xref: /vim-8.2.3635/src/blowfish.c (revision bbd6afe0)
1 /* vi:set ts=8 sts=4 sw=4:
2  *
3  * VIM - Vi IMproved	by Bram Moolenaar
4  *
5  * Do ":help uganda"  in Vim to read copying and usage conditions.
6  * Do ":help credits" in Vim to see a list of people who contributed.
7  * See README.txt for an overview of the Vim source code.
8  *
9  * Blowfish encryption for Vim; in Blowfish output feedback mode.
10  * Contributed by Mohsin Ahmed, http://www.cs.albany.edu/~mosh
11  * Based on http://www.schneier.com/blowfish.html by Bruce Schneier.
12  */
13 
14 #include "vim.h"
15 
16 #if defined(FEAT_CRYPT)
17 
18 #define ARRAY_LENGTH(A)      (sizeof(A)/sizeof(A[0]))
19 
20 #define BF_BLOCK    8
21 #define BF_BLOCK_MASK 7
22 #define BF_OFB_LEN  (8*(BF_BLOCK))
23 
24 typedef union {
25     UINT32_T ul[2];
26     char_u   uc[8];
27 } block8;
28 
29 #if defined(WIN3264) || defined(DOS32)
30   /* MS-Windows is always little endian */
31 #else
32 # ifdef HAVE_CONFIG_H
33    /* in configure.in AC_C_BIGENDIAN() defines WORDS_BIGENDIAN when needed */
34 # else
35    error!
36    Please change this code to define WORDS_BIGENDIAN for big-endian machines.
37 # endif
38 #endif
39 
40 static void bf_e_block __ARGS((UINT32_T *p_xl, UINT32_T *p_xr));
41 static void bf_e_cblock __ARGS((char_u *block));
42 static int bf_check_tables __ARGS((UINT32_T ipa[18], UINT32_T sbi[4][256], UINT32_T val));
43 static int bf_self_test __ARGS((void));
44 
45 /* Blowfish code */
46 static UINT32_T pax[18];
47 static UINT32_T ipa[18] = {
48     0x243f6a88u, 0x85a308d3u, 0x13198a2eu,
49     0x03707344u, 0xa4093822u, 0x299f31d0u,
50     0x082efa98u, 0xec4e6c89u, 0x452821e6u,
51     0x38d01377u, 0xbe5466cfu, 0x34e90c6cu,
52     0xc0ac29b7u, 0xc97c50ddu, 0x3f84d5b5u,
53     0xb5470917u, 0x9216d5d9u, 0x8979fb1bu
54 };
55 
56 static UINT32_T sbx[4][256];
57 static UINT32_T sbi[4][256] = {
58    {0xd1310ba6u, 0x98dfb5acu, 0x2ffd72dbu, 0xd01adfb7u,
59     0xb8e1afedu, 0x6a267e96u, 0xba7c9045u, 0xf12c7f99u,
60     0x24a19947u, 0xb3916cf7u, 0x0801f2e2u, 0x858efc16u,
61     0x636920d8u, 0x71574e69u, 0xa458fea3u, 0xf4933d7eu,
62     0x0d95748fu, 0x728eb658u, 0x718bcd58u, 0x82154aeeu,
63     0x7b54a41du, 0xc25a59b5u, 0x9c30d539u, 0x2af26013u,
64     0xc5d1b023u, 0x286085f0u, 0xca417918u, 0xb8db38efu,
65     0x8e79dcb0u, 0x603a180eu, 0x6c9e0e8bu, 0xb01e8a3eu,
66     0xd71577c1u, 0xbd314b27u, 0x78af2fdau, 0x55605c60u,
67     0xe65525f3u, 0xaa55ab94u, 0x57489862u, 0x63e81440u,
68     0x55ca396au, 0x2aab10b6u, 0xb4cc5c34u, 0x1141e8ceu,
69     0xa15486afu, 0x7c72e993u, 0xb3ee1411u, 0x636fbc2au,
70     0x2ba9c55du, 0x741831f6u, 0xce5c3e16u, 0x9b87931eu,
71     0xafd6ba33u, 0x6c24cf5cu, 0x7a325381u, 0x28958677u,
72     0x3b8f4898u, 0x6b4bb9afu, 0xc4bfe81bu, 0x66282193u,
73     0x61d809ccu, 0xfb21a991u, 0x487cac60u, 0x5dec8032u,
74     0xef845d5du, 0xe98575b1u, 0xdc262302u, 0xeb651b88u,
75     0x23893e81u, 0xd396acc5u, 0x0f6d6ff3u, 0x83f44239u,
76     0x2e0b4482u, 0xa4842004u, 0x69c8f04au, 0x9e1f9b5eu,
77     0x21c66842u, 0xf6e96c9au, 0x670c9c61u, 0xabd388f0u,
