ascon-aead-inc-80pq.c

Go to the documentation of this file.

/*
 * Copyright (C) 2022 Southern Storm Software, Pty Ltd.
 *
 * Permission is hereby granted, free of charge, to any person obtaining a
 * copy of this software and associated documentation files (the "Software"),
 * to deal in the Software without restriction, including without limitation
 * the rights to use, copy, modify, merge, publish, distribute, sublicense,
 * and/or sell copies of the Software, and to permit persons to whom the
 * Software is furnished to do so, subject to the following conditions:
 *
 * The above copyright notice and this permission notice shall be included
 * in all copies or substantial portions of the Software.
 *
 * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS
 * OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
 * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
 * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
 * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
 * FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER
 * DEALINGS IN THE SOFTWARE.
 */
 
#include "aead/ascon-aead-common.h"
#include "core/ascon-util-snp.h"
#include <string.h>
 
/* Initialization vector for ASCON-80pq */
static uint8_t const ASCON80PQ_IV[4] = {0xa0, 0x40, 0x0c, 0x06};
 
void ascon80pq_aead_start
    (ascon80pq_state_t *state, const unsigned char *ad, size_t adlen,
     const unsigned char *npub, const unsigned char *k)
{
    /* Initialize the ASCON state */
    memcpy(state->key, k, ASCON80PQ_KEY_SIZE);
    ascon_init(&(state->state));
    ascon_overwrite_bytes(&(state->state), ASCON80PQ_IV, 0, 4);
    ascon_overwrite_bytes(&(state->state), state->key, 4, ASCON80PQ_KEY_SIZE);
    ascon_overwrite_bytes(&(state->state), npub, 24, ASCON80PQ_NONCE_SIZE);
    ascon_permute(&(state->state), 0);
    ascon_absorb_partial(&(state->state), state->key, 20, ASCON80PQ_KEY_SIZE);
 
    /* Absorb the associated data into the state */
    if (adlen > 0)
        ascon_aead_absorb_8(&(state->state), ad, adlen, 6, 1);
 
    /* Separator between the associated data and the payload */
    ascon_separator(&(state->state));
 
    /* Prepare for encryption or decryption */
    ascon_release(&(state->state));
    state->posn = 0;
}
 
void ascon80pq_aead_abort(ascon80pq_state_t *state)
{
    if (state) {
        ascon_acquire(&(state->state));
        ascon_free(&(state->state));
        ascon_clean(state, sizeof(ascon80pq_state_t));
    }
}
 
void ascon80pq_aead_encrypt_block
    (ascon80pq_state_t *state, const unsigned char *in,
     unsigned char *out, size_t len)
{
    ascon_acquire(&(state->state));
    state->posn = ascon_aead_encrypt_8
        (&(state->state), out, in, len, 6, state->posn);
    ascon_release(&(state->state));
}
 
void ascon80pq_aead_encrypt_finalize
    (ascon80pq_state_t *state, unsigned char *tag)
{
    /* Pad the final plaintext block */
    ascon_acquire(&(state->state));
    ascon_pad(&(state->state), state->posn);
 
    /* Finalize and compute the authentication tag */
    ascon_absorb_partial(&(state->state), state->key, 8, ASCON80PQ_KEY_SIZE);
    ascon_permute(&(state->state), 0);
    ascon_absorb_16(&(state->state), state->key + 4, 24);
    ascon_squeeze_16(&(state->state), tag, 24);
 
    /* Clean up */
    ascon_free(&(state->state));
    ascon_clean(state, sizeof(ascon80pq_state_t));
}
 
void ascon80pq_aead_decrypt_block
    (ascon80pq_state_t *state, const unsigned char *in,
     unsigned char *out, size_t len)
{
    ascon_acquire(&(state->state));
    state->posn = ascon_aead_decrypt_8
        (&(state->state), out, in, len, 6, state->posn);
    ascon_release(&(state->state));
}
 
int ascon80pq_aead_decrypt_finalize
    (ascon80pq_state_t *state, const unsigned char *tag)
{
    unsigned char tag2[ASCON80PQ_TAG_SIZE];
    int result;
 
    /* Pad the final ciphertext block */
    ascon_acquire(&(state->state));
    ascon_pad(&(state->state), state->posn);
 
    /* Finalize and check the authentication tag */
    ascon_absorb_partial(&(state->state), state->key, 8, ASCON80PQ_KEY_SIZE);
    ascon_permute(&(state->state), 0);
    ascon_absorb_16(&(state->state), state->key + 4, 24);
    ascon_squeeze_16(&(state->state), tag2, 24);
    result = ascon_aead_check_tag(0, 0, tag2, tag, ASCON80PQ_TAG_SIZE);
 
    /* Clean up */
    ascon_clean(tag2, sizeof(tag2));
    ascon_free(&(state->state));
    ascon_clean(state, sizeof(ascon80pq_state_t));
    return result;
}