crypto/libecc/include/libecc/hash/belt-hash.h

153

void belt_encrypt(const u8 in[BELT_BLOCK_LEN], u8 out[BELT_BLOCK_LEN], const u8 ks[BELT_KEY_SCHED_LEN]);

crypto/libecc/include/libecc/hash/belt-hash.h

154

void belt_decrypt(const u8 in[BELT_BLOCK_LEN], u8 out[BELT_BLOCK_LEN], const u8 ks[BELT_KEY_SCHED_LEN]);

crypto/libecc/src/hash/belt-hash.c

117

void belt_encrypt(const u8 in[BELT_BLOCK_LEN], u8 out[BELT_BLOCK_LEN], const u8 ks[BELT_KEY_SCHED_LEN])

crypto/libecc/src/hash/belt-hash.c

158

void belt_decrypt(const u8 in[BELT_BLOCK_LEN], u8 out[BELT_BLOCK_LEN], const u8 ks[BELT_KEY_SCHED_LEN])

crypto/libecc/src/hash/belt-hash.c

201

static void sigma1_xor(const u8 x[2 * BELT_BLOCK_LEN], const u8 h[2 * BELT_BLOCK_LEN], u8 s[BELT_BLOCK_LEN], u8 use_xor){

crypto/libecc/src/hash/belt-hash.c

202

u8 tmp1[BELT_BLOCK_LEN];

crypto/libecc/src/hash/belt-hash.c

205

for(i = 0; i < (BELT_BLOCK_LEN / 2); i++){

crypto/libecc/src/hash/belt-hash.c

206

tmp1[i] = (h[i] ^ h[i + BELT_BLOCK_LEN]);

crypto/libecc/src/hash/belt-hash.c

207

tmp1[i + (BELT_BLOCK_LEN / 2)] = (h[i + (BELT_BLOCK_LEN / 2)] ^ h[i + BELT_BLOCK_LEN + (BELT_BLOCK_LEN / 2)]);

crypto/libecc/src/hash/belt-hash.c

211

u8 tmp2[BELT_BLOCK_LEN];

crypto/libecc/src/hash/belt-hash.c

215

for(i = 0; i < (BELT_BLOCK_LEN / 2); i++){

crypto/libecc/src/hash/belt-hash.c

217

s[i + (BELT_BLOCK_LEN / 2)] ^= (tmp1[i + (BELT_BLOCK_LEN / 2)] ^ tmp2[i + (BELT_BLOCK_LEN / 2)]);

crypto/libecc/src/hash/belt-hash.c

222

for(i = 0; i < (BELT_BLOCK_LEN / 2); i++){

crypto/libecc/src/hash/belt-hash.c

224

s[i + (BELT_BLOCK_LEN / 2)] ^= tmp1[i + (BELT_BLOCK_LEN / 2)];

crypto/libecc/src/hash/belt-hash.c

231

static void sigma2(const u8 x[2 * BELT_BLOCK_LEN], u8 const h[2 * BELT_BLOCK_LEN], u8 result[2 * BELT_BLOCK_LEN])

crypto/libecc/src/hash/belt-hash.c

234

u8 tmp[BELT_BLOCK_LEN];

crypto/libecc/src/hash/belt-hash.c

238

IGNORE_RET_VAL(local_memcpy(&tmp[0], &h[0], BELT_BLOCK_LEN));

crypto/libecc/src/hash/belt-hash.c

241

IGNORE_RET_VAL(local_memcpy(&teta[BELT_BLOCK_LEN], &h[BELT_BLOCK_LEN], BELT_BLOCK_LEN));

crypto/libecc/src/hash/belt-hash.c

244

for(i = 0; i < BELT_BLOCK_LEN; i++){

crypto/libecc/src/hash/belt-hash.c

247

teta[i + BELT_BLOCK_LEN] = tmp[i];

crypto/libecc/src/hash/belt-hash.c

250

belt_encrypt(&x[BELT_BLOCK_LEN], &result[BELT_BLOCK_LEN], teta);

crypto/libecc/src/hash/belt-hash.c

252

for(i = 0; i < (BELT_BLOCK_LEN / 2); i++){

crypto/libecc/src/hash/belt-hash.c

253

result[i + BELT_BLOCK_LEN] ^= x[i + BELT_BLOCK_LEN];

crypto/libecc/src/hash/belt-hash.c

254

result[i + BELT_BLOCK_LEN + (BELT_BLOCK_LEN / 2)] ^= x[i + BELT_BLOCK_LEN + (BELT_BLOCK_LEN / 2)];

crypto/libecc/src/hash/belt-hash.c

260

static void _belt_hash_process(const u8 x[2 * BELT_BLOCK_LEN], u8 h[2 * BELT_BLOCK_LEN], u8 s[BELT_BLOCK_LEN])

crypto/libecc/src/hash/belt-hash.c

271

_belt_hash_process(data, ctx->belt_hash_h, &(ctx->belt_hash_state[BELT_BLOCK_LEN]));

crypto/libecc/src/hash/belt-hash.c

276

ATTRIBUTE_WARN_UNUSED_RET static int belt_hash_finalize(const u8 s[2 * BELT_BLOCK_LEN], const u8 h[2 * BELT_BLOCK_LEN], u8 res[2 * BELT_BLOCK_LEN])

crypto/libecc/src/sig/bign_common.c

207

u8 r[((MAX_DIGEST_SIZE / BELT_BLOCK_LEN) * BELT_BLOCK_LEN) + (2 * BELT_BLOCK_LEN)];

crypto/libecc/src/sig/bign_common.c

208

u8 r_bar[((MAX_DIGEST_SIZE / BELT_BLOCK_LEN) * BELT_BLOCK_LEN) + (2 * BELT_BLOCK_LEN)];

crypto/libecc/src/sig/bign_common.c

253

n = (hlen / BELT_BLOCK_LEN);

crypto/libecc/src/sig/bign_common.c

274

u8 s[BELT_BLOCK_LEN];

crypto/libecc/src/sig/bign_common.c

275

u8 i_block[BELT_BLOCK_LEN];

crypto/libecc/src/sig/bign_common.c

280

for(z = 0; z < BELT_BLOCK_LEN; z++){

crypto/libecc/src/sig/bign_common.c

281

s[z] ^= r[(BELT_BLOCK_LEN * j) + z];

crypto/libecc/src/sig/bign_common.c

285

ret = local_memcpy(&r[0], &r[BELT_BLOCK_LEN], (n - 2) * BELT_BLOCK_LEN); EG(ret, err);

crypto/libecc/src/sig/bign_common.c

290

belt_encrypt(s, &r[(n - 2) * BELT_BLOCK_LEN], theta);

crypto/libecc/src/sig/bign_common.c

291

for(z = 0; z < BELT_BLOCK_LEN; z++){

crypto/libecc/src/sig/bign_common.c

292

r[((n - 2) * BELT_BLOCK_LEN) + z] ^= (r[((n - 1) * BELT_BLOCK_LEN) + z] ^ i_block[z]);

crypto/libecc/src/sig/bign_common.c

296

ret = local_memcpy(&r[(n - 1) * BELT_BLOCK_LEN], s, BELT_BLOCK_LEN); EG(ret, err);

crypto/libecc/src/sig/bign_common.c

301

if(q_len < (n * BELT_BLOCK_LEN)){

crypto/libecc/src/sig/bign_common.c

315

MUST_HAVE((n * BELT_BLOCK_LEN) <= 0xffff, ret, err);

crypto/libecc/src/sig/bign_common.c

316

r_bar_len = (u16)(n * BELT_BLOCK_LEN);