78     0x6a51a0d2u, 0xd8542f68u, 0x960fa728u, 0xab5133a3u,
79     0x6eef0b6cu, 0x137a3be4u, 0xba3bf050u, 0x7efb2a98u,
80     0xa1f1651du, 0x39af0176u, 0x66ca593eu, 0x82430e88u,
81     0x8cee8619u, 0x456f9fb4u, 0x7d84a5c3u, 0x3b8b5ebeu,
82     0xe06f75d8u, 0x85c12073u, 0x401a449fu, 0x56c16aa6u,
83     0x4ed3aa62u, 0x363f7706u, 0x1bfedf72u, 0x429b023du,
84     0x37d0d724u, 0xd00a1248u, 0xdb0fead3u, 0x49f1c09bu,
85     0x075372c9u, 0x80991b7bu, 0x25d479d8u, 0xf6e8def7u,
86     0xe3fe501au, 0xb6794c3bu, 0x976ce0bdu, 0x04c006bau,
87     0xc1a94fb6u, 0x409f60c4u, 0x5e5c9ec2u, 0x196a2463u,
88     0x68fb6fafu, 0x3e6c53b5u, 0x1339b2ebu, 0x3b52ec6fu,
89     0x6dfc511fu, 0x9b30952cu, 0xcc814544u, 0xaf5ebd09u,
90     0xbee3d004u, 0xde334afdu, 0x660f2807u, 0x192e4bb3u,
91     0xc0cba857u, 0x45c8740fu, 0xd20b5f39u, 0xb9d3fbdbu,
92     0x5579c0bdu, 0x1a60320au, 0xd6a100c6u, 0x402c7279u,
93     0x679f25feu, 0xfb1fa3ccu, 0x8ea5e9f8u, 0xdb3222f8u,
94     0x3c7516dfu, 0xfd616b15u, 0x2f501ec8u, 0xad0552abu,
95     0x323db5fau, 0xfd238760u, 0x53317b48u, 0x3e00df82u,
96     0x9e5c57bbu, 0xca6f8ca0u, 0x1a87562eu, 0xdf1769dbu,
97     0xd542a8f6u, 0x287effc3u, 0xac6732c6u, 0x8c4f5573u,
98     0x695b27b0u, 0xbbca58c8u, 0xe1ffa35du, 0xb8f011a0u,
99     0x10fa3d98u, 0xfd2183b8u, 0x4afcb56cu, 0x2dd1d35bu,
100     0x9a53e479u, 0xb6f84565u, 0xd28e49bcu, 0x4bfb9790u,
101     0xe1ddf2dau, 0xa4cb7e33u, 0x62fb1341u, 0xcee4c6e8u,
102     0xef20cadau, 0x36774c01u, 0xd07e9efeu, 0x2bf11fb4u,
103     0x95dbda4du, 0xae909198u, 0xeaad8e71u, 0x6b93d5a0u,
104     0xd08ed1d0u, 0xafc725e0u, 0x8e3c5b2fu, 0x8e7594b7u,
105     0x8ff6e2fbu, 0xf2122b64u, 0x8888b812u, 0x900df01cu,
106     0x4fad5ea0u, 0x688fc31cu, 0xd1cff191u, 0xb3a8c1adu,
107     0x2f2f2218u, 0xbe0e1777u, 0xea752dfeu, 0x8b021fa1u,
108     0xe5a0cc0fu, 0xb56f74e8u, 0x18acf3d6u, 0xce89e299u,
109     0xb4a84fe0u, 0xfd13e0b7u, 0x7cc43b81u, 0xd2ada8d9u,
110     0x165fa266u, 0x80957705u, 0x93cc7314u, 0x211a1477u,
111     0xe6ad2065u, 0x77b5fa86u, 0xc75442f5u, 0xfb9d35cfu,
112     0xebcdaf0cu, 0x7b3e89a0u, 0xd6411bd3u, 0xae1e7e49u,
113     0x00250e2du, 0x2071b35eu, 0x226800bbu, 0x57b8e0afu,
114     0x2464369bu, 0xf009b91eu, 0x5563911du, 0x59dfa6aau,
115     0x78c14389u, 0xd95a537fu, 0x207d5ba2u, 0x02e5b9c5u,
116     0x83260376u, 0x6295cfa9u, 0x11c81968u, 0x4e734a41u,
117     0xb3472dcau, 0x7b14a94au, 0x1b510052u, 0x9a532915u,
118     0xd60f573fu, 0xbc9bc6e4u, 0x2b60a476u, 0x81e67400u,
119     0x08ba6fb5u, 0x571be91fu, 0xf296ec6bu, 0x2a0dd915u,
120     0xb6636521u, 0xe7b9f9b6u, 0xff34052eu, 0xc5855664u,
121     0x53b02d5du, 0xa99f8fa1u, 0x08ba4799u, 0x6e85076au},
122    {0x4b7a70e9u, 0xb5b32944u, 0xdb75092eu, 0xc4192623u,
123     0xad6ea6b0u, 0x49a7df7du, 0x9cee60b8u, 0x8fedb266u,
124     0xecaa8c71u, 0x699a17ffu, 0x5664526cu, 0xc2b19ee1u,
125     0x193602a5u, 0x75094c29u, 0xa0591340u, 0xe4183a3eu,
126     0x3f54989au, 0x5b429d65u, 0x6b8fe4d6u, 0x99f73fd6u,
127     0xa1d29c07u, 0xefe830f5u, 0x4d2d38e6u, 0xf0255dc1u,
128     0x4cdd2086u, 0x8470eb26u, 0x6382e9c6u, 0x021ecc5eu,
129     0x09686b3fu, 0x3ebaefc9u, 0x3c971814u, 0x6b6a70a1u,
