57 commits

Author	SHA1	Message	Date
Manuel Pégourié-Gonnard	475f06f609	cmac: make subkey gen more constant-time ... The previous version had secret-dependent memory accesses. While it was probably not an issue in practice cause the two bytes of the array are probably on the same cache line anyway, as a matter of principle this should be avoided.	2016-10-05 14:19:14 +01:00
Manuel Pégourié-Gonnard	d6cf75474b	cmac: zeroize sensitive intermediate values	2016-10-05 14:19:14 +01:00
Manuel Pégourié-Gonnard	a610b4c04b	cmac: factor multiply by u to its own function ... We're doing exactly the same operation for K1 and K2.	2016-10-05 14:19:14 +01:00
Manuel Pégourié-Gonnard	3da5402a89	cmac: fix whitespace/codingstyle issues	2016-10-05 14:19:14 +01:00
Manuel Pégourié-Gonnard	690083c21d	cmac: improve argument order and naming ... - always use the pattern "buffer, length" - avoid using unqualified "length" as a name when there are more than one	2016-10-05 14:19:14 +01:00
Robert Cragie	3d23b1d5ed	Line endings wrong	2016-10-05 14:19:14 +01:00
Robert Cragie	dc5c7b98ac	Add support for AES-128-CMAC and AES-CMAC-PRF-128	2016-10-05 14:19:13 +01:00