des.cpp

对于PC/SC读写器调用的示例程序

/*************************************

         DES 算法程序

**************************************/

#include "stdafx.h"
#include <stdio.h>
#include <string.h>
void IC_expand(unsigned char *in,unsigned char *out);
void IC_compress(unsigned char	*in,unsigned char *out);
/*
 * This program implements the
 * Proposed Federal Information Processing
 *  Data Encryption Standard.
 * See Federal Register, March 17, 1975 (40FR12134)
 */

/*
 * Initial permutation,初时置换表IP 
 */
static	unsigned char	IP[] = {
	58,50,42,34,26,18,10, 2,
	60,52,44,36,28,20,12, 4,
	62,54,46,38,30,22,14, 6,
	64,56,48,40,32,24,16, 8,
	57,49,41,33,25,17, 9, 1,
	59,51,43,35,27,19,11, 3,
	61,53,45,37,29,21,13, 5,
	63,55,47,39,31,23,15, 7,
};

/*
 * Final permutation, FP = IP^(-1)逆置换表IP^(-1)
 */
static	unsigned char	FP[] = {
	40, 8,48,16,56,24,64,32,
	39, 7,47,15,55,23,63,31,
	38, 6,46,14,54,22,62,30,
	37, 5,45,13,53,21,61,29,
	36, 4,44,12,52,20,60,28,
	35, 3,43,11,51,19,59,27,
	34, 2,42,10,50,18,58,26,
	33, 1,41, 9,49,17,57,25,
};

/*
 * Permuted-choice 1 from the key bits
 * to yield C and D.
 * Note that bits 8,16... are left out:
 * They are intended for a parity check.
 * 选择换位PC-1
 */
static	unsigned char	PC1_C[] = {
	57,49,41,33,25,17, 9,
	 1,58,50,42,34,26,18,
	10, 2,59,51,43,35,27,
	19,11, 3,60,52,44,36,
};

static	unsigned char	PC1_D[] = {
	63,55,47,39,31,23,15,
	 7,62,54,46,38,30,22,
	14, 6,61,53,45,37,29,
	21,13, 5,28,20,12, 4,
};

/*
 * Sequence of shifts used for the key schedule.
 * 循环移位次数
*/
static	unsigned char	shifts[] = {
	1,1,2,2,2,2,2,2,1,2,2,2,2,2,2,1,
};

/*
 * Permuted-choice 2, to pick out the bits from
 * the CD array that generate the key schedule.
 * 缩小选择换位PC-2
 */
static	unsigned char	PC2_C[] = {
	14,17,11,24, 1, 5,
	 3,28,15, 6,21,10,
	23,19,12, 4,26, 8,
	16, 7,27,20,13, 2,
};

static	unsigned char	PC2_D[] = {
	41,52,31,37,47,55,
	30,40,51,45,33,48,
	44,49,39,56,34,53,
	46,42,50,36,29,32,
};

/*
 * The C and D arrays used to calculate the key schedule.
 */

static	unsigned char	C[64];
static	unsigned char	D[64];
/*
 * The key schedule.
 * Generated from the key.
 */
static	unsigned char	KS[16][48];

/*
 * The E bit-selection table.
 * 放大换位表 E
 */
static	unsigned char	E[64];
static	unsigned char	e[] = {
	32, 1, 2, 3, 4, 5,
	 4, 5, 6, 7, 8, 9,
	 8, 9,10,11,12,13,
	12,13,14,15,16,17,
	16,17,18,19,20,21,
	20,21,22,23,24,25,
	24,25,26,27,28,29,
	28,29,30,31,32, 1,
};

/*
 * Set up the key schedule from the key.
 */

void IC_SetKey(unsigned char *key)
{
	register i, j;
        unsigned char k;
	int t;

