Kev Mann / mbed-dev-OS5_10_4

RTC auf true

features/mbedtls/src/chacha20.c@0:38ceb79fef03, 2018-11-28 (annotated)

Committer:
kevman
Date:
Wed Nov 28 15:10:15 2018 +0000
Revision:
0:38ceb79fef03
RTC modified

Who changed what in which revision?

UserRevisionLine numberNew contents of line
kevman 0:38ceb79fef03 1 /**
kevman 0:38ceb79fef03 2 * \file chacha20.c
kevman 0:38ceb79fef03 3 *
kevman 0:38ceb79fef03 4 * \brief ChaCha20 cipher.
kevman 0:38ceb79fef03 5 *
kevman 0:38ceb79fef03 6 * \author Daniel King <damaki.gh@gmail.com>
kevman 0:38ceb79fef03 7 *
kevman 0:38ceb79fef03 8 * Copyright (C) 2006-2016, ARM Limited, All Rights Reserved
kevman 0:38ceb79fef03 9 * SPDX-License-Identifier: Apache-2.0
kevman 0:38ceb79fef03 10 *
kevman 0:38ceb79fef03 11 * Licensed under the Apache License, Version 2.0 (the "License"); you may
kevman 0:38ceb79fef03 12 * not use this file except in compliance with the License.
kevman 0:38ceb79fef03 13 * You may obtain a copy of the License at
kevman 0:38ceb79fef03 14 *
kevman 0:38ceb79fef03 15 * http://www.apache.org/licenses/LICENSE-2.0
kevman 0:38ceb79fef03 16 *
kevman 0:38ceb79fef03 17 * Unless required by applicable law or agreed to in writing, software
kevman 0:38ceb79fef03 18 * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
kevman 0:38ceb79fef03 19 * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
kevman 0:38ceb79fef03 20 * See the License for the specific language governing permissions and
kevman 0:38ceb79fef03 21 * limitations under the License.
kevman 0:38ceb79fef03 22 *
kevman 0:38ceb79fef03 23 * This file is part of mbed TLS (https://tls.mbed.org)
kevman 0:38ceb79fef03 24 */
kevman 0:38ceb79fef03 25
kevman 0:38ceb79fef03 26 #if !defined(MBEDTLS_CONFIG_FILE)
kevman 0:38ceb79fef03 27 #include "mbedtls/config.h"
kevman 0:38ceb79fef03 28 #else
kevman 0:38ceb79fef03 29 #include MBEDTLS_CONFIG_FILE
kevman 0:38ceb79fef03 30 #endif
kevman 0:38ceb79fef03 31
kevman 0:38ceb79fef03 32 #if defined(MBEDTLS_CHACHA20_C)
kevman 0:38ceb79fef03 33
kevman 0:38ceb79fef03 34 #include "mbedtls/chacha20.h"
kevman 0:38ceb79fef03 35 #include "mbedtls/platform_util.h"
kevman 0:38ceb79fef03 36
kevman 0:38ceb79fef03 37 #include <stddef.h>
kevman 0:38ceb79fef03 38 #include <string.h>
kevman 0:38ceb79fef03 39
kevman 0:38ceb79fef03 40 #if defined(MBEDTLS_SELF_TEST)
kevman 0:38ceb79fef03 41 #if defined(MBEDTLS_PLATFORM_C)
kevman 0:38ceb79fef03 42 #include "mbedtls/platform.h"
kevman 0:38ceb79fef03 43 #else
kevman 0:38ceb79fef03 44 #include <stdio.h>
kevman 0:38ceb79fef03 45 #define mbedtls_printf printf
kevman 0:38ceb79fef03 46 #endif /* MBEDTLS_PLATFORM_C */
kevman 0:38ceb79fef03 47 #endif /* MBEDTLS_SELF_TEST */
kevman 0:38ceb79fef03 48
kevman 0:38ceb79fef03 49 #if !defined(MBEDTLS_CHACHA20_ALT)
kevman 0:38ceb79fef03 50
kevman 0:38ceb79fef03 51 #if ( defined(__ARMCC_VERSION) || defined(_MSC_VER) ) && \
kevman 0:38ceb79fef03 52 !defined(inline) && !defined(__cplusplus)
kevman 0:38ceb79fef03 53 #define inline __inline
