ViewVC Help
View File | Revision Log | Show Annotations | Download File
/cvs/spritz/spritz.h
(Generate patch)

Comparing spritz/spritz.h (file contents):
Revision 1.1 by root, Fri Jan 9 09:11:16 2015 UTC vs.
Revision 1.6 by root, Sat Jan 10 13:02:26 2015 UTC

1//#include "spritz.h" 1/* spritz.h, spritz C implementation, header
2 *
3 * Copyright (c) 2015 Marc Alexander Lehmann <libev@schmorp.de>
4 * All rights reserved.
5 *
6 * Redistribution and use in source and binary forms, with or without modifica-
7 * tion, are permitted provided that the following conditions are met:
8 *
9 * 1. Redistributions of source code must retain the above copyright notice,
10 * this list of conditions and the following disclaimer.
11 *
12 * 2. Redistributions in binary form must reproduce the above copyright
13 * notice, this list of conditions and the following disclaimer in the
14 * documentation and/or other materials provided with the distribution.
15 *
16 * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR IMPLIED
17 * WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MER-
18 * CHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO
19 * EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPE-
20 * CIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO,
21 * PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS;
22 * OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
23 * WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTH-
24 * ERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
25 * OF THE POSSIBILITY OF SUCH DAMAGE.
26 *
27 * Alternatively, the contents of this file may be used under the terms of
28 * the GNU General Public License ("GPL") version 2 or any later version,
29 * in which case the provisions of the GPL are applicable instead of
30 * the above. If you wish to allow the use of your version of this file
31 * only under the terms of the GPL and not to allow others to use your
32 * version of this file under the BSD license, indicate your decision
33 * by deleting the provisions above and replace them with the notice
34 * and other provisions required by the GPL. If you do not delete the
35 * provisions above, a recipient may use your version of this file under
36 * either the BSD or the GPL.
37 */
38#ifndef SPRITZ_H
39#define SPRITZ_H
2 40
3#include <stdint.h> 41#include <stdint.h>
4#include <sys/types.h> 42#include <sys/types.h>
5 43
6/*******************************************************************************/ 44/*******************************************************************************/
7/* spritz parameters/state type */ 45/* spritz parameters/state type */
8 46
9enum { 47enum {
10 spritz_N = 256 48 spritz_N = 256,
49 spritz_aead_blocksize = spritz_N >> 2 /* 64 */
11}; 50};
12 51
13typedef struct 52typedef struct
14{ 53{
15 uint8_t a, i, j, k, z, w; 54 uint8_t a, i, j, k, z, w;
… …
22void spritz_init (spritz_state *s); 61void spritz_init (spritz_state *s);
23void spritz_update (spritz_state *s); 62void spritz_update (spritz_state *s);
24void spritz_whip (spritz_state *s, uint_fast16_t r); 63void spritz_whip (spritz_state *s, uint_fast16_t r);
25void spritz_crush (spritz_state *s); 64void spritz_crush (spritz_state *s);
26void spritz_shuffle (spritz_state *s); 65void spritz_shuffle (spritz_state *s);
27void spritz_absorb_nibble (spritz_state *s, uint8_t x);
28void spritz_absorb (spritz_state *s, const void *I, size_t I_len); 66void spritz_absorb (spritz_state *s, const void *I, size_t I_len);
29void spritz_absorb_stop (spritz_state *s); 67void spritz_absorb_stop (spritz_state *s);
30void spritz_absorb_and_stop (spritz_state *s, const void *I, size_t I_len); /* commonly used helper function */ 68void spritz_absorb_and_stop (spritz_state *s, const void *I, size_t I_len); /* commonly used helper function */
31uint8_t spritz_output (spritz_state *s); 69uint8_t spritz_output (spritz_state *s);
32void spritz_squeeze (spritz_state *s, void *P, size_t P_len); 70void spritz_squeeze (spritz_state *s, void *P, size_t P_len);
33uint8_t spritz_drip (spritz_state *s); 71uint8_t spritz_drip (spritz_state *s);
34 72
