Lines Matching defs:nonce
70 } nonce;
71 unsigned int nonce_size; /* nonce bytes filled so far */
500 memcpy(&dctx->nonce.bytes[dctx->nonce_size], p, n);
572 * The VMAC specification requires a nonce at least 1 bit shorter than
574 * nonce. We define the unused bit to be the first one and require that
577 if (dctx->nonce.bytes[0] & 0x80)
583 /* Generate pseudorandom pad by encrypting the nonce */
585 index = dctx->nonce.bytes[VMAC_NONCEBYTES - 1] & 1;
586 dctx->nonce.bytes[VMAC_NONCEBYTES - 1] &= ~1;
587 crypto_cipher_encrypt_one(tctx->cipher, dctx->nonce.bytes,
588 dctx->nonce.bytes);
589 pad = be64_to_cpu(dctx->nonce.pads[index]);