Lines Matching refs:nonce
30 memset(ctx->nonce.c, 0, sizeof(ctx->nonce.c)); in CRYPTO_ccm128_init()
31 ctx->nonce.c[0] = ((u8)(L - 1) & 7) | (u8)(((M - 2) / 2) & 7) << 3; in CRYPTO_ccm128_init()
41 const unsigned char *nonce, size_t nlen, size_t mlen) in CRYPTO_ccm128_setiv() argument
43 unsigned int L = ctx->nonce.c[0] & 7; /* the L parameter */ in CRYPTO_ccm128_setiv()
49 ctx->nonce.c[8] = (u8)(mlen >> (56 % (sizeof(mlen) * 8))); in CRYPTO_ccm128_setiv()
50 ctx->nonce.c[9] = (u8)(mlen >> (48 % (sizeof(mlen) * 8))); in CRYPTO_ccm128_setiv()
51 ctx->nonce.c[10] = (u8)(mlen >> (40 % (sizeof(mlen) * 8))); in CRYPTO_ccm128_setiv()
52 ctx->nonce.c[11] = (u8)(mlen >> (32 % (sizeof(mlen) * 8))); in CRYPTO_ccm128_setiv()
54 ctx->nonce.u[1] = 0; in CRYPTO_ccm128_setiv()
56 ctx->nonce.c[12] = (u8)(mlen >> 24); in CRYPTO_ccm128_setiv()
57 ctx->nonce.c[13] = (u8)(mlen >> 16); in CRYPTO_ccm128_setiv()
58 ctx->nonce.c[14] = (u8)(mlen >> 8); in CRYPTO_ccm128_setiv()
59 ctx->nonce.c[15] = (u8)mlen; in CRYPTO_ccm128_setiv()
61 ctx->nonce.c[0] &= ~0x40; /* clear Adata flag */ in CRYPTO_ccm128_setiv()
62 memcpy(&ctx->nonce.c[1], nonce, 14 - L); in CRYPTO_ccm128_setiv()
77 ctx->nonce.c[0] |= 0x40; /* set Adata flag */ in CRYPTO_ccm128_aad()
78 (*block) (ctx->nonce.c, ctx->cmac.c, ctx->key), ctx->blocks++; in CRYPTO_ccm128_aad()
143 unsigned char flags0 = ctx->nonce.c[0]; in CRYPTO_ccm128_encrypt()
152 (*block) (ctx->nonce.c, ctx->cmac.c, key), ctx->blocks++; in CRYPTO_ccm128_encrypt()
154 ctx->nonce.c[0] = L = flags0 & 7; in CRYPTO_ccm128_encrypt()
156 n |= ctx->nonce.c[i]; in CRYPTO_ccm128_encrypt()
157 ctx->nonce.c[i] = 0; in CRYPTO_ccm128_encrypt()
160 n |= ctx->nonce.c[15]; /* reconstructed length */ in CRYPTO_ccm128_encrypt()
161 ctx->nonce.c[15] = 1; in CRYPTO_ccm128_encrypt()
185 (*block) (ctx->nonce.c, scratch.c, key); in CRYPTO_ccm128_encrypt()
186 ctr64_inc(ctx->nonce.c); in CRYPTO_ccm128_encrypt()
204 (*block) (ctx->nonce.c, scratch.c, key); in CRYPTO_ccm128_encrypt()
210 ctx->nonce.c[i] = 0; in CRYPTO_ccm128_encrypt()
212 (*block) (ctx->nonce.c, scratch.c, key); in CRYPTO_ccm128_encrypt()
216 ctx->nonce.c[0] = flags0; in CRYPTO_ccm128_encrypt()
227 unsigned char flags0 = ctx->nonce.c[0]; in CRYPTO_ccm128_decrypt()
236 (*block) (ctx->nonce.c, ctx->cmac.c, key); in CRYPTO_ccm128_decrypt()
238 ctx->nonce.c[0] = L = flags0 & 7; in CRYPTO_ccm128_decrypt()
240 n |= ctx->nonce.c[i]; in CRYPTO_ccm128_decrypt()
241 ctx->nonce.c[i] = 0; in CRYPTO_ccm128_decrypt()
