yuzu/mbedtls
1
0
Fork 0
mirror of https://github.com/yuzu-emu/mbedtls.git synced 2025-06-19 20:47:57 +00:00
Code Issues Packages Projects Releases Wiki Activity

Allow AEAD update output to be delayed

Browse source 
Do not require finish() to have empty output for any algorithm. Some
hardware does not support immediate stream processing.
This commit is contained in:
Gilles Peskine 2019-05-06 15:42:54 +02:00
parent 26869f2d9b
commit f02aec90dc
1 changed files with 9 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

12
include/psa/crypto.h
View file

@ -2495,6 +2495,14 @@ psa_status_t psa_aead_update_ad(psa_aead_operation_t *operation,
* - In particular, do not copy the output anywhere but to a * - In particular, do not copy the output anywhere but to a
* memory or storage space that you have exclusive access to. * memory or storage space that you have exclusive access to.
* *
* This function does not require the input to be aligned to any
* particular block boundary. If the implementation can only process
* a whole block at a time, it must store the last partial input block
* or adjust its internal state accordingly until the next call to
* psa_aead_update(), psa_aead_finish() or psa_aead_verify(), and produce
* the corresponding output when sufficient input is available or on the
* finish or verify call.
*
* \param[in,out] operation Active AEAD operation. * \param[in,out] operation Active AEAD operation.
* \param[in] input Buffer containing the message fragment to * \param[in] input Buffer containing the message fragment to
* encrypt or decrypt. * encrypt or decrypt.
@ -2548,9 +2556,7 @@ psa_status_t psa_aead_update(psa_aead_operation_t *operation,
* *
* This function has two output buffers: * This function has two output buffers:
* - \p ciphertext contains trailing ciphertext that was buffered from * - \p ciphertext contains trailing ciphertext that was buffered from
* preceding calls to psa_aead_update(). For all standard AEAD algorithms, * preceding calls to psa_aead_update().
* psa_aead_update() does not buffer any output and therefore \p ciphertext
* will not contain any output and can be a 0-sized buffer.
* - \p tag contains the authentication tag. Its length is always * - \p tag contains the authentication tag. Its length is always
* #PSA_AEAD_TAG_LENGTH(\c alg) where \c alg is the AEAD algorithm * #PSA_AEAD_TAG_LENGTH(\c alg) where \c alg is the AEAD algorithm
* that the operation performs. * that the operation performs.