kris/boringssl
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity
d69d94e7e3
boringssl/crypto/cipher/test/aes_256_gcm_siv_tests.txt

124 lines
8.9 KiB
Plaintext
Raw Normal View History

Add generic AES-GCM-SIV support. AES-GCM-SIV is an AEAD with nonce-misuse resistance. It can reuse hardware support for AES-GCM and thus encrypt at ~66% the speed, and decrypt at 100% the speed, of AES-GCM. See https://tools.ietf.org/html/draft-irtf-cfrg-gcmsiv-02 This implementation is generic, not optimised, and reuses existing AES and GHASH support as much as possible. It is guarded by !OPENSSL_SMALL, at least for now. Change-Id: Ia9f77b256ef5dfb8588bb9ecfe6ee0e827626f57 Reviewed-on: https://boringssl-review.googlesource.com/12541 Reviewed-by: Adam Langley <agl@google.com> Commit-Queue: Adam Langley <agl@google.com> CQ-Verified: CQ bot account: commit-bot@chromium.org <commit-bot@chromium.org>
2016-12-01 16:24:24 +00:00
# Test vectors from
Update AES-GCM-SIV to match revision four of the draft. This change updates AES-GCM-SIV to match revision four of the draft[1]. See [2] for the reasons behind the changes. [1] https://tools.ietf.org/html/draft-irtf-cfrg-gcmsiv-04 [2] https://www.ietf.org/mail-archive/web/cfrg/current/msg08895.html Change-Id: Icacfefbd2f470186051551ea227c9d6c6dd6e786 Reviewed-on: https://boringssl-review.googlesource.com/13973 Reviewed-by: Adam Langley <alangley@gmail.com> Commit-Queue: Adam Langley <alangley@gmail.com> CQ-Verified: CQ bot account: commit-bot@chromium.org <commit-bot@chromium.org>
2017-02-24 00:40:26 +00:00
# https://tools.ietf.org/html/draft-irtf-cfrg-gcmsiv-04#appendix-C
Add generic AES-GCM-SIV support. AES-GCM-SIV is an AEAD with nonce-misuse resistance. It can reuse hardware support for AES-GCM and thus encrypt at ~66% the speed, and decrypt at 100% the speed, of AES-GCM. See https://tools.ietf.org/html/draft-irtf-cfrg-gcmsiv-02 This implementation is generic, not optimised, and reuses existing AES and GHASH support as much as possible. It is guarded by !OPENSSL_SMALL, at least for now. Change-Id: Ia9f77b256ef5dfb8588bb9ecfe6ee0e827626f57 Reviewed-on: https://boringssl-review.googlesource.com/12541 Reviewed-by: Adam Langley <agl@google.com> Commit-Queue: Adam Langley <agl@google.com> CQ-Verified: CQ bot account: commit-bot@chromium.org <commit-bot@chromium.org>
2016-12-01 16:24:24 +00:00
KEY: 0100000000000000000000000000000000000000000000000000000000000000
Update AES-GCM-SIV to match revision four of the draft. This change updates AES-GCM-SIV to match revision four of the draft[1]. See [2] for the reasons behind the changes. [1] https://tools.ietf.org/html/draft-irtf-cfrg-gcmsiv-04 [2] https://www.ietf.org/mail-archive/web/cfrg/current/msg08895.html Change-Id: Icacfefbd2f470186051551ea227c9d6c6dd6e786 Reviewed-on: https://boringssl-review.googlesource.com/13973 Reviewed-by: Adam Langley <alangley@gmail.com> Commit-Queue: Adam Langley <alangley@gmail.com> CQ-Verified: CQ bot account: commit-bot@chromium.org <commit-bot@chromium.org>
2017-02-24 00:40:26 +00:00
NONCE: 030000000000000000000000
Add generic AES-GCM-SIV support. AES-GCM-SIV is an AEAD with nonce-misuse resistance. It can reuse hardware support for AES-GCM and thus encrypt at ~66% the speed, and decrypt at 100% the speed, of AES-GCM. See https://tools.ietf.org/html/draft-irtf-cfrg-gcmsiv-02 This implementation is generic, not optimised, and reuses existing AES and GHASH support as much as possible. It is guarded by !OPENSSL_SMALL, at least for now. Change-Id: Ia9f77b256ef5dfb8588bb9ecfe6ee0e827626f57 Reviewed-on: https://boringssl-review.googlesource.com/12541 Reviewed-by: Adam Langley <agl@google.com> Commit-Queue: Adam Langley <agl@google.com> CQ-Verified: CQ bot account: commit-bot@chromium.org <commit-bot@chromium.org>
2016-12-01 16:24:24 +00:00
IN:
AD:
CT:
Update AES-GCM-SIV to match revision four of the draft. This change updates AES-GCM-SIV to match revision four of the draft[1]. See [2] for the reasons behind the changes. [1] https://tools.ietf.org/html/draft-irtf-cfrg-gcmsiv-04 [2] https://www.ietf.org/mail-archive/web/cfrg/current/msg08895.html Change-Id: Icacfefbd2f470186051551ea227c9d6c6dd6e786 Reviewed-on: https://boringssl-review.googlesource.com/13973 Reviewed-by: Adam Langley <alangley@gmail.com> Commit-Queue: Adam Langley <alangley@gmail.com> CQ-Verified: CQ bot account: commit-bot@chromium.org <commit-bot@chromium.org>
2017-02-24 00:40:26 +00:00
TAG: 07f5f4169bbf55a8400cd47ea6fd400f
Add generic AES-GCM-SIV support. AES-GCM-SIV is an AEAD with nonce-misuse resistance. It can reuse hardware support for AES-GCM and thus encrypt at ~66% the speed, and decrypt at 100% the speed, of AES-GCM. See https://tools.ietf.org/html/draft-irtf-cfrg-gcmsiv-02 This implementation is generic, not optimised, and reuses existing AES and GHASH support as much as possible. It is guarded by !OPENSSL_SMALL, at least for now. Change-Id: Ia9f77b256ef5dfb8588bb9ecfe6ee0e827626f57 Reviewed-on: https://boringssl-review.googlesource.com/12541 Reviewed-by: Adam Langley <agl@google.com> Commit-Queue: Adam Langley <agl@google.com> CQ-Verified: CQ bot account: commit-bot@chromium.org <commit-bot@chromium.org>
2016-12-01 16:24:24 +00:00
KEY: 0100000000000000000000000000000000000000000000000000000000000000
Update AES-GCM-SIV to match revision four of the draft. This change updates AES-GCM-SIV to match revision four of the draft[1]. See [2] for the reasons behind the changes. [1] https://tools.ietf.org/html/draft-irtf-cfrg-gcmsiv-04 [2] https://www.ietf.org/mail-archive/web/cfrg/current/msg08895.html Change-Id: Icacfefbd2f470186051551ea227c9d6c6dd6e786 Reviewed-on: https://boringssl-review.googlesource.com/13973 Reviewed-by: Adam Langley <alangley@gmail.com> Commit-Queue: Adam Langley <alangley@gmail.com> CQ-Verified: CQ bot account: commit-bot@chromium.org <commit-bot@chromium.org>
2017-02-24 00:40:26 +00:00
NONCE: 030000000000000000000000
Add generic AES-GCM-SIV support. AES-GCM-SIV is an AEAD with nonce-misuse resistance. It can reuse hardware support for AES-GCM and thus encrypt at ~66% the speed, and decrypt at 100% the speed, of AES-GCM. See https://tools.ietf.org/html/draft-irtf-cfrg-gcmsiv-02 This implementation is generic, not optimised, and reuses existing AES and GHASH support as much as possible. It is guarded by !OPENSSL_SMALL, at least for now. Change-Id: Ia9f77b256ef5dfb8588bb9ecfe6ee0e827626f57 Reviewed-on: https://boringssl-review.googlesource.com/12541 Reviewed-by: Adam Langley <agl@google.com> Commit-Queue: Adam Langley <agl@google.com> CQ-Verified: CQ bot account: commit-bot@chromium.org <commit-bot@chromium.org>
