1/*	$FreeBSD$	*/
2/*	$OpenBSD: xform.h,v 1.8 2001/08/28 12:20:43 ben Exp $	*/
3
4/*-
5 * The author of this code is Angelos D. Keromytis (angelos@cis.upenn.edu)
6 *
7 * This code was written by Angelos D. Keromytis in Athens, Greece, in
8 * February 2000. Network Security Technologies Inc. (NSTI) kindly
9 * supported the development of this code.
10 *
11 * Copyright (c) 2000 Angelos D. Keromytis
12 * Copyright (c) 2014 The FreeBSD Foundation
13 * All rights reserved.
14 *
15 * Portions of this software were developed by John-Mark Gurney
16 * under sponsorship of the FreeBSD Foundation and
17 * Rubicon Communications, LLC (Netgate).
18 *
19 * Permission to use, copy, and modify this software without fee
20 * is hereby granted, provided that this entire notice is included in
21 * all source code copies of any software which is or includes a copy or
22 * modification of this software.
23 *
24 * THIS SOFTWARE IS BEING PROVIDED "AS IS", WITHOUT ANY EXPRESS OR
25 * IMPLIED WARRANTY. IN PARTICULAR, NONE OF THE AUTHORS MAKES ANY
26 * REPRESENTATION OR WARRANTY OF ANY KIND CONCERNING THE
27 * MERCHANTABILITY OF THIS SOFTWARE OR ITS FITNESS FOR ANY PARTICULAR
28 * PURPOSE.
29 */
30
31#ifndef _CRYPTO_XFORM_ENC_H_
32#define _CRYPTO_XFORM_ENC_H_
33
34#include <sys/malloc.h>
35#include <sys/errno.h>
36#include <crypto/rijndael/rijndael.h>
37#include <crypto/camellia/camellia.h>
38#include <opencrypto/cryptodev.h>
39#ifdef _STANDALONE
40#include <stand.h>
41#endif
42
43#define AESICM_BLOCKSIZE	AES_BLOCK_LEN
44#define	AES_XTS_BLOCKSIZE	16
45#define	AES_XTS_IVSIZE		8
46#define	AES_XTS_ALPHA		0x87	/* GF(2^128) generator polynomial */
47
48/* Declarations */
49struct enc_xform {
50	int type;
51	char *name;
52	size_t ctxsize;
53	uint16_t blocksize;	/* Required input block size -- 1 for stream ciphers. */
54	uint16_t native_blocksize;	/* Used for stream ciphers. */
55	uint16_t ivsize;
56	uint16_t minkey, maxkey;
57
58	/*
59	 * Encrypt/decrypt a single block.  For stream ciphers this
60	 * encrypts/decrypts a single "native" block.
61	 */
62	void (*encrypt) (void *, const uint8_t *, uint8_t *);
63	void (*decrypt) (void *, const uint8_t *, uint8_t *);
64	int (*setkey) (void *, const uint8_t *, int len);
65	void (*reinit) (void *, const uint8_t *);
66
67	/*
68	 * For stream ciphers, encrypt/decrypt the final partial block
69	 * of 'len' bytes.
70	 */
71	void (*encrypt_last) (void *, const uint8_t *, uint8_t *, size_t len);
72	void (*decrypt_last) (void *, const uint8_t *, uint8_t *, size_t len);
73};
74
75
76extern struct enc_xform enc_xform_null;
77extern struct enc_xform enc_xform_rijndael128;
78extern struct enc_xform enc_xform_aes_icm;
79extern struct enc_xform enc_xform_aes_nist_gcm;
80extern struct enc_xform enc_xform_aes_nist_gmac;
81extern struct enc_xform enc_xform_aes_xts;
82extern struct enc_xform enc_xform_camellia;
83extern struct enc_xform enc_xform_chacha20;
84extern struct enc_xform enc_xform_ccm;
85
86struct aes_icm_ctx {
87	uint32_t	ac_ek[4*(RIJNDAEL_MAXNR + 1)];
88	/* ac_block is initialized to IV */
89	uint8_t		ac_block[AESICM_BLOCKSIZE];
90	int		ac_nr;
91};
92
93struct aes_xts_ctx {
94	rijndael_ctx key1;
95	rijndael_ctx key2;
96	uint8_t tweak[AES_XTS_BLOCKSIZE];
97};
98
99#endif /* _CRYPTO_XFORM_ENC_H_ */
100