ref: 36d2092a3330692c43f33ef4e05edc997c05ecad
dir: /sys/man/2/aes/
.TH AES 2 .SH NAME setupAESstate, aesCBCencrypt, aesCBCdecrypt, setupAESXCBCstate, aesXCBCmac - advanced encryption standard (rijndael) .SH SYNOPSIS .B #include <u.h> .br .B #include <libc.h> .br .B #include <mp.h> .br .B #include <libsec.h> .PP .in +0.5i .ti -0.5i .B void aes_encrypt(ulong rk[], int Nr, uchar pt[16], uchar ct[16]); .PP .B void aes_decrypt(ulong rk[], int Nr, uchar ct[16], uchar pt[16]); .PP .B void setupAESstate(AESstate *s, uchar key[], int keybytes, uchar *ivec) .PP .B void aesCBCencrypt(uchar *p, int len, AESstate *s) .PP .B void aesCBCdecrypt(uchar *p, int len, AESstate *s) .PP .B void setupAESXCBCstate(AESstate *s) .PP .B void aesXCBCmac(uchar *p, int len, AESstate *s) .SH DESCRIPTION AES (a.k.a. Rijndael) has replaced DES as the preferred block cipher. .I Aes_encrypt and .I aes_decrypt are the block ciphers, corresponding to .IR des (2)'s .IR block_cipher . .IR SetupAESstate , .IR aesCBCencrypt , and .I aesCBCdecrypt implement cipher-block-chaining encryption. .I setupAESXCBCstate and .I aesXCBCmac implement AES XCBC message authentication, per RFC 3566. All ciphering is performed in place. .I Keybytes should be 16, 24, or 32. The initialization vector .I ivec of .I AESbsize bytes should be random enough to be unlikely to be reused but does not need to be cryptographically strongly unpredictable. .SH SOURCE .B /sys/src/libsec .SH SEE ALSO .I aescbc in .IR secstore (1), .IR mp (2), .IR blowfish (2), .IR des (2), .IR dsa (2), .IR elgamal (2), .IR rc4 (2), .IR rsa (2), .IR sechash (2), .IR prime (2), .IR rand (2) .br .B http://csrc.nist.gov/publications/fips/fips197/fips-197.pdf .SH BUGS The functions .IR aes_encrypt , .IR aes_decrypt , .IR setupAESXCBCstate , and .IR aesXCBCmac have not yet been verified by running test vectors through them.