]))
  39 # define PUTU32(ct, st) { (ct)[0] = (u8)((st) >> 24); (ct)[1] = (u8)((st) >> 16); (ct)[2] = (u8)((st) >>  8); (ct)[3] = (u8)(st); }
  40
  41 const uint8_t AES_sbox[256] = {
  42     0x63, 0x7C, 0x77, 0x7B, 0xF2, 0x6B, 0x6F, 0xC5,
  43     0x30, 0x01, 0x67, 0x2B, 0xFE, 0xD7, 0xAB, 0x76,
  44     0xCA, 0x82, 0xC9, 0x7D, 0xFA, 0x59, 0x47, 0xF0,
  45     0xAD, 0xD4, 0xA2, 0xAF, 0x9C, 0xA4, 0x72, 0xC0,
  46     0xB7, 0xFD, 0x93, 0x26, 0x36, 0x3F, 0xF7, 0xCC,
  47     0x34, 0xA5, 0xE5, 0xF1, 0x71, 0xD8, 0x31, 0x15,
  48     0x04, 0xC7, 0x23, 0xC3, 0x18, 0x96, 0x05, 0x9A,
  49     0x07, 0x12, 0x80, 0xE2, 0xEB, 0x27, 0xB2, 0x75,
  50     0x09, 0x83, 0x2C, 0x1A, 0x1B, 0x6E, 0x5A, 0xA0,
  51     0x52, 0x3B, 0xD6, 0xB3, 0x29, 0xE3, 0x2F, 0x84,
  52     0x53, 0xD1, 0x00, 0xED, 0x20, 0xFC, 0xB1, 0x5B,
  53     0x6A, 0xCB, 0xBE, 0x39, 0x4A, 0x4C, 0x58, 0xCF,
  54     0xD0, 0xEF, 0xAA, 0xFB, 0x43, 0x4D, 0x33, 0x85,
  55     0x45, 0xF9, 0x02, 0x7F, 0x50, 0x3C, 0x9F, 0xA8,
  56     0x51, 0xA3, 0x40, 0x8F, 0x92, 0x9D, 0x38, 0xF5,
  57     0xBC, 0xB6, 0xDA, 0x21, 0x10, 0xFF, 0xF3, 0xD2,
  58     0xCD, 0x0C, 0x13, 0xEC, 0x5F, 0x97, 0x44, 0x17,
  59     0xC4, 0xA7, 0x7E, 0x3D, 0x64, 0x5D, 0x19, 0x73,
  60     0x60, 0x81, 0x4F, 0xDC, 0x22, 0x2A, 0x90, 0x88,
  61     0x46, 0xEE, 0xB8, 0x14, 0xDE, 0x5E, 0x0B, 0xDB,
  62     0xE0, 0x32, 0x3A, 0x0A, 0x49, 0x06, 0x24, 0x5C,
  63     0xC2, 0xD3, 0xAC, 0x62, 0x91, 0x95, 0xE4, 0x79,
  64     0xE7, 0xC8, 0x37, 0x6D, 0x8D, 0xD5, 0x4E, 0xA9,
  65     0x6C, 0x56, 0xF4, 0xEA, 0x65, 0x7A, 0xAE, 0x08,
  66     0xBA, 0x78, 0x25, 0x2E, 0x1C, 0xA6, 0xB4, 0xC6,
  67     0xE8, 0xDD, 0x74, 0x1F, 0x4B, 0xBD, 0x8B, 0x8A,
  68     0x70, 0x3E, 0xB5, 0x66, 0x48, 0x03, 0xF6, 0x0E,
  69     0x61, 0x35, 0x57, 0xB9, 0x86, 0xC1, 0x1D, 0x9E,
  70     0xE1, 0xF8, 0x98, 0x11, 0x69, 0xD9, 0x8E, 0x94,
  71     0x9B, 0x1E, 0x87, 0xE9, 0xCE, 0x55, 0x28, 0xDF,
  72     0x8C, 0xA1, 0x89, 0x0D, 0xBF, 0xE6, 0x42, 0x68,
  73     0x41, 0x99, 0x2D, 0x0F, 0xB0, 0x54, 0xBB, 0x16,
  74 };
  75
  76 const uint8_t AES_isbox[256] = {
  77     0x52, 0x09, 0x6A, 0xD5, 0x30, 0x36, 0xA5, 0x38,
  78     0xBF, 0x40, 0xA3, 0x9E, 0x81, 0xF3, 0xD7, 0xFB,
  79     0x7C, 0xE3, 0x39, 0x82, 0x9B, 0x2F, 0xFF, 0x87,
  80     0x34, 0x8E, 0x43, 0x44, 0xC4, 0xDE, 0xE9, 0xCB,
  81     0x54, 0x7B, 0x94, 0x32, 0xA6, 0xC2, 0x23, 0x3D,
  82     0xEE, 0x4C, 0x95, 0x0B, 0x42, 0xFA, 0xC3, 0x4E,
  83     0x08, 0x2E, 0xA1, 0x66, 0x28, 0xD9, 0x24, 0xB2,
  84     0x76, 0x5B, 0xA2, 0x49, 0x6D, 0x8B, 0xD1, 0x25,
  85     0x72, 0xF8, 0xF6, 0x64, 0x86, 0x68, 0x98, 0x16,
  86     0xD4, 0xA4, 0x5C, 0xCC, 0x5D, 0x65, 0xB6, 0x92,
  87     0x6C, 0x70, 0x48, 0x50, 0xFD, 0xED, 0xB9, 0xDA,
  88     0x5E, 0x15, 0x46, 0x57, 0xA7, 0x8D, 0x9D, 0x84,
  89     0x90, 0xD8, 0xAB, 0x00, 0x8C, 0xBC, 0xD3, 0x0A,
  90     0xF7, 0xE4, 0x58, 0x05, 0xB8, 0xB3, 0x45, 0x06,
  91     0xD0, 0x2C, 0x1E, 0x8F, 0xCA, 0x3F, 0x0F, 0x02,
  92     0xC1, 0xAF, 0xBD, 0x03, 0x01, 0x13, 0x8A, 0x6B,
  93     0x3A, 0x91, 0x11, 0x41, 0x4F, 0x67, 0xDC, 0xEA,
  94     0x97, 0xF2, 0xCF, 0xCE, 0xF0, 0xB4, 0xE6, 0x73,
  95     0x96, 0xAC, 0x74, 0x22, 0xE7, 0xAD, 0x35, 0x85,
  96     0xE2, 0xF9, 0x37, 0xE8, 0x1C, 0x75, 0xDF, 0x6E,
  97     0x47, 0xF1, 0x1A, 0x71, 0x1D, 0x29, 0xC5, 0x89,
  98     0x6F, 0xB7, 0x62, 0x0E, 0xAA, 0x18, 0xBE, 0x1B,
  99     0xFC, 0x56, 0x3E, 0x4B, 0xC6, 0xD2, 0x79, 0x20,
 100     0x9A, 0xDB, 0xC0, 0xFE, 0x78, 0xCD, 0x5A, 0xF4,
 101     0x1F, 0xDD, 0xA8, 0x33, 0x88, 0x07, 0xC7, 0x31,
 102     0xB1, 0x12, 0x10, 0x59, 0x27, 0x80, 0xEC, 0x5F,
 103     0x60, 0x51, 0x7F, 0xA9, 0x19, 0xB5, 0x4A, 0x0D,
 104     0x2D, 0xE5, 0x7A, 0x9F, 0x93, 0xC9, 0x9C, 0xEF,
 105     0xA0, 0xE0, 0x3B, 0x4D, 0xAE, 0x2A, 0xF5, 0xB0,
 106     0xC8, 0xEB, 0xBB, 0x3C, 0x83, 0x53, 0x99, 0x61,
 107     0x17, 0x2B, 0x04, 0x7E, 0xBA, 0x77, 0xD6, 0x26,
 108     0xE1, 0x69, 0x14, 0x63, 0x55, 0x21, 0x0C, 0x7D,
 109 };
 110
 111 const uint8_t AES_shifts[16] = {
 112     0, 5, 10, 15, 4, 9, 14, 3, 8, 13, 2, 7, 12, 1, 6, 11
 113 };
 114
 115 const uint8_t AES_ishifts[16] = {
 116     0, 13, 10, 7, 4, 1, 14, 11, 8, 5, 2, 15, 12, 9, 6, 3
 117 };
 118
 119 /* AES_imc[x][0] = [x].[0e, 09, 0d, 0b]; */
 120 /* AES_imc[x][1] = [x].[0b, 0e, 09, 0d]; */
 121 /* AES_imc[x][2] = [x].[0d, 0b, 0e, 09]; */
 122 /* AES_imc[x][3] = [x].[09, 0d, 0b, 0e]; */
 123 const uint32_t AES_imc[256][4] = {
 124     { 0x00000000, 0x00000000, 0x00000000, 0x00000000, }, /* x=00 */
 125     { 0x0E090D0B, 0x0B0E090D, 0x0D0B0E09, 0x090D0B0E, }, /* x=01 */
 126     { 0x1C121A16, 0x161C121A, 0x1A161C12, 0x121A161C, }, /* x=02 */
 127     { 0x121B171D, 0x1D121B17, 0x171D121B, 0x1B171D12, }, /* x=03 */
 128     { 0x3824342C, 0x2C382434, 0x342C3824, 0x24342C38, }, /* x=04 */
 129     { 0x362D3927, 0x27362D39, 0x3927362D, 0x2D392736, }, /* x=05 */
 130     { 0x24362E3A, 0x3A24362E, 0x2E3A2436, 0x362E3A24, }, /* x=06 */
 131     { 0x2A3F2331, 0x312A3F23, 0x23312A3F, 0x3F23312A, }, /* x=07 */
 132     { 0x70486858, 0x58704868, 0x68587048, 0x48685870, }, /* x=08 */
 133     { 0x7E416553, 0x537E4165, 0x65537E41, 0x4165537E, }, /* x=09 */
 134     { 0x6C5A724E, 0x4E6C5A72, 0x724E6C5A, 0x5A724E6C, }, /* x=0A */
 135     { 0x62537F45, 0x4562537F, 0x7F456253, 0x537F4562, }, /* x=0B */
 136     { 0x486C5C74, 0x74486C5C, 0x5C74486C, 0x6C5C7448, }, /* x=0C */
 137     { 0x4665517F, 0x7F466551, 0x517F4665, 0x65517F46, }, /* x=0D */
 138     { 0x547E4662, 0x62547E46, 0x4662547E, 0x7E466254, }, /* x=0E */
 139     { 0x5A774B69, 0x695A774B, 0x4B695A77, 0x774B695A, }, /* x=0F */
 140     { 0xE090D0B0, 0xB0E090D0, 0xD0B0E090, 0x90D0B0E0, }, /* x=10 */
 141     { 0xEE99DDBB, 0xBBEE99DD, 0xDDBBEE99, 0x99DDBBEE, }, /* x=11 */
 142     { 0xFC82CAA6, 0xA6FC82CA, 0xCAA6FC82, 0x82CAA6FC, }, /* x=12 */
 143     { 0xF28BC7AD, 0xADF28BC7, 0xC7ADF28B, 0x8BC7ADF2, }, /* x=13 */
 144     { 0xD8B4E49C, 0x9CD8B4E4, 0xE49CD8B4, 0xB4E49CD8, }, /* x=14 */
 145     { 0xD6BDE997, 0x97D6BDE9, 0xE997D6BD, 0xBDE997D6, }, /* x=15 */
 146     { 0xC4A6FE8A, 0x8AC4A6FE, 0xFE8AC4A6, 0xA6FE8AC4, }, /* x=16 */
 147     { 0xCAAFF381, 0x81CAAFF3, 0xF381CAAF, 0xAFF381CA, }, /* x=17 */
 148     { 0x90D8B8E8, 0xE890D8B8, 0xB8E890D8, 0xD8B8E890, }, /* x=18 */
 149     { 0x9ED1B5E3, 0xE39ED1B5, 0xB5E39ED1, 0xD1B5E39E, }, /* x=19 */
 150     { 0x8CCAA2FE, 0xFE8CCAA2, 0xA2FE8CCA, 0xCAA2FE8C, }, /* x=1A */
 151     { 0x82C3AFF5, 0xF582C3AF, 0xAFF582C3, 0xC3AFF582, }, /* x=1B */
 152     { 0xA8FC8CC4, 0xC4A8FC8C, 0x8CC4A8FC, 0xFC8CC4A8, }, /* x=1C */
 153     { 0xA6F581CF, 0xCFA6F581, 0x81CFA6F5, 0xF581CFA6, }, /* x=1D */
 154     { 0xB4EE96D2, 0xD2B4EE96, 0x96D2B4EE, 0xEE96D2B4, }, /* x=1E */
 155     { 0xBAE79BD9, 0xD9BAE79B, 0x9BD9BAE7, 0xE79BD9BA, }, /* x=1F */
 156     { 0xDB3BBB7B, 0x7BDB3BBB, 0xBB7BDB3B, 0x3BBB7BDB, }, /* x=20 */
 157     { 0xD532B670, 0x70D532B6, 0xB670D532, 0x32B670D5, }, /* x=21 */
 158     { 0xC729A16D, 0x6DC729A1, 0xA16DC729, 0x29A16DC7, }, /* x=22 */
 159     { 0xC920AC66, 0x66C920AC, 0xAC66C920, 0x20AC66C9, }, /* x=23 */
 160     { 0xE31F8F57, 0x57E31F8F, 0x8F57E31F, 0x1F8F57E3, }, /* x=24 */
 161     { 0xED16825C, 0x5CED1682, 0x825CED16, 0x16825CED, }, /* x=25 */
 162     { 0xFF0D9541, 0x41FF0D95, 0x9541FF0D, 0x0D9541FF, }, /* x=26 */
 163     { 0xF104984A, 0x4AF10498, 0x984AF104, 0x04984AF1, }, /* x=27 */
 164     { 0xAB73D323, 0x23AB73D3, 0xD323AB73, 0x73D323AB, }, /* x=28 */
 165     { 0xA57ADE28, 0x28A57ADE, 0xDE28A57A, 0x7ADE28A5, }, /* x=29 */
 166     { 0xB761C935, 0x35B761C9, 0xC935B761, 0x61C935B7, }, /* x=2A */
 167     { 0xB968C43E, 0x3EB968C4, 0xC43EB968, 0x68C43EB9, }, /* x=2B */
 168     { 0x9357E70F, 0x0F9357E7, 0xE70F9357, 0x57E70F93, }, /* x=2C */
 169     { 0x9D5EEA04, 0x049D5EEA, 0xEA049D5E, 0x5EEA049D, }, /* x=2D */
 170     { 0x8F45FD19, 0x198F45FD, 0xFD198F45, 0x45FD198F, }, /* x=2E */
 171     { 0x814CF012, 0x12814CF0, 0xF012814C, 0x4CF01281, }, /* x=2F */
 172     { 0x3BAB6BCB, 0xCB3BAB6B, 0x6BCB3BAB, 0xAB6BCB3B, }, /* x=30 */
 173     { 0x35A266C0, 0xC035A266, 0x66C035A2, 0xA266C035, }, /* x=31 */
 174     { 0x27B971DD, 0xDD27B971, 0x71DD27B9, 0xB971DD27, }, /* x=32 */
 175     { 0x29B07CD6, 0xD629B07C, 0x7CD629B0, 0xB07CD629, }, /* x=33 */
 176     { 0x038F5FE7, 0xE7038F5F, 0x5FE7038F, 0x8F5FE703, }, /* x=34 */
 177     { 0x0D8652EC, 0xEC0D8652, 0x52EC0D86, 0x8652EC0D, }, /* x=35 */
 178     { 0x1F9D45F1, 0xF11F9D45, 0x45F11F9D, 0x9D45F11F, }, /* x=36 */
 179     { 0x119448FA, 0xFA119448, 0x48FA1194, 0x9448FA11, }, /* x=37 */
 180     { 0x4BE30393, 0x934BE303, 0x03934BE3, 0xE303934B, }, /* x=38 */
 181     { 0x45EA0E98, 0x9845EA0E, 0x0E9845EA, 0xEA0E9845, }, /* x=39 */
 182     { 0x57F11985, 0x8557F119, 0x198557F1, 0xF1198557, }, /* x=3A */
 183     { 0x59F8148E, 0x8E59F814, 0x148E59F8, 0xF8148E59, }, /* x=3B */
 184     { 0x73C737BF, 0xBF73C737, 0x37BF73C7, 0xC737BF73, }, /* x=3C */
 185     { 0x7DCE3AB4, 0xB47DCE3A, 0x3AB47DCE, 0xCE3AB47D, }, /* x=3D */
 186     { 0x6FD52DA9, 0xA96FD52D, 0x2DA96FD5, 0xD52DA96F, }, /* x=3E */
 187     { 0x61DC20A2, 0xA261DC20, 0x20A261DC, 0xDC20A261, }, /* x=3F */
 188     { 0xAD766DF6, 0xF6AD766D, 0x6DF6AD76, 0x766DF6AD, }, /* x=40 */
 189     { 0xA37F60FD, 0xFDA37F60, 0x60FDA37F, 0x7F60FDA3, }, /* x=41 */
 190     { 0xB16477E0, 0xE0B16477, 0x77E0B164, 0x6477E0B1, }, /* x=42 */
 191     { 0xBF6D7AEB, 0xEBBF6D7A, 0x7AEBBF6D, 0x6D7AEBBF, }, /* x=43 */
 192     { 0x955259DA, 0xDA955259, 0x59DA9552, 0x5259DA95, }, /* x=44 */
 193     { 0x9B5B54D1, 0xD19B5B54, 0x54D19B5B, 0x5B54D19B, }, /* x=45 */
 194     { 0x894043CC, 0xCC894043, 0x43CC8940, 0x4043CC89, }, /* x=46 */
 195     { 0x87494EC7, 0xC787494E, 0x4EC78749, 0x494EC787, }, /* x=47 */
 196     { 0xDD3E05AE, 0xAEDD3E05, 0x05AEDD3E, 0x3E05AEDD, }, /* x=48 */
 197     { 0xD33708A5, 0xA5D33708, 0x08A5D337, 0x3708A5D3, }, /* x=49 */
 198     { 0xC12C1FB8, 0xB8C12C1F, 0x1FB8C12C, 0x2C1FB8C1, }, /* x=4A */
 199     { 0xCF2512B3, 0xB3CF2512, 0x12B3CF25, 0x2512B3CF, }, /* x=4B */
 200     { 0xE51A3182, 0x82E51A31, 0x3182E51A, 0x1A3182E5, }, /* x=4C */
 201     { 0xEB133C89, 0x89EB133C, 0x3C89EB13, 0x133C89EB, }, /* x=4D */
 202     { 0xF9082B94, 0x94F9082B, 0x2B94F908, 0x082B94F9, }, /* x=4E */
 203     { 0xF701269F, 0x9FF70126, 0x269FF701, 0x01269FF7, }, /* x=4F */
 204     { 0x4DE6BD46, 0x464DE6BD, 0xBD464DE6, 0xE6BD464D, }, /* x=50 */
 205     { 0x43EFB04D, 0x4D43EFB0, 0xB04D43EF, 0xEFB04D43, }, /* x=51 */
 206     { 0x51F4A750, 0x5051F4A7, 0xA75051F4, 0xF4A75051, }, /* x=52 */
 207     { 0x5FFDAA5B, 0x5B5FFDAA, 0xAA5B5FFD, 0xFDAA5B5F, }, /* x=53 */
 208     { 0x75C2896A, 0x6A75C289, 0x896A75C2, 0xC2896A75, }, /* x=54 */
 209     { 0x7BCB8461, 0x617BCB84, 0x84617BCB, 0xCB84617B, }, /* x=55 */
 210     { 0x69D0937C, 0x7C69D093, 0x937C69D0, 0xD0937C69, }, /* x=56 */
 211     { 0x67D99E77, 0x7767D99E, 0x9E7767D9, 0xD99E7767, }, /* x=57 */
 212     { 0x3DAED51E, 0x1E3DAED5, 0xD51E3DAE, 0xAED51E3D, }, /* x=58 */
 213     { 0x33A7D815, 0x1533A7D8, 0xD81533A7, 0xA7D81533, }, /* x=59 */
 214     { 0x21BCCF08, 0x0821BCCF, 0xCF0821BC, 0xBCCF0821, }, /* x=5A */
 215     { 0x2FB5C203, 0x032FB5C2, 0xC2032FB5, 0xB5C2032F, }, /* x=5B */
 216     { 0x058AE132, 0x32058AE1, 0xE132058A, 0x8AE13205, }, /* x=5C */
 217     { 0x0B83EC39, 0x390B83EC, 0xEC390B83, 0x83EC390B, }, /* x=5D */
 218     { 0x1998FB24, 0x241998FB, 0xFB241998, 0x98FB2419, }, /* x=5E */
