Browse code

scan inside encrypted PDF streams (bb #2794).

TODO: scan encrypted PDF strings, and PDF1.5/1.6 CryptFilters.

Török Edvin authored on 2011/12/14 22:43:14
Showing 5 changed files
... ...
@@ -373,7 +373,9 @@ libclamav_la_SOURCES = \
373 373
 	iso9660.c \
374 374
 	iso9660.h \
375 375
 	arc4.c \
376
-	arc4.h
376
+	arc4.h \
377
+	rijndael.c \
378
+	rijndael.h
377 379
 
378 380
 if !LINK_TOMMATH
379 381
 libclamav_la_SOURCES += bignum.c \
... ...
@@ -159,7 +159,7 @@ am__libclamav_la_SOURCES_DIST = clamav.h matcher-ac.c matcher-ac.h \
159 159
 	bytecode_hooks.h cache.c cache.h bytecode_detect.c \
160 160
 	bytecode_detect.h builtin_bytecodes.h events.c events.h swf.c \
161 161
 	swf.h jpeg.c jpeg.h png.c png.h iso9660.c iso9660.h arc4.c \
162
-	arc4.h bignum.c bignum_class.h
162
+	arc4.h rijndael.c rijndael.h bignum.c bignum_class.h
163 163
 @LINK_TOMMATH_FALSE@am__objects_1 = libclamav_la-bignum.lo
164 164
 am_libclamav_la_OBJECTS = libclamav_la-matcher-ac.lo \
165 165
 	libclamav_la-matcher-bm.lo libclamav_la-matcher-hash.lo \
... ...
@@ -212,7 +212,8 @@ am_libclamav_la_OBJECTS = libclamav_la-matcher-ac.lo \
212 212
 	libclamav_la-bytecode_api_decl.lo libclamav_la-cache.lo \
213 213
 	libclamav_la-bytecode_detect.lo libclamav_la-events.lo \
214 214
 	libclamav_la-swf.lo libclamav_la-jpeg.lo libclamav_la-png.lo \
215
-	libclamav_la-iso9660.lo libclamav_la-arc4.lo $(am__objects_1)
215
+	libclamav_la-iso9660.lo libclamav_la-arc4.lo \
216
+	libclamav_la-rijndael.lo $(am__objects_1)
216 217
 libclamav_la_OBJECTS = $(am_libclamav_la_OBJECTS)
217 218
 AM_V_lt = $(am__v_lt_$(V))
218 219
 am__v_lt_ = $(am__v_lt_$(AM_DEFAULT_VERBOSITY))
... ...
@@ -672,7 +673,7 @@ libclamav_la_SOURCES = clamav.h matcher-ac.c matcher-ac.h matcher-bm.c \
672 672
 	bytecode_hooks.h cache.c cache.h bytecode_detect.c \
673 673
 	bytecode_detect.h builtin_bytecodes.h events.c events.h swf.c \
674 674
 	swf.h jpeg.c jpeg.h png.c png.h iso9660.c iso9660.h arc4.c \
675
-	arc4.h $(am__append_7)
675
+	arc4.h rijndael.c rijndael.h $(am__append_7)
676 676
 noinst_LTLIBRARIES = libclamav_internal_utils.la libclamav_internal_utils_nothreads.la libclamav_nocxx.la
677 677
 COMMON_CLEANFILES = version.h version.h.tmp *.gcda *.gcno
678 678
 @MAINTAINER_MODE_TRUE@BUILT_SOURCES = jsparse/generated/operators.h jsparse/generated/keywords.h jsparse-keywords.gperf
... ...
@@ -874,6 +875,7 @@ distclean-compile:
874 874
 @AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/libclamav_la-rebuildpe.Plo@am__quote@
875 875
 @AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/libclamav_la-regex_list.Plo@am__quote@
876 876
 @AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/libclamav_la-regex_suffix.Plo@am__quote@
877
+@AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/libclamav_la-rijndael.Plo@am__quote@
877 878
 @AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/libclamav_la-rtf.Plo@am__quote@
878 879
 @AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/libclamav_la-scanners.Plo@am__quote@
879 880
 @AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/libclamav_la-sha1.Plo@am__quote@
... ...
@@ -1781,6 +1783,14 @@ libclamav_la-arc4.lo: arc4.c
1781 1781
 @AMDEP_TRUE@@am__fastdepCC_FALSE@	DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@
1782 1782
 @am__fastdepCC_FALSE@	$(LIBTOOL) $(AM_V_lt) --tag=CC $(AM_LIBTOOLFLAGS) $(LIBTOOLFLAGS) --mode=compile $(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(libclamav_la_CFLAGS) $(CFLAGS) -c -o libclamav_la-arc4.lo `test -f 'arc4.c' || echo '$(srcdir)/'`arc4.c
1783 1783
 
1784
+libclamav_la-rijndael.lo: rijndael.c
1785
+@am__fastdepCC_TRUE@	$(AM_V_CC)$(LIBTOOL) $(AM_V_lt) --tag=CC $(AM_LIBTOOLFLAGS) $(LIBTOOLFLAGS) --mode=compile $(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(libclamav_la_CFLAGS) $(CFLAGS) -MT libclamav_la-rijndael.lo -MD -MP -MF $(DEPDIR)/libclamav_la-rijndael.Tpo -c -o libclamav_la-rijndael.lo `test -f 'rijndael.c' || echo '$(srcdir)/'`rijndael.c
1786
+@am__fastdepCC_TRUE@	$(AM_V_at)$(am__mv) $(DEPDIR)/libclamav_la-rijndael.Tpo $(DEPDIR)/libclamav_la-rijndael.Plo
1787
+@am__fastdepCC_FALSE@	$(AM_V_CC) @AM_BACKSLASH@
1788
+@AMDEP_TRUE@@am__fastdepCC_FALSE@	source='rijndael.c' object='libclamav_la-rijndael.lo' libtool=yes @AMDEPBACKSLASH@
1789
+@AMDEP_TRUE@@am__fastdepCC_FALSE@	DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@
1790
+@am__fastdepCC_FALSE@	$(LIBTOOL) $(AM_V_lt) --tag=CC $(AM_LIBTOOLFLAGS) $(LIBTOOLFLAGS) --mode=compile $(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(libclamav_la_CFLAGS) $(CFLAGS) -c -o libclamav_la-rijndael.lo `test -f 'rijndael.c' || echo '$(srcdir)/'`rijndael.c
1791
+
1784 1792
 libclamav_la-bignum.lo: bignum.c
1785 1793
 @am__fastdepCC_TRUE@	$(AM_V_CC)$(LIBTOOL) $(AM_V_lt) --tag=CC $(AM_LIBTOOLFLAGS) $(LIBTOOLFLAGS) --mode=compile $(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(libclamav_la_CFLAGS) $(CFLAGS) -MT libclamav_la-bignum.lo -MD -MP -MF $(DEPDIR)/libclamav_la-bignum.Tpo -c -o libclamav_la-bignum.lo `test -f 'bignum.c' || echo '$(srcdir)/'`bignum.c
1786 1794
 @am__fastdepCC_TRUE@	$(AM_V_at)$(am__mv) $(DEPDIR)/libclamav_la-bignum.Tpo $(DEPDIR)/libclamav_la-bignum.Plo
... ...
@@ -54,6 +54,7 @@ static	char	const	rcsid[] = "$Id: pdf.c,v 1.61 2007/02/12 20:46:09 njh Exp $";
54 54
 #include "bytecode_api.h"
55 55
 #include "md5.h"
56 56
 #include "arc4.h"
57
+#include "rijndael.h"
57 58
 #include "sha256.h"
58 59
 
59 60
 #ifdef	CL_DEBUG
... ...
@@ -88,10 +89,18 @@ static int xrefCheck(const char *xref, const char *eof)
88 88
     return -1;
89 89
 }
90 90
 
91
+enum enc_method {
92
+    ENC_UNKNOWN,
93
+    ENC_NONE,
94
+    ENC_V2,
95
+    ENC_AESV2
96
+};
97
+
91 98
 struct pdf_struct {
92 99
     struct pdf_obj *objs;
93 100
     unsigned nobjs;
94 101
     unsigned flags;
102
+    unsigned enc_method;
95 103
     const char *map;
96 104
     off_t size;
97 105
     off_t offset;
... ...
@@ -558,6 +567,113 @@ static int run_pdf_hooks(struct pdf_struct *pdf, enum pdf_phase phase, int fd,
558 558
     return ret;
559 559
 }
560 560
 
561
+static void aes_decrypt(const unsigned char *in, off_t *length, unsigned char *q, char *key, unsigned key_n)
562
+{
563
+    unsigned long rk[RKLENGTH(256)];
564
+    unsigned char iv[16];
565
+    unsigned len = *length;
566
+    unsigned char pad, i;
567
+
568
+    cli_dbgmsg("aes_decrypt: key length: %d, data length: %d\n", key_n, *length);
569
+    if (key_n > 32) {
570
+	cli_dbgmsg("aes_decrypt: key length is %s!\n", key_n*8);
571
+	return;
572
+    }
573
+    if (len < 32) {
574
+	cli_dbgmsg("aes_decrypt: len is <32: %d\n", len);
575
+	return;
576
+    }
577
+    memcpy(iv, in, 16);
578
+    in += 16;
579
+    len -= 16;
580
+
581
+    int nrounds = rijndaelSetupDecrypt(rk, key, key_n*8);
582
+    while (len >= 16) {
583
+	unsigned i;
584
+	rijndaelDecrypt(rk, nrounds, in, q);
585
+	for (i=0;i<16;i++)
586
+	    q[i] ^= iv[i];
587
+	memcpy(iv, in, 16);
588
+	q += 16;
589
+	in += 16;
590
+	len -= 16;
591
+    }
592
+    pad = q[-1];
593
+    if (pad > 0x10) {
594
+	cli_dbgmsg("aes_decrypt: bad pad: %x\n", pad);
595
+	return;
596
+    }
597
+    len += pad;
598
+    q -= pad;
599
+    for (i=1;i<pad;i++) {
600
+	if (q[i] != pad) {
601
+	    cli_dbgmsg("aes_decrypt: bad pad: %x != %x\n",q[i],pad);
602
+	    return;
603
+	}
604
+    }
605
+    *length -= len;
606
+    cli_dbgmsg("aes_decrypt: length is %d\n", *length);
607
+}
608
+
609
+
610
+static char *decrypt_stream(struct pdf_struct *pdf, uint32_t id, const char *in, off_t *length)
611
+{
612
+    unsigned char *key, *q, result[16];
613
+    unsigned n;
614
+    cli_md5_ctx md5;
615
+    struct arc4_state arc4;
616
+
617
+    if (!length || !*length || !in)
618
+	return NULL;
619
+    n = pdf->keylen + 5;
620
+    if (pdf->enc_method == ENC_AESV2)
621
+	n += 4;
622
+    key = cli_malloc(n);
623
+    if (!key)
624
+	return NULL;
625
+
626
+    memcpy(key, pdf->key, pdf->keylen);
627
+    q = key + pdf->keylen;
628
+    *q++ = id >> 8;
629
+    *q++ = id >> 16;
630
+    *q++ = id >> 24;
631
+    *q++ = id;
632
+    *q++ = 0;
633
+    if (pdf->enc_method == ENC_AESV2)
634
+	memcpy(q, "sAlT", 4);
635
+    cli_md5_init(&md5);
636
+    cli_md5_update(&md5, key, n);
637
+    cli_md5_final(result, &md5);
638
+    n = pdf->keylen + 5;
639
+    if (n > 16)
640
+	n = 16;
641
+
642
+    q = cli_malloc(*length);
643
+    if (!q)
644
+	return NULL;
645
+
646
+    switch (pdf->enc_method) {
647
+	case ENC_V2:
648
+	    cli_dbgmsg("enc is v2\n");
649
+	    memcpy(q, in, *length);
650
+	    arc4_init(&arc4, result, n);
651
+	    arc4_apply(&arc4, q, *length);
652
+	    break;
653
+	case ENC_AESV2:
654
+	    aes_decrypt(in, length, q, result, n);
655
+	    break;
656
+	case ENC_NONE:
657
+	    cli_dbgmsg("enc is none\n");
658
+	    free(q);
659
+	    return NULL;
660
+	case ENC_UNKNOWN:
661
+	    cli_dbgmsg("enc is unknown\n");
662
+	    free(q);
663
+	    return NULL;
664
+    }
665
+    return q;
666
+}
667
+
561 668
 static int pdf_extract_obj(struct pdf_struct *pdf, struct pdf_obj *obj)
562 669
 {
563 670
     char fullname[NAME_MAX + 1];
... ...
@@ -565,6 +681,7 @@ static int pdf_extract_obj(struct pdf_struct *pdf, struct pdf_obj *obj)
565 565
     off_t sum = 0;
566 566
     int rc = CL_SUCCESS;
567 567
     char *ascii_decoded = NULL;
568
+    char *decrypted = NULL;
568 569
     int dump = 1;
569 570
 
570 571
     /* TODO: call bytecode hook here, allow override dumpability */
... ...
@@ -585,7 +702,7 @@ static int pdf_extract_obj(struct pdf_struct *pdf, struct pdf_obj *obj)
585 585
     }
586 586
     if (!dump)
587 587
 	return CL_CLEAN;
588
-    cli_dbgmsg("cli_pdf: dumping obj %u %u\n", obj->id>>8, obj->id);
588
+    cli_dbgmsg("cli_pdf: dumping obj %u %u\n", obj->id>>8, obj->id&0xff);
589 589
     snprintf(fullname, sizeof(fullname), "%s"PATHSEP"pdf%02u", pdf->dir, pdf->files++);
590 590
     fout = open(fullname,O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_BINARY, 0600);
591 591
     if (fout < 0) {
... ...
@@ -648,6 +765,15 @@ static int pdf_extract_obj(struct pdf_struct *pdf, struct pdf_obj *obj)
648 648
 	    if (!length)
649 649
 		length = size;
650 650
 
651
+	    flate_in = start + p_stream;
652
+	    if (pdf->flags & (1 << DECRYPTABLE_PDF)) {
653
+		decrypted = decrypt_stream(pdf, obj->id, flate_in, &length);
654
+		if (!decrypted)
655
+		    cli_warnmsg("cli_pdf:decrypt_stream: malloc failed\n");
656
+		else
657
+		    flate_in = decrypted;
658
+	    }
659
+
651 660
 	    if (obj->flags & (1 << OBJ_FILTER_AH)) {
652 661
 		ascii_decoded = cli_malloc(length/2 + 1);
653 662
 		if (!ascii_decoded) {
... ...
@@ -655,7 +781,7 @@ static int pdf_extract_obj(struct pdf_struct *pdf, struct pdf_obj *obj)
655 655
 		    rc = CL_EMEM;
656 656
 		    break;
657 657
 		}
658
-		ascii_decoded_size = asciihexdecode(start + p_stream,
658
+		ascii_decoded_size = asciihexdecode(flate_in,
659 659
 						    length,
660 660
 						    ascii_decoded);
661 661
 	    } else if (obj->flags & (1 << OBJ_FILTER_A85)) {
... ...
@@ -665,7 +791,7 @@ static int pdf_extract_obj(struct pdf_struct *pdf, struct pdf_obj *obj)
665 665
 		    rc = CL_EMEM;
666 666
 		    break;
667 667
 		}
668
-		ascii_decoded_size = ascii85decode(start+p_stream,
668
+		ascii_decoded_size = ascii85decode(flate_in,
669 669
 						   length,
670 670
 						   (unsigned char*)ascii_decoded);
671 671
 	    }
... ...
@@ -682,7 +808,8 @@ static int pdf_extract_obj(struct pdf_struct *pdf, struct pdf_obj *obj)
682 682
 	    /* either direct or ascii-decoded input */
683 683
 	    if (!ascii_decoded)
684 684
 		ascii_decoded_size = length;
685
-	    flate_in = ascii_decoded ? ascii_decoded : start+p_stream;
685
+	    else
686
+		flate_in = ascii_decoded;
686 687
 
687 688
 	    if (obj->flags & (1 << OBJ_FILTER_FLATE)) {
688 689
 		cli_dbgmsg("cli_pdf: deflate len %ld (orig %ld)\n", ascii_decoded_size, (long)orig_length);
... ...
@@ -761,6 +888,7 @@ static int pdf_extract_obj(struct pdf_struct *pdf, struct pdf_obj *obj)
761 761
     }
762 762
     close(fout);
763 763
     free(ascii_decoded);
764
+    free(decrypted);
764 765
     if (!pdf->ctx->engine->keeptmp)
765 766
 	if (cli_unlink(fullname) && rc != CL_VIRUS)
766 767
 	    rc = CL_EUNLINK;
... ...
