Index: srtp/crypto/include/cipher.h |
=================================================================== |
--- srtp/crypto/include/cipher.h (revision 294174) |
+++ srtp/crypto/include/cipher.h (working copy) |
@@ -8,7 +8,7 @@ |
*/ |
/* |
* |
- * Copyright (c) 2001-2006, Cisco Systems, Inc. |
+ * Copyright (c) 2001-2006,2013 Cisco Systems, Inc. |
* All rights reserved. |
* |
* Redistribution and use in source and binary forms, with or without |
@@ -80,15 +80,14 @@ |
*/ |
typedef err_status_t (*cipher_alloc_func_t) |
- (cipher_pointer_t *cp, int key_len); |
+ (cipher_pointer_t *cp, int key_len, int tag_len); |
/* |
* a cipher_init_func_t [re-]initializes a cipher_t with a given key |
- * and direction (i.e., encrypt or decrypt) |
*/ |
typedef err_status_t (*cipher_init_func_t) |
-(void *state, const uint8_t *key, int key_len, cipher_direction_t dir); |
+(void *state, const uint8_t *key, int key_len); |
/* a cipher_dealloc_func_t de-allocates a cipher_t */ |
@@ -99,6 +98,13 @@ |
typedef err_status_t (*cipher_set_segment_func_t) |
(void *state, xtd_seq_num_t idx); |
+/* |
+ * a cipher_set_aad_func_t processes the AAD data for AEAD ciphers |
+ */ |
+typedef err_status_t (*cipher_set_aad_func_t) |
+ (void *state, uint8_t *aad, unsigned int aad_len); |
+ |
+ |
/* a cipher_encrypt_func_t encrypts data in-place */ |
typedef err_status_t (*cipher_encrypt_func_t) |
@@ -114,9 +120,17 @@ |
*/ |
typedef err_status_t (*cipher_set_iv_func_t) |
- (cipher_pointer_t cp, void *iv); |
+ (cipher_pointer_t cp, void *iv, cipher_direction_t direction); |
/* |
+ * a cipher_get_tag_funct_t function is used to get the authentication |
+ * tag that was calculated by an AEAD cipher. |
+ */ |
+typedef err_status_t (*cipher_get_tag_func_t) |
+ (void *state, void *tag, int *len); |
+ |
+ |
+/* |
* cipher_test_case_t is a (list of) key, salt, xtd_seq_num_t, |
* plaintext, and ciphertext values that are known to be correct for a |
* particular cipher. this data can be used to test an implementation |
@@ -132,6 +146,9 @@ |
uint8_t *plaintext; /* plaintext */ |
int ciphertext_length_octets; /* octets in plaintext */ |
uint8_t *ciphertext; /* ciphertext */ |
+ int aad_length_octets; /* octets in AAD */ |
+ uint8_t *aad; /* AAD */ |
+ int tag_length_octets; /* Length of AEAD tag */ |
struct cipher_test_case_t *next_test_case; /* pointer to next testcase */ |
} cipher_test_case_t; |
@@ -141,9 +158,11 @@ |
cipher_alloc_func_t alloc; |
cipher_dealloc_func_t dealloc; |
cipher_init_func_t init; |
+ cipher_set_aad_func_t set_aad; |
cipher_encrypt_func_t encrypt; |
cipher_encrypt_func_t decrypt; |
cipher_set_iv_func_t set_iv; |
+ cipher_get_tag_func_t get_tag; |
char *description; |
int ref_count; |
cipher_test_case_t *test_data; |
@@ -160,28 +179,33 @@ |
cipher_type_t *type; |
void *state; |
int key_len; |
-#ifdef FORCE_64BIT_ALIGN |
- int pad; |
-#endif |
+ int algorithm; |
} cipher_t; |
/* some syntactic sugar on these function types */ |
-#define cipher_type_alloc(ct, c, klen) ((ct)->alloc((c), (klen))) |
+#define cipher_type_alloc(ct, c, klen, tlen) ((ct)->alloc((c), (klen), (tlen))) |
#define cipher_dealloc(c) (((c)->type)->dealloc(c)) |
-#define cipher_init(c, k, dir) (((c)->type)->init(((c)->state), (k), ((c)->key_len), (dir))) |
+#define cipher_init(c, k) (((c)->type)->init(((c)->state), (k), ((c)->key_len))) |
#define cipher_encrypt(c, buf, len) \ |
(((c)->type)->encrypt(((c)->state), (buf), (len))) |
+#define cipher_get_tag(c, buf, len) \ |
+ (((c)->type)->get_tag(((c)->state), (buf), (len))) |
+ |
#define cipher_decrypt(c, buf, len) \ |
(((c)->type)->decrypt(((c)->state), (buf), (len))) |
-#define cipher_set_iv(c, n) \ |
- ((c) ? (((c)->type)->set_iv(((cipher_pointer_t)(c)->state), (n))) : \ |
+#define cipher_set_iv(c, n, dir) \ |
+ ((c) ? (((c)->type)->set_iv(((cipher_pointer_t)(c)->state), (n), (dir))) : \ |
err_status_no_such_op) |
+#define cipher_set_aad(c, a, l) \ |
+ (((c) && (((c)->type)->set_aad)) ? \ |
+ (((c)->type)->set_aad(((c)->state), (a), (l))) : \ |
+ err_status_no_such_op) |
err_status_t |
cipher_output(cipher_t *c, uint8_t *buffer, int num_octets_to_output); |