mirror of
https://github.com/shadps4-emu/ext-cryptopp.git
synced 2024-11-23 18:09:48 +00:00
424 lines
22 KiB
C
424 lines
22 KiB
C
// naclite.h - written and placed in the public domain by Jeffrey Walton
|
|
// based on public domain NaCl source code written by
|
|
// Daniel J. Bernstein, Bernard van Gastel, Wesley Janssen,
|
|
// Tanja Lange, Peter Schwabe and Sjaak Smetsers.
|
|
|
|
/// \file naclite.h
|
|
/// \brief Crypto++ interface to TweetNaCl library (20140917)
|
|
/// \details TweetNaCl is a compact reimplementation of the NaCl library by
|
|
/// Daniel J. Bernstein, Bernard van Gastel, Wesley Janssen, Tanja Lange,
|
|
/// Peter Schwabe and Sjaak Smetsers. The library is less than 20 KB in size
|
|
/// and provides 25 of the NaCl library functions.
|
|
/// \details The compact library uses curve25519, XSalsa20, Poly1305 and
|
|
/// SHA-512 as default primitives, and includes both x25519 key exchange and
|
|
/// ed25519 signatures. The complete list of functions can be found in
|
|
/// <A HREF="https://tweetnacl.cr.yp.to/tweetnacl-20140917.pdf">TweetNaCl:
|
|
/// A crypto library in 100 tweets</A> (20140917), Table 1, page 5.
|
|
/// \details Crypto++ retained the function names and signatures but switched to
|
|
/// data types provided by <stdint.h> to promote interoperability with
|
|
/// Crypto++ and avoid size problems on platforms like Cygwin. For example,
|
|
/// NaCl typdef'd <tt>u64</tt> as an <tt>unsigned long long</tt>, but Cygwin,
|
|
/// MinGW and MSYS are <tt>LP64</tt> systems (not <tt>LLP64</tt> systems). In
|
|
/// addition, Crypto++ was missing NaCl's signed 64-bit integer <tt>i64</tt>.
|
|
/// \details Crypto++ rejects small order elements using libsodium's blacklist. The
|
|
/// TweetNaCl library allowed them but the library predated the attack. If you wish
|
|
/// to allow small elements then use the "unchecked" versions of crypto_box_unchecked,
|
|
/// crypto_box_open_unchecked and crypto_box_beforenm_unchecked.
|
|
/// \details TweetNaCl is well written but not well optimzed. It runs 2x to 3x
|
|
/// slower than optimized routines from libsodium. However, the library is still
|
|
/// 2x to 4x faster than the algorithms NaCl was designed to replace.
|
|
/// \details The Crypto++ wrapper for TweetNaCl requires OS features. That is,
|
|
/// <tt>NO_OS_DEPENDENCE</tt> cannot be defined. It is due to TweetNaCl's
|
|
/// internal function <tt>randombytes</tt>. Crypto++ used
|
|
/// <tt>DefaultAutoSeededRNG</tt> within <tt>randombytes</tt>, so OS integration
|
|
/// must be enabled. You can use another generator like <tt>RDRAND</tt> to
|
|
/// avoid the restriction.
|
|
/// \sa <A HREF="https://cr.yp.to/highspeed/coolnacl-20120725.pdf">The security impact
|
|
/// of a new cryptographic library</A>, <A
|
|
/// HREF="https://tweetnacl.cr.yp.to/tweetnacl-20140917.pdf">TweetNaCl:
|
|
/// A crypto library in 100 tweets</A> (20140917), <A
|
|
/// HREF="https://eprint.iacr.org/2017/806.pdf">May the Fourth Be With You: A
|
|
/// Microarchitectural Side Channel Attack on Several Real-World Applications of
|
|
/// Curve25519</A>, <A
|
|
/// HREF="https://github.com/jedisct1/libsodium/commit/afabd7e7386e1194">libsodium
|
|
/// commit afabd7e7386e1194</A> and <A HREF="https://tools.ietf.org/html/rfc7748">RFC
|
|
/// 7748, Elliptic Curves for Security</A>, Section 6.
