linux-imx

/*

 * ChaCha20-Poly1305 AEAD, RFC7539

 *

 * Copyright (C) 2015 Martin Willi

 *

 * This program is free software; you can redistribute it and/or modify

 * it under the terms of the GNU General Public License as published by

 * the Free Software Foundation; either version 2 of the License, or

 * (at your option) any later version.

 */

​

#include <crypto/internal/aead.h>

#include <crypto/internal/hash.h>

#include <crypto/internal/skcipher.h>

#include <crypto/scatterwalk.h>

#include <crypto/chacha.h>

#include <crypto/poly1305.h>

#include <linux/err.h>

#include <linux/init.h>

#include <linux/kernel.h>

#include <linux/module.h>

​

#include "internal.h"

​

struct chachapoly_instance_ctx {

    struct crypto_skcipher_spawn chacha;

    struct crypto_ahash_spawn poly;

    unsigned int saltlen;

};

​

struct chachapoly_ctx {

    struct crypto_skcipher *chacha;

    struct crypto_ahash *poly;

    /* key bytes we use for the ChaCha20 IV */

    unsigned int saltlen;

    u8 salt[];

};

​

struct poly_req {

    /* zero byte padding for AD/ciphertext, as needed */

    u8 pad[POLY1305_BLOCK_SIZE];

    /* tail data with AD/ciphertext lengths */

    struct {

        __le64 assoclen;

        __le64 cryptlen;

    } tail;

    struct scatterlist src[1];

    struct ahash_request req; /* must be last member */

};

​

struct chacha_req {

    u8 iv[CHACHA_IV_SIZE];

    struct scatterlist src[1];

    struct skcipher_request req; /* must be last member */

};

​

struct chachapoly_req_ctx {

    struct scatterlist src[2];

    struct scatterlist dst[2];

    /* the key we generate for Poly1305 using Chacha20 */

    u8 key[POLY1305_KEY_SIZE];

    /* calculated Poly1305 tag */

    u8 tag[POLY1305_DIGEST_SIZE];