Support ChaCha20+Poly1305 cipher suites.

nss/lib/freebl/blapi.h

 /*
  * crypto.h - public data structures and prototypes for the crypto library
  *
  * This Source Code Form is subject to the terms of the Mozilla Public
  * License, v. 2.0. If a copy of the MPL was not distributed with this
  * file, You can obtain one at http://mozilla.org/MPL/2.0/. */
 
 #ifndef _BLAPI_H_
 #define _BLAPI_H_
 
@@ skipping 800 matching lines @@
 **      "maxOutputLen" the maximum amount of data that can ever be
 **         stored in "output"
 **      "input" the input data
 **      "inputLen" the amount of input data
 */
 extern SECStatus 
 Camellia_Decrypt(CamelliaContext *cx, unsigned char *output,
                  unsigned int *outputLen, unsigned int maxOutputLen,
                  const unsigned char *input, unsigned int inputLen);
 
+/******************************************/
+/*
+** ChaCha20+Poly1305 AEAD
+*/
+
+extern SECStatus ChaCha20Poly1305_Seal(
+        unsigned char *out,
+        const unsigned char *ad, unsigned int adLen,

[agl, 2013/10/21 21:53:39]

I think this is fine, but it limits the API to handling 2**32 bytes in one shot.
This makes the lack of counter overflow in Ted's code unimportant.

+        const unsigned char *plaintext, unsigned int plaintextLen,
+        unsigned int tagLen,
+        const unsigned char key[32],
+        const unsigned char nonce[8]);
+
+extern SECStatus ChaCha20Poly1305_Open(
+        unsigned char *out,
+        const unsigned char *ad, unsigned int adLen,
+        const unsigned char *ciphertext, unsigned int ciphertextLen,
+        unsigned int tagLen,
+        const unsigned char key[32],
+        const unsigned char nonce[8]);
 
 /******************************************/
 /*
 ** MD5 secure hash function
 */
 
 /*
 ** Hash a null terminated string "src" into "dest" using MD5
 */
 extern SECStatus MD5_Hash(unsigned char *dest, const char *src);
@@ skipping 573 matching lines @@
 PRBool BLAPI_VerifySelf(const char *name);
 
 /*********************************************************************/
 extern const SECHashObject * HASH_GetRawHashObject(HASH_HashType hashType);
 
 extern void BL_SetForkState(PRBool forked);
 
 SEC_END_PROTOS
 
 #endif /* _BLAPI_H_ */