35/*******************************************************************************/ 73/*******************************************************************************/
74/* the spritz cipher */
75
76/* no IV is used if IV_len == 0 */
77void spritz_cipher_init (spritz_state *s, const void *K, size_t K_len, const void *IV, size_t IV_len);
78
79/* can be called multiple times/incrementally */
80/* can work inplace */
81void spritz_cipher_encrypt (spritz_state *s, const void *I, void *O, size_t len);
82void spritz_cipher_decrypt (spritz_state *s, const void *I, void *O, size_t len);
83
84/*******************************************************************************/
36/* the spritz-xor cipher */ 85/* the spritz-xor cipher */
37 86
38/* no IV is used if IV_len == 0 */ 87/* no IV is used if IV_len == 0 */
39void spritz_xor_init (spritz_state *s, const void *K, size_t K_len, const void *IV, size_t IV_len); 88static void spritz_cipher_xor_init (spritz_state *s, const void *K, size_t K_len, const void *IV, size_t IV_len);
40 89
41/* can be called multiple times/incrementally */ 90/* can be called multiple times/incrementally */
42/* can work inplace */ 91/* can work inplace */
43/* works for both encryption and decryption */ 92/* works for both encryption and decryption */
44void spritz_xor_crypt (spritz_state *s, const void *I, void *O, size_t len); 93 void spritz_cipher_xor_crypt (spritz_state *s, const void *I, void *O, size_t len);
45 94
46/*******************************************************************************/ 95/*******************************************************************************/
47/* the spritz hash */ 96/* the spritz hash */
48 97
49static void spritz_hash_init (spritz_state *s); 98static void spritz_hash_init (spritz_state *s);
… …
58static void spritz_mac_finish (spritz_state *s, void *H, size_t H_len); /* must be called at most once at the end */ 107static void spritz_mac_finish (spritz_state *s, void *H, size_t H_len); /* must be called at most once at the end */
59 108
60/*******************************************************************************/ 109/*******************************************************************************/
61/* spritz authenticated encryption */ 110/* spritz authenticated encryption */
62 111
63 void spritz_aead_init (spritz_state *s, const void *K, size_t K_len); 112static void spritz_aead_init (spritz_state *s, const void *K, size_t K_len);
64static void spritz_aead_nonce (spritz_state *s, const void *N, size_t N_len); /* must be called after construction, before associated_data */ 113static void spritz_aead_nonce (spritz_state *s, const void *N, size_t N_len); /* must be called after construction, before associated_data */
65static void spritz_aead_associated_data (spritz_state *s, const void *D, size_t D_len); /* must be called after nonce, before crypt */ 114static void spritz_aead_associated_data (spritz_state *s, const void *D, size_t D_len); /* must be called after nonce, before crypt */
66 void spritz_aead_crypt (spritz_state *s, const void *I, void *O, size_t len); 115 void spritz_aead_encrypt (spritz_state *s, const void *I, void *O, size_t len);
116 void spritz_aead_decrypt (spritz_state *s, const void *I, void *O, size_t len);
67/* must be called after associated_data, only once, before finish */ 117/* must be called after associated_data, only once, before finish */
68/* works for both encryption and decryption */ 118/* works for both encryption and decryption */
69static void spritz_aead_finish (spritz_state *s, void *H, size_t H_len); /* must be called at most once at the end */ 119static void spritz_aead_finish (spritz_state *s, void *H, size_t H_len); /* must be called at most once at the end */
70 120
71/*******************************************************************************/ 121/*******************************************************************************/
122/* spritz authenticated encryption (xor variant) */
123
124static void spritz_aead_xor_init (spritz_state *s, const void *K, size_t K_len);
125static void spritz_aead_xor_nonce (spritz_state *s, const void *N, size_t N_len); /* must be called after construction, before associated_data */
126static void spritz_aead_xor_associated_data (spritz_state *s, const void *D, size_t D_len); /* must be called after nonce, before crypt */
