crypto/evp/e_aes_cbc_hmac_sha1.c

101 			      AES_KEY *key);
103 			      AES_KEY *key);
108 			   const AES_KEY *key,
112 		const AES_KEY *key, unsigned char iv[16],
121 	EVP_AES_HMAC_SHA1 *key = data(ctx);
125 		ret=aesni_set_encrypt_key(inkey,ctx->key_len*8,&key->ks);
127 		ret=aesni_set_decrypt_key(inkey,ctx->key_len*8,&key->ks);
129 	SHA1_Init(&key->head);	/* handy when benchmarking */
130 	key->tail = key->head;
131 	key->md   = key->head;
133 	key->payload_length = NO_PAYLOAD_LENGTH;
182 	EVP_AES_HMAC_SHA1 *key = data(ctx);
184 	size_t	plen = key->payload_length,
191 	sha_off = SHA_CBLOCK-key->md.num;
194 	key->payload_length = NO_PAYLOAD_LENGTH;
203 		else if (key->aux.tls_ver >= TLS1_1_VERSION)
208 			SHA1_Update(&key->md,in+iv,sha_off);
210 			aesni_cbc_sha1_enc(in,out,blocks,&key->ks,
211 				ctx->iv,&key->md,in+iv+sha_off);
215 			key->md.Nh += blocks>>29;
216 			key->md.Nl += blocks<<=3;
217 			if (key->md.Nl<(unsigned int)blocks) key->md.Nh++;
223 		SHA1_Update(&key->md,in+sha_off,plen-sha_off);
230 			SHA1_Final(out+plen,&key->md);
231 			key->md = key->tail;
232 			SHA1_Update(&key->md,out+plen,SHA_DIGEST_LENGTH);
233 			SHA1_Final(out+plen,&key->md);
240 					&key->ks,ctx->iv,1);
243 					&key->ks,ctx->iv,1);
254 				&key->ks,ctx->iv,0);
262 				*data = (void *)key->md.data;
264 			if ((key->aux.tls_aad[plen-4]<<8|key->aux.tls_aad[plen-3])
286 			key->aux.tls_aad[plen-2] = inp_len>>8;
287 			key->aux.tls_aad[plen-1] = inp_len;
290 			key->md = key->head;
291 			SHA1_Update(&key->md,key->aux.tls_aad,plen);
297 				j += SHA_CBLOCK-key->md.num;
298 				SHA1_Update(&key->md,out,j);
305 			bitlen = key->md.Nl+(inp_len<<3);	/* at most 18 bits */
322 			for (res=key->md.num, j=0;j<len;j++) {
334 				sha1_block_data_order(&key->md,data,1);
336 				pmac->u[0] |= key->md.h0 & mask;
337 				pmac->u[1] |= key->md.h1 & mask;
338 				pmac->u[2] |= key->md.h2 & mask;
339 				pmac->u[3] |= key->md.h3 & mask;
340 				pmac->u[4] |= key->md.h4 & mask;
349 				sha1_block_data_order(&key->md,data,1);
351 				pmac->u[0] |= key->md.h0 & mask;
352 				pmac->u[1] |= key->md.h1 & mask;
353 				pmac->u[2] |= key->md.h2 & mask;
354 				pmac->u[3] |= key->md.h3 & mask;
355 				pmac->u[4] |= key->md.h4 & mask;
361 			sha1_block_data_order(&key->md,data,1);
363 			pmac->u[0] |= key->md.h0 & mask;
364 			pmac->u[1] |= key->md.h1 & mask;
365 			pmac->u[2] |= key->md.h2 & mask;
366 			pmac->u[3] |= key->md.h3 & mask;
367 			pmac->u[4] |= key->md.h4 & mask;
386 			SHA1_Update(&key->md,out,inp_len);
387 			res = key->md.num;
388 			SHA1_Final(pmac->c,&key->md);
400 				sha1_block_data_order(&key->md,data,1);
403 			key->md = key->tail;
404 			SHA1_Update(&key->md,pmac->c,SHA_DIGEST_LENGTH);
405 			SHA1_Final(pmac->c,&key->md);
447 			SHA1_Update(&key->md,out,len);
456 	EVP_AES_HMAC_SHA1 *key = data(ctx);
468 			SHA1_Init(&key->head);
469 			SHA1_Update(&key->head,ptr,arg);
470 			SHA1_Final(hmac_key,&key->head);
477 		SHA1_Init(&key->head);
478 		SHA1_Update(&key->head,hmac_key,sizeof(hmac_key));
482 		SHA1_Init(&key->tail);
483 		SHA1_Update(&key->tail,hmac_key,sizeof(hmac_key));
496 			key->payload_length = len;
497 			if ((key->aux.tls_ver=p[arg-4]<<8|p[arg-3]) >= TLS1_1_VERSION) {
502 			key->md = key->head;
503 			SHA1_Update(&key->md,p,arg);
511 			memcpy(key->aux.tls_aad,ptr,arg);
512 			key->payload_length = arg;