#include "aes.h"

#define sb0(a,b,c,d,e,f,g,h) (t1 = a ^ d, t2 = a & d, t3 = c ^ t1, t6 = b & t1, t4 = b ^ t3, t10 = ~t3, h = t2 ^ t4, t7 = a ^ t6, t14 = ~t7, t8 = c | t7, t11 = t3 ^ t7, g = t4 ^ t8, t12 = h & t11, f = t10 ^ t12, e = t12 ^ t14)
#define ib0(a,b,c,d,e,f,g,h) (t1 = ~a, t2 = a ^ b, t3 = t1 | t2, t4 = d ^ t3, t7 = d & t2, t5 = c ^ t4, t8 = t1 ^ t7, g = t2 ^ t5, t11 = a & t4, t9 = g & t8, t14 = t5 ^ t8, f = t4 ^ t9, t12 = t5 | f, h = t11 ^ t12, e = h ^ t14)
#define sb1(a,b,c,d,e,f,g,h) (t1 = ~a, t2 = b ^ t1, t3 = a | t2, t4 = d | t2, t5 = c ^ t3, g = d ^ t5, t7 = b ^ t4, t8 = t2 ^ g, t9 = t5 & t7, h = t8 ^ t9, t11 = t5 ^ t7, f = h ^ t11, t13 = t8 & t11, e = t5 ^ t13)
#define ib1(a,b,c,d,e,f,g,h) (t1 = a ^ d, t2 = a & b, t3 = b ^ c, t4 = a ^ t3, t5 = b | d, t7 = c | t1, h = t4 ^ t5, t8 = b ^ t7, t11 = ~t2, t9 = t4 & t8, f = t1 ^ t9, t13 = t9 ^ t11, t12 = h & f, g = t12 ^ t13, t15 = a & d, t16 = c ^ t13, e = t15 ^ t16)
#define sb2(a,b,c,d,e,f,g,h) (t1 = ~a, t2 = b ^ d, t3 = c & t1, t13 = d | t1, e = t2 ^ t3, t5 = c ^ t1, t6 = c ^ e, t7 = b & t6, t10 = e | t5, h = t5 ^ t7, t9 = d | t7, t11 = t9 & t10, t14 = t2 ^ h, g = a ^ t11, t15 = g ^ t13, f = t14 ^ t15)
#define ib2(a,b,c,d,e,f,g,h) (t1 = b ^ d, t2 = ~t1, t3 = a ^ c, t4 = c ^ t1, t7 = a | t2, t5 = b & t4, t8 = d ^ t7, t11 = ~t4, e = t3 ^ t5, t9 = t3 | t8, t14 = d & t11, h = t1 ^ t9, t12 = e | h, f = t11 ^ t12, t15 = t3 ^ t12, g = t14 ^ t15)
#define sb3(a,b,c,d,e,f,g,h) (t1 = a ^ c, t2 = d ^ t1, t3 = a & t2, t4 = d ^ t3, t5 = b & t4, g = t2 ^ t5, t7 = a | g, t8 = b | d, t11 = a | d, t9 = t4 & t7, f = t8 ^ t9, t12 = b ^ t11, t13 = g ^ t9, t15 = t3 ^ t8, h = t12 ^ t13, t16 = c & t15, e = t12 ^ t16)
#define ib3(a,b,c,d,e,f,g,h) (t1 = b ^ c, t2 = b | c, t3 = a ^ c, t7 = a ^ d, t4 = t2 ^ t3, t5 = d | t4, t9 = t2 ^ t7, e = t1 ^ t5, t8 = t1 | t5, t11 = a & t4, g = t8 ^ t9, t12 = e | t9, f = t11 ^ t12, t14 = a & g, t15 = t2 ^ t14, t16 = e & t15, h = t4 ^ t16)
#define sb4(a,b,c,d,e,f,g,h) (t1 = a ^ d, t2 = d & t1, t3 = c ^ t2, t4 = b | t3, h = t1 ^ t4, t6 = ~b, t7 = t1 | t6, e = t3 ^ t7, t9 = a & e, t10 = t1 ^ t6, t11 = t4 & t10, g = t9 ^ t11, t13 = a ^ t3, t14 = t10 & g, f = t13 ^ t14)
#define ib4(a,b,c,d,e,f,g,h) (t1 = c ^ d, t2 = c | d, t3 = b ^ t2, t4 = a & t3, f = t1 ^ t4, t6 = a ^ d, t7 = b | d, t8 = t6 & t7, h = t3 ^ t8, t10 = ~a, t11 = c ^ h, t12 = t10 | t11, e = t3 ^ t12, t14 = c | t4, t15 = t7 ^ t14, t16 = h | t10, g = t15 ^ t16)
