Lines Matching refs:hash
12 * cipher, two passes of an ε-almost-∆-universal (ε-∆U) hash function based on
24 * This implementation doesn't currently allow other ε-∆U hash functions, i.e.
26 * but still provably as secure, and also the ε-∆U hash function of HBSH is
29 * here. Nevertheless, if needed in the future, support for other ε-∆U hash
36 #include <crypto/internal/hash.h>
45 * cipher's block size and the hash function's output.
52 /* Size of the hash key (K_H) in bytes */
73 struct crypto_shash *hash;
96 * The result of the Poly1305 ε-∆U hash function applied to
110 * hash key K_H as follows:
170 /* Set the hash key (K_H) */
174 crypto_shash_clear_flags(tctx->hash, CRYPTO_TFM_REQ_MASK);
175 crypto_shash_set_flags(tctx->hash, crypto_skcipher_get_flags(tfm) &
177 err = crypto_shash_setkey(tctx->hash, keyp, NHPOLY1305_KEY_SIZE);
208 * Apply the Poly1305 ε-∆U hash function to (bulk length, tweak) and save the
214 * is reused in both the first and second hash steps. Specifically, it's added
215 * to the result of an independently keyed ε-∆U hash function (for equal length
217 * give the overall Adiantum hash of the (tweak, left-hand part) pair.
259 hash_desc->tfm = tctx->hash;
297 * Second hash step
337 * First hash step
369 * as the second hash step will overwrite them. Thus, round the XChaCha
403 struct crypto_shash *hash;
417 hash = crypto_spawn_shash(&ictx->hash_spawn);
418 if (IS_ERR(hash)) {
419 err = PTR_ERR(hash);
425 tctx->hash = hash;
431 crypto_shash_descsize(hash),
454 crypto_free_shash(tctx->hash);
527 /* NHPoly1305 ε-∆U hash function */
569 * matter as much as that of the stream cipher and hash function. Thus,