Lines Matching refs:cmac
78 (*block) (ctx->nonce.c, ctx->cmac.c, ctx->key), ctx->blocks++; in CRYPTO_ccm128_aad()
81 ctx->cmac.c[0] ^= (u8)(alen >> 8); in CRYPTO_ccm128_aad()
82 ctx->cmac.c[1] ^= (u8)alen; in CRYPTO_ccm128_aad()
86 ctx->cmac.c[0] ^= 0xFF; in CRYPTO_ccm128_aad()
87 ctx->cmac.c[1] ^= 0xFF; in CRYPTO_ccm128_aad()
88 ctx->cmac.c[2] ^= (u8)(alen >> (56 % (sizeof(alen) * 8))); in CRYPTO_ccm128_aad()
89 ctx->cmac.c[3] ^= (u8)(alen >> (48 % (sizeof(alen) * 8))); in CRYPTO_ccm128_aad()
90 ctx->cmac.c[4] ^= (u8)(alen >> (40 % (sizeof(alen) * 8))); in CRYPTO_ccm128_aad()
91 ctx->cmac.c[5] ^= (u8)(alen >> (32 % (sizeof(alen) * 8))); in CRYPTO_ccm128_aad()
92 ctx->cmac.c[6] ^= (u8)(alen >> 24); in CRYPTO_ccm128_aad()
93 ctx->cmac.c[7] ^= (u8)(alen >> 16); in CRYPTO_ccm128_aad()
94 ctx->cmac.c[8] ^= (u8)(alen >> 8); in CRYPTO_ccm128_aad()
95 ctx->cmac.c[9] ^= (u8)alen; in CRYPTO_ccm128_aad()
98 ctx->cmac.c[0] ^= 0xFF; in CRYPTO_ccm128_aad()
99 ctx->cmac.c[1] ^= 0xFE; in CRYPTO_ccm128_aad()
100 ctx->cmac.c[2] ^= (u8)(alen >> 24); in CRYPTO_ccm128_aad()
101 ctx->cmac.c[3] ^= (u8)(alen >> 16); in CRYPTO_ccm128_aad()
102 ctx->cmac.c[4] ^= (u8)(alen >> 8); in CRYPTO_ccm128_aad()
103 ctx->cmac.c[5] ^= (u8)alen; in CRYPTO_ccm128_aad()
109 ctx->cmac.c[i] ^= *aad; in CRYPTO_ccm128_aad()
110 (*block) (ctx->cmac.c, ctx->cmac.c, ctx->key), ctx->blocks++; in CRYPTO_ccm128_aad()
152 (*block) (ctx->nonce.c, ctx->cmac.c, key), ctx->blocks++; in CRYPTO_ccm128_encrypt()
178 ctx->cmac.u[0] ^= temp.u[0]; in CRYPTO_ccm128_encrypt()
179 ctx->cmac.u[1] ^= temp.u[1]; in CRYPTO_ccm128_encrypt()
181 ctx->cmac.u[0] ^= ((u64_a1 *)inp)[0]; in CRYPTO_ccm128_encrypt()
182 ctx->cmac.u[1] ^= ((u64_a1 *)inp)[1]; in CRYPTO_ccm128_encrypt()
184 (*block) (ctx->cmac.c, ctx->cmac.c, key); in CRYPTO_ccm128_encrypt()
202 ctx->cmac.c[i] ^= inp[i]; in CRYPTO_ccm128_encrypt()
203 (*block) (ctx->cmac.c, ctx->cmac.c, key); in CRYPTO_ccm128_encrypt()
213 ctx->cmac.u[0] ^= scratch.u[0]; in CRYPTO_ccm128_encrypt()
214 ctx->cmac.u[1] ^= scratch.u[1]; in CRYPTO_ccm128_encrypt()
236 (*block) (ctx->nonce.c, ctx->cmac.c, key); in CRYPTO_ccm128_decrypt()
261 ctx->cmac.u[0] ^= (scratch.u[0] ^= temp.u[0]); in CRYPTO_ccm128_decrypt()
262 ctx->cmac.u[1] ^= (scratch.u[1] ^= temp.u[1]); in CRYPTO_ccm128_decrypt()
265 ctx->cmac.u[0] ^= (((u64_a1 *)out)[0] in CRYPTO_ccm128_decrypt()
267 ctx->cmac.u[1] ^= (((u64_a1 *)out)[1] in CRYPTO_ccm128_decrypt()
270 (*block) (ctx->cmac.c, ctx->cmac.c, key); in CRYPTO_ccm128_decrypt()
280 ctx->cmac.c[i] ^= (out[i] = scratch.c[i] ^ inp[i]); in CRYPTO_ccm128_decrypt()
281 (*block) (ctx->cmac.c, ctx->cmac.c, key); in CRYPTO_ccm128_decrypt()
288 ctx->cmac.u[0] ^= scratch.u[0]; in CRYPTO_ccm128_decrypt()
289 ctx->cmac.u[1] ^= scratch.u[1]; in CRYPTO_ccm128_decrypt()
325 (*block) (ctx->nonce.c, ctx->cmac.c, key), ctx->blocks++; in CRYPTO_ccm128_encrypt_ccm64()
344 (*stream) (inp, out, n, key, ctx->nonce.c, ctx->cmac.c); in CRYPTO_ccm128_encrypt_ccm64()
355 ctx->cmac.c[i] ^= inp[i]; in CRYPTO_ccm128_encrypt_ccm64()
356 (*block) (ctx->cmac.c, ctx->cmac.c, key); in CRYPTO_ccm128_encrypt_ccm64()
366 ctx->cmac.u[0] ^= scratch.u[0]; in CRYPTO_ccm128_encrypt_ccm64()
367 ctx->cmac.u[1] ^= scratch.u[1]; in CRYPTO_ccm128_encrypt_ccm64()
389 (*block) (ctx->nonce.c, ctx->cmac.c, key); in CRYPTO_ccm128_decrypt_ccm64()
404 (*stream) (inp, out, n, key, ctx->nonce.c, ctx->cmac.c); in CRYPTO_ccm128_decrypt_ccm64()
416 ctx->cmac.c[i] ^= (out[i] = scratch.c[i] ^ inp[i]); in CRYPTO_ccm128_decrypt_ccm64()
417 (*block) (ctx->cmac.c, ctx->cmac.c, key); in CRYPTO_ccm128_decrypt_ccm64()
424 ctx->cmac.u[0] ^= scratch.u[0]; in CRYPTO_ccm128_decrypt_ccm64()
425 ctx->cmac.u[1] ^= scratch.u[1]; in CRYPTO_ccm128_decrypt_ccm64()
440 memcpy(tag, ctx->cmac.c, M); in CRYPTO_ccm128_tag()
