1*e7be843bSPierre Pronchery /*
2*e7be843bSPierre Pronchery * Copyright 2019-2025 The OpenSSL Project Authors. All Rights Reserved.
3*e7be843bSPierre Pronchery *
4*e7be843bSPierre Pronchery * Licensed under the Apache License 2.0 (the "License"). You may not use
5*e7be843bSPierre Pronchery * this file except in compliance with the License. You can obtain a copy
6*e7be843bSPierre Pronchery * in the file LICENSE in the source distribution or at
7*e7be843bSPierre Pronchery * https://www.openssl.org/source/license.html
8*e7be843bSPierre Pronchery */
9*e7be843bSPierre Pronchery
10*e7be843bSPierre Pronchery /* Dispatch functions for AES SIV mode */
11*e7be843bSPierre Pronchery
12*e7be843bSPierre Pronchery /*
13*e7be843bSPierre Pronchery * This file uses the low level AES functions (which are deprecated for
14*e7be843bSPierre Pronchery * non-internal use) in order to implement provider AES ciphers.
15*e7be843bSPierre Pronchery */
16*e7be843bSPierre Pronchery #include "internal/deprecated.h"
17*e7be843bSPierre Pronchery
18*e7be843bSPierre Pronchery #include <openssl/proverr.h>
19*e7be843bSPierre Pronchery #include "prov/implementations.h"
20*e7be843bSPierre Pronchery #include "prov/providercommon.h"
21*e7be843bSPierre Pronchery #include "prov/ciphercommon_aead.h"
22*e7be843bSPierre Pronchery #include "prov/provider_ctx.h"
23*e7be843bSPierre Pronchery #include "cipher_aes_gcm_siv.h"
24*e7be843bSPierre Pronchery
25*e7be843bSPierre Pronchery static int ossl_aes_gcm_siv_set_ctx_params(void *vctx, const OSSL_PARAM params[]);
26*e7be843bSPierre Pronchery
ossl_aes_gcm_siv_newctx(void * provctx,size_t keybits)27*e7be843bSPierre Pronchery static void *ossl_aes_gcm_siv_newctx(void *provctx, size_t keybits)
28*e7be843bSPierre Pronchery {
29*e7be843bSPierre Pronchery PROV_AES_GCM_SIV_CTX *ctx;
30*e7be843bSPierre Pronchery
31*e7be843bSPierre Pronchery if (!ossl_prov_is_running())
32*e7be843bSPierre Pronchery return NULL;
33*e7be843bSPierre Pronchery
34*e7be843bSPierre Pronchery ctx = OPENSSL_zalloc(sizeof(*ctx));
35*e7be843bSPierre Pronchery if (ctx != NULL) {
36*e7be843bSPierre Pronchery ctx->key_len = keybits / 8;
37*e7be843bSPierre Pronchery ctx->hw = ossl_prov_cipher_hw_aes_gcm_siv(keybits);
38*e7be843bSPierre Pronchery ctx->libctx = PROV_LIBCTX_OF(provctx);
39*e7be843bSPierre Pronchery ctx->provctx = provctx;
40*e7be843bSPierre Pronchery }
41*e7be843bSPierre Pronchery return ctx;
42*e7be843bSPierre Pronchery }
43*e7be843bSPierre Pronchery
ossl_aes_gcm_siv_freectx(void * vctx)44*e7be843bSPierre Pronchery static void ossl_aes_gcm_siv_freectx(void *vctx)
45*e7be843bSPierre Pronchery {
46*e7be843bSPierre Pronchery PROV_AES_GCM_SIV_CTX *ctx = (PROV_AES_GCM_SIV_CTX *)vctx;
47*e7be843bSPierre Pronchery
48*e7be843bSPierre Pronchery if (ctx == NULL)
49*e7be843bSPierre Pronchery return;
50*e7be843bSPierre Pronchery
