qemu/crypto/aes.c

   1 /**
   2  *
   3  * aes.c - integrated in QEMU by Fabrice Bellard from the OpenSSL project.
   4  */
   5 /*
   6  * rijndael-alg-fst.c
   7  *
   8  * @version 3.0 (December 2000)
   9  *
  10  * Optimised ANSI C code for the Rijndael cipher (now AES)
  11  *
  12  * @author Vincent Rijmen <vincent.rijmen@esat.kuleuven.ac.be>
  13  * @author Antoon Bosselaers <antoon.bosselaers@esat.kuleuven.ac.be>
  14  * @author Paulo Barreto <paulo.barreto@terra.com.br>
  15  *
  16  * This code is hereby placed in the public domain.
  17  *
  18  * THIS SOFTWARE IS PROVIDED BY THE AUTHORS ''AS IS'' AND ANY EXPRESS
  19  * OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
  20  * WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
  21  * ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHORS OR CONTRIBUTORS BE
  22  * LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
  23  * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
  24  * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
  25  * BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
  26  * WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
  27  * OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE,
  28  * EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
  29  */
  30 #include "qemu/osdep.h"
  31 #include "qemu-common.h"
  32 #include "crypto/aes.h"
  33
  34 typedef uint32_t u32;
  35 typedef uint8_t u8;
  36
  37 /* This controls loop-unrolling in aes_core.c */
  38 #undef FULL_UNROLL
  39 # define GETU32(pt) (((u32)(pt)[0] << 24) ^ ((u32)(pt)[1] << 16) ^ ((u32)(pt)[2] <<  8) ^ ((u32)(pt)[3]))
  40 # define PUTU32(ct, st) { (ct)[0] = (u8)((st) >> 24); (ct)[1] = (u8)((st) >> 16); (ct)[2] = (u8)((st) >>  8); (ct)[3] = (u8)(st); }
  41
  42 const uint8_t AES_sbox[256] = {
  43     0x63, 0x7C, 0x77, 0x7B, 0xF2, 0x6B, 0x6F, 0xC5,
  44     0x30, 0x01, 0x67, 0x2B, 0xFE, 0xD7, 0xAB, 0x76,
  45     0xCA, 0x82, 0xC9, 0x7D, 0xFA, 0x59, 0x47, 0xF0,
  46     0xAD, 0xD4, 0xA2, 0xAF, 0x9C, 0xA4, 0x72, 0xC0,
  47     0xB7, 0xFD, 0x93, 0x26, 0x36, 0x3F, 0xF7, 0xCC,
  48     0x34, 0xA5, 0xE5, 0xF1, 0x71, 0xD8, 0x31, 0x15,
  49     0x04, 0xC7, 0x23, 0xC3, 0x18, 0x96, 0x05, 0x9A,
  50     0x07, 0x12, 0x80, 0xE2, 0xEB, 0x27, 0xB2, 0x75,
  51     0x09, 0x83, 0x2C, 0x1A, 0x1B, 0x6E, 0x5A, 0xA0,
  52     0x52, 0x3B, 0xD6, 0xB3, 0x29, 0xE3, 0x2F, 0x84,
  53     0x53, 0xD1, 0x00, 0xED, 0x20, 0xFC, 0xB1, 0x5B,
  54     0x6A, 0xCB, 0xBE, 0x39, 0x4A, 0x4C, 0x58, 0xCF,
  55     0xD0, 0xEF, 0xAA, 0xFB, 0x43, 0x4D, 0x33, 0x85,
  56     0x45, 0xF9, 0x02, 0x7F, 0x50, 0x3C, 0x9F, 0xA8,
  57     0x51, 0xA3, 0x40, 0x8F, 0x92, 0x9D, 0x38, 0xF5,
  58     0xBC, 0xB6, 0xDA, 0x21, 0x10, 0xFF, 0xF3, 0xD2,
  59     0xCD, 0x0C, 0x13, 0xEC, 0x5F, 0x97, 0x44, 0x17,
  60     0xC4, 0xA7, 0x7E, 0x3D, 0x64, 0x5D, 0x19, 0x73,
  61     0x60, 0x81, 0x4F, 0xDC, 0x22, 0x2A, 0x90, 0x88,
  62     0x46, 0xEE, 0xB8, 0x14, 0xDE, 0x5E, 0x0B, 0xDB,
  63     0xE0, 0x32, 0x3A, 0x0A, 0x49, 0x06, 0x24, 0x5C,
  64     0xC2, 0xD3, 0xAC, 0x62, 0x91, 0x95, 0xE4, 0x79,
  65     0xE7, 0xC8, 0x37, 0x6D, 0x8D, 0xD5, 0x4E, 0xA9,
  66     0x6C, 0x56, 0xF4, 0xEA, 0x65, 0x7A, 0xAE, 0x08,
  67     0xBA, 0x78, 0x25, 0x2E, 0x1C, 0xA6, 0xB4, 0xC6,
  68     0xE8, 0xDD, 0x74, 0x1F, 0x4B, 0xBD, 0x8B, 0x8A,
  69     0x70, 0x3E, 0xB5, 0x66, 0x48, 0x03, 0xF6, 0x0E,
  70     0x61, 0x35, 0x57, 0xB9, 0x86, 0xC1, 0x1D, 0x9E,
  71     0xE1, 0xF8, 0x98, 0x11, 0x69, 0xD9, 0x8E, 0x94,
  72     0x9B, 0x1E, 0x87, 0xE9, 0xCE, 0x55, 0x28, 0xDF,
  73     0x8C, 0xA1, 0x89, 0x0D, 0xBF, 0xE6, 0x42, 0x68,
  74     0x41, 0x99, 0x2D, 0x0F, 0xB0, 0x54, 0xBB, 0x16,
  75 };
  76
  77 const uint8_t AES_isbox[256] = {
  78     0x52, 0x09, 0x6A, 0xD5, 0x30, 0x36, 0xA5, 0x38,
  79     0xBF, 0x40, 0xA3, 0x9E, 0x81, 0xF3, 0xD7, 0xFB,
  80     0x7C, 0xE3, 0x39, 0x82, 0x9B, 0x2F, 0xFF, 0x87,
  81     0x34, 0x8E, 0x43, 0x44, 0xC4, 0xDE, 0xE9, 0xCB,
  82     0x54, 0x7B, 0x94, 0x32, 0xA6, 0xC2, 0x23, 0x3D,
  83     0xEE, 0x4C, 0x95, 0x0B, 0x42, 0xFA, 0xC3, 0x4E,
  84     0x08, 0x2E, 0xA1, 0x66, 0x28, 0xD9, 0x24, 0xB2,
  85     0x76, 0x5B, 0xA2, 0x49, 0x6D, 0x8B, 0xD1, 0x25,
  86     0x72, 0xF8, 0xF6, 0x64, 0x86, 0x68, 0x98, 0x16,
  87     0xD4, 0xA4, 0x5C, 0xCC, 0x5D, 0x65, 0xB6, 0x92,
  88     0x6C, 0x70, 0x48, 0x50, 0xFD, 0xED, 0xB9, 0xDA,
  89     0x5E, 0x15, 0x46, 0x57, 0xA7, 0x8D, 0x9D, 0x84,
  90     0x90, 0xD8, 0xAB, 0x00, 0x8C, 0xBC, 0xD3, 0x0A,
  91     0xF7, 0xE4, 0x58, 0x05, 0xB8, 0xB3, 0x45, 0x06,
  92     0xD0, 0x2C, 0x1E, 0x8F, 0xCA, 0x3F, 0x0F, 0x02,
  93     0xC1, 0xAF, 0xBD, 0x03, 0x01, 0x13, 0x8A, 0x6B,
  94     0x3A, 0x91, 0x11, 0x41, 0x4F, 0x67, 0xDC, 0xEA,
  95     0x97, 0xF2, 0xCF, 0xCE, 0xF0, 0xB4, 0xE6, 0x73,
  96     0x96, 0xAC, 0x74, 0x22, 0xE7, 0xAD, 0x35, 0x85,
  97     0xE2, 0xF9, 0x37, 0xE8, 0x1C, 0x75, 0xDF, 0x6E,
  98     0x47, 0xF1, 0x1A, 0x71, 0x1D, 0x29, 0xC5, 0x89,
  99     0x6F, 0xB7, 0x62, 0x0E, 0xAA, 0x18, 0xBE, 0x1B,
 100     0xFC, 0x56, 0x3E, 0x4B, 0xC6, 0xD2, 0x79, 0x20,
 101     0x9A, 0xDB, 0xC0, 0xFE, 0x78, 0xCD, 0x5A, 0xF4,
 102     0x1F, 0xDD, 0xA8, 0x33, 0x88, 0x07, 0xC7, 0x31,
 103     0xB1, 0x12, 0x10, 0x59, 0x27, 0x80, 0xEC, 0x5F,
 104     0x60, 0x51, 0x7F, 0xA9, 0x19, 0xB5, 0x4A, 0x0D,
 105     0x2D, 0xE5, 0x7A, 0x9F, 0x93, 0xC9, 0x9C, 0xEF,
 106     0xA0, 0xE0, 0x3B, 0x4D, 0xAE, 0x2A, 0xF5, 0xB0,
 107     0xC8, 0xEB, 0xBB, 0x3C, 0x83, 0x53, 0x99, 0x61,
 108     0x17, 0x2B, 0x04, 0x7E, 0xBA, 0x77, 0xD6, 0x26,
 109     0xE1, 0x69, 0x14, 0x63, 0x55, 0x21, 0x0C, 0x7D,
 110 };
 111
 112 const uint8_t AES_shifts[16] = {
 113     0, 5, 10, 15, 4, 9, 14, 3, 8, 13, 2, 7, 12, 1, 6, 11
 114 };
 115
 116 const uint8_t AES_ishifts[16] = {
 117     0, 13, 10, 7, 4, 1, 14, 11, 8, 5, 2, 15, 12, 9, 6, 3
 118 };
 119
 120 /* AES_imc[x][0] = [x].[0e, 09, 0d, 0b]; */
 121 /* AES_imc[x][1] = [x].[0b, 0e, 09, 0d]; */
 122 /* AES_imc[x][2] = [x].[0d, 0b, 0e, 09]; */
 123 /* AES_imc[x][3] = [x].[09, 0d, 0b, 0e]; */
 124 const uint32_t AES_imc[256][4] = {
 125     { 0x00000000, 0x00000000, 0x00000000, 0x00000000, }, /* x=00 */
 126     { 0x0E090D0B, 0x0B0E090D, 0x0D0B0E09, 0x090D0B0E, }, /* x=01 */
 127     { 0x1C121A16, 0x161C121A, 0x1A161C12, 0x121A161C, }, /* x=02 */
 128     { 0x121B171D, 0x1D121B17, 0x171D121B, 0x1B171D12, }, /* x=03 */
 129     { 0x3824342C, 0x2C382434, 0x342C3824, 0x24342C38, }, /* x=04 */
 130     { 0x362D3927, 0x27362D39, 0x3927362D, 0x2D392736, }, /* x=05 */
 131     { 0x24362E3A, 0x3A24362E, 0x2E3A2436, 0x362E3A24, }, /* x=06 */
 132     { 0x2A3F2331, 0x312A3F23, 0x23312A3F, 0x3F23312A, }, /* x=07 */
 133     { 0x70486858, 0x58704868, 0x68587048, 0x48685870, }, /* x=08 */
 134     { 0x7E416553, 0x537E4165, 0x65537E41, 0x4165537E, }, /* x=09 */
 135     { 0x6C5A724E, 0x4E6C5A72, 0x724E6C5A, 0x5A724E6C, }, /* x=0A */
 136     { 0x62537F45, 0x4562537F, 0x7F456253, 0x537F4562, }, /* x=0B */
 137     { 0x486C5C74, 0x74486C5C, 0x5C74486C, 0x6C5C7448, }, /* x=0C */
 138     { 0x4665517F, 0x7F466551, 0x517F4665, 0x65517F46, }, /* x=0D */
 139     { 0x547E4662, 0x62547E46, 0x4662547E, 0x7E466254, }, /* x=0E */
 140     { 0x5A774B69, 0x695A774B, 0x4B695A77, 0x774B695A, }, /* x=0F */
 141     { 0xE090D0B0, 0xB0E090D0, 0xD0B0E090, 0x90D0B0E0, }, /* x=10 */
 142     { 0xEE99DDBB, 0xBBEE99DD, 0xDDBBEE99, 0x99DDBBEE, }, /* x=11 */
 143     { 0xFC82CAA6, 0xA6FC82CA, 0xCAA6FC82, 0x82CAA6FC, }, /* x=12 */
 144     { 0xF28BC7AD, 0xADF28BC7, 0xC7ADF28B, 0x8BC7ADF2, }, /* x=13 */
 145     { 0xD8B4E49C, 0x9CD8B4E4, 0xE49CD8B4, 0xB4E49CD8, }, /* x=14 */
 146     { 0xD6BDE997, 0x97D6BDE9, 0xE997D6BD, 0xBDE997D6, }, /* x=15 */
 147     { 0xC4A6FE8A, 0x8AC4A6FE, 0xFE8AC4A6, 0xA6FE8AC4, }, /* x=16 */
 148     { 0xCAAFF381, 0x81CAAFF3, 0xF381CAAF, 0xAFF381CA, }, /* x=17 */
 149     { 0x90D8B8E8, 0xE890D8B8, 0xB8E890D8, 0xD8B8E890, }, /* x=18 */
 150     { 0x9ED1B5E3, 0xE39ED1B5, 0xB5E39ED1, 0xD1B5E39E, }, /* x=19 */
 151     { 0x8CCAA2FE, 0xFE8CCAA2, 0xA2FE8CCA, 0xCAA2FE8C, }, /* x=1A */
 152     { 0x82C3AFF5, 0xF582C3AF, 0xAFF582C3, 0xC3AFF582, }, /* x=1B */
 153     { 0xA8FC8CC4, 0xC4A8FC8C, 0x8CC4A8FC, 0xFC8CC4A8, }, /* x=1C */
 154     { 0xA6F581CF, 0xCFA6F581, 0x81CFA6F5, 0xF581CFA6, }, /* x=1D */
 155     { 0xB4EE96D2, 0xD2B4EE96, 0x96D2B4EE, 0xEE96D2B4, }, /* x=1E */
 156     { 0xBAE79BD9, 0xD9BAE79B, 0x9BD9BAE7, 0xE79BD9BA, }, /* x=1F */
 157     { 0xDB3BBB7B, 0x7BDB3BBB, 0xBB7BDB3B, 0x3BBB7BDB, }, /* x=20 */
 158     { 0xD532B670, 0x70D532B6, 0xB670D532, 0x32B670D5, }, /* x=21 */
 159     { 0xC729A16D, 0x6DC729A1, 0xA16DC729, 0x29A16DC7, }, /* x=22 */
 160     { 0xC920AC66, 0x66C920AC, 0xAC66C920, 0x20AC66C9, }, /* x=23 */
 161     { 0xE31F8F57, 0x57E31F8F, 0x8F57E31F, 0x1F8F57E3, }, /* x=24 */
 162     { 0xED16825C, 0x5CED1682, 0x825CED16, 0x16825CED, }, /* x=25 */
 163     { 0xFF0D9541, 0x41FF0D95, 0x9541FF0D, 0x0D9541FF, }, /* x=26 */
 164     { 0xF104984A, 0x4AF10498, 0x984AF104, 0x04984AF1, }, /* x=27 */
 165     { 0xAB73D323, 0x23AB73D3, 0xD323AB73, 0x73D323AB, }, /* x=28 */
 166     { 0xA57ADE28, 0x28A57ADE, 0xDE28A57A, 0x7ADE28A5, }, /* x=29 */
 167     { 0xB761C935, 0x35B761C9, 0xC935B761, 0x61C935B7, }, /* x=2A */
 168     { 0xB968C43E, 0x3EB968C4, 0xC43EB968, 0x68C43EB9, }, /* x=2B */
 169     { 0x9357E70F, 0x0F9357E7, 0xE70F9357, 0x57E70F93, }, /* x=2C */
 170     { 0x9D5EEA04, 0x049D5EEA, 0xEA049D5E, 0x5EEA049D, }, /* x=2D */
 171     { 0x8F45FD19, 0x198F45FD, 0xFD198F45, 0x45FD198F, }, /* x=2E */
 172     { 0x814CF012, 0x12814CF0, 0xF012814C, 0x4CF01281, }, /* x=2F */
 173     { 0x3BAB6BCB, 0xCB3BAB6B, 0x6BCB3BAB, 0xAB6BCB3B, }, /* x=30 */
 174     { 0x35A266C0, 0xC035A266, 0x66C035A2, 0xA266C035, }, /* x=31 */
 175     { 0x27B971DD, 0xDD27B971, 0x71DD27B9, 0xB971DD27, }, /* x=32 */
 176     { 0x29B07CD6, 0xD629B07C, 0x7CD629B0, 0xB07CD629, }, /* x=33 */
 177     { 0x038F5FE7, 0xE7038F5F, 0x5FE7038F, 0x8F5FE703, }, /* x=34 */
 178     { 0x0D8652EC, 0xEC0D8652, 0x52EC0D86, 0x8652EC0D, }, /* x=35 */
 179     { 0x1F9D45F1, 0xF11F9D45, 0x45F11F9D, 0x9D45F11F, }, /* x=36 */
 180     { 0x119448FA, 0xFA119448, 0x48FA1194, 0x9448FA11, }, /* x=37 */
 181     { 0x4BE30393, 0x934BE303, 0x03934BE3, 0xE303934B, }, /* x=38 */
 182     { 0x45EA0E98, 0x9845EA0E, 0x0E9845EA, 0xEA0E9845, }, /* x=39 */
 183     { 0x57F11985, 0x8557F119, 0x198557F1, 0xF1198557, }, /* x=3A */
 184     { 0x59F8148E, 0x8E59F814, 0x148E59F8, 0xF8148E59, }, /* x=3B */
 185     { 0x73C737BF, 0xBF73C737, 0x37BF73C7, 0xC737BF73, }, /* x=3C */
 186     { 0x7DCE3AB4, 0xB47DCE3A, 0x3AB47DCE, 0xCE3AB47D, }, /* x=3D */
 187     { 0x6FD52DA9, 0xA96FD52D, 0x2DA96FD5, 0xD52DA96F, }, /* x=3E */
 188     { 0x61DC20A2, 0xA261DC20, 0x20A261DC, 0xDC20A261, }, /* x=3F */
 189     { 0xAD766DF6, 0xF6AD766D, 0x6DF6AD76, 0x766DF6AD, }, /* x=40 */
 190     { 0xA37F60FD, 0xFDA37F60, 0x60FDA37F, 0x7F60FDA3, }, /* x=41 */
 191     { 0xB16477E0, 0xE0B16477, 0x77E0B164, 0x6477E0B1, }, /* x=42 */
 192     { 0xBF6D7AEB, 0xEBBF6D7A, 0x7AEBBF6D, 0x6D7AEBBF, }, /* x=43 */
 193     { 0x955259DA, 0xDA955259, 0x59DA9552, 0x5259DA95, }, /* x=44 */
 194     { 0x9B5B54D1, 0xD19B5B54, 0x54D19B5B, 0x5B54D19B, }, /* x=45 */
 195     { 0x894043CC, 0xCC894043, 0x43CC8940, 0x4043CC89, }, /* x=46 */
 196     { 0x87494EC7, 0xC787494E, 0x4EC78749, 0x494EC787, }, /* x=47 */
 197     { 0xDD3E05AE, 0xAEDD3E05, 0x05AEDD3E, 0x3E05AEDD, }, /* x=48 */
 198     { 0xD33708A5, 0xA5D33708, 0x08A5D337, 0x3708A5D3, }, /* x=49 */
 199     { 0xC12C1FB8, 0xB8C12C1F, 0x1FB8C12C, 0x2C1FB8C1, }, /* x=4A */
 200     { 0xCF2512B3, 0xB3CF2512, 0x12B3CF25, 0x2512B3CF, }, /* x=4B */
 201     { 0xE51A3182, 0x82E51A31, 0x3182E51A, 0x1A3182E5, }, /* x=4C */