	/*
	 * First, generate C and D by permuting
	 * the key.  The low order bit of each
	 * 8-bit unsigned char is not used, so C and D are only 28
	 * bits apiece.
	 */
	for (i=0; i<28; i++) {
		C[i] = key[PC1_C[i]-1];
		D[i] = key[PC1_D[i]-1];
	}
	
	/*
	 * To generate Ki, rotate C and D according
	 * to schedule and pick up a permutation
	 * using PC2.
	 */
	for (i=0; i<16; i++) {
		/*
		 * rotate.
		 */
		for (k=0; k<shifts[i]; k++) {
			t = C[0];
			for (j=0; j<28-1; j++)
				C[j] = C[j+1];
			C[27] = t;
			t = D[0];
			for (j=0; j<28-1; j++)
				D[j] = D[j+1];
			D[27] = t;
		}
		/*
		 * get Ki. Note C and D are concatenated.
		 */
		for (j=0; j<24; j++) {
			KS[i][j] = C[PC2_C[j]-1];
			KS[i][j+24] = D[PC2_D[j]-28-1];
		}
	}

	for(i=0;i<48;i++)
		E[i] = e[i];
 }

/*
 * The 8 selection functions.
 * For some reason, they give a 0-origin
 * index, unlike everything else.
 * 选择函数 S(i)
 */
static	unsigned char	S[8][64] = {
	14, 4,13, 1, 2,15,11, 8, 3,10, 6,12, 5, 9, 0, 7,
	 0,15, 7, 4,14, 2,13, 1,10, 6,12,11, 9, 5, 3, 8,
	 4, 1,14, 8,13, 6, 2,11,15,12, 9, 7, 3,10, 5, 0,
	15,12, 8, 2, 4, 9, 1, 7, 5,11, 3,14,10, 0, 6,13,

	15, 1, 8,14, 6,11, 3, 4, 9, 7, 2,13,12, 0, 5,10,
	 3,13, 4, 7,15, 2, 8,14,12, 0, 1,10, 6, 9,11, 5,
	 0,14, 7,11,10, 4,13, 1, 5, 8,12, 6, 9, 3, 2,15,
	13, 8,10, 1, 3,15, 4, 2,11, 6, 7,12, 0, 5,14, 9,

	10, 0, 9,14, 6, 3,15, 5, 1,13,12, 7,11, 4, 2, 8,
	13, 7, 0, 9, 3, 4, 6,10, 2, 8, 5,14,12,11,15, 1,
	13, 6, 4, 9, 8,15, 3, 0,11, 1, 2,12, 5,10,14, 7,
	 1,10,13, 0, 6, 9, 8, 7, 4,15,14, 3,11, 5, 2,12,

	 7,13,14, 3, 0, 6, 9,10, 1, 2, 8, 5,11,12, 4,15,
	13, 8,11, 5, 6,15, 0, 3, 4, 7, 2,12, 1,10,14, 9,
	10, 6, 9, 0,12,11, 7,13,15, 1, 3,14, 5, 2, 8, 4,
	 3,15, 0, 6,10, 1,13, 8, 9, 4, 5,11,12, 7, 2,14,

	 2,12, 4, 1, 7,10,11, 6, 8, 5, 3,15,13, 0,14, 9,
	14,11, 2,12, 4, 7,13, 1, 5, 0,15,10, 3, 9, 8, 6,
	 4, 2, 1,11,10,13, 7, 8,15, 9,12, 5, 6, 3, 0,14,
	11, 8,12, 7, 1,14, 2,13, 6,15, 0, 9,10, 4, 5, 3,

	12, 1,10,15, 9, 2, 6, 8, 0,13, 3, 4,14, 7, 5,11,
	10,15, 4, 2, 7,12, 9, 5, 6, 1,13,14, 0,11, 3, 8,
	 9,14,15, 5, 2, 8,12, 3, 7, 0, 4,10, 1,13,11, 6,
	 4, 3, 2,12, 9, 5,15,10,11,14, 1, 7, 6, 0, 8,13,