2016-12-01 16:24:24 +00:00
IN: 0100000000000000
AD:
Update AES-GCM-SIV to match revision four of the draft. This change updates AES-GCM-SIV to match revision four of the draft[1]. See [2] for the reasons behind the changes. [1] https://tools.ietf.org/html/draft-irtf-cfrg-gcmsiv-04 [2] https://www.ietf.org/mail-archive/web/cfrg/current/msg08895.html Change-Id: Icacfefbd2f470186051551ea227c9d6c6dd6e786 Reviewed-on: https://boringssl-review.googlesource.com/13973 Reviewed-by: Adam Langley <alangley@gmail.com> Commit-Queue: Adam Langley <alangley@gmail.com> CQ-Verified: CQ bot account: commit-bot@chromium.org <commit-bot@chromium.org>
2017-02-24 00:40:26 +00:00
CT: c2ef328e5c71c83b
TAG: 843122130f7364b761e0b97427e3df28
Add generic AES-GCM-SIV support. AES-GCM-SIV is an AEAD with nonce-misuse resistance. It can reuse hardware support for AES-GCM and thus encrypt at ~66% the speed, and decrypt at 100% the speed, of AES-GCM. See https://tools.ietf.org/html/draft-irtf-cfrg-gcmsiv-02 This implementation is generic, not optimised, and reuses existing AES and GHASH support as much as possible. It is guarded by !OPENSSL_SMALL, at least for now. Change-Id: Ia9f77b256ef5dfb8588bb9ecfe6ee0e827626f57 Reviewed-on: https://boringssl-review.googlesource.com/12541 Reviewed-by: Adam Langley <agl@google.com> Commit-Queue: Adam Langley <agl@google.com> CQ-Verified: CQ bot account: commit-bot@chromium.org <commit-bot@chromium.org>
2016-12-01 16:24:24 +00:00
KEY: 0100000000000000000000000000000000000000000000000000000000000000
Update AES-GCM-SIV to match revision four of the draft. This change updates AES-GCM-SIV to match revision four of the draft[1]. See [2] for the reasons behind the changes. [1] https://tools.ietf.org/html/draft-irtf-cfrg-gcmsiv-04 [2] https://www.ietf.org/mail-archive/web/cfrg/current/msg08895.html Change-Id: Icacfefbd2f470186051551ea227c9d6c6dd6e786 Reviewed-on: https://boringssl-review.googlesource.com/13973 Reviewed-by: Adam Langley <alangley@gmail.com> Commit-Queue: Adam Langley <alangley@gmail.com> CQ-Verified: CQ bot account: commit-bot@chromium.org <commit-bot@chromium.org>
2017-02-24 00:40:26 +00:00
NONCE: 030000000000000000000000
Add generic AES-GCM-SIV support. AES-GCM-SIV is an AEAD with nonce-misuse resistance. It can reuse hardware support for AES-GCM and thus encrypt at ~66% the speed, and decrypt at 100% the speed, of AES-GCM. See https://tools.ietf.org/html/draft-irtf-cfrg-gcmsiv-02 This implementation is generic, not optimised, and reuses existing AES and GHASH support as much as possible. It is guarded by !OPENSSL_SMALL, at least for now. Change-Id: Ia9f77b256ef5dfb8588bb9ecfe6ee0e827626f57 Reviewed-on: https://boringssl-review.googlesource.com/12541 Reviewed-by: Adam Langley <agl@google.com> Commit-Queue: Adam Langley <agl@google.com> CQ-Verified: CQ bot account: commit-bot@chromium.org <commit-bot@chromium.org>
2016-12-01 16:24:24 +00:00
IN: 010000000000000000000000
AD:
Update AES-GCM-SIV to match revision four of the draft. This change updates AES-GCM-SIV to match revision four of the draft[1]. See [2] for the reasons behind the changes. [1] https://tools.ietf.org/html/draft-irtf-cfrg-gcmsiv-04 [2] https://www.ietf.org/mail-archive/web/cfrg/current/msg08895.html Change-Id: Icacfefbd2f470186051551ea227c9d6c6dd6e786 Reviewed-on: https://boringssl-review.googlesource.com/13973 Reviewed-by: Adam Langley <alangley@gmail.com> Commit-Queue: Adam Langley <alangley@gmail.com> CQ-Verified: CQ bot account: commit-bot@chromium.org <commit-bot@chromium.org>
2017-02-24 00:40:26 +00:00
CT: 9aab2aeb3faa0a34aea8e2b1
TAG: 8ca50da9ae6559e48fd10f6e5c9ca17e
Add generic AES-GCM-SIV support. AES-GCM-SIV is an AEAD with nonce-misuse resistance. It can reuse hardware support for AES-GCM and thus encrypt at ~66% the speed, and decrypt at 100% the speed, of AES-GCM. See https://tools.ietf.org/html/draft-irtf-cfrg-gcmsiv-02 This implementation is generic, not optimised, and reuses existing AES and GHASH support as much as possible. It is guarded by !OPENSSL_SMALL, at least for now. Change-Id: Ia9f77b256ef5dfb8588bb9ecfe6ee0e827626f57 Reviewed-on: https://boringssl-review.googlesource.com/12541 Reviewed-by: Adam Langley <agl@google.com> Commit-Queue: Adam Langley <agl@google.com> CQ-Verified: CQ bot account: commit-bot@chromium.org <commit-bot@chromium.org>
2016-12-01 16:24:24 +00:00
KEY: 0100000000000000000000000000000000000000000000000000000000000000
Update AES-GCM-SIV to match revision four of the draft. This change updates AES-GCM-SIV to match revision four of the draft[1]. See [2] for the reasons behind the changes. [1] https://tools.ietf.org/html/draft-irtf-cfrg-gcmsiv-04 [2] https://www.ietf.org/mail-archive/web/cfrg/current/msg08895.html Change-Id: Icacfefbd2f470186051551ea227c9d6c6dd6e786 Reviewed-on: https://boringssl-review.googlesource.com/13973 Reviewed-by: Adam Langley <alangley@gmail.com> Commit-Queue: Adam Langley <alangley@gmail.com> CQ-Verified: CQ bot account: commit-bot@chromium.org <commit-bot@chromium.org>
2017-02-24 00:40:26 +00:00
NONCE: 030000000000000000000000
Add generic AES-GCM-SIV support. AES-GCM-SIV is an AEAD with nonce-misuse resistance. It can reuse hardware support for AES-GCM and thus encrypt at ~66% the speed, and decrypt at 100% the speed, of AES-GCM. See https://tools.ietf.org/html/draft-irtf-cfrg-gcmsiv-02 This implementation is generic, not optimised, and reuses existing AES and GHASH support as much as possible. It is guarded by !OPENSSL_SMALL, at least for now. Change-Id: Ia9f77b256ef5dfb8588bb9ecfe6ee0e827626f57 Reviewed-on: https://boringssl-review.googlesource.com/12541 Reviewed-by: Adam Langley <agl@google.com> Commit-Queue: Adam Langley <agl@google.com> CQ-Verified: CQ bot account: commit-bot@chromium.org <commit-bot@chromium.org>
2016-12-01 16:24:24 +00:00
IN: 01000000000000000000000000000000
AD:
