sys/crypto/blake2s.c

207

uint8_t i_hash[BLAKE2S_HASH_SIZE] __aligned(__alignof__(uint32_t));

sys/crypto/blake2s.c

211

blake2s_init(&state, BLAKE2S_HASH_SIZE);

sys/crypto/blake2s.c

220

blake2s_init(&state, BLAKE2S_HASH_SIZE);

sys/crypto/blake2s.c

228

blake2s_init(&state, BLAKE2S_HASH_SIZE);

sys/crypto/blake2s.c

230

blake2s_update(&state, i_hash, BLAKE2S_HASH_SIZE);

sys/crypto/blake2s.c

235

explicit_bzero(i_hash, BLAKE2S_HASH_SIZE);

sys/crypto/blake2s.c

76

KASSERT(!(!outlen || outlen > BLAKE2S_HASH_SIZE));

sys/crypto/blake2s.c

86

KASSERT(!(!outlen || outlen > BLAKE2S_HASH_SIZE ||

sys/crypto/blake2s.h

52

out != NULL && outlen <= BLAKE2S_HASH_SIZE &&

sys/net/wg_noise.c

787

uint8_t out[BLAKE2S_HASH_SIZE + 1];

sys/net/wg_noise.c

788

uint8_t sec[BLAKE2S_HASH_SIZE];

sys/net/wg_noise.c

790

KASSERT(a_len <= BLAKE2S_HASH_SIZE && b_len <= BLAKE2S_HASH_SIZE &&

sys/net/wg_noise.c

791

c_len <= BLAKE2S_HASH_SIZE);

sys/net/wg_noise.c

796

blake2s_hmac(sec, x, ck, BLAKE2S_HASH_SIZE, x_len, NOISE_HASH_LEN);

sys/net/wg_noise.c

803

blake2s_hmac(out, out, sec, BLAKE2S_HASH_SIZE, 1, BLAKE2S_HASH_SIZE);

sys/net/wg_noise.c

810

out[BLAKE2S_HASH_SIZE] = 2;

sys/net/wg_noise.c

811

blake2s_hmac(out, out, sec, BLAKE2S_HASH_SIZE, BLAKE2S_HASH_SIZE + 1,

sys/net/wg_noise.c

812

BLAKE2S_HASH_SIZE);

sys/net/wg_noise.c

819

out[BLAKE2S_HASH_SIZE] = 3;

sys/net/wg_noise.c

820

blake2s_hmac(out, out, sec, BLAKE2S_HASH_SIZE, BLAKE2S_HASH_SIZE + 1,

sys/net/wg_noise.c

821

BLAKE2S_HASH_SIZE);

sys/net/wg_noise.c

826

explicit_bzero(sec, BLAKE2S_HASH_SIZE);

sys/net/wg_noise.c

827

explicit_bzero(out, BLAKE2S_HASH_SIZE + 1);

sys/net/wg_noise.h

35

#define NOISE_HASH_LEN BLAKE2S_HASH_SIZE