 202     { 0xEB133C89, 0x89EB133C, 0x3C89EB13, 0x133C89EB, }, /* x=4D */
 203     { 0xF9082B94, 0x94F9082B, 0x2B94F908, 0x082B94F9, }, /* x=4E */
 204     { 0xF701269F, 0x9FF70126, 0x269FF701, 0x01269FF7, }, /* x=4F */
 205     { 0x4DE6BD46, 0x464DE6BD, 0xBD464DE6, 0xE6BD464D, }, /* x=50 */
 206     { 0x43EFB04D, 0x4D43EFB0, 0xB04D43EF, 0xEFB04D43, }, /* x=51 */
 207     { 0x51F4A750, 0x5051F4A7, 0xA75051F4, 0xF4A75051, }, /* x=52 */
 208     { 0x5FFDAA5B, 0x5B5FFDAA, 0xAA5B5FFD, 0xFDAA5B5F, }, /* x=53 */
 209     { 0x75C2896A, 0x6A75C289, 0x896A75C2, 0xC2896A75, }, /* x=54 */
 210     { 0x7BCB8461, 0x617BCB84, 0x84617BCB, 0xCB84617B, }, /* x=55 */
 211     { 0x69D0937C, 0x7C69D093, 0x937C69D0, 0xD0937C69, }, /* x=56 */
 212     { 0x67D99E77, 0x7767D99E, 0x9E7767D9, 0xD99E7767, }, /* x=57 */
 213     { 0x3DAED51E, 0x1E3DAED5, 0xD51E3DAE, 0xAED51E3D, }, /* x=58 */
 214     { 0x33A7D815, 0x1533A7D8, 0xD81533A7, 0xA7D81533, }, /* x=59 */
 215     { 0x21BCCF08, 0x0821BCCF, 0xCF0821BC, 0xBCCF0821, }, /* x=5A */
 216     { 0x2FB5C203, 0x032FB5C2, 0xC2032FB5, 0xB5C2032F, }, /* x=5B */
 217     { 0x058AE132, 0x32058AE1, 0xE132058A, 0x8AE13205, }, /* x=5C */
 218     { 0x0B83EC39, 0x390B83EC, 0xEC390B83, 0x83EC390B, }, /* x=5D */
 219     { 0x1998FB24, 0x241998FB, 0xFB241998, 0x98FB2419, }, /* x=5E */
 220     { 0x1791F62F, 0x2F1791F6, 0xF62F1791, 0x91F62F17, }, /* x=5F */
 221     { 0x764DD68D, 0x8D764DD6, 0xD68D764D, 0x4DD68D76, }, /* x=60 */
 222     { 0x7844DB86, 0x867844DB, 0xDB867844, 0x44DB8678, }, /* x=61 */
 223     { 0x6A5FCC9B, 0x9B6A5FCC, 0xCC9B6A5F, 0x5FCC9B6A, }, /* x=62 */
 224     { 0x6456C190, 0x906456C1, 0xC1906456, 0x56C19064, }, /* x=63 */
 225     { 0x4E69E2A1, 0xA14E69E2, 0xE2A14E69, 0x69E2A14E, }, /* x=64 */
 226     { 0x4060EFAA, 0xAA4060EF, 0xEFAA4060, 0x60EFAA40, }, /* x=65 */
 227     { 0x527BF8B7, 0xB7527BF8, 0xF8B7527B, 0x7BF8B752, }, /* x=66 */
 228     { 0x5C72F5BC, 0xBC5C72F5, 0xF5BC5C72, 0x72F5BC5C, }, /* x=67 */
 229     { 0x0605BED5, 0xD50605BE, 0xBED50605, 0x05BED506, }, /* x=68 */
 230     { 0x080CB3DE, 0xDE080CB3, 0xB3DE080C, 0x0CB3DE08, }, /* x=69 */
 231     { 0x1A17A4C3, 0xC31A17A4, 0xA4C31A17, 0x17A4C31A, }, /* x=6A */
 232     { 0x141EA9C8, 0xC8141EA9, 0xA9C8141E, 0x1EA9C814, }, /* x=6B */
 233     { 0x3E218AF9, 0xF93E218A, 0x8AF93E21, 0x218AF93E, }, /* x=6C */
 234     { 0x302887F2, 0xF2302887, 0x87F23028, 0x2887F230, }, /* x=6D */
 235     { 0x223390EF, 0xEF223390, 0x90EF2233, 0x3390EF22, }, /* x=6E */
 236     { 0x2C3A9DE4, 0xE42C3A9D, 0x9DE42C3A, 0x3A9DE42C, }, /* x=6F */
 237     { 0x96DD063D, 0x3D96DD06, 0x063D96DD, 0xDD063D96, }, /* x=70 */
 238     { 0x98D40B36, 0x3698D40B, 0x0B3698D4, 0xD40B3698, }, /* x=71 */
 239     { 0x8ACF1C2B, 0x2B8ACF1C, 0x1C2B8ACF, 0xCF1C2B8A, }, /* x=72 */
 240     { 0x84C61120, 0x2084C611, 0x112084C6, 0xC6112084, }, /* x=73 */
 241     { 0xAEF93211, 0x11AEF932, 0x3211AEF9, 0xF93211AE, }, /* x=74 */
 242     { 0xA0F03F1A, 0x1AA0F03F, 0x3F1AA0F0, 0xF03F1AA0, }, /* x=75 */
 243     { 0xB2EB2807, 0x07B2EB28, 0x2807B2EB, 0xEB2807B2, }, /* x=76 */
 244     { 0xBCE2250C, 0x0CBCE225, 0x250CBCE2, 0xE2250CBC, }, /* x=77 */
 245     { 0xE6956E65, 0x65E6956E, 0x6E65E695, 0x956E65E6, }, /* x=78 */
 246     { 0xE89C636E, 0x6EE89C63, 0x636EE89C, 0x9C636EE8, }, /* x=79 */
 247     { 0xFA877473, 0x73FA8774, 0x7473FA87, 0x877473FA, }, /* x=7A */
 248     { 0xF48E7978, 0x78F48E79, 0x7978F48E, 0x8E7978F4, }, /* x=7B */
 249     { 0xDEB15A49, 0x49DEB15A, 0x5A49DEB1, 0xB15A49DE, }, /* x=7C */
 250     { 0xD0B85742, 0x42D0B857, 0x5742D0B8, 0xB85742D0, }, /* x=7D */
 251     { 0xC2A3405F, 0x5FC2A340, 0x405FC2A3, 0xA3405FC2, }, /* x=7E */
 252     { 0xCCAA4D54, 0x54CCAA4D, 0x4D54CCAA, 0xAA4D54CC, }, /* x=7F */
 253     { 0x41ECDAF7, 0xF741ECDA, 0xDAF741EC, 0xECDAF741, }, /* x=80 */
 254     { 0x4FE5D7FC, 0xFC4FE5D7, 0xD7FC4FE5, 0xE5D7FC4F, }, /* x=81 */
 255     { 0x5DFEC0E1, 0xE15DFEC0, 0xC0E15DFE, 0xFEC0E15D, }, /* x=82 */
 256     { 0x53F7CDEA, 0xEA53F7CD, 0xCDEA53F7, 0xF7CDEA53, }, /* x=83 */
 257     { 0x79C8EEDB, 0xDB79C8EE, 0xEEDB79C8, 0xC8EEDB79, }, /* x=84 */
 258     { 0x77C1E3D0, 0xD077C1E3, 0xE3D077C1, 0xC1E3D077, }, /* x=85 */
 259     { 0x65DAF4CD, 0xCD65DAF4, 0xF4CD65DA, 0xDAF4CD65, }, /* x=86 */
 260     { 0x6BD3F9C6, 0xC66BD3F9, 0xF9C66BD3, 0xD3F9C66B, }, /* x=87 */
 261     { 0x31A4B2AF, 0xAF31A4B2, 0xB2AF31A4, 0xA4B2AF31, }, /* x=88 */
 262     { 0x3FADBFA4, 0xA43FADBF, 0xBFA43FAD, 0xADBFA43F, }, /* x=89 */
 263     { 0x2DB6A8B9, 0xB92DB6A8, 0xA8B92DB6, 0xB6A8B92D, }, /* x=8A */
 264     { 0x23BFA5B2, 0xB223BFA5, 0xA5B223BF, 0xBFA5B223, }, /* x=8B */
 265     { 0x09808683, 0x83098086, 0x86830980, 0x80868309, }, /* x=8C */
 266     { 0x07898B88, 0x8807898B, 0x8B880789, 0x898B8807, }, /* x=8D */
 267     { 0x15929C95, 0x9515929C, 0x9C951592, 0x929C9515, }, /* x=8E */
 268     { 0x1B9B919E, 0x9E1B9B91, 0x919E1B9B, 0x9B919E1B, }, /* x=8F */
 269     { 0xA17C0A47, 0x47A17C0A, 0x0A47A17C, 0x7C0A47A1, }, /* x=90 */
 270     { 0xAF75074C, 0x4CAF7507, 0x074CAF75, 0x75074CAF, }, /* x=91 */
 271     { 0xBD6E1051, 0x51BD6E10, 0x1051BD6E, 0x6E1051BD, }, /* x=92 */
 272     { 0xB3671D5A, 0x5AB3671D, 0x1D5AB367, 0x671D5AB3, }, /* x=93 */
 273     { 0x99583E6B, 0x6B99583E, 0x3E6B9958, 0x583E6B99, }, /* x=94 */
 274     { 0x97513360, 0x60975133, 0x33609751, 0x51336097, }, /* x=95 */
 275     { 0x854A247D, 0x7D854A24, 0x247D854A, 0x4A247D85, }, /* x=96 */
 276     { 0x8B432976, 0x768B4329, 0x29768B43, 0x4329768B, }, /* x=97 */
 277     { 0xD134621F, 0x1FD13462, 0x621FD134, 0x34621FD1, }, /* x=98 */
 278     { 0xDF3D6F14, 0x14DF3D6F, 0x6F14DF3D, 0x3D6F14DF, }, /* x=99 */
 279     { 0xCD267809, 0x09CD2678, 0x7809CD26, 0x267809CD, }, /* x=9A */
 280     { 0xC32F7502, 0x02C32F75, 0x7502C32F, 0x2F7502C3, }, /* x=9B */
 281     { 0xE9105633, 0x33E91056, 0x5633E910, 0x105633E9, }, /* x=9C */
 282     { 0xE7195B38, 0x38E7195B, 0x5B38E719, 0x195B38E7, }, /* x=9D */
 283     { 0xF5024C25, 0x25F5024C, 0x4C25F502, 0x024C25F5, }, /* x=9E */
 284     { 0xFB0B412E, 0x2EFB0B41, 0x412EFB0B, 0x0B412EFB, }, /* x=9F */
 285     { 0x9AD7618C, 0x8C9AD761, 0x618C9AD7, 0xD7618C9A, }, /* x=A0 */
 286     { 0x94DE6C87, 0x8794DE6C, 0x6C8794DE, 0xDE6C8794, }, /* x=A1 */
 287     { 0x86C57B9A, 0x9A86C57B, 0x7B9A86C5, 0xC57B9A86, }, /* x=A2 */
 288     { 0x88CC7691, 0x9188CC76, 0x769188CC, 0xCC769188, }, /* x=A3 */
 289     { 0xA2F355A0, 0xA0A2F355, 0x55A0A2F3, 0xF355A0A2, }, /* x=A4 */
 290     { 0xACFA58AB, 0xABACFA58, 0x58ABACFA, 0xFA58ABAC, }, /* x=A5 */
 291     { 0xBEE14FB6, 0xB6BEE14F, 0x4FB6BEE1, 0xE14FB6BE, }, /* x=A6 */
 292     { 0xB0E842BD, 0xBDB0E842, 0x42BDB0E8, 0xE842BDB0, }, /* x=A7 */
 293     { 0xEA9F09D4, 0xD4EA9F09, 0x09D4EA9F, 0x9F09D4EA, }, /* x=A8 */
 294     { 0xE49604DF, 0xDFE49604, 0x04DFE496, 0x9604DFE4, }, /* x=A9 */
 295     { 0xF68D13C2, 0xC2F68D13, 0x13C2F68D, 0x8D13C2F6, }, /* x=AA */
 296     { 0xF8841EC9, 0xC9F8841E, 0x1EC9F884, 0x841EC9F8, }, /* x=AB */
 297     { 0xD2BB3DF8, 0xF8D2BB3D, 0x3DF8D2BB, 0xBB3DF8D2, }, /* x=AC */
 298     { 0xDCB230F3, 0xF3DCB230, 0x30F3DCB2, 0xB230F3DC, }, /* x=AD */
 299     { 0xCEA927EE, 0xEECEA927, 0x27EECEA9, 0xA927EECE, }, /* x=AE */
 300     { 0xC0A02AE5, 0xE5C0A02A, 0x2AE5C0A0, 0xA02AE5C0, }, /* x=AF */
 301     { 0x7A47B13C, 0x3C7A47B1, 0xB13C7A47, 0x47B13C7A, }, /* x=B0 */
 302     { 0x744EBC37, 0x37744EBC, 0xBC37744E, 0x4EBC3774, }, /* x=B1 */
 303     { 0x6655AB2A, 0x2A6655AB, 0xAB2A6655, 0x55AB2A66, }, /* x=B2 */
 304     { 0x685CA621, 0x21685CA6, 0xA621685C, 0x5CA62168, }, /* x=B3 */
 305     { 0x42638510, 0x10426385, 0x85104263, 0x63851042, }, /* x=B4 */
 306     { 0x4C6A881B, 0x1B4C6A88, 0x881B4C6A, 0x6A881B4C, }, /* x=B5 */
 307     { 0x5E719F06, 0x065E719F, 0x9F065E71, 0x719F065E, }, /* x=B6 */
 308     { 0x5078920D, 0x0D507892, 0x920D5078, 0x78920D50, }, /* x=B7 */
 309     { 0x0A0FD964, 0x640A0FD9, 0xD9640A0F, 0x0FD9640A, }, /* x=B8 */
 310     { 0x0406D46F, 0x6F0406D4, 0xD46F0406, 0x06D46F04, }, /* x=B9 */
 311     { 0x161DC372, 0x72161DC3, 0xC372161D, 0x1DC37216, }, /* x=BA */
 312     { 0x1814CE79, 0x791814CE, 0xCE791814, 0x14CE7918, }, /* x=BB */
 313     { 0x322BED48, 0x48322BED, 0xED48322B, 0x2BED4832, }, /* x=BC */
 314     { 0x3C22E043, 0x433C22E0, 0xE0433C22, 0x22E0433C, }, /* x=BD */
 315     { 0x2E39F75E, 0x5E2E39F7, 0xF75E2E39, 0x39F75E2E, }, /* x=BE */
 316     { 0x2030FA55, 0x552030FA, 0xFA552030, 0x30FA5520, }, /* x=BF */
 317     { 0xEC9AB701, 0x01EC9AB7, 0xB701EC9A, 0x9AB701EC, }, /* x=C0 */
 318     { 0xE293BA0A, 0x0AE293BA, 0xBA0AE293, 0x93BA0AE2, }, /* x=C1 */
 319     { 0xF088AD17, 0x17F088AD, 0xAD17F088, 0x88AD17F0, }, /* x=C2 */
 320     { 0xFE81A01C, 0x1CFE81A0, 0xA01CFE81, 0x81A01CFE, }, /* x=C3 */
 321     { 0xD4BE832D, 0x2DD4BE83, 0x832DD4BE, 0xBE832DD4, }, /* x=C4 */
 322     { 0xDAB78E26, 0x26DAB78E, 0x8E26DAB7, 0xB78E26DA, }, /* x=C5 */
 323     { 0xC8AC993B, 0x3BC8AC99, 0x993BC8AC, 0xAC993BC8, }, /* x=C6 */
 324     { 0xC6A59430, 0x30C6A594, 0x9430C6A5, 0xA59430C6, }, /* x=C7 */
 325     { 0x9CD2DF59, 0x599CD2DF, 0xDF599CD2, 0xD2DF599C, }, /* x=C8 */
 326     { 0x92DBD252, 0x5292DBD2, 0xD25292DB, 0xDBD25292, }, /* x=C9 */
 327     { 0x80C0C54F, 0x4F80C0C5, 0xC54F80C0, 0xC0C54F80, }, /* x=CA */
 328     { 0x8EC9C844, 0x448EC9C8, 0xC8448EC9, 0xC9C8448E, }, /* x=CB */
 329     { 0xA4F6EB75, 0x75A4F6EB, 0xEB75A4F6, 0xF6EB75A4, }, /* x=CC */
 330     { 0xAAFFE67E, 0x7EAAFFE6, 0xE67EAAFF, 0xFFE67EAA, }, /* x=CD */
 331     { 0xB8E4F163, 0x63B8E4F1, 0xF163B8E4, 0xE4F163B8, }, /* x=CE */
 332     { 0xB6EDFC68, 0x68B6EDFC, 0xFC68B6ED, 0xEDFC68B6, }, /* x=CF */
 333     { 0x0C0A67B1, 0xB10C0A67, 0x67B10C0A, 0x0A67B10C, }, /* x=D0 */
 334     { 0x02036ABA, 0xBA02036A, 0x6ABA0203, 0x036ABA02, }, /* x=D1 */
 335     { 0x10187DA7, 0xA710187D, 0x7DA71018, 0x187DA710, }, /* x=D2 */
 336     { 0x1E1170AC, 0xAC1E1170, 0x70AC1E11, 0x1170AC1E, }, /* x=D3 */
 337     { 0x342E539D, 0x9D342E53, 0x539D342E, 0x2E539D34, }, /* x=D4 */
 338     { 0x3A275E96, 0x963A275E, 0x5E963A27, 0x275E963A, }, /* x=D5 */
 339     { 0x283C498B, 0x8B283C49, 0x498B283C, 0x3C498B28, }, /* x=D6 */
 340     { 0x26354480, 0x80263544, 0x44802635, 0x35448026, }, /* x=D7 */
 341     { 0x7C420FE9, 0xE97C420F, 0x0FE97C42, 0x420FE97C, }, /* x=D8 */
 342     { 0x724B02E2, 0xE2724B02, 0x02E2724B, 0x4B02E272, }, /* x=D9 */
 343     { 0x605015FF, 0xFF605015, 0x15FF6050, 0x5015FF60, }, /* x=DA */
 344     { 0x6E5918F4, 0xF46E5918, 0x18F46E59, 0x5918F46E, }, /* x=DB */
 345     { 0x44663BC5, 0xC544663B, 0x3BC54466, 0x663BC544, }, /* x=DC */
 346     { 0x4A6F36CE, 0xCE4A6F36, 0x36CE4A6F, 0x6F36CE4A, }, /* x=DD */
 347     { 0x587421D3, 0xD3587421, 0x21D35874, 0x7421D358, }, /* x=DE */
 348     { 0x567D2CD8, 0xD8567D2C, 0x2CD8567D, 0x7D2CD856, }, /* x=DF */
 349     { 0x37A10C7A, 0x7A37A10C, 0x0C7A37A1, 0xA10C7A37, }, /* x=E0 */
 350     { 0x39A80171, 0x7139A801, 0x017139A8, 0xA8017139, }, /* x=E1 */
 351     { 0x2BB3166C, 0x6C2BB316, 0x166C2BB3, 0xB3166C2B, }, /* x=E2 */
 352     { 0x25BA1B67, 0x6725BA1B, 0x1B6725BA, 0xBA1B6725, }, /* x=E3 */
 353     { 0x0F853856, 0x560F8538, 0x38560F85, 0x8538560F, }, /* x=E4 */
 354     { 0x018C355D, 0x5D018C35, 0x355D018C, 0x8C355D01, }, /* x=E5 */
 355     { 0x13972240, 0x40139722, 0x22401397, 0x97224013, }, /* x=E6 */
 356     { 0x1D9E2F4B, 0x4B1D9E2F, 0x2F4B1D9E, 0x9E2F4B1D, }, /* x=E7 */
 357     { 0x47E96422, 0x2247E964, 0x642247E9, 0xE9642247, }, /* x=E8 */
 358     { 0x49E06929, 0x2949E069, 0x692949E0, 0xE0692949, }, /* x=E9 */
 359     { 0x5BFB7E34, 0x345BFB7E, 0x7E345BFB, 0xFB7E345B, }, /* x=EA */
