aboutsummaryrefslogtreecommitdiff
AgeCommit message (Expand)AuthorFilesLines
2010-07-27Add a dejagnu test pass for camellia-256lhoward/camellia-ccmGreg Hudson1-0/+24
2010-05-31cleanupLuke Howard2-3/+3
2010-05-24cleanupLuke Howard1-3/+2
2010-05-24GCM has a block limit of 2^32 - 2 rather than 2^32 - 1, as does CCMLuke Howard1-11/+16
2010-05-23some style cleanupsLuke Howard1-2/+0
2010-05-23some style cleanupsLuke Howard1-5/+4
2010-05-23don't zero out last blockLuke Howard1-3/+2
2010-05-23move IOV block accessors into inline functionsLuke Howard2-258/+237
2010-05-23iov_next_block() would not work with CCM (well, it would work but only byLuke Howard10-112/+144
2010-05-23remove unused #definesLuke Howard4-10/+0
2010-05-23update windows identity manager for GCMLuke Howard2-0/+20
2010-05-22support possible truncation of GMAC checksumLuke Howard2-9/+12
2010-05-22Initial implementation of GCMLuke Howard13-22/+967
2010-05-22Make CMAC KDF SP800-compliant by including zero ContextLuke Howard1-4/+16
2010-05-20CleanupLuke Howard5-10/+9
2010-05-19Use counter+feedback mode for CMAC KDFLuke Howard1-8/+9
2010-05-19[L]2 is length of derived keyLuke Howard1-1/+1
2010-05-19Use SP-800-108 KDF in counter mode with CMAC as CCM/GCM KDFLuke Howard1-7/+72
2010-05-17CTR format should be opaque to CTR implementation; caller should beLuke Howard2-48/+6
2010-05-17separate CCM from CCM with derived keysLuke Howard5-91/+139
2010-05-16assign some numbers for GCM/GMACLuke Howard1-0/+8
2010-05-16Move validation of CTR mode cipher state up to CCM layer. This allowsLuke Howard5-116/+31
2010-05-16add some notesLuke Howard1-0/+1
2010-05-16Cleanup; assert in CTR mode implementations that there is always anLuke Howard6-57/+32
2010-05-16DK() must use ECB (here, implemented in terms of CBC-MAC) otherwiseLuke Howard1-1/+4
2010-05-14cleanupLuke Howard1-8/+8
2010-05-14when chaining, use a fresh nonce for each invocationLuke Howard1-43/+4
2010-05-14cleanupLuke Howard1-13/+27
2010-05-14cleanupLuke Howard1-1/+1
2010-05-14cleanupLuke Howard1-3/+0
2010-05-14cleanupLuke Howard1-3/+1
2010-05-14restore some accidentally deleted checksLuke Howard1-1/+1
2010-05-14further salt new enctypes with enctype nameLuke Howard3-11/+57
2010-05-14If cipher state is explicitly initialised, be sure to randomise nonce onLuke Howard1-59/+94
2010-05-14cleanupLuke Howard1-1/+1
2010-05-14cleanupLuke Howard4-9/+4
2010-05-14cleanupLuke Howard1-2/+0
2010-05-14cleanupLuke Howard1-2/+2
2010-05-13cleanupLuke Howard1-1/+1
2010-05-13CCM PRF is now CMAC (similar to RFC 4615)Luke Howard7-229/+283
2010-05-13revert Camellia CCM enctypes to private assignmentsLuke Howard1-2/+2
2010-05-13Pull up r24021 (fix negative enctypes in ccaches) to Luke'sGreg Hudson1-1/+2
2010-05-13assign some numbers for Camellia CCM for nowLuke Howard1-2/+2
2010-05-13Add CCM PRF: this is just CBC-MAC of input with derived keyLuke Howard5-8/+83
2010-05-13At Luke's request, merge r24016 (fix negative enctype values inGreg Hudson1-3/+2
2010-05-13krb5int_camellia_decrypt_ctr no longer requiredLuke Howard1-2/+2
2010-05-12cleanupLuke Howard2-6/+6
2010-05-12remove some CCM-specific stuff from CTR implementationLuke Howard4-18/+12
2010-05-12cleanupLuke Howard4-344/+44
2010-05-12Don't set pad_to_boundary flag for CMAC checksums; the SIGN_ONLYLuke Howard1-1/+0