@@ -1191,6 +1319,31 @@ static char *pdf_readstring(const char *q0, int len, const char *key, unsigned *
1191 1191
     return NULL;
1192 1192
 }
1193 1193
 
1194
+static char *pdf_readval(const char *q, int len, const char *key)
1195
+{
1196
+    const char *end;
1197
+    char *s;
1198
+
1199
+    q = pdf_getdict(q, &len, key);
1200
+    if (!q || len <= 0)
1201
+	return NULL;
1202
+    while (len > 0 && *q && *q == ' ') { q++; len--; }
1203
+    if (*q != '/')
1204
+	return NULL;
1205
+    q++;
1206
+    len--;
1207
+    end = q;
1208
+    while (len > 0 && *end && !(*end == '/' || (len > 1 && end[0] == '>' && end[1] == '>'))) {
1209
+	end++; len--;
1210
+    }
1211
+    s = cli_malloc(end - q + 1);
1212
+    if (!s)
1213
+	return NULL;
1214
+    memcpy(s, q, end-q);
1215
+    s[end-q] = '\0';
1216
+    return s;
1217
+}
1218
+
1194 1219
 static int pdf_readint(const char *q0, int len, const char *key)
1195 1220
 {
1196 1221
     const char *q  = pdf_getdict(q0, &len, key);
... ...
@@ -1351,9 +1504,23 @@ static void pdf_handle_enc(struct pdf_struct *pdf)
1351 1351
     len = obj_size(pdf, obj, 1);
1352 1352
     q = pdf->map + obj->start;
1353 1353
 
1354
-    O = U = NULL;
1354
+    O = U =  NULL;
1355 1355
     do {
1356
+	char *CFM = NULL;
1357
+
1356 1358
 	EM = pdf_readbool(q, len, "/EncryptMetadata", 1);
1359
+	CFM = pdf_readval(q, len, "/CFM");
1360
+	pdf->enc_method = ENC_UNKNOWN;
1361
+	if (CFM) {
1362
+	    cli_dbgmsg("CFM: %s\n", CFM);
1363
+	    if (!strncmp(CFM,"V2", 2))
1364
+		pdf->enc_method = ENC_V2;
1365
+	    else if (!strncmp(CFM,"AESV2",5))
1366
+		pdf->enc_method = ENC_AESV2;
1367
+	    else if (!strncmp(CFM,"None",4))
1368
+		pdf->enc_method = ENC_NONE;
1369
+	}
1370
+	free(CFM);
1357 1371
 	P = pdf_readint(q, len, "/P");
1358 1372
 	if (P == ~0u) {
1359 1373
 	    cli_dbgmsg("cli_pdf: invalid P\n");
1360 1374
new file mode 100644
... ...
@@ -0,0 +1,1208 @@
0
+/* public domain code from http://www.efgh.com/software/rijndael.htm */
1
+#define FULL_UNROLL
2
+
3
+#include "rijndael.h"
4
+
5
+typedef unsigned long u32;
6
+typedef unsigned char u8;
7
+
8
+static const u32 Te0[256] =
9
+{
10
+  0xc66363a5U, 0xf87c7c84U, 0xee777799U, 0xf67b7b8dU,
11
+  0xfff2f20dU, 0xd66b6bbdU, 0xde6f6fb1U, 0x91c5c554U,
12
+  0x60303050U, 0x02010103U, 0xce6767a9U, 0x562b2b7dU,
13
+  0xe7fefe19U, 0xb5d7d762U, 0x4dababe6U, 0xec76769aU,
14
+  0x8fcaca45U, 0x1f82829dU, 0x89c9c940U, 0xfa7d7d87U,
15
+  0xeffafa15U, 0xb25959ebU, 0x8e4747c9U, 0xfbf0f00bU,
16
+  0x41adadecU, 0xb3d4d467U, 0x5fa2a2fdU, 0x45afafeaU,
17
+  0x239c9cbfU, 0x53a4a4f7U, 0xe4727296U, 0x9bc0c05bU,
18
+  0x75b7b7c2U, 0xe1fdfd1cU, 0x3d9393aeU, 0x4c26266aU,
19
+  0x6c36365aU, 0x7e3f3f41U, 0xf5f7f702U, 0x83cccc4fU,
20
+  0x6834345cU, 0x51a5a5f4U, 0xd1e5e534U, 0xf9f1f108U,
21
+  0xe2717193U, 0xabd8d873U, 0x62313153U, 0x2a15153fU,
22
+  0x0804040cU, 0x95c7c752U, 0x46232365U, 0x9dc3c35eU,
23
+  0x30181828U, 0x379696a1U, 0x0a05050fU, 0x2f9a9ab5U,
24
+  0x0e070709U, 0x24121236U, 0x1b80809bU, 0xdfe2e23dU,
25
+  0xcdebeb26U, 0x4e272769U, 0x7fb2b2cdU, 0xea75759fU,
26
+  0x1209091bU, 0x1d83839eU, 0x582c2c74U, 0x341a1a2eU,
27
+  0x361b1b2dU, 0xdc6e6eb2U, 0xb45a5aeeU, 0x5ba0a0fbU,
28
+  0xa45252f6U, 0x763b3b4dU, 0xb7d6d661U, 0x7db3b3ceU,
29
+  0x5229297bU, 0xdde3e33eU, 0x5e2f2f71U, 0x13848497U,
30
+  0xa65353f5U, 0xb9d1d168U, 0x00000000U, 0xc1eded2cU,
31
+  0x40202060U, 0xe3fcfc1fU, 0x79b1b1c8U, 0xb65b5bedU,
32
+  0xd46a6abeU, 0x8dcbcb46U, 0x67bebed9U, 0x7239394bU,
33
+  0x944a4adeU, 0x984c4cd4U, 0xb05858e8U, 0x85cfcf4aU,
34
+  0xbbd0d06bU, 0xc5efef2aU, 0x4faaaae5U, 0xedfbfb16U,
35
+  0x864343c5U, 0x9a4d4dd7U, 0x66333355U, 0x11858594U,
36
+  0x8a4545cfU, 0xe9f9f910U, 0x04020206U, 0xfe7f7f81U,
37
+  0xa05050f0U, 0x783c3c44U, 0x259f9fbaU, 0x4ba8a8e3U,
38
+  0xa25151f3U, 0x5da3a3feU, 0x804040c0U, 0x058f8f8aU,
39
+  0x3f9292adU, 0x219d9dbcU, 0x70383848U, 0xf1f5f504U,
40
+  0x63bcbcdfU, 0x77b6b6c1U, 0xafdada75U, 0x42212163U,
41
+  0x20101030U, 0xe5ffff1aU, 0xfdf3f30eU, 0xbfd2d26dU,
42
+  0x81cdcd4cU, 0x180c0c14U, 0x26131335U, 0xc3ecec2fU,
43
+  0xbe5f5fe1U, 0x359797a2U, 0x884444ccU, 0x2e171739U,
44
+  0x93c4c457U, 0x55a7a7f2U, 0xfc7e7e82U, 0x7a3d3d47U,
45
+  0xc86464acU, 0xba5d5de7U, 0x3219192bU, 0xe6737395U,
46
+  0xc06060a0U, 0x19818198U, 0x9e4f4fd1U, 0xa3dcdc7fU,
47
+  0x44222266U, 0x542a2a7eU, 0x3b9090abU, 0x0b888883U,
48
+  0x8c4646caU, 0xc7eeee29U, 0x6bb8b8d3U, 0x2814143cU,
49
+  0xa7dede79U, 0xbc5e5ee2U, 0x160b0b1dU, 0xaddbdb76U,
50
+  0xdbe0e03bU, 0x64323256U, 0x743a3a4eU, 0x140a0a1eU,
51
+  0x924949dbU, 0x0c06060aU, 0x4824246cU, 0xb85c5ce4U,
52
+  0x9fc2c25dU, 0xbdd3d36eU, 0x43acacefU, 0xc46262a6U,
53
+  0x399191a8U, 0x319595a4U, 0xd3e4e437U, 0xf279798bU,
54
+  0xd5e7e732U, 0x8bc8c843U, 0x6e373759U, 0xda6d6db7U,
55
+  0x018d8d8cU, 0xb1d5d564U, 0x9c4e4ed2U, 0x49a9a9e0U,
56
+  0xd86c6cb4U, 0xac5656faU, 0xf3f4f407U, 0xcfeaea25U,
57
+  0xca6565afU, 0xf47a7a8eU, 0x47aeaee9U, 0x10080818U,
58
+  0x6fbabad5U, 0xf0787888U, 0x4a25256fU, 0x5c2e2e72U,
59
+  0x381c1c24U, 0x57a6a6f1U, 0x73b4b4c7U, 0x97c6c651U,
60
+  0xcbe8e823U, 0xa1dddd7cU, 0xe874749cU, 0x3e1f1f21U,
61
+  0x964b4bddU, 0x61bdbddcU, 0x0d8b8b86U, 0x0f8a8a85U,
62
+  0xe0707090U, 0x7c3e3e42U, 0x71b5b5c4U, 0xcc6666aaU,
63
+  0x904848d8U, 0x06030305U, 0xf7f6f601U, 0x1c0e0e12U,
64
+  0xc26161a3U, 0x6a35355fU, 0xae5757f9U, 0x69b9b9d0U,
65
+  0x17868691U, 0x99c1c158U, 0x3a1d1d27U, 0x279e9eb9U,
66
+  0xd9e1e138U, 0xebf8f813U, 0x2b9898b3U, 0x22111133U,
67
+  0xd26969bbU, 0xa9d9d970U, 0x078e8e89U, 0x339494a7U,
68
+  0x2d9b9bb6U, 0x3c1e1e22U, 0x15878792U, 0xc9e9e920U,
69
+  0x87cece49U, 0xaa5555ffU, 0x50282878U, 0xa5dfdf7aU,
70
+  0x038c8c8fU, 0x59a1a1f8U, 0x09898980U, 0x1a0d0d17U,
71
+  0x65bfbfdaU, 0xd7e6e631U, 0x844242c6U, 0xd06868b8U,
72
+  0x824141c3U, 0x299999b0U, 0x5a2d2d77U, 0x1e0f0f11U,
73
+  0x7bb0b0cbU, 0xa85454fcU, 0x6dbbbbd6U, 0x2c16163aU,
74
+};
75
+
76
+static const u32 Te1[256] =
77
+{
78
+  0xa5c66363U, 0x84f87c7cU, 0x99ee7777U, 0x8df67b7bU,
79
+  0x0dfff2f2U, 0xbdd66b6bU, 0xb1de6f6fU, 0x5491c5c5U,
80
+  0x50603030U, 0x03020101U, 0xa9ce6767U, 0x7d562b2bU,
81
+  0x19e7fefeU, 0x62b5d7d7U, 0xe64dababU, 0x9aec7676U,
82
+  0x458fcacaU, 0x9d1f8282U, 0x4089c9c9U, 0x87fa7d7dU,
83
+  0x15effafaU, 0xebb25959U, 0xc98e4747U, 0x0bfbf0f0U,
84
+  0xec41adadU, 0x67b3d4d4U, 0xfd5fa2a2U, 0xea45afafU,
85
+  0xbf239c9cU, 0xf753a4a4U, 0x96e47272U, 0x5b9bc0c0U,
86
+  0xc275b7b7U, 0x1ce1fdfdU, 0xae3d9393U, 0x6a4c2626U,
87
+  0x5a6c3636U, 0x417e3f3fU, 0x02f5f7f7U, 0x4f83ccccU,
88
+  0x5c683434U, 0xf451a5a5U, 0x34d1e5e5U, 0x08f9f1f1U,
89
+  0x93e27171U, 0x73abd8d8U, 0x53623131U, 0x3f2a1515U,
90
+  0x0c080404U, 0x5295c7c7U, 0x65462323U, 0x5e9dc3c3U,
91
+  0x28301818U, 0xa1379696U, 0x0f0a0505U, 0xb52f9a9aU,
92
+  0x090e0707U, 0x36241212U, 0x9b1b8080U, 0x3ddfe2e2U,
93
+  0x26cdebebU, 0x694e2727U, 0xcd7fb2b2U, 0x9fea7575U,
94
+  0x1b120909U, 0x9e1d8383U, 0x74582c2cU, 0x2e341a1aU,
95
+  0x2d361b1bU, 0xb2dc6e6eU, 0xeeb45a5aU, 0xfb5ba0a0U,
96
+  0xf6a45252U, 0x4d763b3bU, 0x61b7d6d6U, 0xce7db3b3U,
97
+  0x7b522929U, 0x3edde3e3U, 0x715e2f2fU, 0x97138484U,
98
+  0xf5a65353U, 0x68b9d1d1U, 0x00000000U, 0x2cc1ededU,
99
+  0x60402020U, 0x1fe3fcfcU, 0xc879b1b1U, 0xedb65b5bU,
100
+  0xbed46a6aU, 0x468dcbcbU, 0xd967bebeU, 0x4b723939U,
101
+  0xde944a4aU, 0xd4984c4cU, 0xe8b05858U, 0x4a85cfcfU,
102
+  0x6bbbd0d0U, 0x2ac5efefU, 0xe54faaaaU, 0x16edfbfbU,
103
+  0xc5864343U, 0xd79a4d4dU, 0x55663333U, 0x94118585U,
104
+  0xcf8a4545U, 0x10e9f9f9U, 0x06040202U, 0x81fe7f7fU,
105
+  0xf0a05050U, 0x44783c3cU, 0xba259f9fU, 0xe34ba8a8U,
106
+  0xf3a25151U, 0xfe5da3a3U, 0xc0804040U, 0x8a058f8fU,
107
+  0xad3f9292U, 0xbc219d9dU, 0x48703838U, 0x04f1f5f5U,
108
+  0xdf63bcbcU, 0xc177b6b6U, 0x75afdadaU, 0x63422121U,
109
+  0x30201010U, 0x1ae5ffffU, 0x0efdf3f3U, 0x6dbfd2d2U,
110
+  0x4c81cdcdU, 0x14180c0cU, 0x35261313U, 0x2fc3ececU,
111
+  0xe1be5f5fU, 0xa2359797U, 0xcc884444U, 0x392e1717U,
112
+  0x5793c4c4U, 0xf255a7a7U, 0x82fc7e7eU, 0x477a3d3dU,
113
+  0xacc86464U, 0xe7ba5d5dU, 0x2b321919U, 0x95e67373U,
114
+  0xa0c06060U, 0x98198181U, 0xd19e4f4fU, 0x7fa3dcdcU,
115
+  0x66442222U, 0x7e542a2aU, 0xab3b9090U, 0x830b8888U,
116
+  0xca8c4646U, 0x29c7eeeeU, 0xd36bb8b8U, 0x3c281414U,
117
+  0x79a7dedeU, 0xe2bc5e5eU, 0x1d160b0bU, 0x76addbdbU,
118
+  0x3bdbe0e0U, 0x56643232U, 0x4e743a3aU, 0x1e140a0aU,
119
+  0xdb924949U, 0x0a0c0606U, 0x6c482424U, 0xe4b85c5cU,
120
+  0x5d9fc2c2U, 0x6ebdd3d3U, 0xef43acacU, 0xa6c46262U,
121
+  0xa8399191U, 0xa4319595U, 0x37d3e4e4U, 0x8bf27979U,
122
+  0x32d5e7e7U, 0x438bc8c8U, 0x596e3737U, 0xb7da6d6dU,
123
+  0x8c018d8dU, 0x64b1d5d5U, 0xd29c4e4eU, 0xe049a9a9U,
124
+  0xb4d86c6cU, 0xfaac5656U, 0x07f3f4f4U, 0x25cfeaeaU,
125
+  0xafca6565U, 0x8ef47a7aU, 0xe947aeaeU, 0x18100808U,
126
+  0xd56fbabaU, 0x88f07878U, 0x6f4a2525U, 0x725c2e2eU,
127
