[CRYPTO] xts: XTS blockcipher mode implementation without partial blocks
authorRik Snel <rsnel@cube.dyndns.org>
Wed, 19 Sep 2007 12:23:13 +0000 (20:23 +0800)
committerDavid S. Miller <davem@sunset.davemloft.net>
Wed, 10 Oct 2007 23:55:45 +0000 (16:55 -0700)
commitf19f5111c94053ba4931892f5c01c806de33942e
treeb40dfae8fa170ebdc92fdcfeb3000c84d6203645
parent5aaff0c8f7dd3515c9f1ca57f86463f30779acc7
[CRYPTO] xts: XTS blockcipher mode implementation without partial blocks

XTS currently considered to be the successor of the LRW mode by the IEEE1619
workgroup. LRW was discarded, because it was not secure if the encyption key
itself is encrypted with LRW.

XTS does not have this problem. The implementation is pretty straightforward,
a new function was added to gf128mul to handle GF(128) elements in ble format.
Four testvectors from the specification
http://grouper.ieee.org/groups/1619/email/pdf00086.pdf
were added, and they verify on my system.

Signed-off-by: Rik Snel <rsnel@cube.dyndns.org>
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
crypto/Kconfig
crypto/Makefile
crypto/gf128mul.c
crypto/tcrypt.c
crypto/tcrypt.h
crypto/xts.c [new file with mode: 0644]
include/crypto/gf128mul.h