 360     { 0x55F2733F, 0x3F55F273, 0x733F55F2, 0xF2733F55, }, /* x=EB */
 361     { 0x7FCD500E, 0x0E7FCD50, 0x500E7FCD, 0xCD500E7F, }, /* x=EC */
 362     { 0x71C45D05, 0x0571C45D, 0x5D0571C4, 0xC45D0571, }, /* x=ED */
 363     { 0x63DF4A18, 0x1863DF4A, 0x4A1863DF, 0xDF4A1863, }, /* x=EE */
 364     { 0x6DD64713, 0x136DD647, 0x47136DD6, 0xD647136D, }, /* x=EF */
 365     { 0xD731DCCA, 0xCAD731DC, 0xDCCAD731, 0x31DCCAD7, }, /* x=F0 */
 366     { 0xD938D1C1, 0xC1D938D1, 0xD1C1D938, 0x38D1C1D9, }, /* x=F1 */
 367     { 0xCB23C6DC, 0xDCCB23C6, 0xC6DCCB23, 0x23C6DCCB, }, /* x=F2 */
 368     { 0xC52ACBD7, 0xD7C52ACB, 0xCBD7C52A, 0x2ACBD7C5, }, /* x=F3 */
 369     { 0xEF15E8E6, 0xE6EF15E8, 0xE8E6EF15, 0x15E8E6EF, }, /* x=F4 */
 370     { 0xE11CE5ED, 0xEDE11CE5, 0xE5EDE11C, 0x1CE5EDE1, }, /* x=F5 */
 371     { 0xF307F2F0, 0xF0F307F2, 0xF2F0F307, 0x07F2F0F3, }, /* x=F6 */
 372     { 0xFD0EFFFB, 0xFBFD0EFF, 0xFFFBFD0E, 0x0EFFFBFD, }, /* x=F7 */
 373     { 0xA779B492, 0x92A779B4, 0xB492A779, 0x79B492A7, }, /* x=F8 */
 374     { 0xA970B999, 0x99A970B9, 0xB999A970, 0x70B999A9, }, /* x=F9 */
 375     { 0xBB6BAE84, 0x84BB6BAE, 0xAE84BB6B, 0x6BAE84BB, }, /* x=FA */
 376     { 0xB562A38F, 0x8FB562A3, 0xA38FB562, 0x62A38FB5, }, /* x=FB */
 377     { 0x9F5D80BE, 0xBE9F5D80, 0x80BE9F5D, 0x5D80BE9F, }, /* x=FC */
 378     { 0x91548DB5, 0xB591548D, 0x8DB59154, 0x548DB591, }, /* x=FD */
 379     { 0x834F9AA8, 0xA8834F9A, 0x9AA8834F, 0x4F9AA883, }, /* x=FE */
 380     { 0x8D4697A3, 0xA38D4697, 0x97A38D46, 0x4697A38D, }, /* x=FF */
 381 };
 382
 383
 384
 385 /*
 386 AES_Te0[x] = S [x].[02, 01, 01, 03];
 387 AES_Te1[x] = S [x].[03, 02, 01, 01];
 388 AES_Te2[x] = S [x].[01, 03, 02, 01];
 389 AES_Te3[x] = S [x].[01, 01, 03, 02];
 390 AES_Te4[x] = S [x].[01, 01, 01, 01];
 391
 392 AES_Td0[x] = Si[x].[0e, 09, 0d, 0b];
 393 AES_Td1[x] = Si[x].[0b, 0e, 09, 0d];
 394 AES_Td2[x] = Si[x].[0d, 0b, 0e, 09];
 395 AES_Td3[x] = Si[x].[09, 0d, 0b, 0e];
 396 AES_Td4[x] = Si[x].[01, 01, 01, 01];
 397 */
 398
 399 const uint32_t AES_Te0[256] = {
 400     0xc66363a5U, 0xf87c7c84U, 0xee777799U, 0xf67b7b8dU,
 401     0xfff2f20dU, 0xd66b6bbdU, 0xde6f6fb1U, 0x91c5c554U,
 402     0x60303050U, 0x02010103U, 0xce6767a9U, 0x562b2b7dU,
 403     0xe7fefe19U, 0xb5d7d762U, 0x4dababe6U, 0xec76769aU,
 404     0x8fcaca45U, 0x1f82829dU, 0x89c9c940U, 0xfa7d7d87U,
 405     0xeffafa15U, 0xb25959ebU, 0x8e4747c9U, 0xfbf0f00bU,
 406     0x41adadecU, 0xb3d4d467U, 0x5fa2a2fdU, 0x45afafeaU,
 407     0x239c9cbfU, 0x53a4a4f7U, 0xe4727296U, 0x9bc0c05bU,
 408     0x75b7b7c2U, 0xe1fdfd1cU, 0x3d9393aeU, 0x4c26266aU,
 409     0x6c36365aU, 0x7e3f3f41U, 0xf5f7f702U, 0x83cccc4fU,
 410     0x6834345cU, 0x51a5a5f4U, 0xd1e5e534U, 0xf9f1f108U,
 411     0xe2717193U, 0xabd8d873U, 0x62313153U, 0x2a15153fU,
 412     0x0804040cU, 0x95c7c752U, 0x46232365U, 0x9dc3c35eU,
 413     0x30181828U, 0x379696a1U, 0x0a05050fU, 0x2f9a9ab5U,
 414     0x0e070709U, 0x24121236U, 0x1b80809bU, 0xdfe2e23dU,
 415     0xcdebeb26U, 0x4e272769U, 0x7fb2b2cdU, 0xea75759fU,
 416     0x1209091bU, 0x1d83839eU, 0x582c2c74U, 0x341a1a2eU,
 417     0x361b1b2dU, 0xdc6e6eb2U, 0xb45a5aeeU, 0x5ba0a0fbU,
 418     0xa45252f6U, 0x763b3b4dU, 0xb7d6d661U, 0x7db3b3ceU,
 419     0x5229297bU, 0xdde3e33eU, 0x5e2f2f71U, 0x13848497U,
 420     0xa65353f5U, 0xb9d1d168U, 0x00000000U, 0xc1eded2cU,
 421     0x40202060U, 0xe3fcfc1fU, 0x79b1b1c8U, 0xb65b5bedU,
 422     0xd46a6abeU, 0x8dcbcb46U, 0x67bebed9U, 0x7239394bU,
 423     0x944a4adeU, 0x984c4cd4U, 0xb05858e8U, 0x85cfcf4aU,
 424     0xbbd0d06bU, 0xc5efef2aU, 0x4faaaae5U, 0xedfbfb16U,
 425     0x864343c5U, 0x9a4d4dd7U, 0x66333355U, 0x11858594U,
 426     0x8a4545cfU, 0xe9f9f910U, 0x04020206U, 0xfe7f7f81U,
 427     0xa05050f0U, 0x783c3c44U, 0x259f9fbaU, 0x4ba8a8e3U,
 428     0xa25151f3U, 0x5da3a3feU, 0x804040c0U, 0x058f8f8aU,
 429     0x3f9292adU, 0x219d9dbcU, 0x70383848U, 0xf1f5f504U,
 430     0x63bcbcdfU, 0x77b6b6c1U, 0xafdada75U, 0x42212163U,
 431     0x20101030U, 0xe5ffff1aU, 0xfdf3f30eU, 0xbfd2d26dU,
 432     0x81cdcd4cU, 0x180c0c14U, 0x26131335U, 0xc3ecec2fU,
 433     0xbe5f5fe1U, 0x359797a2U, 0x884444ccU, 0x2e171739U,
 434     0x93c4c457U, 0x55a7a7f2U, 0xfc7e7e82U, 0x7a3d3d47U,
 435     0xc86464acU, 0xba5d5de7U, 0x3219192bU, 0xe6737395U,
 436     0xc06060a0U, 0x19818198U, 0x9e4f4fd1U, 0xa3dcdc7fU,
 437     0x44222266U, 0x542a2a7eU, 0x3b9090abU, 0x0b888883U,
 438     0x8c4646caU, 0xc7eeee29U, 0x6bb8b8d3U, 0x2814143cU,
 439     0xa7dede79U, 0xbc5e5ee2U, 0x160b0b1dU, 0xaddbdb76U,
 440     0xdbe0e03bU, 0x64323256U, 0x743a3a4eU, 0x140a0a1eU,
 441     0x924949dbU, 0x0c06060aU, 0x4824246cU, 0xb85c5ce4U,
 442     0x9fc2c25dU, 0xbdd3d36eU, 0x43acacefU, 0xc46262a6U,
 443     0x399191a8U, 0x319595a4U, 0xd3e4e437U, 0xf279798bU,
 444     0xd5e7e732U, 0x8bc8c843U, 0x6e373759U, 0xda6d6db7U,
 445     0x018d8d8cU, 0xb1d5d564U, 0x9c4e4ed2U, 0x49a9a9e0U,
 446     0xd86c6cb4U, 0xac5656faU, 0xf3f4f407U, 0xcfeaea25U,
 447     0xca6565afU, 0xf47a7a8eU, 0x47aeaee9U, 0x10080818U,
 448     0x6fbabad5U, 0xf0787888U, 0x4a25256fU, 0x5c2e2e72U,
 449     0x381c1c24U, 0x57a6a6f1U, 0x73b4b4c7U, 0x97c6c651U,
 450     0xcbe8e823U, 0xa1dddd7cU, 0xe874749cU, 0x3e1f1f21U,
 451     0x964b4bddU, 0x61bdbddcU, 0x0d8b8b86U, 0x0f8a8a85U,
 452     0xe0707090U, 0x7c3e3e42U, 0x71b5b5c4U, 0xcc6666aaU,
 453     0x904848d8U, 0x06030305U, 0xf7f6f601U, 0x1c0e0e12U,
 454     0xc26161a3U, 0x6a35355fU, 0xae5757f9U, 0x69b9b9d0U,
 455     0x17868691U, 0x99c1c158U, 0x3a1d1d27U, 0x279e9eb9U,
 456     0xd9e1e138U, 0xebf8f813U, 0x2b9898b3U, 0x22111133U,
 457     0xd26969bbU, 0xa9d9d970U, 0x078e8e89U, 0x339494a7U,
 458     0x2d9b9bb6U, 0x3c1e1e22U, 0x15878792U, 0xc9e9e920U,
 459     0x87cece49U, 0xaa5555ffU, 0x50282878U, 0xa5dfdf7aU,
 460     0x038c8c8fU, 0x59a1a1f8U, 0x09898980U, 0x1a0d0d17U,
 461     0x65bfbfdaU, 0xd7e6e631U, 0x844242c6U, 0xd06868b8U,
 462     0x824141c3U, 0x299999b0U, 0x5a2d2d77U, 0x1e0f0f11U,
 463     0x7bb0b0cbU, 0xa85454fcU, 0x6dbbbbd6U, 0x2c16163aU,
 464 };
 465 const uint32_t AES_Te1[256] = {
 466     0xa5c66363U, 0x84f87c7cU, 0x99ee7777U, 0x8df67b7bU,
 467     0x0dfff2f2U, 0xbdd66b6bU, 0xb1de6f6fU, 0x5491c5c5U,
 468     0x50603030U, 0x03020101U, 0xa9ce6767U, 0x7d562b2bU,
 469     0x19e7fefeU, 0x62b5d7d7U, 0xe64dababU, 0x9aec7676U,
 470     0x458fcacaU, 0x9d1f8282U, 0x4089c9c9U, 0x87fa7d7dU,
 471     0x15effafaU, 0xebb25959U, 0xc98e4747U, 0x0bfbf0f0U,
 472     0xec41adadU, 0x67b3d4d4U, 0xfd5fa2a2U, 0xea45afafU,
 473     0xbf239c9cU, 0xf753a4a4U, 0x96e47272U, 0x5b9bc0c0U,
 474     0xc275b7b7U, 0x1ce1fdfdU, 0xae3d9393U, 0x6a4c2626U,
 475     0x5a6c3636U, 0x417e3f3fU, 0x02f5f7f7U, 0x4f83ccccU,
 476     0x5c683434U, 0xf451a5a5U, 0x34d1e5e5U, 0x08f9f1f1U,
 477     0x93e27171U, 0x73abd8d8U, 0x53623131U, 0x3f2a1515U,
 478     0x0c080404U, 0x5295c7c7U, 0x65462323U, 0x5e9dc3c3U,
 479     0x28301818U, 0xa1379696U, 0x0f0a0505U, 0xb52f9a9aU,
 480     0x090e0707U, 0x36241212U, 0x9b1b8080U, 0x3ddfe2e2U,
 481     0x26cdebebU, 0x694e2727U, 0xcd7fb2b2U, 0x9fea7575U,
 482     0x1b120909U, 0x9e1d8383U, 0x74582c2cU, 0x2e341a1aU,
 483     0x2d361b1bU, 0xb2dc6e6eU, 0xeeb45a5aU, 0xfb5ba0a0U,
 484     0xf6a45252U, 0x4d763b3bU, 0x61b7d6d6U, 0xce7db3b3U,
 485     0x7b522929U, 0x3edde3e3U, 0x715e2f2fU, 0x97138484U,
 486     0xf5a65353U, 0x68b9d1d1U, 0x00000000U, 0x2cc1ededU,
 487     0x60402020U, 0x1fe3fcfcU, 0xc879b1b1U, 0xedb65b5bU,
 488     0xbed46a6aU, 0x468dcbcbU, 0xd967bebeU, 0x4b723939U,
 489     0xde944a4aU, 0xd4984c4cU, 0xe8b05858U, 0x4a85cfcfU,
 490     0x6bbbd0d0U, 0x2ac5efefU, 0xe54faaaaU, 0x16edfbfbU,
 491     0xc5864343U, 0xd79a4d4dU, 0x55663333U, 0x94118585U,
 492     0xcf8a4545U, 0x10e9f9f9U, 0x06040202U, 0x81fe7f7fU,
 493     0xf0a05050U, 0x44783c3cU, 0xba259f9fU, 0xe34ba8a8U,
 494     0xf3a25151U, 0xfe5da3a3U, 0xc0804040U, 0x8a058f8fU,
 495     0xad3f9292U, 0xbc219d9dU, 0x48703838U, 0x04f1f5f5U,
 496     0xdf63bcbcU, 0xc177b6b6U, 0x75afdadaU, 0x63422121U,
 497     0x30201010U, 0x1ae5ffffU, 0x0efdf3f3U, 0x6dbfd2d2U,
 498     0x4c81cdcdU, 0x14180c0cU, 0x35261313U, 0x2fc3ececU,
 499     0xe1be5f5fU, 0xa2359797U, 0xcc884444U, 0x392e1717U,
 500     0x5793c4c4U, 0xf255a7a7U, 0x82fc7e7eU, 0x477a3d3dU,
 501     0xacc86464U, 0xe7ba5d5dU, 0x2b321919U, 0x95e67373U,
 502     0xa0c06060U, 0x98198181U, 0xd19e4f4fU, 0x7fa3dcdcU,
 503     0x66442222U, 0x7e542a2aU, 0xab3b9090U, 0x830b8888U,
 504     0xca8c4646U, 0x29c7eeeeU, 0xd36bb8b8U, 0x3c281414U,
 505     0x79a7dedeU, 0xe2bc5e5eU, 0x1d160b0bU, 0x76addbdbU,
 506     0x3bdbe0e0U, 0x56643232U, 0x4e743a3aU, 0x1e140a0aU,
 507     0xdb924949U, 0x0a0c0606U, 0x6c482424U, 0xe4b85c5cU,
 508     0x5d9fc2c2U, 0x6ebdd3d3U, 0xef43acacU, 0xa6c46262U,
 509     0xa8399191U, 0xa4319595U, 0x37d3e4e4U, 0x8bf27979U,
 510     0x32d5e7e7U, 0x438bc8c8U, 0x596e3737U, 0xb7da6d6dU,
 511     0x8c018d8dU, 0x64b1d5d5U, 0xd29c4e4eU, 0xe049a9a9U,
 512     0xb4d86c6cU, 0xfaac5656U, 0x07f3f4f4U, 0x25cfeaeaU,
 513     0xafca6565U, 0x8ef47a7aU, 0xe947aeaeU, 0x18100808U,
 514     0xd56fbabaU, 0x88f07878U, 0x6f4a2525U, 0x725c2e2eU,
 515     0x24381c1cU, 0xf157a6a6U, 0xc773b4b4U, 0x5197c6c6U,
 516     0x23cbe8e8U, 0x7ca1ddddU, 0x9ce87474U, 0x213e1f1fU,
 517     0xdd964b4bU, 0xdc61bdbdU, 0x860d8b8bU, 0x850f8a8aU,
 518     0x90e07070U, 0x427c3e3eU, 0xc471b5b5U, 0xaacc6666U,
 519     0xd8904848U, 0x05060303U, 0x01f7f6f6U, 0x121c0e0eU,
 520     0xa3c26161U, 0x5f6a3535U, 0xf9ae5757U, 0xd069b9b9U,
 521     0x91178686U, 0x5899c1c1U, 0x273a1d1dU, 0xb9279e9eU,
 522     0x38d9e1e1U, 0x13ebf8f8U, 0xb32b9898U, 0x33221111U,
 523     0xbbd26969U, 0x70a9d9d9U, 0x89078e8eU, 0xa7339494U,
 524     0xb62d9b9bU, 0x223c1e1eU, 0x92158787U, 0x20c9e9e9U,
 525     0x4987ceceU, 0xffaa5555U, 0x78502828U, 0x7aa5dfdfU,
 526     0x8f038c8cU, 0xf859a1a1U, 0x80098989U, 0x171a0d0dU,
 527     0xda65bfbfU, 0x31d7e6e6U, 0xc6844242U, 0xb8d06868U,
 528     0xc3824141U, 0xb0299999U, 0x775a2d2dU, 0x111e0f0fU,
 529     0xcb7bb0b0U, 0xfca85454U, 0xd66dbbbbU, 0x3a2c1616U,
 530 };
 531 const uint32_t AES_Te2[256] = {
 532     0x63a5c663U, 0x7c84f87cU, 0x7799ee77U, 0x7b8df67bU,
 533     0xf20dfff2U, 0x6bbdd66bU, 0x6fb1de6fU, 0xc55491c5U,
 534     0x30506030U, 0x01030201U, 0x67a9ce67U, 0x2b7d562bU,
 535     0xfe19e7feU, 0xd762b5d7U, 0xabe64dabU, 0x769aec76U,
 536     0xca458fcaU, 0x829d1f82U, 0xc94089c9U, 0x7d87fa7dU,
 537     0xfa15effaU, 0x59ebb259U, 0x47c98e47U, 0xf00bfbf0U,
 538     0xadec41adU, 0xd467b3d4U, 0xa2fd5fa2U, 0xafea45afU,
 539     0x9cbf239cU, 0xa4f753a4U, 0x7296e472U, 0xc05b9bc0U,
 540     0xb7c275b7U, 0xfd1ce1fdU, 0x93ae3d93U, 0x266a4c26U,
 541     0x365a6c36U, 0x3f417e3fU, 0xf702f5f7U, 0xcc4f83ccU,
 542     0x345c6834U, 0xa5f451a5U, 0xe534d1e5U, 0xf108f9f1U,
 543     0x7193e271U, 0xd873abd8U, 0x31536231U, 0x153f2a15U,
 544     0x040c0804U, 0xc75295c7U, 0x23654623U, 0xc35e9dc3U,
 545     0x18283018U, 0x96a13796U, 0x050f0a05U, 0x9ab52f9aU,
 546     0x07090e07U, 0x12362412U, 0x809b1b80U, 0xe23ddfe2U,
 547     0xeb26cdebU, 0x27694e27U, 0xb2cd7fb2U, 0x759fea75U,
 548     0x091b1209U, 0x839e1d83U, 0x2c74582cU, 0x1a2e341aU,
 549     0x1b2d361bU, 0x6eb2dc6eU, 0x5aeeb45aU, 0xa0fb5ba0U,
 550     0x52f6a452U, 0x3b4d763bU, 0xd661b7d6U, 0xb3ce7db3U,
 551     0x297b5229U, 0xe33edde3U, 0x2f715e2fU, 0x84971384U,
 552     0x53f5a653U, 0xd168b9d1U, 0x00000000U, 0xed2cc1edU,
 553     0x20604020U, 0xfc1fe3fcU, 0xb1c879b1U, 0x5bedb65bU,
 554     0x6abed46aU, 0xcb468dcbU, 0xbed967beU, 0x394b7239U,
 555     0x4ade944aU, 0x4cd4984cU, 0x58e8b058U, 0xcf4a85cfU,
 556     0xd06bbbd0U, 0xef2ac5efU, 0xaae54faaU, 0xfb16edfbU,
 557     0x43c58643U, 0x4dd79a4dU, 0x33556633U, 0x85941185U,
 558     0x45cf8a45U, 0xf910e9f9U, 0x02060402U, 0x7f81fe7fU,