 219     { 0x1791F62F, 0x2F1791F6, 0xF62F1791, 0x91F62F17, }, /* x=5F */
 220     { 0x764DD68D, 0x8D764DD6, 0xD68D764D, 0x4DD68D76, }, /* x=60 */
 221     { 0x7844DB86, 0x867844DB, 0xDB867844, 0x44DB8678, }, /* x=61 */
 222     { 0x6A5FCC9B, 0x9B6A5FCC, 0xCC9B6A5F, 0x5FCC9B6A, }, /* x=62 */
 223     { 0x6456C190, 0x906456C1, 0xC1906456, 0x56C19064, }, /* x=63 */
 224     { 0x4E69E2A1, 0xA14E69E2, 0xE2A14E69, 0x69E2A14E, }, /* x=64 */
 225     { 0x4060EFAA, 0xAA4060EF, 0xEFAA4060, 0x60EFAA40, }, /* x=65 */
 226     { 0x527BF8B7, 0xB7527BF8, 0xF8B7527B, 0x7BF8B752, }, /* x=66 */
 227     { 0x5C72F5BC, 0xBC5C72F5, 0xF5BC5C72, 0x72F5BC5C, }, /* x=67 */
 228     { 0x0605BED5, 0xD50605BE, 0xBED50605, 0x05BED506, }, /* x=68 */
 229     { 0x080CB3DE, 0xDE080CB3, 0xB3DE080C, 0x0CB3DE08, }, /* x=69 */
 230     { 0x1A17A4C3, 0xC31A17A4, 0xA4C31A17, 0x17A4C31A, }, /* x=6A */
 231     { 0x141EA9C8, 0xC8141EA9, 0xA9C8141E, 0x1EA9C814, }, /* x=6B */
 232     { 0x3E218AF9, 0xF93E218A, 0x8AF93E21, 0x218AF93E, }, /* x=6C */
 233     { 0x302887F2, 0xF2302887, 0x87F23028, 0x2887F230, }, /* x=6D */
 234     { 0x223390EF, 0xEF223390, 0x90EF2233, 0x3390EF22, }, /* x=6E */
 235     { 0x2C3A9DE4, 0xE42C3A9D, 0x9DE42C3A, 0x3A9DE42C, }, /* x=6F */
 236     { 0x96DD063D, 0x3D96DD06, 0x063D96DD, 0xDD063D96, }, /* x=70 */
 237     { 0x98D40B36, 0x3698D40B, 0x0B3698D4, 0xD40B3698, }, /* x=71 */
 238     { 0x8ACF1C2B, 0x2B8ACF1C, 0x1C2B8ACF, 0xCF1C2B8A, }, /* x=72 */
 239     { 0x84C61120, 0x2084C611, 0x112084C6, 0xC6112084, }, /* x=73 */
 240     { 0xAEF93211, 0x11AEF932, 0x3211AEF9, 0xF93211AE, }, /* x=74 */
 241     { 0xA0F03F1A, 0x1AA0F03F, 0x3F1AA0F0, 0xF03F1AA0, }, /* x=75 */
 242     { 0xB2EB2807, 0x07B2EB28, 0x2807B2EB, 0xEB2807B2, }, /* x=76 */
 243     { 0xBCE2250C, 0x0CBCE225, 0x250CBCE2, 0xE2250CBC, }, /* x=77 */
 244     { 0xE6956E65, 0x65E6956E, 0x6E65E695, 0x956E65E6, }, /* x=78 */
 245     { 0xE89C636E, 0x6EE89C63, 0x636EE89C, 0x9C636EE8, }, /* x=79 */
 246     { 0xFA877473, 0x73FA8774, 0x7473FA87, 0x877473FA, }, /* x=7A */
 247     { 0xF48E7978, 0x78F48E79, 0x7978F48E, 0x8E7978F4, }, /* x=7B */
 248     { 0xDEB15A49, 0x49DEB15A, 0x5A49DEB1, 0xB15A49DE, }, /* x=7C */
 249     { 0xD0B85742, 0x42D0B857, 0x5742D0B8, 0xB85742D0, }, /* x=7D */
 250     { 0xC2A3405F, 0x5FC2A340, 0x405FC2A3, 0xA3405FC2, }, /* x=7E */
 251     { 0xCCAA4D54, 0x54CCAA4D, 0x4D54CCAA, 0xAA4D54CC, }, /* x=7F */
 252     { 0x41ECDAF7, 0xF741ECDA, 0xDAF741EC, 0xECDAF741, }, /* x=80 */
 253     { 0x4FE5D7FC, 0xFC4FE5D7, 0xD7FC4FE5, 0xE5D7FC4F, }, /* x=81 */
 254     { 0x5DFEC0E1, 0xE15DFEC0, 0xC0E15DFE, 0xFEC0E15D, }, /* x=82 */
 255     { 0x53F7CDEA, 0xEA53F7CD, 0xCDEA53F7, 0xF7CDEA53, }, /* x=83 */
 256     { 0x79C8EEDB, 0xDB79C8EE, 0xEEDB79C8, 0xC8EEDB79, }, /* x=84 */
 257     { 0x77C1E3D0, 0xD077C1E3, 0xE3D077C1, 0xC1E3D077, }, /* x=85 */
 258     { 0x65DAF4CD, 0xCD65DAF4, 0xF4CD65DA, 0xDAF4CD65, }, /* x=86 */
 259     { 0x6BD3F9C6, 0xC66BD3F9, 0xF9C66BD3, 0xD3F9C66B, }, /* x=87 */
 260     { 0x31A4B2AF, 0xAF31A4B2, 0xB2AF31A4, 0xA4B2AF31, }, /* x=88 */
 261     { 0x3FADBFA4, 0xA43FADBF, 0xBFA43FAD, 0xADBFA43F, }, /* x=89 */
 262     { 0x2DB6A8B9, 0xB92DB6A8, 0xA8B92DB6, 0xB6A8B92D, }, /* x=8A */
 263     { 0x23BFA5B2, 0xB223BFA5, 0xA5B223BF, 0xBFA5B223, }, /* x=8B */
 264     { 0x09808683, 0x83098086, 0x86830980, 0x80868309, }, /* x=8C */
 265     { 0x07898B88, 0x8807898B, 0x8B880789, 0x898B8807, }, /* x=8D */
 266     { 0x15929C95, 0x9515929C, 0x9C951592, 0x929C9515, }, /* x=8E */
 267     { 0x1B9B919E, 0x9E1B9B91, 0x919E1B9B, 0x9B919E1B, }, /* x=8F */
 268     { 0xA17C0A47, 0x47A17C0A, 0x0A47A17C, 0x7C0A47A1, }, /* x=90 */
 269     { 0xAF75074C, 0x4CAF7507, 0x074CAF75, 0x75074CAF, }, /* x=91 */
 270     { 0xBD6E1051, 0x51BD6E10, 0x1051BD6E, 0x6E1051BD, }, /* x=92 */
 271     { 0xB3671D5A, 0x5AB3671D, 0x1D5AB367, 0x671D5AB3, }, /* x=93 */
 272     { 0x99583E6B, 0x6B99583E, 0x3E6B9958, 0x583E6B99, }, /* x=94 */
 273     { 0x97513360, 0x60975133, 0x33609751, 0x51336097, }, /* x=95 */
 274     { 0x854A247D, 0x7D854A24, 0x247D854A, 0x4A247D85, }, /* x=96 */
 275     { 0x8B432976, 0x768B4329, 0x29768B43, 0x4329768B, }, /* x=97 */
 276     { 0xD134621F, 0x1FD13462, 0x621FD134, 0x34621FD1, }, /* x=98 */
 277     { 0xDF3D6F14, 0x14DF3D6F, 0x6F14DF3D, 0x3D6F14DF, }, /* x=99 */
 278     { 0xCD267809, 0x09CD2678, 0x7809CD26, 0x267809CD, }, /* x=9A */
 279     { 0xC32F7502, 0x02C32F75, 0x7502C32F, 0x2F7502C3, }, /* x=9B */
 280     { 0xE9105633, 0x33E91056, 0x5633E910, 0x105633E9, }, /* x=9C */
 281     { 0xE7195B38, 0x38E7195B, 0x5B38E719, 0x195B38E7, }, /* x=9D */
 282     { 0xF5024C25, 0x25F5024C, 0x4C25F502, 0x024C25F5, }, /* x=9E */
 283     { 0xFB0B412E, 0x2EFB0B41, 0x412EFB0B, 0x0B412EFB, }, /* x=9F */
 284     { 0x9AD7618C, 0x8C9AD761, 0x618C9AD7, 0xD7618C9A, }, /* x=A0 */
 285     { 0x94DE6C87, 0x8794DE6C, 0x6C8794DE, 0xDE6C8794, }, /* x=A1 */
 286     { 0x86C57B9A, 0x9A86C57B, 0x7B9A86C5, 0xC57B9A86, }, /* x=A2 */
 287     { 0x88CC7691, 0x9188CC76, 0x769188CC, 0xCC769188, }, /* x=A3 */
 288     { 0xA2F355A0, 0xA0A2F355, 0x55A0A2F3, 0xF355A0A2, }, /* x=A4 */
 289     { 0xACFA58AB, 0xABACFA58, 0x58ABACFA, 0xFA58ABAC, }, /* x=A5 */
 290     { 0xBEE14FB6, 0xB6BEE14F, 0x4FB6BEE1, 0xE14FB6BE, }, /* x=A6 */
 291     { 0xB0E842BD, 0xBDB0E842, 0x42BDB0E8, 0xE842BDB0, }, /* x=A7 */
 292     { 0xEA9F09D4, 0xD4EA9F09, 0x09D4EA9F, 0x9F09D4EA, }, /* x=A8 */
 293     { 0xE49604DF, 0xDFE49604, 0x04DFE496, 0x9604DFE4, }, /* x=A9 */
 294     { 0xF68D13C2, 0xC2F68D13, 0x13C2F68D, 0x8D13C2F6, }, /* x=AA */
 295     { 0xF8841EC9, 0xC9F8841E, 0x1EC9F884, 0x841EC9F8, }, /* x=AB */
 296     { 0xD2BB3DF8, 0xF8D2BB3D, 0x3DF8D2BB, 0xBB3DF8D2, }, /* x=AC */
 297     { 0xDCB230F3, 0xF3DCB230, 0x30F3DCB2, 0xB230F3DC, }, /* x=AD */
 298     { 0xCEA927EE, 0xEECEA927, 0x27EECEA9, 0xA927EECE, }, /* x=AE */
 299     { 0xC0A02AE5, 0xE5C0A02A, 0x2AE5C0A0, 0xA02AE5C0, }, /* x=AF */
 300     { 0x7A47B13C, 0x3C7A47B1, 0xB13C7A47, 0x47B13C7A, }, /* x=B0 */
 301     { 0x744EBC37, 0x37744EBC, 0xBC37744E, 0x4EBC3774, }, /* x=B1 */
 302     { 0x6655AB2A, 0x2A6655AB, 0xAB2A6655, 0x55AB2A66, }, /* x=B2 */
 303     { 0x685CA621, 0x21685CA6, 0xA621685C, 0x5CA62168, }, /* x=B3 */
 304     { 0x42638510, 0x10426385, 0x85104263, 0x63851042, }, /* x=B4 */
 305     { 0x4C6A881B, 0x1B4C6A88, 0x881B4C6A, 0x6A881B4C, }, /* x=B5 */
 306     { 0x5E719F06, 0x065E719F, 0x9F065E71, 0x719F065E, }, /* x=B6 */
 307     { 0x5078920D, 0x0D507892, 0x920D5078, 0x78920D50, }, /* x=B7 */
 308     { 0x0A0FD964, 0x640A0FD9, 0xD9640A0F, 0x0FD9640A, }, /* x=B8 */
 309     { 0x0406D46F, 0x6F0406D4, 0xD46F0406, 0x06D46F04, }, /* x=B9 */
 310     { 0x161DC372, 0x72161DC3, 0xC372161D, 0x1DC37216, }, /* x=BA */
 311     { 0x1814CE79, 0x791814CE, 0xCE791814, 0x14CE7918, }, /* x=BB */
 312     { 0x322BED48, 0x48322BED, 0xED48322B, 0x2BED4832, }, /* x=BC */
 313     { 0x3C22E043, 0x433C22E0, 0xE0433C22, 0x22E0433C, }, /* x=BD */
 314     { 0x2E39F75E, 0x5E2E39F7, 0xF75E2E39, 0x39F75E2E, }, /* x=BE */
 315     { 0x2030FA55, 0x552030FA, 0xFA552030, 0x30FA5520, }, /* x=BF */
 316     { 0xEC9AB701, 0x01EC9AB7, 0xB701EC9A, 0x9AB701EC, }, /* x=C0 */
 317     { 0xE293BA0A, 0x0AE293BA, 0xBA0AE293, 0x93BA0AE2, }, /* x=C1 */
 318     { 0xF088AD17, 0x17F088AD, 0xAD17F088, 0x88AD17F0, }, /* x=C2 */
 319     { 0xFE81A01C, 0x1CFE81A0, 0xA01CFE81, 0x81A01CFE, }, /* x=C3 */
 320     { 0xD4BE832D, 0x2DD4BE83, 0x832DD4BE, 0xBE832DD4, }, /* x=C4 */
 321     { 0xDAB78E26, 0x26DAB78E, 0x8E26DAB7, 0xB78E26DA, }, /* x=C5 */
 322     { 0xC8AC993B, 0x3BC8AC99, 0x993BC8AC, 0xAC993BC8, }, /* x=C6 */
 323     { 0xC6A59430, 0x30C6A594, 0x9430C6A5, 0xA59430C6, }, /* x=C7 */
 324     { 0x9CD2DF59, 0x599CD2DF, 0xDF599CD2, 0xD2DF599C, }, /* x=C8 */
 325     { 0x92DBD252, 0x5292DBD2, 0xD25292DB, 0xDBD25292, }, /* x=C9 */
 326     { 0x80C0C54F, 0x4F80C0C5, 0xC54F80C0, 0xC0C54F80, }, /* x=CA */
 327     { 0x8EC9C844, 0x448EC9C8, 0xC8448EC9, 0xC9C8448E, }, /* x=CB */
 328     { 0xA4F6EB75, 0x75A4F6EB, 0xEB75A4F6, 0xF6EB75A4, }, /* x=CC */
 329     { 0xAAFFE67E, 0x7EAAFFE6, 0xE67EAAFF, 0xFFE67EAA, }, /* x=CD */
 330     { 0xB8E4F163, 0x63B8E4F1, 0xF163B8E4, 0xE4F163B8, }, /* x=CE */
 331     { 0xB6EDFC68, 0x68B6EDFC, 0xFC68B6ED, 0xEDFC68B6, }, /* x=CF */
 332     { 0x0C0A67B1, 0xB10C0A67, 0x67B10C0A, 0x0A67B10C, }, /* x=D0 */
 333     { 0x02036ABA, 0xBA02036A, 0x6ABA0203, 0x036ABA02, }, /* x=D1 */
 334     { 0x10187DA7, 0xA710187D, 0x7DA71018, 0x187DA710, }, /* x=D2 */
 335     { 0x1E1170AC, 0xAC1E1170, 0x70AC1E11, 0x1170AC1E, }, /* x=D3 */
 336     { 0x342E539D, 0x9D342E53, 0x539D342E, 0x2E539D34, }, /* x=D4 */
 337     { 0x3A275E96, 0x963A275E, 0x5E963A27, 0x275E963A, }, /* x=D5 */
 338     { 0x283C498B, 0x8B283C49, 0x498B283C, 0x3C498B28, }, /* x=D6 */
 339     { 0x26354480, 0x80263544, 0x44802635, 0x35448026, }, /* x=D7 */
 340     { 0x7C420FE9, 0xE97C420F, 0x0FE97C42, 0x420FE97C, }, /* x=D8 */
 341     { 0x724B02E2, 0xE2724B02, 0x02E2724B, 0x4B02E272, }, /* x=D9 */
 342     { 0x605015FF, 0xFF605015, 0x15FF6050, 0x5015FF60, }, /* x=DA */
 343     { 0x6E5918F4, 0xF46E5918, 0x18F46E59, 0x5918F46E, }, /* x=DB */
 344     { 0x44663BC5, 0xC544663B, 0x3BC54466, 0x663BC544, }, /* x=DC */
 345     { 0x4A6F36CE, 0xCE4A6F36, 0x36CE4A6F, 0x6F36CE4A, }, /* x=DD */
 346     { 0x587421D3, 0xD3587421, 0x21D35874, 0x7421D358, }, /* x=DE */
 347     { 0x567D2CD8, 0xD8567D2C, 0x2CD8567D, 0x7D2CD856, }, /* x=DF */
 348     { 0x37A10C7A, 0x7A37A10C, 0x0C7A37A1, 0xA10C7A37, }, /* x=E0 */
 349     { 0x39A80171, 0x7139A801, 0x017139A8, 0xA8017139, }, /* x=E1 */
 350     { 0x2BB3166C, 0x6C2BB316, 0x166C2BB3, 0xB3166C2B, }, /* x=E2 */
 351     { 0x25BA1B67, 0x6725BA1B, 0x1B6725BA, 0xBA1B6725, }, /* x=E3 */
 352     { 0x0F853856, 0x560F8538, 0x38560F85, 0x8538560F, }, /* x=E4 */
 353     { 0x018C355D, 0x5D018C35, 0x355D018C, 0x8C355D01, }, /* x=E5 */
 354     { 0x13972240, 0x40139722, 0x22401397, 0x97224013, }, /* x=E6 */
 355     { 0x1D9E2F4B, 0x4B1D9E2F, 0x2F4B1D9E, 0x9E2F4B1D, }, /* x=E7 */
 356     { 0x47E96422, 0x2247E964, 0x642247E9, 0xE9642247, }, /* x=E8 */
 357     { 0x49E06929, 0x2949E069, 0x692949E0, 0xE0692949, }, /* x=E9 */
 358     { 0x5BFB7E34, 0x345BFB7E, 0x7E345BFB, 0xFB7E345B, }, /* x=EA */
 359     { 0x55F2733F, 0x3F55F273, 0x733F55F2, 0xF2733F55, }, /* x=EB */
 360     { 0x7FCD500E, 0x0E7FCD50, 0x500E7FCD, 0xCD500E7F, }, /* x=EC */
 361     { 0x71C45D05, 0x0571C45D, 0x5D0571C4, 0xC45D0571, }, /* x=ED */
 362     { 0x63DF4A18, 0x1863DF4A, 0x4A1863DF, 0xDF4A1863, }, /* x=EE */
 363     { 0x6DD64713, 0x136DD647, 0x47136DD6, 0xD647136D, }, /* x=EF */
 364     { 0xD731DCCA, 0xCAD731DC, 0xDCCAD731, 0x31DCCAD7, }, /* x=F0 */
 365     { 0xD938D1C1, 0xC1D938D1, 0xD1C1D938, 0x38D1C1D9, }, /* x=F1 */
 366     { 0xCB23C6DC, 0xDCCB23C6, 0xC6DCCB23, 0x23C6DCCB, }, /* x=F2 */
 367     { 0xC52ACBD7, 0xD7C52ACB, 0xCBD7C52A, 0x2ACBD7C5, }, /* x=F3 */
 368     { 0xEF15E8E6, 0xE6EF15E8, 0xE8E6EF15, 0x15E8E6EF, }, /* x=F4 */
 369     { 0xE11CE5ED, 0xEDE11CE5, 0xE5EDE11C, 0x1CE5EDE1, }, /* x=F5 */
 370     { 0xF307F2F0, 0xF0F307F2, 0xF2F0F307, 0x07F2F0F3, }, /* x=F6 */
 371     { 0xFD0EFFFB, 0xFBFD0EFF, 0xFFFBFD0E, 0x0EFFFBFD, }, /* x=F7 */
 372     { 0xA779B492, 0x92A779B4, 0xB492A779, 0x79B492A7, }, /* x=F8 */
 373     { 0xA970B999, 0x99A970B9, 0xB999A970, 0x70B999A9, }, /* x=F9 */
