crypto/openssl/crypto/evp/e_chacha20_poly1305.c

157

unsigned char tag[POLY1305_BLOCK_SIZE];

crypto/openssl/crypto/evp/e_chacha20_poly1305.c

158

unsigned char tls_aad[POLY1305_BLOCK_SIZE];

crypto/openssl/crypto/evp/e_chacha20_poly1305.c

223

if (len != plen + POLY1305_BLOCK_SIZE)

crypto/openssl/crypto/evp/e_chacha20_poly1305.c

228

tohash = buf + CHACHA_BLK_SIZE - POLY1305_BLOCK_SIZE;

crypto/openssl/crypto/evp/e_chacha20_poly1305.c

238

memcpy(tohash, actx->tls_aad, POLY1305_BLOCK_SIZE);

crypto/openssl/crypto/evp/e_chacha20_poly1305.c

239

tohash_len = POLY1305_BLOCK_SIZE;

crypto/openssl/crypto/evp/e_chacha20_poly1305.c

263

memcpy(tohash, actx->tls_aad, POLY1305_BLOCK_SIZE);

crypto/openssl/crypto/evp/e_chacha20_poly1305.c

264

tohash_len = POLY1305_BLOCK_SIZE;

crypto/openssl/crypto/evp/e_chacha20_poly1305.c

283

tail = (0 - i) & (POLY1305_BLOCK_SIZE - 1);

crypto/openssl/crypto/evp/e_chacha20_poly1305.c

296

Poly1305_Update(POLY1305_ctx(actx), actx->tls_aad, POLY1305_BLOCK_SIZE);

crypto/openssl/crypto/evp/e_chacha20_poly1305.c

312

tail = (0 - plen) & (POLY1305_BLOCK_SIZE - 1);

crypto/openssl/crypto/evp/e_chacha20_poly1305.c

320

memcpy(ctr, (unsigned char *)&actx->len, POLY1305_BLOCK_SIZE);

crypto/openssl/crypto/evp/e_chacha20_poly1305.c

340

tohash_len += POLY1305_BLOCK_SIZE;

crypto/openssl/crypto/evp/e_chacha20_poly1305.c

351

memcpy(out, actx->tag, POLY1305_BLOCK_SIZE);

crypto/openssl/crypto/evp/e_chacha20_poly1305.c

353

if (CRYPTO_memcmp(tohash, in, POLY1305_BLOCK_SIZE)) {

crypto/openssl/crypto/evp/e_chacha20_poly1305.c

354

memset(out - (len - POLY1305_BLOCK_SIZE), 0,

crypto/openssl/crypto/evp/e_chacha20_poly1305.c

355

len - POLY1305_BLOCK_SIZE);

crypto/openssl/crypto/evp/e_chacha20_poly1305.c

401

if ((rem = (size_t)actx->len.aad % POLY1305_BLOCK_SIZE))

crypto/openssl/crypto/evp/e_chacha20_poly1305.c

403

POLY1305_BLOCK_SIZE - rem);

crypto/openssl/crypto/evp/e_chacha20_poly1305.c

410

else if (len != plen + POLY1305_BLOCK_SIZE)

crypto/openssl/crypto/evp/e_chacha20_poly1305.c

431

unsigned char temp[POLY1305_BLOCK_SIZE];

crypto/openssl/crypto/evp/e_chacha20_poly1305.c

434

if ((rem = (size_t)actx->len.aad % POLY1305_BLOCK_SIZE))

crypto/openssl/crypto/evp/e_chacha20_poly1305.c

436

POLY1305_BLOCK_SIZE - rem);

crypto/openssl/crypto/evp/e_chacha20_poly1305.c

440

if ((rem = (size_t)actx->len.text % POLY1305_BLOCK_SIZE))

crypto/openssl/crypto/evp/e_chacha20_poly1305.c

442

POLY1305_BLOCK_SIZE - rem);

crypto/openssl/crypto/evp/e_chacha20_poly1305.c

446

(unsigned char *)&actx->len, POLY1305_BLOCK_SIZE);

crypto/openssl/crypto/evp/e_chacha20_poly1305.c

466

Poly1305_Update(POLY1305_ctx(actx), temp, POLY1305_BLOCK_SIZE);

crypto/openssl/crypto/evp/e_chacha20_poly1305.c

474

memcpy(out, actx->tag, POLY1305_BLOCK_SIZE);

crypto/openssl/crypto/evp/e_chacha20_poly1305.c

476

if (CRYPTO_memcmp(temp, in, POLY1305_BLOCK_SIZE)) {

crypto/openssl/crypto/evp/e_chacha20_poly1305.c

518

memset(actx->tls_aad, 0, POLY1305_BLOCK_SIZE);

crypto/openssl/crypto/evp/e_chacha20_poly1305.c

555

if (arg <= 0 || arg > POLY1305_BLOCK_SIZE)

crypto/openssl/crypto/evp/e_chacha20_poly1305.c

564

if (arg <= 0 || arg > POLY1305_BLOCK_SIZE || !EVP_CIPHER_CTX_is_encrypting(ctx))