	 4,11, 2,14,15, 0, 8,13, 3,12, 9, 7, 5,10, 6, 1,
	13, 0,11, 7, 4, 9, 1,10,14, 3, 5,12, 2,15, 8, 6,
	 1, 4,11,13,12, 3, 7,14,10,15, 6, 8, 0, 5, 9, 2,
	 6,11,13, 8, 1, 4,10, 7, 9, 5, 0,15,14, 2, 3,12,

	13, 2, 8, 4, 6,15,11, 1,10, 9, 3,14, 5, 0,12, 7,
	 1,15,13, 8,10, 3, 7, 4,12, 5, 6,11, 0,14, 9, 2,
	 7,11, 4, 1, 9,12,14, 2, 0, 6,10,13,15, 3, 5, 8,
	 2, 1,14, 7, 4,10, 8,13,15,12, 9, 0, 3, 5, 6,11,
};

/*
 * P is a permutation on the selected combination
 * of the current L and key.
 * 单纯换位表
 */
static	unsigned char	P[] = {
	16, 7,20,21,
	29,12,28,17,
	 1,15,23,26,
	 5,18,31,10,
	 2, 8,24,14,
	32,27, 3, 9,
	19,13,30, 6,
	22,11, 4,25,
};

/*
 * The current block, divided into 2 halves.
 */
static	unsigned  char	L[64], R[64];
static	unsigned char	tempL[64];
static	unsigned char	f[64];

/*
 * The combination of the key and the input, before selection.
 */
static	unsigned char	preS[64];

/*
 * The payoff: encrypt a block.
 */

void IC_encrypt(unsigned char *block,int edflag)
{
	int i, ii;
	register t, j, k;

	/*
	 * First, permute the bits in the input
	 */
	for (j=0; j<64; j++) L[j] = block[IP[j]-1];

/*============================================== */
	for (j=0;j<32;j++) R[j] = L[j+32];
/*============================================== */

	/*
	 * Perform an encryption operation 16 times.
	 */
	for (ii=0; ii<16; ii++) 
	{
		/*
		 * Set direction
		 */
		if (edflag)
			i = 15-ii;
		else
			i = ii;
		/*
		 * Save the R array,
		 * which will be the new L.
		 */
		for (j=0; j<32; j++)
			tempL[j] = R[j];

		/*
		 * Expand R to 48 bits using the E selector;
		 * exclusive-or with the current key bits.
		 */
		for (j=0; j<48; j++)
			preS[j] = R[E[j]-1] ^ KS[i][j];

		/*
		 * The pre-select bits are now considered
		 * in 8 groups of 6 bits each.
		 * The 8 selection functions map these
		 * 6-bit quantities into 4-bit quantities
		 * and the results permuted
		 * to make an f(R, K).
		 * The indexing into the selection functions
		 * is peculiar; it could be simplified by
		 * rewriting the tables.
		 */
		for (j=0; j<8; j++) 
		{
			t = 6*j;
			k = S[j][(preS[t+0]<<5)+
				(preS[t+1]<<3)+
				(preS[t+2]<<2)+
				(preS[t+3]<<1)+
				(preS[t+4]<<0)+
				(preS[t+5]<<4)];
			t = 4*j;
			f[t+0] = (k>>3)&01;
			f[t+1] = (k>>2)&01;
			f[t+2] = (k>>1)&01;
			f[t+3] = (k>>0)&01;
		}
	
		/*
		 * The new R is L ^ f(R, K).
		 * The f here has to be permuted first, though.
		 */
		for (j=0; j<32; j++)
			R[j] = L[j] ^ f[P[j]-1];
		/*
		 * Finally, the new L (the original R)
		 * is copied back.
		 */
		for (j=0; j<32; j++)
			L[j] = tempL[j];

	}
	/*
	 * The output L and R are reversed.
	 */
	for (j=0; j<32; j++) {
		t = L[j];
		L[j] = R[j];
		R[j] = t;
	}