51*e7be843bSPierre Pronchery OPENSSL_clear_free(ctx->aad, ctx->aad_len);
52*e7be843bSPierre Pronchery ctx->hw->clean_ctx(ctx);
53*e7be843bSPierre Pronchery OPENSSL_clear_free(ctx, sizeof(*ctx));
54*e7be843bSPierre Pronchery }
55*e7be843bSPierre Pronchery
ossl_aes_gcm_siv_dupctx(void * vctx)56*e7be843bSPierre Pronchery static void *ossl_aes_gcm_siv_dupctx(void *vctx)
57*e7be843bSPierre Pronchery {
58*e7be843bSPierre Pronchery PROV_AES_GCM_SIV_CTX *in = (PROV_AES_GCM_SIV_CTX *)vctx;
59*e7be843bSPierre Pronchery PROV_AES_GCM_SIV_CTX *ret;
60*e7be843bSPierre Pronchery
61*e7be843bSPierre Pronchery if (!ossl_prov_is_running())
62*e7be843bSPierre Pronchery return NULL;
63*e7be843bSPierre Pronchery
64*e7be843bSPierre Pronchery if (in->hw == NULL)
65*e7be843bSPierre Pronchery return NULL;
66*e7be843bSPierre Pronchery
67*e7be843bSPierre Pronchery ret = OPENSSL_memdup(in, sizeof(*in));
68*e7be843bSPierre Pronchery if (ret == NULL)
69*e7be843bSPierre Pronchery return NULL;
70*e7be843bSPierre Pronchery /* NULL-out these things we create later */
71*e7be843bSPierre Pronchery ret->aad = NULL;
72*e7be843bSPierre Pronchery ret->ecb_ctx = NULL;
73*e7be843bSPierre Pronchery
74*e7be843bSPierre Pronchery if (in->aad != NULL) {
75*e7be843bSPierre Pronchery if ((ret->aad = OPENSSL_memdup(in->aad, UP16(ret->aad_len))) == NULL)
76*e7be843bSPierre Pronchery goto err;
77*e7be843bSPierre Pronchery }
78*e7be843bSPierre Pronchery
79*e7be843bSPierre Pronchery if (!in->hw->dup_ctx(ret, in))
80*e7be843bSPierre Pronchery goto err;
81*e7be843bSPierre Pronchery
82*e7be843bSPierre Pronchery return ret;
83*e7be843bSPierre Pronchery err:
84*e7be843bSPierre Pronchery if (ret != NULL) {
85*e7be843bSPierre Pronchery OPENSSL_clear_free(ret->aad, ret->aad_len);
86*e7be843bSPierre Pronchery OPENSSL_free(ret);
87*e7be843bSPierre Pronchery }
88*e7be843bSPierre Pronchery return NULL;
89*e7be843bSPierre Pronchery }
90*e7be843bSPierre Pronchery
ossl_aes_gcm_siv_init(void * vctx,const unsigned char * key,size_t keylen,const unsigned char * iv,size_t ivlen,const OSSL_PARAM params[],int enc)91*e7be843bSPierre Pronchery static int ossl_aes_gcm_siv_init(void *vctx, const unsigned char *key, size_t keylen,
92*e7be843bSPierre Pronchery const unsigned char *iv, size_t ivlen,
93*e7be843bSPierre Pronchery const OSSL_PARAM params[], int enc)
94*e7be843bSPierre Pronchery {
95*e7be843bSPierre Pronchery PROV_AES_GCM_SIV_CTX *ctx = (PROV_AES_GCM_SIV_CTX *)vctx;
96*e7be843bSPierre Pronchery
97*e7be843bSPierre Pronchery if (!ossl_prov_is_running())
98*e7be843bSPierre Pronchery return 0;
99*e7be843bSPierre Pronchery
100*e7be843bSPierre Pronchery ctx->enc = enc;
101*e7be843bSPierre Pronchery
102*e7be843bSPierre Pronchery if (key != NULL) {
103*e7be843bSPierre Pronchery if (keylen != ctx->key_len) {
104*e7be843bSPierre Pronchery ERR_raise(ERR_LIB_PROV, PROV_R_INVALID_KEY_LENGTH);
105*e7be843bSPierre Pronchery return 0;