+  0x24381c1cU, 0xf157a6a6U, 0xc773b4b4U, 0x5197c6c6U,
128
+  0x23cbe8e8U, 0x7ca1ddddU, 0x9ce87474U, 0x213e1f1fU,
129
+  0xdd964b4bU, 0xdc61bdbdU, 0x860d8b8bU, 0x850f8a8aU,
130
+  0x90e07070U, 0x427c3e3eU, 0xc471b5b5U, 0xaacc6666U,
131
+  0xd8904848U, 0x05060303U, 0x01f7f6f6U, 0x121c0e0eU,
132
+  0xa3c26161U, 0x5f6a3535U, 0xf9ae5757U, 0xd069b9b9U,
133
+  0x91178686U, 0x5899c1c1U, 0x273a1d1dU, 0xb9279e9eU,
134
+  0x38d9e1e1U, 0x13ebf8f8U, 0xb32b9898U, 0x33221111U,
135
+  0xbbd26969U, 0x70a9d9d9U, 0x89078e8eU, 0xa7339494U,
136
+  0xb62d9b9bU, 0x223c1e1eU, 0x92158787U, 0x20c9e9e9U,
137
+  0x4987ceceU, 0xffaa5555U, 0x78502828U, 0x7aa5dfdfU,
138
+  0x8f038c8cU, 0xf859a1a1U, 0x80098989U, 0x171a0d0dU,
139
+  0xda65bfbfU, 0x31d7e6e6U, 0xc6844242U, 0xb8d06868U,
140
+  0xc3824141U, 0xb0299999U, 0x775a2d2dU, 0x111e0f0fU,
141
+  0xcb7bb0b0U, 0xfca85454U, 0xd66dbbbbU, 0x3a2c1616U,
142
+};
143
+
144
+static const u32 Te2[256] =
145
+{
146
+  0x63a5c663U, 0x7c84f87cU, 0x7799ee77U, 0x7b8df67bU,
147
+  0xf20dfff2U, 0x6bbdd66bU, 0x6fb1de6fU, 0xc55491c5U,
148
+  0x30506030U, 0x01030201U, 0x67a9ce67U, 0x2b7d562bU,
149
+  0xfe19e7feU, 0xd762b5d7U, 0xabe64dabU, 0x769aec76U,
150
+  0xca458fcaU, 0x829d1f82U, 0xc94089c9U, 0x7d87fa7dU,
151
+  0xfa15effaU, 0x59ebb259U, 0x47c98e47U, 0xf00bfbf0U,
152
+  0xadec41adU, 0xd467b3d4U, 0xa2fd5fa2U, 0xafea45afU,
153
+  0x9cbf239cU, 0xa4f753a4U, 0x7296e472U, 0xc05b9bc0U,
154
+  0xb7c275b7U, 0xfd1ce1fdU, 0x93ae3d93U, 0x266a4c26U,
155
+  0x365a6c36U, 0x3f417e3fU, 0xf702f5f7U, 0xcc4f83ccU,
156
+  0x345c6834U, 0xa5f451a5U, 0xe534d1e5U, 0xf108f9f1U,
157
+  0x7193e271U, 0xd873abd8U, 0x31536231U, 0x153f2a15U,
158
+  0x040c0804U, 0xc75295c7U, 0x23654623U, 0xc35e9dc3U,
159
+  0x18283018U, 0x96a13796U, 0x050f0a05U, 0x9ab52f9aU,
160
+  0x07090e07U, 0x12362412U, 0x809b1b80U, 0xe23ddfe2U,
161
+  0xeb26cdebU, 0x27694e27U, 0xb2cd7fb2U, 0x759fea75U,
162
+  0x091b1209U, 0x839e1d83U, 0x2c74582cU, 0x1a2e341aU,
163
+  0x1b2d361bU, 0x6eb2dc6eU, 0x5aeeb45aU, 0xa0fb5ba0U,
164
+  0x52f6a452U, 0x3b4d763bU, 0xd661b7d6U, 0xb3ce7db3U,
165
+  0x297b5229U, 0xe33edde3U, 0x2f715e2fU, 0x84971384U,
166
+  0x53f5a653U, 0xd168b9d1U, 0x00000000U, 0xed2cc1edU,
167
+  0x20604020U, 0xfc1fe3fcU, 0xb1c879b1U, 0x5bedb65bU,
168
+  0x6abed46aU, 0xcb468dcbU, 0xbed967beU, 0x394b7239U,
169
+  0x4ade944aU, 0x4cd4984cU, 0x58e8b058U, 0xcf4a85cfU,
170
+  0xd06bbbd0U, 0xef2ac5efU, 0xaae54faaU, 0xfb16edfbU,
171
+  0x43c58643U, 0x4dd79a4dU, 0x33556633U, 0x85941185U,
172
+  0x45cf8a45U, 0xf910e9f9U, 0x02060402U, 0x7f81fe7fU,
173
+  0x50f0a050U, 0x3c44783cU, 0x9fba259fU, 0xa8e34ba8U,
174
+  0x51f3a251U, 0xa3fe5da3U, 0x40c08040U, 0x8f8a058fU,
175
+  0x92ad3f92U, 0x9dbc219dU, 0x38487038U, 0xf504f1f5U,
176
+  0xbcdf63bcU, 0xb6c177b6U, 0xda75afdaU, 0x21634221U,
177
+  0x10302010U, 0xff1ae5ffU, 0xf30efdf3U, 0xd26dbfd2U,
178
+  0xcd4c81cdU, 0x0c14180cU, 0x13352613U, 0xec2fc3ecU,
179
+  0x5fe1be5fU, 0x97a23597U, 0x44cc8844U, 0x17392e17U,
180
+  0xc45793c4U, 0xa7f255a7U, 0x7e82fc7eU, 0x3d477a3dU,
181
+  0x64acc864U, 0x5de7ba5dU, 0x192b3219U, 0x7395e673U,
182
+  0x60a0c060U, 0x81981981U, 0x4fd19e4fU, 0xdc7fa3dcU,
183
+  0x22664422U, 0x2a7e542aU, 0x90ab3b90U, 0x88830b88U,
184
+  0x46ca8c46U, 0xee29c7eeU, 0xb8d36bb8U, 0x143c2814U,
185
+  0xde79a7deU, 0x5ee2bc5eU, 0x0b1d160bU, 0xdb76addbU,
186
+  0xe03bdbe0U, 0x32566432U, 0x3a4e743aU, 0x0a1e140aU,
187
+  0x49db9249U, 0x060a0c06U, 0x246c4824U, 0x5ce4b85cU,
188
+  0xc25d9fc2U, 0xd36ebdd3U, 0xacef43acU, 0x62a6c462U,
189
+  0x91a83991U, 0x95a43195U, 0xe437d3e4U, 0x798bf279U,
190
+  0xe732d5e7U, 0xc8438bc8U, 0x37596e37U, 0x6db7da6dU,
191
+  0x8d8c018dU, 0xd564b1d5U, 0x4ed29c4eU, 0xa9e049a9U,
192
+  0x6cb4d86cU, 0x56faac56U, 0xf407f3f4U, 0xea25cfeaU,
193
+  0x65afca65U, 0x7a8ef47aU, 0xaee947aeU, 0x08181008U,
194
+  0xbad56fbaU, 0x7888f078U, 0x256f4a25U, 0x2e725c2eU,
195
+  0x1c24381cU, 0xa6f157a6U, 0xb4c773b4U, 0xc65197c6U,
196
+  0xe823cbe8U, 0xdd7ca1ddU, 0x749ce874U, 0x1f213e1fU,
197
+  0x4bdd964bU, 0xbddc61bdU, 0x8b860d8bU, 0x8a850f8aU,
198
+  0x7090e070U, 0x3e427c3eU, 0xb5c471b5U, 0x66aacc66U,
199
+  0x48d89048U, 0x03050603U, 0xf601f7f6U, 0x0e121c0eU,
200
+  0x61a3c261U, 0x355f6a35U, 0x57f9ae57U, 0xb9d069b9U,
201
+  0x86911786U, 0xc15899c1U, 0x1d273a1dU, 0x9eb9279eU,
202
+  0xe138d9e1U, 0xf813ebf8U, 0x98b32b98U, 0x11332211U,
203
+  0x69bbd269U, 0xd970a9d9U, 0x8e89078eU, 0x94a73394U,
204
+  0x9bb62d9bU, 0x1e223c1eU, 0x87921587U, 0xe920c9e9U,
205
+  0xce4987ceU, 0x55ffaa55U, 0x28785028U, 0xdf7aa5dfU,
206
+  0x8c8f038cU, 0xa1f859a1U, 0x89800989U, 0x0d171a0dU,
207
+  0xbfda65bfU, 0xe631d7e6U, 0x42c68442U, 0x68b8d068U,
208
+  0x41c38241U, 0x99b02999U, 0x2d775a2dU, 0x0f111e0fU,
209
+  0xb0cb7bb0U, 0x54fca854U, 0xbbd66dbbU, 0x163a2c16U,
210
+};
211
+
212
+static const u32 Te3[256] =
213
+{
214
+  0x6363a5c6U, 0x7c7c84f8U, 0x777799eeU, 0x7b7b8df6U,
215
+  0xf2f20dffU, 0x6b6bbdd6U, 0x6f6fb1deU, 0xc5c55491U,
216
+  0x30305060U, 0x01010302U, 0x6767a9ceU, 0x2b2b7d56U,
217
+  0xfefe19e7U, 0xd7d762b5U, 0xababe64dU, 0x76769aecU,
218
+  0xcaca458fU, 0x82829d1fU, 0xc9c94089U, 0x7d7d87faU,
219
+  0xfafa15efU, 0x5959ebb2U, 0x4747c98eU, 0xf0f00bfbU,
220
+  0xadadec41U, 0xd4d467b3U, 0xa2a2fd5fU, 0xafafea45U,
221
+  0x9c9cbf23U, 0xa4a4f753U, 0x727296e4U, 0xc0c05b9bU,
222
+  0xb7b7c275U, 0xfdfd1ce1U, 0x9393ae3dU, 0x26266a4cU,
223
+  0x36365a6cU, 0x3f3f417eU, 0xf7f702f5U, 0xcccc4f83U,
224
+  0x34345c68U, 0xa5a5f451U, 0xe5e534d1U, 0xf1f108f9U,
225
+  0x717193e2U, 0xd8d873abU, 0x31315362U, 0x15153f2aU,
226
+  0x04040c08U, 0xc7c75295U, 0x23236546U, 0xc3c35e9dU,
227
+  0x18182830U, 0x9696a137U, 0x05050f0aU, 0x9a9ab52fU,
228
+  0x0707090eU, 0x12123624U, 0x80809b1bU, 0xe2e23ddfU,
229
+  0xebeb26cdU, 0x2727694eU, 0xb2b2cd7fU, 0x75759feaU,
230
+  0x09091b12U, 0x83839e1dU, 0x2c2c7458U, 0x1a1a2e34U,
231
+  0x1b1b2d36U, 0x6e6eb2dcU, 0x5a5aeeb4U, 0xa0a0fb5bU,
232
+  0x5252f6a4U, 0x3b3b4d76U, 0xd6d661b7U, 0xb3b3ce7dU,
233
+  0x29297b52U, 0xe3e33eddU, 0x2f2f715eU, 0x84849713U,
234
+  0x5353f5a6U, 0xd1d168b9U, 0x00000000U, 0xeded2cc1U,
235
+  0x20206040U, 0xfcfc1fe3U, 0xb1b1c879U, 0x5b5bedb6U,
236
+  0x6a6abed4U, 0xcbcb468dU, 0xbebed967U, 0x39394b72U,
237
+  0x4a4ade94U, 0x4c4cd498U, 0x5858e8b0U, 0xcfcf4a85U,
238
+  0xd0d06bbbU, 0xefef2ac5U, 0xaaaae54fU, 0xfbfb16edU,
239
+  0x4343c586U, 0x4d4dd79aU, 0x33335566U, 0x85859411U,
240
+  0x4545cf8aU, 0xf9f910e9U, 0x02020604U, 0x7f7f81feU,
241
+  0x5050f0a0U, 0x3c3c4478U, 0x9f9fba25U, 0xa8a8e34bU,
242
+  0x5151f3a2U, 0xa3a3fe5dU, 0x4040c080U, 0x8f8f8a05U,
243
+  0x9292ad3fU, 0x9d9dbc21U, 0x38384870U, 0xf5f504f1U,
244
+  0xbcbcdf63U, 0xb6b6c177U, 0xdada75afU, 0x21216342U,
245
+  0x10103020U, 0xffff1ae5U, 0xf3f30efdU, 0xd2d26dbfU,
246
+  0xcdcd4c81U, 0x0c0c1418U, 0x13133526U, 0xecec2fc3U,
247
+  0x5f5fe1beU, 0x9797a235U, 0x4444cc88U, 0x1717392eU,
248
+  0xc4c45793U, 0xa7a7f255U, 0x7e7e82fcU, 0x3d3d477aU,
249
+  0x6464acc8U, 0x5d5de7baU, 0x19192b32U, 0x737395e6U,
250
+  0x6060a0c0U, 0x81819819U, 0x4f4fd19eU, 0xdcdc7fa3U,
251
+  0x22226644U, 0x2a2a7e54U, 0x9090ab3bU, 0x8888830bU,
252
+  0x4646ca8cU, 0xeeee29c7U, 0xb8b8d36bU, 0x14143c28U,
253
+  0xdede79a7U, 0x5e5ee2bcU, 0x0b0b1d16U, 0xdbdb76adU,
254
+  0xe0e03bdbU, 0x32325664U, 0x3a3a4e74U, 0x0a0a1e14U,
255
+  0x4949db92U, 0x06060a0cU, 0x24246c48U, 0x5c5ce4b8U,
256
+  0xc2c25d9fU, 0xd3d36ebdU, 0xacacef43U, 0x6262a6c4U,
257
+  0x9191a839U, 0x9595a431U, 0xe4e437d3U, 0x79798bf2U,
258
+  0xe7e732d5U, 0xc8c8438bU, 0x3737596eU, 0x6d6db7daU,
259
+  0x8d8d8c01U, 0xd5d564b1U, 0x4e4ed29cU, 0xa9a9e049U,
260
+  0x6c6cb4d8U, 0x5656faacU, 0xf4f407f3U, 0xeaea25cfU,
261
+  0x6565afcaU, 0x7a7a8ef4U, 0xaeaee947U, 0x08081810U,
262
+  0xbabad56fU, 0x787888f0U, 0x25256f4aU, 0x2e2e725cU,
263
+  0x1c1c2438U, 0xa6a6f157U, 0xb4b4c773U, 0xc6c65197U,
264
+  0xe8e823cbU, 0xdddd7ca1U, 0x74749ce8U, 0x1f1f213eU,
265
+  0x4b4bdd96U, 0xbdbddc61U, 0x8b8b860dU, 0x8a8a850fU,
266
+  0x707090e0U, 0x3e3e427cU, 0xb5b5c471U, 0x6666aaccU,
267
+  0x4848d890U, 0x03030506U, 0xf6f601f7U, 0x0e0e121cU,
268
+  0x6161a3c2U, 0x35355f6aU, 0x5757f9aeU, 0xb9b9d069U,
269
+  0x86869117U, 0xc1c15899U, 0x1d1d273aU, 0x9e9eb927U,
270
+  0xe1e138d9U, 0xf8f813ebU, 0x9898b32bU, 0x11113322U,
271
+  0x6969bbd2U, 0xd9d970a9U, 0x8e8e8907U, 0x9494a733U,
272
+  0x9b9bb62dU, 0x1e1e223cU, 0x87879215U, 0xe9e920c9U,
273
+  0xcece4987U, 0x5555ffaaU, 0x28287850U, 0xdfdf7aa5U,
274
+  0x8c8c8f03U, 0xa1a1f859U, 0x89898009U, 0x0d0d171aU,
275
+  0xbfbfda65U, 0xe6e631d7U, 0x4242c684U, 0x6868b8d0U,
276
+  0x4141c382U, 0x9999b029U, 0x2d2d775aU, 0x0f0f111eU,
277
+  0xb0b0cb7bU, 0x5454fca8U, 0xbbbbd66dU, 0x16163a2cU,
278
+};
279
+
280
+static const u32 Te4[256] =
281
+{
282
+  0x63636363U, 0x7c7c7c7cU, 0x77777777U, 0x7b7b7b7bU,
283
+  0xf2f2f2f2U, 0x6b6b6b6bU, 0x6f6f6f6fU, 0xc5c5c5c5U,
284
+  0x30303030U, 0x01010101U, 0x67676767U, 0x2b2b2b2bU,
285
