summaryrefslogtreecommitdiff
path: root/salsa20r12-crypt.c
diff options
context:
space:
mode:
authorNikos Mavrogiannopoulos <nmav@gnutls.org>2013-03-17 14:16:09 +0100
committerNiels Möller <nisse@lysator.liu.se>2013-03-25 12:48:24 +0100
commit582c9eeb558ded077506b9f74a02b600e212b780 (patch)
tree6dc7320a2a60994ebd0c381eb10d7d1006bab794 /salsa20r12-crypt.c
parentf8a534ad1d14d2eb235544ef6e42d775f6d0674c (diff)
downloadnettle-582c9eeb558ded077506b9f74a02b600e212b780.tar.gz
Added encryption function for 12-round salsa20.
Diffstat (limited to 'salsa20r12-crypt.c')
-rw-r--r--salsa20r12-crypt.c74
1 files changed, 74 insertions, 0 deletions
diff --git a/salsa20r12-crypt.c b/salsa20r12-crypt.c
new file mode 100644
index 00000000..0c82217b
--- /dev/null
+++ b/salsa20r12-crypt.c
@@ -0,0 +1,74 @@
+/* salsa20r12-crypt.c
+ *
+ * The Salsa20 stream cipher.
+ */
+
+/* nettle, low-level cryptographics library
+ *
+ * Copyright (C) 2013 Nikos Mavrogiannopoulos
+ *
+ * The nettle library is free software; you can redistribute it and/or modify
+ * it under the terms of the GNU Lesser General Public License as published by
+ * the Free Software Foundation; either version 2.1 of the License, or (at your
+ * option) any later version.
+ *
+ * The nettle library is distributed in the hope that it will be useful, but
+ * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY
+ * or FITNESS FOR A PARTICULAR PURPOSE. See the GNU Lesser General Public
+ * License for more details.
+ *
+ * You should have received a copy of the GNU Lesser General Public License
+ * along with the nettle library; see the file COPYING.LIB. If not, write to
+ * the Free Software Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston,
+ * MA 02111-1301, USA.
+ */
+
+/* Based on:
+ salsa20-ref.c version 20051118
+ D. J. Bernstein
+ Public domain.
+*/
+
+#if HAVE_CONFIG_H
+# include "config.h"
+#endif
+
+#include <string.h>
+
+#include "salsa20.h"
+
+#include "macros.h"
+#include "memxor.h"
+
+void
+salsa20r12_crypt(struct salsa20_ctx *ctx,
+ unsigned length,
+ uint8_t *c,
+ const uint8_t *m)
+{
+ uint32_t x[_SALSA20_INPUT_LENGTH];
+
+ if (!length)
+ return;
+
+ for (;;)
+ {
+
+ _salsa20_core (x, ctx->input, 12);
+
+ ctx->input[9] += (++ctx->input[8] == 0);
+
+ /* stopping at 2^70 length per nonce is user's responsibility */
+
+ if (length <= SALSA20_BLOCK_SIZE)
+ {
+ memxor3 (c, m, (uint8_t *) x, length);
+ return;
+ }
+ memxor3 (c, m, (uint8_t *) x, SALSA20_BLOCK_SIZE);
+
+ length -= SALSA20_BLOCK_SIZE;
+ c += SALSA20_BLOCK_SIZE;
+ m += SALSA20_BLOCK_SIZE;
+ }
+}