POLY1305_BLOCK_SIZE
keyp += POLY1305_BLOCK_SIZE;
keyp += POLY1305_BLOCK_SIZE;
BUILD_BUG_ON(sizeof(header) % POLY1305_BLOCK_SIZE != 0);
&header, sizeof(header) / POLY1305_BLOCK_SIZE, 1);
BUILD_BUG_ON(TWEAK_SIZE % POLY1305_BLOCK_SIZE != 0);
TWEAK_SIZE / POLY1305_BLOCK_SIZE, 1);
static_assert(NH_HASH_BYTES % POLY1305_BLOCK_SIZE == 0);
NH_HASH_BYTES / POLY1305_BLOCK_SIZE, 1);
#define HASH_KEY_SIZE (2 * POLY1305_BLOCK_SIZE + NH_KEY_BYTES)
padlen = -rctx->assoclen % POLY1305_BLOCK_SIZE;
padlen = -rctx->cryptlen % POLY1305_BLOCK_SIZE;
const u8 raw_key[POLY1305_BLOCK_SIZE]);
const u8 raw_key[POLY1305_BLOCK_SIZE])
len / POLY1305_BLOCK_SIZE, padbit);
u8 buf[POLY1305_BLOCK_SIZE];
const u8 raw_key[POLY1305_BLOCK_SIZE]);
const u8 raw_key[POLY1305_BLOCK_SIZE]);
const u8 raw_key[POLY1305_BLOCK_SIZE]);
input += POLY1305_BLOCK_SIZE;
const u8 raw_key[POLY1305_BLOCK_SIZE])
input += POLY1305_BLOCK_SIZE;
const u8 raw_key[POLY1305_BLOCK_SIZE])
if (desc->buflen + nbytes >= POLY1305_BLOCK_SIZE) {
unsigned int l = POLY1305_BLOCK_SIZE - desc->buflen;
POLY1305_BLOCK_SIZE, 1);
bulk_len = round_down(nbytes, POLY1305_BLOCK_SIZE);
nbytes %= POLY1305_BLOCK_SIZE;
POLY1305_BLOCK_SIZE - desc->buflen);
poly1305_blocks(&desc->state, desc->buf, POLY1305_BLOCK_SIZE,
const u8 raw_key[POLY1305_BLOCK_SIZE])
if (len >= POLY1305_BLOCK_SIZE * 4) {
src += len - (len % (POLY1305_BLOCK_SIZE * 4));
len %= POLY1305_BLOCK_SIZE * 4;
while (len >= POLY1305_BLOCK_SIZE) {
poly1305_64s(state, src, POLY1305_BLOCK_SIZE, padbit);
len -= POLY1305_BLOCK_SIZE;
src += POLY1305_BLOCK_SIZE;
const u8 raw_key[POLY1305_BLOCK_SIZE]);
u8 data[3 * POLY1305_BLOCK_SIZE] = {};
memset(&data[1], 0xff, POLY1305_BLOCK_SIZE - 1);
SZ_4K % POLY1305_BLOCK_SIZE);
(len < POLY1305_BLOCK_SIZE * 18 && !ctx->is_base2_26) ||
const u8 raw_key[POLY1305_BLOCK_SIZE]);
const u8 raw_key[POLY1305_BLOCK_SIZE])
BUILD_BUG_ON(SZ_4K < POLY1305_BLOCK_SIZE ||