+  0xfefefefeU, 0xd7d7d7d7U, 0xababababU, 0x76767676U,
286
+  0xcacacacaU, 0x82828282U, 0xc9c9c9c9U, 0x7d7d7d7dU,
287
+  0xfafafafaU, 0x59595959U, 0x47474747U, 0xf0f0f0f0U,
288
+  0xadadadadU, 0xd4d4d4d4U, 0xa2a2a2a2U, 0xafafafafU,
289
+  0x9c9c9c9cU, 0xa4a4a4a4U, 0x72727272U, 0xc0c0c0c0U,
290
+  0xb7b7b7b7U, 0xfdfdfdfdU, 0x93939393U, 0x26262626U,
291
+  0x36363636U, 0x3f3f3f3fU, 0xf7f7f7f7U, 0xccccccccU,
292
+  0x34343434U, 0xa5a5a5a5U, 0xe5e5e5e5U, 0xf1f1f1f1U,
293
+  0x71717171U, 0xd8d8d8d8U, 0x31313131U, 0x15151515U,
294
+  0x04040404U, 0xc7c7c7c7U, 0x23232323U, 0xc3c3c3c3U,
295
+  0x18181818U, 0x96969696U, 0x05050505U, 0x9a9a9a9aU,
296
+  0x07070707U, 0x12121212U, 0x80808080U, 0xe2e2e2e2U,
297
+  0xebebebebU, 0x27272727U, 0xb2b2b2b2U, 0x75757575U,
298
+  0x09090909U, 0x83838383U, 0x2c2c2c2cU, 0x1a1a1a1aU,
299
+  0x1b1b1b1bU, 0x6e6e6e6eU, 0x5a5a5a5aU, 0xa0a0a0a0U,
300
+  0x52525252U, 0x3b3b3b3bU, 0xd6d6d6d6U, 0xb3b3b3b3U,
301
+  0x29292929U, 0xe3e3e3e3U, 0x2f2f2f2fU, 0x84848484U,
302
+  0x53535353U, 0xd1d1d1d1U, 0x00000000U, 0xededededU,
303
+  0x20202020U, 0xfcfcfcfcU, 0xb1b1b1b1U, 0x5b5b5b5bU,
304
+  0x6a6a6a6aU, 0xcbcbcbcbU, 0xbebebebeU, 0x39393939U,
305
+  0x4a4a4a4aU, 0x4c4c4c4cU, 0x58585858U, 0xcfcfcfcfU,
306
+  0xd0d0d0d0U, 0xefefefefU, 0xaaaaaaaaU, 0xfbfbfbfbU,
307
+  0x43434343U, 0x4d4d4d4dU, 0x33333333U, 0x85858585U,
308
+  0x45454545U, 0xf9f9f9f9U, 0x02020202U, 0x7f7f7f7fU,
309
+  0x50505050U, 0x3c3c3c3cU, 0x9f9f9f9fU, 0xa8a8a8a8U,
310
+  0x51515151U, 0xa3a3a3a3U, 0x40404040U, 0x8f8f8f8fU,
311
+  0x92929292U, 0x9d9d9d9dU, 0x38383838U, 0xf5f5f5f5U,
312
+  0xbcbcbcbcU, 0xb6b6b6b6U, 0xdadadadaU, 0x21212121U,
313
+  0x10101010U, 0xffffffffU, 0xf3f3f3f3U, 0xd2d2d2d2U,
314
+  0xcdcdcdcdU, 0x0c0c0c0cU, 0x13131313U, 0xececececU,
315
+  0x5f5f5f5fU, 0x97979797U, 0x44444444U, 0x17171717U,
316
+  0xc4c4c4c4U, 0xa7a7a7a7U, 0x7e7e7e7eU, 0x3d3d3d3dU,
317
+  0x64646464U, 0x5d5d5d5dU, 0x19191919U, 0x73737373U,
318
+  0x60606060U, 0x81818181U, 0x4f4f4f4fU, 0xdcdcdcdcU,
319
+  0x22222222U, 0x2a2a2a2aU, 0x90909090U, 0x88888888U,
320
+  0x46464646U, 0xeeeeeeeeU, 0xb8b8b8b8U, 0x14141414U,
321
+  0xdedededeU, 0x5e5e5e5eU, 0x0b0b0b0bU, 0xdbdbdbdbU,
322
+  0xe0e0e0e0U, 0x32323232U, 0x3a3a3a3aU, 0x0a0a0a0aU,
323
+  0x49494949U, 0x06060606U, 0x24242424U, 0x5c5c5c5cU,
324
+  0xc2c2c2c2U, 0xd3d3d3d3U, 0xacacacacU, 0x62626262U,
325
+  0x91919191U, 0x95959595U, 0xe4e4e4e4U, 0x79797979U,
326
+  0xe7e7e7e7U, 0xc8c8c8c8U, 0x37373737U, 0x6d6d6d6dU,
327
+  0x8d8d8d8dU, 0xd5d5d5d5U, 0x4e4e4e4eU, 0xa9a9a9a9U,
328
+  0x6c6c6c6cU, 0x56565656U, 0xf4f4f4f4U, 0xeaeaeaeaU,
329
+  0x65656565U, 0x7a7a7a7aU, 0xaeaeaeaeU, 0x08080808U,
330
+  0xbabababaU, 0x78787878U, 0x25252525U, 0x2e2e2e2eU,
331
+  0x1c1c1c1cU, 0xa6a6a6a6U, 0xb4b4b4b4U, 0xc6c6c6c6U,
332
+  0xe8e8e8e8U, 0xddddddddU, 0x74747474U, 0x1f1f1f1fU,
333
+  0x4b4b4b4bU, 0xbdbdbdbdU, 0x8b8b8b8bU, 0x8a8a8a8aU,
334
+  0x70707070U, 0x3e3e3e3eU, 0xb5b5b5b5U, 0x66666666U,
335
+  0x48484848U, 0x03030303U, 0xf6f6f6f6U, 0x0e0e0e0eU,
336
+  0x61616161U, 0x35353535U, 0x57575757U, 0xb9b9b9b9U,
337
+  0x86868686U, 0xc1c1c1c1U, 0x1d1d1d1dU, 0x9e9e9e9eU,
338
+  0xe1e1e1e1U, 0xf8f8f8f8U, 0x98989898U, 0x11111111U,
339
+  0x69696969U, 0xd9d9d9d9U, 0x8e8e8e8eU, 0x94949494U,
340
+  0x9b9b9b9bU, 0x1e1e1e1eU, 0x87878787U, 0xe9e9e9e9U,
341
+  0xcecececeU, 0x55555555U, 0x28282828U, 0xdfdfdfdfU,
342
+  0x8c8c8c8cU, 0xa1a1a1a1U, 0x89898989U, 0x0d0d0d0dU,
343
+  0xbfbfbfbfU, 0xe6e6e6e6U, 0x42424242U, 0x68686868U,
344
+  0x41414141U, 0x99999999U, 0x2d2d2d2dU, 0x0f0f0f0fU,
345
+  0xb0b0b0b0U, 0x54545454U, 0xbbbbbbbbU, 0x16161616U,
346
+};
347
+
348
+static const u32 Td0[256] =
349
+{
350
+  0x51f4a750U, 0x7e416553U, 0x1a17a4c3U, 0x3a275e96U,
351
+  0x3bab6bcbU, 0x1f9d45f1U, 0xacfa58abU, 0x4be30393U,
352
+  0x2030fa55U, 0xad766df6U, 0x88cc7691U, 0xf5024c25U,
353
+  0x4fe5d7fcU, 0xc52acbd7U, 0x26354480U, 0xb562a38fU,
354
+  0xdeb15a49U, 0x25ba1b67U, 0x45ea0e98U, 0x5dfec0e1U,
355
+  0xc32f7502U, 0x814cf012U, 0x8d4697a3U, 0x6bd3f9c6U,
356
+  0x038f5fe7U, 0x15929c95U, 0xbf6d7aebU, 0x955259daU,
357
+  0xd4be832dU, 0x587421d3U, 0x49e06929U, 0x8ec9c844U,
358
+  0x75c2896aU, 0xf48e7978U, 0x99583e6bU, 0x27b971ddU,
359
+  0xbee14fb6U, 0xf088ad17U, 0xc920ac66U, 0x7dce3ab4U,
360
+  0x63df4a18U, 0xe51a3182U, 0x97513360U, 0x62537f45U,
361
+  0xb16477e0U, 0xbb6bae84U, 0xfe81a01cU, 0xf9082b94U,
362
+  0x70486858U, 0x8f45fd19U, 0x94de6c87U, 0x527bf8b7U,
363
+  0xab73d323U, 0x724b02e2U, 0xe31f8f57U, 0x6655ab2aU,
364
+  0xb2eb2807U, 0x2fb5c203U, 0x86c57b9aU, 0xd33708a5U,
365
+  0x302887f2U, 0x23bfa5b2U, 0x02036abaU, 0xed16825cU,
366
+  0x8acf1c2bU, 0xa779b492U, 0xf307f2f0U, 0x4e69e2a1U,
367
+  0x65daf4cdU, 0x0605bed5U, 0xd134621fU, 0xc4a6fe8aU,
368
+  0x342e539dU, 0xa2f355a0U, 0x058ae132U, 0xa4f6eb75U,
369
+  0x0b83ec39U, 0x4060efaaU, 0x5e719f06U, 0xbd6e1051U,
370
+  0x3e218af9U, 0x96dd063dU, 0xdd3e05aeU, 0x4de6bd46U,
371
+  0x91548db5U, 0x71c45d05U, 0x0406d46fU, 0x605015ffU,
372
+  0x1998fb24U, 0xd6bde997U, 0x894043ccU, 0x67d99e77U,
373
+  0xb0e842bdU, 0x07898b88U, 0xe7195b38U, 0x79c8eedbU,
374
+  0xa17c0a47U, 0x7c420fe9U, 0xf8841ec9U, 0x00000000U,
375
+  0x09808683U, 0x322bed48U, 0x1e1170acU, 0x6c5a724eU,
376
+  0xfd0efffbU, 0x0f853856U, 0x3daed51eU, 0x362d3927U,
377
+  0x0a0fd964U, 0x685ca621U, 0x9b5b54d1U, 0x24362e3aU,
378
+  0x0c0a67b1U, 0x9357e70fU, 0xb4ee96d2U, 0x1b9b919eU,
379
+  0x80c0c54fU, 0x61dc20a2U, 0x5a774b69U, 0x1c121a16U,
380
+  0xe293ba0aU, 0xc0a02ae5U, 0x3c22e043U, 0x121b171dU,
381
+  0x0e090d0bU, 0xf28bc7adU, 0x2db6a8b9U, 0x141ea9c8U,
382
+  0x57f11985U, 0xaf75074cU, 0xee99ddbbU, 0xa37f60fdU,
383
+  0xf701269fU, 0x5c72f5bcU, 0x44663bc5U, 0x5bfb7e34U,
384
+  0x8b432976U, 0xcb23c6dcU, 0xb6edfc68U, 0xb8e4f163U,
385
+  0xd731dccaU, 0x42638510U, 0x13972240U, 0x84c61120U,
386
+  0x854a247dU, 0xd2bb3df8U, 0xaef93211U, 0xc729a16dU,
387
+  0x1d9e2f4bU, 0xdcb230f3U, 0x0d8652ecU, 0x77c1e3d0U,
388
+  0x2bb3166cU, 0xa970b999U, 0x119448faU, 0x47e96422U,
389
+  0xa8fc8cc4U, 0xa0f03f1aU, 0x567d2cd8U, 0x223390efU,
390
+  0x87494ec7U, 0xd938d1c1U, 0x8ccaa2feU, 0x98d40b36U,
391
+  0xa6f581cfU, 0xa57ade28U, 0xdab78e26U, 0x3fadbfa4U,
392
+  0x2c3a9de4U, 0x5078920dU, 0x6a5fcc9bU, 0x547e4662U,
393
+  0xf68d13c2U, 0x90d8b8e8U, 0x2e39f75eU, 0x82c3aff5U,
394
+  0x9f5d80beU, 0x69d0937cU, 0x6fd52da9U, 0xcf2512b3U,
395
+  0xc8ac993bU, 0x10187da7U, 0xe89c636eU, 0xdb3bbb7bU,
396
+  0xcd267809U, 0x6e5918f4U, 0xec9ab701U, 0x834f9aa8U,
397
+  0xe6956e65U, 0xaaffe67eU, 0x21bccf08U, 0xef15e8e6U,
398
+  0xbae79bd9U, 0x4a6f36ceU, 0xea9f09d4U, 0x29b07cd6U,
399
+  0x31a4b2afU, 0x2a3f2331U, 0xc6a59430U, 0x35a266c0U,
400
+  0x744ebc37U, 0xfc82caa6U, 0xe090d0b0U, 0x33a7d815U,
401
+  0xf104984aU, 0x41ecdaf7U, 0x7fcd500eU, 0x1791f62fU,
402
+  0x764dd68dU, 0x43efb04dU, 0xccaa4d54U, 0xe49604dfU,
403
+  0x9ed1b5e3U, 0x4c6a881bU, 0xc12c1fb8U, 0x4665517fU,
404
+  0x9d5eea04U, 0x018c355dU, 0xfa877473U, 0xfb0b412eU,
405
+  0xb3671d5aU, 0x92dbd252U, 0xe9105633U, 0x6dd64713U,
406
+  0x9ad7618cU, 0x37a10c7aU, 0x59f8148eU, 0xeb133c89U,
407
+  0xcea927eeU, 0xb761c935U, 0xe11ce5edU, 0x7a47b13cU,
408
+  0x9cd2df59U, 0x55f2733fU, 0x1814ce79U, 0x73c737bfU,
409
+  0x53f7cdeaU, 0x5ffdaa5bU, 0xdf3d6f14U, 0x7844db86U,
410
+  0xcaaff381U, 0xb968c43eU, 0x3824342cU, 0xc2a3405fU,
411
+  0x161dc372U, 0xbce2250cU, 0x283c498bU, 0xff0d9541U,
412
+  0x39a80171U, 0x080cb3deU, 0xd8b4e49cU, 0x6456c190U,
413
+  0x7bcb8461U, 0xd532b670U, 0x486c5c74U, 0xd0b85742U,
414
+};
415
+
416
+static const u32 Td1[256] =
417
+{
418
+  0x5051f4a7U, 0x537e4165U, 0xc31a17a4U, 0x963a275eU,
419
+  0xcb3bab6bU, 0xf11f9d45U, 0xabacfa58U, 0x934be303U,
420
+  0x552030faU, 0xf6ad766dU, 0x9188cc76U, 0x25f5024cU,
421
+  0xfc4fe5d7U, 0xd7c52acbU, 0x80263544U, 0x8fb562a3U,
422
+  0x49deb15aU, 0x6725ba1bU, 0x9845ea0eU, 0xe15dfec0U,
423
+  0x02c32f75U, 0x12814cf0U, 0xa38d4697U, 0xc66bd3f9U,
424
+  0xe7038f5fU, 0x9515929cU, 0xebbf6d7aU, 0xda955259U,
425
+  0x2dd4be83U, 0xd3587421U, 0x2949e069U, 0x448ec9c8U,
426
+  0x6a75c289U, 0x78f48e79U, 0x6b99583eU, 0xdd27b971U,
427
+  0xb6bee14fU, 0x17f088adU, 0x66c920acU, 0xb47dce3aU,
428
+  0x1863df4aU, 0x82e51a31U, 0x60975133U, 0x4562537fU,
429
+  0xe0b16477U, 0x84bb6baeU, 0x1cfe81a0U, 0x94f9082bU,
430
+  0x58704868U, 0x198f45fdU, 0x8794de6cU, 0xb7527bf8U,
431
+  0x23ab73d3U, 0xe2724b02U, 0x57e31f8fU, 0x2a6655abU,
432
+  0x07b2eb28U, 0x032fb5c2U, 0x9a86c57bU, 0xa5d33708U,
433
+  0xf2302887U, 0xb223bfa5U, 0xba02036aU, 0x5ced1682U,
434
+  0x2b8acf1cU, 0x92a779b4U, 0xf0f307f2U, 0xa14e69e2U,
435
+  0xcd65daf4U, 0xd50605beU, 0x1fd13462U, 0x8ac4a6feU,
436
+  0x9d342e53U, 0xa0a2f355U, 0x32058ae1U, 0x75a4f6ebU,
437
+  0x390b83ecU, 0xaa4060efU, 0x065e719fU, 0x51bd6e10U,
438
+  0xf93e218aU, 0x3d96dd06U, 0xaedd3e05U, 0x464de6bdU,
439
+  0xb591548dU, 0x0571c45dU, 0x6f0406d4U, 0xff605015U,
440
+  0x241998fbU, 0x97d6bde9U, 0xcc894043U, 0x7767d99eU,