|
|
/// \since Crypto++ 6.0
|
|
|
|
#ifndef CRYPTOPP_NACL_H
|
|
#define CRYPTOPP_NACL_H
|
|
|
|
#include "config.h"
|
|
#include "stdcpp.h"
|
|
|
|
#if defined(NO_OS_DEPENDENCE)
|
|
# define CRYPTOPP_DISABLE_NACL 1
|
|
#endif
|
|
|
|
#ifndef CRYPTOPP_DISABLE_NACL
|
|
|
|
NAMESPACE_BEGIN(CryptoPP)
|
|
NAMESPACE_BEGIN(NaCl)
|
|
|
|
/// \brief Hash size in bytes
|
|
/// \sa <A HREF="https://nacl.cr.yp.to/hash.html">NaCl crypto_hash documentation</A>
|
|
CRYPTOPP_CONSTANT(crypto_hash_BYTES = 64)
|
|
|
|
/// \brief Key size in bytes
|
|
/// \sa <A HREF="https://nacl.cr.yp.to/stream.html">NaCl crypto_stream documentation</A>
|
|
CRYPTOPP_CONSTANT(crypto_stream_KEYBYTES = 32)
|
|
/// \brief Nonce size in bytes
|
|
/// \sa <A HREF="https://nacl.cr.yp.to/stream.html">NaCl crypto_stream documentation</A>
|
|
CRYPTOPP_CONSTANT(crypto_stream_NONCEBYTES = 24)
|
|
|
|
/// \brief Key size in bytes
|
|
/// \sa <A HREF="https://nacl.cr.yp.to/auth.html">NaCl crypto_auth documentation</A>
|
|
CRYPTOPP_CONSTANT(crypto_auth_KEYBYTES = 32)
|
|
/// \brief Tag size in bytes
|
|
/// \sa <A HREF="https://nacl.cr.yp.to/auth.html">NaCl crypto_auth documentation</A>
|
|
CRYPTOPP_CONSTANT(crypto_auth_BYTES = 16)
|
|
|
|
/// \brief Key size in bytes
|
|
/// \sa <A HREF="https://nacl.cr.yp.to/onetimeauth.html">NaCl crypto_onetimeauth documentation</A>
|
|
CRYPTOPP_CONSTANT(crypto_onetimeauth_KEYBYTES = 32)
|
|
/// \brief Tag size in bytes
|
|
/// \sa <A HREF="https://nacl.cr.yp.to/onetimeauth.html">NaCl crypto_onetimeauth documentation</A>
|
|
CRYPTOPP_CONSTANT(crypto_onetimeauth_BYTES = 16)
|
|
|
|
/// \brief Key size in bytes
|
|
/// \sa <A HREF="https://nacl.cr.yp.to/secretbox.html">NaCl crypto_secretbox documentation</A>
|
|
CRYPTOPP_CONSTANT(crypto_secretbox_KEYBYTES = 32)
|
|
/// \brief Nonce size in bytes
|
|
/// \sa <A HREF="https://nacl.cr.yp.to/secretbox.html">NaCl crypto_secretbox documentation</A>
|
|
CRYPTOPP_CONSTANT(crypto_secretbox_NONCEBYTES = 24)
|
|
/// \brief Zero-padded message prefix in bytes
|
|
/// \sa <A HREF="https://nacl.cr.yp.to/secretbox.html">NaCl crypto_secretbox documentation</A>
|
|
CRYPTOPP_CONSTANT(crypto_secretbox_ZEROBYTES = 32)
|
|
/// \brief Zero-padded message prefix in bytes
|
|
/// \sa <A HREF="https://nacl.cr.yp.to/secretbox.html">NaCl crypto_secretbox documentation</A>
|
|
CRYPTOPP_CONSTANT(crypto_secretbox_BOXZEROBYTES = 16)
|
|
|
|
/// \brief Private key size in bytes
|
|
/// \sa <A HREF="https://nacl.cr.yp.to/box.html">NaCl crypto_box documentation</A>
|
|
CRYPTOPP_CONSTANT(crypto_box_SECRETKEYBYTES = 32)
|
|
/// \brief Public key size in bytes
|
|
/// \sa <A HREF="https://nacl.cr.yp.to/box.html">NaCl crypto_box documentation</A>
|
|
CRYPTOPP_CONSTANT(crypto_box_PUBLICKEYBYTES = 32)
|
|
/// \brief Nonce size in bytes
|
|
/// \sa <A HREF="https://nacl.cr.yp.to/box.html">NaCl crypto_box documentation</A>
|
|
CRYPTOPP_CONSTANT(crypto_box_NONCEBYTES = 24)
|
|
/// \brief Message 0-byte prefix in bytes
|
|
/// \sa <A HREF="https://nacl.cr.yp.to/box.html">NaCl crypto_box documentation</A>
|
|
CRYPTOPP_CONSTANT(crypto_box_ZEROBYTES = 32)
|
|
/// \brief Open box 0-byte prefix in bytes
|
|
/// \sa <A HREF="https://nacl.cr.yp.to/box.html">NaCl crypto_box documentation</A>
|
|
CRYPTOPP_CONSTANT(crypto_box_BOXZEROBYTES = 16)
|
|
/// \brief Precomputation 0-byte prefix in bytes in bytes
|
|
/// \sa <A HREF="https://nacl.cr.yp.to/box.html">NaCl crypto_box documentation</A>
|
|
CRYPTOPP_CONSTANT(crypto_box_BEFORENMBYTES = 32)
|
|
/// \brief MAC size in bytes
|
|
/// \details crypto_box_MACBYTES was missing from tweetnacl.h. Its is defined as
|
|
/// crypto_box_curve25519xsalsa20poly1305_MACBYTES, which is defined as 16U.
