David Benjamin d8a268261d Simplify rotate_offset computation in EVP_tls_cbc_copy_mac. ... Rather than Barrett reduction, we can just sample rotate_offset at the point where we save the first byte of the MAC. Thanks to Andy Polyakov for the idea in https://github.com/openssl/openssl/pull/1027#issuecomment-263218179 Change-Id: If3a7c2d176406fc332ac512648e6f5ef4dc8b7e5 Reviewed-on: https://boringssl-review.googlesource.com/12475 Commit-Queue: David Benjamin <davidben@google.com> Reviewed-by: Adam Langley <agl@google.com>		2016-12-01 22:02:03 +00:00
..
test	Replace keywrap AEADs with upstream's APIs.	2016-10-04 01:37:31 +00:00
aead_test.cc	Replace keywrap AEADs with upstream's APIs.	2016-10-04 01:37:31 +00:00
aead.c	Add EVP_AEAD_CTX_aead.	2016-09-17 01:06:40 +00:00
cipher_test.cc	Fold stack-allocated types into headers.	2016-09-07 21:50:05 +00:00
cipher.c	Fix encrypt overflow	2016-05-03 16:43:12 +00:00
CMakeLists.txt	Add a run_tests target to run all tests.	2015-10-26 20:33:44 +00:00
derive_key.c	Inital import.	2014-06-20 13:17:32 -07:00
e_aes.c	Replace keywrap AEADs with upstream's APIs.	2016-10-04 01:37:31 +00:00
e_chacha20poly1305.c	Remove RC4 from TLS for real.	2016-09-16 03:06:36 +00:00
e_des.c	Use C99 for size_t loops.	2016-09-12 19:44:24 +00:00
e_null.c	Remove some easy obj.h dependencies.	2016-03-31 20:50:33 +00:00
e_rc2.c	Fix up macros.	2016-10-18 18:28:23 +00:00
e_rc4.c	Remove some easy obj.h dependencies.	2016-03-31 20:50:33 +00:00
e_ssl3.c	Remove RC4 from TLS for real.	2016-09-16 03:06:36 +00:00
e_tls.c	Clarify the scope & initialization of |data_len| in |aead_tls_open|.	2016-10-28 16:44:39 +00:00
internal.h	Remove RC4 from TLS for real.	2016-09-16 03:06:36 +00:00
tls_cbc.c	Simplify rotate_offset computation in EVP_tls_cbc_copy_mac.	2016-12-01 22:02:03 +00:00