441
+  0xbdb0e842U, 0x8807898bU, 0x38e7195bU, 0xdb79c8eeU,
442
+  0x47a17c0aU, 0xe97c420fU, 0xc9f8841eU, 0x00000000U,
443
+  0x83098086U, 0x48322bedU, 0xac1e1170U, 0x4e6c5a72U,
444
+  0xfbfd0effU, 0x560f8538U, 0x1e3daed5U, 0x27362d39U,
445
+  0x640a0fd9U, 0x21685ca6U, 0xd19b5b54U, 0x3a24362eU,
446
+  0xb10c0a67U, 0x0f9357e7U, 0xd2b4ee96U, 0x9e1b9b91U,
447
+  0x4f80c0c5U, 0xa261dc20U, 0x695a774bU, 0x161c121aU,
448
+  0x0ae293baU, 0xe5c0a02aU, 0x433c22e0U, 0x1d121b17U,
449
+  0x0b0e090dU, 0xadf28bc7U, 0xb92db6a8U, 0xc8141ea9U,
450
+  0x8557f119U, 0x4caf7507U, 0xbbee99ddU, 0xfda37f60U,
451
+  0x9ff70126U, 0xbc5c72f5U, 0xc544663bU, 0x345bfb7eU,
452
+  0x768b4329U, 0xdccb23c6U, 0x68b6edfcU, 0x63b8e4f1U,
453
+  0xcad731dcU, 0x10426385U, 0x40139722U, 0x2084c611U,
454
+  0x7d854a24U, 0xf8d2bb3dU, 0x11aef932U, 0x6dc729a1U,
455
+  0x4b1d9e2fU, 0xf3dcb230U, 0xec0d8652U, 0xd077c1e3U,
456
+  0x6c2bb316U, 0x99a970b9U, 0xfa119448U, 0x2247e964U,
457
+  0xc4a8fc8cU, 0x1aa0f03fU, 0xd8567d2cU, 0xef223390U,
458
+  0xc787494eU, 0xc1d938d1U, 0xfe8ccaa2U, 0x3698d40bU,
459
+  0xcfa6f581U, 0x28a57adeU, 0x26dab78eU, 0xa43fadbfU,
460
+  0xe42c3a9dU, 0x0d507892U, 0x9b6a5fccU, 0x62547e46U,
461
+  0xc2f68d13U, 0xe890d8b8U, 0x5e2e39f7U, 0xf582c3afU,
462
+  0xbe9f5d80U, 0x7c69d093U, 0xa96fd52dU, 0xb3cf2512U,
463
+  0x3bc8ac99U, 0xa710187dU, 0x6ee89c63U, 0x7bdb3bbbU,
464
+  0x09cd2678U, 0xf46e5918U, 0x01ec9ab7U, 0xa8834f9aU,
465
+  0x65e6956eU, 0x7eaaffe6U, 0x0821bccfU, 0xe6ef15e8U,
466
+  0xd9bae79bU, 0xce4a6f36U, 0xd4ea9f09U, 0xd629b07cU,
467
+  0xaf31a4b2U, 0x312a3f23U, 0x30c6a594U, 0xc035a266U,
468
+  0x37744ebcU, 0xa6fc82caU, 0xb0e090d0U, 0x1533a7d8U,
469
+  0x4af10498U, 0xf741ecdaU, 0x0e7fcd50U, 0x2f1791f6U,
470
+  0x8d764dd6U, 0x4d43efb0U, 0x54ccaa4dU, 0xdfe49604U,
471
+  0xe39ed1b5U, 0x1b4c6a88U, 0xb8c12c1fU, 0x7f466551U,
472
+  0x049d5eeaU, 0x5d018c35U, 0x73fa8774U, 0x2efb0b41U,
473
+  0x5ab3671dU, 0x5292dbd2U, 0x33e91056U, 0x136dd647U,
474
+  0x8c9ad761U, 0x7a37a10cU, 0x8e59f814U, 0x89eb133cU,
475
+  0xeecea927U, 0x35b761c9U, 0xede11ce5U, 0x3c7a47b1U,
476
+  0x599cd2dfU, 0x3f55f273U, 0x791814ceU, 0xbf73c737U,
477
+  0xea53f7cdU, 0x5b5ffdaaU, 0x14df3d6fU, 0x867844dbU,
478
+  0x81caaff3U, 0x3eb968c4U, 0x2c382434U, 0x5fc2a340U,
479
+  0x72161dc3U, 0x0cbce225U, 0x8b283c49U, 0x41ff0d95U,
480
+  0x7139a801U, 0xde080cb3U, 0x9cd8b4e4U, 0x906456c1U,
481
+  0x617bcb84U, 0x70d532b6U, 0x74486c5cU, 0x42d0b857U,
482
+};
483
+
484
+static const u32 Td2[256] =
485
+{
486
+  0xa75051f4U, 0x65537e41U, 0xa4c31a17U, 0x5e963a27U,
487
+  0x6bcb3babU, 0x45f11f9dU, 0x58abacfaU, 0x03934be3U,
488
+  0xfa552030U, 0x6df6ad76U, 0x769188ccU, 0x4c25f502U,
489
+  0xd7fc4fe5U, 0xcbd7c52aU, 0x44802635U, 0xa38fb562U,
490
+  0x5a49deb1U, 0x1b6725baU, 0x0e9845eaU, 0xc0e15dfeU,
491
+  0x7502c32fU, 0xf012814cU, 0x97a38d46U, 0xf9c66bd3U,
492
+  0x5fe7038fU, 0x9c951592U, 0x7aebbf6dU, 0x59da9552U,
493
+  0x832dd4beU, 0x21d35874U, 0x692949e0U, 0xc8448ec9U,
494
+  0x896a75c2U, 0x7978f48eU, 0x3e6b9958U, 0x71dd27b9U,
495
+  0x4fb6bee1U, 0xad17f088U, 0xac66c920U, 0x3ab47dceU,
496
+  0x4a1863dfU, 0x3182e51aU, 0x33609751U, 0x7f456253U,
497
+  0x77e0b164U, 0xae84bb6bU, 0xa01cfe81U, 0x2b94f908U,
498
+  0x68587048U, 0xfd198f45U, 0x6c8794deU, 0xf8b7527bU,
499
+  0xd323ab73U, 0x02e2724bU, 0x8f57e31fU, 0xab2a6655U,
500
+  0x2807b2ebU, 0xc2032fb5U, 0x7b9a86c5U, 0x08a5d337U,
501
+  0x87f23028U, 0xa5b223bfU, 0x6aba0203U, 0x825ced16U,
502
+  0x1c2b8acfU, 0xb492a779U, 0xf2f0f307U, 0xe2a14e69U,
503
+  0xf4cd65daU, 0xbed50605U, 0x621fd134U, 0xfe8ac4a6U,
504
+  0x539d342eU, 0x55a0a2f3U, 0xe132058aU, 0xeb75a4f6U,
505
+  0xec390b83U, 0xefaa4060U, 0x9f065e71U, 0x1051bd6eU,
506
+  0x8af93e21U, 0x063d96ddU, 0x05aedd3eU, 0xbd464de6U,
507
+  0x8db59154U, 0x5d0571c4U, 0xd46f0406U, 0x15ff6050U,
508
+  0xfb241998U, 0xe997d6bdU, 0x43cc8940U, 0x9e7767d9U,
509
+  0x42bdb0e8U, 0x8b880789U, 0x5b38e719U, 0xeedb79c8U,
510
+  0x0a47a17cU, 0x0fe97c42U, 0x1ec9f884U, 0x00000000U,
511
+  0x86830980U, 0xed48322bU, 0x70ac1e11U, 0x724e6c5aU,
512
+  0xfffbfd0eU, 0x38560f85U, 0xd51e3daeU, 0x3927362dU,
513
+  0xd9640a0fU, 0xa621685cU, 0x54d19b5bU, 0x2e3a2436U,
514
+  0x67b10c0aU, 0xe70f9357U, 0x96d2b4eeU, 0x919e1b9bU,
515
+  0xc54f80c0U, 0x20a261dcU, 0x4b695a77U, 0x1a161c12U,
516
+  0xba0ae293U, 0x2ae5c0a0U, 0xe0433c22U, 0x171d121bU,
517
+  0x0d0b0e09U, 0xc7adf28bU, 0xa8b92db6U, 0xa9c8141eU,
518
+  0x198557f1U, 0x074caf75U, 0xddbbee99U, 0x60fda37fU,
519
+  0x269ff701U, 0xf5bc5c72U, 0x3bc54466U, 0x7e345bfbU,
520
+  0x29768b43U, 0xc6dccb23U, 0xfc68b6edU, 0xf163b8e4U,
521
+  0xdccad731U, 0x85104263U, 0x22401397U, 0x112084c6U,
522
+  0x247d854aU, 0x3df8d2bbU, 0x3211aef9U, 0xa16dc729U,
523
+  0x2f4b1d9eU, 0x30f3dcb2U, 0x52ec0d86U, 0xe3d077c1U,
524
+  0x166c2bb3U, 0xb999a970U, 0x48fa1194U, 0x642247e9U,
525
+  0x8cc4a8fcU, 0x3f1aa0f0U, 0x2cd8567dU, 0x90ef2233U,
526
+  0x4ec78749U, 0xd1c1d938U, 0xa2fe8ccaU, 0x0b3698d4U,
527
+  0x81cfa6f5U, 0xde28a57aU, 0x8e26dab7U, 0xbfa43fadU,
528
+  0x9de42c3aU, 0x920d5078U, 0xcc9b6a5fU, 0x4662547eU,
529
+  0x13c2f68dU, 0xb8e890d8U, 0xf75e2e39U, 0xaff582c3U,
530
+  0x80be9f5dU, 0x937c69d0U, 0x2da96fd5U, 0x12b3cf25U,
531
+  0x993bc8acU, 0x7da71018U, 0x636ee89cU, 0xbb7bdb3bU,
532
+  0x7809cd26U, 0x18f46e59U, 0xb701ec9aU, 0x9aa8834fU,
533
+  0x6e65e695U, 0xe67eaaffU, 0xcf0821bcU, 0xe8e6ef15U,
534
+  0x9bd9bae7U, 0x36ce4a6fU, 0x09d4ea9fU, 0x7cd629b0U,
535
+  0xb2af31a4U, 0x23312a3fU, 0x9430c6a5U, 0x66c035a2U,
536
+  0xbc37744eU, 0xcaa6fc82U, 0xd0b0e090U, 0xd81533a7U,
537
+  0x984af104U, 0xdaf741ecU, 0x500e7fcdU, 0xf62f1791U,
538
+  0xd68d764dU, 0xb04d43efU, 0x4d54ccaaU, 0x04dfe496U,
539
+  0xb5e39ed1U, 0x881b4c6aU, 0x1fb8c12cU, 0x517f4665U,
540
+  0xea049d5eU, 0x355d018cU, 0x7473fa87U, 0x412efb0bU,
541
+  0x1d5ab367U, 0xd25292dbU, 0x5633e910U, 0x47136dd6U,
542
+  0x618c9ad7U, 0x0c7a37a1U, 0x148e59f8U, 0x3c89eb13U,
543
+  0x27eecea9U, 0xc935b761U, 0xe5ede11cU, 0xb13c7a47U,
544
+  0xdf599cd2U, 0x733f55f2U, 0xce791814U, 0x37bf73c7U,
545
+  0xcdea53f7U, 0xaa5b5ffdU, 0x6f14df3dU, 0xdb867844U,
546
+  0xf381caafU, 0xc43eb968U, 0x342c3824U, 0x405fc2a3U,
547
+  0xc372161dU, 0x250cbce2U, 0x498b283cU, 0x9541ff0dU,
548
+  0x017139a8U, 0xb3de080cU, 0xe49cd8b4U, 0xc1906456U,
549
+  0x84617bcbU, 0xb670d532U, 0x5c74486cU, 0x5742d0b8U,
550
+};
551
+
552
+static const u32 Td3[256] =
553
+{
554
+  0xf4a75051U, 0x4165537eU, 0x17a4c31aU, 0x275e963aU,
555
+  0xab6bcb3bU, 0x9d45f11fU, 0xfa58abacU, 0xe303934bU,
556
+  0x30fa5520U, 0x766df6adU, 0xcc769188U, 0x024c25f5U,
557
+  0xe5d7fc4fU, 0x2acbd7c5U, 0x35448026U, 0x62a38fb5U,
558
+  0xb15a49deU, 0xba1b6725U, 0xea0e9845U, 0xfec0e15dU,
559
+  0x2f7502c3U, 0x4cf01281U, 0x4697a38dU, 0xd3f9c66bU,
560
+  0x8f5fe703U, 0x929c9515U, 0x6d7aebbfU, 0x5259da95U,
561
+  0xbe832dd4U, 0x7421d358U, 0xe0692949U, 0xc9c8448eU,
562
+  0xc2896a75U, 0x8e7978f4U, 0x583e6b99U, 0xb971dd27U,
563
+  0xe14fb6beU, 0x88ad17f0U, 0x20ac66c9U, 0xce3ab47dU,
564
+  0xdf4a1863U, 0x1a3182e5U, 0x51336097U, 0x537f4562U,
565
+  0x6477e0b1U, 0x6bae84bbU, 0x81a01cfeU, 0x082b94f9U,
566
+  0x48685870U, 0x45fd198fU, 0xde6c8794U, 0x7bf8b752U,
567
+  0x73d323abU, 0x4b02e272U, 0x1f8f57e3U, 0x55ab2a66U,
568
+  0xeb2807b2U, 0xb5c2032fU, 0xc57b9a86U, 0x3708a5d3U,
569
+  0x2887f230U, 0xbfa5b223U, 0x036aba02U, 0x16825cedU,
570
+  0xcf1c2b8aU, 0x79b492a7U, 0x07f2f0f3U, 0x69e2a14eU,
571
+  0xdaf4cd65U, 0x05bed506U, 0x34621fd1U, 0xa6fe8ac4U,
572
+  0x2e539d34U, 0xf355a0a2U, 0x8ae13205U, 0xf6eb75a4U,
573
+  0x83ec390bU, 0x60efaa40U, 0x719f065eU, 0x6e1051bdU,
574
+  0x218af93eU, 0xdd063d96U, 0x3e05aeddU, 0xe6bd464dU,
575
+  0x548db591U, 0xc45d0571U, 0x06d46f04U, 0x5015ff60U,
576
+  0x98fb2419U, 0xbde997d6U, 0x4043cc89U, 0xd99e7767U,
577
+  0xe842bdb0U, 0x898b8807U, 0x195b38e7U, 0xc8eedb79U,
578
+  0x7c0a47a1U, 0x420fe97cU, 0x841ec9f8U, 0x00000000U,
579
+  0x80868309U, 0x2bed4832U, 0x1170ac1eU, 0x5a724e6cU,
580
+  0x0efffbfdU, 0x8538560fU, 0xaed51e3dU, 0x2d392736U,
581
+  0x0fd9640aU, 0x5ca62168U, 0x5b54d19bU, 0x362e3a24U,
582
+  0x0a67b10cU, 0x57e70f93U, 0xee96d2b4U, 0x9b919e1bU,
583
+  0xc0c54f80U, 0xdc20a261U, 0x774b695aU, 0x121a161cU,
584
+  0x93ba0ae2U, 0xa02ae5c0U, 0x22e0433cU, 0x1b171d12U,
585
+  0x090d0b0eU, 0x8bc7adf2U, 0xb6a8b92dU, 0x1ea9c814U,
586
+  0xf1198557U, 0x75074cafU, 0x99ddbbeeU, 0x7f60fda3U,
587
+  0x01269ff7U, 0x72f5bc5cU, 0x663bc544U, 0xfb7e345bU,
588
+  0x4329768bU, 0x23c6dccbU, 0xedfc68b6U, 0xe4f163b8U,
589
+  0x31dccad7U, 0x63851042U, 0x97224013U, 0xc6112084U,
590
+  0x4a247d85U, 0xbb3df8d2U, 0xf93211aeU, 0x29a16dc7U,
591
+  0x9e2f4b1dU, 0xb230f3dcU, 0x8652ec0dU, 0xc1e3d077U,
592
+  0xb3166c2bU, 0x70b999a9U, 0x9448fa11U, 0xe9642247U,
593
+  0xfc8cc4a8U, 0xf03f1aa0U, 0x7d2cd856U, 0x3390ef22U,
594
+  0x494ec787U, 0x38d1c1d9U, 0xcaa2fe8cU, 0xd40b3698U,
595
+  0xf581cfa6U, 0x7ade28a5U, 0xb78e26daU, 0xadbfa43fU,