crypto/openssl/crypto/evp/e_chacha20_poly1305.c

580

if (len < POLY1305_BLOCK_SIZE)

crypto/openssl/crypto/evp/e_chacha20_poly1305.c

582

len -= POLY1305_BLOCK_SIZE; /* discount attached tag */

crypto/openssl/crypto/evp/e_chacha20_poly1305.c

596

return POLY1305_BLOCK_SIZE; /* tag length */

crypto/openssl/crypto/poly1305/poly1305.c

154

while (len >= POLY1305_BLOCK_SIZE) {

crypto/openssl/crypto/poly1305/poly1305.c

190

inp += POLY1305_BLOCK_SIZE;

crypto/openssl/crypto/poly1305/poly1305.c

191

len -= POLY1305_BLOCK_SIZE;

crypto/openssl/crypto/poly1305/poly1305.c

299

while (len >= POLY1305_BLOCK_SIZE) {

crypto/openssl/crypto/poly1305/poly1305.c

339

inp += POLY1305_BLOCK_SIZE;

crypto/openssl/crypto/poly1305/poly1305.c

340

len -= POLY1305_BLOCK_SIZE;

crypto/openssl/crypto/poly1305/poly1305.c

452

rem = POLY1305_BLOCK_SIZE - num;

crypto/openssl/crypto/poly1305/poly1305.c

455

poly1305_blocks(ctx->opaque, ctx->data, POLY1305_BLOCK_SIZE, 1);

crypto/openssl/crypto/poly1305/poly1305.c

466

rem = len % POLY1305_BLOCK_SIZE;

crypto/openssl/crypto/poly1305/poly1305.c

469

if (len >= POLY1305_BLOCK_SIZE) {

crypto/openssl/crypto/poly1305/poly1305.c

490

while (num < POLY1305_BLOCK_SIZE)

crypto/openssl/crypto/poly1305/poly1305.c

492

poly1305_blocks(ctx->opaque, ctx->data, POLY1305_BLOCK_SIZE, 0);

crypto/openssl/crypto/poly1305/poly1305_base2_44.c

119

inp += POLY1305_BLOCK_SIZE;

crypto/openssl/crypto/poly1305/poly1305_base2_44.c

120

len -= POLY1305_BLOCK_SIZE;

crypto/openssl/crypto/poly1305/poly1305_base2_44.c

95

while (len >= POLY1305_BLOCK_SIZE) {

crypto/openssl/include/crypto/poly1305.h

33

unsigned char data[POLY1305_BLOCK_SIZE];

crypto/openssl/providers/implementations/ciphers/cipher_chacha20_poly1305.c

137

if (p->data_size == 0 || p->data_size > POLY1305_BLOCK_SIZE) {

crypto/openssl/providers/implementations/ciphers/cipher_chacha20_poly1305.c

214

if (p->data_size == 0 || p->data_size > POLY1305_BLOCK_SIZE) {

crypto/openssl/providers/implementations/ciphers/cipher_chacha20_poly1305.h

23

unsigned char tag[POLY1305_BLOCK_SIZE];

crypto/openssl/providers/implementations/ciphers/cipher_chacha20_poly1305.h

24

unsigned char tls_aad[POLY1305_BLOCK_SIZE];

crypto/openssl/providers/implementations/ciphers/cipher_chacha20_poly1305_hw.c

130

tohash = buf + CHACHA_BLK_SIZE - POLY1305_BLOCK_SIZE;

crypto/openssl/providers/implementations/ciphers/cipher_chacha20_poly1305_hw.c

139

memcpy(tohash, ctx->tls_aad, POLY1305_BLOCK_SIZE);

crypto/openssl/providers/implementations/ciphers/cipher_chacha20_poly1305_hw.c

140

tohash_len = POLY1305_BLOCK_SIZE;

crypto/openssl/providers/implementations/ciphers/cipher_chacha20_poly1305_hw.c

164

memcpy(tohash, ctx->tls_aad, POLY1305_BLOCK_SIZE);

crypto/openssl/providers/implementations/ciphers/cipher_chacha20_poly1305_hw.c

165

tohash_len = POLY1305_BLOCK_SIZE;

crypto/openssl/providers/implementations/ciphers/cipher_chacha20_poly1305_hw.c

184

tail = (0 - i) & (POLY1305_BLOCK_SIZE - 1);

crypto/openssl/providers/implementations/ciphers/cipher_chacha20_poly1305_hw.c

197

Poly1305_Update(poly, ctx->tls_aad, POLY1305_BLOCK_SIZE);

crypto/openssl/providers/implementations/ciphers/cipher_chacha20_poly1305_hw.c

213

tail = (0 - plen) & (POLY1305_BLOCK_SIZE - 1);

crypto/openssl/providers/implementations/ciphers/cipher_chacha20_poly1305_hw.c

218

memcpy(ctr, (unsigned char *)&ctx->len, POLY1305_BLOCK_SIZE);

crypto/openssl/providers/implementations/ciphers/cipher_chacha20_poly1305_hw.c

238

tohash_len += POLY1305_BLOCK_SIZE;