Update AES-GCM-SIV to match revision four of the draft. This change updates AES-GCM-SIV to match revision four of the draft[1]. See [2] for the reasons behind the changes. [1] https://tools.ietf.org/html/draft-irtf-cfrg-gcmsiv-04 [2] https://www.ietf.org/mail-archive/web/cfrg/current/msg08895.html Change-Id: Icacfefbd2f470186051551ea227c9d6c6dd6e786 Reviewed-on: https://boringssl-review.googlesource.com/13973 Reviewed-by: Adam Langley <alangley@gmail.com> Commit-Queue: Adam Langley <alangley@gmail.com> CQ-Verified: CQ bot account: commit-bot@chromium.org <commit-bot@chromium.org>
2017-02-24 00:40:26 +00:00
CT: 85a01b63025ba19b7fd3ddfc033b3e76
TAG: c9eac6fa700942702e90862383c6c366
Add generic AES-GCM-SIV support. AES-GCM-SIV is an AEAD with nonce-misuse resistance. It can reuse hardware support for AES-GCM and thus encrypt at ~66% the speed, and decrypt at 100% the speed, of AES-GCM. See https://tools.ietf.org/html/draft-irtf-cfrg-gcmsiv-02 This implementation is generic, not optimised, and reuses existing AES and GHASH support as much as possible. It is guarded by !OPENSSL_SMALL, at least for now. Change-Id: Ia9f77b256ef5dfb8588bb9ecfe6ee0e827626f57 Reviewed-on: https://boringssl-review.googlesource.com/12541 Reviewed-by: Adam Langley <agl@google.com> Commit-Queue: Adam Langley <agl@google.com> CQ-Verified: CQ bot account: commit-bot@chromium.org <commit-bot@chromium.org>
2016-12-01 16:24:24 +00:00
KEY: 0100000000000000000000000000000000000000000000000000000000000000
Update AES-GCM-SIV to match revision four of the draft. This change updates AES-GCM-SIV to match revision four of the draft[1]. See [2] for the reasons behind the changes. [1] https://tools.ietf.org/html/draft-irtf-cfrg-gcmsiv-04 [2] https://www.ietf.org/mail-archive/web/cfrg/current/msg08895.html Change-Id: Icacfefbd2f470186051551ea227c9d6c6dd6e786 Reviewed-on: https://boringssl-review.googlesource.com/13973 Reviewed-by: Adam Langley <alangley@gmail.com> Commit-Queue: Adam Langley <alangley@gmail.com> CQ-Verified: CQ bot account: commit-bot@chromium.org <commit-bot@chromium.org>
2017-02-24 00:40:26 +00:00
NONCE: 030000000000000000000000
Add generic AES-GCM-SIV support. AES-GCM-SIV is an AEAD with nonce-misuse resistance. It can reuse hardware support for AES-GCM and thus encrypt at ~66% the speed, and decrypt at 100% the speed, of AES-GCM. See https://tools.ietf.org/html/draft-irtf-cfrg-gcmsiv-02 This implementation is generic, not optimised, and reuses existing AES and GHASH support as much as possible. It is guarded by !OPENSSL_SMALL, at least for now. Change-Id: Ia9f77b256ef5dfb8588bb9ecfe6ee0e827626f57 Reviewed-on: https://boringssl-review.googlesource.com/12541 Reviewed-by: Adam Langley <agl@google.com> Commit-Queue: Adam Langley <agl@google.com> CQ-Verified: CQ bot account: commit-bot@chromium.org <commit-bot@chromium.org>
2016-12-01 16:24:24 +00:00
IN: 0100000000000000000000000000000002000000000000000000000000000000
AD:
Update AES-GCM-SIV to match revision four of the draft. This change updates AES-GCM-SIV to match revision four of the draft[1]. See [2] for the reasons behind the changes. [1] https://tools.ietf.org/html/draft-irtf-cfrg-gcmsiv-04 [2] https://www.ietf.org/mail-archive/web/cfrg/current/msg08895.html Change-Id: Icacfefbd2f470186051551ea227c9d6c6dd6e786 Reviewed-on: https://boringssl-review.googlesource.com/13973 Reviewed-by: Adam Langley <alangley@gmail.com> Commit-Queue: Adam Langley <alangley@gmail.com> CQ-Verified: CQ bot account: commit-bot@chromium.org <commit-bot@chromium.org>
2017-02-24 00:40:26 +00:00
CT: 4a6a9db4c8c6549201b9edb53006cba821ec9cf850948a7c86c68ac7539d027f
TAG: e819e63abcd020b006a976397632eb5d
Add generic AES-GCM-SIV support. AES-GCM-SIV is an AEAD with nonce-misuse resistance. It can reuse hardware support for AES-GCM and thus encrypt at ~66% the speed, and decrypt at 100% the speed, of AES-GCM. See https://tools.ietf.org/html/draft-irtf-cfrg-gcmsiv-02 This implementation is generic, not optimised, and reuses existing AES and GHASH support as much as possible. It is guarded by !OPENSSL_SMALL, at least for now. Change-Id: Ia9f77b256ef5dfb8588bb9ecfe6ee0e827626f57 Reviewed-on: https://boringssl-review.googlesource.com/12541 Reviewed-by: Adam Langley <agl@google.com> Commit-Queue: Adam Langley <agl@google.com> CQ-Verified: CQ bot account: commit-bot@chromium.org <commit-bot@chromium.org>
2016-12-01 16:24:24 +00:00
KEY: 0100000000000000000000000000000000000000000000000000000000000000
Update AES-GCM-SIV to match revision four of the draft. This change updates AES-GCM-SIV to match revision four of the draft[1]. See [2] for the reasons behind the changes. [1] https://tools.ietf.org/html/draft-irtf-cfrg-gcmsiv-04 [2] https://www.ietf.org/mail-archive/web/cfrg/current/msg08895.html Change-Id: Icacfefbd2f470186051551ea227c9d6c6dd6e786 Reviewed-on: https://boringssl-review.googlesource.com/13973 Reviewed-by: Adam Langley <alangley@gmail.com> Commit-Queue: Adam Langley <alangley@gmail.com> CQ-Verified: CQ bot account: commit-bot@chromium.org <commit-bot@chromium.org>
2017-02-24 00:40:26 +00:00
NONCE: 030000000000000000000000
Add generic AES-GCM-SIV support. AES-GCM-SIV is an AEAD with nonce-misuse resistance. It can reuse hardware support for AES-GCM and thus encrypt at ~66% the speed, and decrypt at 100% the speed, of AES-GCM. See https://tools.ietf.org/html/draft-irtf-cfrg-gcmsiv-02 This implementation is generic, not optimised, and reuses existing AES and GHASH support as much as possible. It is guarded by !OPENSSL_SMALL, at least for now. Change-Id: Ia9f77b256ef5dfb8588bb9ecfe6ee0e827626f57 Reviewed-on: https://boringssl-review.googlesource.com/12541 Reviewed-by: Adam Langley <agl@google.com> Commit-Queue: Adam Langley <agl@google.com> CQ-Verified: CQ bot account: commit-bot@chromium.org <commit-bot@chromium.org>
2016-12-01 16:24:24 +00:00
IN: 010000000000000000000000000000000200000000000000000000000000000003000000000000000000000000000000
AD:
Update AES-GCM-SIV to match revision four of the draft. This change updates AES-GCM-SIV to match revision four of the draft[1]. See [2] for the reasons behind the changes. [1] https://tools.ietf.org/html/draft-irtf-cfrg-gcmsiv-04 [2] https://www.ietf.org/mail-archive/web/cfrg/current/msg08895.html Change-Id: Icacfefbd2f470186051551ea227c9d6c6dd6e786 Reviewed-on: https://boringssl-review.googlesource.com/13973 Reviewed-by: Adam Langley <alangley@gmail.com> Commit-Queue: Adam Langley <alangley@gmail.com> CQ-Verified: CQ bot account: commit-bot@chromium.org <commit-bot@chromium.org>