596
+  0x3a9de42cU, 0x78920d50U, 0x5fcc9b6aU, 0x7e466254U,
597
+  0x8d13c2f6U, 0xd8b8e890U, 0x39f75e2eU, 0xc3aff582U,
598
+  0x5d80be9fU, 0xd0937c69U, 0xd52da96fU, 0x2512b3cfU,
599
+  0xac993bc8U, 0x187da710U, 0x9c636ee8U, 0x3bbb7bdbU,
600
+  0x267809cdU, 0x5918f46eU, 0x9ab701ecU, 0x4f9aa883U,
601
+  0x956e65e6U, 0xffe67eaaU, 0xbccf0821U, 0x15e8e6efU,
602
+  0xe79bd9baU, 0x6f36ce4aU, 0x9f09d4eaU, 0xb07cd629U,
603
+  0xa4b2af31U, 0x3f23312aU, 0xa59430c6U, 0xa266c035U,
604
+  0x4ebc3774U, 0x82caa6fcU, 0x90d0b0e0U, 0xa7d81533U,
605
+  0x04984af1U, 0xecdaf741U, 0xcd500e7fU, 0x91f62f17U,
606
+  0x4dd68d76U, 0xefb04d43U, 0xaa4d54ccU, 0x9604dfe4U,
607
+  0xd1b5e39eU, 0x6a881b4cU, 0x2c1fb8c1U, 0x65517f46U,
608
+  0x5eea049dU, 0x8c355d01U, 0x877473faU, 0x0b412efbU,
609
+  0x671d5ab3U, 0xdbd25292U, 0x105633e9U, 0xd647136dU,
610
+  0xd7618c9aU, 0xa10c7a37U, 0xf8148e59U, 0x133c89ebU,
611
+  0xa927eeceU, 0x61c935b7U, 0x1ce5ede1U, 0x47b13c7aU,
612
+  0xd2df599cU, 0xf2733f55U, 0x14ce7918U, 0xc737bf73U,
613
+  0xf7cdea53U, 0xfdaa5b5fU, 0x3d6f14dfU, 0x44db8678U,
614
+  0xaff381caU, 0x68c43eb9U, 0x24342c38U, 0xa3405fc2U,
615
+  0x1dc37216U, 0xe2250cbcU, 0x3c498b28U, 0x0d9541ffU,
616
+  0xa8017139U, 0x0cb3de08U, 0xb4e49cd8U, 0x56c19064U,
617
+  0xcb84617bU, 0x32b670d5U, 0x6c5c7448U, 0xb85742d0U,
618
+};
619
+
620
+static const u32 Td4[256] =
621
+{
622
+  0x52525252U, 0x09090909U, 0x6a6a6a6aU, 0xd5d5d5d5U,
623
+  0x30303030U, 0x36363636U, 0xa5a5a5a5U, 0x38383838U,
624
+  0xbfbfbfbfU, 0x40404040U, 0xa3a3a3a3U, 0x9e9e9e9eU,
625
+  0x81818181U, 0xf3f3f3f3U, 0xd7d7d7d7U, 0xfbfbfbfbU,
626
+  0x7c7c7c7cU, 0xe3e3e3e3U, 0x39393939U, 0x82828282U,
627
+  0x9b9b9b9bU, 0x2f2f2f2fU, 0xffffffffU, 0x87878787U,
628
+  0x34343434U, 0x8e8e8e8eU, 0x43434343U, 0x44444444U,
629
+  0xc4c4c4c4U, 0xdedededeU, 0xe9e9e9e9U, 0xcbcbcbcbU,
630
+  0x54545454U, 0x7b7b7b7bU, 0x94949494U, 0x32323232U,
631
+  0xa6a6a6a6U, 0xc2c2c2c2U, 0x23232323U, 0x3d3d3d3dU,
632
+  0xeeeeeeeeU, 0x4c4c4c4cU, 0x95959595U, 0x0b0b0b0bU,
633
+  0x42424242U, 0xfafafafaU, 0xc3c3c3c3U, 0x4e4e4e4eU,
634
+  0x08080808U, 0x2e2e2e2eU, 0xa1a1a1a1U, 0x66666666U,
635
+  0x28282828U, 0xd9d9d9d9U, 0x24242424U, 0xb2b2b2b2U,
636
+  0x76767676U, 0x5b5b5b5bU, 0xa2a2a2a2U, 0x49494949U,
637
+  0x6d6d6d6dU, 0x8b8b8b8bU, 0xd1d1d1d1U, 0x25252525U,
638
+  0x72727272U, 0xf8f8f8f8U, 0xf6f6f6f6U, 0x64646464U,
639
+  0x86868686U, 0x68686868U, 0x98989898U, 0x16161616U,
640
+  0xd4d4d4d4U, 0xa4a4a4a4U, 0x5c5c5c5cU, 0xccccccccU,
641
+  0x5d5d5d5dU, 0x65656565U, 0xb6b6b6b6U, 0x92929292U,
642
+  0x6c6c6c6cU, 0x70707070U, 0x48484848U, 0x50505050U,
643
+  0xfdfdfdfdU, 0xededededU, 0xb9b9b9b9U, 0xdadadadaU,
644
+  0x5e5e5e5eU, 0x15151515U, 0x46464646U, 0x57575757U,
645
+  0xa7a7a7a7U, 0x8d8d8d8dU, 0x9d9d9d9dU, 0x84848484U,
646
+  0x90909090U, 0xd8d8d8d8U, 0xababababU, 0x00000000U,
647
+  0x8c8c8c8cU, 0xbcbcbcbcU, 0xd3d3d3d3U, 0x0a0a0a0aU,
648
+  0xf7f7f7f7U, 0xe4e4e4e4U, 0x58585858U, 0x05050505U,
649
+  0xb8b8b8b8U, 0xb3b3b3b3U, 0x45454545U, 0x06060606U,
650
+  0xd0d0d0d0U, 0x2c2c2c2cU, 0x1e1e1e1eU, 0x8f8f8f8fU,
651
+  0xcacacacaU, 0x3f3f3f3fU, 0x0f0f0f0fU, 0x02020202U,
652
+  0xc1c1c1c1U, 0xafafafafU, 0xbdbdbdbdU, 0x03030303U,
653
+  0x01010101U, 0x13131313U, 0x8a8a8a8aU, 0x6b6b6b6bU,
654
+  0x3a3a3a3aU, 0x91919191U, 0x11111111U, 0x41414141U,
655
+  0x4f4f4f4fU, 0x67676767U, 0xdcdcdcdcU, 0xeaeaeaeaU,
656
+  0x97979797U, 0xf2f2f2f2U, 0xcfcfcfcfU, 0xcecececeU,
657
+  0xf0f0f0f0U, 0xb4b4b4b4U, 0xe6e6e6e6U, 0x73737373U,
658
+  0x96969696U, 0xacacacacU, 0x74747474U, 0x22222222U,
659
+  0xe7e7e7e7U, 0xadadadadU, 0x35353535U, 0x85858585U,
660
+  0xe2e2e2e2U, 0xf9f9f9f9U, 0x37373737U, 0xe8e8e8e8U,
661
+  0x1c1c1c1cU, 0x75757575U, 0xdfdfdfdfU, 0x6e6e6e6eU,
662
+  0x47474747U, 0xf1f1f1f1U, 0x1a1a1a1aU, 0x71717171U,
663
+  0x1d1d1d1dU, 0x29292929U, 0xc5c5c5c5U, 0x89898989U,
664
+  0x6f6f6f6fU, 0xb7b7b7b7U, 0x62626262U, 0x0e0e0e0eU,
665
+  0xaaaaaaaaU, 0x18181818U, 0xbebebebeU, 0x1b1b1b1bU,
666
+  0xfcfcfcfcU, 0x56565656U, 0x3e3e3e3eU, 0x4b4b4b4bU,
667
+  0xc6c6c6c6U, 0xd2d2d2d2U, 0x79797979U, 0x20202020U,
668
+  0x9a9a9a9aU, 0xdbdbdbdbU, 0xc0c0c0c0U, 0xfefefefeU,
669
+  0x78787878U, 0xcdcdcdcdU, 0x5a5a5a5aU, 0xf4f4f4f4U,
670
+  0x1f1f1f1fU, 0xddddddddU, 0xa8a8a8a8U, 0x33333333U,
671
+  0x88888888U, 0x07070707U, 0xc7c7c7c7U, 0x31313131U,
672
+  0xb1b1b1b1U, 0x12121212U, 0x10101010U, 0x59595959U,
673
+  0x27272727U, 0x80808080U, 0xececececU, 0x5f5f5f5fU,
674
+  0x60606060U, 0x51515151U, 0x7f7f7f7fU, 0xa9a9a9a9U,
675
+  0x19191919U, 0xb5b5b5b5U, 0x4a4a4a4aU, 0x0d0d0d0dU,
676
+  0x2d2d2d2dU, 0xe5e5e5e5U, 0x7a7a7a7aU, 0x9f9f9f9fU,
677
+  0x93939393U, 0xc9c9c9c9U, 0x9c9c9c9cU, 0xefefefefU,
678
+  0xa0a0a0a0U, 0xe0e0e0e0U, 0x3b3b3b3bU, 0x4d4d4d4dU,
679
+  0xaeaeaeaeU, 0x2a2a2a2aU, 0xf5f5f5f5U, 0xb0b0b0b0U,
680
+  0xc8c8c8c8U, 0xebebebebU, 0xbbbbbbbbU, 0x3c3c3c3cU,
681
+  0x83838383U, 0x53535353U, 0x99999999U, 0x61616161U,
682
+  0x17171717U, 0x2b2b2b2bU, 0x04040404U, 0x7e7e7e7eU,
683
+  0xbabababaU, 0x77777777U, 0xd6d6d6d6U, 0x26262626U,
684
+  0xe1e1e1e1U, 0x69696969U, 0x14141414U, 0x63636363U,
685
+  0x55555555U, 0x21212121U, 0x0c0c0c0cU, 0x7d7d7d7dU,
686
+};
687
+
688
+static const u32 rcon[] =
689
+{
690
+  0x01000000, 0x02000000, 0x04000000, 0x08000000,
691
+  0x10000000, 0x20000000, 0x40000000, 0x80000000,
692
+  0x1B000000, 0x36000000,
693
+  /* for 128-bit blocks, Rijndael never uses more than 10 rcon values */
694
+};
695
+
696
+#define GETU32(plaintext) (((u32)(plaintext)[0] << 24) ^ \
697
+                    ((u32)(plaintext)[1] << 16) ^ \
698
+                    ((u32)(plaintext)[2] <<  8) ^ \
699
+                    ((u32)(plaintext)[3]))
700
+
701
+#define PUTU32(ciphertext, st) { (ciphertext)[0] = (u8)((st) >> 24); \
702
+                         (ciphertext)[1] = (u8)((st) >> 16); \
703
+                         (ciphertext)[2] = (u8)((st) >>  8); \
704
+                         (ciphertext)[3] = (u8)(st); }
705
+
706
+/**
707
+ * Expand the cipher key into the encryption key schedule.
708
+ *
709
+ * @return the number of rounds for the given cipher key size.
710
+ */
711
+int rijndaelSetupEncrypt(u32 *rk, const u8 *key, int keybits)
712
+{
713
+  int i = 0;
714
+  u32 temp;
715
+
716
+  rk[0] = GETU32(key     );
717
+  rk[1] = GETU32(key +  4);
718
+  rk[2] = GETU32(key +  8);
719
+  rk[3] = GETU32(key + 12);
720
+  if (keybits == 128)
721
+  {
722
+    for (;;)
723
+    {
724
+      temp  = rk[3];
725
+      rk[4] = rk[0] ^
726
+        (Te4[(temp >> 16) & 0xff] & 0xff000000) ^
727
+        (Te4[(temp >>  8) & 0xff] & 0x00ff0000) ^
728
+        (Te4[(temp      ) & 0xff] & 0x0000ff00) ^
729
+        (Te4[(temp >> 24)       ] & 0x000000ff) ^
730
+        rcon[i];
731
+      rk[5] = rk[1] ^ rk[4];
732
+      rk[6] = rk[2] ^ rk[5];
733
+      rk[7] = rk[3] ^ rk[6];
734
+      if (++i == 10)
735
+        return 10;
736
+      rk += 4;
737
+    }
738
+  }
739
+  rk[4] = GETU32(key + 16);
740
+  rk[5] = GETU32(key + 20);
741
+  if (keybits == 192)
742
+  {
743
+    for (;;)
744
+    {
745
+      temp = rk[ 5];
746
+      rk[ 6] = rk[ 0] ^
747
+        (Te4[(temp >> 16) & 0xff] & 0xff000000) ^
748
+        (Te4[(temp >>  8) & 0xff] & 0x00ff0000) ^
749
+        (Te4[(temp      ) & 0xff] & 0x0000ff00) ^
750
+        (Te4[(temp >> 24)       ] & 0x000000ff) ^
751
+        rcon[i];
752
+      rk[ 7] = rk[ 1] ^ rk[ 6];
753
+      rk[ 8] = rk[ 2] ^ rk[ 7];
754
+      rk[ 9] = rk[ 3] ^ rk[ 8];
755
+      if (++i == 8)
756
+        return 12;
757
+      rk[10] = rk[ 4] ^ rk[ 9];
758
+      rk[11] = rk[ 5] ^ rk[10];
759
+      rk += 6;
760
+    }
761
+  }
762
+  rk[6] = GETU32(key + 24);
763
+  rk[7] = GETU32(key + 28);
764
+  if (keybits == 256)
765
+  {
766
+    for (;;)
767
+    {
768
+      temp = rk[ 7];
769
+      rk[ 8] = rk[ 0] ^
770
+        (Te4[(temp >> 16) & 0xff] & 0xff000000) ^
771
+        (Te4[(temp >>  8) & 0xff] & 0x00ff0000) ^
772
+        (Te4[(temp      ) & 0xff] & 0x0000ff00) ^
773
+        (Te4[(temp >> 24)       ] & 0x000000ff) ^
774
+        rcon[i];
775
+      rk[ 9] = rk[ 1] ^ rk[ 8];
776
+      rk[10] = rk[ 2] ^ rk[ 9];
777
+      rk[11] = rk[ 3] ^ rk[10];
778
+      if (++i == 7)
779
+        return 14;
780
+      temp = rk[11];
781
+      rk[12] = rk[ 4] ^
782
+        (Te4[(temp >> 24)       ] & 0xff000000) ^
783
+        (Te4[(temp >> 16) & 0xff] & 0x00ff0000) ^
784
+        (Te4[(temp >>  8) & 0xff] & 0x0000ff00) ^
785
+        (Te4[(temp      ) & 0xff] & 0x000000ff);
786
+      rk[13] = rk[ 5] ^ rk[12];
787
+      rk[14] = rk[ 6] ^ rk[13];
788
+      rk[15] = rk[ 7] ^ rk[14];
789
+      rk += 8;
790
+    }
791
+  }
792
+  return 0;
793
+}
794
+
795
+/**
796
+ * Expand the cipher key into the decryption key schedule.
797
+ *
798
+ * @return the number of rounds for the given cipher key size.
