[PATCH] an XTS blockcipher mode implementation without partial blocks

2007-09-06 Thread Rik Snel
gf128mul to handle GF(128) elements in ble format. Four testvectors from the specification http://grouper.ieee.org/groups/1619/email/pdf00086.pdf were added, and they verify on my system. Signed-off-by: Rik Snel <[EMAIL PROTECTED]> --- crypto/Kconfig| 11 ++ crypto/Ma

[PATCH] an XTS blockcipher mode implementation without partial blocks

2007-09-03 Thread Rik Snel
gf128mul to handle GF(128) elements in ble format. Four testvectors from the specification http://grouper.ieee.org/groups/1619/email/pdf00086.pdf were added, and they verify on my system. Signed-off-by: Rik Snel <[EMAIL PROTECTED]> --- crypto/Kconfig| 11 ++ crypto/Ma

[BLOCK] dm-crypt: add support for very wide (>512 bytes) block modes

2006-09-25 Thread Rik Snel
From: Rik Snel <[EMAIL PROTECTED]> By default dm-crypt sends and receives chunks of 512 bytes to and from the crypto layer. For implementing deniable harddisk encryption it is useful to make these chunks larger; i.e. equal to the filesystem block size. If a wide block cipher mode (like A

[PATCH 2/2] ABL, Arbitrary Block Length, a tweakable wide block cipher mode

2006-09-23 Thread Rik Snel
From: Rik Snel <[EMAIL PROTECTED]> This is a preliminary implementation of ABL as specified by David McGrew and John Viega in: - http://grouper.ieee.org/groups/1619/email/rtf0.rtf (October 28, 2004) - http://grouper.ieee.org/groups/1619/email/pdf5.pdf (April 15, 2004) Preli

[PATCH 1/2] crypto: bewbi IV, big endian wide block count for ABL-32-AES

2006-09-23 Thread Rik Snel
From: Rik Snel <[EMAIL PROTECTED]> ABL-32-AES needs a certain IV. This IV should be provided dm-crypt. The block cipher mode could, in principle, generate the correct IV from the plain IV, but I think that it is cleaner to supply the right IV directly. The sector -> wide block calcu

preliminary ABL implementation

2006-09-23 Thread Rik Snel
Hello Herbert/list, These patches implement the 'Arbitrary Block Length' blockcipher mode as proposed by John Viega and David McGrew in http://grouper.ieee.org/groups/1619/email/rtf0.rtf (October 28, 2004) and http://grouper.ieee.org/groups/1619/email/pdf5.pdf (April 15, 2004). The spec

[PATCH] adding speed_test_template for lrw(aes)

2006-09-23 Thread Rik Snel
From: Rik Snel <[EMAIL PROTECTED]> lrw(aes) needs a different speed_test_template from standard aes because of the different keysize, lrw(aes) has 256, 320 and 384 bits and other aes modes have 128, 192, 256 bits. Signed-off-by: Rik Snel <[EMAIL PROTECTED]> --- crypto/tcr

[PATCH 6/6] crypto: a simple way of storing and checking test vectors, LRW vectors included

2006-08-31 Thread Rik Snel
Test vectors for LRW and a simple way of checking them. For your convenience and/or for real inclusion. Signed-off-by: Rik Snel <[EMAIL PROTECTED]> --- Documentation/crypto/README.testvector |7 ++ Documentation/crypto/lrw-32-aes| 113 Documen

[PATCH 2/6] crypto: benbi IV, big endian narrow block count for LRW-32-AES

2006-08-31 Thread Rik Snel
ons. This shift is computed in .ctr and stored in cc->iv_gen_private (as a void*). Signed-off-by: Rik Snel <[EMAIL PROTECTED]> --- drivers/md/dm-crypt.c | 56 - 1 files changed, 55 insertions(+), 1 deletions(-) diff --git a/drivers/md/

[PATCH 1/6] crypto: trivial comment improvements

2006-08-31 Thread Rik Snel
Just some minor comment nits. - little-endian is better than low-endian - and since it is called essiv everywere it should also be essiv in the comments (and not ess_iv) Signed-off-by: Rik Snel <[EMAIL PROTECTED]> --- drivers/md/dm-crypt.c |8 1 files changed, 4 inse

[PATCH 5/6] crypto: LRW, Liskov Rivest Wagner, a tweakable narrow block cipher mode

2006-08-31 Thread Rik Snel
badly on bigendian machines. Signed-off-by: Rik Snel <[EMAIL PROTECTED]> --- crypto/Kconfig | 13 ++ crypto/Makefile |1 crypto/lrw.c| 297 +++ 3 files changed, 311 insertions(+), 0 deletions(-) diff --git a/crypto/Kconfig b/

[PATCH 3/6] crypto: some common 128-bit block operations, nicely centralized

2006-08-31 Thread Rik Snel
.zip The original copyright (and GPL statement) of the original author, Dr Brian Gladman, is preserved. Signed-off-by: Rik Snel <[EMAIL PROTECTED]> --- crypto/b128ops.h | 72 ++ 1 files changed, 72 insertions(+), 0 deletions(-) diff -

[PATCH 4/6] crypto: table driven multiplications in GF(2^128), needed by LRW (and in the future ABL)

2006-08-31 Thread Rik Snel
line void' functions from header to 'static void' in the source file - update to use the linux coding style conventions The original can be found at: http://fp.gladman.plus.com/AES/modes.vc8.19-06-06.zip The copyright (and GPL statement) of the original author is preserved. S

LRW implementation, please comment

2006-08-31 Thread Rik Snel
Hello Herbert (cc: list), This is an attempt at implementing LRW for the new blockcipher API. Please review, test and comment. I intend to implement ABL also (arbitrary block length), an unencumbered wide block cipher mode (it is based on GMC (Galois/Counter Mode) which is explicitly claimed to