106*e7be843bSPierre Pronchery }
107*e7be843bSPierre Pronchery memcpy(ctx->key_gen_key, key, ctx->key_len);
108*e7be843bSPierre Pronchery }
109*e7be843bSPierre Pronchery if (iv != NULL) {
110*e7be843bSPierre Pronchery if (ivlen != sizeof(ctx->nonce)) {
111*e7be843bSPierre Pronchery ERR_raise(ERR_LIB_PROV, PROV_R_INVALID_IV_LENGTH);
112*e7be843bSPierre Pronchery return 0;
113*e7be843bSPierre Pronchery }
114*e7be843bSPierre Pronchery memcpy(ctx->nonce, iv, sizeof(ctx->nonce));
115*e7be843bSPierre Pronchery }
116*e7be843bSPierre Pronchery
117*e7be843bSPierre Pronchery if (!ctx->hw->initkey(ctx))
118*e7be843bSPierre Pronchery return 0;
119*e7be843bSPierre Pronchery
120*e7be843bSPierre Pronchery return ossl_aes_gcm_siv_set_ctx_params(ctx, params);
121*e7be843bSPierre Pronchery }
122*e7be843bSPierre Pronchery
ossl_aes_gcm_siv_einit(void * vctx,const unsigned char * key,size_t keylen,const unsigned char * iv,size_t ivlen,const OSSL_PARAM params[])123*e7be843bSPierre Pronchery static int ossl_aes_gcm_siv_einit(void *vctx, const unsigned char *key, size_t keylen,
124*e7be843bSPierre Pronchery const unsigned char *iv, size_t ivlen,
125*e7be843bSPierre Pronchery const OSSL_PARAM params[])
126*e7be843bSPierre Pronchery {
127*e7be843bSPierre Pronchery return ossl_aes_gcm_siv_init(vctx, key, keylen, iv, ivlen, params, 1);
128*e7be843bSPierre Pronchery }
129*e7be843bSPierre Pronchery
ossl_aes_gcm_siv_dinit(void * vctx,const unsigned char * key,size_t keylen,const unsigned char * iv,size_t ivlen,const OSSL_PARAM params[])130*e7be843bSPierre Pronchery static int ossl_aes_gcm_siv_dinit(void *vctx, const unsigned char *key, size_t keylen,
131*e7be843bSPierre Pronchery const unsigned char *iv, size_t ivlen,
132*e7be843bSPierre Pronchery const OSSL_PARAM params[])
133*e7be843bSPierre Pronchery {
134*e7be843bSPierre Pronchery return ossl_aes_gcm_siv_init(vctx, key, keylen, iv, ivlen, params, 0);
135*e7be843bSPierre Pronchery }
136*e7be843bSPierre Pronchery
137*e7be843bSPierre Pronchery #define ossl_aes_gcm_siv_stream_update ossl_aes_gcm_siv_cipher
ossl_aes_gcm_siv_cipher(void * vctx,unsigned char * out,size_t * outl,size_t outsize,const unsigned char * in,size_t inl)138*e7be843bSPierre Pronchery static int ossl_aes_gcm_siv_cipher(void *vctx, unsigned char *out, size_t *outl,
139*e7be843bSPierre Pronchery size_t outsize, const unsigned char *in, size_t inl)
140*e7be843bSPierre Pronchery {
141*e7be843bSPierre Pronchery PROV_AES_GCM_SIV_CTX *ctx = (PROV_AES_GCM_SIV_CTX *)vctx;
142*e7be843bSPierre Pronchery int error = 0;
143*e7be843bSPierre Pronchery
144*e7be843bSPierre Pronchery if (!ossl_prov_is_running())
145*e7be843bSPierre Pronchery return 0;
146*e7be843bSPierre Pronchery
147*e7be843bSPierre Pronchery if (outsize < inl) {
148*e7be843bSPierre Pronchery ERR_raise(ERR_LIB_PROV, PROV_R_OUTPUT_BUFFER_TOO_SMALL);
149*e7be843bSPierre Pronchery return 0;