 374     { 0xBB6BAE84, 0x84BB6BAE, 0xAE84BB6B, 0x6BAE84BB, }, /* x=FA */
 375     { 0xB562A38F, 0x8FB562A3, 0xA38FB562, 0x62A38FB5, }, /* x=FB */
 376     { 0x9F5D80BE, 0xBE9F5D80, 0x80BE9F5D, 0x5D80BE9F, }, /* x=FC */
 377     { 0x91548DB5, 0xB591548D, 0x8DB59154, 0x548DB591, }, /* x=FD */
 378     { 0x834F9AA8, 0xA8834F9A, 0x9AA8834F, 0x4F9AA883, }, /* x=FE */
 379     { 0x8D4697A3, 0xA38D4697, 0x97A38D46, 0x4697A38D, }, /* x=FF */
 380 };
 381
 382
 383
 384 /*
 385 AES_Te0[x] = S [x].[02, 01, 01, 03];
 386 AES_Te1[x] = S [x].[03, 02, 01, 01];
 387 AES_Te2[x] = S [x].[01, 03, 02, 01];
 388 AES_Te3[x] = S [x].[01, 01, 03, 02];
 389 AES_Te4[x] = S [x].[01, 01, 01, 01];
 390
 391 AES_Td0[x] = Si[x].[0e, 09, 0d, 0b];
 392 AES_Td1[x] = Si[x].[0b, 0e, 09, 0d];
 393 AES_Td2[x] = Si[x].[0d, 0b, 0e, 09];
 394 AES_Td3[x] = Si[x].[09, 0d, 0b, 0e];
 395 AES_Td4[x] = Si[x].[01, 01, 01, 01];
 396 */
 397
 398 const uint32_t AES_Te0[256] = {
 399     0xc66363a5U, 0xf87c7c84U, 0xee777799U, 0xf67b7b8dU,
 400     0xfff2f20dU, 0xd66b6bbdU, 0xde6f6fb1U, 0x91c5c554U,
 401     0x60303050U, 0x02010103U, 0xce6767a9U, 0x562b2b7dU,
 402     0xe7fefe19U, 0xb5d7d762U, 0x4dababe6U, 0xec76769aU,
 403     0x8fcaca45U, 0x1f82829dU, 0x89c9c940U, 0xfa7d7d87U,
 404     0xeffafa15U, 0xb25959ebU, 0x8e4747c9U, 0xfbf0f00bU,
 405     0x41adadecU, 0xb3d4d467U, 0x5fa2a2fdU, 0x45afafeaU,
 406     0x239c9cbfU, 0x53a4a4f7U, 0xe4727296U, 0x9bc0c05bU,
 407     0x75b7b7c2U, 0xe1fdfd1cU, 0x3d9393aeU, 0x4c26266aU,
 408     0x6c36365aU, 0x7e3f3f41U, 0xf5f7f702U, 0x83cccc4fU,
 409     0x6834345cU, 0x51a5a5f4U, 0xd1e5e534U, 0xf9f1f108U,
 410     0xe2717193U, 0xabd8d873U, 0x62313153U, 0x2a15153fU,
 411     0x0804040cU, 0x95c7c752U, 0x46232365U, 0x9dc3c35eU,
 412     0x30181828U, 0x379696a1U, 0x0a05050fU, 0x2f9a9ab5U,
 413     0x0e070709U, 0x24121236U, 0x1b80809bU, 0xdfe2e23dU,
 414     0xcdebeb26U, 0x4e272769U, 0x7fb2b2cdU, 0xea75759fU,
 415     0x1209091bU, 0x1d83839eU, 0x582c2c74U, 0x341a1a2eU,
 416     0x361b1b2dU, 0xdc6e6eb2U, 0xb45a5aeeU, 0x5ba0a0fbU,
 417     0xa45252f6U, 0x763b3b4dU, 0xb7d6d661U, 0x7db3b3ceU,
 418     0x5229297bU, 0xdde3e33eU, 0x5e2f2f71U, 0x13848497U,
 419     0xa65353f5U, 0xb9d1d168U, 0x00000000U, 0xc1eded2cU,
 420     0x40202060U, 0xe3fcfc1fU, 0x79b1b1c8U, 0xb65b5bedU,
 421     0xd46a6abeU, 0x8dcbcb46U, 0x67bebed9U, 0x7239394bU,
 422     0x944a4adeU, 0x984c4cd4U, 0xb05858e8U, 0x85cfcf4aU,
 423     0xbbd0d06bU, 0xc5efef2aU, 0x4faaaae5U, 0xedfbfb16U,
 424     0x864343c5U, 0x9a4d4dd7U, 0x66333355U, 0x11858594U,
 425     0x8a4545cfU, 0xe9f9f910U, 0x04020206U, 0xfe7f7f81U,
 426     0xa05050f0U, 0x783c3c44U, 0x259f9fbaU, 0x4ba8a8e3U,
 427     0xa25151f3U, 0x5da3a3feU, 0x804040c0U, 0x058f8f8aU,
 428     0x3f9292adU, 0x219d9dbcU, 0x70383848U, 0xf1f5f504U,
 429     0x63bcbcdfU, 0x77b6b6c1U, 0xafdada75U, 0x42212163U,
 430     0x20101030U, 0xe5ffff1aU, 0xfdf3f30eU, 0xbfd2d26dU,
 431     0x81cdcd4cU, 0x180c0c14U, 0x26131335U, 0xc3ecec2fU,
 432     0xbe5f5fe1U, 0x359797a2U, 0x884444ccU, 0x2e171739U,
 433     0x93c4c457U, 0x55a7a7f2U, 0xfc7e7e82U, 0x7a3d3d47U,
 434     0xc86464acU, 0xba5d5de7U, 0x3219192bU, 0xe6737395U,
 435     0xc06060a0U, 0x19818198U, 0x9e4f4fd1U, 0xa3dcdc7fU,
 436     0x44222266U, 0x542a2a7eU, 0x3b9090abU, 0x0b888883U,
 437     0x8c4646caU, 0xc7eeee29U, 0x6bb8b8d3U, 0x2814143cU,
 438     0xa7dede79U, 0xbc5e5ee2U, 0x160b0b1dU, 0xaddbdb76U,
 439     0xdbe0e03bU, 0x64323256U, 0x743a3a4eU, 0x140a0a1eU,
 440     0x924949dbU, 0x0c06060aU, 0x4824246cU, 0xb85c5ce4U,
 441     0x9fc2c25dU, 0xbdd3d36eU, 0x43acacefU, 0xc46262a6U,
 442     0x399191a8U, 0x319595a4U, 0xd3e4e437U, 0xf279798bU,
 443     0xd5e7e732U, 0x8bc8c843U, 0x6e373759U, 0xda6d6db7U,
 444     0x018d8d8cU, 0xb1d5d564U, 0x9c4e4ed2U, 0x49a9a9e0U,
 445     0xd86c6cb4U, 0xac5656faU, 0xf3f4f407U, 0xcfeaea25U,
 446     0xca6565afU, 0xf47a7a8eU, 0x47aeaee9U, 0x10080818U,
 447     0x6fbabad5U, 0xf0787888U, 0x4a25256fU, 0x5c2e2e72U,
 448     0x381c1c24U, 0x57a6a6f1U, 0x73b4b4c7U, 0x97c6c651U,
 449     0xcbe8e823U, 0xa1dddd7cU, 0xe874749cU, 0x3e1f1f21U,
 450     0x964b4bddU, 0x61bdbddcU, 0x0d8b8b86U, 0x0f8a8a85U,
 451     0xe0707090U, 0x7c3e3e42U, 0x71b5b5c4U, 0xcc6666aaU,
 452     0x904848d8U, 0x06030305U, 0xf7f6f601U, 0x1c0e0e12U,
 453     0xc26161a3U, 0x6a35355fU, 0xae5757f9U, 0x69b9b9d0U,
 454     0x17868691U, 0x99c1c158U, 0x3a1d1d27U, 0x279e9eb9U,
 455     0xd9e1e138U, 0xebf8f813U, 0x2b9898b3U, 0x22111133U,
 456     0xd26969bbU, 0xa9d9d970U, 0x078e8e89U, 0x339494a7U,
 457     0x2d9b9bb6U, 0x3c1e1e22U, 0x15878792U, 0xc9e9e920U,
 458     0x87cece49U, 0xaa5555ffU, 0x50282878U, 0xa5dfdf7aU,
 459     0x038c8c8fU, 0x59a1a1f8U, 0x09898980U, 0x1a0d0d17U,
 460     0x65bfbfdaU, 0xd7e6e631U, 0x844242c6U, 0xd06868b8U,
 461     0x824141c3U, 0x299999b0U, 0x5a2d2d77U, 0x1e0f0f11U,
 462     0x7bb0b0cbU, 0xa85454fcU, 0x6dbbbbd6U, 0x2c16163aU,
 463 };
 464 const uint32_t AES_Te1[256] = {
 465     0xa5c66363U, 0x84f87c7cU, 0x99ee7777U, 0x8df67b7bU,
 466     0x0dfff2f2U, 0xbdd66b6bU, 0xb1de6f6fU, 0x5491c5c5U,
 467     0x50603030U, 0x03020101U, 0xa9ce6767U, 0x7d562b2bU,
 468     0x19e7fefeU, 0x62b5d7d7U, 0xe64dababU, 0x9aec7676U,
 469     0x458fcacaU, 0x9d1f8282U, 0x4089c9c9U, 0x87fa7d7dU,
 470     0x15effafaU, 0xebb25959U, 0xc98e4747U, 0x0bfbf0f0U,
 471     0xec41adadU, 0x67b3d4d4U, 0xfd5fa2a2U, 0xea45afafU,
 472     0xbf239c9cU, 0xf753a4a4U, 0x96e47272U, 0x5b9bc0c0U,
 473     0xc275b7b7U, 0x1ce1fdfdU, 0xae3d9393U, 0x6a4c2626U,
 474     0x5a6c3636U, 0x417e3f3fU, 0x02f5f7f7U, 0x4f83ccccU,
 475     0x5c683434U, 0xf451a5a5U, 0x34d1e5e5U, 0x08f9f1f1U,
 476     0x93e27171U, 0x73abd8d8U, 0x53623131U, 0x3f2a1515U,
 477     0x0c080404U, 0x5295c7c7U, 0x65462323U, 0x5e9dc3c3U,
 478     0x28301818U, 0xa1379696U, 0x0f0a0505U, 0xb52f9a9aU,
 479     0x090e0707U, 0x36241212U, 0x9b1b8080U, 0x3ddfe2e2U,
 480     0x26cdebebU, 0x694e2727U, 0xcd7fb2b2U, 0x9fea7575U,
 481     0x1b120909U, 0x9e1d8383U, 0x74582c2cU, 0x2e341a1aU,
 482     0x2d361b1bU, 0xb2dc6e6eU, 0xeeb45a5aU, 0xfb5ba0a0U,
 483     0xf6a45252U, 0x4d763b3bU, 0x61b7d6d6U, 0xce7db3b3U,
 484     0x7b522929U, 0x3edde3e3U, 0x715e2f2fU, 0x97138484U,
 485     0xf5a65353U, 0x68b9d1d1U, 0x00000000U, 0x2cc1ededU,
 486     0x60402020U, 0x1fe3fcfcU, 0xc879b1b1U, 0xedb65b5bU,
 487     0xbed46a6aU, 0x468dcbcbU, 0xd967bebeU, 0x4b723939U,
 488     0xde944a4aU, 0xd4984c4cU, 0xe8b05858U, 0x4a85cfcfU,
 489     0x6bbbd0d0U, 0x2ac5efefU, 0xe54faaaaU, 0x16edfbfbU,
 490     0xc5864343U, 0xd79a4d4dU, 0x55663333U, 0x94118585U,
 491     0xcf8a4545U, 0x10e9f9f9U, 0x06040202U, 0x81fe7f7fU,
 492     0xf0a05050U, 0x44783c3cU, 0xba259f9fU, 0xe34ba8a8U,
 493     0xf3a25151U, 0xfe5da3a3U, 0xc0804040U, 0x8a058f8fU,
 494     0xad3f9292U, 0xbc219d9dU, 0x48703838U, 0x04f1f5f5U,
 495     0xdf63bcbcU, 0xc177b6b6U, 0x75afdadaU, 0x63422121U,
 496     0x30201010U, 0x1ae5ffffU, 0x0efdf3f3U, 0x6dbfd2d2U,
 497     0x4c81cdcdU, 0x14180c0cU, 0x35261313U, 0x2fc3ececU,
 498     0xe1be5f5fU, 0xa2359797U, 0xcc884444U, 0x392e1717U,
 499     0x5793c4c4U, 0xf255a7a7U, 0x82fc7e7eU, 0x477a3d3dU,
 500     0xacc86464U, 0xe7ba5d5dU, 0x2b321919U, 0x95e67373U,
 501     0xa0c06060U, 0x98198181U, 0xd19e4f4fU, 0x7fa3dcdcU,
 502     0x66442222U, 0x7e542a2aU, 0xab3b9090U, 0x830b8888U,
 503     0xca8c4646U, 0x29c7eeeeU, 0xd36bb8b8U, 0x3c281414U,
 504     0x79a7dedeU, 0xe2bc5e5eU, 0x1d160b0bU, 0x76addbdbU,
 505     0x3bdbe0e0U, 0x56643232U, 0x4e743a3aU, 0x1e140a0aU,
 506     0xdb924949U, 0x0a0c0606U, 0x6c482424U, 0xe4b85c5cU,
 507     0x5d9fc2c2U, 0x6ebdd3d3U, 0xef43acacU, 0xa6c46262U,
 508     0xa8399191U, 0xa4319595U, 0x37d3e4e4U, 0x8bf27979U,
 509     0x32d5e7e7U, 0x438bc8c8U, 0x596e3737U, 0xb7da6d6dU,
 510     0x8c018d8dU, 0x64b1d5d5U, 0xd29c4e4eU, 0xe049a9a9U,
 511     0xb4d86c6cU, 0xfaac5656U, 0x07f3f4f4U, 0x25cfeaeaU,
 512     0xafca6565U, 0x8ef47a7aU, 0xe947aeaeU, 0x18100808U,
 513     0xd56fbabaU, 0x88f07878U, 0x6f4a2525U, 0x725c2e2eU,
 514     0x24381c1cU, 0xf157a6a6U, 0xc773b4b4U, 0x5197c6c6U,
 515     0x23cbe8e8U, 0x7ca1ddddU, 0x9ce87474U, 0x213e1f1fU,
 516     0xdd964b4bU, 0xdc61bdbdU, 0x860d8b8bU, 0x850f8a8aU,
 517     0x90e07070U, 0x427c3e3eU, 0xc471b5b5U, 0xaacc6666U,
 518     0xd8904848U, 0x05060303U, 0x01f7f6f6U, 0x121c0e0eU,
 519     0xa3c26161U, 0x5f6a3535U, 0xf9ae5757U, 0xd069b9b9U,
 520     0x91178686U, 0x5899c1c1U, 0x273a1d1dU, 0xb9279e9eU,
 521     0x38d9e1e1U, 0x13ebf8f8U, 0xb32b9898U, 0x33221111U,
 522     0xbbd26969U, 0x70a9d9d9U, 0x89078e8eU, 0xa7339494U,
 523     0xb62d9b9bU, 0x223c1e1eU, 0x92158787U, 0x20c9e9e9U,
 524     0x4987ceceU, 0xffaa5555U, 0x78502828U, 0x7aa5dfdfU,
 525     0x8f038c8cU, 0xf859a1a1U, 0x80098989U, 0x171a0d0dU,
 526     0xda65bfbfU, 0x31d7e6e6U, 0xc6844242U, 0xb8d06868U,
 527     0xc3824141U, 0xb0299999U, 0x775a2d2dU, 0x111e0f0fU,
 528     0xcb7bb0b0U, 0xfca85454U, 0xd66dbbbbU, 0x3a2c1616U,
 529 };
 530 const uint32_t AES_Te2[256] = {
 531     0x63a5c663U, 0x7c84f87cU, 0x7799ee77U, 0x7b8df67bU,
 532     0xf20dfff2U, 0x6bbdd66bU, 0x6fb1de6fU, 0xc55491c5U,
 533     0x30506030U, 0x01030201U, 0x67a9ce67U, 0x2b7d562bU,
 534     0xfe19e7feU, 0xd762b5d7U, 0xabe64dabU, 0x769aec76U,
 535     0xca458fcaU, 0x829d1f82U, 0xc94089c9U, 0x7d87fa7dU,
 536     0xfa15effaU, 0x59ebb259U, 0x47c98e47U, 0xf00bfbf0U,
 537     0xadec41adU, 0xd467b3d4U, 0xa2fd5fa2U, 0xafea45afU,
 538     0x9cbf239cU, 0xa4f753a4U, 0x7296e472U, 0xc05b9bc0U,
 539     0xb7c275b7U, 0xfd1ce1fdU, 0x93ae3d93U, 0x266a4c26U,
 540     0x365a6c36U, 0x3f417e3fU, 0xf702f5f7U, 0xcc4f83ccU,
 541     0x345c6834U, 0xa5f451a5U, 0xe534d1e5U, 0xf108f9f1U,
 542     0x7193e271U, 0xd873abd8U, 0x31536231U, 0x153f2a15U,
 543     0x040c0804U, 0xc75295c7U, 0x23654623U, 0xc35e9dc3U,
 544     0x18283018U, 0x96a13796U, 0x050f0a05U, 0x9ab52f9aU,
 545     0x07090e07U, 0x12362412U, 0x809b1b80U, 0xe23ddfe2U,
 546     0xeb26cdebU, 0x27694e27U, 0xb2cd7fb2U, 0x759fea75U,
 547     0x091b1209U, 0x839e1d83U, 0x2c74582cU, 0x1a2e341aU,
 548     0x1b2d361bU, 0x6eb2dc6eU, 0x5aeeb45aU, 0xa0fb5ba0U,
 549     0x52f6a452U, 0x3b4d763bU, 0xd661b7d6U, 0xb3ce7db3U,
 550     0x297b5229U, 0xe33edde3U, 0x2f715e2fU, 0x84971384U,
 551     0x53f5a653U, 0xd168b9d1U, 0x00000000U, 0xed2cc1edU,
 552     0x20604020U, 0xfc1fe3fcU, 0xb1c879b1U, 0x5bedb65bU,
 553     0x6abed46aU, 0xcb468dcbU, 0xbed967beU, 0x394b7239U,
 554     0x4ade944aU, 0x4cd4984cU, 0x58e8b058U, 0xcf4a85cfU,
 555     0xd06bbbd0U, 0xef2ac5efU, 0xaae54faaU, 0xfb16edfbU,
 556     0x43c58643U, 0x4dd79a4dU, 0x33556633U, 0x85941185U,
 557     0x45cf8a45U, 0xf910e9f9U, 0x02060402U, 0x7f81fe7fU,
 558     0x50f0a050U, 0x3c44783cU, 0x9fba259fU, 0xa8e34ba8U,
 559     0x51f3a251U, 0xa3fe5da3U, 0x40c08040U, 0x8f8a058fU,
 560     0x92ad3f92U, 0x9dbc219dU, 0x38487038U, 0xf504f1f5U,
 561     0xbcdf63bcU, 0xb6c177b6U, 0xda75afdaU, 0x21634221U,
 562     0x10302010U, 0xff1ae5ffU, 0xf30efdf3U, 0xd26dbfd2U,
 563     0xcd4c81cdU, 0x0c14180cU, 0x13352613U, 0xec2fc3ecU,
 564     0x5fe1be5fU, 0x97a23597U, 0x44cc8844U, 0x17392e17U,
 565     0xc45793c4U, 0xa7f255a7U, 0x7e82fc7eU, 0x3d477a3dU,
 566     0x64acc864U, 0x5de7ba5dU, 0x192b3219U, 0x7395e673U,
 567     0x60a0c060U, 0x81981981U, 0x4fd19e4fU, 0xdc7fa3dcU,
 568     0x22664422U, 0x2a7e542aU, 0x90ab3b90U, 0x88830b88U,
 569     0x46ca8c46U, 0xee29c7eeU, 0xb8d36bb8U, 0x143c2814U,
 570     0xde79a7deU, 0x5ee2bc5eU, 0x0b1d160bU, 0xdb76addbU,
