Lines Matching defs:md_size
204 * ssl3_cbc_copy_mac copies |md_size| bytes from the end of |rec| to |out| in
212 * rec->orig_len >= md_size
213 * md_size <= EVP_MAX_MD_SIZE
225 unsigned md_size, unsigned orig_len)
238 unsigned mac_start = mac_end - md_size;
248 OPENSSL_assert(orig_len >= md_size);
249 OPENSSL_assert(md_size <= EVP_MAX_MD_SIZE);
256 if (orig_len > md_size + 255 + 1)
257 scan_start = orig_len - (md_size + 255 + 1);
259 * div_spoiler contains a multiple of md_size that is used to cause the
262 * The aim of right-shifting md_size is so that the compiler doesn't
264 * prove that md_size is always even, which I hope is beyond it.
266 div_spoiler = md_size >> 1;
268 rotate_offset = (div_spoiler + mac_start - scan_start) % md_size;
270 memset(rotated_mac, 0, md_size);
276 j &= constant_time_lt(j, md_size);
282 for (i = 0; i < md_size; i++) {
286 rotate_offset &= constant_time_lt(rotate_offset, md_size);
289 memset(out, 0, md_size);
290 rotate_offset = md_size - rotate_offset;
291 rotate_offset &= constant_time_lt(rotate_offset, md_size);
292 for (i = 0; i < md_size; i++) {
293 for (j = 0; j < md_size; j++)
296 rotate_offset &= constant_time_lt(rotate_offset, md_size);
432 unsigned md_size, md_block_size = 64;
464 md_size = 16;
474 md_size = 20;
483 md_size = 224 / 8;
491 md_size = 32;
501 md_size = 384 / 8;
511 md_size = 64;
529 OPENSSL_assert(md_size <= EVP_MAX_MD_SIZE);
564 max_mac_bytes = len - md_size - 1;
586 mac_end_offset = data_plus_mac_size + header_length - md_size;
738 for (j = 0; j < md_size; j++)
751 || EVP_DigestUpdate(&md_ctx, mac_out, md_size) <= 0)
759 || EVP_DigestUpdate(&md_ctx, mac_out, md_size) <= 0)