#define sb5(a,b,c,d,e,f,g,h) (t1 = ~a, t2 = a ^ b, t3 = a ^ d, t4 = c ^ t1, t5 = t2 | t3, e = t4 ^ t5, t7 = d & e, t8 = t2 ^ e, t10 = t1 | e, f = t7 ^ t8, t11 = t2 | t7, t12 = t3 ^ t10, t14 = b ^ t7, g = t11 ^ t12, t15 = f & t12, h = t14 ^ t15)
#define ib5(a,b,c,d,e,f,g,h) (t1 = ~c, t2 = b & t1, t3 = d ^ t2, t4 = a & t3, t5 = b ^ t1, h = t4 ^ t5, t7 = b | h, t8 = a & t7, f = t3 ^ t8, t10 = a | d, t11 = t1 ^ t7, e = t10 ^ t11, t13 = a ^ c, t14 = b & t10, t15 = t4 | t13, g = t14 ^ t15)
#define sb6(a,b,c,d,e,f,g,h) (t1 = ~a, t2 = a ^ d, t3 = b ^ t2, t4 = t1 | t2, t5 = c ^ t4, f = b ^ t5, t13 = ~t5, t7 = t2 | f, t8 = d ^ t7, t9 = t5 & t8, g = t3 ^ t9, t11 = t5 ^ t8, e = g ^ t11, t14 = t3 & t11, h = t13 ^ t14)
#define ib6(a,b,c,d,e,f,g,h) (t1 = ~a, t2 = a ^ b, t3 = c ^ t2, t4 = c | t1, t5 = d ^ t4, t13 = d & t1, f = t3 ^ t5, t7 = t3 & t5, t8 = t2 ^ t7, t9 = b | t8, h = t5 ^ t9, t11 = b | h, e = t8 ^ t11, t14 = t3 ^ t11, g = t13 ^ t14)
#define sb7(a,b,c,d,e,f,g,h) (t1 = ~c, t2 = b ^ c, t3 = b | t1, t4 = d ^ t3, t5 = a & t4, t7 = a ^ d, h = t2 ^ t5, t8 = b ^ t5, t9 = t2 | t8, t11 = d & t3, f = t7 ^ t9, t12 = t5 ^ f, t15 = t1 | t4, t13 = h & t12, g = t11 ^ t13, t16 = t12 ^ g, e = t15 ^ t16)
#define ib7(a,b,c,d,e,f,g,h) (t1 = a & b, t2 = a | b, t3 = c | t1, t4 = d & t2, h = t3 ^ t4, t6 = ~d, t7 = b ^ t4, t8 = h ^ t6, t11 = c ^ t7, t9 = t7 | t8, f = a ^ t9, t12 = d | f, e = t11 ^ t12, t14 = a & h, t15 = t3 ^ f, t16 = e ^ t14, g = t15 ^ t16)
#define k_xor(r,a,b,c,d) (a ^= ks->serpent.key[4 * r + 8], b ^= ks->serpent.key[4 * r + 9], c ^= ks->serpent.key[4 * r + 10], d ^= ks->serpent.key[4 * r + 11])
#define k_set(r,a,b,c,d) (a = ks->serpent.key[4 * r + 8], b = ks->serpent.key[4 * r + 9], c = ks->serpent.key[4 * r + 10], d = ks->serpent.key[4 * r + 11])
#define k_get(r,a,b,c,d) (ks->serpent.key[4 * r + 8] = a, ks->serpent.key[4 * r + 9] = b, ks->serpent.key[4 * r + 10] = c, ks->serpent.key[4 * r + 11] = d)
#define ltf(a,b,c,d) a = rotl32(a, 13), c = rotl32(c, 3), d ^= c ^ (a << 3), b ^= a ^ c, d = rotl32(d, 7), b = rotl32(b, 1), a ^= b ^ d, c ^= d ^ (b << 7), a = rotl32(a, 5), c = rotl32(c, 22)
#define itf(a,b,c,d) c = rotr32(c, 22), a = rotr32(a, 5), c ^= d ^ (b << 7), a ^= b ^ d, d = rotr32(d, 7), b = rotr32(b, 1), d ^= c ^ (a << 3), b ^= a ^ c, c = rotr32(c, 3), a = rotr32(a, 13)

