Dmitry Baryshkov authored Jul 11, 2019 and Niels Möller committed Sep 15, 2019

Hash function GOST R 34.11-94 (gosthash94) in its compression function
uses Russian block cipher (GOST 28147-89, Magma). Start separating block
cipher code from hash function code. For now there is no public
interface for this cipher, it will be added later.

Signed-off-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>

Dmitry Baryshkov authored Sep 04, 2019 and Niels Möller committed Sep 04, 2019

Move Galois polynomial shifts to block-internal.h, simplifying common
code. GCM is left unconverted for now, this will be fixed later.

Signed-off-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>

Dmitry Baryshkov authored Sep 04, 2019 and Niels Möller committed Sep 04, 2019

Add common implementations for functions doing XOR over
nettle_block16/nettle_block8.

Signed-off-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>

Dmitry Baryshkov authored Jul 02, 2019 and Niels Möller committed Jul 10, 2019

Implement CMAC using TrippleDES as underlying cipher.

Signed-off-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>

Dmitry Baryshkov authored Jul 09, 2019 and Niels Möller committed Jul 10, 2019

Signed-off-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>

This AEAD algorithm provides a way to make nonce-reuse a not critical
issue. That is particular useful to stateless servers that cannot
ensure that the nonce will not repeat. This cipher is used by
draft-ietf-ntp-using-nts-for-ntp-17.

Move and rename block_mulx --> _cmac128_block_mulx.

Simo Sorce authored Oct 04, 2018 and Niels Möller committed Mar 24, 2019

XEX encryption mode with tweak and ciphertext stealing (XTS) is
standardized in IEEE 1619 and generally used for storage devices.

Signed-off-by: Simo Sorce <simo@redhat.com>

Patch from Simo Sorce.

Simo Sorce authored Oct 10, 2018 and Niels Möller committed Nov 25, 2018

Use side-channel silent RSA root function as well as PKCS1 padding
functions.
This variant accepts only a fixed length message, and returns error
if the pkcs1 padding returns a different length message.
The buffer is always left unchanged on error so that a TLS
implementation can pre-initialize it with a random key to use on
decoding error.

Signed-off-by: Simo Sorce <simo@redhat.com>

Simo Sorce authored Nov 08, 2018 and Niels Möller committed Nov 24, 2018

Signed-off-by: Simo Sorce <simo@redhat.com>

Simo Sorce authored Oct 15, 2018 and Niels Möller committed Nov 24, 2018

Originally from Niels, with minor changes to avoid compiler warnings.

Simo Sorce authored Nov 08, 2018 and Niels Möller committed Nov 24, 2018

Signed-off-by: Simo Sorce <simo@redhat.com>

Nikos Mavrogiannopoulos authored Jun 06, 2018 and Niels Möller committed Jul 07, 2018

This adds all exported symbols in the map files explicitly under
the following rules:
 - Symbols mentioned in internal headers go in a section which is
   valid only for testing, and linking with these symbols will break
   in library updates.
 - Symbols mentioned in installed headers go in the exported sections
   and are considered part of the ABI.
 - All internal symbols move to internal headers.
 - The _nettle_md5_compress and _nettle_sha1_compress become exported
   without the _nettle prefix, due to existing usage.

Nikos Mavrogiannopoulos authored Jan 10, 2018 and Niels Möller committed Feb 19, 2018

That adds support for CMAC as a generic framework for
128-bit block and key ciphers, as well as API for AES-128-CMAC,
and AES-256-CMAC.

Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

Dmitry Baryshkov authored Oct 07, 2017 and Niels Möller committed Oct 16, 2017

Signed-off-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>

Nikos Mavrogiannopoulos authored May 16, 2017 and Niels Möller committed Aug 30, 2017

Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

In version.h, GMP_NUMB_BITS is needed only for mini-gmp builds. In
non-mini-gmp builds, substitute a dummy value there, to make the
contents of this header file platform independent. In Makefile, we
always need a properly configured value, and do this with the renamed
variable NUMB_BITS.

Nikos Mavrogiannopoulos authored Feb 28, 2017 and Niels Möller committed Apr 09, 2017

Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

Signed-off-by: Daiki Ueno <dueno@redhat.com>

Signed-off-by: Daiki Ueno <dueno@redhat.com>