(SBOX3): Renamed arguments. Eliminated temporaries.

Rev: nettle/ChangeLog:1.180
Rev: nettle/serpent-encrypt.c:1.5

(SBOX2): Renamed arguments. Eliminated temporaries.

Rev: nettle/ChangeLog:1.179
Rev: nettle/serpent-encrypt.c:1.4

(SBOX1): Renamed arguments. Eliminated temporaries.

Rev: nettle/ChangeLog:1.178
Rev: nettle/serpent-encrypt.c:1.3

(SBOX0): Renamed arguments. Eliminated temporaries.

Rev: nettle/ChangeLog:1.177
Rev: nettle/serpent-encrypt.c:1.2

* Makefile.in (DISTFILES): Added serpent-internal.h.
(nettle_SOURCES): Replaced serpent.c by serpent-set-key.c,
serpent-encrypt.c, and serpent-decrypt.c.

* serpent.c: Replaced by several new files.
* serpent-set-key.c: New file.
* serpent-encrypt.c: New file.
* serpent-decrypt.c: New file.
* serpent-internal.h: New file.

Rev: nettle/ChangeLog:1.176
Rev: nettle/Makefile.in:1.34
Rev: nettle/serpent-decrypt.c:1.1
Rev: nettle/serpent-encrypt.c:1.1
Rev: nettle/serpent-internal.h:1.1
Rev: nettle/serpent-set-key.c:1.1
Rev: nettle/serpent.c:1.9(DEAD)

Process two blocks at a time in parallel. Measured speedup of 10%--25%
(higher for encryption) on x86_64.

Rev: nettle/ChangeLog:1.175
Rev: nettle/serpent.c:1.8

Ignore autom4te.cache.

Rev: nettle/.cvsignore:1.3

* serpent.c (ROUNDS): Deleted macro.
(serpent_block_t): Deleted array typedef.
(KEYXOR): New macro, replacing BLOCK_XOR.
(BLOCK_COPY, SBOX, SBOX_INVERSE): Deleted macros.
(LINEAR_TRANSFORMATION): Use four separate arguments.
(LINEAR_TRANSFORMATION_INVERSE): Likewise.
(ROUND): Take separate arguments for all input and output words.
(ROUND_INVERSE): Likewise.
(ROUND_LAST, ROUND_FIRST_INVERSE): Deleted macros.
(serpent_set_key): Moved loop termination test.
(serpent_encrypt): Rewrote with unrolling of just eight rounds,
and without serpent_block_t.
(serpent_decrypt): Likewise.

Rev: nettle/ChangeLog:1.174
Rev: nettle/serpent.c:1.7

Added do { ... } while (0) around block macros.
(serpent_key_t): Deleted array typedef.
(ROL32, ROR32): Renamed macros, were rol and ror.
(KS_RECURRENCE, KS): New macros.
(serpent_key_pad): Renamed, from...
(serpent_key_prepare): ...old name.
(serpent_subkeys_generate): Deleted function.
(serpent_set_key): Rewrote the generation of subkeys. Reduced both
temporary storage and code size (less unrolling)

Rev: nettle/ChangeLog:1.173
Rev: nettle/serpent.c:1.6

*** empty log message ***

Rev: nettle/ChangeLog:1.172

(test_main): Enabled test with short, 40-bit, key.

Rev: nettle/testsuite/serpent-test.c:1.6

(byte_swap_32): Deleted macro.
(serpent_key_prepare): Use LE_READ_UINT32. Don't require aligned
input, and support arbitrary key sizes.

Rev: nettle/ChangeLog:1.171
Rev: nettle/serpent.c:1.5

Serpent rewrite.

Rev: nettle/ChangeLog:1.170
Rev: nettle/Makefile.in:1.33
Rev: nettle/serpent.c:1.4
Rev: nettle/serpent_sboxes.h:1.2(DEAD)

*** empty log message ***

Rev: nettle/ChangeLog:1.169

(test_main): Added some tests for padding of keys of length which is
not a multiple of four bytes.

Rev: nettle/testsuite/serpent-test.c:1.5

Fixed register list.