aes_keystream * serpent_setkey (const unsigned long *key, aes_keystream *ks)
{
	unsigned long	i,lk,a,b,c,d,e,f,g,h;
	unsigned long	t1,t2,t3,t4,t5,t6,t7,t8,t9,t10,t11,t12,t13,t14,t15,t16;
	
	for (i = 0; i < 8; i++) ks->serpent.key[i] = lsf32 (key[i]);
	
	for (i = 0; i < 132; i++)
	{
		lk = ks->serpent.key[i] ^ ks->serpent.key[i + 3] ^ ks->serpent.key[i + 5] ^ ks->serpent.key[i + 7] ^ i ^ 0x9E3779B9;
		ks->serpent.key[i + 8] = (lk << 11) | (lk >> 21);
	}
	
	k_set( 0,a,b,c,d); sb3(a,b,c,d,e,f,g,h); k_get( 0,e,f,g,h);
	k_set( 1,a,b,c,d); sb2(a,b,c,d,e,f,g,h); k_get( 1,e,f,g,h);
	k_set( 2,a,b,c,d); sb1(a,b,c,d,e,f,g,h); k_get( 2,e,f,g,h);
	k_set( 3,a,b,c,d); sb0(a,b,c,d,e,f,g,h); k_get( 3,e,f,g,h);
	k_set( 4,a,b,c,d); sb7(a,b,c,d,e,f,g,h); k_get( 4,e,f,g,h);
	k_set( 5,a,b,c,d); sb6(a,b,c,d,e,f,g,h); k_get( 5,e,f,g,h);
	k_set( 6,a,b,c,d); sb5(a,b,c,d,e,f,g,h); k_get( 6,e,f,g,h);
	k_set( 7,a,b,c,d); sb4(a,b,c,d,e,f,g,h); k_get( 7,e,f,g,h);
	k_set( 8,a,b,c,d); sb3(a,b,c,d,e,f,g,h); k_get( 8,e,f,g,h);
	k_set( 9,a,b,c,d); sb2(a,b,c,d,e,f,g,h); k_get( 9,e,f,g,h);
	k_set(10,a,b,c,d); sb1(a,b,c,d,e,f,g,h); k_get(10,e,f,g,h);
	k_set(11,a,b,c,d); sb0(a,b,c,d,e,f,g,h); k_get(11,e,f,g,h);
	k_set(12,a,b,c,d); sb7(a,b,c,d,e,f,g,h); k_get(12,e,f,g,h);
	k_set(13,a,b,c,d); sb6(a,b,c,d,e,f,g,h); k_get(13,e,f,g,h);
