Support ChaCha20+Poly1305 cipher suites.

nss/lib/freebl/blapi.h

Index: nss/lib/freebl/blapi.h
===================================================================
--- nss/lib/freebl/blapi.h	(revision 228205)
+++ nss/lib/freebl/blapi.h	(working copy)
@@ -818,7 +818,27 @@
 		 unsigned int *outputLen, unsigned int maxOutputLen,
 		 const unsigned char *input, unsigned int inputLen);
 
+/******************************************/
+/*
+** ChaCha20+Poly1305 AEAD
+*/
 
+extern SECStatus ChaCha20Poly1305_Seal(
+	unsigned char *out,
+	const unsigned char *ad, unsigned int adLen,

[agl, 2013/10/21 21:53:39]

I think this is fine, but it limits the API to handling 2**32 bytes in one shot.
This makes the lack of counter overflow in Ted's code unimportant.

+	const unsigned char *plaintext, unsigned int plaintextLen,
+	unsigned int tagLen,
+	const unsigned char key[32],
+	const unsigned char nonce[8]);
+
+extern SECStatus ChaCha20Poly1305_Open(
+	unsigned char *out,
+	const unsigned char *ad, unsigned int adLen,
+	const unsigned char *ciphertext, unsigned int ciphertextLen,
+	unsigned int tagLen,
+	const unsigned char key[32],
+	const unsigned char nonce[8]);
+
 /******************************************/
 /*
 ** MD5 secure hash function