forked from h2o/picotls
-
Notifications
You must be signed in to change notification settings - Fork 0
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Merge pull request h2o#310 from h2o/kazuho/fusion
"fusion" AES-GCM engine
- Loading branch information
Showing
13 changed files
with
1,645 additions
and
83 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,99 @@ | ||
| /* | ||
| * Copyright (c) 2020 Fastly, Kazuho Oku | ||
| * | ||
| * Permission is hereby granted, free of charge, to any person obtaining a copy | ||
| * of this software and associated documentation files (the "Software"), to | ||
| * deal in the Software without restriction, including without limitation the | ||
| * rights to use, copy, modify, merge, publish, distribute, sublicense, and/or | ||
| * sell copies of the Software, and to permit persons to whom the Software is | ||
| * furnished to do so, subject to the following conditions: | ||
| * | ||
| * The above copyright notice and this permission notice shall be included in | ||
| * all copies or substantial portions of the Software. | ||
| * | ||
| * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR | ||
| * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, | ||
| * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE | ||
| * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER | ||
| * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING | ||
| * FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS | ||
| * IN THE SOFTWARE. | ||
| */ | ||
| #ifndef picotls_fusion_h | ||
| #define picotls_fusion_h | ||
|
|
||
| #ifdef __cplusplus | ||
| extern "C" { | ||
| #endif | ||
|
|
||
| #include <stddef.h> | ||
| #include <emmintrin.h> | ||
| #include "../picotls.h" | ||
|
|
||
| #define PTLS_FUSION_AES128_ROUNDS 10 | ||
| #define PTLS_FUSION_AES256_ROUNDS 14 | ||
|
|
||
| typedef struct ptls_fusion_aesecb_context { | ||
| __m128i keys[PTLS_FUSION_AES256_ROUNDS + 1]; | ||
| unsigned rounds; | ||
| } ptls_fusion_aesecb_context_t; | ||
|
|
||
| typedef struct ptls_fusion_aesgcm_context ptls_fusion_aesgcm_context_t; | ||
|
|
||
| void ptls_fusion_aesecb_init(ptls_fusion_aesecb_context_t *ctx, int is_enc, const void *key, size_t key_size); | ||
| void ptls_fusion_aesecb_dispose(ptls_fusion_aesecb_context_t *ctx); | ||
| void ptls_fusion_aesecb_encrypt(ptls_fusion_aesecb_context_t *ctx, void *dst, const void *src); | ||
|
|
||
| /** | ||
| * Creates an AES-GCM context. | ||
| * @param key the AES key (128 bits) | ||
| * @param capacity maximum size of AEAD record (i.e. AAD + encrypted payload) | ||
| */ | ||
| ptls_fusion_aesgcm_context_t *ptls_fusion_aesgcm_new(const void *key, size_t key_size, size_t capacity); | ||
| /** | ||
| * Updates the capacity. | ||
| */ | ||
| ptls_fusion_aesgcm_context_t *ptls_fusion_aesgcm_set_capacity(ptls_fusion_aesgcm_context_t *ctx, size_t capacity); | ||
| /** | ||
| * Destroys an AES-GCM context. | ||
| */ | ||
| void ptls_fusion_aesgcm_free(ptls_fusion_aesgcm_context_t *ctx); | ||
| /** | ||
| * Encrypts an AEAD block, and in parallel, optionally encrypts one block using AES-ECB. | ||
| * @param ctx context | ||
| * @param output output buffer | ||
| * @param input payload to be encrypted | ||
| * @param inlen size of the payload to be encrypted | ||
| * @param counter | ||
| * @param aad AAD | ||
| * @param aadlen size of AAD | ||
| * @param supp (optional) supplementary encryption context | ||
| */ | ||
| void ptls_fusion_aesgcm_encrypt(ptls_fusion_aesgcm_context_t *ctx, void *output, const void *input, size_t inlen, __m128i ctr, | ||
| const void *aad, size_t aadlen, ptls_aead_supplementary_encryption_t *supp); | ||
| /** | ||
| * Decrypts an AEAD block, an in parallel, optionally encrypts one block using AES-ECB. Returns if decryption was successful. | ||
| * @param iv initialization vector of 12 bytes | ||
| * @param output output buffer | ||
| * @param input payload to be decrypted | ||
| * @param inlen size of the payload to be decrypted | ||
| * @param aad AAD | ||
| * @param aadlen size of AAD | ||
| * @param tag the AEAD tag being received from peer | ||
| */ | ||
| int ptls_fusion_aesgcm_decrypt(ptls_fusion_aesgcm_context_t *ctx, void *output, const void *input, size_t inlen, __m128i ctr, | ||
| const void *aad, size_t aadlen, const void *tag); | ||
|
|
||
| extern ptls_cipher_algorithm_t ptls_fusion_aes128ctr, ptls_fusion_aes256ctr; | ||
| extern ptls_aead_algorithm_t ptls_fusion_aes128gcm, ptls_fusion_aes256gcm; | ||
|
|
||
| /** | ||
| * Returns a boolean indicating if fusion can be used. | ||
| */ | ||
| int ptls_fusion_is_supported_by_cpu(void); | ||
|
|
||
| #ifdef __cplusplus | ||
| } | ||
| #endif | ||
|
|
||
| #endif |
Oops, something went wrong.