	k_set(14,a,b,c,d); sb5(a,b,c,d,e,f,g,h); k_get(14,e,f,g,h);
	k_set(15,a,b,c,d); sb4(a,b,c,d,e,f,g,h); k_get(15,e,f,g,h);
	k_set(16,a,b,c,d); sb3(a,b,c,d,e,f,g,h); k_get(16,e,f,g,h);
	k_set(17,a,b,c,d); sb2(a,b,c,d,e,f,g,h); k_get(17,e,f,g,h);
	k_set(18,a,b,c,d); sb1(a,b,c,d,e,f,g,h); k_get(18,e,f,g,h);
	k_set(19,a,b,c,d); sb0(a,b,c,d,e,f,g,h); k_get(19,e,f,g,h);
	k_set(20,a,b,c,d); sb7(a,b,c,d,e,f,g,h); k_get(20,e,f,g,h);
	k_set(21,a,b,c,d); sb6(a,b,c,d,e,f,g,h); k_get(21,e,f,g,h);
	k_set(22,a,b,c,d); sb5(a,b,c,d,e,f,g,h); k_get(22,e,f,g,h);
	k_set(23,a,b,c,d); sb4(a,b,c,d,e,f,g,h); k_get(23,e,f,g,h);
	k_set(24,a,b,c,d); sb3(a,b,c,d,e,f,g,h); k_get(24,e,f,g,h);
	k_set(25,a,b,c,d); sb2(a,b,c,d,e,f,g,h); k_get(25,e,f,g,h);
	k_set(26,a,b,c,d); sb1(a,b,c,d,e,f,g,h); k_get(26,e,f,g,h);
	k_set(27,a,b,c,d); sb0(a,b,c,d,e,f,g,h); k_get(27,e,f,g,h);
	k_set(28,a,b,c,d); sb7(a,b,c,d,e,f,g,h); k_get(28,e,f,g,h);
	k_set(29,a,b,c,d); sb6(a,b,c,d,e,f,g,h); k_get(29,e,f,g,h);
	k_set(30,a,b,c,d); sb5(a,b,c,d,e,f,g,h); k_get(30,e,f,g,h);
	k_set(31,a,b,c,d); sb4(a,b,c,d,e,f,g,h); k_get(31,e,f,g,h);
	k_set(32,a,b,c,d); sb3(a,b,c,d,e,f,g,h); k_get(32,e,f,g,h);

	return ks;
}

OCTET * serpent_encrypt (OCTET one_block[2], const aes_keystream *ks)
{
	unsigned long	a,b,c,d,e,f,g,h;
	unsigned long	t1,t2,t3,t4,t5,t6,t7,t8,t9,t10,t11,t12,t13,t14,t15,t16;
	
