mirror/zig
1
0
Fork 0
mirror of https://github.com/ziglang/zig.git synced 2026-02-21 16:54:52 +00:00
Code Issues Packages Projects Releases Wiki Activity

AEGIS MAC: add support for 128-bit tags (#15379)

Browse Source 
When used as a MAC, 256-bit tags are recommended.
But in interactive protocols, 128 bits may be acceptable.
This commit is contained in:
Frank Denis 2023-04-21 13:52:33 -06:00 committed by GitHub
parent 83970b6d91
commit 391663e497
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 16 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
lib/std/crypto.zig
View File

@ -41,7 +41,9 @@ pub const auth = struct {
pub const siphash = @import("crypto/siphash.zig"); pub const siphash = @import("crypto/siphash.zig");
pub const aegis = struct { pub const aegis = struct {
pub const Aegis128LMac = @import("crypto/aegis.zig").Aegis128LMac; pub const Aegis128LMac = @import("crypto/aegis.zig").Aegis128LMac;
pub const Aegis128LMac_128 = @import("crypto/aegis.zig").Aegis128LMac_128;
pub const Aegis256Mac = @import("crypto/aegis.zig").Aegis256Mac; pub const Aegis256Mac = @import("crypto/aegis.zig").Aegis256Mac;
pub const Aegis256Mac_128 = @import("crypto/aegis.zig").Aegis256Mac_128;
}; };
pub const cmac = @import("crypto/cmac.zig"); pub const cmac = @import("crypto/cmac.zig");
}; };

14
lib/std/crypto/aegis.zig
View File

@ -417,6 +417,20 @@ pub const Aegis128LMac = AegisMac(Aegis128L_256);
/// - It has a large security margin against internal collisions. /// - It has a large security margin against internal collisions.
pub const Aegis256Mac = AegisMac(Aegis256_256); pub const Aegis256Mac = AegisMac(Aegis256_256);
/// Aegis128L MAC with a 128-bit output.
/// A MAC with a 128-bit output is not safe unless the number of messages
/// authenticated with the same key remains small.
/// After 2^48 messages, the probability of a collision is already ~ 2^-33.
/// If unsure, use the Aegis128LMac type, that has a 256 bit output.
pub const Aegis128LMac_128 = AegisMac(Aegis128L);
/// Aegis256 MAC with a 128-bit output.
/// A MAC with a 128-bit output is not safe unless the number of messages
/// authenticated with the same key remains small.
/// After 2^48 messages, the probability of a collision is already ~ 2^-33.
/// If unsure, use the Aegis256Mac type, that has a 256 bit output.
pub const Aegis256Mac_128 = AegisMac(Aegis256);
fn AegisMac(comptime T: type) type { fn AegisMac(comptime T: type) type {
return struct { return struct {
const Self = @This(); const Self = @This();