(main): Made the OPT_* constants local, and
fixed numerical values to start with non-ASCII 0x300.

Rev: nettle/tools/pkcs1-conv.c:1.5

Contributed by Daniel Kahn Gillmor:
* testsuite/Makefile.in (TS_NETTLE_SOURCES): Added
meta-hash-test.c, meta-cipher-test.c, and meta-armor-test.c.

* testsuite/meta-hash-test.c: New file.
* testsuite/meta-cipher-test.c: New file.
* testsuite/meta-armor-test.c: New file.

Rev: nettle/testsuite/.test-rules.make:1.10
Rev: nettle/testsuite/Makefile.in:1.13
Rev: nettle/testsuite/meta-armor-test.c:1.1
Rev: nettle/testsuite/meta-cipher-test.c:1.1
Rev: nettle/testsuite/meta-hash-test.c:1.1

Contributed by Daniel Kahn Gillmor:
* testsuite/Makefile.in (TS_NETTLE_SOURCES): Added
meta-hash-test.c, meta-cipher-test.c, and meta-armor-test.c.

* nettle.texinfo: Document nettle_hashes and nettle_ciphers.

* nettle-meta.h: Declare algorithm lists nettle_ciphers,
nettle_hashes, nettle_armors.

* Makefile.in (nettle_SOURCES): Added nettle-meta-hashes.c,
nettle-meta-ciphers.c, and nettle-meta-armors.c.

* nettle-meta-armors.c: New file.
* nettle-meta-ciphers.c: New file.
* nettle-meta-hashes.c: New file.

Rev: nettle/ChangeLog:1.159
Rev: nettle/Makefile.in:1.32
Rev: nettle/nettle-meta-armors.c:1.1
Rev: nettle/nettle-meta-ciphers.c:1.1
Rev: nettle/nettle-meta-hashes.c:1.1
Rev: nettle/nettle-meta.h:1.10
Rev: nettle/nettle.texinfo:1.22

Fixed typo, spotted by Daniel Kahn Gillmor.

Rev: nettle/nettle.texinfo:1.21

(Cipher functions): Deleted duplicated entries for arctwo.

Rev: nettle/nettle.texinfo:1.20

Added link for CBC information leakage.

Rev: nettle/nettle.texinfo:1.19

(arcfour_stream): Deleted function. It's not very useful, and neither
documented nor tested.

Rev: nettle/ChangeLog:1.158
Rev: nettle/arcfour.c:1.2

*** empty log message ***

Rev: nettle/ChangeLog:1.157

Fleshed out section on gcm.

Rev: nettle/nettle.texinfo:1.18

(CBC_ENCRYPT): Avoid using NULL; we don't ensure that it
is defined.
(CBC_DECRYPT): Likewise.

Rev: nettle/cbc.h:1.3

* gcm-aes.c (gcm_aes_set_iv): Use GCM_SET_IV.
(gcm_aes_set_key): Deleted cast.
(gcm_aes_encrypt): Likewise.
(gcm_aes_decrypt): Likewise.
(gcm_aes_digest): Likewise.
(gcm_aes_update): One less argument to GCM_UPDATE.

* gcm.h (GCM_SET_KEY): Added cast to nettle_crypt_func *. Help
compiler type checking despite this cast.
(GCM_ENCRYPT): Likewise.
(GCM_DECRYPT): Likewise.
(GCM_DIGEST): Likewise.
(GCM_SET_IV): New macro, for completeness.
(GCM_UPDATE): Deleted unused argument encrypt.

Rev: nettle/ChangeLog:1.156
Rev: nettle/gcm-aes.c:1.4
Rev: nettle/gcm.h:1.12

*** empty log message ***

Rev: nettle/ChangeLog:1.155

Split node on cipher modes, and started on the GCM documentation.

Rev: nettle/nettle.texinfo:1.17

*** empty log message ***

Rev: nettle/ChangeLog:1.154

* testsuite/gcm-test.c (test_gcm_aes): Deleted function, replaced
by test_aead.
(test_main): Use test_aead.

