diff options
| author | cinap_lenrek <cinap_lenrek@felloff.net> | 2016-03-23 02:45:35 +0100 |
|---|---|---|
| committer | cinap_lenrek <cinap_lenrek@felloff.net> | 2016-03-23 02:45:35 +0100 |
| commit | aa6673fcfbe3bc41078487f4ef5d5aea459cd953 (patch) | |
| tree | 691a08eb0191904f7f8ba8a7f9ad4939aafa9907 /sys/man/2 | |
| parent | 7ff779ff52b3da9c3b4cfee38cd90088ac65d6c3 (diff) | |
add portable AES-GCM (Galois/Counter Mode) implementation to libsec and devtls
Diffstat (limited to 'sys/man/2')
| -rw-r--r-- | sys/man/2/aes | 33 |
1 files changed, 31 insertions, 2 deletions
diff --git a/sys/man/2/aes b/sys/man/2/aes index fd5438bdf..dc400dccc 100644 --- a/sys/man/2/aes +++ b/sys/man/2/aes @@ -1,6 +1,6 @@ .TH AES 2 .SH NAME -setupAESstate, aesCBCencrypt, aesCBCdecrypt, setupAESXCBCstate, aesXCBCmac - advanced encryption standard (rijndael) +setupAESstate, aesCBCencrypt, aesCBCdecrypt, setupAESXCBCstate, aesXCBCmac, setupAESGCMstate - advanced encryption standard (rijndael) .SH SYNOPSIS .B #include <u.h> .br @@ -32,6 +32,18 @@ void setupAESXCBCstate(AESstate *s) .PP .B void aesXCBCmac(uchar *p, int len, AESstate *s) +.PP +.B +void setupAESGCMstate(AESGCMstate *s, uchar *key, int keylen, uchar *iv, int ivlen) +.PP +.B +void aesgcm_setiv(AESGCMstate *s, uchar *iv, int ivlen) +.PP +.B +void aesgcm_encrypt(uchar *dat, ulong ndat, uchar *aad, ulong naad, uchar tag[16], AESGCMstate *s) +.PP +.B +int aesgcm_decrypt(uchar *dat, ulong ndat, uchar *aad, ulong naad, uchar tag[16], AESGCMstate *s) .SH DESCRIPTION AES (a.k.a. Rijndael) has replaced DES as the preferred block cipher. @@ -46,10 +58,27 @@ are the block ciphers, corresponding to and .I aesCBCdecrypt implement cipher-block-chaining encryption. -.I setupAESXCBCstate +.I SetupAESXCBCstate and .I aesXCBCmac implement AES XCBC message authentication, per RFC 3566. +.IR SetupAESGCMstate , +.IR aesgcm_setiv , +.I aesgcm_encrypt +and +.I aesgcm_decrypt +implement Galois/Counter Mode (GCM) authenticated encryption with associated data (AEAD). +Before encryption or decryption, a new initialization vector (nonce) has to be set with +.I aesgcm_setiv +or by calling +.I setupAESGCMstate +with non-zero +.I iv +and +.I ivlen +arguments. +Aesgcm_decrypt returns zero when authentication and decryption where successfull and +non-zero otherwise. All ciphering is performed in place. .I Keybytes should be 16, 24, or 32. |