 559     0x50f0a050U, 0x3c44783cU, 0x9fba259fU, 0xa8e34ba8U,
 560     0x51f3a251U, 0xa3fe5da3U, 0x40c08040U, 0x8f8a058fU,
 561     0x92ad3f92U, 0x9dbc219dU, 0x38487038U, 0xf504f1f5U,
 562     0xbcdf63bcU, 0xb6c177b6U, 0xda75afdaU, 0x21634221U,
 563     0x10302010U, 0xff1ae5ffU, 0xf30efdf3U, 0xd26dbfd2U,
 564     0xcd4c81cdU, 0x0c14180cU, 0x13352613U, 0xec2fc3ecU,
 565     0x5fe1be5fU, 0x97a23597U, 0x44cc8844U, 0x17392e17U,
 566     0xc45793c4U, 0xa7f255a7U, 0x7e82fc7eU, 0x3d477a3dU,
 567     0x64acc864U, 0x5de7ba5dU, 0x192b3219U, 0x7395e673U,
 568     0x60a0c060U, 0x81981981U, 0x4fd19e4fU, 0xdc7fa3dcU,
 569     0x22664422U, 0x2a7e542aU, 0x90ab3b90U, 0x88830b88U,
 570     0x46ca8c46U, 0xee29c7eeU, 0xb8d36bb8U, 0x143c2814U,
 571     0xde79a7deU, 0x5ee2bc5eU, 0x0b1d160bU, 0xdb76addbU,
 572     0xe03bdbe0U, 0x32566432U, 0x3a4e743aU, 0x0a1e140aU,
 573     0x49db9249U, 0x060a0c06U, 0x246c4824U, 0x5ce4b85cU,
 574     0xc25d9fc2U, 0xd36ebdd3U, 0xacef43acU, 0x62a6c462U,
 575     0x91a83991U, 0x95a43195U, 0xe437d3e4U, 0x798bf279U,
 576     0xe732d5e7U, 0xc8438bc8U, 0x37596e37U, 0x6db7da6dU,
 577     0x8d8c018dU, 0xd564b1d5U, 0x4ed29c4eU, 0xa9e049a9U,
 578     0x6cb4d86cU, 0x56faac56U, 0xf407f3f4U, 0xea25cfeaU,
 579     0x65afca65U, 0x7a8ef47aU, 0xaee947aeU, 0x08181008U,
 580     0xbad56fbaU, 0x7888f078U, 0x256f4a25U, 0x2e725c2eU,
 581     0x1c24381cU, 0xa6f157a6U, 0xb4c773b4U, 0xc65197c6U,
 582     0xe823cbe8U, 0xdd7ca1ddU, 0x749ce874U, 0x1f213e1fU,
 583     0x4bdd964bU, 0xbddc61bdU, 0x8b860d8bU, 0x8a850f8aU,
 584     0x7090e070U, 0x3e427c3eU, 0xb5c471b5U, 0x66aacc66U,
 585     0x48d89048U, 0x03050603U, 0xf601f7f6U, 0x0e121c0eU,
 586     0x61a3c261U, 0x355f6a35U, 0x57f9ae57U, 0xb9d069b9U,
 587     0x86911786U, 0xc15899c1U, 0x1d273a1dU, 0x9eb9279eU,
 588     0xe138d9e1U, 0xf813ebf8U, 0x98b32b98U, 0x11332211U,
 589     0x69bbd269U, 0xd970a9d9U, 0x8e89078eU, 0x94a73394U,
 590     0x9bb62d9bU, 0x1e223c1eU, 0x87921587U, 0xe920c9e9U,
 591     0xce4987ceU, 0x55ffaa55U, 0x28785028U, 0xdf7aa5dfU,
 592     0x8c8f038cU, 0xa1f859a1U, 0x89800989U, 0x0d171a0dU,
 593     0xbfda65bfU, 0xe631d7e6U, 0x42c68442U, 0x68b8d068U,
 594     0x41c38241U, 0x99b02999U, 0x2d775a2dU, 0x0f111e0fU,
 595     0xb0cb7bb0U, 0x54fca854U, 0xbbd66dbbU, 0x163a2c16U,
 596 };
 597 const uint32_t AES_Te3[256] = {
 598
 599     0x6363a5c6U, 0x7c7c84f8U, 0x777799eeU, 0x7b7b8df6U,
 600     0xf2f20dffU, 0x6b6bbdd6U, 0x6f6fb1deU, 0xc5c55491U,
 601     0x30305060U, 0x01010302U, 0x6767a9ceU, 0x2b2b7d56U,
 602     0xfefe19e7U, 0xd7d762b5U, 0xababe64dU, 0x76769aecU,
 603     0xcaca458fU, 0x82829d1fU, 0xc9c94089U, 0x7d7d87faU,
 604     0xfafa15efU, 0x5959ebb2U, 0x4747c98eU, 0xf0f00bfbU,
 605     0xadadec41U, 0xd4d467b3U, 0xa2a2fd5fU, 0xafafea45U,
 606     0x9c9cbf23U, 0xa4a4f753U, 0x727296e4U, 0xc0c05b9bU,
 607     0xb7b7c275U, 0xfdfd1ce1U, 0x9393ae3dU, 0x26266a4cU,
 608     0x36365a6cU, 0x3f3f417eU, 0xf7f702f5U, 0xcccc4f83U,
 609     0x34345c68U, 0xa5a5f451U, 0xe5e534d1U, 0xf1f108f9U,
 610     0x717193e2U, 0xd8d873abU, 0x31315362U, 0x15153f2aU,
 611     0x04040c08U, 0xc7c75295U, 0x23236546U, 0xc3c35e9dU,
 612     0x18182830U, 0x9696a137U, 0x05050f0aU, 0x9a9ab52fU,
 613     0x0707090eU, 0x12123624U, 0x80809b1bU, 0xe2e23ddfU,
 614     0xebeb26cdU, 0x2727694eU, 0xb2b2cd7fU, 0x75759feaU,
 615     0x09091b12U, 0x83839e1dU, 0x2c2c7458U, 0x1a1a2e34U,
 616     0x1b1b2d36U, 0x6e6eb2dcU, 0x5a5aeeb4U, 0xa0a0fb5bU,
 617     0x5252f6a4U, 0x3b3b4d76U, 0xd6d661b7U, 0xb3b3ce7dU,
 618     0x29297b52U, 0xe3e33eddU, 0x2f2f715eU, 0x84849713U,
 619     0x5353f5a6U, 0xd1d168b9U, 0x00000000U, 0xeded2cc1U,
 620     0x20206040U, 0xfcfc1fe3U, 0xb1b1c879U, 0x5b5bedb6U,
 621     0x6a6abed4U, 0xcbcb468dU, 0xbebed967U, 0x39394b72U,
 622     0x4a4ade94U, 0x4c4cd498U, 0x5858e8b0U, 0xcfcf4a85U,
 623     0xd0d06bbbU, 0xefef2ac5U, 0xaaaae54fU, 0xfbfb16edU,
 624     0x4343c586U, 0x4d4dd79aU, 0x33335566U, 0x85859411U,
 625     0x4545cf8aU, 0xf9f910e9U, 0x02020604U, 0x7f7f81feU,
 626     0x5050f0a0U, 0x3c3c4478U, 0x9f9fba25U, 0xa8a8e34bU,
 627     0x5151f3a2U, 0xa3a3fe5dU, 0x4040c080U, 0x8f8f8a05U,
 628     0x9292ad3fU, 0x9d9dbc21U, 0x38384870U, 0xf5f504f1U,
 629     0xbcbcdf63U, 0xb6b6c177U, 0xdada75afU, 0x21216342U,
 630     0x10103020U, 0xffff1ae5U, 0xf3f30efdU, 0xd2d26dbfU,
 631     0xcdcd4c81U, 0x0c0c1418U, 0x13133526U, 0xecec2fc3U,
 632     0x5f5fe1beU, 0x9797a235U, 0x4444cc88U, 0x1717392eU,
 633     0xc4c45793U, 0xa7a7f255U, 0x7e7e82fcU, 0x3d3d477aU,
 634     0x6464acc8U, 0x5d5de7baU, 0x19192b32U, 0x737395e6U,
 635     0x6060a0c0U, 0x81819819U, 0x4f4fd19eU, 0xdcdc7fa3U,
 636     0x22226644U, 0x2a2a7e54U, 0x9090ab3bU, 0x8888830bU,
 637     0x4646ca8cU, 0xeeee29c7U, 0xb8b8d36bU, 0x14143c28U,
 638     0xdede79a7U, 0x5e5ee2bcU, 0x0b0b1d16U, 0xdbdb76adU,
 639     0xe0e03bdbU, 0x32325664U, 0x3a3a4e74U, 0x0a0a1e14U,
 640     0x4949db92U, 0x06060a0cU, 0x24246c48U, 0x5c5ce4b8U,
 641     0xc2c25d9fU, 0xd3d36ebdU, 0xacacef43U, 0x6262a6c4U,
 642     0x9191a839U, 0x9595a431U, 0xe4e437d3U, 0x79798bf2U,
 643     0xe7e732d5U, 0xc8c8438bU, 0x3737596eU, 0x6d6db7daU,
 644     0x8d8d8c01U, 0xd5d564b1U, 0x4e4ed29cU, 0xa9a9e049U,
 645     0x6c6cb4d8U, 0x5656faacU, 0xf4f407f3U, 0xeaea25cfU,
 646     0x6565afcaU, 0x7a7a8ef4U, 0xaeaee947U, 0x08081810U,
 647     0xbabad56fU, 0x787888f0U, 0x25256f4aU, 0x2e2e725cU,
 648     0x1c1c2438U, 0xa6a6f157U, 0xb4b4c773U, 0xc6c65197U,
 649     0xe8e823cbU, 0xdddd7ca1U, 0x74749ce8U, 0x1f1f213eU,
 650     0x4b4bdd96U, 0xbdbddc61U, 0x8b8b860dU, 0x8a8a850fU,
 651     0x707090e0U, 0x3e3e427cU, 0xb5b5c471U, 0x6666aaccU,
 652     0x4848d890U, 0x03030506U, 0xf6f601f7U, 0x0e0e121cU,
 653     0x6161a3c2U, 0x35355f6aU, 0x5757f9aeU, 0xb9b9d069U,
 654     0x86869117U, 0xc1c15899U, 0x1d1d273aU, 0x9e9eb927U,
 655     0xe1e138d9U, 0xf8f813ebU, 0x9898b32bU, 0x11113322U,
 656     0x6969bbd2U, 0xd9d970a9U, 0x8e8e8907U, 0x9494a733U,
 657     0x9b9bb62dU, 0x1e1e223cU, 0x87879215U, 0xe9e920c9U,
 658     0xcece4987U, 0x5555ffaaU, 0x28287850U, 0xdfdf7aa5U,
 659     0x8c8c8f03U, 0xa1a1f859U, 0x89898009U, 0x0d0d171aU,
 660     0xbfbfda65U, 0xe6e631d7U, 0x4242c684U, 0x6868b8d0U,
 661     0x4141c382U, 0x9999b029U, 0x2d2d775aU, 0x0f0f111eU,
 662     0xb0b0cb7bU, 0x5454fca8U, 0xbbbbd66dU, 0x16163a2cU,
 663 };
 664 const uint32_t AES_Te4[256] = {
 665     0x63636363U, 0x7c7c7c7cU, 0x77777777U, 0x7b7b7b7bU,
 666     0xf2f2f2f2U, 0x6b6b6b6bU, 0x6f6f6f6fU, 0xc5c5c5c5U,
 667     0x30303030U, 0x01010101U, 0x67676767U, 0x2b2b2b2bU,
 668     0xfefefefeU, 0xd7d7d7d7U, 0xababababU, 0x76767676U,
 669     0xcacacacaU, 0x82828282U, 0xc9c9c9c9U, 0x7d7d7d7dU,
 670     0xfafafafaU, 0x59595959U, 0x47474747U, 0xf0f0f0f0U,
 671     0xadadadadU, 0xd4d4d4d4U, 0xa2a2a2a2U, 0xafafafafU,
 672     0x9c9c9c9cU, 0xa4a4a4a4U, 0x72727272U, 0xc0c0c0c0U,
 673     0xb7b7b7b7U, 0xfdfdfdfdU, 0x93939393U, 0x26262626U,
 674     0x36363636U, 0x3f3f3f3fU, 0xf7f7f7f7U, 0xccccccccU,
 675     0x34343434U, 0xa5a5a5a5U, 0xe5e5e5e5U, 0xf1f1f1f1U,
 676     0x71717171U, 0xd8d8d8d8U, 0x31313131U, 0x15151515U,
 677     0x04040404U, 0xc7c7c7c7U, 0x23232323U, 0xc3c3c3c3U,
 678     0x18181818U, 0x96969696U, 0x05050505U, 0x9a9a9a9aU,
 679     0x07070707U, 0x12121212U, 0x80808080U, 0xe2e2e2e2U,
 680     0xebebebebU, 0x27272727U, 0xb2b2b2b2U, 0x75757575U,
 681     0x09090909U, 0x83838383U, 0x2c2c2c2cU, 0x1a1a1a1aU,
 682     0x1b1b1b1bU, 0x6e6e6e6eU, 0x5a5a5a5aU, 0xa0a0a0a0U,
 683     0x52525252U, 0x3b3b3b3bU, 0xd6d6d6d6U, 0xb3b3b3b3U,
 684     0x29292929U, 0xe3e3e3e3U, 0x2f2f2f2fU, 0x84848484U,
 685     0x53535353U, 0xd1d1d1d1U, 0x00000000U, 0xededededU,
 686     0x20202020U, 0xfcfcfcfcU, 0xb1b1b1b1U, 0x5b5b5b5bU,
 687     0x6a6a6a6aU, 0xcbcbcbcbU, 0xbebebebeU, 0x39393939U,
 688     0x4a4a4a4aU, 0x4c4c4c4cU, 0x58585858U, 0xcfcfcfcfU,
 689     0xd0d0d0d0U, 0xefefefefU, 0xaaaaaaaaU, 0xfbfbfbfbU,
 690     0x43434343U, 0x4d4d4d4dU, 0x33333333U, 0x85858585U,
 691     0x45454545U, 0xf9f9f9f9U, 0x02020202U, 0x7f7f7f7fU,
 692     0x50505050U, 0x3c3c3c3cU, 0x9f9f9f9fU, 0xa8a8a8a8U,
 693     0x51515151U, 0xa3a3a3a3U, 0x40404040U, 0x8f8f8f8fU,
 694     0x92929292U, 0x9d9d9d9dU, 0x38383838U, 0xf5f5f5f5U,
 695     0xbcbcbcbcU, 0xb6b6b6b6U, 0xdadadadaU, 0x21212121U,
 696     0x10101010U, 0xffffffffU, 0xf3f3f3f3U, 0xd2d2d2d2U,
 697     0xcdcdcdcdU, 0x0c0c0c0cU, 0x13131313U, 0xececececU,
 698     0x5f5f5f5fU, 0x97979797U, 0x44444444U, 0x17171717U,
 699     0xc4c4c4c4U, 0xa7a7a7a7U, 0x7e7e7e7eU, 0x3d3d3d3dU,
 700     0x64646464U, 0x5d5d5d5dU, 0x19191919U, 0x73737373U,
 701     0x60606060U, 0x81818181U, 0x4f4f4f4fU, 0xdcdcdcdcU,
 702     0x22222222U, 0x2a2a2a2aU, 0x90909090U, 0x88888888U,
 703     0x46464646U, 0xeeeeeeeeU, 0xb8b8b8b8U, 0x14141414U,
 704     0xdedededeU, 0x5e5e5e5eU, 0x0b0b0b0bU, 0xdbdbdbdbU,
 705     0xe0e0e0e0U, 0x32323232U, 0x3a3a3a3aU, 0x0a0a0a0aU,
 706     0x49494949U, 0x06060606U, 0x24242424U, 0x5c5c5c5cU,
 707     0xc2c2c2c2U, 0xd3d3d3d3U, 0xacacacacU, 0x62626262U,
 708     0x91919191U, 0x95959595U, 0xe4e4e4e4U, 0x79797979U,
 709     0xe7e7e7e7U, 0xc8c8c8c8U, 0x37373737U, 0x6d6d6d6dU,
 710     0x8d8d8d8dU, 0xd5d5d5d5U, 0x4e4e4e4eU, 0xa9a9a9a9U,
 711     0x6c6c6c6cU, 0x56565656U, 0xf4f4f4f4U, 0xeaeaeaeaU,
 712     0x65656565U, 0x7a7a7a7aU, 0xaeaeaeaeU, 0x08080808U,
 713     0xbabababaU, 0x78787878U, 0x25252525U, 0x2e2e2e2eU,
 714     0x1c1c1c1cU, 0xa6a6a6a6U, 0xb4b4b4b4U, 0xc6c6c6c6U,
 715     0xe8e8e8e8U, 0xddddddddU, 0x74747474U, 0x1f1f1f1fU,
 716     0x4b4b4b4bU, 0xbdbdbdbdU, 0x8b8b8b8bU, 0x8a8a8a8aU,
 717     0x70707070U, 0x3e3e3e3eU, 0xb5b5b5b5U, 0x66666666U,
 718     0x48484848U, 0x03030303U, 0xf6f6f6f6U, 0x0e0e0e0eU,
 719     0x61616161U, 0x35353535U, 0x57575757U, 0xb9b9b9b9U,
 720     0x86868686U, 0xc1c1c1c1U, 0x1d1d1d1dU, 0x9e9e9e9eU,
 721     0xe1e1e1e1U, 0xf8f8f8f8U, 0x98989898U, 0x11111111U,
 722     0x69696969U, 0xd9d9d9d9U, 0x8e8e8e8eU, 0x94949494U,
 723     0x9b9b9b9bU, 0x1e1e1e1eU, 0x87878787U, 0xe9e9e9e9U,
 724     0xcecececeU, 0x55555555U, 0x28282828U, 0xdfdfdfdfU,
 725     0x8c8c8c8cU, 0xa1a1a1a1U, 0x89898989U, 0x0d0d0d0dU,
 726     0xbfbfbfbfU, 0xe6e6e6e6U, 0x42424242U, 0x68686868U,
 727     0x41414141U, 0x99999999U, 0x2d2d2d2dU, 0x0f0f0f0fU,
 728     0xb0b0b0b0U, 0x54545454U, 0xbbbbbbbbU, 0x16161616U,
 729 };
 730 const uint32_t AES_Td0[256] = {
 731     0x51f4a750U, 0x7e416553U, 0x1a17a4c3U, 0x3a275e96U,
 732     0x3bab6bcbU, 0x1f9d45f1U, 0xacfa58abU, 0x4be30393U,
 733     0x2030fa55U, 0xad766df6U, 0x88cc7691U, 0xf5024c25U,
 734     0x4fe5d7fcU, 0xc52acbd7U, 0x26354480U, 0xb562a38fU,
 735     0xdeb15a49U, 0x25ba1b67U, 0x45ea0e98U, 0x5dfec0e1U,
 736     0xc32f7502U, 0x814cf012U, 0x8d4697a3U, 0x6bd3f9c6U,
 737     0x038f5fe7U, 0x15929c95U, 0xbf6d7aebU, 0x955259daU,
 738     0xd4be832dU, 0x587421d3U, 0x49e06929U, 0x8ec9c844U,
 739     0x75c2896aU, 0xf48e7978U, 0x99583e6bU, 0x27b971ddU,
 740     0xbee14fb6U, 0xf088ad17U, 0xc920ac66U, 0x7dce3ab4U,
 741     0x63df4a18U, 0xe51a3182U, 0x97513360U, 0x62537f45U,
 742     0xb16477e0U, 0xbb6bae84U, 0xfe81a01cU, 0xf9082b94U,
 743     0x70486858U, 0x8f45fd19U, 0x94de6c87U, 0x527bf8b7U,
 744     0xab73d323U, 0x724b02e2U, 0xe31f8f57U, 0x6655ab2aU,
 745     0xb2eb2807U, 0x2fb5c203U, 0x86c57b9aU, 0xd33708a5U,
 746     0x302887f2U, 0x23bfa5b2U, 0x02036abaU, 0xed16825cU,
 747     0x8acf1c2bU, 0xa779b492U, 0xf307f2f0U, 0x4e69e2a1U,
 748     0x65daf4cdU, 0x0605bed5U, 0xd134621fU, 0xc4a6fe8aU,
 749     0x342e539dU, 0xa2f355a0U, 0x058ae132U, 0xa4f6eb75U,
 750     0x0b83ec39U, 0x4060efaaU, 0x5e719f06U, 0xbd6e1051U,
 751     0x3e218af9U, 0x96dd063dU, 0xdd3e05aeU, 0x4de6bd46U,
 752     0x91548db5U, 0x71c45d05U, 0x0406d46fU, 0x605015ffU,
