linux-toradex.git/crypto/chacha20poly1305.c, branch v4.8

crypto: chacha20poly1305 - Use skcipher

2016-07-18T09:35:41+00:00

This patch converts chacha20poly1305 to use the new skcipher
interface as opposed to ablkcipher.

It also fixes a buglet where we may end up with an async poly1305
when the user asks for a async algorithm.  This shouldn't be a
problem yet as there aren't any async implementations of poly1305
out there.

Signed-off-by: Herbert Xu

crypto: chacha20poly1305 - Skip encryption/decryption for 0-len

2015-12-09T12:16:04+00:00

If the length of the plaintext is zero, there's no need to waste cycles
on encryption and decryption. Using the chacha20poly1305 construction
for zero-length plaintexts is a common way of using a shared encryption
key for AAD authentication.

Signed-off-by: Jason A. Donenfeld 
Signed-off-by: Herbert Xu

crypto: aead - Remove CRYPTO_ALG_AEAD_NEW flag

2015-08-17T08:53:53+00:00

This patch removes the CRYPTO_ALG_AEAD_NEW flag now that everyone
has been converted.

Signed-off-by: Herbert Xu

crypto: poly1305 - Export common Poly1305 helpers

2015-07-17T13:20:26+00:00

As architecture specific drivers need a software fallback, export Poly1305
init/update/final functions together with some helpers in a header file.

Signed-off-by: Martin Willi 
Signed-off-by: Herbert Xu

crypto: chacha20 - Export common ChaCha20 helpers

2015-07-17T13:20:21+00:00

As architecture specific drivers need a software fallback, export a
ChaCha20 en-/decryption function together with some helpers in a header
file.

Signed-off-by: Martin Willi 
Signed-off-by: Herbert Xu

crypto: chacha20poly1305 - Convert to new AEAD interface

2015-07-17T13:20:19+00:00

This patch converts rfc7539 and rfc7539esp to the new AEAD interface.
The test vectors for rfc7539esp have also been updated to include
the IV.

Signed-off-by: Herbert Xu 
Tested-by: Martin Willi

crypto: poly1305 - Pass key as first two message blocks to each desc_ctx

2015-06-17T07:35:11+00:00

The Poly1305 authenticator requires a unique key for each generated tag. This
implies that we can't set the key per tfm, as multiple users set individual
keys. Instead we pass a desc specific key as the first two blocks of the
message to authenticate in update().

Signed-off-by: Martin Willi 
Signed-off-by: Herbert Xu

crypto: chacha20poly1305 - Add an IPsec variant for RFC7539 AEAD

2015-06-04T07:04:53+00:00

draft-ietf-ipsecme-chacha20-poly1305 defines the use of ChaCha20/Poly1305 in
ESP. It uses additional four byte key material as a salt, which is then used
with an 8 byte IV to form the ChaCha20 nonce as defined in the RFC7539.

Signed-off-by: Martin Willi 
Acked-by: Steffen Klassert 
Signed-off-by: Herbert Xu

crypto: chacha20poly1305 - Add a ChaCha20-Poly1305 AEAD construction, RFC7539

2015-06-04T07:04:52+00:00

This AEAD uses a chacha20 ablkcipher and a poly1305 ahash to construct the
ChaCha20-Poly1305 AEAD as defined in RFC7539. It supports both synchronous and
asynchronous operations, even if we currently have no async chacha20 or poly1305
drivers.

Signed-off-by: Martin Willi 
Acked-by: Steffen Klassert 
Signed-off-by: Herbert Xu