/*      $OpenBSD: xform.h,v 1.8 2001/08/28 12:20:43 ben Exp $   */

/*-
 * The author of this code is Angelos D. Keromytis (angelos@cis.upenn.edu)
 *
 * This code was written by Angelos D. Keromytis in Athens, Greece, in
 * February 2000. Network Security Technologies Inc. (NSTI) kindly
 * supported the development of this code.
 *
 * Copyright (c) 2000 Angelos D. Keromytis
 * Copyright (c) 2014 The FreeBSD Foundation
 * All rights reserved.
 *
 * Portions of this software were developed by John-Mark Gurney
 * under sponsorship of the FreeBSD Foundation and
 * Rubicon Communications, LLC (Netgate).
 *
 * Permission to use, copy, and modify this software without fee
 * is hereby granted, provided that this entire notice is included in
 * all source code copies of any software which is or includes a copy or
 * modification of this software. 
 *
 * THIS SOFTWARE IS BEING PROVIDED "AS IS", WITHOUT ANY EXPRESS OR
 * IMPLIED WARRANTY. IN PARTICULAR, NONE OF THE AUTHORS MAKES ANY
 * REPRESENTATION OR WARRANTY OF ANY KIND CONCERNING THE
 * MERCHANTABILITY OF THIS SOFTWARE OR ITS FITNESS FOR ANY PARTICULAR
 * PURPOSE.
 */

#ifndef _CRYPTO_XFORM_ENC_H_
#define _CRYPTO_XFORM_ENC_H_

#include <sys/types.h>

#include <crypto/rijndael/rijndael.h>
#include <crypto/camellia/camellia.h>
#include <opencrypto/cryptodev.h>
#ifdef _STANDALONE
#include <stand.h>
#endif

#define AESICM_BLOCKSIZE        AES_BLOCK_LEN
#define AES_XTS_BLOCKSIZE       16
#define AES_XTS_IVSIZE          8
#define AES_XTS_ALPHA           0x87    /* GF(2^128) generator polynomial */

/* Declarations */
struct enc_xform {
        int type;
        const char *name;
        size_t ctxsize;
        uint16_t blocksize;     /* Required input block size -- 1 for stream ciphers. */
        uint16_t native_blocksize;      /* Used for stream ciphers. */
        uint16_t ivsize;
        uint16_t minkey, maxkey;
        uint16_t macsize;               /* For AEAD ciphers. */

        /* Initialize context and set key. */
        int (*setkey) (void *, const uint8_t *, int len);

        /* Supply context with nonce/IV. */
        void (*reinit) (void *, const uint8_t *, size_t);

        /*
         * Encrypt/decrypt a single block.  For stream ciphers this
         * encrypts/decrypts a single "native" block.
         */
        void (*encrypt) (void *, const uint8_t *, uint8_t *);
        void (*decrypt) (void *, const uint8_t *, uint8_t *);

        /*
         * Encrypt/decrypt multiple blocks.  For stream ciphers this
         * encrypts/decrypts multiple "native" blocks.  The fourth
         * argument is a count of bytes.
         */
        void (*encrypt_multi) (void *, const uint8_t *, uint8_t *, size_t);
        void (*decrypt_multi) (void *, const uint8_t *, uint8_t *, size_t);

        /*
         * For stream ciphers, encrypt/decrypt the final partial block
         * of 'len' bytes.
         */
        void (*encrypt_last) (void *, const uint8_t *, uint8_t *, size_t len);
        void (*decrypt_last) (void *, const uint8_t *, uint8_t *, size_t len);

        /*
         * For AEAD ciphers, update and generate MAC/tag.
         */
        int  (*update) (void *, const void *, u_int);
        void (*final) (uint8_t *, void *);
};


extern const struct enc_xform enc_xform_null;
extern const struct enc_xform enc_xform_aes_cbc;
extern const struct enc_xform enc_xform_aes_icm;
extern const struct enc_xform enc_xform_aes_nist_gcm;
extern const struct enc_xform enc_xform_aes_nist_gmac;
extern const struct enc_xform enc_xform_aes_xts;
extern const struct enc_xform enc_xform_camellia;
extern const struct enc_xform enc_xform_chacha20;
extern const struct enc_xform enc_xform_chacha20_poly1305;
extern const struct enc_xform enc_xform_xchacha20_poly1305;
extern const struct enc_xform enc_xform_ccm;

struct aes_icm_ctx {
        uint32_t        ac_ek[4*(RIJNDAEL_MAXNR + 1)];
        /* ac_block is initialized to IV */
        uint8_t         ac_block[AESICM_BLOCKSIZE];
        int             ac_nr;
};

struct aes_xts_ctx {
        rijndael_ctx key1;
        rijndael_ctx key2;
        uint8_t tweak[AES_XTS_BLOCKSIZE];
};

#endif /* _CRYPTO_XFORM_ENC_H_ */