	
/*============================================== */
	for (j=32;j<64;j++)
		L[j] = R[j-32];
/*============================================== */
	/*
	 * The final output
	 * gets the inverse permutation of the very original.
	 */
	for (j=0; j<64; j++)
		block[j] = L[FP[j]-1];
}


/***************************************************************************
 *     函数: des_encrypt(pin,cipher_pin,workkey)
 *     功能: 用DES算法对一串字串加密
 *     参数: char            *pin;             待加密的字符串(长度应为偶数)
 *           unsigned char   *cipher_pin;      加密后的密文(HEX格式, 长度8)
 *           unsigned char   *workkey;         加密用的密钥(明文, 长度8)
 *     返回: 0 正常 
 *           1 输入的密码非法
****************************************************************************/
void des_encrypt(unsigned char	*pin,unsigned char   *cipher_pin,unsigned char   *workkey)
{
	int		i;
	unsigned char	clear_txt[8],cipher_txt[8];
	unsigned char	key_block[8];
	unsigned char	bits[64];
	for(i=0;i<8;i++)
	  key_block[i]=workkey[i];

	for (i=0;i<8;i++)
		clear_txt[i] = pin[i];

	IC_expand(key_block,bits);
	IC_SetKey(bits);
	IC_expand(clear_txt,bits);		/* IC_expand to bit stream */
	IC_encrypt(bits,0);		/* encrypt */
	IC_compress(bits,cipher_txt);	/* IC_compress to 8 characters */

	memcpy(cipher_pin ,cipher_txt,8);
	return;
}

/*
** 	IC_compress is the inverse of IC_expand
**	it converts a 64 character bit stream into eight characters.
*/	

void IC_compress(unsigned char *in,unsigned char *out)
{
	int	temp;
	int	i,j;
	
	for(i=0;i<8;i++)
	{
		out[i] = 0;
		temp = 1;
		for (j=7;j>=0;j--)
		{
			out[i] = out[i] + ( in[i*8+j] * temp);
			temp *= 2;
		}
	}
	return ;
}
/*
**	IC_expand takes the eight character string in 
**	and converts it to a 64 character array containing
**	zero or one (bit stream).
*/

void IC_expand(unsigned char *in,unsigned char *out)
{
	int	i,j;

	for (i=0;i<8;i++)
	{
		for (j=0;j<8;j++)
		{
			*out = (in[i] <<j) & 0x80;
			if (*out == 0x80)
				*out = 0x01;
			out++;
			
		}
	}
	return;
}

/****************************************************************************
 *     函数: des_uncrypt(pin,cipher_pin,workkey)
 *     功能: 对用DES算法加密的串解密
 *     参数: char            *pin;             待解密的密文(BCD格式, 长度8)
 *           unsigned char   *cipher_pin;      解密后的明文( 长度8 )
 *           unsigned char   *workkey;         解密用的密钥( 明文, 长度8)
 *     返回: 无
 ***************************************************************************/
void des_uncrypt(unsigned char	*pin,unsigned char  *cipher_pin,unsigned char   *workkey)
{
	int		i,len;
	unsigned char	clear_txt[8];
	unsigned char	pin_block[8];
	unsigned char	key_block[8];
	unsigned char	bits[64];

	for(i=0;i<8;i++)
	  key_block[i]=workkey[i];

	/* get  pan_block */
	IC_expand(key_block,bits);
	IC_SetKey(bits);
	/* set key */