	a = lsf32 (one_block->D[0]); b = lsf32 (one_block->D[1]); c = lsf32 (one_block->D[2]); d = lsf32 (one_block->D[3]);
	k_xor( 0,a,b,c,d); sb0(a,b,c,d,e,f,g,h); ltf(e,f,g,h);
	k_xor( 1,e,f,g,h); sb1(e,f,g,h,a,b,c,d); ltf(a,b,c,d);
	k_xor( 2,a,b,c,d); sb2(a,b,c,d,e,f,g,h); ltf(e,f,g,h);
	k_xor( 3,e,f,g,h); sb3(e,f,g,h,a,b,c,d); ltf(a,b,c,d);
	k_xor( 4,a,b,c,d); sb4(a,b,c,d,e,f,g,h); ltf(e,f,g,h);
	k_xor( 5,e,f,g,h); sb5(e,f,g,h,a,b,c,d); ltf(a,b,c,d);
	k_xor( 6,a,b,c,d); sb6(a,b,c,d,e,f,g,h); ltf(e,f,g,h);
	k_xor( 7,e,f,g,h); sb7(e,f,g,h,a,b,c,d); ltf(a,b,c,d);
	k_xor( 8,a,b,c,d); sb0(a,b,c,d,e,f,g,h); ltf(e,f,g,h);
	k_xor( 9,e,f,g,h); sb1(e,f,g,h,a,b,c,d); ltf(a,b,c,d);
	k_xor(10,a,b,c,d); sb2(a,b,c,d,e,f,g,h); ltf(e,f,g,h);
	k_xor(11,e,f,g,h); sb3(e,f,g,h,a,b,c,d); ltf(a,b,c,d);
	k_xor(12,a,b,c,d); sb4(a,b,c,d,e,f,g,h); ltf(e,f,g,h);
	k_xor(13,e,f,g,h); sb5(e,f,g,h,a,b,c,d); ltf(a,b,c,d);
	k_xor(14,a,b,c,d); sb6(a,b,c,d,e,f,g,h); ltf(e,f,g,h);
	k_xor(15,e,f,g,h); sb7(e,f,g,h,a,b,c,d); ltf(a,b,c,d);
	k_xor(16,a,b,c,d); sb0(a,b,c,d,e,f,g,h); ltf(e,f,g,h);
	k_xor(17,e,f,g,h); sb1(e,f,g,h,a,b,c,d); ltf(a,b,c,d);
	k_xor(18,a,b,c,d); sb2(a,b,c,d,e,f,g,h); ltf(e,f,g,h);
	k_xor(19,e,f,g,h); sb3(e,f,g,h,a,b,c,d); ltf(a,b,c,d);
	k_xor(20,a,b,c,d); sb4(a,b,c,d,e,f,g,h); ltf(e,f,g,h);
	k_xor(21,e,f,g,h); sb5(e,f,g,h,a,b,c,d); ltf(a,b,c,d);
	k_xor(22,a,b,c,d); sb6(a,b,c,d,e,f,g,h); ltf(e,f,g,h);
	k_xor(23,e,f,g,h); sb7(e,f,g,h,a,b,c,d); ltf(a,b,c,d);
	k_xor(24,a,b,c,d); sb0(a,b,c,d,e,f,g,h); ltf(e,f,g,h);
	k_xor(25,e,f,g,h); sb1(e,f,g,h,a,b,c,d); ltf(a,b,c,d);
	k_xor(26,a,b,c,d); sb2(a,b,c,d,e,f,g,h); ltf(e,f,g,h);
	k_xor(27,e,f,g,h); sb3(e,f,g,h,a,b,c,d); ltf(a,b,c,d);
	k_xor(28,a,b,c,d); sb4(a,b,c,d,e,f,g,h); ltf(e,f,g,h);
	k_xor(29,e,f,g,h); sb5(e,f,g,h,a,b,c,d); ltf(a,b,c,d);
	k_xor(30,a,b,c,d); sb6(a,b,c,d,e,f,g,h); ltf(e,f,g,h);
	k_xor(31,e,f,g,h); sb7(e,f,g,h,a,b,c,d); k_xor(32,a,b,c,d);
	one_block->D[0] = lsf32 (a); one_block->D[1] = lsf32 (b); one_block->D[2] = lsf32 (c); one_block->D[3] = lsf32 (d);
	
	return one_block;
}

OCTET * serpent_decrypt (OCTET one_block[2], const aes_keystream *ks)
{
	unsigned long	a,b,c,d,e,f,g,h;
	unsigned long	t1,t2,t3,t4,t5,t6,t7,t8,t9,t10,t11,t12,t13,t14,t15,t16;
	