150*e7be843bSPierre Pronchery }
151*e7be843bSPierre Pronchery
152*e7be843bSPierre Pronchery error |= !ctx->hw->cipher(ctx, out, in, inl);
153*e7be843bSPierre Pronchery
154*e7be843bSPierre Pronchery if (outl != NULL && !error)
155*e7be843bSPierre Pronchery *outl = inl;
156*e7be843bSPierre Pronchery return !error;
157*e7be843bSPierre Pronchery }
158*e7be843bSPierre Pronchery
ossl_aes_gcm_siv_stream_final(void * vctx,unsigned char * out,size_t * outl,size_t outsize)159*e7be843bSPierre Pronchery static int ossl_aes_gcm_siv_stream_final(void *vctx, unsigned char *out, size_t *outl,
160*e7be843bSPierre Pronchery size_t outsize)
161*e7be843bSPierre Pronchery {
162*e7be843bSPierre Pronchery PROV_AES_GCM_SIV_CTX *ctx = (PROV_AES_GCM_SIV_CTX *)vctx;
163*e7be843bSPierre Pronchery int error = 0;
164*e7be843bSPierre Pronchery
165*e7be843bSPierre Pronchery if (!ossl_prov_is_running())
166*e7be843bSPierre Pronchery return 0;
167*e7be843bSPierre Pronchery
168*e7be843bSPierre Pronchery error |= !ctx->hw->cipher(vctx, out, NULL, 0);
169*e7be843bSPierre Pronchery
170*e7be843bSPierre Pronchery if (outl != NULL && !error)
171*e7be843bSPierre Pronchery *outl = 0;
172*e7be843bSPierre Pronchery return !error;
173*e7be843bSPierre Pronchery }
174*e7be843bSPierre Pronchery
ossl_aes_gcm_siv_get_ctx_params(void * vctx,OSSL_PARAM params[])175*e7be843bSPierre Pronchery static int ossl_aes_gcm_siv_get_ctx_params(void *vctx, OSSL_PARAM params[])
176*e7be843bSPierre Pronchery {
177*e7be843bSPierre Pronchery PROV_AES_GCM_SIV_CTX *ctx = (PROV_AES_GCM_SIV_CTX *)vctx;
178*e7be843bSPierre Pronchery OSSL_PARAM *p;
179*e7be843bSPierre Pronchery
180*e7be843bSPierre Pronchery p = OSSL_PARAM_locate(params, OSSL_CIPHER_PARAM_AEAD_TAG);
181*e7be843bSPierre Pronchery if (p != NULL && p->data_type == OSSL_PARAM_OCTET_STRING) {
182*e7be843bSPierre Pronchery if (!ctx->enc || !ctx->generated_tag
183*e7be843bSPierre Pronchery || p->data_size != sizeof(ctx->tag)
184*e7be843bSPierre Pronchery || !OSSL_PARAM_set_octet_string(p, ctx->tag, sizeof(ctx->tag))) {
185*e7be843bSPierre Pronchery ERR_raise(ERR_LIB_PROV, PROV_R_FAILED_TO_SET_PARAMETER);
186*e7be843bSPierre Pronchery return 0;
187*e7be843bSPierre Pronchery }
188*e7be843bSPierre Pronchery }
189*e7be843bSPierre Pronchery p = OSSL_PARAM_locate(params, OSSL_CIPHER_PARAM_AEAD_TAGLEN);
190*e7be843bSPierre Pronchery if (p != NULL && !OSSL_PARAM_set_size_t(p, sizeof(ctx->tag))) {
191*e7be843bSPierre Pronchery ERR_raise(ERR_LIB_PROV, PROV_R_FAILED_TO_SET_PARAMETER);
192*e7be843bSPierre Pronchery return 0;
193*e7be843bSPierre Pronchery }
194*e7be843bSPierre Pronchery p = OSSL_PARAM_locate(params, OSSL_CIPHER_PARAM_KEYLEN);
195*e7be843bSPierre Pronchery if (p != NULL && !OSSL_PARAM_set_size_t(p, ctx->key_len)) {
196*e7be843bSPierre Pronchery ERR_raise(ERR_LIB_PROV, PROV_R_FAILED_TO_SET_PARAMETER);
197*e7be843bSPierre Pronchery return 0;