 571     0xe03bdbe0U, 0x32566432U, 0x3a4e743aU, 0x0a1e140aU,
 572     0x49db9249U, 0x060a0c06U, 0x246c4824U, 0x5ce4b85cU,
 573     0xc25d9fc2U, 0xd36ebdd3U, 0xacef43acU, 0x62a6c462U,
 574     0x91a83991U, 0x95a43195U, 0xe437d3e4U, 0x798bf279U,
 575     0xe732d5e7U, 0xc8438bc8U, 0x37596e37U, 0x6db7da6dU,
 576     0x8d8c018dU, 0xd564b1d5U, 0x4ed29c4eU, 0xa9e049a9U,
 577     0x6cb4d86cU, 0x56faac56U, 0xf407f3f4U, 0xea25cfeaU,
 578     0x65afca65U, 0x7a8ef47aU, 0xaee947aeU, 0x08181008U,
 579     0xbad56fbaU, 0x7888f078U, 0x256f4a25U, 0x2e725c2eU,
 580     0x1c24381cU, 0xa6f157a6U, 0xb4c773b4U, 0xc65197c6U,
 581     0xe823cbe8U, 0xdd7ca1ddU, 0x749ce874U, 0x1f213e1fU,
 582     0x4bdd964bU, 0xbddc61bdU, 0x8b860d8bU, 0x8a850f8aU,
 583     0x7090e070U, 0x3e427c3eU, 0xb5c471b5U, 0x66aacc66U,
 584     0x48d89048U, 0x03050603U, 0xf601f7f6U, 0x0e121c0eU,
 585     0x61a3c261U, 0x355f6a35U, 0x57f9ae57U, 0xb9d069b9U,
 586     0x86911786U, 0xc15899c1U, 0x1d273a1dU, 0x9eb9279eU,
 587     0xe138d9e1U, 0xf813ebf8U, 0x98b32b98U, 0x11332211U,
 588     0x69bbd269U, 0xd970a9d9U, 0x8e89078eU, 0x94a73394U,
 589     0x9bb62d9bU, 0x1e223c1eU, 0x87921587U, 0xe920c9e9U,
 590     0xce4987ceU, 0x55ffaa55U, 0x28785028U, 0xdf7aa5dfU,
 591     0x8c8f038cU, 0xa1f859a1U, 0x89800989U, 0x0d171a0dU,
 592     0xbfda65bfU, 0xe631d7e6U, 0x42c68442U, 0x68b8d068U,
 593     0x41c38241U, 0x99b02999U, 0x2d775a2dU, 0x0f111e0fU,
 594     0xb0cb7bb0U, 0x54fca854U, 0xbbd66dbbU, 0x163a2c16U,
 595 };
 596 const uint32_t AES_Te3[256] = {
 597
 598     0x6363a5c6U, 0x7c7c84f8U, 0x777799eeU, 0x7b7b8df6U,
 599     0xf2f20dffU, 0x6b6bbdd6U, 0x6f6fb1deU, 0xc5c55491U,
 600     0x30305060U, 0x01010302U, 0x6767a9ceU, 0x2b2b7d56U,
 601     0xfefe19e7U, 0xd7d762b5U, 0xababe64dU, 0x76769aecU,
 602     0xcaca458fU, 0x82829d1fU, 0xc9c94089U, 0x7d7d87faU,
 603     0xfafa15efU, 0x5959ebb2U, 0x4747c98eU, 0xf0f00bfbU,
 604     0xadadec41U, 0xd4d467b3U, 0xa2a2fd5fU, 0xafafea45U,
 605     0x9c9cbf23U, 0xa4a4f753U, 0x727296e4U, 0xc0c05b9bU,
 606     0xb7b7c275U, 0xfdfd1ce1U, 0x9393ae3dU, 0x26266a4cU,
 607     0x36365a6cU, 0x3f3f417eU, 0xf7f702f5U, 0xcccc4f83U,
 608     0x34345c68U, 0xa5a5f451U, 0xe5e534d1U, 0xf1f108f9U,
 609     0x717193e2U, 0xd8d873abU, 0x31315362U, 0x15153f2aU,
 610     0x04040c08U, 0xc7c75295U, 0x23236546U, 0xc3c35e9dU,
 611     0x18182830U, 0x9696a137U, 0x05050f0aU, 0x9a9ab52fU,
 612     0x0707090eU, 0x12123624U, 0x80809b1bU, 0xe2e23ddfU,
 613     0xebeb26cdU, 0x2727694eU, 0xb2b2cd7fU, 0x75759feaU,
 614     0x09091b12U, 0x83839e1dU, 0x2c2c7458U, 0x1a1a2e34U,
 615     0x1b1b2d36U, 0x6e6eb2dcU, 0x5a5aeeb4U, 0xa0a0fb5bU,
 616     0x5252f6a4U, 0x3b3b4d76U, 0xd6d661b7U, 0xb3b3ce7dU,
 617     0x29297b52U, 0xe3e33eddU, 0x2f2f715eU, 0x84849713U,
 618     0x5353f5a6U, 0xd1d168b9U, 0x00000000U, 0xeded2cc1U,
 619     0x20206040U, 0xfcfc1fe3U, 0xb1b1c879U, 0x5b5bedb6U,
 620     0x6a6abed4U, 0xcbcb468dU, 0xbebed967U, 0x39394b72U,
 621     0x4a4ade94U, 0x4c4cd498U, 0x5858e8b0U, 0xcfcf4a85U,
 622     0xd0d06bbbU, 0xefef2ac5U, 0xaaaae54fU, 0xfbfb16edU,
 623     0x4343c586U, 0x4d4dd79aU, 0x33335566U, 0x85859411U,
 624     0x4545cf8aU, 0xf9f910e9U, 0x02020604U, 0x7f7f81feU,
 625     0x5050f0a0U, 0x3c3c4478U, 0x9f9fba25U, 0xa8a8e34bU,
 626     0x5151f3a2U, 0xa3a3fe5dU, 0x4040c080U, 0x8f8f8a05U,
 627     0x9292ad3fU, 0x9d9dbc21U, 0x38384870U, 0xf5f504f1U,
 628     0xbcbcdf63U, 0xb6b6c177U, 0xdada75afU, 0x21216342U,
 629     0x10103020U, 0xffff1ae5U, 0xf3f30efdU, 0xd2d26dbfU,
 630     0xcdcd4c81U, 0x0c0c1418U, 0x13133526U, 0xecec2fc3U,
 631     0x5f5fe1beU, 0x9797a235U, 0x4444cc88U, 0x1717392eU,
 632     0xc4c45793U, 0xa7a7f255U, 0x7e7e82fcU, 0x3d3d477aU,
 633     0x6464acc8U, 0x5d5de7baU, 0x19192b32U, 0x737395e6U,
 634     0x6060a0c0U, 0x81819819U, 0x4f4fd19eU, 0xdcdc7fa3U,
 635     0x22226644U, 0x2a2a7e54U, 0x9090ab3bU, 0x8888830bU,
 636     0x4646ca8cU, 0xeeee29c7U, 0xb8b8d36bU, 0x14143c28U,
 637     0xdede79a7U, 0x5e5ee2bcU, 0x0b0b1d16U, 0xdbdb76adU,
 638     0xe0e03bdbU, 0x32325664U, 0x3a3a4e74U, 0x0a0a1e14U,
 639     0x4949db92U, 0x06060a0cU, 0x24246c48U, 0x5c5ce4b8U,
 640     0xc2c25d9fU, 0xd3d36ebdU, 0xacacef43U, 0x6262a6c4U,
 641     0x9191a839U, 0x9595a431U, 0xe4e437d3U, 0x79798bf2U,
 642     0xe7e732d5U, 0xc8c8438bU, 0x3737596eU, 0x6d6db7daU,
 643     0x8d8d8c01U, 0xd5d564b1U, 0x4e4ed29cU, 0xa9a9e049U,
 644     0x6c6cb4d8U, 0x5656faacU, 0xf4f407f3U, 0xeaea25cfU,
 645     0x6565afcaU, 0x7a7a8ef4U, 0xaeaee947U, 0x08081810U,
 646     0xbabad56fU, 0x787888f0U, 0x25256f4aU, 0x2e2e725cU,
 647     0x1c1c2438U, 0xa6a6f157U, 0xb4b4c773U, 0xc6c65197U,
 648     0xe8e823cbU, 0xdddd7ca1U, 0x74749ce8U, 0x1f1f213eU,
 649     0x4b4bdd96U, 0xbdbddc61U, 0x8b8b860dU, 0x8a8a850fU,
 650     0x707090e0U, 0x3e3e427cU, 0xb5b5c471U, 0x6666aaccU,
 651     0x4848d890U, 0x03030506U, 0xf6f601f7U, 0x0e0e121cU,
 652     0x6161a3c2U, 0x35355f6aU, 0x5757f9aeU, 0xb9b9d069U,
 653     0x86869117U, 0xc1c15899U, 0x1d1d273aU, 0x9e9eb927U,
 654     0xe1e138d9U, 0xf8f813ebU, 0x9898b32bU, 0x11113322U,
 655     0x6969bbd2U, 0xd9d970a9U, 0x8e8e8907U, 0x9494a733U,
 656     0x9b9bb62dU, 0x1e1e223cU, 0x87879215U, 0xe9e920c9U,
 657     0xcece4987U, 0x5555ffaaU, 0x28287850U, 0xdfdf7aa5U,
 658     0x8c8c8f03U, 0xa1a1f859U, 0x89898009U, 0x0d0d171aU,
 659     0xbfbfda65U, 0xe6e631d7U, 0x4242c684U, 0x6868b8d0U,
 660     0x4141c382U, 0x9999b029U, 0x2d2d775aU, 0x0f0f111eU,
 661     0xb0b0cb7bU, 0x5454fca8U, 0xbbbbd66dU, 0x16163a2cU,
 662 };
 663 const uint32_t AES_Te4[256] = {
 664     0x63636363U, 0x7c7c7c7cU, 0x77777777U, 0x7b7b7b7bU,
 665     0xf2f2f2f2U, 0x6b6b6b6bU, 0x6f6f6f6fU, 0xc5c5c5c5U,
 666     0x30303030U, 0x01010101U, 0x67676767U, 0x2b2b2b2bU,
 667     0xfefefefeU, 0xd7d7d7d7U, 0xababababU, 0x76767676U,
 668     0xcacacacaU, 0x82828282U, 0xc9c9c9c9U, 0x7d7d7d7dU,
 669     0xfafafafaU, 0x59595959U, 0x47474747U, 0xf0f0f0f0U,
 670     0xadadadadU, 0xd4d4d4d4U, 0xa2a2a2a2U, 0xafafafafU,
 671     0x9c9c9c9cU, 0xa4a4a4a4U, 0x72727272U, 0xc0c0c0c0U,
 672     0xb7b7b7b7U, 0xfdfdfdfdU, 0x93939393U, 0x26262626U,
 673     0x36363636U, 0x3f3f3f3fU, 0xf7f7f7f7U, 0xccccccccU,
 674     0x34343434U, 0xa5a5a5a5U, 0xe5e5e5e5U, 0xf1f1f1f1U,
 675     0x71717171U, 0xd8d8d8d8U, 0x31313131U, 0x15151515U,
 676     0x04040404U, 0xc7c7c7c7U, 0x23232323U, 0xc3c3c3c3U,
 677     0x18181818U, 0x96969696U, 0x05050505U, 0x9a9a9a9aU,
 678     0x07070707U, 0x12121212U, 0x80808080U, 0xe2e2e2e2U,
 679     0xebebebebU, 0x27272727U, 0xb2b2b2b2U, 0x75757575U,
 680     0x09090909U, 0x83838383U, 0x2c2c2c2cU, 0x1a1a1a1aU,
 681     0x1b1b1b1bU, 0x6e6e6e6eU, 0x5a5a5a5aU, 0xa0a0a0a0U,
 682     0x52525252U, 0x3b3b3b3bU, 0xd6d6d6d6U, 0xb3b3b3b3U,
 683     0x29292929U, 0xe3e3e3e3U, 0x2f2f2f2fU, 0x84848484U,
 684     0x53535353U, 0xd1d1d1d1U, 0x00000000U, 0xededededU,
 685     0x20202020U, 0xfcfcfcfcU, 0xb1b1b1b1U, 0x5b5b5b5bU,
 686     0x6a6a6a6aU, 0xcbcbcbcbU, 0xbebebebeU, 0x39393939U,
 687     0x4a4a4a4aU, 0x4c4c4c4cU, 0x58585858U, 0xcfcfcfcfU,
 688     0xd0d0d0d0U, 0xefefefefU, 0xaaaaaaaaU, 0xfbfbfbfbU,
 689     0x43434343U, 0x4d4d4d4dU, 0x33333333U, 0x85858585U,
 690     0x45454545U, 0xf9f9f9f9U, 0x02020202U, 0x7f7f7f7fU,
 691     0x50505050U, 0x3c3c3c3cU, 0x9f9f9f9fU, 0xa8a8a8a8U,
 692     0x51515151U, 0xa3a3a3a3U, 0x40404040U, 0x8f8f8f8fU,
 693     0x92929292U, 0x9d9d9d9dU, 0x38383838U, 0xf5f5f5f5U,
 694     0xbcbcbcbcU, 0xb6b6b6b6U, 0xdadadadaU, 0x21212121U,
 695     0x10101010U, 0xffffffffU, 0xf3f3f3f3U, 0xd2d2d2d2U,
 696     0xcdcdcdcdU, 0x0c0c0c0cU, 0x13131313U, 0xececececU,
 697     0x5f5f5f5fU, 0x97979797U, 0x44444444U, 0x17171717U,
 698     0xc4c4c4c4U, 0xa7a7a7a7U, 0x7e7e7e7eU, 0x3d3d3d3dU,
 699     0x64646464U, 0x5d5d5d5dU, 0x19191919U, 0x73737373U,
 700     0x60606060U, 0x81818181U, 0x4f4f4f4fU, 0xdcdcdcdcU,
 701     0x22222222U, 0x2a2a2a2aU, 0x90909090U, 0x88888888U,
 702     0x46464646U, 0xeeeeeeeeU, 0xb8b8b8b8U, 0x14141414U,
 703     0xdedededeU, 0x5e5e5e5eU, 0x0b0b0b0bU, 0xdbdbdbdbU,
 704     0xe0e0e0e0U, 0x32323232U, 0x3a3a3a3aU, 0x0a0a0a0aU,
 705     0x49494949U, 0x06060606U, 0x24242424U, 0x5c5c5c5cU,
 706     0xc2c2c2c2U, 0xd3d3d3d3U, 0xacacacacU, 0x62626262U,
 707     0x91919191U, 0x95959595U, 0xe4e4e4e4U, 0x79797979U,
 708     0xe7e7e7e7U, 0xc8c8c8c8U, 0x37373737U, 0x6d6d6d6dU,
 709     0x8d8d8d8dU, 0xd5d5d5d5U, 0x4e4e4e4eU, 0xa9a9a9a9U,
 710     0x6c6c6c6cU, 0x56565656U, 0xf4f4f4f4U, 0xeaeaeaeaU,
 711     0x65656565U, 0x7a7a7a7aU, 0xaeaeaeaeU, 0x08080808U,
 712     0xbabababaU, 0x78787878U, 0x25252525U, 0x2e2e2e2eU,
 713     0x1c1c1c1cU, 0xa6a6a6a6U, 0xb4b4b4b4U, 0xc6c6c6c6U,
 714     0xe8e8e8e8U, 0xddddddddU, 0x74747474U, 0x1f1f1f1fU,
 715     0x4b4b4b4bU, 0xbdbdbdbdU, 0x8b8b8b8bU, 0x8a8a8a8aU,
 716     0x70707070U, 0x3e3e3e3eU, 0xb5b5b5b5U, 0x66666666U,
 717     0x48484848U, 0x03030303U, 0xf6f6f6f6U, 0x0e0e0e0eU,
 718     0x61616161U, 0x35353535U, 0x57575757U, 0xb9b9b9b9U,
 719     0x86868686U, 0xc1c1c1c1U, 0x1d1d1d1dU, 0x9e9e9e9eU,
 720     0xe1e1e1e1U, 0xf8f8f8f8U, 0x98989898U, 0x11111111U,
 721     0x69696969U, 0xd9d9d9d9U, 0x8e8e8e8eU, 0x94949494U,
 722     0x9b9b9b9bU, 0x1e1e1e1eU, 0x87878787U, 0xe9e9e9e9U,
 723     0xcecececeU, 0x55555555U, 0x28282828U, 0xdfdfdfdfU,
 724     0x8c8c8c8cU, 0xa1a1a1a1U, 0x89898989U, 0x0d0d0d0dU,
 725     0xbfbfbfbfU, 0xe6e6e6e6U, 0x42424242U, 0x68686868U,
 726     0x41414141U, 0x99999999U, 0x2d2d2d2dU, 0x0f0f0f0fU,
 727     0xb0b0b0b0U, 0x54545454U, 0xbbbbbbbbU, 0x16161616U,
 728 };
 729 const uint32_t AES_Td0[256] = {
 730     0x51f4a750U, 0x7e416553U, 0x1a17a4c3U, 0x3a275e96U,
 731     0x3bab6bcbU, 0x1f9d45f1U, 0xacfa58abU, 0x4be30393U,
 732     0x2030fa55U, 0xad766df6U, 0x88cc7691U, 0xf5024c25U,
 733     0x4fe5d7fcU, 0xc52acbd7U, 0x26354480U, 0xb562a38fU,
 734     0xdeb15a49U, 0x25ba1b67U, 0x45ea0e98U, 0x5dfec0e1U,
 735     0xc32f7502U, 0x814cf012U, 0x8d4697a3U, 0x6bd3f9c6U,
 736     0x038f5fe7U, 0x15929c95U, 0xbf6d7aebU, 0x955259daU,
 737     0xd4be832dU, 0x587421d3U, 0x49e06929U, 0x8ec9c844U,
 738     0x75c2896aU, 0xf48e7978U, 0x99583e6bU, 0x27b971ddU,
 739     0xbee14fb6U, 0xf088ad17U, 0xc920ac66U, 0x7dce3ab4U,
 740     0x63df4a18U, 0xe51a3182U, 0x97513360U, 0x62537f45U,
 741     0xb16477e0U, 0xbb6bae84U, 0xfe81a01cU, 0xf9082b94U,
 742     0x70486858U, 0x8f45fd19U, 0x94de6c87U, 0x527bf8b7U,
 743     0xab73d323U, 0x724b02e2U, 0xe31f8f57U, 0x6655ab2aU,
 744     0xb2eb2807U, 0x2fb5c203U, 0x86c57b9aU, 0xd33708a5U,
 745     0x302887f2U, 0x23bfa5b2U, 0x02036abaU, 0xed16825cU,
 746     0x8acf1c2bU, 0xa779b492U, 0xf307f2f0U, 0x4e69e2a1U,
 747     0x65daf4cdU, 0x0605bed5U, 0xd134621fU, 0xc4a6fe8aU,
 748     0x342e539dU, 0xa2f355a0U, 0x058ae132U, 0xa4f6eb75U,
 749     0x0b83ec39U, 0x4060efaaU, 0x5e719f06U, 0xbd6e1051U,
 750     0x3e218af9U, 0x96dd063dU, 0xdd3e05aeU, 0x4de6bd46U,
 751     0x91548db5U, 0x71c45d05U, 0x0406d46fU, 0x605015ffU,
 752     0x1998fb24U, 0xd6bde997U, 0x894043ccU, 0x67d99e77U,
 753     0xb0e842bdU, 0x07898b88U, 0xe7195b38U, 0x79c8eedbU,
 754     0xa17c0a47U, 0x7c420fe9U, 0xf8841ec9U, 0x00000000U,
 755     0x09808683U, 0x322bed48U, 0x1e1170acU, 0x6c5a724eU,
 756     0xfd0efffbU, 0x0f853856U, 0x3daed51eU, 0x362d3927U,
 757     0x0a0fd964U, 0x685ca621U, 0x9b5b54d1U, 0x24362e3aU,
 758     0x0c0a67b1U, 0x9357e70fU, 0xb4ee96d2U, 0x1b9b919eU,
 759     0x80c0c54fU, 0x61dc20a2U, 0x5a774b69U, 0x1c121a16U,
 760     0xe293ba0aU, 0xc0a02ae5U, 0x3c22e043U, 0x121b171dU,