130     0x687f3584u, 0x52a0e286u, 0xb79c5305u, 0xaa500737u,
131     0x3e07841cu, 0x7fdeae5cu, 0x8e7d44ecu, 0x5716f2b8u,
132     0xb03ada37u, 0xf0500c0du, 0xf01c1f04u, 0x0200b3ffu,
133     0xae0cf51au, 0x3cb574b2u, 0x25837a58u, 0xdc0921bdu,
134     0xd19113f9u, 0x7ca92ff6u, 0x94324773u, 0x22f54701u,
135     0x3ae5e581u, 0x37c2dadcu, 0xc8b57634u, 0x9af3dda7u,
136     0xa9446146u, 0x0fd0030eu, 0xecc8c73eu, 0xa4751e41u,
137     0xe238cd99u, 0x3bea0e2fu, 0x3280bba1u, 0x183eb331u,
138     0x4e548b38u, 0x4f6db908u, 0x6f420d03u, 0xf60a04bfu,
139     0x2cb81290u, 0x24977c79u, 0x5679b072u, 0xbcaf89afu,
140     0xde9a771fu, 0xd9930810u, 0xb38bae12u, 0xdccf3f2eu,
141     0x5512721fu, 0x2e6b7124u, 0x501adde6u, 0x9f84cd87u,
142     0x7a584718u, 0x7408da17u, 0xbc9f9abcu, 0xe94b7d8cu,
143     0xec7aec3au, 0xdb851dfau, 0x63094366u, 0xc464c3d2u,
144     0xef1c1847u, 0x3215d908u, 0xdd433b37u, 0x24c2ba16u,
145     0x12a14d43u, 0x2a65c451u, 0x50940002u, 0x133ae4ddu,
146     0x71dff89eu, 0x10314e55u, 0x81ac77d6u, 0x5f11199bu,
147     0x043556f1u, 0xd7a3c76bu, 0x3c11183bu, 0x5924a509u,
148     0xf28fe6edu, 0x97f1fbfau, 0x9ebabf2cu, 0x1e153c6eu,
149     0x86e34570u, 0xeae96fb1u, 0x860e5e0au, 0x5a3e2ab3u,
150     0x771fe71cu, 0x4e3d06fau, 0x2965dcb9u, 0x99e71d0fu,
151     0x803e89d6u, 0x5266c825u, 0x2e4cc978u, 0x9c10b36au,
152     0xc6150ebau, 0x94e2ea78u, 0xa5fc3c53u, 0x1e0a2df4u,
153     0xf2f74ea7u, 0x361d2b3du, 0x1939260fu, 0x19c27960u,
154     0x5223a708u, 0xf71312b6u, 0xebadfe6eu, 0xeac31f66u,
155     0xe3bc4595u, 0xa67bc883u, 0xb17f37d1u, 0x018cff28u,
156     0xc332ddefu, 0xbe6c5aa5u, 0x65582185u, 0x68ab9802u,
157     0xeecea50fu, 0xdb2f953bu, 0x2aef7dadu, 0x5b6e2f84u,
158     0x1521b628u, 0x29076170u, 0xecdd4775u, 0x619f1510u,
159     0x13cca830u, 0xeb61bd96u, 0x0334fe1eu, 0xaa0363cfu,
160     0xb5735c90u, 0x4c70a239u, 0xd59e9e0bu, 0xcbaade14u,
161     0xeecc86bcu, 0x60622ca7u, 0x9cab5cabu, 0xb2f3846eu,
162     0x648b1eafu, 0x19bdf0cau, 0xa02369b9u, 0x655abb50u,
163     0x40685a32u, 0x3c2ab4b3u, 0x319ee9d5u, 0xc021b8f7u,
164     0x9b540b19u, 0x875fa099u, 0x95f7997eu, 0x623d7da8u,
165     0xf837889au, 0x97e32d77u, 0x11ed935fu, 0x16681281u,
166     0x0e358829u, 0xc7e61fd6u, 0x96dedfa1u, 0x7858ba99u,
167     0x57f584a5u, 0x1b227263u, 0x9b83c3ffu, 0x1ac24696u,
168     0xcdb30aebu, 0x532e3054u, 0x8fd948e4u, 0x6dbc3128u,
169     0x58ebf2efu, 0x34c6ffeau, 0xfe28ed61u, 0xee7c3c73u,
170     0x5d4a14d9u, 0xe864b7e3u, 0x42105d14u, 0x203e13e0u,
171     0x45eee2b6u, 0xa3aaabeau, 0xdb6c4f15u, 0xfacb4fd0u,
172     0xc742f442u, 0xef6abbb5u, 0x654f3b1du, 0x41cd2105u,
173     0xd81e799eu, 0x86854dc7u, 0xe44b476au, 0x3d816250u,
174     0xcf62a1f2u, 0x5b8d2646u, 0xfc8883a0u, 0xc1c7b6a3u,
175     0x7f1524c3u, 0x69cb7492u, 0x47848a0bu, 0x5692b285u,
176     0x095bbf00u, 0xad19489du, 0x1462b174u, 0x23820e00u,
177     0x58428d2au, 0x0c55f5eau, 0x1dadf43eu, 0x233f7061u,
178     0x3372f092u, 0x8d937e41u, 0xd65fecf1u, 0x6c223bdbu,
179     0x7cde3759u, 0xcbee7460u, 0x4085f2a7u, 0xce77326eu,
180     0xa6078084u, 0x19f8509eu, 0xe8efd855u, 0x61d99735u,
