aes 0.9.4

Pure Rust implementation of the Advanced Encryption Standard (a.k.a. Rijndael)
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100

//! Low-level "hazmat" AES functions: ARMv8 Cryptography Extensions support.
//!
//! Note: this isn't actually used in the `Aes128`/`Aes192`/`Aes256`
//! implementations in this crate, but instead provides raw accelerated
//! access to the AES round function gated under the `hazmat` crate feature.
use super::utils::{load_block, store_block};
use crate::hazmat::{Block, Block8};
use core::arch::aarch64::*;

/// AES cipher (encrypt) round function.
#[target_feature(enable = "aes")]
pub(crate) fn cipher_round(block: &mut Block, round_key: &Block) {
    let mut b = load_block(block);
    let k = load_block(round_key);

    // AES single round encryption (all-zero round key, deferred until the end)
    b = vaeseq_u8(b, vdupq_n_u8(0));

    // AES mix columns (the `vaeseq_u8` instruction otherwise omits this step)
    b = vaesmcq_u8(b);

    // AES add round key (bitwise XOR)
    b = veorq_u8(b, k);

    store_block(block, b);
}

/// AES cipher (encrypt) round function: parallel version.
#[target_feature(enable = "aes")]
pub(crate) fn cipher_round_par(blocks: &mut Block8, round_keys: &Block8) {
    for i in 0..8 {
        let mut b = load_block(&blocks[i]);

        // AES single round encryption
        b = vaeseq_u8(b, vdupq_n_u8(0));

        // AES mix columns
        b = vaesmcq_u8(b);

        // AES add round key (bitwise XOR)
        let rk = load_block(&round_keys[i]);
        b = veorq_u8(b, rk);

        store_block(&mut blocks[i], b);
    }
}

/// AES equivalent inverse cipher (decrypt) round function.
#[target_feature(enable = "aes")]
pub(crate) fn equiv_inv_cipher_round(block: &mut Block, round_key: &Block) {
    let mut b = load_block(block);
    let k = load_block(round_key);

    // AES single round decryption (all-zero round key, deferred until the end)
    b = vaesdq_u8(b, vdupq_n_u8(0));

    // AES inverse mix columns (the `vaesdq_u8` instruction otherwise omits this step)
    b = vaesimcq_u8(b);

    // AES add round key (bitwise XOR)
    b = veorq_u8(b, k);

    store_block(block, b);
}

/// AES equivalent inverse cipher (decrypt) round function: parallel version.
#[target_feature(enable = "aes")]
pub(crate) fn equiv_inv_cipher_round_par(blocks: &mut Block8, round_keys: &Block8) {
    for i in 0..8 {
        let mut b = load_block(&blocks[i]);

        // AES single round decryption (all-zero round key, deferred until the end)
        b = vaesdq_u8(b, vdupq_n_u8(0));

        // AES inverse mix columns (the `vaesdq_u8` instruction otherwise omits this step)
        b = vaesimcq_u8(b);

        // AES add round key (bitwise XOR)
        let rk = load_block(&round_keys[i]);
        b = veorq_u8(b, rk);

        store_block(&mut blocks[i], b);
    }
}

/// AES mix columns function.
#[target_feature(enable = "aes")]
pub(crate) fn mix_columns(block: &mut Block) {
    let b = load_block(block);
    let out = vaesmcq_u8(b);
    store_block(block, out);
}

/// AES inverse mix columns function.
#[target_feature(enable = "aes")]
pub(crate) fn inv_mix_columns(block: &mut Block) {
    let b = load_block(block);
    let out = vaesimcq_u8(b);
    store_block(block, out);
}