crypto/cipher_extra/e_aesgcmsiv.c

35   alignas(16) uint8_t key[16*15];
43 // aes128gcmsiv_aes_ks writes an AES-128 key schedule for |key| to
46     const uint8_t key[16], uint8_t out_expanded_key[16*15]);
48 // aes128gcmsiv_aes_ks writes an AES-128 key schedule for |key| to
51     const uint8_t key[16], uint8_t out_expanded_key[16*15]);
53 static int aead_aes_gcm_siv_asm_init(EVP_AEAD_CTX *ctx, const uint8_t *key,
85     aes128gcmsiv_aes_ks(key, &gcm_siv_ctx->key[0]);
88     aes256gcmsiv_aes_ks(key, &gcm_siv_ctx->key[0]);
104 // the POLYVAL key in |key|.
106                                      const uint8_t key[16], const uint8_t *in,
119 // of 16.) It uses the precomputed powers of the key given in |htable|.
134 // expanded key from |key| and the table of powers in |htable|.
138                              const struct aead_aes_gcm_siv_asm_ctx *key,
145                              const struct aead_aes_gcm_siv_asm_ctx *key,
148 // aes128gcmsiv_kdf performs the AES-GCM-SIV KDF given the expanded key from
161 // aes128gcmsiv_aes_ks_enc_x1 performs a key expansion of the AES-128 key in
162 // |key|, writes the expanded key to |out_expanded_key| and encrypts a single
166                                        const uint64_t key[2]);
172                                        const uint64_t key[4]);
175 // the expanded key in |expanded_key|.
187 // expanded key from |key|. (The value of |in_len| must be a multiple of 16.)
193                                     const struct aead_aes_gcm_siv_asm_ctx *key,
200                                     const struct aead_aes_gcm_siv_asm_ctx *key,
207                                     const struct aead_aes_gcm_siv_asm_ctx *key,
214                                     const struct aead_aes_gcm_siv_asm_ctx *key,
320     aes128gcmsiv_kdf(padded_nonce, key_material, &gcm_siv_ctx->key[0]);
324     aes256gcmsiv_kdf(padded_nonce, key_material, &gcm_siv_ctx->key[0]);
372     aes128gcmsiv_aes_ks_enc_x1(tag, tag, &enc_key_expanded.key[0],
381     aes256gcmsiv_aes_ks_enc_x1(tag, tag, &enc_key_expanded.key[0],
439     aes128gcmsiv_aes_ks((const uint8_t *) record_enc_key, &expanded_key.key[0]);
441     aes256gcmsiv_aes_ks((const uint8_t *) record_enc_key, &expanded_key.key[0]);
517     16,                              // key length
534     32,                              // key length
561 static int aead_aes_gcm_siv_init(EVP_AEAD_CTX *ctx, const uint8_t *key,
585   aes_ctr_set_key(&gcm_siv_ctx->ks.ks, NULL, &gcm_siv_ctx->kgk_block, key,
599 // |in| to |out|, using the block function |enc_block| with |key| in counter
607                           block128_f enc_block, const AES_KEY *key) {
618     enc_block(counter.c, keystream, key);
695   const AES_KEY *const key = &gcm_siv_ctx->ks.ks;
696   uint8_t key_material[(128 /* POLYVAL key */ + 256 /* max AES key */) / 8];
707     gcm_siv_ctx->kgk_block(counter, ciphertext, key);
801     16,                              // key length
818     32,                              // key length