244 n |= ctx->nonce.c[15]; /* reconstructed length */ in CRYPTO_ccm128_decrypt()
245 ctx->nonce.c[15] = 1; in CRYPTO_ccm128_decrypt()
257 (*block) (ctx->nonce.c, scratch.c, key); in CRYPTO_ccm128_decrypt()
258 ctr64_inc(ctx->nonce.c); in CRYPTO_ccm128_decrypt()
278 (*block) (ctx->nonce.c, scratch.c, key); in CRYPTO_ccm128_decrypt()
285 ctx->nonce.c[i] = 0; in CRYPTO_ccm128_decrypt()
287 (*block) (ctx->nonce.c, scratch.c, key); in CRYPTO_ccm128_decrypt()
291 ctx->nonce.c[0] = flags0; in CRYPTO_ccm128_decrypt()
316 unsigned char flags0 = ctx->nonce.c[0]; in CRYPTO_ccm128_encrypt_ccm64()
325 (*block) (ctx->nonce.c, ctx->cmac.c, key), ctx->blocks++; in CRYPTO_ccm128_encrypt_ccm64()
327 ctx->nonce.c[0] = L = flags0 & 7; in CRYPTO_ccm128_encrypt_ccm64()
329 n |= ctx->nonce.c[i]; in CRYPTO_ccm128_encrypt_ccm64()
330 ctx->nonce.c[i] = 0; in CRYPTO_ccm128_encrypt_ccm64()
333 n |= ctx->nonce.c[15]; /* reconstructed length */ in CRYPTO_ccm128_encrypt_ccm64()
334 ctx->nonce.c[15] = 1; in CRYPTO_ccm128_encrypt_ccm64()
344 (*stream) (inp, out, n, key, ctx->nonce.c, ctx->cmac.c); in CRYPTO_ccm128_encrypt_ccm64()
350 ctr64_add(ctx->nonce.c, n / 16); in CRYPTO_ccm128_encrypt_ccm64()
357 (*block) (ctx->nonce.c, scratch.c, key); in CRYPTO_ccm128_encrypt_ccm64()
363 ctx->nonce.c[i] = 0; in CRYPTO_ccm128_encrypt_ccm64()
365 (*block) (ctx->nonce.c, scratch.c, key); in CRYPTO_ccm128_encrypt_ccm64()
369 ctx->nonce.c[0] = flags0; in CRYPTO_ccm128_encrypt_ccm64()
380 unsigned char flags0 = ctx->nonce.c[0]; in CRYPTO_ccm128_decrypt_ccm64()
389 (*block) (ctx->nonce.c, ctx->cmac.c, key); in CRYPTO_ccm128_decrypt_ccm64()
391 ctx->nonce.c[0] = L = flags0 & 7; in CRYPTO_ccm128_decrypt_ccm64()
393 n |= ctx->nonce.c[i]; in CRYPTO_ccm128_decrypt_ccm64()
394 ctx->nonce.c[i] = 0; in CRYPTO_ccm128_decrypt_ccm64()
397 n |= ctx->nonce.c[15]; /* reconstructed length */ in CRYPTO_ccm128_decrypt_ccm64()
398 ctx->nonce.c[15] = 1; in CRYPTO_ccm128_decrypt_ccm64()
404 (*stream) (inp, out, n, key, ctx->nonce.c, ctx->cmac.c); in CRYPTO_ccm128_decrypt_ccm64()
410 ctr64_add(ctx->nonce.c, n / 16); in CRYPTO_ccm128_decrypt_ccm64()
414 (*block) (ctx->nonce.c, scratch.c, key); in CRYPTO_ccm128_decrypt_ccm64()
421 ctx->nonce.c[i] = 0; in CRYPTO_ccm128_decrypt_ccm64()
423 (*block) (ctx->nonce.c, scratch.c, key); in CRYPTO_ccm128_decrypt_ccm64()
427 ctx->nonce.c[0] = flags0; in CRYPTO_ccm128_decrypt_ccm64()
434 unsigned int M = (ctx->nonce.c[0] >> 3) & 7; /* the M parameter */ in CRYPTO_ccm128_tag()