2017-02-24 00:40:26 +00:00
CT: c00d121893a9fa603f48ccc1ca3c57ce7499245ea0046db16c53c7c66fe717e39cf6c748837b61f6ee3adcee17534ed5
TAG: 790bc96880a99ba804bd12c0e6a22cc4
Add generic AES-GCM-SIV support. AES-GCM-SIV is an AEAD with nonce-misuse resistance. It can reuse hardware support for AES-GCM and thus encrypt at ~66% the speed, and decrypt at 100% the speed, of AES-GCM. See https://tools.ietf.org/html/draft-irtf-cfrg-gcmsiv-02 This implementation is generic, not optimised, and reuses existing AES and GHASH support as much as possible. It is guarded by !OPENSSL_SMALL, at least for now. Change-Id: Ia9f77b256ef5dfb8588bb9ecfe6ee0e827626f57 Reviewed-on: https://boringssl-review.googlesource.com/12541 Reviewed-by: Adam Langley <agl@google.com> Commit-Queue: Adam Langley <agl@google.com> CQ-Verified: CQ bot account: commit-bot@chromium.org <commit-bot@chromium.org>
2016-12-01 16:24:24 +00:00
KEY: 0100000000000000000000000000000000000000000000000000000000000000
Update AES-GCM-SIV to match revision four of the draft. This change updates AES-GCM-SIV to match revision four of the draft[1]. See [2] for the reasons behind the changes. [1] https://tools.ietf.org/html/draft-irtf-cfrg-gcmsiv-04 [2] https://www.ietf.org/mail-archive/web/cfrg/current/msg08895.html Change-Id: Icacfefbd2f470186051551ea227c9d6c6dd6e786 Reviewed-on: https://boringssl-review.googlesource.com/13973 Reviewed-by: Adam Langley <alangley@gmail.com> Commit-Queue: Adam Langley <alangley@gmail.com> CQ-Verified: CQ bot account: commit-bot@chromium.org <commit-bot@chromium.org>
2017-02-24 00:40:26 +00:00
NONCE: 030000000000000000000000
Add generic AES-GCM-SIV support. AES-GCM-SIV is an AEAD with nonce-misuse resistance. It can reuse hardware support for AES-GCM and thus encrypt at ~66% the speed, and decrypt at 100% the speed, of AES-GCM. See https://tools.ietf.org/html/draft-irtf-cfrg-gcmsiv-02 This implementation is generic, not optimised, and reuses existing AES and GHASH support as much as possible. It is guarded by !OPENSSL_SMALL, at least for now. Change-Id: Ia9f77b256ef5dfb8588bb9ecfe6ee0e827626f57 Reviewed-on: https://boringssl-review.googlesource.com/12541 Reviewed-by: Adam Langley <agl@google.com> Commit-Queue: Adam Langley <agl@google.com> CQ-Verified: CQ bot account: commit-bot@chromium.org <commit-bot@chromium.org>
2016-12-01 16:24:24 +00:00
IN: 01000000000000000000000000000000020000000000000000000000000000000300000000000000000000000000000004000000000000000000000000000000
AD:
Update AES-GCM-SIV to match revision four of the draft. This change updates AES-GCM-SIV to match revision four of the draft[1]. See [2] for the reasons behind the changes. [1] https://tools.ietf.org/html/draft-irtf-cfrg-gcmsiv-04 [2] https://www.ietf.org/mail-archive/web/cfrg/current/msg08895.html Change-Id: Icacfefbd2f470186051551ea227c9d6c6dd6e786 Reviewed-on: https://boringssl-review.googlesource.com/13973 Reviewed-by: Adam Langley <alangley@gmail.com> Commit-Queue: Adam Langley <alangley@gmail.com> CQ-Verified: CQ bot account: commit-bot@chromium.org <commit-bot@chromium.org>
2017-02-24 00:40:26 +00:00
CT: c2d5160a1f8683834910acdafc41fbb1632d4a353e8b905ec9a5499ac34f96c7e1049eb080883891a4db8caaa1f99dd004d80487540735234e3744512c6f90ce
TAG: 112864c269fc0d9d88c61fa47e39aa08
Add generic AES-GCM-SIV support. AES-GCM-SIV is an AEAD with nonce-misuse resistance. It can reuse hardware support for AES-GCM and thus encrypt at ~66% the speed, and decrypt at 100% the speed, of AES-GCM. See https://tools.ietf.org/html/draft-irtf-cfrg-gcmsiv-02 This implementation is generic, not optimised, and reuses existing AES and GHASH support as much as possible. It is guarded by !OPENSSL_SMALL, at least for now. Change-Id: Ia9f77b256ef5dfb8588bb9ecfe6ee0e827626f57 Reviewed-on: https://boringssl-review.googlesource.com/12541 Reviewed-by: Adam Langley <agl@google.com> Commit-Queue: Adam Langley <agl@google.com> CQ-Verified: CQ bot account: commit-bot@chromium.org <commit-bot@chromium.org>
2016-12-01 16:24:24 +00:00
KEY: 0100000000000000000000000000000000000000000000000000000000000000
Update AES-GCM-SIV to match revision four of the draft. This change updates AES-GCM-SIV to match revision four of the draft[1]. See [2] for the reasons behind the changes. [1] https://tools.ietf.org/html/draft-irtf-cfrg-gcmsiv-04 [2] https://www.ietf.org/mail-archive/web/cfrg/current/msg08895.html Change-Id: Icacfefbd2f470186051551ea227c9d6c6dd6e786 Reviewed-on: https://boringssl-review.googlesource.com/13973 Reviewed-by: Adam Langley <alangley@gmail.com> Commit-Queue: Adam Langley <alangley@gmail.com> CQ-Verified: CQ bot account: commit-bot@chromium.org <commit-bot@chromium.org>
2017-02-24 00:40:26 +00:00
NONCE: 030000000000000000000000
Add generic AES-GCM-SIV support. AES-GCM-SIV is an AEAD with nonce-misuse resistance. It can reuse hardware support for AES-GCM and thus encrypt at ~66% the speed, and decrypt at 100% the speed, of AES-GCM. See https://tools.ietf.org/html/draft-irtf-cfrg-gcmsiv-02 This implementation is generic, not optimised, and reuses existing AES and GHASH support as much as possible. It is guarded by !OPENSSL_SMALL, at least for now. Change-Id: Ia9f77b256ef5dfb8588bb9ecfe6ee0e827626f57 Reviewed-on: https://boringssl-review.googlesource.com/12541 Reviewed-by: Adam Langley <agl@google.com> Commit-Queue: Adam Langley <agl@google.com> CQ-Verified: CQ bot account: commit-bot@chromium.org <commit-bot@chromium.org>
2016-12-01 16:24:24 +00:00
IN: 0200000000000000
AD: 01
Update AES-GCM-SIV to match revision four of the draft. This change updates AES-GCM-SIV to match revision four of the draft[1]. See [2] for the reasons behind the changes. [1] https://tools.ietf.org/html/draft-irtf-cfrg-gcmsiv-04 [2] https://www.ietf.org/mail-archive/web/cfrg/current/msg08895.html Change-Id: Icacfefbd2f470186051551ea227c9d6c6dd6e786 Reviewed-on: https://boringssl-review.googlesource.com/13973 Reviewed-by: Adam Langley <alangley@gmail.com> Commit-Queue: Adam Langley <alangley@gmail.com> CQ-Verified: CQ bot account: commit-bot@chromium.org <commit-bot@chromium.org>
2017-02-24 00:40:26 +00:00
CT: 1de22967237a8132
TAG: 91213f267e3b452f02d01ae33e4ec854