|
|
/// \sa <A HREF="https://nacl.cr.yp.to/hash.html">NaCl crypto_box documentation</A>
|
|
CRYPTOPP_CONSTANT(crypto_box_MACBYTES = 16)
|
|
|
|
/// \brief Private key size in bytes
|
|
/// \sa <A HREF="https://nacl.cr.yp.to/sign.html">NaCl crypto_sign documentation</A>
|
|
CRYPTOPP_CONSTANT(crypto_sign_SECRETKEYBYTES = 64)
|
|
/// \brief Public key size in bytes
|
|
/// \sa <A HREF="https://nacl.cr.yp.to/sign.html">NaCl crypto_sign documentation</A>
|
|
CRYPTOPP_CONSTANT(crypto_sign_PUBLICKEYBYTES = 32)
|
|
/// \brief Seed size in bytes
|
|
/// \sa <A HREF="https://nacl.cr.yp.to/sign.html">NaCl crypto_sign documentation</A>
|
|
CRYPTOPP_CONSTANT(crypto_sign_SEEDBYTES = 32)
|
|
/// \brief Signature size in bytes
|
|
/// \sa <A HREF="https://nacl.cr.yp.to/sign.html">NaCl crypto_sign documentation</A>
|
|
CRYPTOPP_CONSTANT(crypto_sign_BYTES = 64)
|
|
|
|
/// \brief Group element size in bytes
|
|
/// \sa <A HREF="https://nacl.cr.yp.to/scalarmult.html">NaCl crypto_scalarmult documentation</A>
|
|
CRYPTOPP_CONSTANT(crypto_scalarmult_BYTES = 32)
|
|
/// \brief Integer size in bytes
|
|
/// \sa <A HREF="https://nacl.cr.yp.to/scalarmult.html">NaCl crypto_scalarmult documentation</A>
|
|
CRYPTOPP_CONSTANT(crypto_scalarmult_SCALARBYTES = 32)
|
|
|
|
/// \brief Encrypt and authenticate a message
|
|
/// \param c output byte buffer
|
|
/// \param m input byte buffer
|
|
/// \param d size of the input byte buffer
|
|
/// \param n nonce byte buffer
|
|
/// \param y other's public key
|
|
/// \param x private key
|
|
/// \details crypto_box() uses crypto_box_curve25519xsalsa20poly1305
|
|
/// \returns 0 on success, non-0 otherwise
|
|
/// \sa <A HREF="https://nacl.cr.yp.to/box.html">NaCl crypto_box documentation</A>
|
|
/// \since Crypto++ 6.0
|
|
int crypto_box(uint8_t *c,const uint8_t *m,uint64_t d,const uint8_t *n,const uint8_t *y,const uint8_t *x);
|
|
|
|
/// \brief Verify and decrypt a message
|
|
/// \param m output byte buffer
|
|
/// \param c input byte buffer
|
|
/// \param d size of the input byte buffer
|
|
/// \param n nonce byte buffer
|
|
/// \param y other's public key
|
|
/// \param x private key
|
|
/// \details crypto_box_open() uses crypto_box_curve25519xsalsa20poly1305
|
|
/// \returns 0 on success, non-0 otherwise
|
|
/// \sa <A HREF="https://nacl.cr.yp.to/box.html">NaCl crypto_box documentation</A>
|
|
/// \since Crypto++ 6.0
|
|
int crypto_box_open(uint8_t *m,const uint8_t *c,uint64_t d,const uint8_t *n,const uint8_t *y,const uint8_t *x);
|
|
|
|
/// \brief Generate a keypair for encryption
|
|
/// \param y public key byte buffer
|
|
/// \param x private key byte buffer
|
|
/// \returns 0 on success, non-0 otherwise
|
|
/// \sa <A HREF="https://nacl.cr.yp.to/box.html">NaCl crypto_box documentation</A>
|
|
/// \since Crypto++ 6.0
|
|
int crypto_box_keypair(uint8_t *y,uint8_t *x);
|
|
|
|
/// \brief Encrypt and authenticate a message
|
|
/// \param k shared secret byte buffer
|
|
/// \param y other's public key
|
|
/// \param x private key
|
|
/// \details crypto_box_beforenm() performs message-independent precomputation to derive the key.