kevman 0:38ceb79fef03 54 #endif
kevman 0:38ceb79fef03 55
kevman 0:38ceb79fef03 56 #define BYTES_TO_U32_LE( data, offset ) \
kevman 0:38ceb79fef03 57 ( (uint32_t) data[offset] \
kevman 0:38ceb79fef03 58 | (uint32_t) ( (uint32_t) data[( offset ) + 1] << 8 ) \
kevman 0:38ceb79fef03 59 | (uint32_t) ( (uint32_t) data[( offset ) + 2] << 16 ) \
kevman 0:38ceb79fef03 60 | (uint32_t) ( (uint32_t) data[( offset ) + 3] << 24 ) \
kevman 0:38ceb79fef03 61 )
kevman 0:38ceb79fef03 62
kevman 0:38ceb79fef03 63 #define ROTL32( value, amount ) \
kevman 0:38ceb79fef03 64 ( (uint32_t) ( value << amount ) | ( value >> ( 32 - amount ) ) )
kevman 0:38ceb79fef03 65
kevman 0:38ceb79fef03 66 #define CHACHA20_CTR_INDEX ( 12U )
kevman 0:38ceb79fef03 67
kevman 0:38ceb79fef03 68 #define CHACHA20_BLOCK_SIZE_BYTES ( 4U * 16U )
kevman 0:38ceb79fef03 69
kevman 0:38ceb79fef03 70 /**
kevman 0:38ceb79fef03 71 * \brief ChaCha20 quarter round operation.
kevman 0:38ceb79fef03 72 *
kevman 0:38ceb79fef03 73 * The quarter round is defined as follows (from RFC 7539):
kevman 0:38ceb79fef03 74 * 1. a += b; d ^= a; d <<<= 16;
kevman 0:38ceb79fef03 75 * 2. c += d; b ^= c; b <<<= 12;
kevman 0:38ceb79fef03 76 * 3. a += b; d ^= a; d <<<= 8;
kevman 0:38ceb79fef03 77 * 4. c += d; b ^= c; b <<<= 7;
kevman 0:38ceb79fef03 78 *
kevman 0:38ceb79fef03 79 * \param state ChaCha20 state to modify.
kevman 0:38ceb79fef03 80 * \param a The index of 'a' in the state.
kevman 0:38ceb79fef03 81 * \param b The index of 'b' in the state.
kevman 0:38ceb79fef03 82 * \param c The index of 'c' in the state.
kevman 0:38ceb79fef03 83 * \param d The index of 'd' in the state.
kevman 0:38ceb79fef03 84 */
kevman 0:38ceb79fef03 85 static inline void chacha20_quarter_round( uint32_t state[16],
kevman 0:38ceb79fef03 86 size_t a,
kevman 0:38ceb79fef03 87 size_t b,
kevman 0:38ceb79fef03 88 size_t c,
kevman 0:38ceb79fef03 89 size_t d )
kevman 0:38ceb79fef03 90 {
kevman 0:38ceb79fef03 91 /* a += b; d ^= a; d <<<= 16; */
kevman 0:38ceb79fef03 92 state[a] += state[b];
kevman 0:38ceb79fef03 93 state[d] ^= state[a];
kevman 0:38ceb79fef03 94 state[d] = ROTL32( state[d], 16 );
kevman 0:38ceb79fef03 95
kevman 0:38ceb79fef03 96 /* c += d; b ^= c; b <<<= 12 */
kevman 0:38ceb79fef03 97 state[c] += state[d];
kevman 0:38ceb79fef03 98 state[b] ^= state[c];
kevman 0:38ceb79fef03 99 state[b] = ROTL32( state[b], 12 );
kevman 0:38ceb79fef03 100
kevman 0:38ceb79fef03 101 /* a += b; d ^= a; d <<<= 8; */
kevman 0:38ceb79fef03 102 state[a] += state[b];
kevman 0:38ceb79fef03 103 state[d] ^= state[a];
kevman 0:38ceb79fef03 104 state[d] = ROTL32( state[d], 8 );
kevman 0:38ceb79fef03 105
kevman 0:38ceb79fef03 106 /* c += d; b ^= c; b <<<= 7; */
kevman 0:38ceb79fef03 107 state[c] += state[d];
kevman 0:38ceb79fef03 108 state[b] ^= state[c];
kevman 0:38ceb79fef03 109 state[b] = ROTL32( state[b], 7 );
kevman 0:38ceb79fef03 110 }
kevman 0:38ceb79fef03 111
kevman 0:38ceb79fef03 112 /**
kevman 0:38ceb79fef03 113 * \brief Perform the ChaCha20 inner block operation.