181     0xa969a7aau, 0xc50c06c2u, 0x5a04abfcu, 0x800bcadcu,
182     0x9e447a2eu, 0xc3453484u, 0xfdd56705u, 0x0e1e9ec9u,
183     0xdb73dbd3u, 0x105588cdu, 0x675fda79u, 0xe3674340u,
184     0xc5c43465u, 0x713e38d8u, 0x3d28f89eu, 0xf16dff20u,
185     0x153e21e7u, 0x8fb03d4au, 0xe6e39f2bu, 0xdb83adf7u},
186    {0xe93d5a68u, 0x948140f7u, 0xf64c261cu, 0x94692934u,
187     0x411520f7u, 0x7602d4f7u, 0xbcf46b2eu, 0xd4a20068u,
188     0xd4082471u, 0x3320f46au, 0x43b7d4b7u, 0x500061afu,
189     0x1e39f62eu, 0x97244546u, 0x14214f74u, 0xbf8b8840u,
190     0x4d95fc1du, 0x96b591afu, 0x70f4ddd3u, 0x66a02f45u,
191     0xbfbc09ecu, 0x03bd9785u, 0x7fac6dd0u, 0x31cb8504u,
192     0x96eb27b3u, 0x55fd3941u, 0xda2547e6u, 0xabca0a9au,
193     0x28507825u, 0x530429f4u, 0x0a2c86dau, 0xe9b66dfbu,
194     0x68dc1462u, 0xd7486900u, 0x680ec0a4u, 0x27a18deeu,
195     0x4f3ffea2u, 0xe887ad8cu, 0xb58ce006u, 0x7af4d6b6u,
196     0xaace1e7cu, 0xd3375fecu, 0xce78a399u, 0x406b2a42u,
197     0x20fe9e35u, 0xd9f385b9u, 0xee39d7abu, 0x3b124e8bu,
198     0x1dc9faf7u, 0x4b6d1856u, 0x26a36631u, 0xeae397b2u,
199     0x3a6efa74u, 0xdd5b4332u, 0x6841e7f7u, 0xca7820fbu,
200     0xfb0af54eu, 0xd8feb397u, 0x454056acu, 0xba489527u,
201     0x55533a3au, 0x20838d87u, 0xfe6ba9b7u, 0xd096954bu,
202     0x55a867bcu, 0xa1159a58u, 0xcca92963u, 0x99e1db33u,
203     0xa62a4a56u, 0x3f3125f9u, 0x5ef47e1cu, 0x9029317cu,
204     0xfdf8e802u, 0x04272f70u, 0x80bb155cu, 0x05282ce3u,
205     0x95c11548u, 0xe4c66d22u, 0x48c1133fu, 0xc70f86dcu,
206     0x07f9c9eeu, 0x41041f0fu, 0x404779a4u, 0x5d886e17u,
207     0x325f51ebu, 0xd59bc0d1u, 0xf2bcc18fu, 0x41113564u,
208     0x257b7834u, 0x602a9c60u, 0xdff8e8a3u, 0x1f636c1bu,
209     0x0e12b4c2u, 0x02e1329eu, 0xaf664fd1u, 0xcad18115u,
210     0x6b2395e0u, 0x333e92e1u, 0x3b240b62u, 0xeebeb922u,
211     0x85b2a20eu, 0xe6ba0d99u, 0xde720c8cu, 0x2da2f728u,
212     0xd0127845u, 0x95b794fdu, 0x647d0862u, 0xe7ccf5f0u,
213     0x5449a36fu, 0x877d48fau, 0xc39dfd27u, 0xf33e8d1eu,
214     0x0a476341u, 0x992eff74u, 0x3a6f6eabu, 0xf4f8fd37u,
215     0xa812dc60u, 0xa1ebddf8u, 0x991be14cu, 0xdb6e6b0du,
216     0xc67b5510u, 0x6d672c37u, 0x2765d43bu, 0xdcd0e804u,
217     0xf1290dc7u, 0xcc00ffa3u, 0xb5390f92u, 0x690fed0bu,
218     0x667b9ffbu, 0xcedb7d9cu, 0xa091cf0bu, 0xd9155ea3u,
219     0xbb132f88u, 0x515bad24u, 0x7b9479bfu, 0x763bd6ebu,
220     0x37392eb3u, 0xcc115979u, 0x8026e297u, 0xf42e312du,
221     0x6842ada7u, 0xc66a2b3bu, 0x12754cccu, 0x782ef11cu,
222     0x6a124237u, 0xb79251e7u, 0x06a1bbe6u, 0x4bfb6350u,
223     0x1a6b1018u, 0x11caedfau, 0x3d25bdd8u, 0xe2e1c3c9u,
224     0x44421659u, 0x0a121386u, 0xd90cec6eu, 0xd5abea2au,
225     0x64af674eu, 0xda86a85fu, 0xbebfe988u, 0x64e4c3feu,
226     0x9dbc8057u, 0xf0f7c086u, 0x60787bf8u, 0x6003604du,
227     0xd1fd8346u, 0xf6381fb0u, 0x7745ae04u, 0xd736fcccu,
228     0x83426b33u, 0xf01eab71u, 0xb0804187u, 0x3c005e5fu,
229     0x77a057beu, 0xbde8ae24u, 0x55464299u, 0xbf582e61u,
230     0x4e58f48fu, 0xf2ddfda2u, 0xf474ef38u, 0x8789bdc2u,
231     0x5366f9c3u, 0xc8b38e74u, 0xb475f255u, 0x46fcd9b9u,
