Lines Matching refs:to
8 function on a message in which the output can be extended to any desired length.
10 At a minimum an XOF needs to support the following pseudo-code
33 The current OpenSSL implementation of XOF only supports a single call to squeeze.
34 The assumption exists in both the high level call to EVP_DigestFinalXOF() as
38 A decision has to be made as to whether a new API is required, as well as
42 Older providers that have not been updated to support this change should produce
50 Currently EVP_DigestFinalXOF() uses a flag to check that it is only invoked once.
52 a reset, but that code was removed as it was deemed to be incorrect.
56 multiple calls. To counter this the provider needs a mechanism to indicate that
62 Change EVP_DigestFinalXOF(ctx, out, outlen) to handle multiple calls.
73 - Final seems like a strange name to call multiple times.
77 Keep EVP_DigestFinalXOF() as a one shot function and create a new API to handle
88 needs to run for the multi squeeze case.
95 - The interaction between the 2 API's needs to be clearly documented.
96 - A call to EVP_DigestSqueeze() after EVP_DigestFinalXOF() would fail since
98 - A call to EVP_DigestFinalXOF() after the EVP_DigestSqueeze() would fail.
102 Create a completely new type e.g. EVP_XOF_MD to implement XOF digests
124 The proposed API name to use is EVP_DigestSqueeze.
144 Absorb can be done by multiple calls to:
152 Do we want to have an Alias function?
191 It contains an opaque object for storing the state B<A>, that can be used to
192 output to B<out>. After every B<r> bits, the state B<A> is updated internally
196 way of knowing where to start from if another call to SHA_squeeze() was
197 attempted. The method also avoids doing a final call to KeccakF1600() currently
202 Modify the SHA3_squeeze code to accept a input/output parameter to track the
208 - Change in C code is minimal. it just needs to pass this additional parameter.
214 - This C code also needs to be written in assembler, the logic would also be
215 different in different assembler routines due to the internal format of the
221 Leave SHA3_squeeze() as it is and buffer calls to the SHA3_squeeze() function
230 - Because of the one shot nature of the SHA3_squeeze() it still needs to call
232 - The Assembler function for KeccakF1600() needs to be exposed. This function
233 was not intended to be exposed since the internal format of the state B<A>
253 An alternative approach to solution 2 is to modify the SHA3_squeeze() slightly
254 so that it can pass in a boolean that handles the call to KeccakF1600()
259 - C code is fairly simple to implement.
265 - Requires small assembler change to pass the boolean and handle the call to
267 - Uses memcpy to store partial results for a single blob of squeezed data of