 753     0x1998fb24U, 0xd6bde997U, 0x894043ccU, 0x67d99e77U,
 754     0xb0e842bdU, 0x07898b88U, 0xe7195b38U, 0x79c8eedbU,
 755     0xa17c0a47U, 0x7c420fe9U, 0xf8841ec9U, 0x00000000U,
 756     0x09808683U, 0x322bed48U, 0x1e1170acU, 0x6c5a724eU,
 757     0xfd0efffbU, 0x0f853856U, 0x3daed51eU, 0x362d3927U,
 758     0x0a0fd964U, 0x685ca621U, 0x9b5b54d1U, 0x24362e3aU,
 759     0x0c0a67b1U, 0x9357e70fU, 0xb4ee96d2U, 0x1b9b919eU,
 760     0x80c0c54fU, 0x61dc20a2U, 0x5a774b69U, 0x1c121a16U,
 761     0xe293ba0aU, 0xc0a02ae5U, 0x3c22e043U, 0x121b171dU,
 762     0x0e090d0bU, 0xf28bc7adU, 0x2db6a8b9U, 0x141ea9c8U,
 763     0x57f11985U, 0xaf75074cU, 0xee99ddbbU, 0xa37f60fdU,
 764     0xf701269fU, 0x5c72f5bcU, 0x44663bc5U, 0x5bfb7e34U,
 765     0x8b432976U, 0xcb23c6dcU, 0xb6edfc68U, 0xb8e4f163U,
 766     0xd731dccaU, 0x42638510U, 0x13972240U, 0x84c61120U,
 767     0x854a247dU, 0xd2bb3df8U, 0xaef93211U, 0xc729a16dU,
 768     0x1d9e2f4bU, 0xdcb230f3U, 0x0d8652ecU, 0x77c1e3d0U,
 769     0x2bb3166cU, 0xa970b999U, 0x119448faU, 0x47e96422U,
 770     0xa8fc8cc4U, 0xa0f03f1aU, 0x567d2cd8U, 0x223390efU,
 771     0x87494ec7U, 0xd938d1c1U, 0x8ccaa2feU, 0x98d40b36U,
 772     0xa6f581cfU, 0xa57ade28U, 0xdab78e26U, 0x3fadbfa4U,
 773     0x2c3a9de4U, 0x5078920dU, 0x6a5fcc9bU, 0x547e4662U,
 774     0xf68d13c2U, 0x90d8b8e8U, 0x2e39f75eU, 0x82c3aff5U,
 775     0x9f5d80beU, 0x69d0937cU, 0x6fd52da9U, 0xcf2512b3U,
 776     0xc8ac993bU, 0x10187da7U, 0xe89c636eU, 0xdb3bbb7bU,
 777     0xcd267809U, 0x6e5918f4U, 0xec9ab701U, 0x834f9aa8U,
 778     0xe6956e65U, 0xaaffe67eU, 0x21bccf08U, 0xef15e8e6U,
 779     0xbae79bd9U, 0x4a6f36ceU, 0xea9f09d4U, 0x29b07cd6U,
 780     0x31a4b2afU, 0x2a3f2331U, 0xc6a59430U, 0x35a266c0U,
 781     0x744ebc37U, 0xfc82caa6U, 0xe090d0b0U, 0x33a7d815U,
 782     0xf104984aU, 0x41ecdaf7U, 0x7fcd500eU, 0x1791f62fU,
 783     0x764dd68dU, 0x43efb04dU, 0xccaa4d54U, 0xe49604dfU,
 784     0x9ed1b5e3U, 0x4c6a881bU, 0xc12c1fb8U, 0x4665517fU,
 785     0x9d5eea04U, 0x018c355dU, 0xfa877473U, 0xfb0b412eU,
 786     0xb3671d5aU, 0x92dbd252U, 0xe9105633U, 0x6dd64713U,
 787     0x9ad7618cU, 0x37a10c7aU, 0x59f8148eU, 0xeb133c89U,
 788     0xcea927eeU, 0xb761c935U, 0xe11ce5edU, 0x7a47b13cU,
 789     0x9cd2df59U, 0x55f2733fU, 0x1814ce79U, 0x73c737bfU,
 790     0x53f7cdeaU, 0x5ffdaa5bU, 0xdf3d6f14U, 0x7844db86U,
 791     0xcaaff381U, 0xb968c43eU, 0x3824342cU, 0xc2a3405fU,
 792     0x161dc372U, 0xbce2250cU, 0x283c498bU, 0xff0d9541U,
 793     0x39a80171U, 0x080cb3deU, 0xd8b4e49cU, 0x6456c190U,
 794     0x7bcb8461U, 0xd532b670U, 0x486c5c74U, 0xd0b85742U,
 795 };
 796 const uint32_t AES_Td1[256] = {
 797     0x5051f4a7U, 0x537e4165U, 0xc31a17a4U, 0x963a275eU,
 798     0xcb3bab6bU, 0xf11f9d45U, 0xabacfa58U, 0x934be303U,
 799     0x552030faU, 0xf6ad766dU, 0x9188cc76U, 0x25f5024cU,
 800     0xfc4fe5d7U, 0xd7c52acbU, 0x80263544U, 0x8fb562a3U,
 801     0x49deb15aU, 0x6725ba1bU, 0x9845ea0eU, 0xe15dfec0U,
 802     0x02c32f75U, 0x12814cf0U, 0xa38d4697U, 0xc66bd3f9U,
 803     0xe7038f5fU, 0x9515929cU, 0xebbf6d7aU, 0xda955259U,
 804     0x2dd4be83U, 0xd3587421U, 0x2949e069U, 0x448ec9c8U,
 805     0x6a75c289U, 0x78f48e79U, 0x6b99583eU, 0xdd27b971U,
 806     0xb6bee14fU, 0x17f088adU, 0x66c920acU, 0xb47dce3aU,
 807     0x1863df4aU, 0x82e51a31U, 0x60975133U, 0x4562537fU,
 808     0xe0b16477U, 0x84bb6baeU, 0x1cfe81a0U, 0x94f9082bU,
 809     0x58704868U, 0x198f45fdU, 0x8794de6cU, 0xb7527bf8U,
 810     0x23ab73d3U, 0xe2724b02U, 0x57e31f8fU, 0x2a6655abU,
 811     0x07b2eb28U, 0x032fb5c2U, 0x9a86c57bU, 0xa5d33708U,
 812     0xf2302887U, 0xb223bfa5U, 0xba02036aU, 0x5ced1682U,
 813     0x2b8acf1cU, 0x92a779b4U, 0xf0f307f2U, 0xa14e69e2U,
 814     0xcd65daf4U, 0xd50605beU, 0x1fd13462U, 0x8ac4a6feU,
 815     0x9d342e53U, 0xa0a2f355U, 0x32058ae1U, 0x75a4f6ebU,
 816     0x390b83ecU, 0xaa4060efU, 0x065e719fU, 0x51bd6e10U,
 817     0xf93e218aU, 0x3d96dd06U, 0xaedd3e05U, 0x464de6bdU,
 818     0xb591548dU, 0x0571c45dU, 0x6f0406d4U, 0xff605015U,
 819     0x241998fbU, 0x97d6bde9U, 0xcc894043U, 0x7767d99eU,
 820     0xbdb0e842U, 0x8807898bU, 0x38e7195bU, 0xdb79c8eeU,
 821     0x47a17c0aU, 0xe97c420fU, 0xc9f8841eU, 0x00000000U,
 822     0x83098086U, 0x48322bedU, 0xac1e1170U, 0x4e6c5a72U,
 823     0xfbfd0effU, 0x560f8538U, 0x1e3daed5U, 0x27362d39U,
 824     0x640a0fd9U, 0x21685ca6U, 0xd19b5b54U, 0x3a24362eU,
 825     0xb10c0a67U, 0x0f9357e7U, 0xd2b4ee96U, 0x9e1b9b91U,
 826     0x4f80c0c5U, 0xa261dc20U, 0x695a774bU, 0x161c121aU,
 827     0x0ae293baU, 0xe5c0a02aU, 0x433c22e0U, 0x1d121b17U,
 828     0x0b0e090dU, 0xadf28bc7U, 0xb92db6a8U, 0xc8141ea9U,
 829     0x8557f119U, 0x4caf7507U, 0xbbee99ddU, 0xfda37f60U,
 830     0x9ff70126U, 0xbc5c72f5U, 0xc544663bU, 0x345bfb7eU,
 831     0x768b4329U, 0xdccb23c6U, 0x68b6edfcU, 0x63b8e4f1U,
 832     0xcad731dcU, 0x10426385U, 0x40139722U, 0x2084c611U,
 833     0x7d854a24U, 0xf8d2bb3dU, 0x11aef932U, 0x6dc729a1U,
 834     0x4b1d9e2fU, 0xf3dcb230U, 0xec0d8652U, 0xd077c1e3U,
 835     0x6c2bb316U, 0x99a970b9U, 0xfa119448U, 0x2247e964U,
 836     0xc4a8fc8cU, 0x1aa0f03fU, 0xd8567d2cU, 0xef223390U,
 837     0xc787494eU, 0xc1d938d1U, 0xfe8ccaa2U, 0x3698d40bU,
 838     0xcfa6f581U, 0x28a57adeU, 0x26dab78eU, 0xa43fadbfU,
 839     0xe42c3a9dU, 0x0d507892U, 0x9b6a5fccU, 0x62547e46U,
 840     0xc2f68d13U, 0xe890d8b8U, 0x5e2e39f7U, 0xf582c3afU,
 841     0xbe9f5d80U, 0x7c69d093U, 0xa96fd52dU, 0xb3cf2512U,
 842     0x3bc8ac99U, 0xa710187dU, 0x6ee89c63U, 0x7bdb3bbbU,
 843     0x09cd2678U, 0xf46e5918U, 0x01ec9ab7U, 0xa8834f9aU,
 844     0x65e6956eU, 0x7eaaffe6U, 0x0821bccfU, 0xe6ef15e8U,
 845     0xd9bae79bU, 0xce4a6f36U, 0xd4ea9f09U, 0xd629b07cU,
 846     0xaf31a4b2U, 0x312a3f23U, 0x30c6a594U, 0xc035a266U,
 847     0x37744ebcU, 0xa6fc82caU, 0xb0e090d0U, 0x1533a7d8U,
 848     0x4af10498U, 0xf741ecdaU, 0x0e7fcd50U, 0x2f1791f6U,
 849     0x8d764dd6U, 0x4d43efb0U, 0x54ccaa4dU, 0xdfe49604U,
 850     0xe39ed1b5U, 0x1b4c6a88U, 0xb8c12c1fU, 0x7f466551U,
 851     0x049d5eeaU, 0x5d018c35U, 0x73fa8774U, 0x2efb0b41U,
 852     0x5ab3671dU, 0x5292dbd2U, 0x33e91056U, 0x136dd647U,
 853     0x8c9ad761U, 0x7a37a10cU, 0x8e59f814U, 0x89eb133cU,
 854     0xeecea927U, 0x35b761c9U, 0xede11ce5U, 0x3c7a47b1U,
 855     0x599cd2dfU, 0x3f55f273U, 0x791814ceU, 0xbf73c737U,
 856     0xea53f7cdU, 0x5b5ffdaaU, 0x14df3d6fU, 0x867844dbU,
 857     0x81caaff3U, 0x3eb968c4U, 0x2c382434U, 0x5fc2a340U,
 858     0x72161dc3U, 0x0cbce225U, 0x8b283c49U, 0x41ff0d95U,
 859     0x7139a801U, 0xde080cb3U, 0x9cd8b4e4U, 0x906456c1U,
 860     0x617bcb84U, 0x70d532b6U, 0x74486c5cU, 0x42d0b857U,
 861 };
 862 const uint32_t AES_Td2[256] = {
 863     0xa75051f4U, 0x65537e41U, 0xa4c31a17U, 0x5e963a27U,
 864     0x6bcb3babU, 0x45f11f9dU, 0x58abacfaU, 0x03934be3U,
 865     0xfa552030U, 0x6df6ad76U, 0x769188ccU, 0x4c25f502U,
 866     0xd7fc4fe5U, 0xcbd7c52aU, 0x44802635U, 0xa38fb562U,
 867     0x5a49deb1U, 0x1b6725baU, 0x0e9845eaU, 0xc0e15dfeU,
 868     0x7502c32fU, 0xf012814cU, 0x97a38d46U, 0xf9c66bd3U,
 869     0x5fe7038fU, 0x9c951592U, 0x7aebbf6dU, 0x59da9552U,
 870     0x832dd4beU, 0x21d35874U, 0x692949e0U, 0xc8448ec9U,
 871     0x896a75c2U, 0x7978f48eU, 0x3e6b9958U, 0x71dd27b9U,
 872     0x4fb6bee1U, 0xad17f088U, 0xac66c920U, 0x3ab47dceU,
 873     0x4a1863dfU, 0x3182e51aU, 0x33609751U, 0x7f456253U,
 874     0x77e0b164U, 0xae84bb6bU, 0xa01cfe81U, 0x2b94f908U,
 875     0x68587048U, 0xfd198f45U, 0x6c8794deU, 0xf8b7527bU,
 876     0xd323ab73U, 0x02e2724bU, 0x8f57e31fU, 0xab2a6655U,
 877     0x2807b2ebU, 0xc2032fb5U, 0x7b9a86c5U, 0x08a5d337U,
 878     0x87f23028U, 0xa5b223bfU, 0x6aba0203U, 0x825ced16U,
 879     0x1c2b8acfU, 0xb492a779U, 0xf2f0f307U, 0xe2a14e69U,
 880     0xf4cd65daU, 0xbed50605U, 0x621fd134U, 0xfe8ac4a6U,
 881     0x539d342eU, 0x55a0a2f3U, 0xe132058aU, 0xeb75a4f6U,
 882     0xec390b83U, 0xefaa4060U, 0x9f065e71U, 0x1051bd6eU,
 883
 884     0x8af93e21U, 0x063d96ddU, 0x05aedd3eU, 0xbd464de6U,
 885     0x8db59154U, 0x5d0571c4U, 0xd46f0406U, 0x15ff6050U,
 886     0xfb241998U, 0xe997d6bdU, 0x43cc8940U, 0x9e7767d9U,
 887     0x42bdb0e8U, 0x8b880789U, 0x5b38e719U, 0xeedb79c8U,
 888     0x0a47a17cU, 0x0fe97c42U, 0x1ec9f884U, 0x00000000U,
 889     0x86830980U, 0xed48322bU, 0x70ac1e11U, 0x724e6c5aU,
 890     0xfffbfd0eU, 0x38560f85U, 0xd51e3daeU, 0x3927362dU,
 891     0xd9640a0fU, 0xa621685cU, 0x54d19b5bU, 0x2e3a2436U,
 892     0x67b10c0aU, 0xe70f9357U, 0x96d2b4eeU, 0x919e1b9bU,
 893     0xc54f80c0U, 0x20a261dcU, 0x4b695a77U, 0x1a161c12U,
 894     0xba0ae293U, 0x2ae5c0a0U, 0xe0433c22U, 0x171d121bU,
 895     0x0d0b0e09U, 0xc7adf28bU, 0xa8b92db6U, 0xa9c8141eU,
 896     0x198557f1U, 0x074caf75U, 0xddbbee99U, 0x60fda37fU,
 897     0x269ff701U, 0xf5bc5c72U, 0x3bc54466U, 0x7e345bfbU,
 898     0x29768b43U, 0xc6dccb23U, 0xfc68b6edU, 0xf163b8e4U,
 899     0xdccad731U, 0x85104263U, 0x22401397U, 0x112084c6U,
 900     0x247d854aU, 0x3df8d2bbU, 0x3211aef9U, 0xa16dc729U,
 901     0x2f4b1d9eU, 0x30f3dcb2U, 0x52ec0d86U, 0xe3d077c1U,
 902     0x166c2bb3U, 0xb999a970U, 0x48fa1194U, 0x642247e9U,
 903     0x8cc4a8fcU, 0x3f1aa0f0U, 0x2cd8567dU, 0x90ef2233U,
 904     0x4ec78749U, 0xd1c1d938U, 0xa2fe8ccaU, 0x0b3698d4U,
 905     0x81cfa6f5U, 0xde28a57aU, 0x8e26dab7U, 0xbfa43fadU,
 906     0x9de42c3aU, 0x920d5078U, 0xcc9b6a5fU, 0x4662547eU,
 907     0x13c2f68dU, 0xb8e890d8U, 0xf75e2e39U, 0xaff582c3U,
 908     0x80be9f5dU, 0x937c69d0U, 0x2da96fd5U, 0x12b3cf25U,
 909     0x993bc8acU, 0x7da71018U, 0x636ee89cU, 0xbb7bdb3bU,
 910     0x7809cd26U, 0x18f46e59U, 0xb701ec9aU, 0x9aa8834fU,
 911     0x6e65e695U, 0xe67eaaffU, 0xcf0821bcU, 0xe8e6ef15U,
 912     0x9bd9bae7U, 0x36ce4a6fU, 0x09d4ea9fU, 0x7cd629b0U,
 913     0xb2af31a4U, 0x23312a3fU, 0x9430c6a5U, 0x66c035a2U,
 914     0xbc37744eU, 0xcaa6fc82U, 0xd0b0e090U, 0xd81533a7U,
 915     0x984af104U, 0xdaf741ecU, 0x500e7fcdU, 0xf62f1791U,
 916     0xd68d764dU, 0xb04d43efU, 0x4d54ccaaU, 0x04dfe496U,
 917     0xb5e39ed1U, 0x881b4c6aU, 0x1fb8c12cU, 0x517f4665U,
 918     0xea049d5eU, 0x355d018cU, 0x7473fa87U, 0x412efb0bU,
 919     0x1d5ab367U, 0xd25292dbU, 0x5633e910U, 0x47136dd6U,
 920     0x618c9ad7U, 0x0c7a37a1U, 0x148e59f8U, 0x3c89eb13U,
 921     0x27eecea9U, 0xc935b761U, 0xe5ede11cU, 0xb13c7a47U,
 922     0xdf599cd2U, 0x733f55f2U, 0xce791814U, 0x37bf73c7U,
 923     0xcdea53f7U, 0xaa5b5ffdU, 0x6f14df3dU, 0xdb867844U,
 924     0xf381caafU, 0xc43eb968U, 0x342c3824U, 0x405fc2a3U,
 925     0xc372161dU, 0x250cbce2U, 0x498b283cU, 0x9541ff0dU,
 926     0x017139a8U, 0xb3de080cU, 0xe49cd8b4U, 0xc1906456U,
 927     0x84617bcbU, 0xb670d532U, 0x5c74486cU, 0x5742d0b8U,
 928 };
 929 const uint32_t AES_Td3[256] = {
 930     0xf4a75051U, 0x4165537eU, 0x17a4c31aU, 0x275e963aU,
 931     0xab6bcb3bU, 0x9d45f11fU, 0xfa58abacU, 0xe303934bU,
 932     0x30fa5520U, 0x766df6adU, 0xcc769188U, 0x024c25f5U,
 933     0xe5d7fc4fU, 0x2acbd7c5U, 0x35448026U, 0x62a38fb5U,
 934     0xb15a49deU, 0xba1b6725U, 0xea0e9845U, 0xfec0e15dU,
 935     0x2f7502c3U, 0x4cf01281U, 0x4697a38dU, 0xd3f9c66bU,
 936     0x8f5fe703U, 0x929c9515U, 0x6d7aebbfU, 0x5259da95U,
 937     0xbe832dd4U, 0x7421d358U, 0xe0692949U, 0xc9c8448eU,
 938     0xc2896a75U, 0x8e7978f4U, 0x583e6b99U, 0xb971dd27U,
 939     0xe14fb6beU, 0x88ad17f0U, 0x20ac66c9U, 0xce3ab47dU,
 940     0xdf4a1863U, 0x1a3182e5U, 0x51336097U, 0x537f4562U,
 941     0x6477e0b1U, 0x6bae84bbU, 0x81a01cfeU, 0x082b94f9U,
 942     0x48685870U, 0x45fd198fU, 0xde6c8794U, 0x7bf8b752U,
 943     0x73d323abU, 0x4b02e272U, 0x1f8f57e3U, 0x55ab2a66U,
 944     0xeb2807b2U, 0xb5c2032fU, 0xc57b9a86U, 0x3708a5d3U,
 945     0x2887f230U, 0xbfa5b223U, 0x036aba02U, 0x16825cedU,
 946     0xcf1c2b8aU, 0x79b492a7U, 0x07f2f0f3U, 0x69e2a14eU,
 947     0xdaf4cd65U, 0x05bed506U, 0x34621fd1U, 0xa6fe8ac4U,
