Dmitry Baryshkov authored Jul 11, 2019 and Niels Möller committed Sep 15, 2019

Hash function GOST R 34.11-94 (gosthash94) in its compression function
uses Russian block cipher (GOST 28147-89, Magma). Start separating block
cipher code from hash function code. For now there is no public
interface for this cipher, it will be added later.

Signed-off-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>

Dmitry Baryshkov authored Sep 04, 2019 and Niels Möller committed Sep 04, 2019

Move GCM's block shift function to block-internal.h. This concludes
moving of all Galois mul-by-2 to single header.

Signed-off-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>

Dmitry Baryshkov authored Sep 04, 2019 and Niels Möller committed Sep 04, 2019

Move Galois polynomial shifts to block-internal.h, simplifying common
code. GCM is left unconverted for now, this will be fixed later.

Signed-off-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>

Dmitry Baryshkov authored Sep 04, 2019 and Niels Möller committed Sep 04, 2019

Add common implementations for functions doing XOR over
nettle_block16/nettle_block8.

Signed-off-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>

Dmitry Baryshkov authored Aug 26, 2019 and Niels Möller committed Sep 03, 2019

CMAC64 uses block8, rather than block16.

Signed-off-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>

Dmitry Baryshkov authored Aug 26, 2019 and Niels Möller committed Sep 03, 2019

Remove last usage of unsigned long member of nettle_block16.

Signed-off-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>

Dmitry Baryshkov authored Jul 02, 2019 and Niels Möller committed Jul 10, 2019

Implement CMAC using TrippleDES as underlying cipher.

Signed-off-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>

Dmitry Baryshkov authored Jul 09, 2019 and Niels Möller committed Jul 10, 2019

Signed-off-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>

Dmitry Baryshkov authored Jul 02, 2019 and Niels Möller committed Jul 02, 2019

Signed-off-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>

Simo Sorce authored May 13, 2019 and Niels Möller committed Jul 02, 2019

When performing ECDH the peer provided public key needs to be checked
for validity. FIPS requires basic tests be performed to insure the
provided points are in fact on the selected curve. Those checks already
exists in the ecc_point_set() function.
Add an explicit test that checks the boundaries so that any regression
in checks will be caught.

Signed-off-by: Simo Sorce <simo@redhat.com>

The cmac changes on master breaks the previous version of the siv
code. Now updated, and improved to use const context arguments for the
_message functions.

This AEAD algorithm provides a way to make nonce-reuse a not critical
issue. That is particular useful to stateless servers that cannot
ensure that the nonce will not repeat. This cipher is used by
draft-ietf-ntp-using-nts-for-ntp-17.

Move and rename block_mulx --> _cmac128_block_mulx.