Rev: nettle/testsuite/gcm-test.c:1.8

(test_aead): New function, replacing
test_gcm_aes and before that test_cipher_gcm.

Rev: nettle/testsuite/testutils.c:1.14
Rev: nettle/testsuite/testutils.h:1.8

* nettle-internal.c (nettle_gcm_aes128): New const struct.
(nettle_gcm_aes192): Likewise.
(nettle_gcm_aes256): Likewise.

Rev: nettle/nettle-internal.c:1.4

(struct nettle_aead): Tentative interface for
authenticated encryption with associated data.

Rev: nettle/nettle-internal.h:1.3

*** empty log message ***

Rev: nettle/ChangeLog:1.153

(time_gcm): Renamed. Updated for gcm_aes_auth to gcm_aes_update
renaming. Benchmark both encryption and hashing.
(time_gmac): ...old name.

Rev: nettle/examples/nettle-benchmark.c:1.20

Renamed some macro arguments.

Rev: nettle/nettle-meta.h:1.9

*** empty log message ***

Rev: nettle/ChangeLog:1.152

(des_set_key_hack): Don't touch the bits
parity, since thay are now ignored.
(des3_set_key_hack): Likewise.

Rev: nettle/nettle-internal.c:1.3

* cast128-meta.c (nettle_cast128): Don't pass keysize.
* nettle-meta.h (_NETTLE_CIPHER_FIX): Deleted keysize parameter
derived from the appropriate constant instead.

Rev: nettle/cast128-meta.c:1.2

(_NETTLE_CIPHER_FIX): Deleted keysize parameter.

Rev: nettle/nettle-meta.h:1.8

*** empty log message ***

Rev: nettle/ChangeLog:1.151

(test_gcm_aes): Updated for gcm_aes_auth to gcm_aes_update renaming.

Rev: nettle/testsuite/gcm-test.c:1.7

* gcm.h (GCM_UPDATE): Renamed, from...
(GCM_AUTH): ...old name.

* gcm-aes.c (gcm_aes_update): Renamed, from...
(gcm_aes_auth): ...old name.

* gcm.c (gcm_update): Renamed, and fixed an assert. From...
(gcm_auth): ...old name.

Rev: nettle/ChangeLog:1.150
Rev: nettle/gcm-aes.c:1.3
Rev: nettle/gcm.c:1.14
Rev: nettle/gcm.h:1.11

(GCM_TABLE_BITS): Increase table size to 8 bits,
corresponding to 4 KByte of key-dependent tables.

Rev: nettle/gcm.h:1.10

Spelling fix.

Rev: nettle/memxor.c:1.4

Added more test cases, appearantly demonstrating that the serpent
implementation is broken.

Rev: nettle/testsuite/serpent-test.c:1.2

*** empty log message ***

Rev: nettle/ChangeLog:1.149

New file. Improves performance by 22% for the
unaligned01 case and 35% for the unaligned12 case, benchmarked on
Intel SU1400.

Rev: nettle/x86_64/memxor.asm:1.1

*** empty log message ***

Rev: nettle/ChangeLog:1.148

* examples/nettle-benchmark.c (cgt_works_p): New function.
(cgt_time_start): Likewise.
(cgt_time_end): Likewise.
(clock_time_start): Likewise.
(clock_time_end): Likewise.
(time_function): Read clock via function pointers time_start and
time_end, so we can select method at runtime.
(xalloc): Use die function.
(main): Choose timing function. If available, try clock_gettime,
and fall back to clock if it doesn't exist.

Rev: nettle/examples/nettle-benchmark.c:1.19

Typo fix.

Rev: nettle/testsuite/gcm-test.c:1.6

*** empty log message ***

Rev: nettle/ChangeLog:1.147

(die): New function.
(TIME_END, TIME_START): Check return value from clock_gettime.

