crypto/chacha20poly1305.c

291

rctx->cryptlen = req->cryptlen - POLY1305_DIGEST_SIZE;

crypto/chacha20poly1305.c

323

if (authsize != POLY1305_DIGEST_SIZE)

crypto/chacha20poly1305.c

434

inst->alg.maxauthsize = POLY1305_DIGEST_SIZE;

crypto/chacha20poly1305.c

44

u8 tag[POLY1305_DIGEST_SIZE];

drivers/crypto/caam/caamalg.c

3640

.maxauthsize = POLY1305_DIGEST_SIZE,

drivers/crypto/caam/caamalg.c

3666

.maxauthsize = POLY1305_DIGEST_SIZE,

drivers/crypto/caam/caamalg.c

567

if (authsize != POLY1305_DIGEST_SIZE)

drivers/crypto/caam/caamalg_qi2.c

2928

.maxauthsize = POLY1305_DIGEST_SIZE,

drivers/crypto/caam/caamalg_qi2.c

2951

.maxauthsize = POLY1305_DIGEST_SIZE,

drivers/crypto/caam/caamalg_qi2.c

629

if (authsize != POLY1305_DIGEST_SIZE)

drivers/crypto/inside-secure/safexcel_cipher.c

2963

if (authsize != POLY1305_DIGEST_SIZE)

drivers/crypto/inside-secure/safexcel_cipher.c

2986

req->cryptlen > POLY1305_DIGEST_SIZE)) {

drivers/crypto/inside-secure/safexcel_cipher.c

3084

.maxauthsize = POLY1305_DIGEST_SIZE,

drivers/crypto/inside-secure/safexcel_cipher.c

3124

.maxauthsize = POLY1305_DIGEST_SIZE,

include/crypto/internal/poly1305.h

50

u8 digest[POLY1305_DIGEST_SIZE],

lib/crypto/arm/poly1305.h

21

u8 digest[POLY1305_DIGEST_SIZE],

lib/crypto/arm64/poly1305.h

21

u8 digest[POLY1305_DIGEST_SIZE],

lib/crypto/chacha20poly1305.c

136

u8 mac[POLY1305_DIGEST_SIZE];

lib/crypto/chacha20poly1305.c

140

if (unlikely(src_len < POLY1305_DIGEST_SIZE))

lib/crypto/chacha20poly1305.c

150

dst_len = src_len - POLY1305_DIGEST_SIZE;

lib/crypto/chacha20poly1305.c

161

ret = crypto_memneq(b.mac, src + dst_len, POLY1305_DIGEST_SIZE);

lib/crypto/chacha20poly1305.c

233

u8 mac[2][POLY1305_DIGEST_SIZE];

lib/crypto/chacha20poly1305.c

306

if (likely(sl <= -POLY1305_DIGEST_SIZE)) {

lib/crypto/chacha20poly1305.c

315

POLY1305_DIGEST_SIZE);

lib/crypto/chacha20poly1305.c

321

if (unlikely(sl > -POLY1305_DIGEST_SIZE)) {

lib/crypto/chacha20poly1305.c

326

!crypto_memneq(b.mac[0], b.mac[1], POLY1305_DIGEST_SIZE);

lib/crypto/chacha20poly1305.c

350

if (unlikely(src_len < POLY1305_DIGEST_SIZE))

lib/crypto/chacha20poly1305.c

354

src_len - POLY1305_DIGEST_SIZE,

lib/crypto/mips/poly1305.h

13

u8 digest[POLY1305_DIGEST_SIZE],

lib/crypto/powerpc/poly1305.h

15

asmlinkage void poly1305_emit_64(const struct poly1305_state *state, const u32 nonce[4], u8 digest[POLY1305_DIGEST_SIZE]);

lib/crypto/powerpc/poly1305.h

62

u8 digest[POLY1305_DIGEST_SIZE], const u32 nonce[4])