|
|
/// Once the key is derived multiple calls to crypto_box_afternm() can be made to process the message.
|
|
/// \returns 0 on success, non-0 otherwise
|
|
/// \sa <A HREF="https://nacl.cr.yp.to/box.html">NaCl crypto_box documentation</A>
|
|
/// \since Crypto++ 6.0
|
|
int crypto_box_beforenm(uint8_t *k,const uint8_t *y,const uint8_t *x);
|
|
|
|
/// \brief Encrypt and authenticate a message
|
|
/// \param m output byte buffer
|
|
/// \param c input byte buffer
|
|
/// \param d size of the input byte buffer
|
|
/// \param n nonce byte buffer
|
|
/// \param k shared secret byte buffer
|
|
/// \details crypto_box_afternm() performs message-dependent computation using the derived the key.
|
|
/// Once the key is derived using crypto_box_beforenm() multiple calls to crypto_box_afternm()
|
|
/// can be made to process the message.
|
|
/// \returns 0 on success, non-0 otherwise
|
|
/// \sa <A HREF="https://nacl.cr.yp.to/box.html">NaCl crypto_box documentation</A>
|
|
/// \since Crypto++ 6.0
|
|
int crypto_box_afternm(uint8_t *c,const uint8_t *m,uint64_t d,const uint8_t *n,const uint8_t *k);
|
|
|
|
/// \brief Verify and decrypt a message
|
|
/// \param m output byte buffer
|
|
/// \param c input byte buffer
|
|
/// \param d size of the input byte buffer
|
|
/// \param n nonce byte buffer
|
|
/// \param k shared secret byte buffer
|
|
/// \details crypto_box_afternm() performs message-dependent computation using the derived the key.
|
|
/// Once the key is derived using crypto_box_beforenm() multiple calls to crypto_box_open_afternm()
|
|
/// can be made to process the message.
|
|
/// \returns 0 on success, non-0 otherwise
|
|
/// \sa <A HREF="https://nacl.cr.yp.to/box.html">NaCl crypto_box documentation</A>
|
|
/// \since Crypto++ 6.0
|
|
int crypto_box_open_afternm(uint8_t *m,const uint8_t *c,uint64_t d,const uint8_t *n,const uint8_t *k);
|
|
|
|
/// \brief Encrypt and authenticate a message
|
|
/// \param c output byte buffer
|
|
/// \param m input byte buffer
|
|
/// \param d size of the input byte buffer
|
|
/// \param n nonce byte buffer
|
|
/// \param y other's public key
|
|
/// \param x private key
|
|
/// \details crypto_box() uses crypto_box_curve25519xsalsa20poly1305.
|
|
/// \details This version of crypto_box() does not check for small order elements. It can be unsafe
|
|
/// but it exists for backwards compatibility with downlevel clients. Without the compatibility
|
|
/// interop with early versions of NaCl, libsodium and other libraries does not exist. The
|
|
/// downlevel interop may also be needed of cryptocurrencies like Bitcoin, Ethereum, Monero
|
|
/// and Zcash.
|
|
/// \returns 0 on success, non-0 otherwise
|
|
/// \warning This version of crypto_box() does not check for small order elements. It should not
|
|
/// be used in new software.