 761     0x0e090d0bU, 0xf28bc7adU, 0x2db6a8b9U, 0x141ea9c8U,
 762     0x57f11985U, 0xaf75074cU, 0xee99ddbbU, 0xa37f60fdU,
 763     0xf701269fU, 0x5c72f5bcU, 0x44663bc5U, 0x5bfb7e34U,
 764     0x8b432976U, 0xcb23c6dcU, 0xb6edfc68U, 0xb8e4f163U,
 765     0xd731dccaU, 0x42638510U, 0x13972240U, 0x84c61120U,
 766     0x854a247dU, 0xd2bb3df8U, 0xaef93211U, 0xc729a16dU,
 767     0x1d9e2f4bU, 0xdcb230f3U, 0x0d8652ecU, 0x77c1e3d0U,
 768     0x2bb3166cU, 0xa970b999U, 0x119448faU, 0x47e96422U,
 769     0xa8fc8cc4U, 0xa0f03f1aU, 0x567d2cd8U, 0x223390efU,
 770     0x87494ec7U, 0xd938d1c1U, 0x8ccaa2feU, 0x98d40b36U,
 771     0xa6f581cfU, 0xa57ade28U, 0xdab78e26U, 0x3fadbfa4U,
 772     0x2c3a9de4U, 0x5078920dU, 0x6a5fcc9bU, 0x547e4662U,
 773     0xf68d13c2U, 0x90d8b8e8U, 0x2e39f75eU, 0x82c3aff5U,
 774     0x9f5d80beU, 0x69d0937cU, 0x6fd52da9U, 0xcf2512b3U,
 775     0xc8ac993bU, 0x10187da7U, 0xe89c636eU, 0xdb3bbb7bU,
 776     0xcd267809U, 0x6e5918f4U, 0xec9ab701U, 0x834f9aa8U,
 777     0xe6956e65U, 0xaaffe67eU, 0x21bccf08U, 0xef15e8e6U,
 778     0xbae79bd9U, 0x4a6f36ceU, 0xea9f09d4U, 0x29b07cd6U,
 779     0x31a4b2afU, 0x2a3f2331U, 0xc6a59430U, 0x35a266c0U,
 780     0x744ebc37U, 0xfc82caa6U, 0xe090d0b0U, 0x33a7d815U,
 781     0xf104984aU, 0x41ecdaf7U, 0x7fcd500eU, 0x1791f62fU,
 782     0x764dd68dU, 0x43efb04dU, 0xccaa4d54U, 0xe49604dfU,
 783     0x9ed1b5e3U, 0x4c6a881bU, 0xc12c1fb8U, 0x4665517fU,
 784     0x9d5eea04U, 0x018c355dU, 0xfa877473U, 0xfb0b412eU,
 785     0xb3671d5aU, 0x92dbd252U, 0xe9105633U, 0x6dd64713U,
 786     0x9ad7618cU, 0x37a10c7aU, 0x59f8148eU, 0xeb133c89U,
 787     0xcea927eeU, 0xb761c935U, 0xe11ce5edU, 0x7a47b13cU,
 788     0x9cd2df59U, 0x55f2733fU, 0x1814ce79U, 0x73c737bfU,
 789     0x53f7cdeaU, 0x5ffdaa5bU, 0xdf3d6f14U, 0x7844db86U,
 790     0xcaaff381U, 0xb968c43eU, 0x3824342cU, 0xc2a3405fU,
 791     0x161dc372U, 0xbce2250cU, 0x283c498bU, 0xff0d9541U,
 792     0x39a80171U, 0x080cb3deU, 0xd8b4e49cU, 0x6456c190U,
 793     0x7bcb8461U, 0xd532b670U, 0x486c5c74U, 0xd0b85742U,
 794 };
 795 const uint32_t AES_Td1[256] = {
 796     0x5051f4a7U, 0x537e4165U, 0xc31a17a4U, 0x963a275eU,
 797     0xcb3bab6bU, 0xf11f9d45U, 0xabacfa58U, 0x934be303U,
 798     0x552030faU, 0xf6ad766dU, 0x9188cc76U, 0x25f5024cU,
 799     0xfc4fe5d7U, 0xd7c52acbU, 0x80263544U, 0x8fb562a3U,
 800     0x49deb15aU, 0x6725ba1bU, 0x9845ea0eU, 0xe15dfec0U,
 801     0x02c32f75U, 0x12814cf0U, 0xa38d4697U, 0xc66bd3f9U,
 802     0xe7038f5fU, 0x9515929cU, 0xebbf6d7aU, 0xda955259U,
 803     0x2dd4be83U, 0xd3587421U, 0x2949e069U, 0x448ec9c8U,
 804     0x6a75c289U, 0x78f48e79U, 0x6b99583eU, 0xdd27b971U,
 805     0xb6bee14fU, 0x17f088adU, 0x66c920acU, 0xb47dce3aU,
 806     0x1863df4aU, 0x82e51a31U, 0x60975133U, 0x4562537fU,
 807     0xe0b16477U, 0x84bb6baeU, 0x1cfe81a0U, 0x94f9082bU,
 808     0x58704868U, 0x198f45fdU, 0x8794de6cU, 0xb7527bf8U,
 809     0x23ab73d3U, 0xe2724b02U, 0x57e31f8fU, 0x2a6655abU,
 810     0x07b2eb28U, 0x032fb5c2U, 0x9a86c57bU, 0xa5d33708U,
 811     0xf2302887U, 0xb223bfa5U, 0xba02036aU, 0x5ced1682U,
 812     0x2b8acf1cU, 0x92a779b4U, 0xf0f307f2U, 0xa14e69e2U,
 813     0xcd65daf4U, 0xd50605beU, 0x1fd13462U, 0x8ac4a6feU,
 814     0x9d342e53U, 0xa0a2f355U, 0x32058ae1U, 0x75a4f6ebU,
 815     0x390b83ecU, 0xaa4060efU, 0x065e719fU, 0x51bd6e10U,
 816     0xf93e218aU, 0x3d96dd06U, 0xaedd3e05U, 0x464de6bdU,
 817     0xb591548dU, 0x0571c45dU, 0x6f0406d4U, 0xff605015U,
 818     0x241998fbU, 0x97d6bde9U, 0xcc894043U, 0x7767d99eU,
 819     0xbdb0e842U, 0x8807898bU, 0x38e7195bU, 0xdb79c8eeU,
 820     0x47a17c0aU, 0xe97c420fU, 0xc9f8841eU, 0x00000000U,
 821     0x83098086U, 0x48322bedU, 0xac1e1170U, 0x4e6c5a72U,
 822     0xfbfd0effU, 0x560f8538U, 0x1e3daed5U, 0x27362d39U,
 823     0x640a0fd9U, 0x21685ca6U, 0xd19b5b54U, 0x3a24362eU,
 824     0xb10c0a67U, 0x0f9357e7U, 0xd2b4ee96U, 0x9e1b9b91U,
 825     0x4f80c0c5U, 0xa261dc20U, 0x695a774bU, 0x161c121aU,
 826     0x0ae293baU, 0xe5c0a02aU, 0x433c22e0U, 0x1d121b17U,
 827     0x0b0e090dU, 0xadf28bc7U, 0xb92db6a8U, 0xc8141ea9U,
 828     0x8557f119U, 0x4caf7507U, 0xbbee99ddU, 0xfda37f60U,
 829     0x9ff70126U, 0xbc5c72f5U, 0xc544663bU, 0x345bfb7eU,
 830     0x768b4329U, 0xdccb23c6U, 0x68b6edfcU, 0x63b8e4f1U,
 831     0xcad731dcU, 0x10426385U, 0x40139722U, 0x2084c611U,
 832     0x7d854a24U, 0xf8d2bb3dU, 0x11aef932U, 0x6dc729a1U,
 833     0x4b1d9e2fU, 0xf3dcb230U, 0xec0d8652U, 0xd077c1e3U,
 834     0x6c2bb316U, 0x99a970b9U, 0xfa119448U, 0x2247e964U,
 835     0xc4a8fc8cU, 0x1aa0f03fU, 0xd8567d2cU, 0xef223390U,
 836     0xc787494eU, 0xc1d938d1U, 0xfe8ccaa2U, 0x3698d40bU,
 837     0xcfa6f581U, 0x28a57adeU, 0x26dab78eU, 0xa43fadbfU,
 838     0xe42c3a9dU, 0x0d507892U, 0x9b6a5fccU, 0x62547e46U,
 839     0xc2f68d13U, 0xe890d8b8U, 0x5e2e39f7U, 0xf582c3afU,
 840     0xbe9f5d80U, 0x7c69d093U, 0xa96fd52dU, 0xb3cf2512U,
 841     0x3bc8ac99U, 0xa710187dU, 0x6ee89c63U, 0x7bdb3bbbU,
 842     0x09cd2678U, 0xf46e5918U, 0x01ec9ab7U, 0xa8834f9aU,
 843     0x65e6956eU, 0x7eaaffe6U, 0x0821bccfU, 0xe6ef15e8U,
 844     0xd9bae79bU, 0xce4a6f36U, 0xd4ea9f09U, 0xd629b07cU,
 845     0xaf31a4b2U, 0x312a3f23U, 0x30c6a594U, 0xc035a266U,
 846     0x37744ebcU, 0xa6fc82caU, 0xb0e090d0U, 0x1533a7d8U,
 847     0x4af10498U, 0xf741ecdaU, 0x0e7fcd50U, 0x2f1791f6U,
 848     0x8d764dd6U, 0x4d43efb0U, 0x54ccaa4dU, 0xdfe49604U,
 849     0xe39ed1b5U, 0x1b4c6a88U, 0xb8c12c1fU, 0x7f466551U,
 850     0x049d5eeaU, 0x5d018c35U, 0x73fa8774U, 0x2efb0b41U,
 851     0x5ab3671dU, 0x5292dbd2U, 0x33e91056U, 0x136dd647U,
 852     0x8c9ad761U, 0x7a37a10cU, 0x8e59f814U, 0x89eb133cU,
 853     0xeecea927U, 0x35b761c9U, 0xede11ce5U, 0x3c7a47b1U,
 854     0x599cd2dfU, 0x3f55f273U, 0x791814ceU, 0xbf73c737U,
 855     0xea53f7cdU, 0x5b5ffdaaU, 0x14df3d6fU, 0x867844dbU,
 856     0x81caaff3U, 0x3eb968c4U, 0x2c382434U, 0x5fc2a340U,
 857     0x72161dc3U, 0x0cbce225U, 0x8b283c49U, 0x41ff0d95U,
 858     0x7139a801U, 0xde080cb3U, 0x9cd8b4e4U, 0x906456c1U,
 859     0x617bcb84U, 0x70d532b6U, 0x74486c5cU, 0x42d0b857U,
 860 };
 861 const uint32_t AES_Td2[256] = {
 862     0xa75051f4U, 0x65537e41U, 0xa4c31a17U, 0x5e963a27U,
 863     0x6bcb3babU, 0x45f11f9dU, 0x58abacfaU, 0x03934be3U,
 864     0xfa552030U, 0x6df6ad76U, 0x769188ccU, 0x4c25f502U,
 865     0xd7fc4fe5U, 0xcbd7c52aU, 0x44802635U, 0xa38fb562U,
 866     0x5a49deb1U, 0x1b6725baU, 0x0e9845eaU, 0xc0e15dfeU,
 867     0x7502c32fU, 0xf012814cU, 0x97a38d46U, 0xf9c66bd3U,
 868     0x5fe7038fU, 0x9c951592U, 0x7aebbf6dU, 0x59da9552U,
 869     0x832dd4beU, 0x21d35874U, 0x692949e0U, 0xc8448ec9U,
 870     0x896a75c2U, 0x7978f48eU, 0x3e6b9958U, 0x71dd27b9U,
 871     0x4fb6bee1U, 0xad17f088U, 0xac66c920U, 0x3ab47dceU,
 872     0x4a1863dfU, 0x3182e51aU, 0x33609751U, 0x7f456253U,
 873     0x77e0b164U, 0xae84bb6bU, 0xa01cfe81U, 0x2b94f908U,
 874     0x68587048U, 0xfd198f45U, 0x6c8794deU, 0xf8b7527bU,
 875     0xd323ab73U, 0x02e2724bU, 0x8f57e31fU, 0xab2a6655U,
 876     0x2807b2ebU, 0xc2032fb5U, 0x7b9a86c5U, 0x08a5d337U,
 877     0x87f23028U, 0xa5b223bfU, 0x6aba0203U, 0x825ced16U,
 878     0x1c2b8acfU, 0xb492a779U, 0xf2f0f307U, 0xe2a14e69U,
 879     0xf4cd65daU, 0xbed50605U, 0x621fd134U, 0xfe8ac4a6U,
 880     0x539d342eU, 0x55a0a2f3U, 0xe132058aU, 0xeb75a4f6U,
 881     0xec390b83U, 0xefaa4060U, 0x9f065e71U, 0x1051bd6eU,
 882
 883     0x8af93e21U, 0x063d96ddU, 0x05aedd3eU, 0xbd464de6U,
 884     0x8db59154U, 0x5d0571c4U, 0xd46f0406U, 0x15ff6050U,
 885     0xfb241998U, 0xe997d6bdU, 0x43cc8940U, 0x9e7767d9U,
 886     0x42bdb0e8U, 0x8b880789U, 0x5b38e719U, 0xeedb79c8U,
 887     0x0a47a17cU, 0x0fe97c42U, 0x1ec9f884U, 0x00000000U,
 888     0x86830980U, 0xed48322bU, 0x70ac1e11U, 0x724e6c5aU,
 889     0xfffbfd0eU, 0x38560f85U, 0xd51e3daeU, 0x3927362dU,
 890     0xd9640a0fU, 0xa621685cU, 0x54d19b5bU, 0x2e3a2436U,
 891     0x67b10c0aU, 0xe70f9357U, 0x96d2b4eeU, 0x919e1b9bU,
 892     0xc54f80c0U, 0x20a261dcU, 0x4b695a77U, 0x1a161c12U,
 893     0xba0ae293U, 0x2ae5c0a0U, 0xe0433c22U, 0x171d121bU,
 894     0x0d0b0e09U, 0xc7adf28bU, 0xa8b92db6U, 0xa9c8141eU,
 895     0x198557f1U, 0x074caf75U, 0xddbbee99U, 0x60fda37fU,
 896     0x269ff701U, 0xf5bc5c72U, 0x3bc54466U, 0x7e345bfbU,
 897     0x29768b43U, 0xc6dccb23U, 0xfc68b6edU, 0xf163b8e4U,
 898     0xdccad731U, 0x85104263U, 0x22401397U, 0x112084c6U,
 899     0x247d854aU, 0x3df8d2bbU, 0x3211aef9U, 0xa16dc729U,
 900     0x2f4b1d9eU, 0x30f3dcb2U, 0x52ec0d86U, 0xe3d077c1U,
 901     0x166c2bb3U, 0xb999a970U, 0x48fa1194U, 0x642247e9U,
 902     0x8cc4a8fcU, 0x3f1aa0f0U, 0x2cd8567dU, 0x90ef2233U,
 903     0x4ec78749U, 0xd1c1d938U, 0xa2fe8ccaU, 0x0b3698d4U,
 904     0x81cfa6f5U, 0xde28a57aU, 0x8e26dab7U, 0xbfa43fadU,
 905     0x9de42c3aU, 0x920d5078U, 0xcc9b6a5fU, 0x4662547eU,
 906     0x13c2f68dU, 0xb8e890d8U, 0xf75e2e39U, 0xaff582c3U,
 907     0x80be9f5dU, 0x937c69d0U, 0x2da96fd5U, 0x12b3cf25U,
 908     0x993bc8acU, 0x7da71018U, 0x636ee89cU, 0xbb7bdb3bU,
 909     0x7809cd26U, 0x18f46e59U, 0xb701ec9aU, 0x9aa8834fU,
 910     0x6e65e695U, 0xe67eaaffU, 0xcf0821bcU, 0xe8e6ef15U,
 911     0x9bd9bae7U, 0x36ce4a6fU, 0x09d4ea9fU, 0x7cd629b0U,
 912     0xb2af31a4U, 0x23312a3fU, 0x9430c6a5U, 0x66c035a2U,
 913     0xbc37744eU, 0xcaa6fc82U, 0xd0b0e090U, 0xd81533a7U,
 914     0x984af104U, 0xdaf741ecU, 0x500e7fcdU, 0xf62f1791U,
 915     0xd68d764dU, 0xb04d43efU, 0x4d54ccaaU, 0x04dfe496U,
 916     0xb5e39ed1U, 0x881b4c6aU, 0x1fb8c12cU, 0x517f4665U,
 917     0xea049d5eU, 0x355d018cU, 0x7473fa87U, 0x412efb0bU,
 918     0x1d5ab367U, 0xd25292dbU, 0x5633e910U, 0x47136dd6U,
 919     0x618c9ad7U, 0x0c7a37a1U, 0x148e59f8U, 0x3c89eb13U,
 920     0x27eecea9U, 0xc935b761U, 0xe5ede11cU, 0xb13c7a47U,
 921     0xdf599cd2U, 0x733f55f2U, 0xce791814U, 0x37bf73c7U,
 922     0xcdea53f7U, 0xaa5b5ffdU, 0x6f14df3dU, 0xdb867844U,
 923     0xf381caafU, 0xc43eb968U, 0x342c3824U, 0x405fc2a3U,
 924     0xc372161dU, 0x250cbce2U, 0x498b283cU, 0x9541ff0dU,
 925     0x017139a8U, 0xb3de080cU, 0xe49cd8b4U, 0xc1906456U,
 926     0x84617bcbU, 0xb670d532U, 0x5c74486cU, 0x5742d0b8U,
 927 };
 928 const uint32_t AES_Td3[256] = {
 929     0xf4a75051U, 0x4165537eU, 0x17a4c31aU, 0x275e963aU,
 930     0xab6bcb3bU, 0x9d45f11fU, 0xfa58abacU, 0xe303934bU,
 931     0x30fa5520U, 0x766df6adU, 0xcc769188U, 0x024c25f5U,
 932     0xe5d7fc4fU, 0x2acbd7c5U, 0x35448026U, 0x62a38fb5U,
 933     0xb15a49deU, 0xba1b6725U, 0xea0e9845U, 0xfec0e15dU,
 934     0x2f7502c3U, 0x4cf01281U, 0x4697a38dU, 0xd3f9c66bU,
 935     0x8f5fe703U, 0x929c9515U, 0x6d7aebbfU, 0x5259da95U,
 936     0xbe832dd4U, 0x7421d358U, 0xe0692949U, 0xc9c8448eU,
 937     0xc2896a75U, 0x8e7978f4U, 0x583e6b99U, 0xb971dd27U,
 938     0xe14fb6beU, 0x88ad17f0U, 0x20ac66c9U, 0xce3ab47dU,
 939     0xdf4a1863U, 0x1a3182e5U, 0x51336097U, 0x537f4562U,
 940     0x6477e0b1U, 0x6bae84bbU, 0x81a01cfeU, 0x082b94f9U,
 941     0x48685870U, 0x45fd198fU, 0xde6c8794U, 0x7bf8b752U,
 942     0x73d323abU, 0x4b02e272U, 0x1f8f57e3U, 0x55ab2a66U,
 943     0xeb2807b2U, 0xb5c2032fU, 0xc57b9a86U, 0x3708a5d3U,
 944     0x2887f230U, 0xbfa5b223U, 0x036aba02U, 0x16825cedU,
 945     0xcf1c2b8aU, 0x79b492a7U, 0x07f2f0f3U, 0x69e2a14eU,
 946     0xdaf4cd65U, 0x05bed506U, 0x34621fd1U, 0xa6fe8ac4U,
 947     0x2e539d34U, 0xf355a0a2U, 0x8ae13205U, 0xf6eb75a4U,
 948     0x83ec390bU, 0x60efaa40U, 0x719f065eU, 0x6e1051bdU,
 949     0x218af93eU, 0xdd063d96U, 0x3e05aeddU, 0xe6bd464dU,
 950     0x548db591U, 0xc45d0571U, 0x06d46f04U, 0x5015ff60U,