Add generic AES-GCM-SIV support. AES-GCM-SIV is an AEAD with nonce-misuse resistance. It can reuse hardware support for AES-GCM and thus encrypt at ~66% the speed, and decrypt at 100% the speed, of AES-GCM. See https://tools.ietf.org/html/draft-irtf-cfrg-gcmsiv-02 This implementation is generic, not optimised, and reuses existing AES and GHASH support as much as possible. It is guarded by !OPENSSL_SMALL, at least for now. Change-Id: Ia9f77b256ef5dfb8588bb9ecfe6ee0e827626f57 Reviewed-on: https://boringssl-review.googlesource.com/12541 Reviewed-by: Adam Langley <agl@google.com> Commit-Queue: Adam Langley <agl@google.com> CQ-Verified: CQ bot account: commit-bot@chromium.org <commit-bot@chromium.org>
2016-12-01 16:24:24 +00:00
KEY: 0100000000000000000000000000000000000000000000000000000000000000
Update AES-GCM-SIV to match revision four of the draft. This change updates AES-GCM-SIV to match revision four of the draft[1]. See [2] for the reasons behind the changes. [1] https://tools.ietf.org/html/draft-irtf-cfrg-gcmsiv-04 [2] https://www.ietf.org/mail-archive/web/cfrg/current/msg08895.html Change-Id: Icacfefbd2f470186051551ea227c9d6c6dd6e786 Reviewed-on: https://boringssl-review.googlesource.com/13973 Reviewed-by: Adam Langley <alangley@gmail.com> Commit-Queue: Adam Langley <alangley@gmail.com> CQ-Verified: CQ bot account: commit-bot@chromium.org <commit-bot@chromium.org>
2017-02-24 00:40:26 +00:00
NONCE: 030000000000000000000000
Add generic AES-GCM-SIV support. AES-GCM-SIV is an AEAD with nonce-misuse resistance. It can reuse hardware support for AES-GCM and thus encrypt at ~66% the speed, and decrypt at 100% the speed, of AES-GCM. See https://tools.ietf.org/html/draft-irtf-cfrg-gcmsiv-02 This implementation is generic, not optimised, and reuses existing AES and GHASH support as much as possible. It is guarded by !OPENSSL_SMALL, at least for now. Change-Id: Ia9f77b256ef5dfb8588bb9ecfe6ee0e827626f57 Reviewed-on: https://boringssl-review.googlesource.com/12541 Reviewed-by: Adam Langley <agl@google.com> Commit-Queue: Adam Langley <agl@google.com> CQ-Verified: CQ bot account: commit-bot@chromium.org <commit-bot@chromium.org>
2016-12-01 16:24:24 +00:00
IN: 020000000000000000000000
AD: 01
Update AES-GCM-SIV to match revision four of the draft. This change updates AES-GCM-SIV to match revision four of the draft[1]. See [2] for the reasons behind the changes. [1] https://tools.ietf.org/html/draft-irtf-cfrg-gcmsiv-04 [2] https://www.ietf.org/mail-archive/web/cfrg/current/msg08895.html Change-Id: Icacfefbd2f470186051551ea227c9d6c6dd6e786 Reviewed-on: https://boringssl-review.googlesource.com/13973 Reviewed-by: Adam Langley <alangley@gmail.com> Commit-Queue: Adam Langley <alangley@gmail.com> CQ-Verified: CQ bot account: commit-bot@chromium.org <commit-bot@chromium.org>
2017-02-24 00:40:26 +00:00
CT: 163d6f9cc1b346cd453a2e4c
TAG: c1a4a19ae800941ccdc57cc8413c277f
Add generic AES-GCM-SIV support. AES-GCM-SIV is an AEAD with nonce-misuse resistance. It can reuse hardware support for AES-GCM and thus encrypt at ~66% the speed, and decrypt at 100% the speed, of AES-GCM. See https://tools.ietf.org/html/draft-irtf-cfrg-gcmsiv-02 This implementation is generic, not optimised, and reuses existing AES and GHASH support as much as possible. It is guarded by !OPENSSL_SMALL, at least for now. Change-Id: Ia9f77b256ef5dfb8588bb9ecfe6ee0e827626f57 Reviewed-on: https://boringssl-review.googlesource.com/12541 Reviewed-by: Adam Langley <agl@google.com> Commit-Queue: Adam Langley <agl@google.com> CQ-Verified: CQ bot account: commit-bot@chromium.org <commit-bot@chromium.org>
2016-12-01 16:24:24 +00:00
KEY: 0100000000000000000000000000000000000000000000000000000000000000
Update AES-GCM-SIV to match revision four of the draft. This change updates AES-GCM-SIV to match revision four of the draft[1]. See [2] for the reasons behind the changes. [1] https://tools.ietf.org/html/draft-irtf-cfrg-gcmsiv-04 [2] https://www.ietf.org/mail-archive/web/cfrg/current/msg08895.html Change-Id: Icacfefbd2f470186051551ea227c9d6c6dd6e786 Reviewed-on: https://boringssl-review.googlesource.com/13973 Reviewed-by: Adam Langley <alangley@gmail.com> Commit-Queue: Adam Langley <alangley@gmail.com> CQ-Verified: CQ bot account: commit-bot@chromium.org <commit-bot@chromium.org>
2017-02-24 00:40:26 +00:00
NONCE: 030000000000000000000000
Add generic AES-GCM-SIV support. AES-GCM-SIV is an AEAD with nonce-misuse resistance. It can reuse hardware support for AES-GCM and thus encrypt at ~66% the speed, and decrypt at 100% the speed, of AES-GCM. See https://tools.ietf.org/html/draft-irtf-cfrg-gcmsiv-02 This implementation is generic, not optimised, and reuses existing AES and GHASH support as much as possible. It is guarded by !OPENSSL_SMALL, at least for now. Change-Id: Ia9f77b256ef5dfb8588bb9ecfe6ee0e827626f57 Reviewed-on: https://boringssl-review.googlesource.com/12541 Reviewed-by: Adam Langley <agl@google.com> Commit-Queue: Adam Langley <agl@google.com> CQ-Verified: CQ bot account: commit-bot@chromium.org <commit-bot@chromium.org>
2016-12-01 16:24:24 +00:00
IN: 02000000000000000000000000000000
AD: 01
Update AES-GCM-SIV to match revision four of the draft. This change updates AES-GCM-SIV to match revision four of the draft[1]. See [2] for the reasons behind the changes. [1] https://tools.ietf.org/html/draft-irtf-cfrg-gcmsiv-04 [2] https://www.ietf.org/mail-archive/web/cfrg/current/msg08895.html Change-Id: Icacfefbd2f470186051551ea227c9d6c6dd6e786 Reviewed-on: https://boringssl-review.googlesource.com/13973 Reviewed-by: Adam Langley <alangley@gmail.com> Commit-Queue: Adam Langley <alangley@gmail.com> CQ-Verified: CQ bot account: commit-bot@chromium.org <commit-bot@chromium.org>
2017-02-24 00:40:26 +00:00
CT: c91545823cc24f17dbb0e9e807d5ec17
TAG: b292d28ff61189e8e49f3875ef91aff7
Add generic AES-GCM-SIV support. AES-GCM-SIV is an AEAD with nonce-misuse resistance. It can reuse hardware support for AES-GCM and thus encrypt at ~66% the speed, and decrypt at 100% the speed, of AES-GCM. See https://tools.ietf.org/html/draft-irtf-cfrg-gcmsiv-02 This implementation is generic, not optimised, and reuses existing AES and GHASH support as much as possible. It is guarded by !OPENSSL_SMALL, at least for now. Change-Id: Ia9f77b256ef5dfb8588bb9ecfe6ee0e827626f57 Reviewed-on: https://boringssl-review.googlesource.com/12541 Reviewed-by: Adam Langley <agl@google.com> Commit-Queue: Adam Langley <agl@google.com> CQ-Verified: CQ bot account: commit-bot@chromium.org <commit-bot@chromium.org>