kevman 0:38ceb79fef03 114 *
kevman 0:38ceb79fef03 115 * This function performs two rounds: the column round and the
kevman 0:38ceb79fef03 116 * diagonal round.
kevman 0:38ceb79fef03 117 *
kevman 0:38ceb79fef03 118 * \param state The ChaCha20 state to update.
kevman 0:38ceb79fef03 119 */
kevman 0:38ceb79fef03 120 static void chacha20_inner_block( uint32_t state[16] )
kevman 0:38ceb79fef03 121 {
kevman 0:38ceb79fef03 122 chacha20_quarter_round( state, 0, 4, 8, 12 );
kevman 0:38ceb79fef03 123 chacha20_quarter_round( state, 1, 5, 9, 13 );
kevman 0:38ceb79fef03 124 chacha20_quarter_round( state, 2, 6, 10, 14 );
kevman 0:38ceb79fef03 125 chacha20_quarter_round( state, 3, 7, 11, 15 );
kevman 0:38ceb79fef03 126
kevman 0:38ceb79fef03 127 chacha20_quarter_round( state, 0, 5, 10, 15 );
kevman 0:38ceb79fef03 128 chacha20_quarter_round( state, 1, 6, 11, 12 );
kevman 0:38ceb79fef03 129 chacha20_quarter_round( state, 2, 7, 8, 13 );
kevman 0:38ceb79fef03 130 chacha20_quarter_round( state, 3, 4, 9, 14 );
kevman 0:38ceb79fef03 131 }
kevman 0:38ceb79fef03 132
kevman 0:38ceb79fef03 133 /**
kevman 0:38ceb79fef03 134 * \brief Generates a keystream block.
kevman 0:38ceb79fef03 135 *
kevman 0:38ceb79fef03 136 * \param initial_state The initial ChaCha20 state (key, nonce, counter).
kevman 0:38ceb79fef03 137 * \param keystream Generated keystream bytes are written to this buffer.
kevman 0:38ceb79fef03 138 */
kevman 0:38ceb79fef03 139 static void chacha20_block( const uint32_t initial_state[16],
kevman 0:38ceb79fef03 140 unsigned char keystream[64] )
kevman 0:38ceb79fef03 141 {
kevman 0:38ceb79fef03 142 uint32_t working_state[16];
kevman 0:38ceb79fef03 143 size_t i;
kevman 0:38ceb79fef03 144
kevman 0:38ceb79fef03 145 memcpy( working_state,
kevman 0:38ceb79fef03 146 initial_state,
kevman 0:38ceb79fef03 147 CHACHA20_BLOCK_SIZE_BYTES );
kevman 0:38ceb79fef03 148
kevman 0:38ceb79fef03 149 for( i = 0U; i < 10U; i++ )
kevman 0:38ceb79fef03 150 chacha20_inner_block( working_state );
kevman 0:38ceb79fef03 151
kevman 0:38ceb79fef03 152 working_state[ 0] += initial_state[ 0];
kevman 0:38ceb79fef03 153 working_state[ 1] += initial_state[ 1];
kevman 0:38ceb79fef03 154 working_state[ 2] += initial_state[ 2];
kevman 0:38ceb79fef03 155 working_state[ 3] += initial_state[ 3];
kevman 0:38ceb79fef03 156 working_state[ 4] += initial_state[ 4];
kevman 0:38ceb79fef03 157 working_state[ 5] += initial_state[ 5];
kevman 0:38ceb79fef03 158 working_state[ 6] += initial_state[ 6];
kevman 0:38ceb79fef03 159 working_state[ 7] += initial_state[ 7];
kevman 0:38ceb79fef03 160 working_state[ 8] += initial_state[ 8];
kevman 0:38ceb79fef03 161 working_state[ 9] += initial_state[ 9];
