lib/crypto/chacha20poly1305.c

57 __chacha20poly1305_encrypt(u8 *dst, const u8 *src, const size_t src_len,
74 	chacha20_crypt(chacha_state, dst, src, src_len);
76 	poly1305_update(&poly1305_state, dst, src_len);
77 	if (src_len & 0xf)
78 		poly1305_update(&poly1305_state, pad0, 0x10 - (src_len & 0xf));
81 	b.lens[1] = cpu_to_le64(src_len);
84 	poly1305_final(&poly1305_state, dst + src_len);
90 void chacha20poly1305_encrypt(u8 *dst, const u8 *src, const size_t src_len,
105 	__chacha20poly1305_encrypt(dst, src, src_len, ad, ad_len, chacha_state);
112 void xchacha20poly1305_encrypt(u8 *dst, const u8 *src, const size_t src_len,
120 	__chacha20poly1305_encrypt(dst, src, src_len, ad, ad_len, chacha_state);
125 __chacha20poly1305_decrypt(u8 *dst, const u8 *src, const size_t src_len,
138 	if (unlikely(src_len < POLY1305_DIGEST_SIZE))
148 	dst_len = src_len - POLY1305_DIGEST_SIZE;
168 bool chacha20poly1305_decrypt(u8 *dst, const u8 *src, const size_t src_len,
184 	ret = __chacha20poly1305_decrypt(dst, src, src_len, ad, ad_len,
194 bool xchacha20poly1305_decrypt(u8 *dst, const u8 *src, const size_t src_len,
202 	return __chacha20poly1305_decrypt(dst, src, src_len, ad, ad_len,
209 				       const size_t src_len,
236 	if (WARN_ON(src_len > INT_MAX))
258 	for (sl = src_len; sl > 0 && sg_miter_next(&miter); sl -= miter.length) {
297 	if (src_len & 0xf)
298 		poly1305_update(&poly1305_state, pad0, 0x10 - (src_len & 0xf));
301 	b.lens[1] = cpu_to_le64(src_len);
321 		scatterwalk_map_and_copy(b.mac[encrypt], src, src_len,
333 bool chacha20poly1305_encrypt_sg_inplace(struct scatterlist *src, size_t src_len,
338 	return chacha20poly1305_crypt_sg_inplace(src, src_len, ad, ad_len,
343 bool chacha20poly1305_decrypt_sg_inplace(struct scatterlist *src, size_t src_len,
348 	if (unlikely(src_len < POLY1305_DIGEST_SIZE))
352 						 src_len - POLY1305_DIGEST_SIZE,