sys/crypto/blake2/blake2s.c

76

KKASSERT(outlen > 0 && outlen <= BLAKE2S_HASH_SIZE);

sys/crypto/blake2/blake2s.c

87

KKASSERT(outlen > 0 && outlen <= BLAKE2S_HASH_SIZE);

sys/crypto/blake2/blake2s.h

54

out != NULL && outlen <= BLAKE2S_HASH_SIZE &&

sys/net/wg/wg_noise.c

1393

uint8_t i_hash[BLAKE2S_HASH_SIZE] __aligned(__alignof__(uint32_t));

sys/net/wg/wg_noise.c

1396

KKASSERT(out != NULL && outlen <= BLAKE2S_HASH_SIZE &&

sys/net/wg/wg_noise.c

1401

blake2s_init(&blake, BLAKE2S_HASH_SIZE);

sys/net/wg/wg_noise.c

1411

blake2s_init(&blake, BLAKE2S_HASH_SIZE);

sys/net/wg/wg_noise.c

1419

blake2s_init(&blake, BLAKE2S_HASH_SIZE);

sys/net/wg/wg_noise.c

1421

blake2s_update(&blake, i_hash, BLAKE2S_HASH_SIZE);

sys/net/wg/wg_noise.c

1426

explicit_bzero(i_hash, BLAKE2S_HASH_SIZE);

sys/net/wg/wg_noise.c

1434

uint8_t out[BLAKE2S_HASH_SIZE + 1];

sys/net/wg/wg_noise.c

1435

uint8_t sec[BLAKE2S_HASH_SIZE];

sys/net/wg/wg_noise.c

1438

KKASSERT(a_len <= BLAKE2S_HASH_SIZE &&

sys/net/wg/wg_noise.c

1439

b_len <= BLAKE2S_HASH_SIZE &&

sys/net/wg/wg_noise.c

1440

c_len <= BLAKE2S_HASH_SIZE);

sys/net/wg/wg_noise.c

1443

noise_hmac(sec, x, ck, BLAKE2S_HASH_SIZE /* outlen */,

sys/net/wg/wg_noise.c

1448

noise_hmac(out, out, sec, BLAKE2S_HASH_SIZE /* outlen */,

sys/net/wg/wg_noise.c

1449

1 /* inlen */, BLAKE2S_HASH_SIZE);

sys/net/wg/wg_noise.c

1456

out[BLAKE2S_HASH_SIZE] = 2;

sys/net/wg/wg_noise.c

1457

noise_hmac(out, out, sec, BLAKE2S_HASH_SIZE /* outlen */,

sys/net/wg/wg_noise.c

1458

BLAKE2S_HASH_SIZE + 1 /* inlen */, BLAKE2S_HASH_SIZE);

sys/net/wg/wg_noise.c

1465

out[BLAKE2S_HASH_SIZE] = 3;

sys/net/wg/wg_noise.c

1466

noise_hmac(out, out, sec, BLAKE2S_HASH_SIZE /* outlen */,

sys/net/wg/wg_noise.c

1467

BLAKE2S_HASH_SIZE + 1 /* inlen */, BLAKE2S_HASH_SIZE);

sys/net/wg/wg_noise.h

34

#define NOISE_HASH_LEN BLAKE2S_HASH_SIZE