kevman 0:38ceb79fef03 162 working_state[10] += initial_state[10];
kevman 0:38ceb79fef03 163 working_state[11] += initial_state[11];
kevman 0:38ceb79fef03 164 working_state[12] += initial_state[12];
kevman 0:38ceb79fef03 165 working_state[13] += initial_state[13];
kevman 0:38ceb79fef03 166 working_state[14] += initial_state[14];
kevman 0:38ceb79fef03 167 working_state[15] += initial_state[15];
kevman 0:38ceb79fef03 168
kevman 0:38ceb79fef03 169 for( i = 0U; i < 16; i++ )
kevman 0:38ceb79fef03 170 {
kevman 0:38ceb79fef03 171 size_t offset = i * 4U;
kevman 0:38ceb79fef03 172
kevman 0:38ceb79fef03 173 keystream[offset ] = (unsigned char)( working_state[i] );
kevman 0:38ceb79fef03 174 keystream[offset + 1U] = (unsigned char)( working_state[i] >> 8 );
kevman 0:38ceb79fef03 175 keystream[offset + 2U] = (unsigned char)( working_state[i] >> 16 );
kevman 0:38ceb79fef03 176 keystream[offset + 3U] = (unsigned char)( working_state[i] >> 24 );
kevman 0:38ceb79fef03 177 }
kevman 0:38ceb79fef03 178
kevman 0:38ceb79fef03 179 mbedtls_platform_zeroize( working_state, sizeof( working_state ) );
kevman 0:38ceb79fef03 180 }
kevman 0:38ceb79fef03 181
kevman 0:38ceb79fef03 182 void mbedtls_chacha20_init( mbedtls_chacha20_context *ctx )
kevman 0:38ceb79fef03 183 {
kevman 0:38ceb79fef03 184 if( ctx != NULL )
kevman 0:38ceb79fef03 185 {
kevman 0:38ceb79fef03 186 mbedtls_platform_zeroize( ctx->state, sizeof( ctx->state ) );
kevman 0:38ceb79fef03 187 mbedtls_platform_zeroize( ctx->keystream8, sizeof( ctx->keystream8 ) );
kevman 0:38ceb79fef03 188
kevman 0:38ceb79fef03 189 /* Initially, there's no keystream bytes available */
kevman 0:38ceb79fef03 190 ctx->keystream_bytes_used = CHACHA20_BLOCK_SIZE_BYTES;
kevman 0:38ceb79fef03 191 }
kevman 0:38ceb79fef03 192 }
kevman 0:38ceb79fef03 193
kevman 0:38ceb79fef03 194 void mbedtls_chacha20_free( mbedtls_chacha20_context *ctx )
kevman 0:38ceb79fef03 195 {
kevman 0:38ceb79fef03 196 if( ctx != NULL )
kevman 0:38ceb79fef03 197 {
kevman 0:38ceb79fef03 198 mbedtls_platform_zeroize( ctx, sizeof( mbedtls_chacha20_context ) );
kevman 0:38ceb79fef03 199 }
kevman 0:38ceb79fef03 200 }
kevman 0:38ceb79fef03 201
kevman 0:38ceb79fef03 202 int mbedtls_chacha20_setkey( mbedtls_chacha20_context *ctx,
kevman 0:38ceb79fef03 203 const unsigned char key[32] )
kevman 0:38ceb79fef03 204 {
kevman 0:38ceb79fef03 205 if( ( ctx == NULL ) || ( key == NULL ) )
kevman 0:38ceb79fef03 206 {
kevman 0:38ceb79fef03 207 return( MBEDTLS_ERR_CHACHA20_BAD_INPUT_DATA );
kevman 0:38ceb79fef03 208 }
kevman 0:38ceb79fef03 209
kevman 0:38ceb79fef03 210 /* ChaCha20 constants - the string "expand 32-byte k" */