127 void spritz_aead_xor_crypt (spritz_state *s, const void *I, void *O, size_t len);
128/* must be called after associated_data, only once, before finish */
129/* works for both encryption and decryption */
130static void spritz_aead_xor_finish (spritz_state *s, void *H, size_t H_len); /* must be called at most once at the end */
131
132/*******************************************************************************/
72/* the spritz drbg/csprng */ 133/* the spritz drbg/csprng */
73 134
74/* constructor takes a seed if S_len != 0, same add spritz_prng_put */ 135/* constructor takes a seed if S_len != 0, same as spritz_prng_add */
75 void spritz_prng_init (spritz_state *s, const void *S, size_t S_len); 136 void spritz_prng_init (spritz_state *s, const void *S, size_t S_len);
76static void spritz_prng_put (spritz_state *s, const void *S, size_t S_len); /* add additional entropy */ 137static void spritz_prng_add (spritz_state *s, const void *S, size_t S_len); /* add additional entropy */
77static void spritz_prng_get (spritz_state *s, void *R, size_t R_len); /* get random bytes */ 138static void spritz_prng_get (spritz_state *s, void *R, size_t R_len); /* get random bytes */
78 139
79/*******************************************************************************/ 140/*******************************************************************************/
80/* inline functions - some functions are so simple, they are defined inline */ 141/* inline functions - some functions are so simple, they are defined inline */
81 142
143/* the spritz-xor cipher inline functions */
144
145static void
146spritz_cipher_xor_init (spritz_state *s, const void *K, size_t K_len, const void *IV, size_t IV_len)
147{
148 spritz_cipher_init (s, K, K_len, IV, IV_len);
149}
150
82/* the spritz hash inline functions */ 151/* the spritz hash inline functions */
83 152
84static void 153static void
85spritz_hash_init (spritz_state *s) 154spritz_hash_init (spritz_state *s)
86{ 155{
… …
108} 177}
109 178
110/* spritz authenticated encryption inline functions */ 179/* spritz authenticated encryption inline functions */
111 180
112static void 181static void
182spritz_aead_init (spritz_state *s, const void *K, size_t K_len)
183{
184 spritz_mac_init (s, K, K_len);
185}
186
187static void
113spritz_aead_nonce (spritz_state *s, const void *N, size_t N_len) 188spritz_aead_nonce (spritz_state *s, const void *N, size_t N_len)
114{ 189{
115 spritz_absorb_and_stop (s, N, N_len); 190 spritz_absorb_and_stop (s, N, N_len);
116} 191}
117 192
… …
125spritz_aead_finish (spritz_state *s, void *H, size_t H_len) 200spritz_aead_finish (spritz_state *s, void *H, size_t H_len)
126{ 201{
127 spritz_mac_finish (s, H, H_len); 202 spritz_mac_finish (s, H, H_len);
128} 203}
129 204
205/* spritz authenticated encryption (xor variant) inline functions */
206
207static void
208spritz_aead_xor_init (spritz_state *s, const void *K, size_t K_len)
209{
210 spritz_mac_init (s, K, K_len);
211}
212
213static void
214spritz_aead_xor_nonce (spritz_state *s, const void *N, size_t N_len)
215{
216 spritz_absorb_and_stop (s, N, N_len);
217}
218
219static void
220spritz_aead_xor_associated_data (spritz_state *s, const void *D, size_t D_len)
221{
222 spritz_absorb_and_stop (s, D, D_len);
223}
224
225static void
226spritz_aead_xor_finish (spritz_state *s, void *H, size_t H_len)
227{
228 spritz_mac_finish (s, H, H_len);
229}
230
130/* the spritz drbg/csprng inline functions */ 231/* the spritz drbg/csprng inline functions */
131 232
132static void 233static void
133spritz_prng_put (spritz_state *s, const void *S, size_t S_len) 234spritz_prng_add (spritz_state *s, const void *S, size_t S_len)
134{ 235{
135 spritz_absorb (s, S, S_len); 236 spritz_absorb (s, S, S_len);
136} 237}
137 238
138/* get random bytes */ 239/* get random bytes */
… …
140spritz_prng_get (spritz_state *s, void *R, size_t R_len) 241spritz_prng_get (spritz_state *s, void *R, size_t R_len)
141{ 242{
142 spritz_squeeze (s, R, R_len); 243 spritz_squeeze (s, R, R_len);
143} 244}
144 245
246#endif
247

Diff Legend

– Removed lines
+ Added lines
< Changed lines
> Changed lines