internal-drysponge.h

Go to the documentation of this file.

/*
 * Copyright (C) 2020 Southern Storm Software, Pty Ltd.
 *
 * Permission is hereby granted, free of charge, to any person obtaining a
 * copy of this software and associated documentation files (the "Software"),
 * to deal in the Software without restriction, including without limitation
 * the rights to use, copy, modify, merge, publish, distribute, sublicense,
 * and/or sell copies of the Software, and to permit persons to whom the
 * Software is furnished to do so, subject to the following conditions:
 *
 * The above copyright notice and this permission notice shall be included
 * in all copies or substantial portions of the Software.
 *
 * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS
 * OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
 * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
 * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
 * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
 * FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER
 * DEALINGS IN THE SOFTWARE.
 */

#ifndef LW_INTERNAL_DRYSPONGE_H
#define LW_INTERNAL_DRYSPONGE_H

#include "drygascon.h"
#include "drygascon128_arm_selector.h"

#include "internal-util.h"

#ifdef __cplusplus
extern "C" {
#endif

#define GASCON128_STATE_SIZE 40

#define GASCON256_STATE_SIZE 72

#define DRYSPONGE128_RATE 16

#define DRYSPONGE256_RATE 16

#define DRYSPONGE128_XSIZE 16

#define DRYSPONGE256_XSIZE 16

#define DRYSPONGE128_ROUNDS 7

#define DRYSPONGE128_INIT_ROUNDS 11

#define DRYSPONGE256_ROUNDS 8

#define DRYSPONGE256_INIT_ROUNDS 12

#ifdef DRYGASCON_F_OPT

    #define DRYDOMAIN128_PADDED (1 << 0)

    #define DRYDOMAIN128_FINAL (1 << 1)

    #define DRYDOMAIN128_NONCE (1 << 2)

    #define DRYDOMAIN128_ASSOC_DATA (2 << 2)

    #define DRYDOMAIN128_MESSAGE (3 << 2)

#else

    #define DRYDOMAIN128_PADDED (1 << 8)

    #define DRYDOMAIN128_FINAL (1 << 9)

    #define DRYDOMAIN128_NONCE (1 << 10)

    #define DRYDOMAIN128_ASSOC_DATA (2 << 10)


    #define DRYDOMAIN128_MESSAGE (3 << 10)

#endif


#define DRYDOMAIN256_PADDED (1 << 2)

#define DRYDOMAIN256_FINAL (1 << 3)

#define DRYDOMAIN256_NONCE (1 << 4)

#define DRYDOMAIN256_ASSOC_DATA (2 << 4)

#define DRYDOMAIN256_MESSAGE (3 << 4)

typedef union
{
    uint64_t S[GASCON128_STATE_SIZE / 8];   
    uint32_t W[GASCON128_STATE_SIZE / 4];   
    uint8_t B[GASCON128_STATE_SIZE];        
} gascon128_state_t;

typedef union
{
    uint64_t S[GASCON256_STATE_SIZE / 8];   
    uint32_t W[GASCON256_STATE_SIZE / 4];   
    uint8_t B[GASCON256_STATE_SIZE];        
} gascon256_state_t;

typedef union
{
    uint64_t S[DRYSPONGE128_RATE / 8];      
    uint32_t W[DRYSPONGE128_RATE / 4];      
    uint8_t B[DRYSPONGE128_RATE];           
} drysponge128_rate_t;

typedef union
{
    uint64_t S[DRYSPONGE256_RATE / 8];  
    uint32_t W[DRYSPONGE256_RATE / 4];  
    uint8_t B[DRYSPONGE256_RATE];       
} drysponge256_rate_t;

typedef union
{
    uint64_t S[DRYSPONGE128_XSIZE / 8]; 
    uint32_t W[DRYSPONGE128_XSIZE / 4]; 
    uint8_t B[DRYSPONGE128_XSIZE];      
} __attribute__((aligned(16))) drysponge128_x_t;

typedef union
{
    uint64_t S[DRYSPONGE256_XSIZE / 8]; 
    uint32_t W[DRYSPONGE256_XSIZE / 4]; 
    uint8_t B[DRYSPONGE256_XSIZE];      
} drysponge256_x_t;

typedef struct
{
    gascon128_state_t c;        
    uint32_t domain;            
    uint32_t rounds;            
    drysponge128_rate_t r;      
    drysponge128_x_t x;         
} __attribute__((aligned(16))) drysponge128_state_t;

typedef struct
{
    gascon256_state_t c;        
    drysponge256_rate_t r;      
    drysponge256_x_t x;         
    uint32_t domain;            
    uint32_t rounds;            
} drysponge256_state_t;

void gascon128_core_round(gascon128_state_t *state, uint8_t round);

void gascon256_core_round(gascon256_state_t *state, uint8_t round);

void drysponge128_g(drysponge128_state_t *state);

void drysponge256_g(drysponge256_state_t *state);

void drysponge128_g_core(drysponge128_state_t *state);

void drysponge256_g_core(drysponge256_state_t *state);

void drysponge256_f_absorb
    (drysponge256_state_t *state, const unsigned char *input, unsigned len);

void drygascon128_f_wrap
    (drysponge128_state_t *state, const unsigned char *input, unsigned len);

int drysponge128_safe_alignement(const drysponge128_state_t*state);

void drysponge128_setup
    (drysponge128_state_t *state, const unsigned char *key, unsigned int keysize,
     const unsigned char *nonce, int final_block);

void drysponge256_setup
    (drysponge256_state_t *state, const unsigned char *key,
     const unsigned char *nonce, int final_block);

#ifdef __cplusplus
}
#endif

#endif