isap-k-aead.h File Reference

ISAP authenticated encryption algorithm. More...

#include <stddef.h>

Go to the source code of this file.

Macros
#define	ISAP_K_KEY_SIZE   16
	Size of the key for all ISAP-K family members.
#define	ISAP_K_TAG_SIZE   16
	Size of the authentication tag for all ISAP-K family members.
#define	ISAP_K_NONCE_SIZE   16
	Size of the nonce for all ISAP-K family members.

Functions
int	isap_keccak_128a_aead_encrypt (unsigned char *c, size_t *clen, const unsigned char *m, size_t mlen, const unsigned char *ad, size_t adlen, const unsigned char *npub, const unsigned char *k)
	Encrypts and authenticates a packet with ISAP-K-128A. More...
int	isap_keccak_128a_aead_decrypt (unsigned char *m, size_t *mlen, const unsigned char *c, size_t clen, const unsigned char *ad, size_t adlen, const unsigned char *npub, const unsigned char *k)
	Decrypts and authenticates a packet with ISAP-K-128A. More...
int	isap_keccak_128_aead_encrypt (unsigned char *c, size_t *clen, const unsigned char *m, size_t mlen, const unsigned char *ad, size_t adlen, const unsigned char *npub, const unsigned char *k)
	Encrypts and authenticates a packet with ISAP-K-128. More...
int	isap_keccak_128_aead_decrypt (unsigned char *m, size_t *mlen, const unsigned char *c, size_t clen, const unsigned char *ad, size_t adlen, const unsigned char *npub, const unsigned char *k)
	Decrypts and authenticates a packet with ISAP-K-128. More...

Detailed Description

ISAP authenticated encryption algorithm.

ISAP is a family of authenticated encryption algorithms that are built around the Keccak-p[400] or ASCON permutations. This API implements the versions that are built around Keccak-p[400]: ISAP-K-128 and ISAP-K-128A.

ISAP is designed to provide some protection against adversaries using differential power analysis to determine the key. The downside is that key setup is very slow.

References: https://isap.iaik.tugraz.at/

Function Documentation

int isap_keccak_128_aead_decrypt	(	unsigned char *	m,
		size_t *	mlen,
		const unsigned char *	c,
		size_t	clen,
		const unsigned char *	ad,
		size_t	adlen,
		const unsigned char *	npub,
		const unsigned char *	k
	)

Decrypts and authenticates a packet with ISAP-K-128.

Parameters

m	Buffer to receive the plaintext message on output.
mlen	Receives the length of the plaintext message on output.
c	Buffer that contains the ciphertext and authentication tag to decrypt.
clen	Length of the input data in bytes, which includes the ciphertext and the 16 byte authentication tag.
ad	Buffer that contains associated data to authenticate along with the packet but which does not need to be encrypted.
adlen	Length of the associated data in bytes.
npub	Points to the public nonce for the packet which must be 16 bytes in length.
k	Points to the 16 bytes of the key to use to decrypt the packet.

Returns

0 on success, -1 if the authentication tag was incorrect, or some other negative number if there was an error in the parameters.

See Also

isap_keccak_128_aead_encrypt()

int isap_keccak_128_aead_encrypt	(	unsigned char *	c,
		size_t *	clen,
		const unsigned char *	m,
		size_t	mlen,
		const unsigned char *	ad,
		size_t	adlen,
		const unsigned char *	npub,
		const unsigned char *	k
	)

Encrypts and authenticates a packet with ISAP-K-128.

Parameters

c	Buffer to receive the output.
clen	On exit, set to the length of the output which includes the ciphertext and the 16 byte authentication tag.
m	Buffer that contains the plaintext message to encrypt.
mlen	Length of the plaintext message in bytes.
ad	Buffer that contains associated data to authenticate along with the packet but which does not need to be encrypted.
adlen	Length of the associated data in bytes.
npub	Points to the public nonce for the packet which must be 16 bytes in length.
k	Points to the 16 bytes of the key to use to encrypt the packet.

Returns

0 on success, or a negative value if there was an error in the parameters.

See Also

isap_keccak_128_aead_decrypt()

int isap_keccak_128a_aead_decrypt	(	unsigned char *	m,
		size_t *	mlen,
		const unsigned char *	c,
		size_t	clen,
		const unsigned char *	ad,
		size_t	adlen,
		const unsigned char *	npub,
		const unsigned char *	k
	)

Decrypts and authenticates a packet with ISAP-K-128A.

Parameters

m	Buffer to receive the plaintext message on output.
mlen	Receives the length of the plaintext message on output.
c	Buffer that contains the ciphertext and authentication tag to decrypt.
clen	Length of the input data in bytes, which includes the ciphertext and the 16 byte authentication tag.
ad	Buffer that contains associated data to authenticate along with the packet but which does not need to be encrypted.
adlen	Length of the associated data in bytes.
npub	Points to the public nonce for the packet which must be 16 bytes in length.
k	Points to the 16 bytes of the key to use to decrypt the packet.

Returns

0 on success, -1 if the authentication tag was incorrect, or some other negative number if there was an error in the parameters.

See Also

isap_keccak_128a_aead_encrypt()

int isap_keccak_128a_aead_encrypt	(	unsigned char *	c,
		size_t *	clen,
		const unsigned char *	m,
		size_t	mlen,
		const unsigned char *	ad,
		size_t	adlen,
		const unsigned char *	npub,
		const unsigned char *	k
	)

Encrypts and authenticates a packet with ISAP-K-128A.

Parameters

c	Buffer to receive the output.
clen	On exit, set to the length of the output which includes the ciphertext and the 16 byte authentication tag.
m	Buffer that contains the plaintext message to encrypt.
mlen	Length of the plaintext message in bytes.
ad	Buffer that contains associated data to authenticate along with the packet but which does not need to be encrypted.
adlen	Length of the associated data in bytes.
npub	Points to the public nonce for the packet which must be 16 bytes in length.
k	Points to the 16 bytes of the key to use to encrypt the packet.

Returns

0 on success, or a negative value if there was an error in the parameters.

See Also

isap_keccak_128a_aead_decrypt()