1 | /* SPDX-License-Identifier: GPL-2.0 */ |
2 | /* |
3 | * Common values for the Poly1305 algorithm |
4 | */ |
5 | |
6 | #ifndef _CRYPTO_INTERNAL_POLY1305_H |
7 | #define _CRYPTO_INTERNAL_POLY1305_H |
8 | |
9 | #include <asm/unaligned.h> |
10 | #include <linux/types.h> |
11 | #include <crypto/poly1305.h> |
12 | |
13 | /* |
14 | * Poly1305 core functions. These only accept whole blocks; the caller must |
15 | * handle any needed block buffering and padding. 'hibit' must be 1 for any |
16 | * full blocks, or 0 for the final block if it had to be padded. If 'nonce' is |
17 | * non-NULL, then it's added at the end to compute the Poly1305 MAC. Otherwise, |
18 | * only the ε-almost-∆-universal hash function (not the full MAC) is computed. |
19 | */ |
20 | |
21 | void poly1305_core_setkey(struct poly1305_core_key *key, |
22 | const u8 raw_key[POLY1305_BLOCK_SIZE]); |
23 | static inline void poly1305_core_init(struct poly1305_state *state) |
24 | { |
25 | *state = (struct poly1305_state){}; |
26 | } |
27 | |
28 | void poly1305_core_blocks(struct poly1305_state *state, |
29 | const struct poly1305_core_key *key, const void *src, |
30 | unsigned int nblocks, u32 hibit); |
31 | void poly1305_core_emit(const struct poly1305_state *state, const u32 nonce[4], |
32 | void *dst); |
33 | |
34 | #endif |
35 | |