diff options
Diffstat (limited to 'security/nss/lib/freebl/intel-gcm.h')
| -rw-r--r-- | security/nss/lib/freebl/intel-gcm.h | 83 |
1 files changed, 83 insertions, 0 deletions
diff --git a/security/nss/lib/freebl/intel-gcm.h b/security/nss/lib/freebl/intel-gcm.h new file mode 100644 index 000000000..566e544d8 --- /dev/null +++ b/security/nss/lib/freebl/intel-gcm.h @@ -0,0 +1,83 @@ +/******************************************************************************/ +/* LICENSE: */ +/* This submission to NSS is to be made available under the terms of the */ +/* Mozilla Public License, v. 2.0. You can obtain one at http: */ +/* //mozilla.org/MPL/2.0/. */ +/******************************************************************************/ +/* Copyright(c) 2013, Intel Corp. */ +/******************************************************************************/ +/* Reference: */ +/* [1] Shay Gueron, Michael E. Kounavis: Intel(R) Carry-Less Multiplication */ +/* Instruction and its Usage for Computing the GCM Mode (Rev. 2.01) */ +/* http://software.intel.com/sites/default/files/article/165685/clmul-wp-r*/ +/*ev-2.01-2012-09-21.pdf */ +/* [2] S. Gueron, M. E. Kounavis: Efficient Implementation of the Galois */ +/* Counter Mode Using a Carry-less Multiplier and a Fast Reduction */ +/* Algorithm. Information Processing Letters 110: 549-553 (2010). */ +/* [3] S. Gueron: AES Performance on the 2nd Generation Intel(R) Core(TM) */ +/* Processor Family (to be posted) (2012). */ +/* [4] S. Gueron: Fast GHASH computations for speeding up AES-GCM (to be */ +/* published) (2012). */ + +#ifndef INTEL_GCM_H +#define INTEL_GCM_H 1 + +#include "blapii.h" + +typedef struct intel_AES_GCMContextStr intel_AES_GCMContext; + +intel_AES_GCMContext *intel_AES_GCM_CreateContext(void *context, freeblCipherFunc cipher, + const unsigned char *params, unsigned int blocksize); + +void intel_AES_GCM_DestroyContext(intel_AES_GCMContext *gcm, PRBool freeit); + +SECStatus intel_AES_GCM_EncryptUpdate(intel_AES_GCMContext *gcm, unsigned char *outbuf, + unsigned int *outlen, unsigned int maxout, + const unsigned char *inbuf, unsigned int inlen, + unsigned int blocksize); + +SECStatus intel_AES_GCM_DecryptUpdate(intel_AES_GCMContext *gcm, unsigned char *outbuf, + unsigned int *outlen, unsigned int maxout, + const unsigned char *inbuf, unsigned int inlen, + unsigned int blocksize); + +/* Prototypes of functions in the assembler file for fast AES-GCM, using + Intel AES-NI and CLMUL-NI, as described in [1] + [1] Shay Gueron, Michael E. Kounavis: Intel(R) Carry-Less Multiplication + Instruction and its Usage for Computing the GCM Mode */ + +/* Prepares the constants used in the aggregated reduction method */ +void intel_aes_gcmINIT(unsigned char Htbl[16 * 16], + unsigned char *KS, + int NR); + +/* Produces the final GHASH value */ +void intel_aes_gcmTAG(unsigned char Htbl[16 * 16], + unsigned char *Tp, + unsigned long Mlen, + unsigned long Alen, + unsigned char *X0, + unsigned char *TAG); + +/* Hashes the Additional Authenticated Data, should be used before enc/dec. + Operates on whole blocks only. Partial blocks should be padded externally. */ +void intel_aes_gcmAAD(unsigned char Htbl[16 * 16], + unsigned char *AAD, + unsigned long Alen, + unsigned char *Tp); + +/* Encrypts and hashes the Plaintext. + Operates on any length of data, however partial block should only be encrypted + at the last call, otherwise the result will be incorrect. */ +void intel_aes_gcmENC(const unsigned char *PT, + unsigned char *CT, + void *Gctx, + unsigned long len); + +/* Similar to ENC, but decrypts the Ciphertext. */ +void intel_aes_gcmDEC(const unsigned char *CT, + unsigned char *PT, + void *Gctx, + unsigned long len); + +#endif |