Rev: nettle/x86_64/README:1.2

*** empty log message ***

Rev: nettle/ChangeLog:1.168

(test_main): Add test vectors from libgcrypt.

Rev: nettle/testsuite/serpent-test.c:1.4

(dsa_generate_keypair): Avoid double init of mpz
variable. Spotted by Nikos Mavrogiannopoulos.

Rev: nettle/ChangeLog:1.167
Rev: nettle/dsa-keygen.c:1.10

*** empty log message ***

Rev: nettle/ChangeLog:1.166

(arcfour_stream): Deleted obsolete define.

Rev: nettle/arcfour.h:1.2

Fix link flags for shared libraries on Solaris, which needs -h to set
the soname. Patch contributed by Dagobert Michelsen.

Rev: nettle/ChangeLog:1.165
Rev: nettle/configure.ac:1.30

*** empty log message ***

Rev: nettle/ChangeLog:1.164

(find_algorithm): Require exact match.

Rev: nettle/tools/nettle-hash.c:1.2

*** empty log message ***

Rev: nettle/ChangeLog:1.163

Reverted broken byte-order change from 2001-06-17:
* serpent.c (serpent_set_key): Use correct byteorder.
(serpent_encrypt): Likewise.
(serpent_decrypt): Likewise.

Rev: nettle/serpent.c:1.3

(decode_hex_reverse): New function.
(RH, RHL): New macros.
(test_main): Byte reverse inputs and outputs for the testvectors
taken from the serpent submission package. Enable test vectors
from http://www.cs.technion.ac.il/~biham/Reports/Serpent/.

Rev: nettle/testsuite/serpent-test.c:1.3

*** empty log message ***

Rev: nettle/ChangeLog:1.162

(xalloc): Deleted function, now it's in misc.c instead.

Rev: nettle/tools/sexp-conv.c:1.6

*** empty log message ***

Rev: nettle/ChangeLog:1.161

Use LSH_FUNC_STRERROR.

Rev: nettle/configure.ac:1.29

*** empty log message ***

Rev: nettle/ChangeLog:1.160

* tools/Makefile.in (TARGETS): Added nettle-hash, and related
build rules.
(SOURCES): Added nettle-hash.c.

* tools/nettle-hash.c: New file.

Rev: nettle/tools/Makefile.in:1.5
Rev: nettle/tools/nettle-hash.c:1.1

(xalloc): New function.

Rev: nettle/tools/misc.c:1.3
Rev: nettle/tools/misc.h:1.3

(main): Made the OPT_* constants local, and
fixed numerical values to start with non-ASCII 0x300.

Rev: nettle/tools/pkcs1-conv.c:1.5

Contributed by Daniel Kahn Gillmor:
* testsuite/Makefile.in (TS_NETTLE_SOURCES): Added
meta-hash-test.c, meta-cipher-test.c, and meta-armor-test.c.

* testsuite/meta-hash-test.c: New file.
* testsuite/meta-cipher-test.c: New file.
* testsuite/meta-armor-test.c: New file.

Rev: nettle/testsuite/.test-rules.make:1.10
Rev: nettle/testsuite/Makefile.in:1.13
Rev: nettle/testsuite/meta-armor-test.c:1.1
Rev: nettle/testsuite/meta-cipher-test.c:1.1
Rev: nettle/testsuite/meta-hash-test.c:1.1

Contributed by Daniel Kahn Gillmor:
* testsuite/Makefile.in (TS_NETTLE_SOURCES): Added
meta-hash-test.c, meta-cipher-test.c, and meta-armor-test.c.

* nettle.texinfo: Document nettle_hashes and nettle_ciphers.

* nettle-meta.h: Declare algorithm lists nettle_ciphers,
nettle_hashes, nettle_armors.

* Makefile.in (nettle_SOURCES): Added nettle-meta-hashes.c,
nettle-meta-ciphers.c, and nettle-meta-armors.c.

* nettle-meta-armors.c: New file.
* nettle-meta-ciphers.c: New file.
* nettle-meta-hashes.c: New file.

