Karel Miko
3a05f0331d
chachapoly_state > chacha20poly1305_state
2017-04-02 18:13:45 +02:00
Karel Miko
39028bbeed
more tests in chacha20poly1305_test
2017-04-02 18:13:45 +02:00
Karel Miko
31b52a354d
padlen in chacha20poly1305_decrypt
2017-04-02 18:13:45 +02:00
Karel Miko
c8cb714e08
added chacha_done
2017-04-02 18:13:45 +02:00
Karel Miko
ff6abc776c
RFC 7539 - ChaCha20 and Poly1305 + chacha based PRNG
2017-04-02 18:13:45 +02:00
Steffen Jaeckel
8af93d1d0d
Remove ccm_memory_ex()
2017-03-28 22:57:22 +02:00
Karel Miko
39425a94c5
improved source checks
2017-03-15 23:13:46 +01:00
Karel Miko
54a26525dc
avoid C++ style comments
2017-03-15 15:22:06 +01:00
Karel Miko
52eaabefa9
msvc 2008 does not like { } initialization
2017-03-06 19:53:04 +01:00
Matt Kelly
e187f4cbf4
Fix all warnings from -Wcast-align
2017-02-26 10:12:16 -05:00
Francois Perrad
79d6e61aca
use the variable 'err'
2017-02-24 19:00:32 +01:00
Francois Perrad
58353f51e2
remove trailing spaces
2017-02-24 16:29:54 +01:00
Francois Perrad
5d7036ebe2
remove hard tab
2017-02-24 16:26:48 +01:00
Francois Perrad
7b48f4d5f7
fix indentation
2017-02-24 16:23:10 +01:00
Steffen Jaeckel
7d418b34b3
Fix GCM counter reuse
...
GCM should error out after processing (2^32)-1 blocks / (2^39)-256 bits
2016-09-28 20:18:09 +02:00
Karel Miko
966496ea1a
fixing GCM troubles at HP-UX/IA64
2016-01-23 18:09:03 +01:00
Steffen Jaeckel
460b8716c9
fix clang-analyzer warnings
...
This fixes #80
2015-12-05 14:31:01 +01:00
Sebastian Verschoor
75b114517a
make sure no cache-based timing attack is possible
...
instead of two different buffers, there is just one buffer. Based upon the verification result, a mask is applied to the buffer before it is written to the output buffer.
2015-08-26 00:08:38 +02:00
Steffen Jaeckel
09e4b0ec9b
don't reveal plaintext if authentication failed
...
Create two buffers of the same size as the input data.
Copy the input data to the first one and work with that version to hold the
decrypted data, zeroize the second one.
Copy depending on the verification result, either the zero-buffer or the
real plaintext to the output buffer.
2015-08-26 00:08:38 +02:00
Steffen Jaeckel
6c11ca771b
fix compile error of tests
2015-08-26 00:08:38 +02:00
Sebastian Verschoor
25af184cd5
Quickfix for issue #73
...
The API of the function is changed (for decryption, tag is now an input
parameter). With the old API it is impossible to confirm to the NIST
specification and a timing sidechannel leak is inevitable.
2015-08-26 00:08:38 +02:00
Steffen Jaeckel
9585faca2b
re-work debug output of some tests
2015-08-23 22:59:14 +02:00
Karel Miko
6a257e15cd
cygwin related fix - variable name B0 changed to B_0 as it caused collision when compiling libtomcrypt as a perl module (for some reason only on cygwin)
2015-04-17 08:56:42 +02:00
Steffen Jaeckel
9782c09a3a
use XMEM{CMP, CPY, SET} macros instead of standard versions
2015-01-20 22:36:06 +01:00
Steffen Jaeckel
f2f8342c43
ccm test: add missing AAD
2014-11-02 17:01:56 +01:00
Steffen Jaeckel
943a858d6c
also run testvectors on new CCM API
...