198*e7be843bSPierre Pronchery }
199*e7be843bSPierre Pronchery return 1;
200*e7be843bSPierre Pronchery }
201*e7be843bSPierre Pronchery
202*e7be843bSPierre Pronchery static const OSSL_PARAM aes_gcm_siv_known_gettable_ctx_params[] = {
203*e7be843bSPierre Pronchery OSSL_PARAM_size_t(OSSL_CIPHER_PARAM_KEYLEN, NULL),
204*e7be843bSPierre Pronchery OSSL_PARAM_size_t(OSSL_CIPHER_PARAM_AEAD_TAGLEN, NULL),
205*e7be843bSPierre Pronchery OSSL_PARAM_octet_string(OSSL_CIPHER_PARAM_AEAD_TAG, NULL, 0),
206*e7be843bSPierre Pronchery OSSL_PARAM_END
207*e7be843bSPierre Pronchery };
208*e7be843bSPierre Pronchery
ossl_aes_gcm_siv_gettable_ctx_params(ossl_unused void * cctx,ossl_unused void * provctx)209*e7be843bSPierre Pronchery static const OSSL_PARAM *ossl_aes_gcm_siv_gettable_ctx_params(ossl_unused void *cctx,
210*e7be843bSPierre Pronchery ossl_unused void *provctx)
211*e7be843bSPierre Pronchery {
212*e7be843bSPierre Pronchery return aes_gcm_siv_known_gettable_ctx_params;
213*e7be843bSPierre Pronchery }
214*e7be843bSPierre Pronchery
ossl_aes_gcm_siv_set_ctx_params(void * vctx,const OSSL_PARAM params[])215*e7be843bSPierre Pronchery static int ossl_aes_gcm_siv_set_ctx_params(void *vctx, const OSSL_PARAM params[])
216*e7be843bSPierre Pronchery {
217*e7be843bSPierre Pronchery PROV_AES_GCM_SIV_CTX *ctx = (PROV_AES_GCM_SIV_CTX *)vctx;
218*e7be843bSPierre Pronchery const OSSL_PARAM *p;
219*e7be843bSPierre Pronchery unsigned int speed = 0;
220*e7be843bSPierre Pronchery
221*e7be843bSPierre Pronchery if (ossl_param_is_empty(params))
222*e7be843bSPierre Pronchery return 1;
223*e7be843bSPierre Pronchery
224*e7be843bSPierre Pronchery p = OSSL_PARAM_locate_const(params, OSSL_CIPHER_PARAM_AEAD_TAG);
225*e7be843bSPierre Pronchery if (p != NULL) {
226*e7be843bSPierre Pronchery if (p->data_type != OSSL_PARAM_OCTET_STRING
227*e7be843bSPierre Pronchery || p->data_size != sizeof(ctx->user_tag)) {
228*e7be843bSPierre Pronchery ERR_raise(ERR_LIB_PROV, PROV_R_FAILED_TO_GET_PARAMETER);
229*e7be843bSPierre Pronchery return 0;
230*e7be843bSPierre Pronchery }
231*e7be843bSPierre Pronchery if (!ctx->enc) {
232*e7be843bSPierre Pronchery memcpy(ctx->user_tag, p->data, sizeof(ctx->tag));
233*e7be843bSPierre Pronchery ctx->have_user_tag = 1;
234*e7be843bSPierre Pronchery }
235*e7be843bSPierre Pronchery }
236*e7be843bSPierre Pronchery p = OSSL_PARAM_locate_const(params, OSSL_CIPHER_PARAM_SPEED);
237*e7be843bSPierre Pronchery if (p != NULL) {
238*e7be843bSPierre Pronchery if (!OSSL_PARAM_get_uint(p, &speed)) {
239*e7be843bSPierre Pronchery ERR_raise(ERR_LIB_PROV, PROV_R_FAILED_TO_GET_PARAMETER);
240*e7be843bSPierre Pronchery return 0;
241*e7be843bSPierre Pronchery }
242*e7be843bSPierre Pronchery ctx->speed = !!speed;
243*e7be843bSPierre Pronchery }
244*e7be843bSPierre Pronchery p = OSSL_PARAM_locate_const(params, OSSL_CIPHER_PARAM_KEYLEN);
245*e7be843bSPierre Pronchery if (p != NULL) {
