sys/dev/wg/wg_noise.c

1200

uint8_t i_hash[BLAKE2S_HASH_SIZE] __aligned(sizeof(uint32_t));

sys/dev/wg/wg_noise.c

1204

blake2s_init(&state, BLAKE2S_HASH_SIZE);

sys/dev/wg/wg_noise.c

1213

blake2s_init(&state, BLAKE2S_HASH_SIZE);

sys/dev/wg/wg_noise.c

1221

blake2s_init(&state, BLAKE2S_HASH_SIZE);

sys/dev/wg/wg_noise.c

1223

blake2s_update(&state, i_hash, BLAKE2S_HASH_SIZE);

sys/dev/wg/wg_noise.c

1228

explicit_bzero(i_hash, BLAKE2S_HASH_SIZE);

sys/dev/wg/wg_noise.c

1237

uint8_t out[BLAKE2S_HASH_SIZE + 1];

sys/dev/wg/wg_noise.c

1238

uint8_t sec[BLAKE2S_HASH_SIZE];

sys/dev/wg/wg_noise.c

1241

hmac(sec, x, ck, BLAKE2S_HASH_SIZE, x_len, NOISE_HASH_LEN);

sys/dev/wg/wg_noise.c

1248

hmac(out, out, sec, BLAKE2S_HASH_SIZE, 1, BLAKE2S_HASH_SIZE);

sys/dev/wg/wg_noise.c

1255

out[BLAKE2S_HASH_SIZE] = 2;

sys/dev/wg/wg_noise.c

1256

hmac(out, out, sec, BLAKE2S_HASH_SIZE, BLAKE2S_HASH_SIZE + 1, BLAKE2S_HASH_SIZE);

sys/dev/wg/wg_noise.c

1263

out[BLAKE2S_HASH_SIZE] = 3;

sys/dev/wg/wg_noise.c

1264

hmac(out, out, sec, BLAKE2S_HASH_SIZE, BLAKE2S_HASH_SIZE + 1, BLAKE2S_HASH_SIZE);

sys/dev/wg/wg_noise.c

1269

explicit_bzero(sec, BLAKE2S_HASH_SIZE);

sys/dev/wg/wg_noise.c

1270

explicit_bzero(out, BLAKE2S_HASH_SIZE + 1);

sys/dev/wg/wg_noise.h

16

#define NOISE_HASH_LEN BLAKE2S_HASH_SIZE