	a = lsf32 (one_block->D[0]); b = lsf32 (one_block->D[1]); c = lsf32 (one_block->D[2]); d = lsf32 (one_block->D[3]);
	k_xor(32,a,b,c,d); ib7(a,b,c,d,e,f,g,h); k_xor(31,e,f,g,h);
	itf(e,f,g,h); ib6(e,f,g,h,a,b,c,d); k_xor(30,a,b,c,d);
	itf(a,b,c,d); ib5(a,b,c,d,e,f,g,h); k_xor(29,e,f,g,h);
	itf(e,f,g,h); ib4(e,f,g,h,a,b,c,d); k_xor(28,a,b,c,d);
	itf(a,b,c,d); ib3(a,b,c,d,e,f,g,h); k_xor(27,e,f,g,h);
	itf(e,f,g,h); ib2(e,f,g,h,a,b,c,d); k_xor(26,a,b,c,d);
	itf(a,b,c,d); ib1(a,b,c,d,e,f,g,h); k_xor(25,e,f,g,h);
	itf(e,f,g,h); ib0(e,f,g,h,a,b,c,d); k_xor(24,a,b,c,d);
	itf(a,b,c,d); ib7(a,b,c,d,e,f,g,h); k_xor(23,e,f,g,h);
	itf(e,f,g,h); ib6(e,f,g,h,a,b,c,d); k_xor(22,a,b,c,d);
	itf(a,b,c,d); ib5(a,b,c,d,e,f,g,h); k_xor(21,e,f,g,h);
	itf(e,f,g,h); ib4(e,f,g,h,a,b,c,d); k_xor(20,a,b,c,d);
	itf(a,b,c,d); ib3(a,b,c,d,e,f,g,h); k_xor(19,e,f,g,h);
	itf(e,f,g,h); ib2(e,f,g,h,a,b,c,d); k_xor(18,a,b,c,d);
	itf(a,b,c,d); ib1(a,b,c,d,e,f,g,h); k_xor(17,e,f,g,h);
	itf(e,f,g,h); ib0(e,f,g,h,a,b,c,d); k_xor(16,a,b,c,d);
	itf(a,b,c,d); ib7(a,b,c,d,e,f,g,h); k_xor(15,e,f,g,h);
	itf(e,f,g,h); ib6(e,f,g,h,a,b,c,d); k_xor(14,a,b,c,d);
	itf(a,b,c,d); ib5(a,b,c,d,e,f,g,h); k_xor(13,e,f,g,h);
	itf(e,f,g,h); ib4(e,f,g,h,a,b,c,d); k_xor(12,a,b,c,d);
	itf(a,b,c,d); ib3(a,b,c,d,e,f,g,h); k_xor(11,e,f,g,h);
	itf(e,f,g,h); ib2(e,f,g,h,a,b,c,d); k_xor(10,a,b,c,d);
	itf(a,b,c,d); ib1(a,b,c,d,e,f,g,h); k_xor( 9,e,f,g,h);
	itf(e,f,g,h); ib0(e,f,g,h,a,b,c,d); k_xor( 8,a,b,c,d);
	itf(a,b,c,d); ib7(a,b,c,d,e,f,g,h); k_xor( 7,e,f,g,h);
	itf(e,f,g,h); ib6(e,f,g,h,a,b,c,d); k_xor( 6,a,b,c,d);
	itf(a,b,c,d); ib5(a,b,c,d,e,f,g,h); k_xor( 5,e,f,g,h);
	itf(e,f,g,h); ib4(e,f,g,h,a,b,c,d); k_xor( 4,a,b,c,d);
	itf(a,b,c,d); ib3(a,b,c,d,e,f,g,h); k_xor( 3,e,f,g,h);
	itf(e,f,g,h); ib2(e,f,g,h,a,b,c,d); k_xor( 2,a,b,c,d);
	itf(a,b,c,d); ib1(a,b,c,d,e,f,g,h); k_xor( 1,e,f,g,h);
	itf(e,f,g,h); ib0(e,f,g,h,a,b,c,d); k_xor( 0,a,b,c,d);
	one_block->D[0] = lsf32 (a); one_block->D[1] = lsf32 (b); one_block->D[2] = lsf32 (c); one_block->D[3] = lsf32 (d);
	
	return one_block;
}