Rev: nettle/examples/nettle-benchmark.c:1.18

(union gcm_block): Use correct length for w array.

Rev: nettle/ChangeLog:1.146
Rev: nettle/gcm.h:1.9

*** empty log message ***

Rev: nettle/ChangeLog:1.145

(test_main): Added the rest of the testcases from the spec.

Rev: nettle/testsuite/gcm-test.c:1.5

Added more test cases.

Rev: nettle/testsuite/gcm-test.c:1.4

*** empty log message ***

Rev: nettle/ChangeLog:1.144

* testsuite/gcm-test.c (test_main): Enabled testcases 5 and 6,
with different IV lengths.

Rev: nettle/testsuite/gcm-test.c:1.3

* gcm-aes.c (gcm_aes_set_iv): Updated for gcm_set_iv change.

Rev: nettle/gcm-aes.c:1.2

* gcm.c (gcm_hash_sizes): New function.
(gcm_set_iv): Added support for IVs of arbitrary size. Needed
another argument, for the hash subkey.
(gcm_digest): Use gcm_hash_sizes.

Rev: nettle/gcm.c:1.13
Rev: nettle/gcm.h:1.8

*** empty log message ***

Rev: nettle/ChangeLog:1.143

(time_gmac): Use gcm_aes interface.

Rev: nettle/examples/nettle-benchmark.c:1.17

* testsuite/gcm-test.c (test_gcm_aes): New function, replacing
test_cipher_gcm and using the new gcm_aes interface.
(test_main): Updated to use test_gcm_aes.
* testsuite/testutils.c (test_cipher_gcm): Deleted function.

Rev: nettle/testsuite/gcm-test.c:1.2
Rev: nettle/testsuite/testutils.c:1.13
Rev: nettle/testsuite/testutils.h:1.7

(nettle_SOURCES): Added gcm-aes.c.

Rev: nettle/Makefile.in:1.31

New file.
(gcm_aes_set_key): New function.
(gcm_aes_set_iv): Likewise.
(gcm_aes_auth): Likewise.
(gcm_aes_encrypt): Likewise.
(gcm_aes_decrypt): Likewise.
(gcm_aes_digest): Likewise.

Rev: nettle/gcm-aes.c:1.1

* gcm.c (gcm_set_key): Replaced context argument by a struct
gcm_key *.
(gcm_hash): Replaced context argument by a struct gcm_key * and a
pointer to the hashing state block.
(gcm_auth): Added struct gcm_key * argument.
(gcm_encrypt): Likewise.
(gcm_decrypt): Likewise.
(gcm_digest): Likewise.

* gcm.h (struct gcm_key): Moved the key-dependent and
message-independent state to its own struct.
(struct gcm_ctx): ... and removed it here.
(GCM_CTX): New macro.
(GCM_SET_KEY): Likewise.
(GCM_AUTH): Likewise.
(GCM_ENCRYPT): Likewise.
(GCM_DECRYPT): Likewise.
(GCM_DIGEST): Likewise.
(struct gcm_aes_ctx): New struct.

Rev: nettle/ChangeLog:1.142
Rev: nettle/gcm.c:1.12
Rev: nettle/gcm.h:1.7

*** empty log message ***

Rev: nettle/ChangeLog:1.141

* gcm.h (struct gcm_ctx): The hash key is now always an array,
named h, with array size depending on GCM_TABLE_BITS.

Rev: nettle/gcm.h:1.6

* gcm.c (gcm_gf_shift): Added a separate result argument.
(gcm_gf_mul): Compile bitwise version only when GCM_TABLE_BITS ==
0. Simplified interface with just two arguments pointing to
complete blocks.
(gcm_gf_shift_4, gcm_gf_shift_8): Renamed table-based functions, from...
(gcm_gf_shift_chunk): ... old name.
(gcm_gf_mul): Renamed both table-based versions and made the
argument types compatible with the bitwise gcm_gf_mul.
(gcm_gf_mul_chunk): ... the old name.
(gcm_set_key): Initialize the table using adds and shifts only.
When GCM_TABLE_BITS > 0, this eliminates the only use of the
bitwise multiplication.
(gcm_hash): Simplified, now that we have the same interface for
gcm_gf_mul, regardless of table size.