2016-12-01 16:24:24 +00:00
KEY: 0100000000000000000000000000000000000000000000000000000000000000
Update AES-GCM-SIV to match revision four of the draft. This change updates AES-GCM-SIV to match revision four of the draft[1]. See [2] for the reasons behind the changes. [1] https://tools.ietf.org/html/draft-irtf-cfrg-gcmsiv-04 [2] https://www.ietf.org/mail-archive/web/cfrg/current/msg08895.html Change-Id: Icacfefbd2f470186051551ea227c9d6c6dd6e786 Reviewed-on: https://boringssl-review.googlesource.com/13973 Reviewed-by: Adam Langley <alangley@gmail.com> Commit-Queue: Adam Langley <alangley@gmail.com> CQ-Verified: CQ bot account: commit-bot@chromium.org <commit-bot@chromium.org>
2017-02-24 00:40:26 +00:00
NONCE: 030000000000000000000000
Add generic AES-GCM-SIV support. AES-GCM-SIV is an AEAD with nonce-misuse resistance. It can reuse hardware support for AES-GCM and thus encrypt at ~66% the speed, and decrypt at 100% the speed, of AES-GCM. See https://tools.ietf.org/html/draft-irtf-cfrg-gcmsiv-02 This implementation is generic, not optimised, and reuses existing AES and GHASH support as much as possible. It is guarded by !OPENSSL_SMALL, at least for now. Change-Id: Ia9f77b256ef5dfb8588bb9ecfe6ee0e827626f57 Reviewed-on: https://boringssl-review.googlesource.com/12541 Reviewed-by: Adam Langley <agl@google.com> Commit-Queue: Adam Langley <agl@google.com> CQ-Verified: CQ bot account: commit-bot@chromium.org <commit-bot@chromium.org>
2016-12-01 16:24:24 +00:00
IN: 0200000000000000000000000000000003000000000000000000000000000000
AD: 01
Update AES-GCM-SIV to match revision four of the draft. This change updates AES-GCM-SIV to match revision four of the draft[1]. See [2] for the reasons behind the changes. [1] https://tools.ietf.org/html/draft-irtf-cfrg-gcmsiv-04 [2] https://www.ietf.org/mail-archive/web/cfrg/current/msg08895.html Change-Id: Icacfefbd2f470186051551ea227c9d6c6dd6e786 Reviewed-on: https://boringssl-review.googlesource.com/13973 Reviewed-by: Adam Langley <alangley@gmail.com> Commit-Queue: Adam Langley <alangley@gmail.com> CQ-Verified: CQ bot account: commit-bot@chromium.org <commit-bot@chromium.org>
2017-02-24 00:40:26 +00:00
CT: 07dad364bfc2b9da89116d7bef6daaaf6f255510aa654f920ac81b94e8bad365
TAG: aea1bad12702e1965604374aab96dbbc
Add generic AES-GCM-SIV support. AES-GCM-SIV is an AEAD with nonce-misuse resistance. It can reuse hardware support for AES-GCM and thus encrypt at ~66% the speed, and decrypt at 100% the speed, of AES-GCM. See https://tools.ietf.org/html/draft-irtf-cfrg-gcmsiv-02 This implementation is generic, not optimised, and reuses existing AES and GHASH support as much as possible. It is guarded by !OPENSSL_SMALL, at least for now. Change-Id: Ia9f77b256ef5dfb8588bb9ecfe6ee0e827626f57 Reviewed-on: https://boringssl-review.googlesource.com/12541 Reviewed-by: Adam Langley <agl@google.com> Commit-Queue: Adam Langley <agl@google.com> CQ-Verified: CQ bot account: commit-bot@chromium.org <commit-bot@chromium.org>
2016-12-01 16:24:24 +00:00
KEY: 0100000000000000000000000000000000000000000000000000000000000000
Update AES-GCM-SIV to match revision four of the draft. This change updates AES-GCM-SIV to match revision four of the draft[1]. See [2] for the reasons behind the changes. [1] https://tools.ietf.org/html/draft-irtf-cfrg-gcmsiv-04 [2] https://www.ietf.org/mail-archive/web/cfrg/current/msg08895.html Change-Id: Icacfefbd2f470186051551ea227c9d6c6dd6e786 Reviewed-on: https://boringssl-review.googlesource.com/13973 Reviewed-by: Adam Langley <alangley@gmail.com> Commit-Queue: Adam Langley <alangley@gmail.com> CQ-Verified: CQ bot account: commit-bot@chromium.org <commit-bot@chromium.org>
2017-02-24 00:40:26 +00:00
NONCE: 030000000000000000000000
Add generic AES-GCM-SIV support. AES-GCM-SIV is an AEAD with nonce-misuse resistance. It can reuse hardware support for AES-GCM and thus encrypt at ~66% the speed, and decrypt at 100% the speed, of AES-GCM. See https://tools.ietf.org/html/draft-irtf-cfrg-gcmsiv-02 This implementation is generic, not optimised, and reuses existing AES and GHASH support as much as possible. It is guarded by !OPENSSL_SMALL, at least for now. Change-Id: Ia9f77b256ef5dfb8588bb9ecfe6ee0e827626f57 Reviewed-on: https://boringssl-review.googlesource.com/12541 Reviewed-by: Adam Langley <agl@google.com> Commit-Queue: Adam Langley <agl@google.com> CQ-Verified: CQ bot account: commit-bot@chromium.org <commit-bot@chromium.org>
2016-12-01 16:24:24 +00:00
IN: 020000000000000000000000000000000300000000000000000000000000000004000000000000000000000000000000
AD: 01
Update AES-GCM-SIV to match revision four of the draft. This change updates AES-GCM-SIV to match revision four of the draft[1]. See [2] for the reasons behind the changes. [1] https://tools.ietf.org/html/draft-irtf-cfrg-gcmsiv-04 [2] https://www.ietf.org/mail-archive/web/cfrg/current/msg08895.html Change-Id: Icacfefbd2f470186051551ea227c9d6c6dd6e786 Reviewed-on: https://boringssl-review.googlesource.com/13973 Reviewed-by: Adam Langley <alangley@gmail.com> Commit-Queue: Adam Langley <alangley@gmail.com> CQ-Verified: CQ bot account: commit-bot@chromium.org <commit-bot@chromium.org>
2017-02-24 00:40:26 +00:00
CT: c67a1f0f567a5198aa1fcc8e3f21314336f7f51ca8b1af61feac35a86416fa47fbca3b5f749cdf564527f2314f42fe25
TAG: 03332742b228c647173616cfd44c54eb
Add generic AES-GCM-SIV support. AES-GCM-SIV is an AEAD with nonce-misuse resistance. It can reuse hardware support for AES-GCM and thus encrypt at ~66% the speed, and decrypt at 100% the speed, of AES-GCM. See https://tools.ietf.org/html/draft-irtf-cfrg-gcmsiv-02 This implementation is generic, not optimised, and reuses existing AES and GHASH support as much as possible. It is guarded by !OPENSSL_SMALL, at least for now. Change-Id: Ia9f77b256ef5dfb8588bb9ecfe6ee0e827626f57 Reviewed-on: https://boringssl-review.googlesource.com/12541 Reviewed-by: Adam Langley <agl@google.com> Commit-Queue: Adam Langley <agl@google.com> CQ-Verified: CQ bot account: commit-bot@chromium.org <commit-bot@chromium.org>
2016-12-01 16:24:24 +00:00
KEY: 0100000000000000000000000000000000000000000000000000000000000000
