John Baldwin 4361c4eb6e cryptosoft: Fix support for variable tag lengths in AES-CCM. ... The tag length is included as one of the values in the flags byte of block 0 passed to CBC_MAC, so merely copying the first N bytes is insufficient. To avoid adding more sideband data to the CBC MAC software context, pull the generation of block 0, the AAD length, and AAD padding out of cbc_mac.c and into cryptosoft.c. This matches how GCM/GMAC are handled where the length block is constructed in cryptosoft.c and passed as an input to the Update callback. As a result, the CBC MAC Update() routine is now much simpler and simply performs the XOR-and-encrypt step on each input block. While here, avoid a copy to the staging block in the Update routine when one or more full blocks are passed as input to the Update callback. Reviewed by: sef Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D32120		2021-10-06 14:08:48 -07:00
..
t4_crypto.c	cryptosoft: Fix support for variable tag lengths in AES-CCM.	2021-10-06 14:08:48 -07:00
t4_crypto.h	cxgbe: De-duplicate some of the code for managing TLS key contexts.	2021-06-15 17:45:32 -07:00
t4_kern_tls.c	cxgbe: fix LINT-NOIP builds	2021-09-24 14:21:18 +02:00
t4_keyctx.c	crypto: Constify all transform descriptors	2021-07-26 16:41:05 -04:00