 951     0x98fb2419U, 0xbde997d6U, 0x4043cc89U, 0xd99e7767U,
 952     0xe842bdb0U, 0x898b8807U, 0x195b38e7U, 0xc8eedb79U,
 953     0x7c0a47a1U, 0x420fe97cU, 0x841ec9f8U, 0x00000000U,
 954     0x80868309U, 0x2bed4832U, 0x1170ac1eU, 0x5a724e6cU,
 955     0x0efffbfdU, 0x8538560fU, 0xaed51e3dU, 0x2d392736U,
 956     0x0fd9640aU, 0x5ca62168U, 0x5b54d19bU, 0x362e3a24U,
 957     0x0a67b10cU, 0x57e70f93U, 0xee96d2b4U, 0x9b919e1bU,
 958     0xc0c54f80U, 0xdc20a261U, 0x774b695aU, 0x121a161cU,
 959     0x93ba0ae2U, 0xa02ae5c0U, 0x22e0433cU, 0x1b171d12U,
 960     0x090d0b0eU, 0x8bc7adf2U, 0xb6a8b92dU, 0x1ea9c814U,
 961     0xf1198557U, 0x75074cafU, 0x99ddbbeeU, 0x7f60fda3U,
 962     0x01269ff7U, 0x72f5bc5cU, 0x663bc544U, 0xfb7e345bU,
 963     0x4329768bU, 0x23c6dccbU, 0xedfc68b6U, 0xe4f163b8U,
 964     0x31dccad7U, 0x63851042U, 0x97224013U, 0xc6112084U,
 965     0x4a247d85U, 0xbb3df8d2U, 0xf93211aeU, 0x29a16dc7U,
 966     0x9e2f4b1dU, 0xb230f3dcU, 0x8652ec0dU, 0xc1e3d077U,
 967     0xb3166c2bU, 0x70b999a9U, 0x9448fa11U, 0xe9642247U,
 968     0xfc8cc4a8U, 0xf03f1aa0U, 0x7d2cd856U, 0x3390ef22U,
 969     0x494ec787U, 0x38d1c1d9U, 0xcaa2fe8cU, 0xd40b3698U,
 970     0xf581cfa6U, 0x7ade28a5U, 0xb78e26daU, 0xadbfa43fU,
 971     0x3a9de42cU, 0x78920d50U, 0x5fcc9b6aU, 0x7e466254U,
 972     0x8d13c2f6U, 0xd8b8e890U, 0x39f75e2eU, 0xc3aff582U,
 973     0x5d80be9fU, 0xd0937c69U, 0xd52da96fU, 0x2512b3cfU,
 974     0xac993bc8U, 0x187da710U, 0x9c636ee8U, 0x3bbb7bdbU,
 975     0x267809cdU, 0x5918f46eU, 0x9ab701ecU, 0x4f9aa883U,
 976     0x956e65e6U, 0xffe67eaaU, 0xbccf0821U, 0x15e8e6efU,
 977     0xe79bd9baU, 0x6f36ce4aU, 0x9f09d4eaU, 0xb07cd629U,
 978     0xa4b2af31U, 0x3f23312aU, 0xa59430c6U, 0xa266c035U,
 979     0x4ebc3774U, 0x82caa6fcU, 0x90d0b0e0U, 0xa7d81533U,
 980     0x04984af1U, 0xecdaf741U, 0xcd500e7fU, 0x91f62f17U,
 981     0x4dd68d76U, 0xefb04d43U, 0xaa4d54ccU, 0x9604dfe4U,
 982     0xd1b5e39eU, 0x6a881b4cU, 0x2c1fb8c1U, 0x65517f46U,
 983     0x5eea049dU, 0x8c355d01U, 0x877473faU, 0x0b412efbU,
 984     0x671d5ab3U, 0xdbd25292U, 0x105633e9U, 0xd647136dU,
 985     0xd7618c9aU, 0xa10c7a37U, 0xf8148e59U, 0x133c89ebU,
 986     0xa927eeceU, 0x61c935b7U, 0x1ce5ede1U, 0x47b13c7aU,
 987     0xd2df599cU, 0xf2733f55U, 0x14ce7918U, 0xc737bf73U,
 988     0xf7cdea53U, 0xfdaa5b5fU, 0x3d6f14dfU, 0x44db8678U,
 989     0xaff381caU, 0x68c43eb9U, 0x24342c38U, 0xa3405fc2U,
 990     0x1dc37216U, 0xe2250cbcU, 0x3c498b28U, 0x0d9541ffU,
 991     0xa8017139U, 0x0cb3de08U, 0xb4e49cd8U, 0x56c19064U,
 992     0xcb84617bU, 0x32b670d5U, 0x6c5c7448U, 0xb85742d0U,
 993 };
 994 const uint32_t AES_Td4[256] = {
 995     0x52525252U, 0x09090909U, 0x6a6a6a6aU, 0xd5d5d5d5U,
 996     0x30303030U, 0x36363636U, 0xa5a5a5a5U, 0x38383838U,
 997     0xbfbfbfbfU, 0x40404040U, 0xa3a3a3a3U, 0x9e9e9e9eU,
 998     0x81818181U, 0xf3f3f3f3U, 0xd7d7d7d7U, 0xfbfbfbfbU,
 999     0x7c7c7c7cU, 0xe3e3e3e3U, 0x39393939U, 0x82828282U,
1000     0x9b9b9b9bU, 0x2f2f2f2fU, 0xffffffffU, 0x87878787U,
1001     0x34343434U, 0x8e8e8e8eU, 0x43434343U, 0x44444444U,
1002     0xc4c4c4c4U, 0xdedededeU, 0xe9e9e9e9U, 0xcbcbcbcbU,
1003     0x54545454U, 0x7b7b7b7bU, 0x94949494U, 0x32323232U,
1004     0xa6a6a6a6U, 0xc2c2c2c2U, 0x23232323U, 0x3d3d3d3dU,
1005     0xeeeeeeeeU, 0x4c4c4c4cU, 0x95959595U, 0x0b0b0b0bU,
1006     0x42424242U, 0xfafafafaU, 0xc3c3c3c3U, 0x4e4e4e4eU,
1007     0x08080808U, 0x2e2e2e2eU, 0xa1a1a1a1U, 0x66666666U,
1008     0x28282828U, 0xd9d9d9d9U, 0x24242424U, 0xb2b2b2b2U,
1009     0x76767676U, 0x5b5b5b5bU, 0xa2a2a2a2U, 0x49494949U,
1010     0x6d6d6d6dU, 0x8b8b8b8bU, 0xd1d1d1d1U, 0x25252525U,
1011     0x72727272U, 0xf8f8f8f8U, 0xf6f6f6f6U, 0x64646464U,
1012     0x86868686U, 0x68686868U, 0x98989898U, 0x16161616U,
1013     0xd4d4d4d4U, 0xa4a4a4a4U, 0x5c5c5c5cU, 0xccccccccU,
1014     0x5d5d5d5dU, 0x65656565U, 0xb6b6b6b6U, 0x92929292U,
1015     0x6c6c6c6cU, 0x70707070U, 0x48484848U, 0x50505050U,
1016     0xfdfdfdfdU, 0xededededU, 0xb9b9b9b9U, 0xdadadadaU,
1017     0x5e5e5e5eU, 0x15151515U, 0x46464646U, 0x57575757U,
1018     0xa7a7a7a7U, 0x8d8d8d8dU, 0x9d9d9d9dU, 0x84848484U,
1019     0x90909090U, 0xd8d8d8d8U, 0xababababU, 0x00000000U,
1020     0x8c8c8c8cU, 0xbcbcbcbcU, 0xd3d3d3d3U, 0x0a0a0a0aU,
1021     0xf7f7f7f7U, 0xe4e4e4e4U, 0x58585858U, 0x05050505U,
1022     0xb8b8b8b8U, 0xb3b3b3b3U, 0x45454545U, 0x06060606U,
1023     0xd0d0d0d0U, 0x2c2c2c2cU, 0x1e1e1e1eU, 0x8f8f8f8fU,
1024     0xcacacacaU, 0x3f3f3f3fU, 0x0f0f0f0fU, 0x02020202U,
1025     0xc1c1c1c1U, 0xafafafafU, 0xbdbdbdbdU, 0x03030303U,
1026     0x01010101U, 0x13131313U, 0x8a8a8a8aU, 0x6b6b6b6bU,
1027     0x3a3a3a3aU, 0x91919191U, 0x11111111U, 0x41414141U,
1028     0x4f4f4f4fU, 0x67676767U, 0xdcdcdcdcU, 0xeaeaeaeaU,
1029     0x97979797U, 0xf2f2f2f2U, 0xcfcfcfcfU, 0xcecececeU,
1030     0xf0f0f0f0U, 0xb4b4b4b4U, 0xe6e6e6e6U, 0x73737373U,
1031     0x96969696U, 0xacacacacU, 0x74747474U, 0x22222222U,
1032     0xe7e7e7e7U, 0xadadadadU, 0x35353535U, 0x85858585U,
1033     0xe2e2e2e2U, 0xf9f9f9f9U, 0x37373737U, 0xe8e8e8e8U,
1034     0x1c1c1c1cU, 0x75757575U, 0xdfdfdfdfU, 0x6e6e6e6eU,
1035     0x47474747U, 0xf1f1f1f1U, 0x1a1a1a1aU, 0x71717171U,
1036     0x1d1d1d1dU, 0x29292929U, 0xc5c5c5c5U, 0x89898989U,
1037     0x6f6f6f6fU, 0xb7b7b7b7U, 0x62626262U, 0x0e0e0e0eU,
1038     0xaaaaaaaaU, 0x18181818U, 0xbebebebeU, 0x1b1b1b1bU,
1039     0xfcfcfcfcU, 0x56565656U, 0x3e3e3e3eU, 0x4b4b4b4bU,
1040     0xc6c6c6c6U, 0xd2d2d2d2U, 0x79797979U, 0x20202020U,
1041     0x9a9a9a9aU, 0xdbdbdbdbU, 0xc0c0c0c0U, 0xfefefefeU,
1042     0x78787878U, 0xcdcdcdcdU, 0x5a5a5a5aU, 0xf4f4f4f4U,
1043     0x1f1f1f1fU, 0xddddddddU, 0xa8a8a8a8U, 0x33333333U,
1044     0x88888888U, 0x07070707U, 0xc7c7c7c7U, 0x31313131U,
1045     0xb1b1b1b1U, 0x12121212U, 0x10101010U, 0x59595959U,
1046     0x27272727U, 0x80808080U, 0xececececU, 0x5f5f5f5fU,
1047     0x60606060U, 0x51515151U, 0x7f7f7f7fU, 0xa9a9a9a9U,
1048     0x19191919U, 0xb5b5b5b5U, 0x4a4a4a4aU, 0x0d0d0d0dU,
1049     0x2d2d2d2dU, 0xe5e5e5e5U, 0x7a7a7a7aU, 0x9f9f9f9fU,
1050     0x93939393U, 0xc9c9c9c9U, 0x9c9c9c9cU, 0xefefefefU,
1051     0xa0a0a0a0U, 0xe0e0e0e0U, 0x3b3b3b3bU, 0x4d4d4d4dU,
1052     0xaeaeaeaeU, 0x2a2a2a2aU, 0xf5f5f5f5U, 0xb0b0b0b0U,
1053     0xc8c8c8c8U, 0xebebebebU, 0xbbbbbbbbU, 0x3c3c3c3cU,
1054     0x83838383U, 0x53535353U, 0x99999999U, 0x61616161U,
1055     0x17171717U, 0x2b2b2b2bU, 0x04040404U, 0x7e7e7e7eU,
1056     0xbabababaU, 0x77777777U, 0xd6d6d6d6U, 0x26262626U,
1057     0xe1e1e1e1U, 0x69696969U, 0x14141414U, 0x63636363U,
1058     0x55555555U, 0x21212121U, 0x0c0c0c0cU, 0x7d7d7d7dU,
1059 };
1060 static const u32 rcon[] = {
1061         0x01000000, 0x02000000, 0x04000000, 0x08000000,
1062         0x10000000, 0x20000000, 0x40000000, 0x80000000,
1063         0x1B000000, 0x36000000, /* for 128-bit blocks, Rijndael never uses more than 10 rcon values */
1064 };
1065
1066 /**
1067  * Expand the cipher key into the encryption key schedule.
1068  */
1069 int AES_set_encrypt_key(const unsigned char *userKey, const int bits,
1070                         AES_KEY *key) {
1071
1072         u32 *rk;
1073         int i = 0;
1074         u32 temp;
1075
1076         if (!userKey || !key)
1077                 return -1;
1078         if (bits != 128 && bits != 192 && bits != 256)
1079                 return -2;
1080
1081         rk = key->rd_key;
1082
1083         if (bits==128)
1084                 key->rounds = 10;
1085         else if (bits==192)
1086                 key->rounds = 12;
1087         else
1088                 key->rounds = 14;
1089
1090         rk[0] = GETU32(userKey     );
1091         rk[1] = GETU32(userKey +  4);
1092         rk[2] = GETU32(userKey +  8);
1093         rk[3] = GETU32(userKey + 12);
1094         if (bits == 128) {
1095                 while (1) {
1096                         temp  = rk[3];
1097                         rk[4] = rk[0] ^
1098                                 (AES_Te4[(temp >> 16) & 0xff] & 0xff000000) ^
1099                                 (AES_Te4[(temp >>  8) & 0xff] & 0x00ff0000) ^
1100                                 (AES_Te4[(temp      ) & 0xff] & 0x0000ff00) ^
1101                                 (AES_Te4[(temp >> 24)       ] & 0x000000ff) ^
1102                                 rcon[i];
1103                         rk[5] = rk[1] ^ rk[4];
1104                         rk[6] = rk[2] ^ rk[5];
1105                         rk[7] = rk[3] ^ rk[6];
1106                         if (++i == 10) {
1107                                 return 0;
1108                         }
1109                         rk += 4;
1110                 }
1111         }
1112         rk[4] = GETU32(userKey + 16);
1113         rk[5] = GETU32(userKey + 20);
1114         if (bits == 192) {
1115                 while (1) {
1116                         temp = rk[ 5];
1117                         rk[ 6] = rk[ 0] ^
1118                                 (AES_Te4[(temp >> 16) & 0xff] & 0xff000000) ^
1119                                 (AES_Te4[(temp >>  8) & 0xff] & 0x00ff0000) ^
1120                                 (AES_Te4[(temp      ) & 0xff] & 0x0000ff00) ^
1121                                 (AES_Te4[(temp >> 24)       ] & 0x000000ff) ^
1122                                 rcon[i];
1123                         rk[ 7] = rk[ 1] ^ rk[ 6];
1124                         rk[ 8] = rk[ 2] ^ rk[ 7];
1125                         rk[ 9] = rk[ 3] ^ rk[ 8];
1126                         if (++i == 8) {
1127                                 return 0;
1128                         }
1129                         rk[10] = rk[ 4] ^ rk[ 9];
1130                         rk[11] = rk[ 5] ^ rk[10];
1131                         rk += 6;
1132                 }
1133         }
1134         rk[6] = GETU32(userKey + 24);
1135         rk[7] = GETU32(userKey + 28);
1136         if (bits == 256) {
1137                 while (1) {
1138                         temp = rk[ 7];
1139                         rk[ 8] = rk[ 0] ^
1140                                 (AES_Te4[(temp >> 16) & 0xff] & 0xff000000) ^
1141                                 (AES_Te4[(temp >>  8) & 0xff] & 0x00ff0000) ^
1142                                 (AES_Te4[(temp      ) & 0xff] & 0x0000ff00) ^
1143                                 (AES_Te4[(temp >> 24)       ] & 0x000000ff) ^
1144                                 rcon[i];
1145                         rk[ 9] = rk[ 1] ^ rk[ 8];
1146                         rk[10] = rk[ 2] ^ rk[ 9];
1147                         rk[11] = rk[ 3] ^ rk[10];
1148                         if (++i == 7) {
1149                                 return 0;
1150                         }
1151                         temp = rk[11];
1152                         rk[12] = rk[ 4] ^
1153                                 (AES_Te4[(temp >> 24)       ] & 0xff000000) ^
1154                                 (AES_Te4[(temp >> 16) & 0xff] & 0x00ff0000) ^
1155                                 (AES_Te4[(temp >>  8) & 0xff] & 0x0000ff00) ^
1156                                 (AES_Te4[(temp      ) & 0xff] & 0x000000ff);
1157                         rk[13] = rk[ 5] ^ rk[12];
1158                         rk[14] = rk[ 6] ^ rk[13];
1159                         rk[15] = rk[ 7] ^ rk[14];
1160
1161                         rk += 8;
1162                 }
1163         }
1164         abort();
1165 }
1166
1167 /**
1168  * Expand the cipher key into the decryption key schedule.