Rev: nettle/ChangeLog:1.140
Rev: nettle/gcm.c:1.11

* gcm.c (GHASH_POLYNOMIAL): Use unsigned long for this constant.
(gcm_gf_shift_chunk): Fixed bugs for the big endian 64-bit case,
e.g., sparc64. For both 4-bit and 8-bit tables.

Rev: nettle/ChangeLog:1.139
Rev: nettle/gcm.c:1.10

* gcm.c: Use the new union gcm_block for all gf operations.

* gcm.h (union gcm_block): New union, used to enforce alignment.

Rev: nettle/ChangeLog:1.138
Rev: nettle/gcm.c:1.9
Rev: nettle/gcm.h:1.5

* gcm.c (gcm_gf_shift_chunk) : Bug fix for little-endian 8-bit
tables.

Rev: nettle/ChangeLog:1.137
Rev: nettle/gcm.c:1.8

*** empty log message ***

Rev: nettle/ChangeLog:1.136

* gcm.c (gcm_gf_mul_chunk): Special case first and last iteration.
(gcm_gf_add): New function, a special case of memxor. Use it for
all memxor calls with word-aligned 16 byte blocks. Improves
performance to 152 cycles/byte with no tables, 28 cycles per byte
with 4-bit tables and 10.5 cycles per byte with 8-bit tables.

Rev: nettle/gcm.c:1.7

*** empty log message ***

Rev: nettle/ChangeLog:1.135

(gcm_gf_shift_chunk): New implementation for 8-bit tables.
(gcm_gf_mul_chunk): Likewise.
(gcm_set_key): Generate 8-bit tables.

Rev: nettle/gcm.c:1.6

(SOURCES): Added gcmdata.c.

Rev: nettle/ChangeLog:1.134
Rev: nettle/Makefile.in:1.30

*** empty log message ***

Rev: nettle/ChangeLog:1.133

(GCM_TABLE_BITS): Set to 4.

Rev: nettle/gcm.h:1.4

*** empty log message ***

Rev: nettle/ChangeLog:1.132

(TARGETS): Added gcmdata.
(gcmdata): New rule.

Rev: nettle/Makefile.in:1.29

Introduced 4-bit tables. Gives gmac performance of 45 cycles per
byte (still on intel x86_64).
* gcm.c (gcm_gf_shift): Renamed. Tweaked little-endian masks.
(gcm_rightshift): ... old name.
(gcm_gf_mul): New argument for the output. Added length argument
for one of the inputs (implicitly padding with zeros).
(shift_table): New table (in 4-bit and 8-bit versions), generated
by gcmdata.
(gcm_gf_shift_chunk): New function shifting 4 bits at
a time.
(gcm_gf_mul_chunk): New function processing 4 bits at a time.
(gcm_set_key): Generation of 4-bit key table.
(gcm_hash): Use tables, when available.

Rev: nettle/gcm.c:1.5

(main): New file.

Rev: nettle/gcmdata.c:1.1

*** empty log message ***

Rev: nettle/ChangeLog:1.131

* gcm.c (gcm_rightshift): Moved the reduction of the shifted out
bit here.
(gcm_gf_mul): Updated for gcm_rightshift change. Improves gmac
performance to 181 cycles/byte.

Rev: nettle/gcm.c:1.4

*** empty log message ***

Rev: nettle/ChangeLog:1.130

(gcm_gf_mul): Rewrote. Still uses the bitwise algorithm from the
specification, but with separate byte and bit loops. Improves gmac
performance a bit further, to 227 cycles/byte.

Rev: nettle/gcm.c:1.3

(gcm_rightshift): Complete rewrite, to use word rather
than byte operations. Improves gmac performance from 830 cycles /
byte to (still poor) 268 cycles per byte on intel x86_64.