Rev: nettle/ChangeLog:1.159
Rev: nettle/Makefile.in:1.32
Rev: nettle/nettle-meta-armors.c:1.1
Rev: nettle/nettle-meta-ciphers.c:1.1
Rev: nettle/nettle-meta-hashes.c:1.1
Rev: nettle/nettle-meta.h:1.10
Rev: nettle/nettle.texinfo:1.22

Fixed typo, spotted by Daniel Kahn Gillmor.

Rev: nettle/nettle.texinfo:1.21

(Cipher functions): Deleted duplicated entries for arctwo.

Rev: nettle/nettle.texinfo:1.20

Added link for CBC information leakage.

Rev: nettle/nettle.texinfo:1.19

(arcfour_stream): Deleted function. It's not very useful, and neither
documented nor tested.

Rev: nettle/ChangeLog:1.158
Rev: nettle/arcfour.c:1.2

*** empty log message ***

Rev: nettle/ChangeLog:1.157

Fleshed out section on gcm.

Rev: nettle/nettle.texinfo:1.18

(CBC_ENCRYPT): Avoid using NULL; we don't ensure that it
is defined.
(CBC_DECRYPT): Likewise.

Rev: nettle/cbc.h:1.3

* gcm-aes.c (gcm_aes_set_iv): Use GCM_SET_IV.
(gcm_aes_set_key): Deleted cast.
(gcm_aes_encrypt): Likewise.
(gcm_aes_decrypt): Likewise.
(gcm_aes_digest): Likewise.
(gcm_aes_update): One less argument to GCM_UPDATE.

* gcm.h (GCM_SET_KEY): Added cast to nettle_crypt_func *. Help
compiler type checking despite this cast.
(GCM_ENCRYPT): Likewise.
(GCM_DECRYPT): Likewise.
(GCM_DIGEST): Likewise.
(GCM_SET_IV): New macro, for completeness.
(GCM_UPDATE): Deleted unused argument encrypt.

Rev: nettle/ChangeLog:1.156
Rev: nettle/gcm-aes.c:1.4
Rev: nettle/gcm.h:1.12

*** empty log message ***

Rev: nettle/ChangeLog:1.155

Split node on cipher modes, and started on the GCM documentation.

Rev: nettle/nettle.texinfo:1.17

*** empty log message ***

Rev: nettle/ChangeLog:1.154

* testsuite/gcm-test.c (test_gcm_aes): Deleted function, replaced
by test_aead.
(test_main): Use test_aead.

Rev: nettle/testsuite/gcm-test.c:1.8

(test_aead): New function, replacing
test_gcm_aes and before that test_cipher_gcm.

Rev: nettle/testsuite/testutils.c:1.14
Rev: nettle/testsuite/testutils.h:1.8

* nettle-internal.c (nettle_gcm_aes128): New const struct.
(nettle_gcm_aes192): Likewise.
(nettle_gcm_aes256): Likewise.

Rev: nettle/nettle-internal.c:1.4

(struct nettle_aead): Tentative interface for
authenticated encryption with associated data.

Rev: nettle/nettle-internal.h:1.3

*** empty log message ***

Rev: nettle/ChangeLog:1.153

(time_gcm): Renamed. Updated for gcm_aes_auth to gcm_aes_update
renaming. Benchmark both encryption and hashing.
(time_gmac): ...old name.

Rev: nettle/examples/nettle-benchmark.c:1.20

Renamed some macro arguments.

Rev: nettle/nettle-meta.h:1.9

*** empty log message ***

Rev: nettle/ChangeLog:1.152

(des_set_key_hack): Don't touch the bits
parity, since thay are now ignored.
(des3_set_key_hack): Likewise.

Rev: nettle/nettle-internal.c:1.3

* cast128-meta.c (nettle_cast128): Don't pass keysize.
* nettle-meta.h (_NETTLE_CIPHER_FIX): Deleted keysize parameter
derived from the appropriate constant instead.

Rev: nettle/cast128-meta.c:1.2

(_NETTLE_CIPHER_FIX): Deleted keysize parameter.

Rev: nettle/nettle-meta.h:1.8

*** empty log message ***

Rev: nettle/ChangeLog:1.151

(test_gcm_aes): Updated for gcm_aes_auth to gcm_aes_update renaming.

