Public Attributes
uint32_t	rk [60]
	AES-256 expanded round-key schedule (software).

uint8_t	h [16]
	GHASH subkey H = E(K, 0^128).

GhashKey	ghk
	4-bit GHASH table built from H.

uint8_t	ks [16]
	GCTR keystream block (also the zero input used to derive H).

uint8_t	acc [16]
	GHASH accumulator.

uint8_t	lb [16]
	length block (aad_len \|\| cipher_len, in bits).

uint8_t	ej0 [16]
	E(K, J0), the tag mask.

uint8_t	j0 [16]
	pre-counter block J0 = nonce \|\| 0^31 \|\| 1.

uint8_t	ctr [16]
	running GCTR counter.

Detailed Description

Definition at line 35 of file portable_aesgcm.cpp.

Member Data Documentation

◆ rk

uint32_t GcmWork::rk[60]

AES-256 expanded round-key schedule (software).

Definition at line 37 of file portable_aesgcm.cpp.

◆ h

uint8_t GcmWork::h[16]

GHASH subkey H = E(K, 0^128).

Definition at line 38 of file portable_aesgcm.cpp.

◆ ghk

GhashKey GcmWork::ghk

4-bit GHASH table built from H.

Definition at line 39 of file portable_aesgcm.cpp.

◆ ks

uint8_t GcmWork::ks[16]

GCTR keystream block (also the zero input used to derive H).

Definition at line 40 of file portable_aesgcm.cpp.

◆ acc

uint8_t GcmWork::acc[16]

GHASH accumulator.

Definition at line 41 of file portable_aesgcm.cpp.

◆ lb

uint8_t GcmWork::lb[16]

length block (aad_len || cipher_len, in bits).

Definition at line 42 of file portable_aesgcm.cpp.

◆ ej0

uint8_t GcmWork::ej0[16]

E(K, J0), the tag mask.

Definition at line 43 of file portable_aesgcm.cpp.

Referenced by pc_aesgcm_open().

◆ j0

uint8_t GcmWork::j0[16]

pre-counter block J0 = nonce || 0^31 || 1.

Definition at line 44 of file portable_aesgcm.cpp.

Referenced by pc_aesgcm_open(), and pc_aesgcm_seal().

◆ ctr

uint8_t GcmWork::ctr[16]

running GCTR counter.

Definition at line 45 of file portable_aesgcm.cpp.