 948     0x2e539d34U, 0xf355a0a2U, 0x8ae13205U, 0xf6eb75a4U,
 949     0x83ec390bU, 0x60efaa40U, 0x719f065eU, 0x6e1051bdU,
 950     0x218af93eU, 0xdd063d96U, 0x3e05aeddU, 0xe6bd464dU,
 951     0x548db591U, 0xc45d0571U, 0x06d46f04U, 0x5015ff60U,
 952     0x98fb2419U, 0xbde997d6U, 0x4043cc89U, 0xd99e7767U,
 953     0xe842bdb0U, 0x898b8807U, 0x195b38e7U, 0xc8eedb79U,
 954     0x7c0a47a1U, 0x420fe97cU, 0x841ec9f8U, 0x00000000U,
 955     0x80868309U, 0x2bed4832U, 0x1170ac1eU, 0x5a724e6cU,
 956     0x0efffbfdU, 0x8538560fU, 0xaed51e3dU, 0x2d392736U,
 957     0x0fd9640aU, 0x5ca62168U, 0x5b54d19bU, 0x362e3a24U,
 958     0x0a67b10cU, 0x57e70f93U, 0xee96d2b4U, 0x9b919e1bU,
 959     0xc0c54f80U, 0xdc20a261U, 0x774b695aU, 0x121a161cU,
 960     0x93ba0ae2U, 0xa02ae5c0U, 0x22e0433cU, 0x1b171d12U,
 961     0x090d0b0eU, 0x8bc7adf2U, 0xb6a8b92dU, 0x1ea9c814U,
 962     0xf1198557U, 0x75074cafU, 0x99ddbbeeU, 0x7f60fda3U,
 963     0x01269ff7U, 0x72f5bc5cU, 0x663bc544U, 0xfb7e345bU,
 964     0x4329768bU, 0x23c6dccbU, 0xedfc68b6U, 0xe4f163b8U,
 965     0x31dccad7U, 0x63851042U, 0x97224013U, 0xc6112084U,
 966     0x4a247d85U, 0xbb3df8d2U, 0xf93211aeU, 0x29a16dc7U,
 967     0x9e2f4b1dU, 0xb230f3dcU, 0x8652ec0dU, 0xc1e3d077U,
 968     0xb3166c2bU, 0x70b999a9U, 0x9448fa11U, 0xe9642247U,
 969     0xfc8cc4a8U, 0xf03f1aa0U, 0x7d2cd856U, 0x3390ef22U,
 970     0x494ec787U, 0x38d1c1d9U, 0xcaa2fe8cU, 0xd40b3698U,
 971     0xf581cfa6U, 0x7ade28a5U, 0xb78e26daU, 0xadbfa43fU,
 972     0x3a9de42cU, 0x78920d50U, 0x5fcc9b6aU, 0x7e466254U,
 973     0x8d13c2f6U, 0xd8b8e890U, 0x39f75e2eU, 0xc3aff582U,
 974     0x5d80be9fU, 0xd0937c69U, 0xd52da96fU, 0x2512b3cfU,
 975     0xac993bc8U, 0x187da710U, 0x9c636ee8U, 0x3bbb7bdbU,
 976     0x267809cdU, 0x5918f46eU, 0x9ab701ecU, 0x4f9aa883U,
 977     0x956e65e6U, 0xffe67eaaU, 0xbccf0821U, 0x15e8e6efU,
 978     0xe79bd9baU, 0x6f36ce4aU, 0x9f09d4eaU, 0xb07cd629U,
 979     0xa4b2af31U, 0x3f23312aU, 0xa59430c6U, 0xa266c035U,
 980     0x4ebc3774U, 0x82caa6fcU, 0x90d0b0e0U, 0xa7d81533U,
 981     0x04984af1U, 0xecdaf741U, 0xcd500e7fU, 0x91f62f17U,
 982     0x4dd68d76U, 0xefb04d43U, 0xaa4d54ccU, 0x9604dfe4U,
 983     0xd1b5e39eU, 0x6a881b4cU, 0x2c1fb8c1U, 0x65517f46U,
 984     0x5eea049dU, 0x8c355d01U, 0x877473faU, 0x0b412efbU,
 985     0x671d5ab3U, 0xdbd25292U, 0x105633e9U, 0xd647136dU,
 986     0xd7618c9aU, 0xa10c7a37U, 0xf8148e59U, 0x133c89ebU,
 987     0xa927eeceU, 0x61c935b7U, 0x1ce5ede1U, 0x47b13c7aU,
 988     0xd2df599cU, 0xf2733f55U, 0x14ce7918U, 0xc737bf73U,
 989     0xf7cdea53U, 0xfdaa5b5fU, 0x3d6f14dfU, 0x44db8678U,
 990     0xaff381caU, 0x68c43eb9U, 0x24342c38U, 0xa3405fc2U,
 991     0x1dc37216U, 0xe2250cbcU, 0x3c498b28U, 0x0d9541ffU,
 992     0xa8017139U, 0x0cb3de08U, 0xb4e49cd8U, 0x56c19064U,
 993     0xcb84617bU, 0x32b670d5U, 0x6c5c7448U, 0xb85742d0U,
 994 };
 995 const uint32_t AES_Td4[256] = {
 996     0x52525252U, 0x09090909U, 0x6a6a6a6aU, 0xd5d5d5d5U,
 997     0x30303030U, 0x36363636U, 0xa5a5a5a5U, 0x38383838U,
 998     0xbfbfbfbfU, 0x40404040U, 0xa3a3a3a3U, 0x9e9e9e9eU,
 999     0x81818181U, 0xf3f3f3f3U, 0xd7d7d7d7U, 0xfbfbfbfbU,
1000     0x7c7c7c7cU, 0xe3e3e3e3U, 0x39393939U, 0x82828282U,
1001     0x9b9b9b9bU, 0x2f2f2f2fU, 0xffffffffU, 0x87878787U,
1002     0x34343434U, 0x8e8e8e8eU, 0x43434343U, 0x44444444U,
1003     0xc4c4c4c4U, 0xdedededeU, 0xe9e9e9e9U, 0xcbcbcbcbU,
1004     0x54545454U, 0x7b7b7b7bU, 0x94949494U, 0x32323232U,
1005     0xa6a6a6a6U, 0xc2c2c2c2U, 0x23232323U, 0x3d3d3d3dU,
1006     0xeeeeeeeeU, 0x4c4c4c4cU, 0x95959595U, 0x0b0b0b0bU,
1007     0x42424242U, 0xfafafafaU, 0xc3c3c3c3U, 0x4e4e4e4eU,
1008     0x08080808U, 0x2e2e2e2eU, 0xa1a1a1a1U, 0x66666666U,
1009     0x28282828U, 0xd9d9d9d9U, 0x24242424U, 0xb2b2b2b2U,
1010     0x76767676U, 0x5b5b5b5bU, 0xa2a2a2a2U, 0x49494949U,
1011     0x6d6d6d6dU, 0x8b8b8b8bU, 0xd1d1d1d1U, 0x25252525U,
1012     0x72727272U, 0xf8f8f8f8U, 0xf6f6f6f6U, 0x64646464U,
1013     0x86868686U, 0x68686868U, 0x98989898U, 0x16161616U,
1014     0xd4d4d4d4U, 0xa4a4a4a4U, 0x5c5c5c5cU, 0xccccccccU,
1015     0x5d5d5d5dU, 0x65656565U, 0xb6b6b6b6U, 0x92929292U,
1016     0x6c6c6c6cU, 0x70707070U, 0x48484848U, 0x50505050U,
1017     0xfdfdfdfdU, 0xededededU, 0xb9b9b9b9U, 0xdadadadaU,
1018     0x5e5e5e5eU, 0x15151515U, 0x46464646U, 0x57575757U,
1019     0xa7a7a7a7U, 0x8d8d8d8dU, 0x9d9d9d9dU, 0x84848484U,
1020     0x90909090U, 0xd8d8d8d8U, 0xababababU, 0x00000000U,
1021     0x8c8c8c8cU, 0xbcbcbcbcU, 0xd3d3d3d3U, 0x0a0a0a0aU,
1022     0xf7f7f7f7U, 0xe4e4e4e4U, 0x58585858U, 0x05050505U,
1023     0xb8b8b8b8U, 0xb3b3b3b3U, 0x45454545U, 0x06060606U,
1024     0xd0d0d0d0U, 0x2c2c2c2cU, 0x1e1e1e1eU, 0x8f8f8f8fU,
1025     0xcacacacaU, 0x3f3f3f3fU, 0x0f0f0f0fU, 0x02020202U,
1026     0xc1c1c1c1U, 0xafafafafU, 0xbdbdbdbdU, 0x03030303U,
1027     0x01010101U, 0x13131313U, 0x8a8a8a8aU, 0x6b6b6b6bU,
1028     0x3a3a3a3aU, 0x91919191U, 0x11111111U, 0x41414141U,
1029     0x4f4f4f4fU, 0x67676767U, 0xdcdcdcdcU, 0xeaeaeaeaU,
1030     0x97979797U, 0xf2f2f2f2U, 0xcfcfcfcfU, 0xcecececeU,
1031     0xf0f0f0f0U, 0xb4b4b4b4U, 0xe6e6e6e6U, 0x73737373U,
1032     0x96969696U, 0xacacacacU, 0x74747474U, 0x22222222U,
1033     0xe7e7e7e7U, 0xadadadadU, 0x35353535U, 0x85858585U,
1034     0xe2e2e2e2U, 0xf9f9f9f9U, 0x37373737U, 0xe8e8e8e8U,
1035     0x1c1c1c1cU, 0x75757575U, 0xdfdfdfdfU, 0x6e6e6e6eU,
1036     0x47474747U, 0xf1f1f1f1U, 0x1a1a1a1aU, 0x71717171U,
1037     0x1d1d1d1dU, 0x29292929U, 0xc5c5c5c5U, 0x89898989U,
1038     0x6f6f6f6fU, 0xb7b7b7b7U, 0x62626262U, 0x0e0e0e0eU,
1039     0xaaaaaaaaU, 0x18181818U, 0xbebebebeU, 0x1b1b1b1bU,
1040     0xfcfcfcfcU, 0x56565656U, 0x3e3e3e3eU, 0x4b4b4b4bU,
1041     0xc6c6c6c6U, 0xd2d2d2d2U, 0x79797979U, 0x20202020U,
1042     0x9a9a9a9aU, 0xdbdbdbdbU, 0xc0c0c0c0U, 0xfefefefeU,
1043     0x78787878U, 0xcdcdcdcdU, 0x5a5a5a5aU, 0xf4f4f4f4U,
1044     0x1f1f1f1fU, 0xddddddddU, 0xa8a8a8a8U, 0x33333333U,
1045     0x88888888U, 0x07070707U, 0xc7c7c7c7U, 0x31313131U,
1046     0xb1b1b1b1U, 0x12121212U, 0x10101010U, 0x59595959U,
1047     0x27272727U, 0x80808080U, 0xececececU, 0x5f5f5f5fU,
1048     0x60606060U, 0x51515151U, 0x7f7f7f7fU, 0xa9a9a9a9U,
1049     0x19191919U, 0xb5b5b5b5U, 0x4a4a4a4aU, 0x0d0d0d0dU,
1050     0x2d2d2d2dU, 0xe5e5e5e5U, 0x7a7a7a7aU, 0x9f9f9f9fU,
1051     0x93939393U, 0xc9c9c9c9U, 0x9c9c9c9cU, 0xefefefefU,
1052     0xa0a0a0a0U, 0xe0e0e0e0U, 0x3b3b3b3bU, 0x4d4d4d4dU,
1053     0xaeaeaeaeU, 0x2a2a2a2aU, 0xf5f5f5f5U, 0xb0b0b0b0U,
1054     0xc8c8c8c8U, 0xebebebebU, 0xbbbbbbbbU, 0x3c3c3c3cU,
1055     0x83838383U, 0x53535353U, 0x99999999U, 0x61616161U,
1056     0x17171717U, 0x2b2b2b2bU, 0x04040404U, 0x7e7e7e7eU,
1057     0xbabababaU, 0x77777777U, 0xd6d6d6d6U, 0x26262626U,
1058     0xe1e1e1e1U, 0x69696969U, 0x14141414U, 0x63636363U,
1059     0x55555555U, 0x21212121U, 0x0c0c0c0cU, 0x7d7d7d7dU,
1060 };
1061 static const u32 rcon[] = {
1062         0x01000000, 0x02000000, 0x04000000, 0x08000000,
1063         0x10000000, 0x20000000, 0x40000000, 0x80000000,
1064         0x1B000000, 0x36000000, /* for 128-bit blocks, Rijndael never uses more than 10 rcon values */
1065 };
1066
1067 /**
1068  * Expand the cipher key into the encryption key schedule.
1069  */
1070 int AES_set_encrypt_key(const unsigned char *userKey, const int bits,
1071                         AES_KEY *key) {
1072
1073         u32 *rk;
1074         int i = 0;
1075         u32 temp;
1076
1077         if (!userKey || !key)
1078                 return -1;
1079         if (bits != 128 && bits != 192 && bits != 256)
1080                 return -2;
1081
1082         rk = key->rd_key;
1083
1084         if (bits==128)
1085                 key->rounds = 10;
1086         else if (bits==192)
1087                 key->rounds = 12;
1088         else
1089                 key->rounds = 14;
1090
1091         rk[0] = GETU32(userKey     );
1092         rk[1] = GETU32(userKey +  4);
1093         rk[2] = GETU32(userKey +  8);
1094         rk[3] = GETU32(userKey + 12);
1095         if (bits == 128) {
1096                 while (1) {
1097                         temp  = rk[3];
1098                         rk[4] = rk[0] ^
1099                                 (AES_Te4[(temp >> 16) & 0xff] & 0xff000000) ^
1100                                 (AES_Te4[(temp >>  8) & 0xff] & 0x00ff0000) ^
1101                                 (AES_Te4[(temp      ) & 0xff] & 0x0000ff00) ^
1102                                 (AES_Te4[(temp >> 24)       ] & 0x000000ff) ^
1103                                 rcon[i];
1104                         rk[5] = rk[1] ^ rk[4];
1105                         rk[6] = rk[2] ^ rk[5];
1106                         rk[7] = rk[3] ^ rk[6];
1107                         if (++i == 10) {
1108                                 return 0;
1109                         }
1110                         rk += 4;
1111                 }
1112         }
1113         rk[4] = GETU32(userKey + 16);
1114         rk[5] = GETU32(userKey + 20);
1115         if (bits == 192) {
1116                 while (1) {
1117                         temp = rk[ 5];
1118                         rk[ 6] = rk[ 0] ^
1119                                 (AES_Te4[(temp >> 16) & 0xff] & 0xff000000) ^
1120                                 (AES_Te4[(temp >>  8) & 0xff] & 0x00ff0000) ^
1121                                 (AES_Te4[(temp      ) & 0xff] & 0x0000ff00) ^
1122                                 (AES_Te4[(temp >> 24)       ] & 0x000000ff) ^
1123                                 rcon[i];
1124                         rk[ 7] = rk[ 1] ^ rk[ 6];
1125                         rk[ 8] = rk[ 2] ^ rk[ 7];
1126                         rk[ 9] = rk[ 3] ^ rk[ 8];
1127                         if (++i == 8) {
1128                                 return 0;
1129                         }
1130                         rk[10] = rk[ 4] ^ rk[ 9];
1131                         rk[11] = rk[ 5] ^ rk[10];
1132                         rk += 6;
1133                 }
1134         }
1135         rk[6] = GETU32(userKey + 24);
1136         rk[7] = GETU32(userKey + 28);
1137         if (bits == 256) {
1138                 while (1) {
1139                         temp = rk[ 7];
1140                         rk[ 8] = rk[ 0] ^
1141                                 (AES_Te4[(temp >> 16) & 0xff] & 0xff000000) ^
1142                                 (AES_Te4[(temp >>  8) & 0xff] & 0x00ff0000) ^
1143                                 (AES_Te4[(temp      ) & 0xff] & 0x0000ff00) ^
1144                                 (AES_Te4[(temp >> 24)       ] & 0x000000ff) ^
1145                                 rcon[i];
1146                         rk[ 9] = rk[ 1] ^ rk[ 8];
1147                         rk[10] = rk[ 2] ^ rk[ 9];
1148                         rk[11] = rk[ 3] ^ rk[10];
1149                         if (++i == 7) {
1150                                 return 0;
1151                         }
1152                         temp = rk[11];
1153                         rk[12] = rk[ 4] ^
1154                                 (AES_Te4[(temp >> 24)       ] & 0xff000000) ^
1155                                 (AES_Te4[(temp >> 16) & 0xff] & 0x00ff0000) ^
1156                                 (AES_Te4[(temp >>  8) & 0xff] & 0x0000ff00) ^
1157                                 (AES_Te4[(temp      ) & 0xff] & 0x000000ff);
1158                         rk[13] = rk[ 5] ^ rk[12];
1159                         rk[14] = rk[ 6] ^ rk[13];
1160                         rk[15] = rk[ 7] ^ rk[14];
1161
1162                         rk += 8;
1163                 }
1164         }
1165         abort();
1166 }
1167
1168 /**
1169  * Expand the cipher key into the decryption key schedule.