|
|
/// \sa <A HREF="https://nacl.cr.yp.to/box.html">NaCl crypto_box documentation</A>,
|
|
/// <A HREF="https://eprint.iacr.org/2017/806.pdf">May the Fourth Be With You: A Microarchitectural
|
|
/// Side Channel Attack on Several Real-World Applications of Curve25519</A>,
|
|
/// <A HREF="https://github.com/jedisct1/libsodium/commit/afabd7e7386e1194">libsodium commit
|
|
/// afabd7e7386e1194</A>.
|
|
/// \since Crypto++ 6.0
|
|
int crypto_box_unchecked(uint8_t *c,const uint8_t *m,uint64_t d,const uint8_t *n,const uint8_t *y,const uint8_t *x);
|
|
|
|
/// \brief Verify and decrypt a message
|
|
/// \param m output byte buffer
|
|
/// \param c input byte buffer
|
|
/// \param d size of the input byte buffer
|
|
/// \param n nonce byte buffer
|
|
/// \param y other's public key
|
|
/// \param x private key
|
|
/// \details crypto_box_open() uses crypto_box_curve25519xsalsa20poly1305.
|
|
/// \details This version of crypto_box_open() does not check for small order elements. It can be unsafe
|
|
/// but it exists for backwards compatibility with downlevel clients. Without the compatibility
|
|
/// interop with early versions of NaCl, libsodium and other libraries does not exist. The
|
|
/// downlevel interop may also be needed of cryptocurrencies like Bitcoin, Ethereum, Monero
|
|
/// and Zcash.
|
|
/// \returns 0 on success, non-0 otherwise
|
|
/// \warning This version of crypto_box_open() does not check for small order elements. It should not
|
|
/// be used in new software.
|
|
/// \sa <A HREF="https://nacl.cr.yp.to/box.html">NaCl crypto_box documentation</A>,
|
|
/// <A HREF="https://eprint.iacr.org/2017/806.pdf">May the Fourth Be With You: A Microarchitectural
|
|
/// Side Channel Attack on Several Real-World Applications of Curve25519</A>,
|
|
/// <A HREF="https://github.com/jedisct1/libsodium/commit/afabd7e7386e1194">libsodium commit
|
|
/// afabd7e7386e1194</A>.
|
|
/// \since Crypto++ 6.0
|
|
int crypto_box_open_unchecked(uint8_t *m,const uint8_t *c,uint64_t d,const uint8_t *n,const uint8_t *y,const uint8_t *x);
|
|
|
|
/// \brief Encrypt and authenticate a message
|
|
/// \param k shared secret byte buffer
|
|
/// \param y other's public key
|
|
/// \param x private key
|
|
/// \details crypto_box_beforenm() performs message-independent precomputation to derive the key.
|
|
/// Once the key is derived multiple calls to crypto_box_afternm() can be made to process the message.
|
|
/// \details This version of crypto_box_beforenm() does not check for small order elements. It can be unsafe
|
|
/// but it exists for backwards compatibility with downlevel clients. Without the compatibility
|
|
/// interop with early versions of NaCl, libsodium and other libraries does not exist. The
|
|
/// downlevel interop may also be needed of cryptocurrencies like Bitcoin, Ethereum, Monero
|
|
/// and Zcash.
|
|
/// \returns 0 on success, non-0 otherwise
|
|
/// \warning This version of crypto_box_beforenm() does not check for small order elements. It should not
|
|
/// be used in new software.
|
|
/// \sa <A HREF="https://nacl.cr.yp.to/box.html">NaCl crypto_box documentation</A>,
|
|
/// <A HREF="https://eprint.iacr.org/2017/806.pdf">May the Fourth Be With You: A Microarchitectural
|
|
/// Side Channel Attack on Several Real-World Applications of Curve25519</A>,
|
|
/// <A HREF="https://github.com/jedisct1/libsodium/commit/afabd7e7386e1194">libsodium commit
|
|
/// afabd7e7386e1194</A>.
|
|
/// \since Crypto++ 6.0
|
|
int crypto_box_beforenm_unchecked(uint8_t *k,const uint8_t *y,const uint8_t *x);
|
|
|
|
/// \brief TODO
|
|
int crypto_core_salsa20(uint8_t *out,const uint8_t *in,const uint8_t *k,const uint8_t *c);
|
|
|
|
/// \brief TODO
|
|
/// \returns 0 on success, non-0 otherwise
|
|
/// \since Crypto++ 6.0
|
|
int crypto_core_hsalsa20(uint8_t *out,const uint8_t *in,const uint8_t *k,const uint8_t *c);
|
|
|
|
/// \brief Hash multiple blocks
|
|
/// \details crypto_hashblocks() uses crypto_hashblocks_sha512.