246*e7be843bSPierre Pronchery size_t key_len;
247*e7be843bSPierre Pronchery
248*e7be843bSPierre Pronchery if (!OSSL_PARAM_get_size_t(p, &key_len)) {
249*e7be843bSPierre Pronchery ERR_raise(ERR_LIB_PROV, PROV_R_FAILED_TO_GET_PARAMETER);
250*e7be843bSPierre Pronchery return 0;
251*e7be843bSPierre Pronchery }
252*e7be843bSPierre Pronchery /* The key length can not be modified */
253*e7be843bSPierre Pronchery if (key_len != ctx->key_len) {
254*e7be843bSPierre Pronchery ERR_raise(ERR_LIB_PROV, PROV_R_INVALID_KEY_LENGTH);
255*e7be843bSPierre Pronchery return 0;
256*e7be843bSPierre Pronchery }
257*e7be843bSPierre Pronchery }
258*e7be843bSPierre Pronchery return 1;
259*e7be843bSPierre Pronchery }
260*e7be843bSPierre Pronchery
261*e7be843bSPierre Pronchery static const OSSL_PARAM aes_gcm_siv_known_settable_ctx_params[] = {
262*e7be843bSPierre Pronchery OSSL_PARAM_size_t(OSSL_CIPHER_PARAM_KEYLEN, NULL),
263*e7be843bSPierre Pronchery OSSL_PARAM_uint(OSSL_CIPHER_PARAM_SPEED, NULL),
264*e7be843bSPierre Pronchery OSSL_PARAM_octet_string(OSSL_CIPHER_PARAM_AEAD_TAG, NULL, 0),
265*e7be843bSPierre Pronchery OSSL_PARAM_END
266*e7be843bSPierre Pronchery };
ossl_aes_gcm_siv_settable_ctx_params(ossl_unused void * cctx,ossl_unused void * provctx)267*e7be843bSPierre Pronchery static const OSSL_PARAM *ossl_aes_gcm_siv_settable_ctx_params(ossl_unused void *cctx,
268*e7be843bSPierre Pronchery ossl_unused void *provctx)
269*e7be843bSPierre Pronchery {
270*e7be843bSPierre Pronchery return aes_gcm_siv_known_settable_ctx_params;
271*e7be843bSPierre Pronchery }
272*e7be843bSPierre Pronchery
273*e7be843bSPierre Pronchery #define IMPLEMENT_cipher(alg, lc, UCMODE, flags, kbits, blkbits, ivbits) \
274*e7be843bSPierre Pronchery static OSSL_FUNC_cipher_newctx_fn ossl_##alg##kbits##_##lc##_newctx; \
275*e7be843bSPierre Pronchery static OSSL_FUNC_cipher_freectx_fn ossl_##alg##_##lc##_freectx; \
276*e7be843bSPierre Pronchery static OSSL_FUNC_cipher_dupctx_fn ossl_##alg##_##lc##_dupctx; \
277*e7be843bSPierre Pronchery static OSSL_FUNC_cipher_encrypt_init_fn ossl_##alg##_##lc##_einit; \
278*e7be843bSPierre Pronchery static OSSL_FUNC_cipher_decrypt_init_fn ossl_##alg##_##lc##_dinit; \
279*e7be843bSPierre Pronchery static OSSL_FUNC_cipher_update_fn ossl_##alg##_##lc##_stream_update; \
280*e7be843bSPierre Pronchery static OSSL_FUNC_cipher_final_fn ossl_##alg##_##lc##_stream_final; \
281*e7be843bSPierre Pronchery static OSSL_FUNC_cipher_cipher_fn ossl_##alg##_##lc##_cipher; \
282*e7be843bSPierre Pronchery static OSSL_FUNC_cipher_get_params_fn ossl_##alg##_##kbits##_##lc##_get_params; \
283*e7be843bSPierre Pronchery static OSSL_FUNC_cipher_get_ctx_params_fn ossl_##alg##_##lc##_get_ctx_params; \
284*e7be843bSPierre Pronchery static OSSL_FUNC_cipher_gettable_ctx_params_fn ossl_##alg##_##lc##_gettable_ctx_params; \