232     0x7aeb2661u, 0x8b1ddf84u, 0x846a0e79u, 0x915f95e2u,
233     0x466e598eu, 0x20b45770u, 0x8cd55591u, 0xc902de4cu,
234     0xb90bace1u, 0xbb8205d0u, 0x11a86248u, 0x7574a99eu,
235     0xb77f19b6u, 0xe0a9dc09u, 0x662d09a1u, 0xc4324633u,
236     0xe85a1f02u, 0x09f0be8cu, 0x4a99a025u, 0x1d6efe10u,
237     0x1ab93d1du, 0x0ba5a4dfu, 0xa186f20fu, 0x2868f169u,
238     0xdcb7da83u, 0x573906feu, 0xa1e2ce9bu, 0x4fcd7f52u,
239     0x50115e01u, 0xa70683fau, 0xa002b5c4u, 0x0de6d027u,
240     0x9af88c27u, 0x773f8641u, 0xc3604c06u, 0x61a806b5u,
241     0xf0177a28u, 0xc0f586e0u, 0x006058aau, 0x30dc7d62u,
242     0x11e69ed7u, 0x2338ea63u, 0x53c2dd94u, 0xc2c21634u,
243     0xbbcbee56u, 0x90bcb6deu, 0xebfc7da1u, 0xce591d76u,
244     0x6f05e409u, 0x4b7c0188u, 0x39720a3du, 0x7c927c24u,
245     0x86e3725fu, 0x724d9db9u, 0x1ac15bb4u, 0xd39eb8fcu,
246     0xed545578u, 0x08fca5b5u, 0xd83d7cd3u, 0x4dad0fc4u,
247     0x1e50ef5eu, 0xb161e6f8u, 0xa28514d9u, 0x6c51133cu,
248     0x6fd5c7e7u, 0x56e14ec4u, 0x362abfceu, 0xddc6c837u,
249     0xd79a3234u, 0x92638212u, 0x670efa8eu, 0x406000e0u},
250    {0x3a39ce37u, 0xd3faf5cfu, 0xabc27737u, 0x5ac52d1bu,
251     0x5cb0679eu, 0x4fa33742u, 0xd3822740u, 0x99bc9bbeu,
252     0xd5118e9du, 0xbf0f7315u, 0xd62d1c7eu, 0xc700c47bu,
253     0xb78c1b6bu, 0x21a19045u, 0xb26eb1beu, 0x6a366eb4u,
254     0x5748ab2fu, 0xbc946e79u, 0xc6a376d2u, 0x6549c2c8u,
255     0x530ff8eeu, 0x468dde7du, 0xd5730a1du, 0x4cd04dc6u,
256     0x2939bbdbu, 0xa9ba4650u, 0xac9526e8u, 0xbe5ee304u,
257     0xa1fad5f0u, 0x6a2d519au, 0x63ef8ce2u, 0x9a86ee22u,
258     0xc089c2b8u, 0x43242ef6u, 0xa51e03aau, 0x9cf2d0a4u,
259     0x83c061bau, 0x9be96a4du, 0x8fe51550u, 0xba645bd6u,
260     0x2826a2f9u, 0xa73a3ae1u, 0x4ba99586u, 0xef5562e9u,
261     0xc72fefd3u, 0xf752f7dau, 0x3f046f69u, 0x77fa0a59u,
262     0x80e4a915u, 0x87b08601u, 0x9b09e6adu, 0x3b3ee593u,
263     0xe990fd5au, 0x9e34d797u, 0x2cf0b7d9u, 0x022b8b51u,
264     0x96d5ac3au, 0x017da67du, 0xd1cf3ed6u, 0x7c7d2d28u,
265     0x1f9f25cfu, 0xadf2b89bu, 0x5ad6b472u, 0x5a88f54cu,
266     0xe029ac71u, 0xe019a5e6u, 0x47b0acfdu, 0xed93fa9bu,
267     0xe8d3c48du, 0x283b57ccu, 0xf8d56629u, 0x79132e28u,
268     0x785f0191u, 0xed756055u, 0xf7960e44u, 0xe3d35e8cu,
269     0x15056dd4u, 0x88f46dbau, 0x03a16125u, 0x0564f0bdu,
270     0xc3eb9e15u, 0x3c9057a2u, 0x97271aecu, 0xa93a072au,
271     0x1b3f6d9bu, 0x1e6321f5u, 0xf59c66fbu, 0x26dcf319u,
272     0x7533d928u, 0xb155fdf5u, 0x03563482u, 0x8aba3cbbu,
273     0x28517711u, 0xc20ad9f8u, 0xabcc5167u, 0xccad925fu,
274     0x4de81751u, 0x3830dc8eu, 0x379d5862u, 0x9320f991u,
275     0xea7a90c2u, 0xfb3e7bceu, 0x5121ce64u, 0x774fbe32u,
276     0xa8b6e37eu, 0xc3293d46u, 0x48de5369u, 0x6413e680u,
277     0xa2ae0810u, 0xdd6db224u, 0x69852dfdu, 0x09072166u,
278     0xb39a460au, 0x6445c0ddu, 0x586cdecfu, 0x1c20c8aeu,
279     0x5bbef7ddu, 0x1b588d40u, 0xccd2017fu, 0x6bb4e3bbu,
280     0xdda26a7eu, 0x3a59ff45u, 0x3e350a44u, 0xbcb4cdd5u,
281     0x72eacea8u, 0xfa6484bbu, 0x8d6612aeu, 0xbf3c6f47u,
282     0xd29be463u, 0x542f5d9eu, 0xaec2771bu, 0xf64e6370u,
283     0x740e0d8du, 0xe75b1357u, 0xf8721671u, 0xaf537d5du,