|
|
/// \returns 0 on success, non-0 otherwise
|
|
/// \sa <A HREF="https://nacl.cr.yp.to/hash.html">NaCl crypto_hash documentation</A>
|
|
/// \since Crypto++ 6.0
|
|
int crypto_hashblocks(uint8_t *x,const uint8_t *m,uint64_t n);
|
|
|
|
/// \brief Hash a message
|
|
/// \details crypto_hash() uses crypto_hash_sha512.
|
|
/// \returns 0 on success, non-0 otherwise
|
|
/// \sa <A HREF="https://nacl.cr.yp.to/hash.html">NaCl crypto_hash documentation</A>
|
|
/// \since Crypto++ 6.0
|
|
int crypto_hash(uint8_t *out,const uint8_t *m,uint64_t n);
|
|
|
|
/// \brief Create an authentication tag for a message
|
|
/// \details crypto_onetimeauth() uses crypto_onetimeauth_poly1305.
|
|
/// \returns 0 on success, non-0 otherwise
|
|
/// \sa <A HREF="https://nacl.cr.yp.to/onetimeauth.html">NaCl crypto_onetimeauth documentation</A>
|
|
/// \since Crypto++ 6.0
|
|
int crypto_onetimeauth(uint8_t *out,const uint8_t *m,uint64_t n,const uint8_t *k);
|
|
|
|
/// \brief Verify an authentication tag on a message
|
|
/// \returns 0 on success, non-0 otherwise
|
|
/// \sa <A HREF="https://nacl.cr.yp.to/onetimeauth.html">NaCl crypto_onetimeauth documentation</A>
|
|
/// \since Crypto++ 6.0
|
|
int crypto_onetimeauth_verify(const uint8_t *h,const uint8_t *m,uint64_t n,const uint8_t *k);
|
|
|
|
/// \brief Scalar multiplication of a point
|
|
/// \details crypto_scalarmult() uses crypto_scalarmult_curve25519
|
|
/// \returns 0 on success, non-0 otherwise
|
|
/// \sa <A HREF="https://nacl.cr.yp.to/scalarmult.html">NaCl crypto_scalarmult documentation</A>
|
|
/// \since Crypto++ 6.0
|
|
int crypto_scalarmult(uint8_t *q,const uint8_t *n,const uint8_t *p);
|
|
|
|
/// \brief Scalar multiplication of base point
|
|
/// \details crypto_scalarmult_base() uses crypto_scalarmult_curve25519
|
|
/// \returns 0 on success, non-0 otherwise
|
|
/// \sa <A HREF="https://nacl.cr.yp.to/scalarmult.html">NaCl crypto_scalarmult documentation</A>
|
|
/// \since Crypto++ 6.0
|
|
int crypto_scalarmult_base(uint8_t *q,const uint8_t *n);
|
|
|
|
/// \brief Encrypt and authenticate a message
|
|
/// \details crypto_secretbox() uses a symmetric key to encrypt and authenticate a message.
|
|
/// \returns 0 on success, non-0 otherwise
|
|
/// \sa <A HREF="https://nacl.cr.yp.to/secretbox.html">NaCl crypto_secretbox documentation</A>
|
|
/// \since Crypto++ 6.0
|
|
int crypto_secretbox(uint8_t *c,const uint8_t *m,uint64_t d,const uint8_t *n,const uint8_t *k);
|
|
|
|
/// \brief Verify and decrypt a message
|
|
/// \returns 0 on success, non-0 otherwise
|
|
/// \sa <A HREF="https://nacl.cr.yp.to/secretbox.html">NaCl crypto_secretbox documentation</A>
|
|
/// \since Crypto++ 6.0
|
|
int crypto_secretbox_open(uint8_t *m,const uint8_t *c,uint64_t d,const uint8_t *n,const uint8_t *k);
|
|
|
|
/// \brief Sign a message
|
|
/// \param sm output byte buffer
|
|
/// \param smlen size of the output byte buffer
|
|
/// \param m input byte buffer
|
|
/// \param n size of the input byte buffer
|
|
/// \param sk private key
|
|
/// \details crypto_sign() uses crypto_sign_ed25519.