799
+ */
800
+int rijndaelSetupDecrypt(u32 *rk, const u8 *key, int keybits)
801
+{
802
+  int nrounds, i, j;
803
+  u32 temp;
804
+
805
+  /* expand the cipher key: */
806
+  nrounds = rijndaelSetupEncrypt(rk, key, keybits);
807
+  /* invert the order of the round keys: */
808
+  for (i = 0, j = 4*nrounds; i < j; i += 4, j -= 4)
809
+  {
810
+    temp = rk[i    ]; rk[i    ] = rk[j    ]; rk[j    ] = temp;
811
+    temp = rk[i + 1]; rk[i + 1] = rk[j + 1]; rk[j + 1] = temp;
812
+    temp = rk[i + 2]; rk[i + 2] = rk[j + 2]; rk[j + 2] = temp;
813
+    temp = rk[i + 3]; rk[i + 3] = rk[j + 3]; rk[j + 3] = temp;
814
+  }
815
+  /* apply the inverse MixColumn transform to all round keys but the first and the last: */
816
+  for (i = 1; i < nrounds; i++)
817
+  {
818
+    rk += 4;
819
+    rk[0] =
820
+      Td0[Te4[(rk[0] >> 24)       ] & 0xff] ^
821
+      Td1[Te4[(rk[0] >> 16) & 0xff] & 0xff] ^
822
+      Td2[Te4[(rk[0] >>  8) & 0xff] & 0xff] ^
823
+      Td3[Te4[(rk[0]      ) & 0xff] & 0xff];
824
+    rk[1] =
825
+      Td0[Te4[(rk[1] >> 24)       ] & 0xff] ^
826
+      Td1[Te4[(rk[1] >> 16) & 0xff] & 0xff] ^
827
+      Td2[Te4[(rk[1] >>  8) & 0xff] & 0xff] ^
828
+      Td3[Te4[(rk[1]      ) & 0xff] & 0xff];
829
+    rk[2] =
830
+      Td0[Te4[(rk[2] >> 24)       ] & 0xff] ^
831
+      Td1[Te4[(rk[2] >> 16) & 0xff] & 0xff] ^
832
+      Td2[Te4[(rk[2] >>  8) & 0xff] & 0xff] ^
833
+      Td3[Te4[(rk[2]      ) & 0xff] & 0xff];
834
+    rk[3] =
835
+      Td0[Te4[(rk[3] >> 24)       ] & 0xff] ^
836
+      Td1[Te4[(rk[3] >> 16) & 0xff] & 0xff] ^
837
+      Td2[Te4[(rk[3] >>  8) & 0xff] & 0xff] ^
838
+      Td3[Te4[(rk[3]      ) & 0xff] & 0xff];
839
+  }
840
+  return nrounds;
841
+}
842
+
843
+void rijndaelEncrypt(const u32 *rk, int nrounds, const u8 plaintext[16],
844
+  u8 ciphertext[16])
845
+{
846
+  u32 s0, s1, s2, s3, t0, t1, t2, t3;
847
+  #ifndef FULL_UNROLL
848
+    int r;
849
+  #endif /* ?FULL_UNROLL */
850
+  /*
851
+   * map byte array block to cipher state
852
+   * and add initial round key:
853
+  */
854
+  s0 = GETU32(plaintext     ) ^ rk[0];
855
+  s1 = GETU32(plaintext +  4) ^ rk[1];
856
+  s2 = GETU32(plaintext +  8) ^ rk[2];
857
+  s3 = GETU32(plaintext + 12) ^ rk[3];
858
+  #ifdef FULL_UNROLL
859
+    /* round 1: */
860
+    t0 = Te0[s0 >> 24] ^ Te1[(s1 >> 16) & 0xff] ^ Te2[(s2 >>  8) & 0xff] ^ Te3[s3 & 0xff] ^ rk[ 4];
861
+    t1 = Te0[s1 >> 24] ^ Te1[(s2 >> 16) & 0xff] ^ Te2[(s3 >>  8) & 0xff] ^ Te3[s0 & 0xff] ^ rk[ 5];
862
+    t2 = Te0[s2 >> 24] ^ Te1[(s3 >> 16) & 0xff] ^ Te2[(s0 >>  8) & 0xff] ^ Te3[s1 & 0xff] ^ rk[ 6];
863
+    t3 = Te0[s3 >> 24] ^ Te1[(s0 >> 16) & 0xff] ^ Te2[(s1 >>  8) & 0xff] ^ Te3[s2 & 0xff] ^ rk[ 7];
864
+    /* round 2: */
865
+    s0 = Te0[t0 >> 24] ^ Te1[(t1 >> 16) & 0xff] ^ Te2[(t2 >>  8) & 0xff] ^ Te3[t3 & 0xff] ^ rk[ 8];
866
+    s1 = Te0[t1 >> 24] ^ Te1[(t2 >> 16) & 0xff] ^ Te2[(t3 >>  8) & 0xff] ^ Te3[t0 & 0xff] ^ rk[ 9];
867
+    s2 = Te0[t2 >> 24] ^ Te1[(t3 >> 16) & 0xff] ^ Te2[(t0 >>  8) & 0xff] ^ Te3[t1 & 0xff] ^ rk[10];
868
+    s3 = Te0[t3 >> 24] ^ Te1[(t0 >> 16) & 0xff] ^ Te2[(t1 >>  8) & 0xff] ^ Te3[t2 & 0xff] ^ rk[11];
869
+    /* round 3: */
870
+    t0 = Te0[s0 >> 24] ^ Te1[(s1 >> 16) & 0xff] ^ Te2[(s2 >>  8) & 0xff] ^ Te3[s3 & 0xff] ^ rk[12];
871
+    t1 = Te0[s1 >> 24] ^ Te1[(s2 >> 16) & 0xff] ^ Te2[(s3 >>  8) & 0xff] ^ Te3[s0 & 0xff] ^ rk[13];
872
+    t2 = Te0[s2 >> 24] ^ Te1[(s3 >> 16) & 0xff] ^ Te2[(s0 >>  8) & 0xff] ^ Te3[s1 & 0xff] ^ rk[14];
873
+    t3 = Te0[s3 >> 24] ^ Te1[(s0 >> 16) & 0xff] ^ Te2[(s1 >>  8) & 0xff] ^ Te3[s2 & 0xff] ^ rk[15];
874
+    /* round 4: */
875
+    s0 = Te0[t0 >> 24] ^ Te1[(t1 >> 16) & 0xff] ^ Te2[(t2 >>  8) & 0xff] ^ Te3[t3 & 0xff] ^ rk[16];
876
+    s1 = Te0[t1 >> 24] ^ Te1[(t2 >> 16) & 0xff] ^ Te2[(t3 >>  8) & 0xff] ^ Te3[t0 & 0xff] ^ rk[17];
877
+    s2 = Te0[t2 >> 24] ^ Te1[(t3 >> 16) & 0xff] ^ Te2[(t0 >>  8) & 0xff] ^ Te3[t1 & 0xff] ^ rk[18];
878
+    s3 = Te0[t3 >> 24] ^ Te1[(t0 >> 16) & 0xff] ^ Te2[(t1 >>  8) & 0xff] ^ Te3[t2 & 0xff] ^ rk[19];
879
+    /* round 5: */
880
+    t0 = Te0[s0 >> 24] ^ Te1[(s1 >> 16) & 0xff] ^ Te2[(s2 >>  8) & 0xff] ^ Te3[s3 & 0xff] ^ rk[20];
881
+    t1 = Te0[s1 >> 24] ^ Te1[(s2 >> 16) & 0xff] ^ Te2[(s3 >>  8) & 0xff] ^ Te3[s0 & 0xff] ^ rk[21];
882
+    t2 = Te0[s2 >> 24] ^ Te1[(s3 >> 16) & 0xff] ^ Te2[(s0 >>  8) & 0xff] ^ Te3[s1 & 0xff] ^ rk[22];
883
+    t3 = Te0[s3 >> 24] ^ Te1[(s0 >> 16) & 0xff] ^ Te2[(s1 >>  8) & 0xff] ^ Te3[s2 & 0xff] ^ rk[23];
884
+    /* round 6: */
885
+    s0 = Te0[t0 >> 24] ^ Te1[(t1 >> 16) & 0xff] ^ Te2[(t2 >>  8) & 0xff] ^ Te3[t3 & 0xff] ^ rk[24];
886
+    s1 = Te0[t1 >> 24] ^ Te1[(t2 >> 16) & 0xff] ^ Te2[(t3 >>  8) & 0xff] ^ Te3[t0 & 0xff] ^ rk[25];
887
+    s2 = Te0[t2 >> 24] ^ Te1[(t3 >> 16) & 0xff] ^ Te2[(t0 >>  8) & 0xff] ^ Te3[t1 & 0xff] ^ rk[26];
888
+    s3 = Te0[t3 >> 24] ^ Te1[(t0 >> 16) & 0xff] ^ Te2[(t1 >>  8) & 0xff] ^ Te3[t2 & 0xff] ^ rk[27];
889
+    /* round 7: */
890
+    t0 = Te0[s0 >> 24] ^ Te1[(s1 >> 16) & 0xff] ^ Te2[(s2 >>  8) & 0xff] ^ Te3[s3 & 0xff] ^ rk[28];
891
+    t1 = Te0[s1 >> 24] ^ Te1[(s2 >> 16) & 0xff] ^ Te2[(s3 >>  8) & 0xff] ^ Te3[s0 & 0xff] ^ rk[29];
892
+    t2 = Te0[s2 >> 24] ^ Te1[(s3 >> 16) & 0xff] ^ Te2[(s0 >>  8) & 0xff] ^ Te3[s1 & 0xff] ^ rk[30];
893
+    t3 = Te0[s3 >> 24] ^ Te1[(s0 >> 16) & 0xff] ^ Te2[(s1 >>  8) & 0xff] ^ Te3[s2 & 0xff] ^ rk[31];
894
+    /* round 8: */
895
+    s0 = Te0[t0 >> 24] ^ Te1[(t1 >> 16) & 0xff] ^ Te2[(t2 >>  8) & 0xff] ^ Te3[t3 & 0xff] ^ rk[32];
896
+    s1 = Te0[t1 >> 24] ^ Te1[(t2 >> 16) & 0xff] ^ Te2[(t3 >>  8) & 0xff] ^ Te3[t0 & 0xff] ^ rk[33];
897
+    s2 = Te0[t2 >> 24] ^ Te1[(t3 >> 16) & 0xff] ^ Te2[(t0 >>  8) & 0xff] ^ Te3[t1 & 0xff] ^ rk[34];
898
+    s3 = Te0[t3 >> 24] ^ Te1[(t0 >> 16) & 0xff] ^ Te2[(t1 >>  8) & 0xff] ^ Te3[t2 & 0xff] ^ rk[35];
899
+    /* round 9: */
900
+    t0 = Te0[s0 >> 24] ^ Te1[(s1 >> 16) & 0xff] ^ Te2[(s2 >>  8) & 0xff] ^ Te3[s3 & 0xff] ^ rk[36];
901
+    t1 = Te0[s1 >> 24] ^ Te1[(s2 >> 16) & 0xff] ^ Te2[(s3 >>  8) & 0xff] ^ Te3[s0 & 0xff] ^ rk[37];
902
+    t2 = Te0[s2 >> 24] ^ Te1[(s3 >> 16) & 0xff] ^ Te2[(s0 >>  8) & 0xff] ^ Te3[s1 & 0xff] ^ rk[38];
903
+    t3 = Te0[s3 >> 24] ^ Te1[(s0 >> 16) & 0xff] ^ Te2[(s1 >>  8) & 0xff] ^ Te3[s2 & 0xff] ^ rk[39];
904
+    if (nrounds > 10)
905
+    {
906
+      /* round 10: */
907
+      s0 = Te0[t0 >> 24] ^ Te1[(t1 >> 16) & 0xff] ^ Te2[(t2 >>  8) & 0xff] ^ Te3[t3 & 0xff] ^ rk[40];
908
+      s1 = Te0[t1 >> 24] ^ Te1[(t2 >> 16) & 0xff] ^ Te2[(t3 >>  8) & 0xff] ^ Te3[t0 & 0xff] ^ rk[41];
909
+      s2 = Te0[t2 >> 24] ^ Te1[(t3 >> 16) & 0xff] ^ Te2[(t0 >>  8) & 0xff] ^ Te3[t1 & 0xff] ^ rk[42];
910
+      s3 = Te0[t3 >> 24] ^ Te1[(t0 >> 16) & 0xff] ^ Te2[(t1 >>  8) & 0xff] ^ Te3[t2 & 0xff] ^ rk[43];
911
+      /* round 11: */
912
+      t0 = Te0[s0 >> 24] ^ Te1[(s1 >> 16) & 0xff] ^ Te2[(s2 >>  8) & 0xff] ^ Te3[s3 & 0xff] ^ rk[44];
913
+      t1 = Te0[s1 >> 24] ^ Te1[(s2 >> 16) & 0xff] ^ Te2[(s3 >>  8) & 0xff] ^ Te3[s0 & 0xff] ^ rk[45];
914
+      t2 = Te0[s2 >> 24] ^ Te1[(s3 >> 16) & 0xff] ^ Te2[(s0 >>  8) & 0xff] ^ Te3[s1 & 0xff] ^ rk[46];
915
+      t3 = Te0[s3 >> 24] ^ Te1[(s0 >> 16) & 0xff] ^ Te2[(s1 >>  8) & 0xff] ^ Te3[s2 & 0xff] ^ rk[47];
916
+      if (nrounds > 12)
917
+      {
918
+        /* round 12: */
919
+        s0 = Te0[t0 >> 24] ^ Te1[(t1 >> 16) & 0xff] ^ Te2[(t2 >>  8) & 0xff] ^ Te3[t3 & 0xff] ^ rk[48];
920
+        s1 = Te0[t1 >> 24] ^ Te1[(t2 >> 16) & 0xff] ^ Te2[(t3 >>  8) & 0xff] ^ Te3[t0 & 0xff] ^ rk[49];
921
+        s2 = Te0[t2 >> 24] ^ Te1[(t3 >> 16) & 0xff] ^ Te2[(t0 >>  8) & 0xff] ^ Te3[t1 & 0xff] ^ rk[50];
922
+        s3 = Te0[t3 >> 24] ^ Te1[(t0 >> 16) & 0xff] ^ Te2[(t1 >>  8) & 0xff] ^ Te3[t2 & 0xff] ^ rk[51];
923
+        /* round 13: */
924
+        t0 = Te0[s0 >> 24] ^ Te1[(s1 >> 16) & 0xff] ^ Te2[(s2 >>  8) & 0xff] ^ Te3[s3 & 0xff] ^ rk[52];
925
+        t1 = Te0[s1 >> 24] ^ Te1[(s2 >> 16) & 0xff] ^ Te2[(s3 >>  8) & 0xff] ^ Te3[s0 & 0xff] ^ rk[53];
926
+        t2 = Te0[s2 >> 24] ^ Te1[(s3 >> 16) & 0xff] ^ Te2[(s0 >>  8) & 0xff] ^ Te3[s1 & 0xff] ^ rk[54];
927
+        t3 = Te0[s3 >> 24] ^ Te1[(s0 >> 16) & 0xff] ^ Te2[(s1 >>  8) & 0xff] ^ Te3[s2 & 0xff] ^ rk[55];
928
+      }
929
+    }
930
+    rk += nrounds << 2;
931
+  #else  /* !FULL_UNROLL */
932
+    /*
933
+    * nrounds - 1 full rounds:
934
+    */
935
+    r = nrounds >> 1;
936
+    for (;;)
937
+    {
938
+      t0 =
939
+        Te0[(s0 >> 24)       ] ^
940
+        Te1[(s1 >> 16) & 0xff] ^
941
+        Te2[(s2 >>  8) & 0xff] ^
942
+        Te3[(s3      ) & 0xff] ^
943
+        rk[4];
944
+      t1 =
945
+        Te0[(s1 >> 24)       ] ^
946
+        Te1[(s2 >> 16) & 0xff] ^
947
+        Te2[(s3 >>  8) & 0xff] ^
948
+        Te3[(s0      ) & 0xff] ^
949
+        rk[5];
950
+      t2 =
951
+        Te0[(s2 >> 24)       ] ^
952
+        Te1[(s3 >> 16) & 0xff] ^
953
+        Te2[(s0 >>  8) & 0xff] ^
954
+        Te3[(s1      ) & 0xff] ^
955
+        rk[6];
956
+      t3 =
957
+        Te0[(s3 >> 24)       ] ^
958
+        Te1[(s0 >> 16) & 0xff] ^
959
+        Te2[(s1 >>  8) & 0xff] ^
960
+        Te3[(s2      ) & 0xff] ^
961
+        rk[7];
962
+        rk += 8;
963
+        if (--r == 0)
964
+            break;
965
+      s0 =
966
+        Te0[(t0 >> 24)       ] ^
967
+        Te1[(t1 >> 16) & 0xff] ^
968
+        Te2[(t2 >>  8) & 0xff] ^
969
+        Te3[(t3      ) & 0xff] ^
970
+        rk[0];
971
+      s1 =
972
+        Te0[(t1 >> 24)       ] ^
973
+        Te1[(t2 >> 16) & 0xff] ^
974
+        Te2[(t3 >>  8) & 0xff] ^
975
+        Te3[(t0      ) & 0xff] ^
976
+        rk[1];
977
+      s2 =
978
+        Te0[(t2 >> 24)       ] ^
979
+        Te1[(t3 >> 16) & 0xff] ^
980
+        Te2[(t0 >>  8) & 0xff] ^
981
+        Te3[(t1      ) & 0xff] ^
982
+        rk[2];
983
+      s3 =
984
+        Te0[(t3 >> 24)       ] ^
985
+        Te1[(t0 >> 16) & 0xff] ^
986
+        Te2[(t1 >>  8) & 0xff] ^
987
+        Te3[(t2      ) & 0xff] ^
988
+        rk[3];
989
+     }
990
+ #endif /* ?FULL_UNROLL */
991
+  /*
992
+  * apply last round and
993
+  * map cipher state to byte array block:
994
+  */
995
+  s0 =
996
+    (Te4[(t0 >> 24)       ] & 0xff000000) ^
997
+    (Te4[(t1 >> 16) & 0xff] & 0x00ff0000) ^
998
+    (Te4[(t2 >>  8) & 0xff] & 0x0000ff00) ^
999
+    (Te4[(t3      ) & 0xff] & 0x000000ff) ^
1000
+    rk[0];
1001
+  PUTU32(ciphertext     , s0);
1002
+  s1 =
1003
+    (Te4[(t1 >> 24)       ] & 0xff000000) ^
1004
+    (Te4[(t2 >> 16) & 0xff] & 0x00ff0000) ^
1005
+    (Te4[(t3 >>  8) & 0xff] & 0x0000ff00) ^
1006
+    (Te4[(t0      ) & 0xff] & 0x000000ff) ^
1007
+    rk[1];
1008
+  PUTU32(ciphertext +  4, s1);
1009
+  s2 =
1010