	IC_expand(pin,bits);		/* IC_expand to bit stream */
	IC_encrypt(bits,1);		/* descrypt */
	IC_compress(bits,clear_txt);	/* IC_compress to 8 characters */

	for (i=0;i<8;i++)
		pin_block[i] = clear_txt[i];
	len=8;
	memcpy(cipher_pin ,pin_block,len);
	cipher_pin[len]=0;
}

void TripleDesEncrypt(unsigned char *sInData, unsigned char *sOutData, unsigned char *sKey)
{
	unsigned char sLeftHalfKey[9];
	unsigned char sRightHalfKey[9];
	unsigned char sTmp1[9];
	unsigned char sTmp2[9];
	
	memcpy(sLeftHalfKey,sKey,8);
	memcpy(sRightHalfKey,sKey+8,8);
	
	des_encrypt(sInData,sTmp1,sLeftHalfKey);
	des_uncrypt(sTmp1,sTmp2,sRightHalfKey);
	des_encrypt(sTmp2,sOutData,sLeftHalfKey);
}

void TripleDesUncrypt(unsigned char *sInData,unsigned char *sOutData,unsigned char *sKey)
{
	unsigned char sLeftHalfKey[9];
	unsigned char sRightHalfKey[9];
	unsigned char sTmp1[9];
	unsigned char sTmp2[9];
	
	memcpy(sLeftHalfKey,sKey,8);
	memcpy(sRightHalfKey,sKey+8,8);
	
	des_uncrypt(sInData,sTmp1,sLeftHalfKey);
	des_encrypt(sTmp1,sTmp2,sRightHalfKey);
	des_uncrypt(sTmp2,sOutData,sLeftHalfKey);
}

void Xors(unsigned char in1[],unsigned char in2[])
{
	int i;
	for(i=0;i<8;i++)
	{
		in1[i]=in1[i]^in2[i];
	}
	
}

void MAC(unsigned char macvalue[],unsigned char inbuf[],int inlen,unsigned char  mac[],unsigned char key[])
{
	unsigned char in[8]={0,0,0,0,0,0,0,0};
	unsigned char padding[16]={0,   0,0,0,0,0,0,0,
					 0x80,0,0,0,0,0,0,0};


     int  i;
	 int len=inlen/8;

	 for(i=0;i<8;i++)
	 {
		 in[i]=macvalue[i];
	 }

	 
	 for(i=0;i<len;i++)
	 {
		Xors(in,&inbuf[i*8]);
		des_encrypt(in,in,key);
		
	
	 }

	 if(inlen%8==0)
	 {
	 	 Xors(in,&padding[8]);
		 des_encrypt(in,in,key);

	 }
	 else
	 {
		for(i=len*8;i<inlen;i++)
		{
			padding[i-len*8]=inbuf[i];
		}
		padding[inlen-len*8]=0x80;

		for(i=inlen-len*8+1;i<8;i++)
		{
			padding[i]=0;
		}
		 Xors(in,padding);
         des_encrypt(in,in,key);	    
		
	 }
	 memcpy(mac,in,4);
}

void DoubleMAC(unsigned char macvalue[],unsigned char inbuf[],
			   int inlen,unsigned char  mac[],unsigned char key[])
{

	unsigned char in[17]={0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0};
	unsigned char padding[16]={0,   0,0,0,0,0,0,0,
					 0x80,0,0,0,0,0,0,0};

     int  i;
	 int len=inlen/8;

	 for(i=0;i<8;i++)
	 {
		 in[i]=macvalue[i];
	 }

	 
	 for(i=0;i<len;i++)
	 {
		Xors(in,&inbuf[i*8]);
		des_encrypt(in,in,key);
	
	 }

	 if(inlen%8==0)
	 {
	 	 Xors(in,&padding[8]);
		 des_encrypt(in,in,key);

	 }
	 else
	 {
		for(i=len*8;i<inlen;i++)
		{
			padding[i-len*8]=inbuf[i];
		}
		padding[inlen-len*8]=0x80;

		for(i=inlen-len*8+1;i<8;i++)
		{
			padding[i]=0;
		}
		 Xors(in,padding);
         des_encrypt(in,in,key);	    
		
	 }
	 des_uncrypt(in,in,&key[8]);
	 des_encrypt(in,in,key);

	 memcpy(mac,in,4);
}