285*e7be843bSPierre Pronchery static OSSL_FUNC_cipher_set_ctx_params_fn ossl_##alg##_##lc##_set_ctx_params; \
286*e7be843bSPierre Pronchery static OSSL_FUNC_cipher_settable_ctx_params_fn ossl_##alg##_##lc##_settable_ctx_params; \
287*e7be843bSPierre Pronchery static int ossl_##alg##_##kbits##_##lc##_get_params(OSSL_PARAM params[]) \
288*e7be843bSPierre Pronchery { \
289*e7be843bSPierre Pronchery return ossl_cipher_generic_get_params(params, EVP_CIPH_##UCMODE##_MODE, \
290*e7be843bSPierre Pronchery flags, kbits, blkbits, ivbits); \
291*e7be843bSPierre Pronchery } \
292*e7be843bSPierre Pronchery static void *ossl_##alg##kbits##_##lc##_newctx(void *provctx) \
293*e7be843bSPierre Pronchery { \
294*e7be843bSPierre Pronchery return ossl_##alg##_##lc##_newctx(provctx, kbits); \
295*e7be843bSPierre Pronchery } \
296*e7be843bSPierre Pronchery const OSSL_DISPATCH ossl_##alg##kbits##lc##_functions[] = { \
297*e7be843bSPierre Pronchery { OSSL_FUNC_CIPHER_NEWCTX, (void (*)(void))ossl_##alg##kbits##_##lc##_newctx }, \
298*e7be843bSPierre Pronchery { OSSL_FUNC_CIPHER_FREECTX, (void (*)(void))ossl_##alg##_##lc##_freectx }, \
299*e7be843bSPierre Pronchery { OSSL_FUNC_CIPHER_DUPCTX, (void (*)(void))ossl_##alg##_##lc##_dupctx }, \
300*e7be843bSPierre Pronchery { OSSL_FUNC_CIPHER_ENCRYPT_INIT, (void (*)(void))ossl_##alg##_##lc##_einit }, \
301*e7be843bSPierre Pronchery { OSSL_FUNC_CIPHER_DECRYPT_INIT, (void (*)(void))ossl_##alg##_##lc##_dinit }, \
302*e7be843bSPierre Pronchery { OSSL_FUNC_CIPHER_UPDATE, (void (*)(void))ossl_##alg##_##lc##_stream_update }, \
303*e7be843bSPierre Pronchery { OSSL_FUNC_CIPHER_FINAL, (void (*)(void))ossl_##alg##_##lc##_stream_final }, \
304*e7be843bSPierre Pronchery { OSSL_FUNC_CIPHER_CIPHER, (void (*)(void))ossl_##alg##_##lc##_cipher }, \
305*e7be843bSPierre Pronchery { OSSL_FUNC_CIPHER_GET_PARAMS, (void (*)(void))ossl_##alg##_##kbits##_##lc##_get_params }, \
306*e7be843bSPierre Pronchery { OSSL_FUNC_CIPHER_GETTABLE_PARAMS, (void (*)(void))ossl_cipher_generic_gettable_params }, \
307*e7be843bSPierre Pronchery { OSSL_FUNC_CIPHER_GET_CTX_PARAMS, (void (*)(void))ossl_##alg##_##lc##_get_ctx_params }, \
308*e7be843bSPierre Pronchery { OSSL_FUNC_CIPHER_GETTABLE_CTX_PARAMS, (void (*)(void))ossl_##alg##_##lc##_gettable_ctx_params }, \
309*e7be843bSPierre Pronchery { OSSL_FUNC_CIPHER_SET_CTX_PARAMS, (void (*)(void))ossl_##alg##_##lc##_set_ctx_params }, \
310*e7be843bSPierre Pronchery { OSSL_FUNC_CIPHER_SETTABLE_CTX_PARAMS, (void (*)(void))ossl_##alg##_##lc##_settable_ctx_params }, \
311*e7be843bSPierre Pronchery OSSL_DISPATCH_END \
312*e7be843bSPierre Pronchery }
313*e7be843bSPierre Pronchery
314*e7be843bSPierre Pronchery IMPLEMENT_cipher(aes, gcm_siv, GCM_SIV, AEAD_FLAGS, 128, 8, 96);
315*e7be843bSPierre Pronchery IMPLEMENT_cipher(aes, gcm_siv, GCM_SIV, AEAD_FLAGS, 192, 8, 96);
316*e7be843bSPierre Pronchery IMPLEMENT_cipher(aes, gcm_siv, GCM_SIV, AEAD_FLAGS, 256, 8, 96);
317