284     0x4040cb08u, 0x4eb4e2ccu, 0x34d2466au, 0x0115af84u,
285     0xe1b00428u, 0x95983a1du, 0x06b89fb4u, 0xce6ea048u,
286     0x6f3f3b82u, 0x3520ab82u, 0x011a1d4bu, 0x277227f8u,
287     0x611560b1u, 0xe7933fdcu, 0xbb3a792bu, 0x344525bdu,
288     0xa08839e1u, 0x51ce794bu, 0x2f32c9b7u, 0xa01fbac9u,
289     0xe01cc87eu, 0xbcc7d1f6u, 0xcf0111c3u, 0xa1e8aac7u,
290     0x1a908749u, 0xd44fbd9au, 0xd0dadecbu, 0xd50ada38u,
291     0x0339c32au, 0xc6913667u, 0x8df9317cu, 0xe0b12b4fu,
292     0xf79e59b7u, 0x43f5bb3au, 0xf2d519ffu, 0x27d9459cu,
293     0xbf97222cu, 0x15e6fc2au, 0x0f91fc71u, 0x9b941525u,
294     0xfae59361u, 0xceb69cebu, 0xc2a86459u, 0x12baa8d1u,
295     0xb6c1075eu, 0xe3056a0cu, 0x10d25065u, 0xcb03a442u,
296     0xe0ec6e0eu, 0x1698db3bu, 0x4c98a0beu, 0x3278e964u,
297     0x9f1f9532u, 0xe0d392dfu, 0xd3a0342bu, 0x8971f21eu,
298     0x1b0a7441u, 0x4ba3348cu, 0xc5be7120u, 0xc37632d8u,
299     0xdf359f8du, 0x9b992f2eu, 0xe60b6f47u, 0x0fe3f11du,
300     0xe54cda54u, 0x1edad891u, 0xce6279cfu, 0xcd3e7e6fu,
301     0x1618b166u, 0xfd2c1d05u, 0x848fd2c5u, 0xf6fb2299u,
302     0xf523f357u, 0xa6327623u, 0x93a83531u, 0x56cccd02u,
303     0xacf08162u, 0x5a75ebb5u, 0x6e163697u, 0x88d273ccu,
304     0xde966292u, 0x81b949d0u, 0x4c50901bu, 0x71c65614u,
305     0xe6c6c7bdu, 0x327a140au, 0x45e1d006u, 0xc3f27b9au,
306     0xc9aa53fdu, 0x62a80f00u, 0xbb25bfe2u, 0x35bdd2f6u,
307     0x71126905u, 0xb2040222u, 0xb6cbcf7cu, 0xcd769c2bu,
308     0x53113ec0u, 0x1640e3d3u, 0x38abbd60u, 0x2547adf0u,
309     0xba38209cu, 0xf746ce76u, 0x77afa1c5u, 0x20756060u,
310     0x85cbfe4eu, 0x8ae88dd8u, 0x7aaaf9b0u, 0x4cf9aa7eu,
311     0x1948c25cu, 0x02fb8a8cu, 0x01c36ae4u, 0xd6ebe1f9u,
312     0x90d4f869u, 0xa65cdea0u, 0x3f09252du, 0xc208e69fu,
313     0xb74e6132u, 0xce77e25bu, 0x578fdfe3u, 0x3ac372e6u
314  }
315 };
316 
317 
318 #define F1(i) \
319     xl ^= pax[i]; \
320     xr ^= ((sbx[0][xl >> 24] + \
321     sbx[1][(xl & 0xFF0000) >> 16]) ^ \
322     sbx[2][(xl & 0xFF00) >> 8]) + \
323     sbx[3][xl & 0xFF];
324 
325 #define F2(i) \
326     xr ^= pax[i]; \
327     xl ^= ((sbx[0][xr >> 24] + \
328     sbx[1][(xr & 0xFF0000) >> 16]) ^ \
329     sbx[2][(xr & 0xFF00) >> 8]) + \
330     sbx[3][xr & 0xFF];
331 
332 
333     static void
334 bf_e_block(p_xl, p_xr)
335     UINT32_T *p_xl;
336     UINT32_T *p_xr;
337 {
338     UINT32_T temp, xl = *p_xl, xr = *p_xr;
339 
340     F1(0) F2(1) F1(2) F2(3) F1(4) F2(5) F1(6) F2(7)
341     F1(8) F2(9) F1(10) F2(11) F1(12) F2(13) F1(14) F2(15)
342     xl ^= pax[16];
343     xr ^= pax[17];
344     temp = xl;
345     xl = xr;
346     xr = temp;
347     *p_xl = xl;
348     *p_xr = xr;
349 }
350 
351 #if 0  /* not used */
352     static void
353 bf_d_block(p_xl, p_xr)
354     UINT32_T *p_xl;
355     UINT32_T *p_xr;
356 {
357     UINT32_T temp, xl = *p_xl, xr = *p_xr;
358     F1(17) F2(16) F1(15) F2(14) F1(13) F2(12) F1(11) F2(10)
359     F1(9) F2(8) F1(7) F2(6) F1(5) F2(4) F1(3) F2(2)
360     xl ^= pax[1];
361     xr ^= pax[0];
362     temp = xl; xl = xr; xr = temp;
363     *p_xl = xl; *p_xr = xr;
364 }