[skip ci]
2014-10-31 19:41:14 +01:00
Steffen Jaeckel
4efa27ead1
add missing pointer checks
2014-10-31 19:39:03 +01:00
Steffen Jaeckel
53917750d8
trim trailing spaces
2014-10-31 19:38:47 +01:00
Pascal Brand
992506cb49
Add incremental CCM authentication processing
...
CCM is only meant for packet mode where the length of the input is known in
advance. Since it is a packet mode function, CCM only had one function that
performs the protocol.
However, incremental authentication is usefull in some usecases. It also
ensure some kind of coherencies when processing with a given authentication
mode or another. To achieve this aim, this commit adds the following functions:
ccm_init()
ccm_add_aad()
cm_add_nonce()
ccm_process()
ccm_done()
ccm_reset()
as well as the data structure
ccm_state
Change-Id: I5225a42bb098708c4af07518b561bb00f85bc243
2014-10-17 09:00:19 +02:00
Steffen Jaeckel
155a54ba40
add LTC prefix to most macros
2014-07-17 10:50:36 +02:00
Steffen Jaeckel
3c76dcdd29
fix compiler warning when enabling LTC_GCM_TABLES_SSE2
2014-07-17 10:50:35 +02:00
Steffen Jaeckel
aa72cfe1d9
ccm: clarify pt and ct parameters in doc and API description
...
this fixes #42
[skip ci]
2014-04-30 20:19:11 +02:00
Steffen Jaeckel
77cca4175f
ccm_memory_ex: disable until documented and fixed
2014-02-18 16:07:24 +01:00
Steffen Jaeckel
8e7777b554
trim trailing spaces/clean up
2014-02-16 18:41:28 +01:00
Steffen Jaeckel
6b5b35e6cc
ocb3: don't zero ocb3 context in ocb3_{de,en}crypt_last
2013-03-20 18:10:51 +02:00
Karel Miko
c5c067fd12
ocb_init fix (preventing index overflow)
2013-03-15 13:30:40 +02:00
Karel Miko
9c2193b722
ocb3_init fix (preventing index overflow)
2013-03-15 13:30:39 +02:00
karel-m
abab7089a3
OCBv3 according http://tools.ietf.org/html/draft-krovetz-ocb-03
2013-03-15 13:30:29 +02:00
Steffen Jaeckel
e7ce129e9b
flushed content of CVS/SVN tags
2010-06-16 20:02:51 +02:00
Steffen Jaeckel
2f1fc7c50d
import of libtomcrypt
...
out of
lt_tree.tar.bz2
checksums of lt_tree.tar.bz2
MD5: 3c36e1ca95518f4d00a76dc9b7049952
SHA1: 4f31d1aa8cd1b9d7452b777cd52f8280dc7ebcbc
2010-06-16 19:58:20 +02:00
Tom St Denis
bbc52b9e1b
added libtomcrypt-1.17
2010-06-16 12:39:13 +02:00
Tom St Denis
e24b01d392
added libtomcrypt-1.16
2010-06-16 12:39:09 +02:00
Tom St Denis
2de2976d25
added libtomcrypt-1.15
2010-06-16 12:39:06 +02:00
Tom St Denis
479cc9c261
added libtomcrypt-1.14
2010-06-16 12:39:03 +02:00
Tom St Denis
64d7ebe166
added libtomcrypt-1.11
2010-06-16 12:38:54 +02:00
Tom St Denis
99b6d03203
added libtomcrypt-1.10
2010-06-16 12:38:51 +02:00
Tom St Denis
a3ce807bae
added libtomcrypt-1.09
2010-06-16 12:38:49 +02:00
Tom St Denis
4a1a5796de
added libtomcrypt-1.07
2010-06-16 12:38:44 +02:00
Tom St Denis
3964a6523a
added libtomcrypt-1.03
2010-06-16 12:38:34 +02:00
Tom St Denis
65c1317eee
added libtomcrypt-1.02
2010-06-16 12:38:32 +02:00
