fix AES key calculation

Author: dotcypress

examples/aes.rs

@@ -22,11 +22,16 @@ fn main() -> ! {
     let mut rcc = dp.RCC.constrain();
     let aes = dp.AES.constrain(&mut rcc);
     let message = b"The quick brown ";
-    let key = Key::try_from_slice(&[01; 32]).unwrap();
+    let key = Key::try_from_slice(&[
+        0x03, 0x01, 0x01, 0x01, 0x01, 0x01, 0x01, 0x01, 0x01, 0x01, 0x01, 0x01, 0x01, 0x01, 0x01,
+        0x01, 0x01, 0x01, 0x01, 0x01, 0x01, 0x01, 0x01, 0x01, 0x01, 0x01, 0x01, 0x01, 0x01, 0x01,
+        0x01, 0x07,
+    ])
+    .unwrap();
 
     let mut aes_ecb_encrypt = aes.ecb_encrypt(key);
     let encrypted = aes_ecb_encrypt.process(&message).unwrap();
-    defmt::info!("encrypred: {:02x}, check: [c9, ca, 52, 28, e5, f8, f2, 7e, ce, b9, 5b, 4d, 3c, 51, 77, 10]", encrypted);
+    defmt::info!("encrypred: {:02x}, check: [81, 2b, 02, 01, e6, 20, 7b, e9, 11, 79, b7, 1c, 42, 05, 99, 9d]", encrypted);
 
     let mut aes_ecb_decrypt = aes_ecb_encrypt.disable().ecb_decrypt(key);
     let decrypted = aes_ecb_decrypt.process(&encrypted).unwrap();

src/aes.rs

@@ -200,21 +200,21 @@ pub trait Mode {
         match key {
             Key::Key128(key) => unsafe {
                 rb.cr().modify(|_, w| w.keysize().bit(false));
-                rb.keyr0().write(|w| w.bits(key[0]));
-                rb.keyr1().write(|w| w.bits(key[1]));
-                rb.keyr2().write(|w| w.bits(key[2]));
-                rb.keyr3().write(|w| w.bits(key[3]));
+                rb.keyr3().write(|w| w.bits(key[0]));
+                rb.keyr2().write(|w| w.bits(key[1]));
+                rb.keyr1().write(|w| w.bits(key[2]));
+                rb.keyr0().write(|w| w.bits(key[3]));
             },
             Key::Key256(key) => unsafe {
                 rb.cr().modify(|_, w| w.keysize().bit(true));
-                rb.keyr0().write(|w| w.bits(key[0]));
-                rb.keyr1().write(|w| w.bits(key[1]));
-                rb.keyr2().write(|w| w.bits(key[2]));
-                rb.keyr3().write(|w| w.bits(key[3]));
-                rb.keyr4().write(|w| w.bits(key[4]));
-                rb.keyr5().write(|w| w.bits(key[5]));
-                rb.keyr6().write(|w| w.bits(key[6]));
-                rb.keyr7().write(|w| w.bits(key[7]));
+                rb.keyr7().write(|w| w.bits(key[0]));
+                rb.keyr6().write(|w| w.bits(key[1]));
+                rb.keyr5().write(|w| w.bits(key[2]));
+                rb.keyr4().write(|w| w.bits(key[3]));
+                rb.keyr3().write(|w| w.bits(key[4]));
+                rb.keyr2().write(|w| w.bits(key[5]));
+                rb.keyr1().write(|w| w.bits(key[6]));
+                rb.keyr0().write(|w| w.bits(key[7]));
             },
         }
     }