365 #endif
366 
367 
368 #ifdef WORDS_BIGENDIAN
369 # define htonl2(x) \
370     x = ((((x) &     0xffL) << 24) | (((x) & 0xff00L)     <<  8) | \
371 	 (((x) & 0xff0000L) >>  8) | (((x) & 0xff000000L) >> 24))
372 #else
373 # define htonl2(x)
374 #endif
375 
376     static void
377 bf_e_cblock(block)
378     char_u *block;
379 {
380     block8	bk;
381 
382     memcpy(bk.uc, block, 8);
383     htonl2(bk.ul[0]);
384     htonl2(bk.ul[1]);
385     bf_e_block(&bk.ul[0], &bk.ul[1]);
386     htonl2(bk.ul[0]);
387     htonl2(bk.ul[1]);
388     memcpy(block, bk.uc, 8);
389 }
390 
391 #if 0  /* not used */
392     void
393 bf_d_cblock(block)
394     char_u *block;
395 {
396     block8 bk;
397     memcpy(bk.uc, block, 8);
398     htonl2(bk.ul[0]); htonl2(bk.ul[1]);
399     bf_d_block(&bk.ul[0], &bk.ul[1]);
400     htonl2(bk.ul[0]); htonl2(bk.ul[1]);
401     memcpy(block, bk.uc, 8);
402 }
403 #endif
404 
405     void
406 bf_key_init(password)
407     char_u *password;
408 {
409     int      i, j, keypos = 0;
410     UINT32_T val, data_l, data_r;
411     char_u   *key;
412     int      keylen;
413 
414     key = sha256_key(password);
415     keylen = (int)STRLEN(key);
416     for (i = 0; i < 256; ++i)
417     {
418 	sbx[0][i] = sbi[0][i];
419 	sbx[1][i] = sbi[1][i];
420 	sbx[2][i] = sbi[2][i];
421 	sbx[3][i] = sbi[3][i];
422     }
423 
424     for (i = 0; i < 18; ++i)
425     {
426 	val = 0;
427 	for (j = 0; j < 4; ++j)
428 	    val = (val << 8) | key[keypos++ % keylen];
429 	pax[i] = ipa[i] ^ val;
430     }
431 
432     data_l = data_r = 0;
433     for (i = 0; i < 18; i += 2)
434     {
435 	bf_e_block(&data_l, &data_r);
436 	pax[i + 0] = data_l;
437 	pax[i + 1] = data_r;
438     }
439 
440     for (i = 0; i < 4; ++i)
441     {
442 	for (j = 0; j < 256; j += 2)
443 	{
444 	    bf_e_block(&data_l, &data_r);
445 	    sbx[i][j + 0] = data_l;
446 	    sbx[i][j + 1] = data_r;
447 	}
448     }
449 }
450 
451 /*
452  * BF Self test for corrupted tables or instructions
453  */
454     static int
455 bf_check_tables(ipa, sbi, val)
456     UINT32_T ipa[18];
457     UINT32_T sbi[4][256];
458     UINT32_T val;
459 {
460     int i, j;
461     UINT32_T c = 0;
462 
463     for (i = 0; i < 18; i++)
464 	c ^= ipa[i];
465     for (i = 0; i < 4; i++)
466 	for (j = 0; j < 256; j++)
467 	    c ^= sbi[i][j];
468     return c == val;
469 }
470 
471 typedef struct {
472     char_u   password[64];
473     char_u   plaintxt[8];
474     char_u   cryptxt[8];
475     char_u   badcryptxt[8]; /* cryptxt when big/little endian is wrong */
476     UINT32_T keysum;
477 } struct_bf_test_data;
478 
479 /*
480  * Assert bf(password, plaintxt) is cryptxt.
481  * Assert csum(pax sbx(password)) is keysum.
482  */
483 static struct_bf_test_data bf_test_data[] = {
484   {
485       "password",
486       "plaintxt",
487       "\x55\xca\x56\x3a\xef\xe1\x9c\x73", /* cryptxt */
488       "\x47\xd9\x67\x49\x91\xc5\x9a\x95", /* badcryptxt */
489       0x5de01bdbu, /* keysum */
490   },
491 };
492 
493 /*
494  * Return FAIL when there is something wrong with blowfish encryption.