1169  */
1170 int AES_set_decrypt_key(const unsigned char *userKey, const int bits,
1171                          AES_KEY *key) {
1172
1173         u32 *rk;
1174         int i, j, status;
1175         u32 temp;
1176
1177         /* first, start with an encryption schedule */
1178         status = AES_set_encrypt_key(userKey, bits, key);
1179         if (status < 0)
1180                 return status;
1181
1182         rk = key->rd_key;
1183
1184         /* invert the order of the round keys: */
1185         for (i = 0, j = 4*(key->rounds); i < j; i += 4, j -= 4) {
1186                 temp = rk[i    ]; rk[i    ] = rk[j    ]; rk[j    ] = temp;
1187                 temp = rk[i + 1]; rk[i + 1] = rk[j + 1]; rk[j + 1] = temp;
1188                 temp = rk[i + 2]; rk[i + 2] = rk[j + 2]; rk[j + 2] = temp;
1189                 temp = rk[i + 3]; rk[i + 3] = rk[j + 3]; rk[j + 3] = temp;
1190         }
1191         /* apply the inverse MixColumn transform to all round keys but the first and the last: */
1192         for (i = 1; i < (key->rounds); i++) {
1193                 rk += 4;
1194                 rk[0] =
1195                         AES_Td0[AES_Te4[(rk[0] >> 24)       ] & 0xff] ^
1196                         AES_Td1[AES_Te4[(rk[0] >> 16) & 0xff] & 0xff] ^
1197                         AES_Td2[AES_Te4[(rk[0] >>  8) & 0xff] & 0xff] ^
1198                         AES_Td3[AES_Te4[(rk[0]      ) & 0xff] & 0xff];
1199                 rk[1] =
1200                         AES_Td0[AES_Te4[(rk[1] >> 24)       ] & 0xff] ^
1201                         AES_Td1[AES_Te4[(rk[1] >> 16) & 0xff] & 0xff] ^
1202                         AES_Td2[AES_Te4[(rk[1] >>  8) & 0xff] & 0xff] ^
1203                         AES_Td3[AES_Te4[(rk[1]      ) & 0xff] & 0xff];
1204                 rk[2] =
1205                         AES_Td0[AES_Te4[(rk[2] >> 24)       ] & 0xff] ^
1206                         AES_Td1[AES_Te4[(rk[2] >> 16) & 0xff] & 0xff] ^
1207                         AES_Td2[AES_Te4[(rk[2] >>  8) & 0xff] & 0xff] ^
1208                         AES_Td3[AES_Te4[(rk[2]      ) & 0xff] & 0xff];
1209                 rk[3] =
1210                         AES_Td0[AES_Te4[(rk[3] >> 24)       ] & 0xff] ^
1211                         AES_Td1[AES_Te4[(rk[3] >> 16) & 0xff] & 0xff] ^
1212                         AES_Td2[AES_Te4[(rk[3] >>  8) & 0xff] & 0xff] ^
1213                         AES_Td3[AES_Te4[(rk[3]      ) & 0xff] & 0xff];
1214         }
1215         return 0;
1216 }
1217
1218 #ifndef AES_ASM
1219 /*
1220  * Encrypt a single block
1221  * in and out can overlap
1222  */
1223 void AES_encrypt(const unsigned char *in, unsigned char *out,
1224                  const AES_KEY *key) {
1225
1226         const u32 *rk;
1227         u32 s0, s1, s2, s3, t0, t1, t2, t3;
1228 #ifndef FULL_UNROLL
1229         int r;
1230 #endif /* ?FULL_UNROLL */
1231
1232         assert(in && out && key);
1233         rk = key->rd_key;
1234
1235         /*
1236          * map byte array block to cipher state
1237          * and add initial round key:
1238          */
1239         s0 = GETU32(in     ) ^ rk[0];
1240         s1 = GETU32(in +  4) ^ rk[1];
1241         s2 = GETU32(in +  8) ^ rk[2];
1242         s3 = GETU32(in + 12) ^ rk[3];
1243 #ifdef FULL_UNROLL
1244         /* round 1: */
1245         t0 = AES_Te0[s0 >> 24] ^ AES_Te1[(s1 >> 16) & 0xff] ^ AES_Te2[(s2 >>  8) & 0xff] ^ AES_Te3[s3 & 0xff] ^ rk[ 4];
1246         t1 = AES_Te0[s1 >> 24] ^ AES_Te1[(s2 >> 16) & 0xff] ^ AES_Te2[(s3 >>  8) & 0xff] ^ AES_Te3[s0 & 0xff] ^ rk[ 5];
1247         t2 = AES_Te0[s2 >> 24] ^ AES_Te1[(s3 >> 16) & 0xff] ^ AES_Te2[(s0 >>  8) & 0xff] ^ AES_Te3[s1 & 0xff] ^ rk[ 6];
1248         t3 = AES_Te0[s3 >> 24] ^ AES_Te1[(s0 >> 16) & 0xff] ^ AES_Te2[(s1 >>  8) & 0xff] ^ AES_Te3[s2 & 0xff] ^ rk[ 7];
1249         /* round 2: */
1250         s0 = AES_Te0[t0 >> 24] ^ AES_Te1[(t1 >> 16) & 0xff] ^ AES_Te2[(t2 >>  8) & 0xff] ^ AES_Te3[t3 & 0xff] ^ rk[ 8];
1251         s1 = AES_Te0[t1 >> 24] ^ AES_Te1[(t2 >> 16) & 0xff] ^ AES_Te2[(t3 >>  8) & 0xff] ^ AES_Te3[t0 & 0xff] ^ rk[ 9];
1252         s2 = AES_Te0[t2 >> 24] ^ AES_Te1[(t3 >> 16) & 0xff] ^ AES_Te2[(t0 >>  8) & 0xff] ^ AES_Te3[t1 & 0xff] ^ rk[10];
1253         s3 = AES_Te0[t3 >> 24] ^ AES_Te1[(t0 >> 16) & 0xff] ^ AES_Te2[(t1 >>  8) & 0xff] ^ AES_Te3[t2 & 0xff] ^ rk[11];
1254         /* round 3: */
1255         t0 = AES_Te0[s0 >> 24] ^ AES_Te1[(s1 >> 16) & 0xff] ^ AES_Te2[(s2 >>  8) & 0xff] ^ AES_Te3[s3 & 0xff] ^ rk[12];
1256         t1 = AES_Te0[s1 >> 24] ^ AES_Te1[(s2 >> 16) & 0xff] ^ AES_Te2[(s3 >>  8) & 0xff] ^ AES_Te3[s0 & 0xff] ^ rk[13];
1257         t2 = AES_Te0[s2 >> 24] ^ AES_Te1[(s3 >> 16) & 0xff] ^ AES_Te2[(s0 >>  8) & 0xff] ^ AES_Te3[s1 & 0xff] ^ rk[14];
1258         t3 = AES_Te0[s3 >> 24] ^ AES_Te1[(s0 >> 16) & 0xff] ^ AES_Te2[(s1 >>  8) & 0xff] ^ AES_Te3[s2 & 0xff] ^ rk[15];
1259         /* round 4: */
1260         s0 = AES_Te0[t0 >> 24] ^ AES_Te1[(t1 >> 16) & 0xff] ^ AES_Te2[(t2 >>  8) & 0xff] ^ AES_Te3[t3 & 0xff] ^ rk[16];
1261         s1 = AES_Te0[t1 >> 24] ^ AES_Te1[(t2 >> 16) & 0xff] ^ AES_Te2[(t3 >>  8) & 0xff] ^ AES_Te3[t0 & 0xff] ^ rk[17];
1262         s2 = AES_Te0[t2 >> 24] ^ AES_Te1[(t3 >> 16) & 0xff] ^ AES_Te2[(t0 >>  8) & 0xff] ^ AES_Te3[t1 & 0xff] ^ rk[18];
1263         s3 = AES_Te0[t3 >> 24] ^ AES_Te1[(t0 >> 16) & 0xff] ^ AES_Te2[(t1 >>  8) & 0xff] ^ AES_Te3[t2 & 0xff] ^ rk[19];
1264         /* round 5: */
1265         t0 = AES_Te0[s0 >> 24] ^ AES_Te1[(s1 >> 16) & 0xff] ^ AES_Te2[(s2 >>  8) & 0xff] ^ AES_Te3[s3 & 0xff] ^ rk[20];
1266         t1 = AES_Te0[s1 >> 24] ^ AES_Te1[(s2 >> 16) & 0xff] ^ AES_Te2[(s3 >>  8) & 0xff] ^ AES_Te3[s0 & 0xff] ^ rk[21];
1267         t2 = AES_Te0[s2 >> 24] ^ AES_Te1[(s3 >> 16) & 0xff] ^ AES_Te2[(s0 >>  8) & 0xff] ^ AES_Te3[s1 & 0xff] ^ rk[22];
1268         t3 = AES_Te0[s3 >> 24] ^ AES_Te1[(s0 >> 16) & 0xff] ^ AES_Te2[(s1 >>  8) & 0xff] ^ AES_Te3[s2 & 0xff] ^ rk[23];
1269         /* round 6: */
1270         s0 = AES_Te0[t0 >> 24] ^ AES_Te1[(t1 >> 16) & 0xff] ^ AES_Te2[(t2 >>  8) & 0xff] ^ AES_Te3[t3 & 0xff] ^ rk[24];
1271         s1 = AES_Te0[t1 >> 24] ^ AES_Te1[(t2 >> 16) & 0xff] ^ AES_Te2[(t3 >>  8) & 0xff] ^ AES_Te3[t0 & 0xff] ^ rk[25];
1272         s2 = AES_Te0[t2 >> 24] ^ AES_Te1[(t3 >> 16) & 0xff] ^ AES_Te2[(t0 >>  8) & 0xff] ^ AES_Te3[t1 & 0xff] ^ rk[26];
1273         s3 = AES_Te0[t3 >> 24] ^ AES_Te1[(t0 >> 16) & 0xff] ^ AES_Te2[(t1 >>  8) & 0xff] ^ AES_Te3[t2 & 0xff] ^ rk[27];
1274         /* round 7: */
1275         t0 = AES_Te0[s0 >> 24] ^ AES_Te1[(s1 >> 16) & 0xff] ^ AES_Te2[(s2 >>  8) & 0xff] ^ AES_Te3[s3 & 0xff] ^ rk[28];
1276         t1 = AES_Te0[s1 >> 24] ^ AES_Te1[(s2 >> 16) & 0xff] ^ AES_Te2[(s3 >>  8) & 0xff] ^ AES_Te3[s0 & 0xff] ^ rk[29];
1277         t2 = AES_Te0[s2 >> 24] ^ AES_Te1[(s3 >> 16) & 0xff] ^ AES_Te2[(s0 >>  8) & 0xff] ^ AES_Te3[s1 & 0xff] ^ rk[30];
1278         t3 = AES_Te0[s3 >> 24] ^ AES_Te1[(s0 >> 16) & 0xff] ^ AES_Te2[(s1 >>  8) & 0xff] ^ AES_Te3[s2 & 0xff] ^ rk[31];
1279         /* round 8: */
1280         s0 = AES_Te0[t0 >> 24] ^ AES_Te1[(t1 >> 16) & 0xff] ^ AES_Te2[(t2 >>  8) & 0xff] ^ AES_Te3[t3 & 0xff] ^ rk[32];
1281         s1 = AES_Te0[t1 >> 24] ^ AES_Te1[(t2 >> 16) & 0xff] ^ AES_Te2[(t3 >>  8) & 0xff] ^ AES_Te3[t0 & 0xff] ^ rk[33];
1282         s2 = AES_Te0[t2 >> 24] ^ AES_Te1[(t3 >> 16) & 0xff] ^ AES_Te2[(t0 >>  8) & 0xff] ^ AES_Te3[t1 & 0xff] ^ rk[34];
1283         s3 = AES_Te0[t3 >> 24] ^ AES_Te1[(t0 >> 16) & 0xff] ^ AES_Te2[(t1 >>  8) & 0xff] ^ AES_Te3[t2 & 0xff] ^ rk[35];
1284         /* round 9: */
1285         t0 = AES_Te0[s0 >> 24] ^ AES_Te1[(s1 >> 16) & 0xff] ^ AES_Te2[(s2 >>  8) & 0xff] ^ AES_Te3[s3 & 0xff] ^ rk[36];
1286         t1 = AES_Te0[s1 >> 24] ^ AES_Te1[(s2 >> 16) & 0xff] ^ AES_Te2[(s3 >>  8) & 0xff] ^ AES_Te3[s0 & 0xff] ^ rk[37];
1287         t2 = AES_Te0[s2 >> 24] ^ AES_Te1[(s3 >> 16) & 0xff] ^ AES_Te2[(s0 >>  8) & 0xff] ^ AES_Te3[s1 & 0xff] ^ rk[38];
1288         t3 = AES_Te0[s3 >> 24] ^ AES_Te1[(s0 >> 16) & 0xff] ^ AES_Te2[(s1 >>  8) & 0xff] ^ AES_Te3[s2 & 0xff] ^ rk[39];
1289     if (key->rounds > 10) {
1290         /* round 10: */
1291         s0 = AES_Te0[t0 >> 24] ^ AES_Te1[(t1 >> 16) & 0xff] ^ AES_Te2[(t2 >>  8) & 0xff] ^ AES_Te3[t3 & 0xff] ^ rk[40];
1292         s1 = AES_Te0[t1 >> 24] ^ AES_Te1[(t2 >> 16) & 0xff] ^ AES_Te2[(t3 >>  8) & 0xff] ^ AES_Te3[t0 & 0xff] ^ rk[41];
1293         s2 = AES_Te0[t2 >> 24] ^ AES_Te1[(t3 >> 16) & 0xff] ^ AES_Te2[(t0 >>  8) & 0xff] ^ AES_Te3[t1 & 0xff] ^ rk[42];
1294         s3 = AES_Te0[t3 >> 24] ^ AES_Te1[(t0 >> 16) & 0xff] ^ AES_Te2[(t1 >>  8) & 0xff] ^ AES_Te3[t2 & 0xff] ^ rk[43];
1295         /* round 11: */
1296         t0 = AES_Te0[s0 >> 24] ^ AES_Te1[(s1 >> 16) & 0xff] ^ AES_Te2[(s2 >>  8) & 0xff] ^ AES_Te3[s3 & 0xff] ^ rk[44];
1297         t1 = AES_Te0[s1 >> 24] ^ AES_Te1[(s2 >> 16) & 0xff] ^ AES_Te2[(s3 >>  8) & 0xff] ^ AES_Te3[s0 & 0xff] ^ rk[45];
1298         t2 = AES_Te0[s2 >> 24] ^ AES_Te1[(s3 >> 16) & 0xff] ^ AES_Te2[(s0 >>  8) & 0xff] ^ AES_Te3[s1 & 0xff] ^ rk[46];
1299         t3 = AES_Te0[s3 >> 24] ^ AES_Te1[(s0 >> 16) & 0xff] ^ AES_Te2[(s1 >>  8) & 0xff] ^ AES_Te3[s2 & 0xff] ^ rk[47];
1300         if (key->rounds > 12) {
1301             /* round 12: */
1302             s0 = AES_Te0[t0 >> 24] ^ AES_Te1[(t1 >> 16) & 0xff] ^ AES_Te2[(t2 >>  8) & 0xff] ^ AES_Te3[t3 & 0xff] ^ rk[48];
1303             s1 = AES_Te0[t1 >> 24] ^ AES_Te1[(t2 >> 16) & 0xff] ^ AES_Te2[(t3 >>  8) & 0xff] ^ AES_Te3[t0 & 0xff] ^ rk[49];
1304             s2 = AES_Te0[t2 >> 24] ^ AES_Te1[(t3 >> 16) & 0xff] ^ AES_Te2[(t0 >>  8) & 0xff] ^ AES_Te3[t1 & 0xff] ^ rk[50];
1305             s3 = AES_Te0[t3 >> 24] ^ AES_Te1[(t0 >> 16) & 0xff] ^ AES_Te2[(t1 >>  8) & 0xff] ^ AES_Te3[t2 & 0xff] ^ rk[51];
1306             /* round 13: */
1307             t0 = AES_Te0[s0 >> 24] ^ AES_Te1[(s1 >> 16) & 0xff] ^ AES_Te2[(s2 >>  8) & 0xff] ^ AES_Te3[s3 & 0xff] ^ rk[52];
1308             t1 = AES_Te0[s1 >> 24] ^ AES_Te1[(s2 >> 16) & 0xff] ^ AES_Te2[(s3 >>  8) & 0xff] ^ AES_Te3[s0 & 0xff] ^ rk[53];
1309             t2 = AES_Te0[s2 >> 24] ^ AES_Te1[(s3 >> 16) & 0xff] ^ AES_Te2[(s0 >>  8) & 0xff] ^ AES_Te3[s1 & 0xff] ^ rk[54];
1310             t3 = AES_Te0[s3 >> 24] ^ AES_Te1[(s0 >> 16) & 0xff] ^ AES_Te2[(s1 >>  8) & 0xff] ^ AES_Te3[s2 & 0xff] ^ rk[55];
1311         }
1312     }
1313     rk += key->rounds << 2;
1314 #else  /* !FULL_UNROLL */
1315     /*
1316      * Nr - 1 full rounds:
1317      */
1318     r = key->rounds >> 1;
1319     for (;;) {
1320         t0 =
1321             AES_Te0[(s0 >> 24)       ] ^
1322             AES_Te1[(s1 >> 16) & 0xff] ^
1323             AES_Te2[(s2 >>  8) & 0xff] ^
1324             AES_Te3[(s3      ) & 0xff] ^
1325             rk[4];
1326         t1 =
1327             AES_Te0[(s1 >> 24)       ] ^
1328             AES_Te1[(s2 >> 16) & 0xff] ^
1329             AES_Te2[(s3 >>  8) & 0xff] ^
1330             AES_Te3[(s0      ) & 0xff] ^
1331             rk[5];
1332         t2 =
1333             AES_Te0[(s2 >> 24)       ] ^
1334             AES_Te1[(s3 >> 16) & 0xff] ^
1335             AES_Te2[(s0 >>  8) & 0xff] ^
1336             AES_Te3[(s1      ) & 0xff] ^
1337             rk[6];
1338         t3 =
1339             AES_Te0[(s3 >> 24)       ] ^
1340             AES_Te1[(s0 >> 16) & 0xff] ^
1341             AES_Te2[(s1 >>  8) & 0xff] ^
1342             AES_Te3[(s2      ) & 0xff] ^
1343             rk[7];
1344
1345         rk += 8;
1346         if (--r == 0) {
1347             break;
1348         }
1349
1350         s0 =
1351             AES_Te0[(t0 >> 24)       ] ^
1352             AES_Te1[(t1 >> 16) & 0xff] ^
1353             AES_Te2[(t2 >>  8) & 0xff] ^
1354             AES_Te3[(t3      ) & 0xff] ^
1355             rk[0];
1356         s1 =
1357             AES_Te0[(t1 >> 24)       ] ^
1358             AES_Te1[(t2 >> 16) & 0xff] ^
1359             AES_Te2[(t3 >>  8) & 0xff] ^
1360             AES_Te3[(t0      ) & 0xff] ^
1361             rk[1];
1362         s2 =
1363             AES_Te0[(t2 >> 24)       ] ^
1364             AES_Te1[(t3 >> 16) & 0xff] ^
1365             AES_Te2[(t0 >>  8) & 0xff] ^
1366             AES_Te3[(t1      ) & 0xff] ^
1367             rk[2];
1368         s3 =
1369             AES_Te0[(t3 >> 24)       ] ^
1370             AES_Te1[(t0 >> 16) & 0xff] ^
1371             AES_Te2[(t1 >>  8) & 0xff] ^
1372             AES_Te3[(t2      ) & 0xff] ^
1373             rk[3];
1374     }
1375 #endif /* ?FULL_UNROLL */
1376     /*
1377          * apply last round and
1378          * map cipher state to byte array block:
1379          */
1380         s0 =
1381                 (AES_Te4[(t0 >> 24)       ] & 0xff000000) ^
1382                 (AES_Te4[(t1 >> 16) & 0xff] & 0x00ff0000) ^
1383                 (AES_Te4[(t2 >>  8) & 0xff] & 0x0000ff00) ^
1384                 (AES_Te4[(t3      ) & 0xff] & 0x000000ff) ^
1385                 rk[0];
1386         PUTU32(out     , s0);
1387         s1 =
1388                 (AES_Te4[(t1 >> 24)       ] & 0xff000000) ^
1389                 (AES_Te4[(t2 >> 16) & 0xff] & 0x00ff0000) ^
1390                 (AES_Te4[(t3 >>  8) & 0xff] & 0x0000ff00) ^
1391                 (AES_Te4[(t0      ) & 0xff] & 0x000000ff) ^
1392                 rk[1];
1393         PUTU32(out +  4, s1);
1394         s2 =
1395                 (AES_Te4[(t2 >> 24)       ] & 0xff000000) ^
1396                 (AES_Te4[(t3 >> 16) & 0xff] & 0x00ff0000) ^
1397                 (AES_Te4[(t0 >>  8) & 0xff] & 0x0000ff00) ^
1398                 (AES_Te4[(t1      ) & 0xff] & 0x000000ff) ^
1399                 rk[2];
1400         PUTU32(out +  8, s2);
1401         s3 =
1402                 (AES_Te4[(t3 >> 24)       ] & 0xff000000) ^
1403                 (AES_Te4[(t0 >> 16) & 0xff] & 0x00ff0000) ^
