Skip to content
Snippets Groups Projects
Select Git revision
  • dca9abf1c41fb1c0b51c75ca8decac4b27c26671
  • master default
  • wip-slh-dsa-sha2-128s
  • master-updates
  • release-3.10-fixes
  • getopt-prototype
  • fix-bcrypt-warning
  • refactor-hmac
  • wip-use-alignas
  • trim-sha3-context
  • fix-gitlab-ci
  • check-fat-emulate
  • delete-digest_func-size
  • slh-dsa-shake-128f-nettle
  • slh-dsa-shake-128s-nettle
  • slh-dsa-shake-128s
  • delete-openpgp
  • ppc64-sha512
  • delete-md5-compat
  • cleanup-hmac-tests
  • ppc64-sha256
  • nettle_3.10.2_release_20250626
  • nettle_3.10.1_release_20241230
  • nettle_3.10_release_20240616
  • nettle_3.10rc2
  • nettle_3.10rc1
  • nettle_3.9.1_release_20230601
  • nettle_3.9_release_20230514
  • nettle_3.8.1_release_20220727
  • nettle_3.8_release_20220602
  • nettle_3.7.3_release_20210606
  • nettle_3.7.2_release_20210321
  • nettle_3.7.1_release_20210217
  • nettle_3.7_release_20210104
  • nettle_3.7rc1
  • nettle_3.6_release_20200429
  • nettle_3.6rc3
  • nettle_3.6rc2
  • nettle_3.6rc1
  • nettle_3.5.1_release_20190627
  • nettle_3.5_release_20190626
41 results

poly1305-aes.c

Blame
  • poly1305-aes.c 2.16 KiB
    /* nettle, low-level cryptographics library
     *
     * Copyright (C) 2013 Nikos Mavrogiannopoulos
     * Copyright (C) 2014 Niels Möller
     *
     * The nettle library is free software; you can redistribute it and/or modify
     * it under the terms of the GNU Lesser General Public License as published by
     * the Free Software Foundation; either version 2.1 of the License, or (at your
     * option) any later version.
     *
     * The nettle library is distributed in the hope that it will be useful, but
     * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY
     * or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU Lesser General Public
     * License for more details.
     *
     * You should have received a copy of the GNU Lesser General Public License
     * along with the nettle library; see the file COPYING.LIB.  If not, write to
     * the Free Software Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston,
     * MA 02111-1301, USA.
     */
    
    #if HAVE_CONFIG_H
    #include "config.h"
    #endif
    
    #include <assert.h>
    #include <string.h>
    
    #include "poly1305.h"
    #include "macros.h"
    
    void
    poly1305_aes_set_key (struct poly1305_aes_ctx *ctx, const uint8_t * key)
    {
      aes128_set_encrypt_key(&ctx->aes, (key));
      poly1305_set_key(&ctx->pctx, (key+16));
      ctx->index = 0;
    }
    
    void
    poly1305_aes_set_nonce (struct poly1305_aes_ctx *ctx,
    			const uint8_t * nonce)
    {
      memcpy (ctx->nonce, nonce, POLY1305_AES_NONCE_SIZE);
    }
    
    #define COMPRESS(ctx, data) _poly1305_block(&(ctx)->pctx, (data), 1)
    
    void
    poly1305_aes_update (struct poly1305_aes_ctx *ctx,
    		     size_t length, const uint8_t *data)
    {
      MD_UPDATE (ctx, length, data, COMPRESS, (void) 0);
    }
    
    void
    poly1305_aes_digest (struct poly1305_aes_ctx *ctx,
    		     size_t length, uint8_t *digest)
    {
      union nettle_block16 s;
      /* final bytes */
      if (ctx->index > 0)
        {
          assert (ctx->index < POLY1305_BLOCK_SIZE);
    
          ctx->block[ctx->index] = 1;
          memset (ctx->block + ctx->index + 1,
    	      0, POLY1305_BLOCK_SIZE - 1 - ctx->index);
    
          _poly1305_block (&ctx->pctx, ctx->block, 0);
        }
      aes128_encrypt(&ctx->aes, POLY1305_BLOCK_SIZE, s.b, ctx->nonce);
      
      poly1305_digest (&ctx->pctx, &s);
      memcpy (digest, s.b, length);
    
      INCREMENT (16, ctx->nonce);
      ctx->index = 0;
    }