crypto/openssl/providers/implementations/ciphers/cipher_chacha20_poly1305_hw.c

247

memcpy(out, ctx->tag, POLY1305_BLOCK_SIZE);

crypto/openssl/providers/implementations/ciphers/cipher_chacha20_poly1305_hw.c

249

if (CRYPTO_memcmp(tohash, in, POLY1305_BLOCK_SIZE)) {

crypto/openssl/providers/implementations/ciphers/cipher_chacha20_poly1305_hw.c

250

if (len > POLY1305_BLOCK_SIZE)

crypto/openssl/providers/implementations/ciphers/cipher_chacha20_poly1305_hw.c

251

memset(out - (len - POLY1305_BLOCK_SIZE), 0,

crypto/openssl/providers/implementations/ciphers/cipher_chacha20_poly1305_hw.c

252

len - POLY1305_BLOCK_SIZE);

crypto/openssl/providers/implementations/ciphers/cipher_chacha20_poly1305_hw.c

256

len -= POLY1305_BLOCK_SIZE;

crypto/openssl/providers/implementations/ciphers/cipher_chacha20_poly1305_hw.c

28

if (len < POLY1305_BLOCK_SIZE)

crypto/openssl/providers/implementations/ciphers/cipher_chacha20_poly1305_hw.c

280

if (inl != plen + POLY1305_BLOCK_SIZE)

crypto/openssl/providers/implementations/ciphers/cipher_chacha20_poly1305_hw.c

30

len -= POLY1305_BLOCK_SIZE; /* discount attached tag */

crypto/openssl/providers/implementations/ciphers/cipher_chacha20_poly1305_hw.c

310

if ((rem = (size_t)ctx->len.aad % POLY1305_BLOCK_SIZE))

crypto/openssl/providers/implementations/ciphers/cipher_chacha20_poly1305_hw.c

311

Poly1305_Update(poly, zero, POLY1305_BLOCK_SIZE - rem);

crypto/openssl/providers/implementations/ciphers/cipher_chacha20_poly1305_hw.c

318

else if (inl != plen + POLY1305_BLOCK_SIZE)

crypto/openssl/providers/implementations/ciphers/cipher_chacha20_poly1305_hw.c

339

unsigned char temp[POLY1305_BLOCK_SIZE];

crypto/openssl/providers/implementations/ciphers/cipher_chacha20_poly1305_hw.c

342

if ((rem = (size_t)ctx->len.aad % POLY1305_BLOCK_SIZE))

crypto/openssl/providers/implementations/ciphers/cipher_chacha20_poly1305_hw.c

343

Poly1305_Update(poly, zero, POLY1305_BLOCK_SIZE - rem);

crypto/openssl/providers/implementations/ciphers/cipher_chacha20_poly1305_hw.c

347

if ((rem = (size_t)ctx->len.text % POLY1305_BLOCK_SIZE))

crypto/openssl/providers/implementations/ciphers/cipher_chacha20_poly1305_hw.c

348

Poly1305_Update(poly, zero, POLY1305_BLOCK_SIZE - rem);

crypto/openssl/providers/implementations/ciphers/cipher_chacha20_poly1305_hw.c

352

POLY1305_BLOCK_SIZE);

crypto/openssl/providers/implementations/ciphers/cipher_chacha20_poly1305_hw.c

370

Poly1305_Update(poly, temp, POLY1305_BLOCK_SIZE);

crypto/openssl/providers/implementations/ciphers/cipher_chacha20_poly1305_hw.c

377

memcpy(out, ctx->tag, POLY1305_BLOCK_SIZE);

crypto/openssl/providers/implementations/ciphers/cipher_chacha20_poly1305_hw.c

379

if (CRYPTO_memcmp(temp, in, POLY1305_BLOCK_SIZE)) {

crypto/openssl/providers/implementations/ciphers/cipher_chacha20_poly1305_hw.c

384

inl -= POLY1305_BLOCK_SIZE;

crypto/openssl/providers/implementations/ciphers/cipher_chacha20_poly1305_hw.c

42

return POLY1305_BLOCK_SIZE; /* tag length */

sys/crypto/openssl/ossl_poly1305.c

108

rem = len % POLY1305_BLOCK_SIZE;

sys/crypto/openssl/ossl_poly1305.c

111

if (len >= POLY1305_BLOCK_SIZE) {

sys/crypto/openssl/ossl_poly1305.c

132

while (num < POLY1305_BLOCK_SIZE)

sys/crypto/openssl/ossl_poly1305.c

134

poly1305_blocks(ctx->opaque, ctx->data, POLY1305_BLOCK_SIZE, 0);

sys/crypto/openssl/ossl_poly1305.c

173

.blocksize = POLY1305_BLOCK_SIZE,

sys/crypto/openssl/ossl_poly1305.c

94

rem = POLY1305_BLOCK_SIZE - num;

sys/crypto/openssl/ossl_poly1305.c

97

poly1305_blocks(ctx->opaque, ctx->data, POLY1305_BLOCK_SIZE, 1);

sys/crypto/openssl/ossl_poly1305.h

29

unsigned char data[POLY1305_BLOCK_SIZE];