1404                 (AES_Te4[(t1 >>  8) & 0xff] & 0x0000ff00) ^
1405                 (AES_Te4[(t2      ) & 0xff] & 0x000000ff) ^
1406                 rk[3];
1407         PUTU32(out + 12, s3);
1408 }
1409
1410 /*
1411  * Decrypt a single block
1412  * in and out can overlap
1413  */
1414 void AES_decrypt(const unsigned char *in, unsigned char *out,
1415                  const AES_KEY *key) {
1416
1417         const u32 *rk;
1418         u32 s0, s1, s2, s3, t0, t1, t2, t3;
1419 #ifndef FULL_UNROLL
1420         int r;
1421 #endif /* ?FULL_UNROLL */
1422
1423         assert(in && out && key);
1424         rk = key->rd_key;
1425
1426         /*
1427          * map byte array block to cipher state
1428          * and add initial round key:
1429          */
1430     s0 = GETU32(in     ) ^ rk[0];
1431     s1 = GETU32(in +  4) ^ rk[1];
1432     s2 = GETU32(in +  8) ^ rk[2];
1433     s3 = GETU32(in + 12) ^ rk[3];
1434 #ifdef FULL_UNROLL
1435     /* round 1: */
1436     t0 = AES_Td0[s0 >> 24] ^ AES_Td1[(s3 >> 16) & 0xff] ^ AES_Td2[(s2 >>  8) & 0xff] ^ AES_Td3[s1 & 0xff] ^ rk[ 4];
1437     t1 = AES_Td0[s1 >> 24] ^ AES_Td1[(s0 >> 16) & 0xff] ^ AES_Td2[(s3 >>  8) & 0xff] ^ AES_Td3[s2 & 0xff] ^ rk[ 5];
1438     t2 = AES_Td0[s2 >> 24] ^ AES_Td1[(s1 >> 16) & 0xff] ^ AES_Td2[(s0 >>  8) & 0xff] ^ AES_Td3[s3 & 0xff] ^ rk[ 6];
1439     t3 = AES_Td0[s3 >> 24] ^ AES_Td1[(s2 >> 16) & 0xff] ^ AES_Td2[(s1 >>  8) & 0xff] ^ AES_Td3[s0 & 0xff] ^ rk[ 7];
1440     /* round 2: */
1441     s0 = AES_Td0[t0 >> 24] ^ AES_Td1[(t3 >> 16) & 0xff] ^ AES_Td2[(t2 >>  8) & 0xff] ^ AES_Td3[t1 & 0xff] ^ rk[ 8];
1442     s1 = AES_Td0[t1 >> 24] ^ AES_Td1[(t0 >> 16) & 0xff] ^ AES_Td2[(t3 >>  8) & 0xff] ^ AES_Td3[t2 & 0xff] ^ rk[ 9];
1443     s2 = AES_Td0[t2 >> 24] ^ AES_Td1[(t1 >> 16) & 0xff] ^ AES_Td2[(t0 >>  8) & 0xff] ^ AES_Td3[t3 & 0xff] ^ rk[10];
1444     s3 = AES_Td0[t3 >> 24] ^ AES_Td1[(t2 >> 16) & 0xff] ^ AES_Td2[(t1 >>  8) & 0xff] ^ AES_Td3[t0 & 0xff] ^ rk[11];
1445     /* round 3: */
1446     t0 = AES_Td0[s0 >> 24] ^ AES_Td1[(s3 >> 16) & 0xff] ^ AES_Td2[(s2 >>  8) & 0xff] ^ AES_Td3[s1 & 0xff] ^ rk[12];
1447     t1 = AES_Td0[s1 >> 24] ^ AES_Td1[(s0 >> 16) & 0xff] ^ AES_Td2[(s3 >>  8) & 0xff] ^ AES_Td3[s2 & 0xff] ^ rk[13];
1448     t2 = AES_Td0[s2 >> 24] ^ AES_Td1[(s1 >> 16) & 0xff] ^ AES_Td2[(s0 >>  8) & 0xff] ^ AES_Td3[s3 & 0xff] ^ rk[14];
1449     t3 = AES_Td0[s3 >> 24] ^ AES_Td1[(s2 >> 16) & 0xff] ^ AES_Td2[(s1 >>  8) & 0xff] ^ AES_Td3[s0 & 0xff] ^ rk[15];
1450     /* round 4: */
1451     s0 = AES_Td0[t0 >> 24] ^ AES_Td1[(t3 >> 16) & 0xff] ^ AES_Td2[(t2 >>  8) & 0xff] ^ AES_Td3[t1 & 0xff] ^ rk[16];
1452     s1 = AES_Td0[t1 >> 24] ^ AES_Td1[(t0 >> 16) & 0xff] ^ AES_Td2[(t3 >>  8) & 0xff] ^ AES_Td3[t2 & 0xff] ^ rk[17];
1453     s2 = AES_Td0[t2 >> 24] ^ AES_Td1[(t1 >> 16) & 0xff] ^ AES_Td2[(t0 >>  8) & 0xff] ^ AES_Td3[t3 & 0xff] ^ rk[18];
1454     s3 = AES_Td0[t3 >> 24] ^ AES_Td1[(t2 >> 16) & 0xff] ^ AES_Td2[(t1 >>  8) & 0xff] ^ AES_Td3[t0 & 0xff] ^ rk[19];
1455     /* round 5: */
1456     t0 = AES_Td0[s0 >> 24] ^ AES_Td1[(s3 >> 16) & 0xff] ^ AES_Td2[(s2 >>  8) & 0xff] ^ AES_Td3[s1 & 0xff] ^ rk[20];
1457     t1 = AES_Td0[s1 >> 24] ^ AES_Td1[(s0 >> 16) & 0xff] ^ AES_Td2[(s3 >>  8) & 0xff] ^ AES_Td3[s2 & 0xff] ^ rk[21];
1458     t2 = AES_Td0[s2 >> 24] ^ AES_Td1[(s1 >> 16) & 0xff] ^ AES_Td2[(s0 >>  8) & 0xff] ^ AES_Td3[s3 & 0xff] ^ rk[22];
1459     t3 = AES_Td0[s3 >> 24] ^ AES_Td1[(s2 >> 16) & 0xff] ^ AES_Td2[(s1 >>  8) & 0xff] ^ AES_Td3[s0 & 0xff] ^ rk[23];
1460     /* round 6: */
1461     s0 = AES_Td0[t0 >> 24] ^ AES_Td1[(t3 >> 16) & 0xff] ^ AES_Td2[(t2 >>  8) & 0xff] ^ AES_Td3[t1 & 0xff] ^ rk[24];
1462     s1 = AES_Td0[t1 >> 24] ^ AES_Td1[(t0 >> 16) & 0xff] ^ AES_Td2[(t3 >>  8) & 0xff] ^ AES_Td3[t2 & 0xff] ^ rk[25];
1463     s2 = AES_Td0[t2 >> 24] ^ AES_Td1[(t1 >> 16) & 0xff] ^ AES_Td2[(t0 >>  8) & 0xff] ^ AES_Td3[t3 & 0xff] ^ rk[26];
1464     s3 = AES_Td0[t3 >> 24] ^ AES_Td1[(t2 >> 16) & 0xff] ^ AES_Td2[(t1 >>  8) & 0xff] ^ AES_Td3[t0 & 0xff] ^ rk[27];
1465     /* round 7: */
1466     t0 = AES_Td0[s0 >> 24] ^ AES_Td1[(s3 >> 16) & 0xff] ^ AES_Td2[(s2 >>  8) & 0xff] ^ AES_Td3[s1 & 0xff] ^ rk[28];
1467     t1 = AES_Td0[s1 >> 24] ^ AES_Td1[(s0 >> 16) & 0xff] ^ AES_Td2[(s3 >>  8) & 0xff] ^ AES_Td3[s2 & 0xff] ^ rk[29];
1468     t2 = AES_Td0[s2 >> 24] ^ AES_Td1[(s1 >> 16) & 0xff] ^ AES_Td2[(s0 >>  8) & 0xff] ^ AES_Td3[s3 & 0xff] ^ rk[30];
1469     t3 = AES_Td0[s3 >> 24] ^ AES_Td1[(s2 >> 16) & 0xff] ^ AES_Td2[(s1 >>  8) & 0xff] ^ AES_Td3[s0 & 0xff] ^ rk[31];
1470     /* round 8: */
1471     s0 = AES_Td0[t0 >> 24] ^ AES_Td1[(t3 >> 16) & 0xff] ^ AES_Td2[(t2 >>  8) & 0xff] ^ AES_Td3[t1 & 0xff] ^ rk[32];
1472     s1 = AES_Td0[t1 >> 24] ^ AES_Td1[(t0 >> 16) & 0xff] ^ AES_Td2[(t3 >>  8) & 0xff] ^ AES_Td3[t2 & 0xff] ^ rk[33];
1473     s2 = AES_Td0[t2 >> 24] ^ AES_Td1[(t1 >> 16) & 0xff] ^ AES_Td2[(t0 >>  8) & 0xff] ^ AES_Td3[t3 & 0xff] ^ rk[34];
1474     s3 = AES_Td0[t3 >> 24] ^ AES_Td1[(t2 >> 16) & 0xff] ^ AES_Td2[(t1 >>  8) & 0xff] ^ AES_Td3[t0 & 0xff] ^ rk[35];
1475     /* round 9: */
1476     t0 = AES_Td0[s0 >> 24] ^ AES_Td1[(s3 >> 16) & 0xff] ^ AES_Td2[(s2 >>  8) & 0xff] ^ AES_Td3[s1 & 0xff] ^ rk[36];
1477     t1 = AES_Td0[s1 >> 24] ^ AES_Td1[(s0 >> 16) & 0xff] ^ AES_Td2[(s3 >>  8) & 0xff] ^ AES_Td3[s2 & 0xff] ^ rk[37];
1478     t2 = AES_Td0[s2 >> 24] ^ AES_Td1[(s1 >> 16) & 0xff] ^ AES_Td2[(s0 >>  8) & 0xff] ^ AES_Td3[s3 & 0xff] ^ rk[38];
1479     t3 = AES_Td0[s3 >> 24] ^ AES_Td1[(s2 >> 16) & 0xff] ^ AES_Td2[(s1 >>  8) & 0xff] ^ AES_Td3[s0 & 0xff] ^ rk[39];
1480     if (key->rounds > 10) {
1481         /* round 10: */
1482         s0 = AES_Td0[t0 >> 24] ^ AES_Td1[(t3 >> 16) & 0xff] ^ AES_Td2[(t2 >>  8) & 0xff] ^ AES_Td3[t1 & 0xff] ^ rk[40];
1483         s1 = AES_Td0[t1 >> 24] ^ AES_Td1[(t0 >> 16) & 0xff] ^ AES_Td2[(t3 >>  8) & 0xff] ^ AES_Td3[t2 & 0xff] ^ rk[41];
1484         s2 = AES_Td0[t2 >> 24] ^ AES_Td1[(t1 >> 16) & 0xff] ^ AES_Td2[(t0 >>  8) & 0xff] ^ AES_Td3[t3 & 0xff] ^ rk[42];
1485         s3 = AES_Td0[t3 >> 24] ^ AES_Td1[(t2 >> 16) & 0xff] ^ AES_Td2[(t1 >>  8) & 0xff] ^ AES_Td3[t0 & 0xff] ^ rk[43];
1486         /* round 11: */
1487         t0 = AES_Td0[s0 >> 24] ^ AES_Td1[(s3 >> 16) & 0xff] ^ AES_Td2[(s2 >>  8) & 0xff] ^ AES_Td3[s1 & 0xff] ^ rk[44];
1488         t1 = AES_Td0[s1 >> 24] ^ AES_Td1[(s0 >> 16) & 0xff] ^ AES_Td2[(s3 >>  8) & 0xff] ^ AES_Td3[s2 & 0xff] ^ rk[45];
1489         t2 = AES_Td0[s2 >> 24] ^ AES_Td1[(s1 >> 16) & 0xff] ^ AES_Td2[(s0 >>  8) & 0xff] ^ AES_Td3[s3 & 0xff] ^ rk[46];
1490         t3 = AES_Td0[s3 >> 24] ^ AES_Td1[(s2 >> 16) & 0xff] ^ AES_Td2[(s1 >>  8) & 0xff] ^ AES_Td3[s0 & 0xff] ^ rk[47];
1491         if (key->rounds > 12) {
1492             /* round 12: */
1493             s0 = AES_Td0[t0 >> 24] ^ AES_Td1[(t3 >> 16) & 0xff] ^ AES_Td2[(t2 >>  8) & 0xff] ^ AES_Td3[t1 & 0xff] ^ rk[48];
1494             s1 = AES_Td0[t1 >> 24] ^ AES_Td1[(t0 >> 16) & 0xff] ^ AES_Td2[(t3 >>  8) & 0xff] ^ AES_Td3[t2 & 0xff] ^ rk[49];
1495             s2 = AES_Td0[t2 >> 24] ^ AES_Td1[(t1 >> 16) & 0xff] ^ AES_Td2[(t0 >>  8) & 0xff] ^ AES_Td3[t3 & 0xff] ^ rk[50];
1496             s3 = AES_Td0[t3 >> 24] ^ AES_Td1[(t2 >> 16) & 0xff] ^ AES_Td2[(t1 >>  8) & 0xff] ^ AES_Td3[t0 & 0xff] ^ rk[51];
1497             /* round 13: */
1498             t0 = AES_Td0[s0 >> 24] ^ AES_Td1[(s3 >> 16) & 0xff] ^ AES_Td2[(s2 >>  8) & 0xff] ^ AES_Td3[s1 & 0xff] ^ rk[52];
1499             t1 = AES_Td0[s1 >> 24] ^ AES_Td1[(s0 >> 16) & 0xff] ^ AES_Td2[(s3 >>  8) & 0xff] ^ AES_Td3[s2 & 0xff] ^ rk[53];
1500             t2 = AES_Td0[s2 >> 24] ^ AES_Td1[(s1 >> 16) & 0xff] ^ AES_Td2[(s0 >>  8) & 0xff] ^ AES_Td3[s3 & 0xff] ^ rk[54];
1501             t3 = AES_Td0[s3 >> 24] ^ AES_Td1[(s2 >> 16) & 0xff] ^ AES_Td2[(s1 >>  8) & 0xff] ^ AES_Td3[s0 & 0xff] ^ rk[55];
1502         }
1503     }
1504         rk += key->rounds << 2;
1505 #else  /* !FULL_UNROLL */
1506     /*
1507      * Nr - 1 full rounds:
1508      */
1509     r = key->rounds >> 1;
1510     for (;;) {
1511         t0 =
1512             AES_Td0[(s0 >> 24)       ] ^
1513             AES_Td1[(s3 >> 16) & 0xff] ^
1514             AES_Td2[(s2 >>  8) & 0xff] ^
1515             AES_Td3[(s1      ) & 0xff] ^
1516             rk[4];
1517         t1 =
1518             AES_Td0[(s1 >> 24)       ] ^
1519             AES_Td1[(s0 >> 16) & 0xff] ^
1520             AES_Td2[(s3 >>  8) & 0xff] ^
1521             AES_Td3[(s2      ) & 0xff] ^
1522             rk[5];
1523         t2 =
1524             AES_Td0[(s2 >> 24)       ] ^
1525             AES_Td1[(s1 >> 16) & 0xff] ^
1526             AES_Td2[(s0 >>  8) & 0xff] ^
1527             AES_Td3[(s3      ) & 0xff] ^
1528             rk[6];
1529         t3 =
1530             AES_Td0[(s3 >> 24)       ] ^
1531             AES_Td1[(s2 >> 16) & 0xff] ^
1532             AES_Td2[(s1 >>  8) & 0xff] ^
1533             AES_Td3[(s0      ) & 0xff] ^
1534             rk[7];
1535
1536         rk += 8;
1537         if (--r == 0) {
1538             break;
1539         }
1540
1541         s0 =
1542             AES_Td0[(t0 >> 24)       ] ^
1543             AES_Td1[(t3 >> 16) & 0xff] ^
1544             AES_Td2[(t2 >>  8) & 0xff] ^
1545             AES_Td3[(t1      ) & 0xff] ^
1546             rk[0];
1547         s1 =
1548             AES_Td0[(t1 >> 24)       ] ^
1549             AES_Td1[(t0 >> 16) & 0xff] ^
1550             AES_Td2[(t3 >>  8) & 0xff] ^
1551             AES_Td3[(t2      ) & 0xff] ^
1552             rk[1];
1553         s2 =
1554             AES_Td0[(t2 >> 24)       ] ^
1555             AES_Td1[(t1 >> 16) & 0xff] ^
1556             AES_Td2[(t0 >>  8) & 0xff] ^
1557             AES_Td3[(t3      ) & 0xff] ^
1558             rk[2];
1559         s3 =
1560             AES_Td0[(t3 >> 24)       ] ^
1561             AES_Td1[(t2 >> 16) & 0xff] ^
1562             AES_Td2[(t1 >>  8) & 0xff] ^
1563             AES_Td3[(t0      ) & 0xff] ^
1564             rk[3];
1565     }
1566 #endif /* ?FULL_UNROLL */
1567     /*
1568          * apply last round and
1569          * map cipher state to byte array block:
1570          */
1571         s0 =
1572                 (AES_Td4[(t0 >> 24)       ] & 0xff000000) ^
1573                 (AES_Td4[(t3 >> 16) & 0xff] & 0x00ff0000) ^
1574                 (AES_Td4[(t2 >>  8) & 0xff] & 0x0000ff00) ^
1575                 (AES_Td4[(t1      ) & 0xff] & 0x000000ff) ^
1576                 rk[0];
1577         PUTU32(out     , s0);
1578         s1 =
1579                 (AES_Td4[(t1 >> 24)       ] & 0xff000000) ^
1580                 (AES_Td4[(t0 >> 16) & 0xff] & 0x00ff0000) ^
1581                 (AES_Td4[(t3 >>  8) & 0xff] & 0x0000ff00) ^
1582                 (AES_Td4[(t2      ) & 0xff] & 0x000000ff) ^
1583                 rk[1];
1584         PUTU32(out +  4, s1);
1585         s2 =
1586                 (AES_Td4[(t2 >> 24)       ] & 0xff000000) ^
1587                 (AES_Td4[(t1 >> 16) & 0xff] & 0x00ff0000) ^
1588                 (AES_Td4[(t0 >>  8) & 0xff] & 0x0000ff00) ^
1589                 (AES_Td4[(t3      ) & 0xff] & 0x000000ff) ^
1590                 rk[2];
1591         PUTU32(out +  8, s2);
1592         s3 =
1593                 (AES_Td4[(t3 >> 24)       ] & 0xff000000) ^
1594                 (AES_Td4[(t2 >> 16) & 0xff] & 0x00ff0000) ^
1595                 (AES_Td4[(t1 >>  8) & 0xff] & 0x0000ff00) ^
1596                 (AES_Td4[(t0      ) & 0xff] & 0x000000ff) ^
1597                 rk[3];
1598         PUTU32(out + 12, s3);
1599 }
1600
1601 #endif /* AES_ASM */
1602
1603 void AES_cbc_encrypt(const unsigned char *in, unsigned char *out,
1604                      const unsigned long length, const AES_KEY *key,
1605                      unsigned char *ivec, const int enc)
1606 {
1607
1608         unsigned long n;
1609         unsigned long len = length;
1610         unsigned char tmp[AES_BLOCK_SIZE];
1611
1612         assert(in && out && key && ivec);
1613
1614         if (enc) {
1615                 while (len >= AES_BLOCK_SIZE) {
1616                         for(n=0; n < AES_BLOCK_SIZE; ++n)
1617                                 tmp[n] = in[n] ^ ivec[n];
1618                         AES_encrypt(tmp, out, key);
1619                         memcpy(ivec, out, AES_BLOCK_SIZE);
1620                         len -= AES_BLOCK_SIZE;
1621                         in += AES_BLOCK_SIZE;
1622                         out += AES_BLOCK_SIZE;
1623                 }
1624                 if (len) {
1625                         for(n=0; n < len; ++n)
1626                                 tmp[n] = in[n] ^ ivec[n];
1627                         for(n=len; n < AES_BLOCK_SIZE; ++n)
1628                                 tmp[n] = ivec[n];
1629                         AES_encrypt(tmp, tmp, key);
1630                         memcpy(out, tmp, AES_BLOCK_SIZE);
1631                         memcpy(ivec, tmp, AES_BLOCK_SIZE);
1632                 }
1633         } else {
1634                 while (len >= AES_BLOCK_SIZE) {
1635                         memcpy(tmp, in, AES_BLOCK_SIZE);
1636                         AES_decrypt(in, out, key);
1637                         for(n=0; n < AES_BLOCK_SIZE; ++n)
1638                                 out[n] ^= ivec[n];
1639                         memcpy(ivec, tmp, AES_BLOCK_SIZE);
1640                         len -= AES_BLOCK_SIZE;
1641                         in += AES_BLOCK_SIZE;
1642                         out += AES_BLOCK_SIZE;
1643                 }
1644                 if (len) {
1645                         memcpy(tmp, in, AES_BLOCK_SIZE);
1646                         AES_decrypt(tmp, tmp, key);
1647                         for(n=0; n < len; ++n)
1648                                 out[n] = tmp[n] ^ ivec[n];
1649                         memcpy(ivec, tmp, AES_BLOCK_SIZE);
1650                 }
1651         }
1652 }