1170  */
1171 int AES_set_decrypt_key(const unsigned char *userKey, const int bits,
1172                          AES_KEY *key) {
1173
1174         u32 *rk;
1175         int i, j, status;
1176         u32 temp;
1177
1178         /* first, start with an encryption schedule */
1179         status = AES_set_encrypt_key(userKey, bits, key);
1180         if (status < 0)
1181                 return status;
1182
1183         rk = key->rd_key;
1184
1185         /* invert the order of the round keys: */
1186         for (i = 0, j = 4*(key->rounds); i < j; i += 4, j -= 4) {
1187                 temp = rk[i    ]; rk[i    ] = rk[j    ]; rk[j    ] = temp;
1188                 temp = rk[i + 1]; rk[i + 1] = rk[j + 1]; rk[j + 1] = temp;
1189                 temp = rk[i + 2]; rk[i + 2] = rk[j + 2]; rk[j + 2] = temp;
1190                 temp = rk[i + 3]; rk[i + 3] = rk[j + 3]; rk[j + 3] = temp;
1191         }
1192         /* apply the inverse MixColumn transform to all round keys but the first and the last: */
1193         for (i = 1; i < (key->rounds); i++) {
1194                 rk += 4;
1195                 rk[0] =
1196                         AES_Td0[AES_Te4[(rk[0] >> 24)       ] & 0xff] ^
1197                         AES_Td1[AES_Te4[(rk[0] >> 16) & 0xff] & 0xff] ^
1198                         AES_Td2[AES_Te4[(rk[0] >>  8) & 0xff] & 0xff] ^
1199                         AES_Td3[AES_Te4[(rk[0]      ) & 0xff] & 0xff];
1200                 rk[1] =
1201                         AES_Td0[AES_Te4[(rk[1] >> 24)       ] & 0xff] ^
1202                         AES_Td1[AES_Te4[(rk[1] >> 16) & 0xff] & 0xff] ^
1203                         AES_Td2[AES_Te4[(rk[1] >>  8) & 0xff] & 0xff] ^
1204                         AES_Td3[AES_Te4[(rk[1]      ) & 0xff] & 0xff];
1205                 rk[2] =
1206                         AES_Td0[AES_Te4[(rk[2] >> 24)       ] & 0xff] ^
1207                         AES_Td1[AES_Te4[(rk[2] >> 16) & 0xff] & 0xff] ^
1208                         AES_Td2[AES_Te4[(rk[2] >>  8) & 0xff] & 0xff] ^
1209                         AES_Td3[AES_Te4[(rk[2]      ) & 0xff] & 0xff];
1210                 rk[3] =
1211                         AES_Td0[AES_Te4[(rk[3] >> 24)       ] & 0xff] ^
1212                         AES_Td1[AES_Te4[(rk[3] >> 16) & 0xff] & 0xff] ^
1213                         AES_Td2[AES_Te4[(rk[3] >>  8) & 0xff] & 0xff] ^
1214                         AES_Td3[AES_Te4[(rk[3]      ) & 0xff] & 0xff];
1215         }
1216         return 0;
1217 }
1218
1219 #ifndef AES_ASM
1220 /*
1221  * Encrypt a single block
1222  * in and out can overlap
1223  */
1224 void AES_encrypt(const unsigned char *in, unsigned char *out,
1225                  const AES_KEY *key) {
1226
1227         const u32 *rk;
1228         u32 s0, s1, s2, s3, t0, t1, t2, t3;
1229 #ifndef FULL_UNROLL
1230         int r;
1231 #endif /* ?FULL_UNROLL */
1232
1233         assert(in && out && key);
1234         rk = key->rd_key;
1235
1236         /*
1237          * map byte array block to cipher state
1238          * and add initial round key:
1239          */
1240         s0 = GETU32(in     ) ^ rk[0];
1241         s1 = GETU32(in +  4) ^ rk[1];
1242         s2 = GETU32(in +  8) ^ rk[2];
1243         s3 = GETU32(in + 12) ^ rk[3];
1244 #ifdef FULL_UNROLL
1245         /* round 1: */
1246         t0 = AES_Te0[s0 >> 24] ^ AES_Te1[(s1 >> 16) & 0xff] ^ AES_Te2[(s2 >>  8) & 0xff] ^ AES_Te3[s3 & 0xff] ^ rk[ 4];
1247         t1 = AES_Te0[s1 >> 24] ^ AES_Te1[(s2 >> 16) & 0xff] ^ AES_Te2[(s3 >>  8) & 0xff] ^ AES_Te3[s0 & 0xff] ^ rk[ 5];
1248         t2 = AES_Te0[s2 >> 24] ^ AES_Te1[(s3 >> 16) & 0xff] ^ AES_Te2[(s0 >>  8) & 0xff] ^ AES_Te3[s1 & 0xff] ^ rk[ 6];
1249         t3 = AES_Te0[s3 >> 24] ^ AES_Te1[(s0 >> 16) & 0xff] ^ AES_Te2[(s1 >>  8) & 0xff] ^ AES_Te3[s2 & 0xff] ^ rk[ 7];
1250         /* round 2: */
1251         s0 = AES_Te0[t0 >> 24] ^ AES_Te1[(t1 >> 16) & 0xff] ^ AES_Te2[(t2 >>  8) & 0xff] ^ AES_Te3[t3 & 0xff] ^ rk[ 8];
1252         s1 = AES_Te0[t1 >> 24] ^ AES_Te1[(t2 >> 16) & 0xff] ^ AES_Te2[(t3 >>  8) & 0xff] ^ AES_Te3[t0 & 0xff] ^ rk[ 9];
1253         s2 = AES_Te0[t2 >> 24] ^ AES_Te1[(t3 >> 16) & 0xff] ^ AES_Te2[(t0 >>  8) & 0xff] ^ AES_Te3[t1 & 0xff] ^ rk[10];
1254         s3 = AES_Te0[t3 >> 24] ^ AES_Te1[(t0 >> 16) & 0xff] ^ AES_Te2[(t1 >>  8) & 0xff] ^ AES_Te3[t2 & 0xff] ^ rk[11];
1255         /* round 3: */
1256         t0 = AES_Te0[s0 >> 24] ^ AES_Te1[(s1 >> 16) & 0xff] ^ AES_Te2[(s2 >>  8) & 0xff] ^ AES_Te3[s3 & 0xff] ^ rk[12];
1257         t1 = AES_Te0[s1 >> 24] ^ AES_Te1[(s2 >> 16) & 0xff] ^ AES_Te2[(s3 >>  8) & 0xff] ^ AES_Te3[s0 & 0xff] ^ rk[13];
1258         t2 = AES_Te0[s2 >> 24] ^ AES_Te1[(s3 >> 16) & 0xff] ^ AES_Te2[(s0 >>  8) & 0xff] ^ AES_Te3[s1 & 0xff] ^ rk[14];
1259         t3 = AES_Te0[s3 >> 24] ^ AES_Te1[(s0 >> 16) & 0xff] ^ AES_Te2[(s1 >>  8) & 0xff] ^ AES_Te3[s2 & 0xff] ^ rk[15];
1260         /* round 4: */
1261         s0 = AES_Te0[t0 >> 24] ^ AES_Te1[(t1 >> 16) & 0xff] ^ AES_Te2[(t2 >>  8) & 0xff] ^ AES_Te3[t3 & 0xff] ^ rk[16];
1262         s1 = AES_Te0[t1 >> 24] ^ AES_Te1[(t2 >> 16) & 0xff] ^ AES_Te2[(t3 >>  8) & 0xff] ^ AES_Te3[t0 & 0xff] ^ rk[17];
1263         s2 = AES_Te0[t2 >> 24] ^ AES_Te1[(t3 >> 16) & 0xff] ^ AES_Te2[(t0 >>  8) & 0xff] ^ AES_Te3[t1 & 0xff] ^ rk[18];
1264         s3 = AES_Te0[t3 >> 24] ^ AES_Te1[(t0 >> 16) & 0xff] ^ AES_Te2[(t1 >>  8) & 0xff] ^ AES_Te3[t2 & 0xff] ^ rk[19];
1265         /* round 5: */
1266         t0 = AES_Te0[s0 >> 24] ^ AES_Te1[(s1 >> 16) & 0xff] ^ AES_Te2[(s2 >>  8) & 0xff] ^ AES_Te3[s3 & 0xff] ^ rk[20];
1267         t1 = AES_Te0[s1 >> 24] ^ AES_Te1[(s2 >> 16) & 0xff] ^ AES_Te2[(s3 >>  8) & 0xff] ^ AES_Te3[s0 & 0xff] ^ rk[21];
1268         t2 = AES_Te0[s2 >> 24] ^ AES_Te1[(s3 >> 16) & 0xff] ^ AES_Te2[(s0 >>  8) & 0xff] ^ AES_Te3[s1 & 0xff] ^ rk[22];
1269         t3 = AES_Te0[s3 >> 24] ^ AES_Te1[(s0 >> 16) & 0xff] ^ AES_Te2[(s1 >>  8) & 0xff] ^ AES_Te3[s2 & 0xff] ^ rk[23];
1270         /* round 6: */
1271         s0 = AES_Te0[t0 >> 24] ^ AES_Te1[(t1 >> 16) & 0xff] ^ AES_Te2[(t2 >>  8) & 0xff] ^ AES_Te3[t3 & 0xff] ^ rk[24];
1272         s1 = AES_Te0[t1 >> 24] ^ AES_Te1[(t2 >> 16) & 0xff] ^ AES_Te2[(t3 >>  8) & 0xff] ^ AES_Te3[t0 & 0xff] ^ rk[25];
1273         s2 = AES_Te0[t2 >> 24] ^ AES_Te1[(t3 >> 16) & 0xff] ^ AES_Te2[(t0 >>  8) & 0xff] ^ AES_Te3[t1 & 0xff] ^ rk[26];
1274         s3 = AES_Te0[t3 >> 24] ^ AES_Te1[(t0 >> 16) & 0xff] ^ AES_Te2[(t1 >>  8) & 0xff] ^ AES_Te3[t2 & 0xff] ^ rk[27];
1275         /* round 7: */
1276         t0 = AES_Te0[s0 >> 24] ^ AES_Te1[(s1 >> 16) & 0xff] ^ AES_Te2[(s2 >>  8) & 0xff] ^ AES_Te3[s3 & 0xff] ^ rk[28];
1277         t1 = AES_Te0[s1 >> 24] ^ AES_Te1[(s2 >> 16) & 0xff] ^ AES_Te2[(s3 >>  8) & 0xff] ^ AES_Te3[s0 & 0xff] ^ rk[29];
1278         t2 = AES_Te0[s2 >> 24] ^ AES_Te1[(s3 >> 16) & 0xff] ^ AES_Te2[(s0 >>  8) & 0xff] ^ AES_Te3[s1 & 0xff] ^ rk[30];
1279         t3 = AES_Te0[s3 >> 24] ^ AES_Te1[(s0 >> 16) & 0xff] ^ AES_Te2[(s1 >>  8) & 0xff] ^ AES_Te3[s2 & 0xff] ^ rk[31];
1280         /* round 8: */
1281         s0 = AES_Te0[t0 >> 24] ^ AES_Te1[(t1 >> 16) & 0xff] ^ AES_Te2[(t2 >>  8) & 0xff] ^ AES_Te3[t3 & 0xff] ^ rk[32];
1282         s1 = AES_Te0[t1 >> 24] ^ AES_Te1[(t2 >> 16) & 0xff] ^ AES_Te2[(t3 >>  8) & 0xff] ^ AES_Te3[t0 & 0xff] ^ rk[33];
1283         s2 = AES_Te0[t2 >> 24] ^ AES_Te1[(t3 >> 16) & 0xff] ^ AES_Te2[(t0 >>  8) & 0xff] ^ AES_Te3[t1 & 0xff] ^ rk[34];
1284         s3 = AES_Te0[t3 >> 24] ^ AES_Te1[(t0 >> 16) & 0xff] ^ AES_Te2[(t1 >>  8) & 0xff] ^ AES_Te3[t2 & 0xff] ^ rk[35];
1285         /* round 9: */
1286         t0 = AES_Te0[s0 >> 24] ^ AES_Te1[(s1 >> 16) & 0xff] ^ AES_Te2[(s2 >>  8) & 0xff] ^ AES_Te3[s3 & 0xff] ^ rk[36];
1287         t1 = AES_Te0[s1 >> 24] ^ AES_Te1[(s2 >> 16) & 0xff] ^ AES_Te2[(s3 >>  8) & 0xff] ^ AES_Te3[s0 & 0xff] ^ rk[37];
1288         t2 = AES_Te0[s2 >> 24] ^ AES_Te1[(s3 >> 16) & 0xff] ^ AES_Te2[(s0 >>  8) & 0xff] ^ AES_Te3[s1 & 0xff] ^ rk[38];
1289         t3 = AES_Te0[s3 >> 24] ^ AES_Te1[(s0 >> 16) & 0xff] ^ AES_Te2[(s1 >>  8) & 0xff] ^ AES_Te3[s2 & 0xff] ^ rk[39];
1290     if (key->rounds > 10) {
1291         /* round 10: */
1292         s0 = AES_Te0[t0 >> 24] ^ AES_Te1[(t1 >> 16) & 0xff] ^ AES_Te2[(t2 >>  8) & 0xff] ^ AES_Te3[t3 & 0xff] ^ rk[40];
1293         s1 = AES_Te0[t1 >> 24] ^ AES_Te1[(t2 >> 16) & 0xff] ^ AES_Te2[(t3 >>  8) & 0xff] ^ AES_Te3[t0 & 0xff] ^ rk[41];
1294         s2 = AES_Te0[t2 >> 24] ^ AES_Te1[(t3 >> 16) & 0xff] ^ AES_Te2[(t0 >>  8) & 0xff] ^ AES_Te3[t1 & 0xff] ^ rk[42];
1295         s3 = AES_Te0[t3 >> 24] ^ AES_Te1[(t0 >> 16) & 0xff] ^ AES_Te2[(t1 >>  8) & 0xff] ^ AES_Te3[t2 & 0xff] ^ rk[43];
1296         /* round 11: */
1297         t0 = AES_Te0[s0 >> 24] ^ AES_Te1[(s1 >> 16) & 0xff] ^ AES_Te2[(s2 >>  8) & 0xff] ^ AES_Te3[s3 & 0xff] ^ rk[44];
1298         t1 = AES_Te0[s1 >> 24] ^ AES_Te1[(s2 >> 16) & 0xff] ^ AES_Te2[(s3 >>  8) & 0xff] ^ AES_Te3[s0 & 0xff] ^ rk[45];
1299         t2 = AES_Te0[s2 >> 24] ^ AES_Te1[(s3 >> 16) & 0xff] ^ AES_Te2[(s0 >>  8) & 0xff] ^ AES_Te3[s1 & 0xff] ^ rk[46];
1300         t3 = AES_Te0[s3 >> 24] ^ AES_Te1[(s0 >> 16) & 0xff] ^ AES_Te2[(s1 >>  8) & 0xff] ^ AES_Te3[s2 & 0xff] ^ rk[47];
1301         if (key->rounds > 12) {
1302             /* round 12: */
1303             s0 = AES_Te0[t0 >> 24] ^ AES_Te1[(t1 >> 16) & 0xff] ^ AES_Te2[(t2 >>  8) & 0xff] ^ AES_Te3[t3 & 0xff] ^ rk[48];
1304             s1 = AES_Te0[t1 >> 24] ^ AES_Te1[(t2 >> 16) & 0xff] ^ AES_Te2[(t3 >>  8) & 0xff] ^ AES_Te3[t0 & 0xff] ^ rk[49];
1305             s2 = AES_Te0[t2 >> 24] ^ AES_Te1[(t3 >> 16) & 0xff] ^ AES_Te2[(t0 >>  8) & 0xff] ^ AES_Te3[t1 & 0xff] ^ rk[50];
1306             s3 = AES_Te0[t3 >> 24] ^ AES_Te1[(t0 >> 16) & 0xff] ^ AES_Te2[(t1 >>  8) & 0xff] ^ AES_Te3[t2 & 0xff] ^ rk[51];
1307             /* round 13: */
1308             t0 = AES_Te0[s0 >> 24] ^ AES_Te1[(s1 >> 16) & 0xff] ^ AES_Te2[(s2 >>  8) & 0xff] ^ AES_Te3[s3 & 0xff] ^ rk[52];
1309             t1 = AES_Te0[s1 >> 24] ^ AES_Te1[(s2 >> 16) & 0xff] ^ AES_Te2[(s3 >>  8) & 0xff] ^ AES_Te3[s0 & 0xff] ^ rk[53];
1310             t2 = AES_Te0[s2 >> 24] ^ AES_Te1[(s3 >> 16) & 0xff] ^ AES_Te2[(s0 >>  8) & 0xff] ^ AES_Te3[s1 & 0xff] ^ rk[54];
1311             t3 = AES_Te0[s3 >> 24] ^ AES_Te1[(s0 >> 16) & 0xff] ^ AES_Te2[(s1 >>  8) & 0xff] ^ AES_Te3[s2 & 0xff] ^ rk[55];
1312         }
1313     }
1314     rk += key->rounds << 2;
1315 #else  /* !FULL_UNROLL */
1316     /*
1317      * Nr - 1 full rounds:
1318      */
1319     r = key->rounds >> 1;
1320     for (;;) {
1321         t0 =
1322             AES_Te0[(s0 >> 24)       ] ^
1323             AES_Te1[(s1 >> 16) & 0xff] ^
1324             AES_Te2[(s2 >>  8) & 0xff] ^
1325             AES_Te3[(s3      ) & 0xff] ^
1326             rk[4];
1327         t1 =
1328             AES_Te0[(s1 >> 24)       ] ^
1329             AES_Te1[(s2 >> 16) & 0xff] ^
1330             AES_Te2[(s3 >>  8) & 0xff] ^
1331             AES_Te3[(s0      ) & 0xff] ^
1332             rk[5];
1333         t2 =
1334             AES_Te0[(s2 >> 24)       ] ^
1335             AES_Te1[(s3 >> 16) & 0xff] ^
1336             AES_Te2[(s0 >>  8) & 0xff] ^
1337             AES_Te3[(s1      ) & 0xff] ^
1338             rk[6];
1339         t3 =
1340             AES_Te0[(s3 >> 24)       ] ^
1341             AES_Te1[(s0 >> 16) & 0xff] ^
1342             AES_Te2[(s1 >>  8) & 0xff] ^
1343             AES_Te3[(s2      ) & 0xff] ^
1344             rk[7];
1345
1346         rk += 8;
1347         if (--r == 0) {
1348             break;
1349         }
1350
1351         s0 =
1352             AES_Te0[(t0 >> 24)       ] ^
1353             AES_Te1[(t1 >> 16) & 0xff] ^
1354             AES_Te2[(t2 >>  8) & 0xff] ^
1355             AES_Te3[(t3      ) & 0xff] ^
1356             rk[0];
1357         s1 =
1358             AES_Te0[(t1 >> 24)       ] ^
1359             AES_Te1[(t2 >> 16) & 0xff] ^
1360             AES_Te2[(t3 >>  8) & 0xff] ^
1361             AES_Te3[(t0      ) & 0xff] ^
1362             rk[1];
1363         s2 =
1364             AES_Te0[(t2 >> 24)       ] ^
1365             AES_Te1[(t3 >> 16) & 0xff] ^
1366             AES_Te2[(t0 >>  8) & 0xff] ^
1367             AES_Te3[(t1      ) & 0xff] ^
1368             rk[2];
1369         s3 =
1370             AES_Te0[(t3 >> 24)       ] ^
1371             AES_Te1[(t0 >> 16) & 0xff] ^
1372             AES_Te2[(t1 >>  8) & 0xff] ^
1373             AES_Te3[(t2      ) & 0xff] ^
1374             rk[3];
1375     }
1376 #endif /* ?FULL_UNROLL */
1377     /*
1378          * apply last round and
1379          * map cipher state to byte array block:
1380          */
1381         s0 =
1382                 (AES_Te4[(t0 >> 24)       ] & 0xff000000) ^
1383                 (AES_Te4[(t1 >> 16) & 0xff] & 0x00ff0000) ^
1384                 (AES_Te4[(t2 >>  8) & 0xff] & 0x0000ff00) ^
1385                 (AES_Te4[(t3      ) & 0xff] & 0x000000ff) ^
1386                 rk[0];
1387         PUTU32(out     , s0);
1388         s1 =
1389                 (AES_Te4[(t1 >> 24)       ] & 0xff000000) ^
1390                 (AES_Te4[(t2 >> 16) & 0xff] & 0x00ff0000) ^
1391                 (AES_Te4[(t3 >>  8) & 0xff] & 0x0000ff00) ^
1392                 (AES_Te4[(t0      ) & 0xff] & 0x000000ff) ^
1393                 rk[1];
1394         PUTU32(out +  4, s1);
1395         s2 =
1396                 (AES_Te4[(t2 >> 24)       ] & 0xff000000) ^
1397                 (AES_Te4[(t3 >> 16) & 0xff] & 0x00ff0000) ^
1398                 (AES_Te4[(t0 >>  8) & 0xff] & 0x0000ff00) ^
1399                 (AES_Te4[(t1      ) & 0xff] & 0x000000ff) ^
1400                 rk[2];
1401         PUTU32(out +  8, s2);
1402         s3 =
1403                 (AES_Te4[(t3 >> 24)       ] & 0xff000000) ^
1404                 (AES_Te4[(t0 >> 16) & 0xff] & 0x00ff0000) ^
