summaryrefslogtreecommitdiff
Commit message (Expand)AuthorAgeFilesLines
* Add a dejagnu test pass for camellia-256lhoward/camellia-ccmGreg Hudson2010-07-271-0/+24
* cleanupLuke Howard2010-05-312-3/+3
* cleanupLuke Howard2010-05-241-3/+2
* GCM has a block limit of 2^32 - 2 rather than 2^32 - 1, as does CCMLuke Howard2010-05-241-11/+16
* some style cleanupsLuke Howard2010-05-231-2/+0
* some style cleanupsLuke Howard2010-05-231-5/+4
* don't zero out last blockLuke Howard2010-05-231-3/+2
* move IOV block accessors into inline functionsLuke Howard2010-05-232-258/+237
* iov_next_block() would not work with CCM (well, it would work but only byLuke Howard2010-05-2310-112/+144
* remove unused #definesLuke Howard2010-05-234-10/+0
* update windows identity manager for GCMLuke Howard2010-05-232-0/+20
* support possible truncation of GMAC checksumLuke Howard2010-05-222-9/+12
* Initial implementation of GCMLuke Howard2010-05-2213-22/+967
* Make CMAC KDF SP800-compliant by including zero ContextLuke Howard2010-05-221-4/+16
* CleanupLuke Howard2010-05-205-10/+9
* Use counter+feedback mode for CMAC KDFLuke Howard2010-05-191-8/+9
* [L]2 is length of derived keyLuke Howard2010-05-191-1/+1
* Use SP-800-108 KDF in counter mode with CMAC as CCM/GCM KDFLuke Howard2010-05-191-7/+72
* CTR format should be opaque to CTR implementation; caller should beLuke Howard2010-05-172-48/+6
* separate CCM from CCM with derived keysLuke Howard2010-05-175-91/+139
* assign some numbers for GCM/GMACLuke Howard2010-05-161-0/+8
* Move validation of CTR mode cipher state up to CCM layer. This allowsLuke Howard2010-05-165-116/+31
* add some notesLuke Howard2010-05-161-0/+1
* Cleanup; assert in CTR mode implementations that there is always anLuke Howard2010-05-166-57/+32
* DK() must use ECB (here, implemented in terms of CBC-MAC) otherwiseLuke Howard2010-05-161-1/+4
* cleanupLuke Howard2010-05-141-8/+8
* when chaining, use a fresh nonce for each invocationLuke Howard2010-05-141-43/+4
* cleanupLuke Howard2010-05-141-13/+27
* cleanupLuke Howard2010-05-141-1/+1
* cleanupLuke Howard2010-05-141-3/+0
* cleanupLuke Howard2010-05-141-3/+1
* restore some accidentally deleted checksLuke Howard2010-05-141-1/+1
* further salt new enctypes with enctype nameLuke Howard2010-05-143-11/+57
* If cipher state is explicitly initialised, be sure to randomise nonce onLuke Howard2010-05-141-59/+94
* cleanupLuke Howard2010-05-141-1/+1
* cleanupLuke Howard2010-05-144-9/+4
* cleanupLuke Howard2010-05-141-2/+0
* cleanupLuke Howard2010-05-141-2/+2
* cleanupLuke Howard2010-05-131-1/+1
* CCM PRF is now CMAC (similar to RFC 4615)Luke Howard2010-05-137-229/+283
* revert Camellia CCM enctypes to private assignmentsLuke Howard2010-05-131-2/+2
* Pull up r24021 (fix negative enctypes in ccaches) to Luke'sGreg Hudson2010-05-131-1/+2
* assign some numbers for Camellia CCM for nowLuke Howard2010-05-131-2/+2
* Add CCM PRF: this is just CBC-MAC of input with derived keyLuke Howard2010-05-135-8/+83
* At Luke's request, merge r24016 (fix negative enctype values inGreg Hudson2010-05-131-3/+2
* krb5int_camellia_decrypt_ctr no longer requiredLuke Howard2010-05-131-2/+2
* cleanupLuke Howard2010-05-122-6/+6
* remove some CCM-specific stuff from CTR implementationLuke Howard2010-05-124-18/+12
* cleanupLuke Howard2010-05-124-344/+44
* Don't set pad_to_boundary flag for CMAC checksums; the SIGN_ONLYLuke Howard2010-05-121-1/+0