Update AES-GCM-SIV to match revision four of the draft. This change updates AES-GCM-SIV to match revision four of the draft[1]. See [2] for the reasons behind the changes. [1] https://tools.ietf.org/html/draft-irtf-cfrg-gcmsiv-04 [2] https://www.ietf.org/mail-archive/web/cfrg/current/msg08895.html Change-Id: Icacfefbd2f470186051551ea227c9d6c6dd6e786 Reviewed-on: https://boringssl-review.googlesource.com/13973 Reviewed-by: Adam Langley <alangley@gmail.com> Commit-Queue: Adam Langley <alangley@gmail.com> CQ-Verified: CQ bot account: commit-bot@chromium.org <commit-bot@chromium.org>
2017-02-24 00:40:26 +00:00
NONCE: 030000000000000000000000
Add generic AES-GCM-SIV support. AES-GCM-SIV is an AEAD with nonce-misuse resistance. It can reuse hardware support for AES-GCM and thus encrypt at ~66% the speed, and decrypt at 100% the speed, of AES-GCM. See https://tools.ietf.org/html/draft-irtf-cfrg-gcmsiv-02 This implementation is generic, not optimised, and reuses existing AES and GHASH support as much as possible. It is guarded by !OPENSSL_SMALL, at least for now. Change-Id: Ia9f77b256ef5dfb8588bb9ecfe6ee0e827626f57 Reviewed-on: https://boringssl-review.googlesource.com/12541 Reviewed-by: Adam Langley <agl@google.com> Commit-Queue: Adam Langley <agl@google.com> CQ-Verified: CQ bot account: commit-bot@chromium.org <commit-bot@chromium.org>
2016-12-01 16:24:24 +00:00
IN: 02000000000000000000000000000000030000000000000000000000000000000400000000000000000000000000000005000000000000000000000000000000
AD: 01
Update AES-GCM-SIV to match revision four of the draft. This change updates AES-GCM-SIV to match revision four of the draft[1]. See [2] for the reasons behind the changes. [1] https://tools.ietf.org/html/draft-irtf-cfrg-gcmsiv-04 [2] https://www.ietf.org/mail-archive/web/cfrg/current/msg08895.html Change-Id: Icacfefbd2f470186051551ea227c9d6c6dd6e786 Reviewed-on: https://boringssl-review.googlesource.com/13973 Reviewed-by: Adam Langley <alangley@gmail.com> Commit-Queue: Adam Langley <alangley@gmail.com> CQ-Verified: CQ bot account: commit-bot@chromium.org <commit-bot@chromium.org>
2017-02-24 00:40:26 +00:00
CT: 67fd45e126bfb9a79930c43aad2d36967d3f0e4d217c1e551f59727870beefc98cb933a8fce9de887b1e40799988db1fc3f91880ed405b2dd298318858467c89
TAG: 5bde0285037c5de81e5b570a049b62a0
Add generic AES-GCM-SIV support. AES-GCM-SIV is an AEAD with nonce-misuse resistance. It can reuse hardware support for AES-GCM and thus encrypt at ~66% the speed, and decrypt at 100% the speed, of AES-GCM. See https://tools.ietf.org/html/draft-irtf-cfrg-gcmsiv-02 This implementation is generic, not optimised, and reuses existing AES and GHASH support as much as possible. It is guarded by !OPENSSL_SMALL, at least for now. Change-Id: Ia9f77b256ef5dfb8588bb9ecfe6ee0e827626f57 Reviewed-on: https://boringssl-review.googlesource.com/12541 Reviewed-by: Adam Langley <agl@google.com> Commit-Queue: Adam Langley <agl@google.com> CQ-Verified: CQ bot account: commit-bot@chromium.org <commit-bot@chromium.org>
2016-12-01 16:24:24 +00:00
KEY: 0100000000000000000000000000000000000000000000000000000000000000
Update AES-GCM-SIV to match revision four of the draft. This change updates AES-GCM-SIV to match revision four of the draft[1]. See [2] for the reasons behind the changes. [1] https://tools.ietf.org/html/draft-irtf-cfrg-gcmsiv-04 [2] https://www.ietf.org/mail-archive/web/cfrg/current/msg08895.html Change-Id: Icacfefbd2f470186051551ea227c9d6c6dd6e786 Reviewed-on: https://boringssl-review.googlesource.com/13973 Reviewed-by: Adam Langley <alangley@gmail.com> Commit-Queue: Adam Langley <alangley@gmail.com> CQ-Verified: CQ bot account: commit-bot@chromium.org <commit-bot@chromium.org>
2017-02-24 00:40:26 +00:00
NONCE: 030000000000000000000000
Add generic AES-GCM-SIV support. AES-GCM-SIV is an AEAD with nonce-misuse resistance. It can reuse hardware support for AES-GCM and thus encrypt at ~66% the speed, and decrypt at 100% the speed, of AES-GCM. See https://tools.ietf.org/html/draft-irtf-cfrg-gcmsiv-02 This implementation is generic, not optimised, and reuses existing AES and GHASH support as much as possible. It is guarded by !OPENSSL_SMALL, at least for now. Change-Id: Ia9f77b256ef5dfb8588bb9ecfe6ee0e827626f57 Reviewed-on: https://boringssl-review.googlesource.com/12541 Reviewed-by: Adam Langley <agl@google.com> Commit-Queue: Adam Langley <agl@google.com> CQ-Verified: CQ bot account: commit-bot@chromium.org <commit-bot@chromium.org>
2016-12-01 16:24:24 +00:00
IN: 02000000
AD: 010000000000000000000000
Update AES-GCM-SIV to match revision four of the draft. This change updates AES-GCM-SIV to match revision four of the draft[1]. See [2] for the reasons behind the changes. [1] https://tools.ietf.org/html/draft-irtf-cfrg-gcmsiv-04 [2] https://www.ietf.org/mail-archive/web/cfrg/current/msg08895.html Change-Id: Icacfefbd2f470186051551ea227c9d6c6dd6e786 Reviewed-on: https://boringssl-review.googlesource.com/13973 Reviewed-by: Adam Langley <alangley@gmail.com> Commit-Queue: Adam Langley <alangley@gmail.com> CQ-Verified: CQ bot account: commit-bot@chromium.org <commit-bot@chromium.org>
2017-02-24 00:40:26 +00:00
CT: 22b3f4cd
TAG: 1835e517741dfddccfa07fa4661b74cf
Add generic AES-GCM-SIV support. AES-GCM-SIV is an AEAD with nonce-misuse resistance. It can reuse hardware support for AES-GCM and thus encrypt at ~66% the speed, and decrypt at 100% the speed, of AES-GCM. See https://tools.ietf.org/html/draft-irtf-cfrg-gcmsiv-02 This implementation is generic, not optimised, and reuses existing AES and GHASH support as much as possible. It is guarded by !OPENSSL_SMALL, at least for now. Change-Id: Ia9f77b256ef5dfb8588bb9ecfe6ee0e827626f57 Reviewed-on: https://boringssl-review.googlesource.com/12541 Reviewed-by: Adam Langley <agl@google.com> Commit-Queue: Adam Langley <agl@google.com> CQ-Verified: CQ bot account: commit-bot@chromium.org <commit-bot@chromium.org>
2016-12-01 16:24:24 +00:00
KEY: 0100000000000000000000000000000000000000000000000000000000000000
Update AES-GCM-SIV to match revision four of the draft. This change updates AES-GCM-SIV to match revision four of the draft[1]. See [2] for the reasons behind the changes. [1] https://tools.ietf.org/html/draft-irtf-cfrg-gcmsiv-04 [2] https://www.ietf.org/mail-archive/web/cfrg/current/msg08895.html Change-Id: Icacfefbd2f470186051551ea227c9d6c6dd6e786 Reviewed-on: https://boringssl-review.googlesource.com/13973 Reviewed-by: Adam Langley <alangley@gmail.com> Commit-Queue: Adam Langley <alangley@gmail.com> CQ-Verified: CQ bot account: commit-bot@chromium.org <commit-bot@chromium.org>
