1/* SPDX-License-Identifier: GPL-2.0 */
2/*
3 * Common values for the Poly1305 algorithm
4 */
5
6#ifndef _CRYPTO_INTERNAL_POLY1305_H
7#define _CRYPTO_INTERNAL_POLY1305_H
8
9#include <crypto/poly1305.h>
10#include <linux/types.h>
11
12/*
13 * Poly1305 core functions. These only accept whole blocks; the caller must
14 * handle any needed block buffering and padding. 'hibit' must be 1 for any
15 * full blocks, or 0 for the final block if it had to be padded. If 'nonce' is
16 * non-NULL, then it's added at the end to compute the Poly1305 MAC. Otherwise,
17 * only the ε-almost-∆-universal hash function (not the full MAC) is computed.
18 */
19
20void poly1305_core_setkey(struct poly1305_core_key *key,
21 const u8 raw_key[POLY1305_BLOCK_SIZE]);
22static inline void poly1305_core_init(struct poly1305_state *state)
23{
24 *state = (struct poly1305_state){};
25}
26
27void poly1305_core_blocks(struct poly1305_state *state,
28 const struct poly1305_core_key *key, const void *src,
29 unsigned int nblocks, u32 hibit);
30void poly1305_core_emit(const struct poly1305_state *state, const u32 nonce[4],
31 void *dst);
32
33static inline void
34poly1305_block_init_generic(struct poly1305_block_state *desc,
35 const u8 raw_key[POLY1305_BLOCK_SIZE])
36{
37 poly1305_core_init(state: &desc->h);
38 poly1305_core_setkey(key: &desc->core_r, raw_key);
39}
40
41static inline void poly1305_blocks_generic(struct poly1305_block_state *state,
42 const u8 *src, unsigned int len,
43 u32 padbit)
44{
45 poly1305_core_blocks(state: &state->h, key: &state->core_r, src,
46 nblocks: len / POLY1305_BLOCK_SIZE, hibit: padbit);
47}
48
49static inline void poly1305_emit_generic(const struct poly1305_state *state,
50 u8 digest[POLY1305_DIGEST_SIZE],
51 const u32 nonce[4])
52{
53 poly1305_core_emit(state, nonce, dst: digest);
54}
55
56#endif
57

source code of linux/include/crypto/internal/poly1305.h