|
|
/// \returns 0 on success, non-0 otherwise
|
|
/// \sa <A HREF="https://nacl.cr.yp.to/sign.html">NaCl crypto_sign documentation</A>
|
|
/// \since Crypto++ 6.0
|
|
int crypto_sign(uint8_t *sm,uint64_t *smlen,const uint8_t *m,uint64_t n,const uint8_t *sk);
|
|
|
|
/// \brief Verify a message
|
|
/// \param m output byte buffer
|
|
/// \param mlen size of the output byte buffer
|
|
/// \param sm input byte buffer
|
|
/// \param n size of the input byte buffer
|
|
/// \param pk public key
|
|
/// \returns 0 on success, non-0 otherwise
|
|
/// \sa <A HREF="https://nacl.cr.yp.to/sign.html">NaCl crypto_sign documentation</A>
|
|
/// \since Crypto++ 6.0
|
|
int crypto_sign_open(uint8_t *m,uint64_t *mlen,const uint8_t *sm,uint64_t n,const uint8_t *pk);
|
|
|
|
/// \brief Generate a keypair for signing
|
|
/// \param pk public key byte buffer
|
|
/// \param sk private key byte buffer
|
|
/// \details crypto_sign_keypair() creates an ed25519 keypair.
|
|
/// \returns 0 on success, non-0 otherwise
|
|
/// \sa <A HREF="https://nacl.cr.yp.to/sign.html">NaCl crypto_sign documentation</A>
|
|
/// \since Crypto++ 6.0
|
|
int crypto_sign_keypair(uint8_t *pk, uint8_t *sk);
|
|
|
|
/// \brief Produce a keystream using XSalsa20
|
|
/// \details crypto_stream() uses crypto_stream_xsalsa20
|
|
/// \returns 0 on success, non-0 otherwise
|
|
/// \sa <A HREF="https://nacl.cr.yp.to/stream.html">NaCl crypto_stream documentation</A>
|
|
/// \since Crypto++ 6.0
|
|
int crypto_stream(uint8_t *c,uint64_t d,const uint8_t *n,const uint8_t *k);
|
|
|
|
/// \brief Encrypt a message using XSalsa20
|
|
/// \returns 0 on success, non-0 otherwise
|
|
/// \sa <A HREF="https://nacl.cr.yp.to/stream.html">NaCl crypto_stream documentation</A>
|
|
/// \since Crypto++ 6.0
|
|
int crypto_stream_xor(uint8_t *c,const uint8_t *m,uint64_t d,const uint8_t *n,const uint8_t *k);
|
|
|
|
/// \brief Produce a keystream using Salsa20
|
|
/// \returns 0 on success, non-0 otherwise
|
|
/// \sa <A HREF="https://nacl.cr.yp.to/stream.html">NaCl crypto_stream documentation</A>
|
|
/// \since Crypto++ 6.0
|
|
int crypto_stream_salsa20(uint8_t *c,uint64_t d,const uint8_t *n,const uint8_t *k);
|
|
|
|
/// \brief Encrypt a message using Salsa20
|
|
/// \returns 0 on success, non-0 otherwise
|
|
/// \sa <A HREF="https://nacl.cr.yp.to/stream.html">NaCl crypto_stream documentation</A>
|
|
/// \since Crypto++ 6.0
|
|
int crypto_stream_salsa20_xor(uint8_t *c,const uint8_t *m,uint64_t b,const uint8_t *n,const uint8_t *k);
|
|
|
|
/// \brief Compare 16-byte buffers
|
|
/// \returns 0 on success, non-0 otherwise
|
|
/// \sa <A HREF="https://nacl.cr.yp.to/verify.html">NaCl crypto_verify documentation</A>
|
|
/// \since Crypto++ 6.0
|
|
int crypto_verify_16(const uint8_t *x,const uint8_t *y);
|
|
|
|
/// \brief Compare 32-byte buffers
|
|
/// \returns 0 on success, non-0 otherwise
|
|
/// \sa <A HREF="https://nacl.cr.yp.to/verify.html">NaCl crypto_verify documentation</A>
|
|
/// \since Crypto++ 6.0
|
|
int crypto_verify_32(const uint8_t *x,const uint8_t *y);
|
|
|
|
NAMESPACE_END // CryptoPP
|
|
NAMESPACE_END // NaCl
|
|
|
|
#endif // CRYPTOPP_DISABLE_NACL
|
|
#endif // CRYPTOPP_NACL_H
|