2017-02-24 00:40:26 +00:00
NONCE: 030000000000000000000000
Add generic AES-GCM-SIV support. AES-GCM-SIV is an AEAD with nonce-misuse resistance. It can reuse hardware support for AES-GCM and thus encrypt at ~66% the speed, and decrypt at 100% the speed, of AES-GCM. See https://tools.ietf.org/html/draft-irtf-cfrg-gcmsiv-02 This implementation is generic, not optimised, and reuses existing AES and GHASH support as much as possible. It is guarded by !OPENSSL_SMALL, at least for now. Change-Id: Ia9f77b256ef5dfb8588bb9ecfe6ee0e827626f57 Reviewed-on: https://boringssl-review.googlesource.com/12541 Reviewed-by: Adam Langley <agl@google.com> Commit-Queue: Adam Langley <agl@google.com> CQ-Verified: CQ bot account: commit-bot@chromium.org <commit-bot@chromium.org>
2016-12-01 16:24:24 +00:00
IN: 0300000000000000000000000000000004000000
AD: 010000000000000000000000000000000200
Update AES-GCM-SIV to match revision four of the draft. This change updates AES-GCM-SIV to match revision four of the draft[1]. See [2] for the reasons behind the changes. [1] https://tools.ietf.org/html/draft-irtf-cfrg-gcmsiv-04 [2] https://www.ietf.org/mail-archive/web/cfrg/current/msg08895.html Change-Id: Icacfefbd2f470186051551ea227c9d6c6dd6e786 Reviewed-on: https://boringssl-review.googlesource.com/13973 Reviewed-by: Adam Langley <alangley@gmail.com> Commit-Queue: Adam Langley <alangley@gmail.com> CQ-Verified: CQ bot account: commit-bot@chromium.org <commit-bot@chromium.org>
2017-02-24 00:40:26 +00:00
CT: 43dd0163cdb48f9fe3212bf61b201976067f342b
TAG: b879ad976d8242acc188ab59cabfe307
Add generic AES-GCM-SIV support. AES-GCM-SIV is an AEAD with nonce-misuse resistance. It can reuse hardware support for AES-GCM and thus encrypt at ~66% the speed, and decrypt at 100% the speed, of AES-GCM. See https://tools.ietf.org/html/draft-irtf-cfrg-gcmsiv-02 This implementation is generic, not optimised, and reuses existing AES and GHASH support as much as possible. It is guarded by !OPENSSL_SMALL, at least for now. Change-Id: Ia9f77b256ef5dfb8588bb9ecfe6ee0e827626f57 Reviewed-on: https://boringssl-review.googlesource.com/12541 Reviewed-by: Adam Langley <agl@google.com> Commit-Queue: Adam Langley <agl@google.com> CQ-Verified: CQ bot account: commit-bot@chromium.org <commit-bot@chromium.org>
2016-12-01 16:24:24 +00:00
KEY: 0100000000000000000000000000000000000000000000000000000000000000
Update AES-GCM-SIV to match revision four of the draft. This change updates AES-GCM-SIV to match revision four of the draft[1]. See [2] for the reasons behind the changes. [1] https://tools.ietf.org/html/draft-irtf-cfrg-gcmsiv-04 [2] https://www.ietf.org/mail-archive/web/cfrg/current/msg08895.html Change-Id: Icacfefbd2f470186051551ea227c9d6c6dd6e786 Reviewed-on: https://boringssl-review.googlesource.com/13973 Reviewed-by: Adam Langley <alangley@gmail.com> Commit-Queue: Adam Langley <alangley@gmail.com> CQ-Verified: CQ bot account: commit-bot@chromium.org <commit-bot@chromium.org>
2017-02-24 00:40:26 +00:00
NONCE: 030000000000000000000000
Add generic AES-GCM-SIV support. AES-GCM-SIV is an AEAD with nonce-misuse resistance. It can reuse hardware support for AES-GCM and thus encrypt at ~66% the speed, and decrypt at 100% the speed, of AES-GCM. See https://tools.ietf.org/html/draft-irtf-cfrg-gcmsiv-02 This implementation is generic, not optimised, and reuses existing AES and GHASH support as much as possible. It is guarded by !OPENSSL_SMALL, at least for now. Change-Id: Ia9f77b256ef5dfb8588bb9ecfe6ee0e827626f57 Reviewed-on: https://boringssl-review.googlesource.com/12541 Reviewed-by: Adam Langley <agl@google.com> Commit-Queue: Adam Langley <agl@google.com> CQ-Verified: CQ bot account: commit-bot@chromium.org <commit-bot@chromium.org>
2016-12-01 16:24:24 +00:00
IN: 030000000000000000000000000000000400
AD: 0100000000000000000000000000000002000000
Update AES-GCM-SIV to match revision four of the draft. This change updates AES-GCM-SIV to match revision four of the draft[1]. See [2] for the reasons behind the changes. [1] https://tools.ietf.org/html/draft-irtf-cfrg-gcmsiv-04 [2] https://www.ietf.org/mail-archive/web/cfrg/current/msg08895.html Change-Id: Icacfefbd2f470186051551ea227c9d6c6dd6e786 Reviewed-on: https://boringssl-review.googlesource.com/13973 Reviewed-by: Adam Langley <alangley@gmail.com> Commit-Queue: Adam Langley <alangley@gmail.com> CQ-Verified: CQ bot account: commit-bot@chromium.org <commit-bot@chromium.org>
2017-02-24 00:40:26 +00:00
CT: 462401724b5ce6588d5a54aae5375513a075
TAG: cfcdf5042112aa29685c912fc2056543
Fix AES-GCM-SIV on large inputs. This was noticed by observing we had one line of missing test coverage in polyval.c. CRYPTO_POLYVAL_update_blocks acts 32 blocks at a time and all existing test vectors are smaller than that. Test vector obtained by just picking random values and seeing what our existing implementation did if I modified CRYPTO_POLYVAL_update_blocks to consume many more blocks at a time. Then I fixed the bug and ensured the answer was still the same. Change-Id: Ib7002dbc10952229ff42a17132c30d0e290d4be5 Reviewed-on: https://boringssl-review.googlesource.com/13041 Commit-Queue: David Benjamin <davidben@google.com> Reviewed-by: Adam Langley <agl@google.com>
2016-12-23 04:10:37 +00:00
# Sample large random test vector.
Update AES-GCM-SIV to match revision four of the draft. This change updates AES-GCM-SIV to match revision four of the draft[1]. See [2] for the reasons behind the changes. [1] https://tools.ietf.org/html/draft-irtf-cfrg-gcmsiv-04 [2] https://www.ietf.org/mail-archive/web/cfrg/current/msg08895.html Change-Id: Icacfefbd2f470186051551ea227c9d6c6dd6e786 Reviewed-on: https://boringssl-review.googlesource.com/13973 Reviewed-by: Adam Langley <alangley@gmail.com> Commit-Queue: Adam Langley <alangley@gmail.com> CQ-Verified: CQ bot account: commit-bot@chromium.org <commit-bot@chromium.org>
2017-02-24 00:40:26 +00:00
KEY: 9f646d6337565c689c9ec7627ad95c26a2df7d3a36fba9f1265c607458bbb1b6
NONCE: 336bb4bb0c03e8c87efe3b5b
IN: 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
AD: 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
CT: 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
TAG: f2d188b9ec069b81793a841cfdcd1f88
Reference in New Issue Copy Permalink