Rev: nettle/gcm.c:1.2

Typo fix.

Rev: nettle/gcm.h:1.3

*** empty log message ***

Rev: nettle/ChangeLog:1.129

(time_gmac): New function.
(main): Call time_gmac.

Rev: nettle/examples/nettle-benchmark.c:1.16

* gcm.h: New file, contributed by Nikos Mavrogiannopoulos.

Rev: nettle/gcm.h:1.2

(TS_NETTLE_SOURCES): Added gcm-test.c.

Rev: nettle/testsuite/Makefile.in:1.12

Added gcm-test rule.

Rev: nettle/testsuite/.test-rules.make:1.9

(test_cipher_gcm): New function, contributed by Nikos
Mavrogiannopoulos.

Rev: nettle/testsuite/testutils.c:1.12
Rev: nettle/testsuite/testutils.h:1.6

New file, contributed by Nikos Mavrogiannopoulos.

Rev: nettle/testsuite/gcm-test.c:1.1

(nettle_SOURCES): Added gcm.c.
(HEADERS): Added gcm.h.

Rev: nettle/Makefile.in:1.28

* gcm.c: New file.
* gcm.h: New file.

Rev: nettle/gcm.c:1.1
Rev: nettle/gcm.h:1.1

* macros.h (INCREMENT): New macro, moved from ctr.c. Deleted third
argument.
* ctr.c: Use INCREMENT macro from macros.h, deleted local version.

Rev: nettle/ChangeLog:1.128
Rev: nettle/ctr.c:1.2
Rev: nettle/macros.h:1.3

*** empty log message ***

Rev: nettle/ChangeLog:1.127

(check): Add ../.lib to PATH, since that's
where w*ndows looks for dlls.

Rev: nettle/testsuite/Makefile.in:1.11

*** empty log message ***

Rev: nettle/ChangeLog:1.126

(test_cipher_stream): More debug output on failure.

Rev: nettle/testsuite/testutils.c:1.11

*** empty log message ***

Rev: nettle/ChangeLog:1.125

* nettle-types.h: Deleted some unnecessary parenthesis from
function typedefs.
(nettle_realloc_func): Moved typedef here...
* realloc.h: ...from here.

Rev: nettle/nettle-types.h:1.3
Rev: nettle/realloc.h:1.2

(nettle_buffer_init_realloc): Use an explicit pointer for realloc
argument.

Rev: nettle/buffer.c:1.2
Rev: nettle/buffer.h:1.2

Deleted old FIXME comment.

Rev: nettle/der2dsa.c:1.5

(Copyright): Updated info on blowfish.

Rev: nettle/ChangeLog:1.124
Rev: nettle/nettle.texinfo:1.16

Indentation change.

Rev: nettle/blowfish.c:1.6

Reapplied optimizations (150% speedup on x86_32) and other fixes,
relicensing them as LGPL.
* blowfish.c (do_encrypt): Renamed, to...
(encrypt): ...new name.
(F): Added context argument. Shift input explicitly, instead of
reading individual bytes via memory.
(R): Added context argument.
(encrypt): Deleted a bunch of local variables. Using the context
pointer for everything should consume less registers.
(decrypt): Likewise.
(initial_ctx): Arrange constants into a struct, to simplify key setup.
(blowfish_set_key): Some simplification.

Rev: nettle/ChangeLog:1.123
Rev: nettle/blowfish.c:1.5

*** empty log message ***

Rev: nettle/ChangeLog:1.122
Rev: nettle/blowfish.c:1.4

(install-shared-nettle): Use INSTALL_DATA, which
clears the execute permission bits.
(install-shared-hogweed): Likewise.

Rev: nettle/ChangeLog:1.121
Rev: nettle/Makefile.in:1.27

Added real name.

Rev: nettle/index.html:1.4

*** empty log message ***

Rev: nettle/ChangeLog:1.120