495  */
496     static int
497 bf_self_test()
498 {
499     int    i, bn;
500     int    err = 0;
501     block8 bk;
502     UINT32_T ui = 0xffffffffUL;
503 
504     /* We can't simply use sizeof(UINT32_T), it would generate a compiler
505      * warning. */
506     if (ui != 0xffffffffUL || ui + 1 != 0) {
507 	err++;
508 	EMSG(_("E820: sizeof(uint32_t) != 4"));
509     }
510 
511     if (!bf_check_tables(ipa, sbi, 0x6ffa520a))
512 	err++;
513 
514     bn = ARRAY_LENGTH(bf_test_data);
515     for (i = 0; i < bn; i++)
516     {
517 	bf_key_init((char_u *)(bf_test_data[i].password));
518 	if (!bf_check_tables(pax, sbx, bf_test_data[i].keysum))
519 	    err++;
520 
521 	/* Don't modify bf_test_data[i].plaintxt, self test is idempotent. */
522 	memcpy(bk.uc, bf_test_data[i].plaintxt, 8);
523 	bf_e_cblock(bk.uc);
524 	if (memcmp(bk.uc, bf_test_data[i].cryptxt, 8) != 0)
525 	{
526 	    if (err == 0 && memcmp(bk.uc, bf_test_data[i].badcryptxt, 8) == 0)
527 		EMSG(_("E817: Blowfish big/little endian use wrong"));
528 	    err++;
529 	}
530     }
531 
532     return err > 0 ? FAIL : OK;
533 }
534 
535 /* Output feedback mode. */
536 static int randbyte_offset = 0;
537 static int update_offset = 0;
538 static char_u ofb_buffer[BF_OFB_LEN]; /* 64 bytes */
539 
540 /*
541  * Initialize with seed "iv[iv_len]".
542  */
543     void
544 bf_ofb_init(iv, iv_len)
545     char_u *iv;
546     int    iv_len;
547 {
548     int i, mi;
549 
550     randbyte_offset = update_offset = 0;
551     vim_memset(ofb_buffer, 0, BF_OFB_LEN);
552     if (iv_len > 0)
553     {
554 	mi = iv_len > BF_OFB_LEN ? iv_len : BF_OFB_LEN;
555 	for (i = 0; i < mi; i++)
556 	    ofb_buffer[i % BF_OFB_LEN] ^= iv[i % iv_len];
557     }
558 }
559 
560 #define BF_OFB_UPDATE(c) { \
561     ofb_buffer[update_offset] ^= (char_u)c; \
562     if (++update_offset == BF_OFB_LEN) \
563 	update_offset = 0; \
564 }
565 
566 #define BF_RANBYTE(t) { \
567     if ((randbyte_offset & BF_BLOCK_MASK) == 0) \
568 	bf_e_cblock(&ofb_buffer[randbyte_offset]); \
569     t = ofb_buffer[randbyte_offset]; \
570     if (++randbyte_offset == BF_OFB_LEN) \
571 	randbyte_offset = 0; \
572 }
573 
574 /*
575  * Encrypt "from[len]" into "to[len]".
576  * "from" and "to" can be equal to encrypt in place.
577  */
578     void
579 bf_crypt_encode(from, len, to)
580     char_u	*from;
581     size_t	len;
582     char_u	*to;
583 {
584     size_t	i;
585     int		ztemp, t;
586 
587     for (i = 0; i < len; ++i)
588     {
589 	ztemp = from[i];
590 	BF_RANBYTE(t);
591 	BF_OFB_UPDATE(ztemp);
592 	to[i] = t ^ ztemp;
593     }
594 }
595 
596 /*
597  * Decrypt "ptr[len]" in place.
598  */
599     void
600 bf_crypt_decode(ptr, len)
601     char_u	*ptr;
602     long	len;
603 {
604     char_u	*p;
605     int		t;
606 
607     for (p = ptr; p < ptr + len; ++p)
608     {
609 	BF_RANBYTE(t);
610 	*p ^= t;
611 	BF_OFB_UPDATE(*p);
612     }
613 }
614 
615 /*
616  * Initialize the encryption keys and the random header according to
617  * the given password.
618  */
619     void
620 bf_crypt_init_keys(passwd)
621     char_u *passwd;		/* password string with which to modify keys */
622 {
623     char_u *p;
624 
625     for (p = passwd; *p != NUL; ++p)
626     {
627 	BF_OFB_UPDATE(*p);
628     }
629 }
630 
631 /*
632  * Run a test to check if the encryption works as expected.
633  * Give an error and return FAIL when not.
634  */
635     int
636 blowfish_self_test()
637 {
638     if (sha256_self_test() == FAIL)
639     {
640 	EMSG(_("E818: sha256 test failed"));
641 	return FAIL;
642     }
643     if (bf_self_test() == FAIL)
644     {
645 	EMSG(_("E819: Blowfish test failed"));
646 	return FAIL;
647     }
648     return OK;
649 }
650 
651 #endif /* FEAT_CRYPT */
652