+    (Te4[(t2 >> 24)       ] & 0xff000000) ^
1011
+    (Te4[(t3 >> 16) & 0xff] & 0x00ff0000) ^
1012
+    (Te4[(t0 >>  8) & 0xff] & 0x0000ff00) ^
1013
+    (Te4[(t1      ) & 0xff] & 0x000000ff) ^
1014
+    rk[2];
1015
+  PUTU32(ciphertext +  8, s2);
1016
+  s3 =
1017
+    (Te4[(t3 >> 24)       ] & 0xff000000) ^
1018
+    (Te4[(t0 >> 16) & 0xff] & 0x00ff0000) ^
1019
+    (Te4[(t1 >>  8) & 0xff] & 0x0000ff00) ^
1020
+    (Te4[(t2      ) & 0xff] & 0x000000ff) ^
1021
+    rk[3];
1022
+  PUTU32(ciphertext + 12, s3);
1023
+}
1024
+
1025
+void rijndaelDecrypt(const u32 *rk, int nrounds, const u8 ciphertext[16],
1026
+  u8 plaintext[16])
1027
+{
1028
+  u32 s0, s1, s2, s3, t0, t1, t2, t3;
1029
+  #ifndef FULL_UNROLL
1030
+    int r;
1031
+  #endif /* ?FULL_UNROLL */
1032
+
1033
+  /*
1034
+  * map byte array block to cipher state
1035
+  * and add initial round key:
1036
+  */
1037
+    s0 = GETU32(ciphertext     ) ^ rk[0];
1038
+    s1 = GETU32(ciphertext +  4) ^ rk[1];
1039
+    s2 = GETU32(ciphertext +  8) ^ rk[2];
1040
+    s3 = GETU32(ciphertext + 12) ^ rk[3];
1041
+  #ifdef FULL_UNROLL
1042
+    /* round 1: */
1043
+    t0 = Td0[s0 >> 24] ^ Td1[(s3 >> 16) & 0xff] ^ Td2[(s2 >>  8) & 0xff] ^ Td3[s1 & 0xff] ^ rk[ 4];
1044
+    t1 = Td0[s1 >> 24] ^ Td1[(s0 >> 16) & 0xff] ^ Td2[(s3 >>  8) & 0xff] ^ Td3[s2 & 0xff] ^ rk[ 5];
1045
+    t2 = Td0[s2 >> 24] ^ Td1[(s1 >> 16) & 0xff] ^ Td2[(s0 >>  8) & 0xff] ^ Td3[s3 & 0xff] ^ rk[ 6];
1046
+    t3 = Td0[s3 >> 24] ^ Td1[(s2 >> 16) & 0xff] ^ Td2[(s1 >>  8) & 0xff] ^ Td3[s0 & 0xff] ^ rk[ 7];
1047
+    /* round 2: */
1048
+    s0 = Td0[t0 >> 24] ^ Td1[(t3 >> 16) & 0xff] ^ Td2[(t2 >>  8) & 0xff] ^ Td3[t1 & 0xff] ^ rk[ 8];
1049
+    s1 = Td0[t1 >> 24] ^ Td1[(t0 >> 16) & 0xff] ^ Td2[(t3 >>  8) & 0xff] ^ Td3[t2 & 0xff] ^ rk[ 9];
1050
+    s2 = Td0[t2 >> 24] ^ Td1[(t1 >> 16) & 0xff] ^ Td2[(t0 >>  8) & 0xff] ^ Td3[t3 & 0xff] ^ rk[10];
1051
+    s3 = Td0[t3 >> 24] ^ Td1[(t2 >> 16) & 0xff] ^ Td2[(t1 >>  8) & 0xff] ^ Td3[t0 & 0xff] ^ rk[11];
1052
+    /* round 3: */
1053
+    t0 = Td0[s0 >> 24] ^ Td1[(s3 >> 16) & 0xff] ^ Td2[(s2 >>  8) & 0xff] ^ Td3[s1 & 0xff] ^ rk[12];
1054
+    t1 = Td0[s1 >> 24] ^ Td1[(s0 >> 16) & 0xff] ^ Td2[(s3 >>  8) & 0xff] ^ Td3[s2 & 0xff] ^ rk[13];
1055
+    t2 = Td0[s2 >> 24] ^ Td1[(s1 >> 16) & 0xff] ^ Td2[(s0 >>  8) & 0xff] ^ Td3[s3 & 0xff] ^ rk[14];
1056
+    t3 = Td0[s3 >> 24] ^ Td1[(s2 >> 16) & 0xff] ^ Td2[(s1 >>  8) & 0xff] ^ Td3[s0 & 0xff] ^ rk[15];
1057
+    /* round 4: */
1058
+    s0 = Td0[t0 >> 24] ^ Td1[(t3 >> 16) & 0xff] ^ Td2[(t2 >>  8) & 0xff] ^ Td3[t1 & 0xff] ^ rk[16];
1059
+    s1 = Td0[t1 >> 24] ^ Td1[(t0 >> 16) & 0xff] ^ Td2[(t3 >>  8) & 0xff] ^ Td3[t2 & 0xff] ^ rk[17];
1060
+    s2 = Td0[t2 >> 24] ^ Td1[(t1 >> 16) & 0xff] ^ Td2[(t0 >>  8) & 0xff] ^ Td3[t3 & 0xff] ^ rk[18];
1061
+    s3 = Td0[t3 >> 24] ^ Td1[(t2 >> 16) & 0xff] ^ Td2[(t1 >>  8) & 0xff] ^ Td3[t0 & 0xff] ^ rk[19];
1062
+    /* round 5: */
1063
+    t0 = Td0[s0 >> 24] ^ Td1[(s3 >> 16) & 0xff] ^ Td2[(s2 >>  8) & 0xff] ^ Td3[s1 & 0xff] ^ rk[20];
1064
+    t1 = Td0[s1 >> 24] ^ Td1[(s0 >> 16) & 0xff] ^ Td2[(s3 >>  8) & 0xff] ^ Td3[s2 & 0xff] ^ rk[21];
1065
+    t2 = Td0[s2 >> 24] ^ Td1[(s1 >> 16) & 0xff] ^ Td2[(s0 >>  8) & 0xff] ^ Td3[s3 & 0xff] ^ rk[22];
1066
+    t3 = Td0[s3 >> 24] ^ Td1[(s2 >> 16) & 0xff] ^ Td2[(s1 >>  8) & 0xff] ^ Td3[s0 & 0xff] ^ rk[23];
1067
+    /* round 6: */
1068
+    s0 = Td0[t0 >> 24] ^ Td1[(t3 >> 16) & 0xff] ^ Td2[(t2 >>  8) & 0xff] ^ Td3[t1 & 0xff] ^ rk[24];
1069
+    s1 = Td0[t1 >> 24] ^ Td1[(t0 >> 16) & 0xff] ^ Td2[(t3 >>  8) & 0xff] ^ Td3[t2 & 0xff] ^ rk[25];
1070
+    s2 = Td0[t2 >> 24] ^ Td1[(t1 >> 16) & 0xff] ^ Td2[(t0 >>  8) & 0xff] ^ Td3[t3 & 0xff] ^ rk[26];
1071
+    s3 = Td0[t3 >> 24] ^ Td1[(t2 >> 16) & 0xff] ^ Td2[(t1 >>  8) & 0xff] ^ Td3[t0 & 0xff] ^ rk[27];
1072
+    /* round 7: */
1073
+    t0 = Td0[s0 >> 24] ^ Td1[(s3 >> 16) & 0xff] ^ Td2[(s2 >>  8) & 0xff] ^ Td3[s1 & 0xff] ^ rk[28];
1074
+    t1 = Td0[s1 >> 24] ^ Td1[(s0 >> 16) & 0xff] ^ Td2[(s3 >>  8) & 0xff] ^ Td3[s2 & 0xff] ^ rk[29];
1075
+    t2 = Td0[s2 >> 24] ^ Td1[(s1 >> 16) & 0xff] ^ Td2[(s0 >>  8) & 0xff] ^ Td3[s3 & 0xff] ^ rk[30];
1076
+    t3 = Td0[s3 >> 24] ^ Td1[(s2 >> 16) & 0xff] ^ Td2[(s1 >>  8) & 0xff] ^ Td3[s0 & 0xff] ^ rk[31];
1077
+    /* round 8: */
1078
+    s0 = Td0[t0 >> 24] ^ Td1[(t3 >> 16) & 0xff] ^ Td2[(t2 >>  8) & 0xff] ^ Td3[t1 & 0xff] ^ rk[32];
1079
+    s1 = Td0[t1 >> 24] ^ Td1[(t0 >> 16) & 0xff] ^ Td2[(t3 >>  8) & 0xff] ^ Td3[t2 & 0xff] ^ rk[33];
1080
+    s2 = Td0[t2 >> 24] ^ Td1[(t1 >> 16) & 0xff] ^ Td2[(t0 >>  8) & 0xff] ^ Td3[t3 & 0xff] ^ rk[34];
1081
+    s3 = Td0[t3 >> 24] ^ Td1[(t2 >> 16) & 0xff] ^ Td2[(t1 >>  8) & 0xff] ^ Td3[t0 & 0xff] ^ rk[35];
1082
+    /* round 9: */
1083
+    t0 = Td0[s0 >> 24] ^ Td1[(s3 >> 16) & 0xff] ^ Td2[(s2 >>  8) & 0xff] ^ Td3[s1 & 0xff] ^ rk[36];
1084
+    t1 = Td0[s1 >> 24] ^ Td1[(s0 >> 16) & 0xff] ^ Td2[(s3 >>  8) & 0xff] ^ Td3[s2 & 0xff] ^ rk[37];
1085
+    t2 = Td0[s2 >> 24] ^ Td1[(s1 >> 16) & 0xff] ^ Td2[(s0 >>  8) & 0xff] ^ Td3[s3 & 0xff] ^ rk[38];
1086
+    t3 = Td0[s3 >> 24] ^ Td1[(s2 >> 16) & 0xff] ^ Td2[(s1 >>  8) & 0xff] ^ Td3[s0 & 0xff] ^ rk[39];
1087
+    if (nrounds > 10)
1088
+    {
1089
+      /* round 10: */
1090
+      s0 = Td0[t0 >> 24] ^ Td1[(t3 >> 16) & 0xff] ^ Td2[(t2 >>  8) & 0xff] ^ Td3[t1 & 0xff] ^ rk[40];
1091
+      s1 = Td0[t1 >> 24] ^ Td1[(t0 >> 16) & 0xff] ^ Td2[(t3 >>  8) & 0xff] ^ Td3[t2 & 0xff] ^ rk[41];
1092
+      s2 = Td0[t2 >> 24] ^ Td1[(t1 >> 16) & 0xff] ^ Td2[(t0 >>  8) & 0xff] ^ Td3[t3 & 0xff] ^ rk[42];
1093
+      s3 = Td0[t3 >> 24] ^ Td1[(t2 >> 16) & 0xff] ^ Td2[(t1 >>  8) & 0xff] ^ Td3[t0 & 0xff] ^ rk[43];
1094
+      /* round 11: */
1095
+      t0 = Td0[s0 >> 24] ^ Td1[(s3 >> 16) & 0xff] ^ Td2[(s2 >>  8) & 0xff] ^ Td3[s1 & 0xff] ^ rk[44];
1096
+      t1 = Td0[s1 >> 24] ^ Td1[(s0 >> 16) & 0xff] ^ Td2[(s3 >>  8) & 0xff] ^ Td3[s2 & 0xff] ^ rk[45];
1097
+      t2 = Td0[s2 >> 24] ^ Td1[(s1 >> 16) & 0xff] ^ Td2[(s0 >>  8) & 0xff] ^ Td3[s3 & 0xff] ^ rk[46];
1098
+      t3 = Td0[s3 >> 24] ^ Td1[(s2 >> 16) & 0xff] ^ Td2[(s1 >>  8) & 0xff] ^ Td3[s0 & 0xff] ^ rk[47];
1099
+      if (nrounds > 12)
1100
+      {
1101
+        /* round 12: */
1102
+        s0 = Td0[t0 >> 24] ^ Td1[(t3 >> 16) & 0xff] ^ Td2[(t2 >>  8) & 0xff] ^ Td3[t1 & 0xff] ^ rk[48];
1103
+        s1 = Td0[t1 >> 24] ^ Td1[(t0 >> 16) & 0xff] ^ Td2[(t3 >>  8) & 0xff] ^ Td3[t2 & 0xff] ^ rk[49];
1104
+        s2 = Td0[t2 >> 24] ^ Td1[(t1 >> 16) & 0xff] ^ Td2[(t0 >>  8) & 0xff] ^ Td3[t3 & 0xff] ^ rk[50];
1105
+        s3 = Td0[t3 >> 24] ^ Td1[(t2 >> 16) & 0xff] ^ Td2[(t1 >>  8) & 0xff] ^ Td3[t0 & 0xff] ^ rk[51];
1106
+        /* round 13: */
1107
+        t0 = Td0[s0 >> 24] ^ Td1[(s3 >> 16) & 0xff] ^ Td2[(s2 >>  8) & 0xff] ^ Td3[s1 & 0xff] ^ rk[52];
1108
+        t1 = Td0[s1 >> 24] ^ Td1[(s0 >> 16) & 0xff] ^ Td2[(s3 >>  8) & 0xff] ^ Td3[s2 & 0xff] ^ rk[53];
1109
+        t2 = Td0[s2 >> 24] ^ Td1[(s1 >> 16) & 0xff] ^ Td2[(s0 >>  8) & 0xff] ^ Td3[s3 & 0xff] ^ rk[54];
1110
+        t3 = Td0[s3 >> 24] ^ Td1[(s2 >> 16) & 0xff] ^ Td2[(s1 >>  8) & 0xff] ^ Td3[s0 & 0xff] ^ rk[55];
1111
+      }
1112
+    }
1113
+    rk += nrounds << 2;
1114
+  #else  /* !FULL_UNROLL */
1115
+    /*
1116
+    * nrounds - 1 full rounds:
1117
+    */
1118
+    r = nrounds >> 1;
1119
+    for (;;)
1120
+    {
1121
+      t0 =
1122
+        Td0[(s0 >> 24)       ] ^
1123
+        Td1[(s3 >> 16) & 0xff] ^
1124
+        Td2[(s2 >>  8) & 0xff] ^
1125
+        Td3[(s1      ) & 0xff] ^
1126
+        rk[4];
1127
+      t1 =
1128
+        Td0[(s1 >> 24)       ] ^
1129
+        Td1[(s0 >> 16) & 0xff] ^
1130
+        Td2[(s3 >>  8) & 0xff] ^
1131
+        Td3[(s2      ) & 0xff] ^
1132
+        rk[5];
1133
+      t2 =
1134
+        Td0[(s2 >> 24)       ] ^
1135
+        Td1[(s1 >> 16) & 0xff] ^
1136
+        Td2[(s0 >>  8) & 0xff] ^
1137
+        Td3[(s3      ) & 0xff] ^
1138
+        rk[6];
1139
+      t3 =
1140
+        Td0[(s3 >> 24)       ] ^
1141
+        Td1[(s2 >> 16) & 0xff] ^
1142
+        Td2[(s1 >>  8) & 0xff] ^
1143
+        Td3[(s0      ) & 0xff] ^
1144
+        rk[7];
1145
+      rk += 8;
1146
+      if (--r == 0)
1147
+          break;
1148
+      s0 =
1149
+        Td0[(t0 >> 24)       ] ^
1150
+        Td1[(t3 >> 16) & 0xff] ^
1151
+        Td2[(t2 >>  8) & 0xff] ^
1152
+        Td3[(t1      ) & 0xff] ^
1153
+        rk[0];
1154
+      s1 =
1155
+        Td0[(t1 >> 24)       ] ^
1156
+        Td1[(t0 >> 16) & 0xff] ^
1157
+        Td2[(t3 >>  8) & 0xff] ^
1158
+        Td3[(t2      ) & 0xff] ^
1159
+        rk[1];
1160
+      s2 =
1161
+        Td0[(t2 >> 24)       ] ^
1162
+        Td1[(t1 >> 16) & 0xff] ^
1163
+        Td2[(t0 >>  8) & 0xff] ^
1164
+        Td3[(t3      ) & 0xff] ^
1165
+        rk[2];
1166
+      s3 =
1167
+        Td0[(t3 >> 24)       ] ^
1168
+        Td1[(t2 >> 16) & 0xff] ^
1169
+        Td2[(t1 >>  8) & 0xff] ^
1170
+        Td3[(t0      ) & 0xff] ^
1171
+        rk[3];
1172
+    }
1173
+  #endif /* ?FULL_UNROLL */
1174
+  /*
1175
+  * apply last round and
1176
+  * map cipher state to byte array block:
1177
+  */
1178
+  s0 =
1179
+    (Td4[(t0 >> 24)       ] & 0xff000000) ^
1180
+    (Td4[(t3 >> 16) & 0xff] & 0x00ff0000) ^
1181
+    (Td4[(t2 >>  8) & 0xff] & 0x0000ff00) ^
1182
+    (Td4[(t1      ) & 0xff] & 0x000000ff) ^
1183
+    rk[0];
1184
+  PUTU32(plaintext     , s0);
1185
+  s1 =
1186
+    (Td4[(t1 >> 24)       ] & 0xff000000) ^
1187
+    (Td4[(t0 >> 16) & 0xff] & 0x00ff0000) ^
1188
+    (Td4[(t3 >>  8) & 0xff] & 0x0000ff00) ^
1189
+    (Td4[(t2      ) & 0xff] & 0x000000ff) ^
1190
+    rk[1];
1191
+  PUTU32(plaintext +  4, s1);
1192
+  s2 =
1193
+    (Td4[(t2 >> 24)       ] & 0xff000000) ^
1194
+    (Td4[(t1 >> 16) & 0xff] & 0x00ff0000) ^
1195
+    (Td4[(t0 >>  8) & 0xff] & 0x0000ff00) ^
1196
+    (Td4[(t3      ) & 0xff] & 0x000000ff) ^
1197
+    rk[2];
1198
+  PUTU32(plaintext +  8, s2);
1199
+  s3 =
1200
+    (Td4[(t3 >> 24)       ] & 0xff000000) ^
1201
+    (Td4[(t2 >> 16) & 0xff] & 0x00ff0000) ^
1202
+    (Td4[(t1 >>  8) & 0xff] & 0x0000ff00) ^
1203
+    (Td4[(t0      ) & 0xff] & 0x000000ff) ^
1204
+    rk[3];
1205
+  PUTU32(plaintext + 12, s3);
1206
+}
1207
+
0 1208
new file mode 100644
... ...
@@ -0,0 +1,14 @@
0
+#ifndef H__RIJNDAEL
1
+#define H__RIJNDAEL
2
+
3
+int rijndaelSetupDecrypt(unsigned long *rk, const unsigned char *key,
4
+  int keybits);
5
+void rijndaelDecrypt(const unsigned long *rk, int nrounds,
6
+  const unsigned char ciphertext[16], unsigned char plaintext[16]);
7
+
8
+#define KEYLENGTH(keybits) ((keybits)/8)
9
+#define RKLENGTH(keybits)  ((keybits)/8+28)
10
+#define NROUNDS(keybits)   ((keybits)/32+6)
11
+
12
+#endif
13
+