lib/crypto/riscv/poly1305.h

13

u8 digest[POLY1305_DIGEST_SIZE],

lib/crypto/tests/chacha20poly1305_kunit.c

8914

POLY1305_DIGEST_SIZE) == 0,

lib/crypto/tests/chacha20poly1305_kunit.c

8924

chacha20poly1305_enc_vectors[i].ilen + POLY1305_DIGEST_SIZE);

lib/crypto/tests/chacha20poly1305_kunit.c

8936

POLY1305_DIGEST_SIZE) == 0,

lib/crypto/tests/chacha20poly1305_kunit.c

8956

POLY1305_DIGEST_SIZE)),

lib/crypto/tests/chacha20poly1305_kunit.c

8978

POLY1305_DIGEST_SIZE)),

lib/crypto/tests/chacha20poly1305_kunit.c

8996

POLY1305_DIGEST_SIZE) == 0,

lib/crypto/tests/chacha20poly1305_kunit.c

9016

POLY1305_DIGEST_SIZE)),

lib/crypto/tests/chacha20poly1305_kunit.c

9020

for (total_len = POLY1305_DIGEST_SIZE; IS_ENABLED(DEBUG_CHACHA20POLY1305_SLOW_CHUNK_TEST)

lib/crypto/tests/chacha20poly1305_kunit.c

9037

total_len - POLY1305_DIGEST_SIZE, NULL, 0,

lib/crypto/tests/chacha20poly1305_kunit.c

9042

total_len - POLY1305_DIGEST_SIZE, NULL, 0, 0,

lib/crypto/tests/chacha20poly1305_kunit.c

9049

for (k = 0; k < total_len - POLY1305_DIGEST_SIZE; ++k) {

lib/crypto/tests/chacha20poly1305_kunit.c

9056

for (k = 0; k < total_len - POLY1305_DIGEST_SIZE; ++k) {

lib/crypto/tests/poly1305-testvecs.h

178

static const u8 hash_testvec_consolidated[POLY1305_DIGEST_SIZE] = {

lib/crypto/tests/poly1305-testvecs.h

183

static const u8 poly1305_allones_macofmacs[POLY1305_DIGEST_SIZE] = {

lib/crypto/tests/poly1305-testvecs.h

6

u8 digest[POLY1305_DIGEST_SIZE];

lib/crypto/tests/poly1305_kunit.c

100

POLY1305_DIGEST_SIZE);

lib/crypto/tests/poly1305_kunit.c

105

POLY1305_DIGEST_SIZE);

lib/crypto/tests/poly1305_kunit.c

119

u8 expected_mac[POLY1305_DIGEST_SIZE];

lib/crypto/tests/poly1305_kunit.c

120

u8 actual_mac[POLY1305_DIGEST_SIZE];

lib/crypto/tests/poly1305_kunit.c

134

memset(&expected_mac[1], 0, POLY1305_DIGEST_SIZE - 1);

lib/crypto/tests/poly1305_kunit.c

138

POLY1305_DIGEST_SIZE - 1);

lib/crypto/tests/poly1305_kunit.c

144

POLY1305_DIGEST_SIZE);

lib/crypto/tests/poly1305_kunit.c

17

size_t len, u8 out[POLY1305_DIGEST_SIZE])

lib/crypto/tests/poly1305_kunit.c

32

u8 out[POLY1305_DIGEST_SIZE])

lib/crypto/tests/poly1305_kunit.c

40

#define HASH_SIZE POLY1305_DIGEST_SIZE

lib/crypto/tests/poly1305_kunit.c

85

u8 mac[POLY1305_DIGEST_SIZE];

lib/crypto/x86/poly1305.h

135

u8 mac[POLY1305_DIGEST_SIZE], const u32 nonce[4])

lib/crypto/x86/poly1305.h

67

u8 mac[POLY1305_DIGEST_SIZE],

lib/crypto/x86/poly1305.h

70

u8 mac[POLY1305_DIGEST_SIZE],