GitLab

authenticated encryption with associated data.

Rev: nettle/nettle-internal.h:1.3

Rev: nettle/ChangeLog:1.153

renaming. Benchmark both encryption and hashing.
(time_gmac): ...old name.

Rev: nettle/examples/nettle-benchmark.c:1.20

Rev: nettle/nettle-meta.h:1.9

Rev: nettle/ChangeLog:1.152

parity, since thay are now ignored.
(des3_set_key_hack): Likewise.

Rev: nettle/nettle-internal.c:1.3

* nettle-meta.h (_NETTLE_CIPHER_FIX): Deleted keysize parameter
derived from the appropriate constant instead.

Rev: nettle/cast128-meta.c:1.2

Rev: nettle/nettle-meta.h:1.8

Rev: nettle/ChangeLog:1.151

Rev: nettle/testsuite/gcm-test.c:1.7

(GCM_AUTH): ...old name.

* gcm-aes.c (gcm_aes_update): Renamed, from...
(gcm_aes_auth): ...old name.

* gcm.c (gcm_update): Renamed, and fixed an assert. From...
(gcm_auth): ...old name.

Rev: nettle/ChangeLog:1.150
Rev: nettle/gcm-aes.c:1.3
Rev: nettle/gcm.c:1.14
Rev: nettle/gcm.h:1.11

corresponding to 4 KByte of key-dependent tables.

Rev: nettle/gcm.h:1.10

Rev: nettle/memxor.c:1.4

implementation is broken.

Rev: nettle/testsuite/serpent-test.c:1.2

Rev: nettle/ChangeLog:1.149

unaligned01 case and 35% for the unaligned12 case, benchmarked on
Intel SU1400.

Rev: nettle/x86_64/memxor.asm:1.1

Rev: nettle/ChangeLog:1.148

(cgt_time_start): Likewise.
(cgt_time_end): Likewise.
(clock_time_start): Likewise.
(clock_time_end): Likewise.
(time_function): Read clock via function pointers time_start and
time_end, so we can select method at runtime.
(xalloc): Use die function.
(main): Choose timing function. If available, try clock_gettime,
and fall back to clock if it doesn't exist.

Rev: nettle/examples/nettle-benchmark.c:1.19

Rev: nettle/testsuite/gcm-test.c:1.6

Rev: nettle/ChangeLog:1.147

(TIME_END, TIME_START): Check return value from clock_gettime.

Rev: nettle/examples/nettle-benchmark.c:1.18

Rev: nettle/ChangeLog:1.146
Rev: nettle/gcm.h:1.9

Rev: nettle/ChangeLog:1.145

Rev: nettle/testsuite/gcm-test.c:1.5

Rev: nettle/testsuite/gcm-test.c:1.4

Rev: nettle/ChangeLog:1.144

with different IV lengths.

Rev: nettle/testsuite/gcm-test.c:1.3

Rev: nettle/gcm-aes.c:1.2

(gcm_set_iv): Added support for IVs of arbitrary size. Needed
another argument, for the hash subkey.
(gcm_digest): Use gcm_hash_sizes.

Rev: nettle/gcm.c:1.13
Rev: nettle/gcm.h:1.8

Rev: nettle/ChangeLog:1.143

Rev: nettle/examples/nettle-benchmark.c:1.17

test_cipher_gcm and using the new gcm_aes interface.
(test_main): Updated to use test_gcm_aes.
* testsuite/testutils.c (test_cipher_gcm): Deleted function.

Rev: nettle/testsuite/gcm-test.c:1.2
Rev: nettle/testsuite/testutils.c:1.13
Rev: nettle/testsuite/testutils.h:1.7

Rev: nettle/Makefile.in:1.31

(gcm_aes_set_key): New function.
(gcm_aes_set_iv): Likewise.
(gcm_aes_auth): Likewise.
(gcm_aes_encrypt): Likewise.
(gcm_aes_decrypt): Likewise.
(gcm_aes_digest): Likewise.

Rev: nettle/gcm-aes.c:1.1

gcm_key *.
(gcm_hash): Replaced context argument by a struct gcm_key * and a
pointer to the hashing state block.
(gcm_auth): Added struct gcm_key * argument.
(gcm_encrypt): Likewise.
(gcm_decrypt): Likewise.
(gcm_digest): Likewise.

* gcm.h (struct gcm_key): Moved the key-dependent and
message-independent state to its own struct.
(struct gcm_ctx): ... and removed it here.
(GCM_CTX): New macro.
(GCM_SET_KEY): Likewise.
(GCM_AUTH): Likewise.
(GCM_ENCRYPT): Likewise.
(GCM_DECRYPT): Likewise.
(GCM_DIGEST): Likewise.
(struct gcm_aes_ctx): New struct.

Rev: nettle/ChangeLog:1.142
Rev: nettle/gcm.c:1.12
Rev: nettle/gcm.h:1.7

Rev: nettle/ChangeLog:1.141

named h, with array size depending on GCM_TABLE_BITS.

Rev: nettle/gcm.h:1.6

(gcm_gf_mul): Compile bitwise version only when GCM_TABLE_BITS ==
0. Simplified interface with just two arguments pointing to
complete blocks.
(gcm_gf_shift_4, gcm_gf_shift_8): Renamed table-based functions, from...
(gcm_gf_shift_chunk): ... old name.
(gcm_gf_mul): Renamed both table-based versions and made the
argument types compatible with the bitwise gcm_gf_mul.
(gcm_gf_mul_chunk): ... the old name.
(gcm_set_key): Initialize the table using adds and shifts only.
When GCM_TABLE_BITS > 0, this eliminates the only use of the
bitwise multiplication.
(gcm_hash): Simplified, now that we have the same interface for
gcm_gf_mul, regardless of table size.

Rev: nettle/ChangeLog:1.140
Rev: nettle/gcm.c:1.11

(gcm_gf_shift_chunk): Fixed bugs for the big endian 64-bit case,
e.g., sparc64. For both 4-bit and 8-bit tables.

Rev: nettle/ChangeLog:1.139
Rev: nettle/gcm.c:1.10

* gcm.h (union gcm_block): New union, used to enforce alignment.

Rev: nettle/ChangeLog:1.138
Rev: nettle/gcm.c:1.9
Rev: nettle/gcm.h:1.5