1405                 (AES_Te4[(t1 >>  8) & 0xff] & 0x0000ff00) ^
1406                 (AES_Te4[(t2      ) & 0xff] & 0x000000ff) ^
1407                 rk[3];
1408         PUTU32(out + 12, s3);
1409 }
1410
1411 /*
1412  * Decrypt a single block
1413  * in and out can overlap
1414  */
1415 void AES_decrypt(const unsigned char *in, unsigned char *out,
1416                  const AES_KEY *key) {
1417
1418         const u32 *rk;
1419         u32 s0, s1, s2, s3, t0, t1, t2, t3;
1420 #ifndef FULL_UNROLL
1421         int r;
1422 #endif /* ?FULL_UNROLL */
1423
1424         assert(in && out && key);
1425         rk = key->rd_key;
1426
1427         /*
1428          * map byte array block to cipher state
1429          * and add initial round key:
1430          */
1431     s0 = GETU32(in     ) ^ rk[0];
1432     s1 = GETU32(in +  4) ^ rk[1];
1433     s2 = GETU32(in +  8) ^ rk[2];
1434     s3 = GETU32(in + 12) ^ rk[3];
1435 #ifdef FULL_UNROLL
1436     /* round 1: */
1437     t0 = AES_Td0[s0 >> 24] ^ AES_Td1[(s3 >> 16) & 0xff] ^ AES_Td2[(s2 >>  8) & 0xff] ^ AES_Td3[s1 & 0xff] ^ rk[ 4];
1438     t1 = AES_Td0[s1 >> 24] ^ AES_Td1[(s0 >> 16) & 0xff] ^ AES_Td2[(s3 >>  8) & 0xff] ^ AES_Td3[s2 & 0xff] ^ rk[ 5];
1439     t2 = AES_Td0[s2 >> 24] ^ AES_Td1[(s1 >> 16) & 0xff] ^ AES_Td2[(s0 >>  8) & 0xff] ^ AES_Td3[s3 & 0xff] ^ rk[ 6];
1440     t3 = AES_Td0[s3 >> 24] ^ AES_Td1[(s2 >> 16) & 0xff] ^ AES_Td2[(s1 >>  8) & 0xff] ^ AES_Td3[s0 & 0xff] ^ rk[ 7];
1441     /* round 2: */
1442     s0 = AES_Td0[t0 >> 24] ^ AES_Td1[(t3 >> 16) & 0xff] ^ AES_Td2[(t2 >>  8) & 0xff] ^ AES_Td3[t1 & 0xff] ^ rk[ 8];
1443     s1 = AES_Td0[t1 >> 24] ^ AES_Td1[(t0 >> 16) & 0xff] ^ AES_Td2[(t3 >>  8) & 0xff] ^ AES_Td3[t2 & 0xff] ^ rk[ 9];
1444     s2 = AES_Td0[t2 >> 24] ^ AES_Td1[(t1 >> 16) & 0xff] ^ AES_Td2[(t0 >>  8) & 0xff] ^ AES_Td3[t3 & 0xff] ^ rk[10];
1445     s3 = AES_Td0[t3 >> 24] ^ AES_Td1[(t2 >> 16) & 0xff] ^ AES_Td2[(t1 >>  8) & 0xff] ^ AES_Td3[t0 & 0xff] ^ rk[11];
1446     /* round 3: */
1447     t0 = AES_Td0[s0 >> 24] ^ AES_Td1[(s3 >> 16) & 0xff] ^ AES_Td2[(s2 >>  8) & 0xff] ^ AES_Td3[s1 & 0xff] ^ rk[12];
1448     t1 = AES_Td0[s1 >> 24] ^ AES_Td1[(s0 >> 16) & 0xff] ^ AES_Td2[(s3 >>  8) & 0xff] ^ AES_Td3[s2 & 0xff] ^ rk[13];
1449     t2 = AES_Td0[s2 >> 24] ^ AES_Td1[(s1 >> 16) & 0xff] ^ AES_Td2[(s0 >>  8) & 0xff] ^ AES_Td3[s3 & 0xff] ^ rk[14];
1450     t3 = AES_Td0[s3 >> 24] ^ AES_Td1[(s2 >> 16) & 0xff] ^ AES_Td2[(s1 >>  8) & 0xff] ^ AES_Td3[s0 & 0xff] ^ rk[15];
1451     /* round 4: */
1452     s0 = AES_Td0[t0 >> 24] ^ AES_Td1[(t3 >> 16) & 0xff] ^ AES_Td2[(t2 >>  8) & 0xff] ^ AES_Td3[t1 & 0xff] ^ rk[16];
1453     s1 = AES_Td0[t1 >> 24] ^ AES_Td1[(t0 >> 16) & 0xff] ^ AES_Td2[(t3 >>  8) & 0xff] ^ AES_Td3[t2 & 0xff] ^ rk[17];
1454     s2 = AES_Td0[t2 >> 24] ^ AES_Td1[(t1 >> 16) & 0xff] ^ AES_Td2[(t0 >>  8) & 0xff] ^ AES_Td3[t3 & 0xff] ^ rk[18];
1455     s3 = AES_Td0[t3 >> 24] ^ AES_Td1[(t2 >> 16) & 0xff] ^ AES_Td2[(t1 >>  8) & 0xff] ^ AES_Td3[t0 & 0xff] ^ rk[19];
1456     /* round 5: */
1457     t0 = AES_Td0[s0 >> 24] ^ AES_Td1[(s3 >> 16) & 0xff] ^ AES_Td2[(s2 >>  8) & 0xff] ^ AES_Td3[s1 & 0xff] ^ rk[20];
1458     t1 = AES_Td0[s1 >> 24] ^ AES_Td1[(s0 >> 16) & 0xff] ^ AES_Td2[(s3 >>  8) & 0xff] ^ AES_Td3[s2 & 0xff] ^ rk[21];
1459     t2 = AES_Td0[s2 >> 24] ^ AES_Td1[(s1 >> 16) & 0xff] ^ AES_Td2[(s0 >>  8) & 0xff] ^ AES_Td3[s3 & 0xff] ^ rk[22];
1460     t3 = AES_Td0[s3 >> 24] ^ AES_Td1[(s2 >> 16) & 0xff] ^ AES_Td2[(s1 >>  8) & 0xff] ^ AES_Td3[s0 & 0xff] ^ rk[23];
1461     /* round 6: */
1462     s0 = AES_Td0[t0 >> 24] ^ AES_Td1[(t3 >> 16) & 0xff] ^ AES_Td2[(t2 >>  8) & 0xff] ^ AES_Td3[t1 & 0xff] ^ rk[24];
1463     s1 = AES_Td0[t1 >> 24] ^ AES_Td1[(t0 >> 16) & 0xff] ^ AES_Td2[(t3 >>  8) & 0xff] ^ AES_Td3[t2 & 0xff] ^ rk[25];
1464     s2 = AES_Td0[t2 >> 24] ^ AES_Td1[(t1 >> 16) & 0xff] ^ AES_Td2[(t0 >>  8) & 0xff] ^ AES_Td3[t3 & 0xff] ^ rk[26];
1465     s3 = AES_Td0[t3 >> 24] ^ AES_Td1[(t2 >> 16) & 0xff] ^ AES_Td2[(t1 >>  8) & 0xff] ^ AES_Td3[t0 & 0xff] ^ rk[27];
1466     /* round 7: */
1467     t0 = AES_Td0[s0 >> 24] ^ AES_Td1[(s3 >> 16) & 0xff] ^ AES_Td2[(s2 >>  8) & 0xff] ^ AES_Td3[s1 & 0xff] ^ rk[28];
1468     t1 = AES_Td0[s1 >> 24] ^ AES_Td1[(s0 >> 16) & 0xff] ^ AES_Td2[(s3 >>  8) & 0xff] ^ AES_Td3[s2 & 0xff] ^ rk[29];
1469     t2 = AES_Td0[s2 >> 24] ^ AES_Td1[(s1 >> 16) & 0xff] ^ AES_Td2[(s0 >>  8) & 0xff] ^ AES_Td3[s3 & 0xff] ^ rk[30];
1470     t3 = AES_Td0[s3 >> 24] ^ AES_Td1[(s2 >> 16) & 0xff] ^ AES_Td2[(s1 >>  8) & 0xff] ^ AES_Td3[s0 & 0xff] ^ rk[31];
1471     /* round 8: */
1472     s0 = AES_Td0[t0 >> 24] ^ AES_Td1[(t3 >> 16) & 0xff] ^ AES_Td2[(t2 >>  8) & 0xff] ^ AES_Td3[t1 & 0xff] ^ rk[32];
1473     s1 = AES_Td0[t1 >> 24] ^ AES_Td1[(t0 >> 16) & 0xff] ^ AES_Td2[(t3 >>  8) & 0xff] ^ AES_Td3[t2 & 0xff] ^ rk[33];
1474     s2 = AES_Td0[t2 >> 24] ^ AES_Td1[(t1 >> 16) & 0xff] ^ AES_Td2[(t0 >>  8) & 0xff] ^ AES_Td3[t3 & 0xff] ^ rk[34];
1475     s3 = AES_Td0[t3 >> 24] ^ AES_Td1[(t2 >> 16) & 0xff] ^ AES_Td2[(t1 >>  8) & 0xff] ^ AES_Td3[t0 & 0xff] ^ rk[35];
1476     /* round 9: */
1477     t0 = AES_Td0[s0 >> 24] ^ AES_Td1[(s3 >> 16) & 0xff] ^ AES_Td2[(s2 >>  8) & 0xff] ^ AES_Td3[s1 & 0xff] ^ rk[36];
1478     t1 = AES_Td0[s1 >> 24] ^ AES_Td1[(s0 >> 16) & 0xff] ^ AES_Td2[(s3 >>  8) & 0xff] ^ AES_Td3[s2 & 0xff] ^ rk[37];
1479     t2 = AES_Td0[s2 >> 24] ^ AES_Td1[(s1 >> 16) & 0xff] ^ AES_Td2[(s0 >>  8) & 0xff] ^ AES_Td3[s3 & 0xff] ^ rk[38];
1480     t3 = AES_Td0[s3 >> 24] ^ AES_Td1[(s2 >> 16) & 0xff] ^ AES_Td2[(s1 >>  8) & 0xff] ^ AES_Td3[s0 & 0xff] ^ rk[39];
1481     if (key->rounds > 10) {
1482         /* round 10: */
1483         s0 = AES_Td0[t0 >> 24] ^ AES_Td1[(t3 >> 16) & 0xff] ^ AES_Td2[(t2 >>  8) & 0xff] ^ AES_Td3[t1 & 0xff] ^ rk[40];
1484         s1 = AES_Td0[t1 >> 24] ^ AES_Td1[(t0 >> 16) & 0xff] ^ AES_Td2[(t3 >>  8) & 0xff] ^ AES_Td3[t2 & 0xff] ^ rk[41];
1485         s2 = AES_Td0[t2 >> 24] ^ AES_Td1[(t1 >> 16) & 0xff] ^ AES_Td2[(t0 >>  8) & 0xff] ^ AES_Td3[t3 & 0xff] ^ rk[42];
1486         s3 = AES_Td0[t3 >> 24] ^ AES_Td1[(t2 >> 16) & 0xff] ^ AES_Td2[(t1 >>  8) & 0xff] ^ AES_Td3[t0 & 0xff] ^ rk[43];
1487         /* round 11: */
1488         t0 = AES_Td0[s0 >> 24] ^ AES_Td1[(s3 >> 16) & 0xff] ^ AES_Td2[(s2 >>  8) & 0xff] ^ AES_Td3[s1 & 0xff] ^ rk[44];
1489         t1 = AES_Td0[s1 >> 24] ^ AES_Td1[(s0 >> 16) & 0xff] ^ AES_Td2[(s3 >>  8) & 0xff] ^ AES_Td3[s2 & 0xff] ^ rk[45];
1490         t2 = AES_Td0[s2 >> 24] ^ AES_Td1[(s1 >> 16) & 0xff] ^ AES_Td2[(s0 >>  8) & 0xff] ^ AES_Td3[s3 & 0xff] ^ rk[46];
1491         t3 = AES_Td0[s3 >> 24] ^ AES_Td1[(s2 >> 16) & 0xff] ^ AES_Td2[(s1 >>  8) & 0xff] ^ AES_Td3[s0 & 0xff] ^ rk[47];
1492         if (key->rounds > 12) {
1493             /* round 12: */
1494             s0 = AES_Td0[t0 >> 24] ^ AES_Td1[(t3 >> 16) & 0xff] ^ AES_Td2[(t2 >>  8) & 0xff] ^ AES_Td3[t1 & 0xff] ^ rk[48];
1495             s1 = AES_Td0[t1 >> 24] ^ AES_Td1[(t0 >> 16) & 0xff] ^ AES_Td2[(t3 >>  8) & 0xff] ^ AES_Td3[t2 & 0xff] ^ rk[49];
1496             s2 = AES_Td0[t2 >> 24] ^ AES_Td1[(t1 >> 16) & 0xff] ^ AES_Td2[(t0 >>  8) & 0xff] ^ AES_Td3[t3 & 0xff] ^ rk[50];
1497             s3 = AES_Td0[t3 >> 24] ^ AES_Td1[(t2 >> 16) & 0xff] ^ AES_Td2[(t1 >>  8) & 0xff] ^ AES_Td3[t0 & 0xff] ^ rk[51];
1498             /* round 13: */
1499             t0 = AES_Td0[s0 >> 24] ^ AES_Td1[(s3 >> 16) & 0xff] ^ AES_Td2[(s2 >>  8) & 0xff] ^ AES_Td3[s1 & 0xff] ^ rk[52];
1500             t1 = AES_Td0[s1 >> 24] ^ AES_Td1[(s0 >> 16) & 0xff] ^ AES_Td2[(s3 >>  8) & 0xff] ^ AES_Td3[s2 & 0xff] ^ rk[53];
1501             t2 = AES_Td0[s2 >> 24] ^ AES_Td1[(s1 >> 16) & 0xff] ^ AES_Td2[(s0 >>  8) & 0xff] ^ AES_Td3[s3 & 0xff] ^ rk[54];
1502             t3 = AES_Td0[s3 >> 24] ^ AES_Td1[(s2 >> 16) & 0xff] ^ AES_Td2[(s1 >>  8) & 0xff] ^ AES_Td3[s0 & 0xff] ^ rk[55];
1503         }
1504     }
1505         rk += key->rounds << 2;
1506 #else  /* !FULL_UNROLL */
1507     /*
1508      * Nr - 1 full rounds:
1509      */
1510     r = key->rounds >> 1;
1511     for (;;) {
1512         t0 =
1513             AES_Td0[(s0 >> 24)       ] ^
1514             AES_Td1[(s3 >> 16) & 0xff] ^
1515             AES_Td2[(s2 >>  8) & 0xff] ^
1516             AES_Td3[(s1      ) & 0xff] ^
1517             rk[4];
1518         t1 =
1519             AES_Td0[(s1 >> 24)       ] ^
1520             AES_Td1[(s0 >> 16) & 0xff] ^
1521             AES_Td2[(s3 >>  8) & 0xff] ^
1522             AES_Td3[(s2      ) & 0xff] ^
1523             rk[5];
1524         t2 =
1525             AES_Td0[(s2 >> 24)       ] ^
1526             AES_Td1[(s1 >> 16) & 0xff] ^
1527             AES_Td2[(s0 >>  8) & 0xff] ^
1528             AES_Td3[(s3      ) & 0xff] ^
1529             rk[6];
1530         t3 =
1531             AES_Td0[(s3 >> 24)       ] ^
1532             AES_Td1[(s2 >> 16) & 0xff] ^
1533             AES_Td2[(s1 >>  8) & 0xff] ^
1534             AES_Td3[(s0      ) & 0xff] ^
1535             rk[7];
1536
1537         rk += 8;
1538         if (--r == 0) {
1539             break;
1540         }
1541
1542         s0 =
1543             AES_Td0[(t0 >> 24)       ] ^
1544             AES_Td1[(t3 >> 16) & 0xff] ^
1545             AES_Td2[(t2 >>  8) & 0xff] ^
1546             AES_Td3[(t1      ) & 0xff] ^
1547             rk[0];
1548         s1 =
1549             AES_Td0[(t1 >> 24)       ] ^
1550             AES_Td1[(t0 >> 16) & 0xff] ^
1551             AES_Td2[(t3 >>  8) & 0xff] ^
1552             AES_Td3[(t2      ) & 0xff] ^
1553             rk[1];
1554         s2 =
1555             AES_Td0[(t2 >> 24)       ] ^
1556             AES_Td1[(t1 >> 16) & 0xff] ^
1557             AES_Td2[(t0 >>  8) & 0xff] ^
1558             AES_Td3[(t3      ) & 0xff] ^
1559             rk[2];
1560         s3 =
1561             AES_Td0[(t3 >> 24)       ] ^
1562             AES_Td1[(t2 >> 16) & 0xff] ^
1563             AES_Td2[(t1 >>  8) & 0xff] ^
1564             AES_Td3[(t0      ) & 0xff] ^
1565             rk[3];
1566     }
1567 #endif /* ?FULL_UNROLL */
1568     /*
1569          * apply last round and
1570          * map cipher state to byte array block:
1571          */
1572         s0 =
1573                 (AES_Td4[(t0 >> 24)       ] & 0xff000000) ^
1574                 (AES_Td4[(t3 >> 16) & 0xff] & 0x00ff0000) ^
1575                 (AES_Td4[(t2 >>  8) & 0xff] & 0x0000ff00) ^
1576                 (AES_Td4[(t1      ) & 0xff] & 0x000000ff) ^
1577                 rk[0];
1578         PUTU32(out     , s0);
1579         s1 =
1580                 (AES_Td4[(t1 >> 24)       ] & 0xff000000) ^
1581                 (AES_Td4[(t0 >> 16) & 0xff] & 0x00ff0000) ^
1582                 (AES_Td4[(t3 >>  8) & 0xff] & 0x0000ff00) ^
1583                 (AES_Td4[(t2      ) & 0xff] & 0x000000ff) ^
1584                 rk[1];
1585         PUTU32(out +  4, s1);
1586         s2 =
1587                 (AES_Td4[(t2 >> 24)       ] & 0xff000000) ^
1588                 (AES_Td4[(t1 >> 16) & 0xff] & 0x00ff0000) ^
1589                 (AES_Td4[(t0 >>  8) & 0xff] & 0x0000ff00) ^
1590                 (AES_Td4[(t3      ) & 0xff] & 0x000000ff) ^
1591                 rk[2];
1592         PUTU32(out +  8, s2);
1593         s3 =
1594                 (AES_Td4[(t3 >> 24)       ] & 0xff000000) ^
1595                 (AES_Td4[(t2 >> 16) & 0xff] & 0x00ff0000) ^
1596                 (AES_Td4[(t1 >>  8) & 0xff] & 0x0000ff00) ^
1597                 (AES_Td4[(t0      ) & 0xff] & 0x000000ff) ^
1598                 rk[3];
1599         PUTU32(out + 12, s3);
1600 }
1601
1602 #endif /* AES_ASM */
1603
1604 void AES_cbc_encrypt(const unsigned char *in, unsigned char *out,
1605                      const unsigned long length, const AES_KEY *key,
1606                      unsigned char *ivec, const int enc)
1607 {
1608
1609         unsigned long n;
1610         unsigned long len = length;
1611         unsigned char tmp[AES_BLOCK_SIZE];
1612
1613         assert(in && out && key && ivec);
1614
1615         if (enc) {
1616                 while (len >= AES_BLOCK_SIZE) {
1617                         for(n=0; n < AES_BLOCK_SIZE; ++n)
1618                                 tmp[n] = in[n] ^ ivec[n];
1619                         AES_encrypt(tmp, out, key);
1620                         memcpy(ivec, out, AES_BLOCK_SIZE);
1621                         len -= AES_BLOCK_SIZE;
1622                         in += AES_BLOCK_SIZE;
1623                         out += AES_BLOCK_SIZE;
1624                 }
1625                 if (len) {
1626                         for(n=0; n < len; ++n)
1627                                 tmp[n] = in[n] ^ ivec[n];
1628                         for(n=len; n < AES_BLOCK_SIZE; ++n)
1629                                 tmp[n] = ivec[n];
1630                         AES_encrypt(tmp, tmp, key);
1631                         memcpy(out, tmp, AES_BLOCK_SIZE);
1632                         memcpy(ivec, tmp, AES_BLOCK_SIZE);
1633                 }
1634         } else {
1635                 while (len >= AES_BLOCK_SIZE) {
1636                         memcpy(tmp, in, AES_BLOCK_SIZE);
1637                         AES_decrypt(in, out, key);
1638                         for(n=0; n < AES_BLOCK_SIZE; ++n)
1639                                 out[n] ^= ivec[n];
1640                         memcpy(ivec, tmp, AES_BLOCK_SIZE);
1641                         len -= AES_BLOCK_SIZE;
1642                         in += AES_BLOCK_SIZE;
1643                         out += AES_BLOCK_SIZE;
1644                 }
1645                 if (len) {
1646                         memcpy(tmp, in, AES_BLOCK_SIZE);
1647                         AES_decrypt(tmp, tmp, key);
1648                         for(n=0; n < len; ++n)
1649                                 out[n] = tmp[n] ^ ivec[n];
1650                         memcpy(ivec, tmp, AES_BLOCK_SIZE);
1651                 }
1652         }
1653 }