faraphel/chrony
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
2817 commits 8 branches 75 tags 4.3 MiB
Commit graph

6 commits

Author SHA1 Message Date
Miroslav Lichvar
5dd173c050 siv: add functions to return min and max nonce length 
While AES-SIV-CMAC allows nonces of any length, AES-GCM-SIV requires
exactly 12 bytes, which is less than the unpadded minimum length of 16
used in the NTS authenticator field. These functions will be needed to
support both ciphers in the NTS code.
 2022-10-19 15:50:39 +02:00
Miroslav Lichvar
5caf0ad187 siv: add support for AES-128-GCM-SIV in Nettle 
This is a newer nonce misuse-resistant cipher specified in RFC 8452,
which is now supported in the development code of the Nettle library.

The advantages over AES-SIV-CMAC-256 are shorter keys and better
performance.
 2022-10-19 15:50:31 +02:00
Miroslav Lichvar
2bb88b45c6 siv: return error if key is not set 
Avoid encryption or decryption using uninitialized data, or causing a
crash, if a key was not set for the SIV instance.
 2020-09-10 09:36:35 +02:00
Miroslav Lichvar
32a82a38fd siv: add more assertions 
Make sure the returned tag and key lengths are sane.
 2020-07-16 16:02:16 +02:00
Miroslav Lichvar
2d798bc4cf siv: add internal implementation based on Nettle 
This adds an internal implementation of the AES-SIV-CMAC-256 cipher
based on GNU Nettle and the following patch (which was later reworked
and included in Nettle):

https://gitlab.com/gnutls/gnutls/uploads/1ab02c51e317264f9dba07ddfbc01d9a/0001-Added-support-for-AES_SIV_CMAC_256-and-AES_SIV_CMAC_.patch

This implementation will be dropped when the cipher is widely supported
by gnutls or Nettle.
 2020-03-05 16:02:15 +01:00
Miroslav Lichvar
881d07fa0a siv: add support for Nettle 2020-03-05 16:02:15 +01:00