Rev: nettle/testsuite/gcm-test.c:1.7

* gcm.h (GCM_UPDATE): Renamed, from...
(GCM_AUTH): ...old name.

* gcm-aes.c (gcm_aes_update): Renamed, from...
(gcm_aes_auth): ...old name.

* gcm.c (gcm_update): Renamed, and fixed an assert. From...
(gcm_auth): ...old name.

Rev: nettle/ChangeLog:1.150
Rev: nettle/gcm-aes.c:1.3
Rev: nettle/gcm.c:1.14
Rev: nettle/gcm.h:1.11

(GCM_TABLE_BITS): Increase table size to 8 bits,
corresponding to 4 KByte of key-dependent tables.

Rev: nettle/gcm.h:1.10

Spelling fix.

Rev: nettle/memxor.c:1.4

Added more test cases, appearantly demonstrating that the serpent
implementation is broken.

Rev: nettle/testsuite/serpent-test.c:1.2

*** empty log message ***

Rev: nettle/ChangeLog:1.149

New file. Improves performance by 22% for the
unaligned01 case and 35% for the unaligned12 case, benchmarked on
Intel SU1400.

Rev: nettle/x86_64/memxor.asm:1.1

*** empty log message ***

Rev: nettle/ChangeLog:1.148

* examples/nettle-benchmark.c (cgt_works_p): New function.
(cgt_time_start): Likewise.
(cgt_time_end): Likewise.
(clock_time_start): Likewise.
(clock_time_end): Likewise.
(time_function): Read clock via function pointers time_start and
time_end, so we can select method at runtime.
(xalloc): Use die function.
(main): Choose timing function. If available, try clock_gettime,
and fall back to clock if it doesn't exist.

Rev: nettle/examples/nettle-benchmark.c:1.19

Typo fix.

Rev: nettle/testsuite/gcm-test.c:1.6

*** empty log message ***

Rev: nettle/ChangeLog:1.147

(die): New function.
(TIME_END, TIME_START): Check return value from clock_gettime.

Rev: nettle/examples/nettle-benchmark.c:1.18

(union gcm_block): Use correct length for w array.

Rev: nettle/ChangeLog:1.146
Rev: nettle/gcm.h:1.9

*** empty log message ***

Rev: nettle/ChangeLog:1.145

(test_main): Added the rest of the testcases from the spec.

Rev: nettle/testsuite/gcm-test.c:1.5

Added more test cases.

Rev: nettle/testsuite/gcm-test.c:1.4

*** empty log message ***

Rev: nettle/ChangeLog:1.144

* testsuite/gcm-test.c (test_main): Enabled testcases 5 and 6,
with different IV lengths.

Rev: nettle/testsuite/gcm-test.c:1.3

* gcm-aes.c (gcm_aes_set_iv): Updated for gcm_set_iv change.

Rev: nettle/gcm-aes.c:1.2

* gcm.c (gcm_hash_sizes): New function.
(gcm_set_iv): Added support for IVs of arbitrary size. Needed
another argument, for the hash subkey.
(gcm_digest): Use gcm_hash_sizes.

Rev: nettle/gcm.c:1.13
Rev: nettle/gcm.h:1.8

*** empty log message ***

Rev: nettle/ChangeLog:1.143

(time_gmac): Use gcm_aes interface.

Rev: nettle/examples/nettle-benchmark.c:1.17

* testsuite/gcm-test.c (test_gcm_aes): New function, replacing
test_cipher_gcm and using the new gcm_aes interface.
(test_main): Updated to use test_gcm_aes.
* testsuite/testutils.c (test_cipher_gcm): Deleted function.

Rev: nettle/testsuite/gcm-test.c:1.2
Rev: nettle/testsuite/testutils.c:1.13
Rev: nettle/testsuite/testutils.h:1.7

(nettle_SOURCES): Added gcm-aes.c.

Rev: nettle/Makefile.in:1.31

New file.
(gcm_aes_set_key): New function.
(gcm_aes_set_iv): Likewise.
(gcm_aes_auth): Likewise.
(gcm_aes_encrypt): Likewise.
(gcm_aes_decrypt): Likewise.
(gcm_aes_digest): Likewise.

Rev: nettle/gcm-aes.c:1.1

* gcm.c (gcm_set_key): Replaced context argument by a struct
gcm_key *.
(gcm_hash): Replaced context argument by a struct gcm_key * and a
pointer to the hashing state block.
(gcm_auth): Added struct gcm_key * argument.
(gcm_encrypt): Likewise.
(gcm_decrypt): Likewise.
(gcm_digest): Likewise.

* gcm.h (struct gcm_key): Moved the key-dependent and
message-independent state to its own struct.
(struct gcm_ctx): ... and removed it here.
(GCM_CTX): New macro.
(GCM_SET_KEY): Likewise.
(GCM_AUTH): Likewise.
(GCM_ENCRYPT): Likewise.
(GCM_DECRYPT): Likewise.
(GCM_DIGEST): Likewise.
(struct gcm_aes_ctx): New struct.

Rev: nettle/ChangeLog:1.142
Rev: nettle/gcm.c:1.12
Rev: nettle/gcm.h:1.7

*** empty log message ***

Rev: nettle/ChangeLog:1.141

* gcm.h (struct gcm_ctx): The hash key is now always an array,
named h, with array size depending on GCM_TABLE_BITS.

Rev: nettle/gcm.h:1.6

* gcm.c (gcm_gf_shift): Added a separate result argument.
(gcm_gf_mul): Compile bitwise version only when GCM_TABLE_BITS ==
0. Simplified interface with just two arguments pointing to
complete blocks.
(gcm_gf_shift_4, gcm_gf_shift_8): Renamed table-based functions, from...
(gcm_gf_shift_chunk): ... old name.
(gcm_gf_mul): Renamed both table-based versions and made the
argument types compatible with the bitwise gcm_gf_mul.
(gcm_gf_mul_chunk): ... the old name.
(gcm_set_key): Initialize the table using adds and shifts only.
When GCM_TABLE_BITS > 0, this eliminates the only use of the
bitwise multiplication.
(gcm_hash): Simplified, now that we have the same interface for
gcm_gf_mul, regardless of table size.

Rev: nettle/ChangeLog:1.140
Rev: nettle/gcm.c:1.11

* gcm.c (GHASH_POLYNOMIAL): Use unsigned long for this constant.
(gcm_gf_shift_chunk): Fixed bugs for the big endian 64-bit case,
e.g., sparc64. For both 4-bit and 8-bit tables.

Rev: nettle/ChangeLog:1.139
Rev: nettle/gcm.c:1.10

* gcm.c: Use the new union gcm_block for all gf operations.

* gcm.h (union gcm_block): New union, used to enforce alignment.

Rev: nettle/ChangeLog:1.138
Rev: nettle/gcm.c:1.9
Rev: nettle/gcm.h:1.5

* gcm.c (gcm_gf_shift_chunk) : Bug fix for little-endian 8-bit
tables.

Rev: nettle/ChangeLog:1.137
Rev: nettle/gcm.c:1.8

*** empty log message ***

Rev: nettle/ChangeLog:1.136

* gcm.c (gcm_gf_mul_chunk): Special case first and last iteration.
(gcm_gf_add): New function, a special case of memxor. Use it for
all memxor calls with word-aligned 16 byte blocks. Improves
performance to 152 cycles/byte with no tables, 28 cycles per byte
with 4-bit tables and 10.5 cycles per byte with 8-bit tables.

Rev: nettle/gcm.c:1.7

*** empty log message ***

Rev: nettle/ChangeLog:1.135

(gcm_gf_shift_chunk): New implementation for 8-bit tables.
(gcm_gf_mul_chunk): Likewise.
(gcm_set_key): Generate 8-bit tables.

Rev: nettle/gcm.c:1.6

(SOURCES): Added gcmdata.c.

Rev: nettle/ChangeLog:1.134
Rev: nettle/Makefile.in:1.30

*** empty log message ***

Rev: nettle/ChangeLog:1.133

(GCM_TABLE_BITS): Set to 4.

Rev: nettle/gcm.h:1.4

*** empty log message ***

Rev: nettle/ChangeLog:1.132