kevman 0:38ceb79fef03 211 ctx->state[0] = 0x61707865;
kevman 0:38ceb79fef03 212 ctx->state[1] = 0x3320646e;
kevman 0:38ceb79fef03 213 ctx->state[2] = 0x79622d32;
kevman 0:38ceb79fef03 214 ctx->state[3] = 0x6b206574;
kevman 0:38ceb79fef03 215
kevman 0:38ceb79fef03 216 /* Set key */
kevman 0:38ceb79fef03 217 ctx->state[4] = BYTES_TO_U32_LE( key, 0 );
kevman 0:38ceb79fef03 218 ctx->state[5] = BYTES_TO_U32_LE( key, 4 );
kevman 0:38ceb79fef03 219 ctx->state[6] = BYTES_TO_U32_LE( key, 8 );
kevman 0:38ceb79fef03 220 ctx->state[7] = BYTES_TO_U32_LE( key, 12 );
kevman 0:38ceb79fef03 221 ctx->state[8] = BYTES_TO_U32_LE( key, 16 );
kevman 0:38ceb79fef03 222 ctx->state[9] = BYTES_TO_U32_LE( key, 20 );
kevman 0:38ceb79fef03 223 ctx->state[10] = BYTES_TO_U32_LE( key, 24 );
kevman 0:38ceb79fef03 224 ctx->state[11] = BYTES_TO_U32_LE( key, 28 );
kevman 0:38ceb79fef03 225
kevman 0:38ceb79fef03 226 return( 0 );
kevman 0:38ceb79fef03 227 }
kevman 0:38ceb79fef03 228
kevman 0:38ceb79fef03 229 int mbedtls_chacha20_starts( mbedtls_chacha20_context* ctx,
kevman 0:38ceb79fef03 230 const unsigned char nonce[12],
kevman 0:38ceb79fef03 231 uint32_t counter )
kevman 0:38ceb79fef03 232 {
kevman 0:38ceb79fef03 233 if( ( ctx == NULL ) || ( nonce == NULL ) )
kevman 0:38ceb79fef03 234 {
kevman 0:38ceb79fef03 235 return( MBEDTLS_ERR_CHACHA20_BAD_INPUT_DATA );
kevman 0:38ceb79fef03 236 }
kevman 0:38ceb79fef03 237
kevman 0:38ceb79fef03 238 /* Counter */
kevman 0:38ceb79fef03 239 ctx->state[12] = counter;
kevman 0:38ceb79fef03 240
kevman 0:38ceb79fef03 241 /* Nonce */
kevman 0:38ceb79fef03 242 ctx->state[13] = BYTES_TO_U32_LE( nonce, 0 );
kevman 0:38ceb79fef03 243 ctx->state[14] = BYTES_TO_U32_LE( nonce, 4 );
kevman 0:38ceb79fef03 244 ctx->state[15] = BYTES_TO_U32_LE( nonce, 8 );
kevman 0:38ceb79fef03 245
kevman 0:38ceb79fef03 246 mbedtls_platform_zeroize( ctx->keystream8, sizeof( ctx->keystream8 ) );
kevman 0:38ceb79fef03 247
kevman 0:38ceb79fef03 248 /* Initially, there's no keystream bytes available */
kevman 0:38ceb79fef03 249 ctx->keystream_bytes_used = CHACHA20_BLOCK_SIZE_BYTES;
kevman 0:38ceb79fef03 250
kevman 0:38ceb79fef03 251 return( 0 );
kevman 0:38ceb79fef03 252 }
kevman 0:38ceb79fef03 253
kevman 0:38ceb79fef03 254 int mbedtls_chacha20_update( mbedtls_chacha20_context *ctx,
kevman 0:38ceb79fef03 255 size_t size,
kevman 0:38ceb79fef03 256 const unsigned char *input,
kevman 0:38ceb79fef03 257 unsigned char *output )
kevman 0:38ceb79fef03 258 {
kevman 0:38ceb79fef03 259 size_t offset = 0U;
kevman 0:38ceb79fef03 260 size_t i;
kevman 0:38ceb79fef03 261
kevman 0:38ceb79fef03 262 if( ctx == NULL )
kevman 0:38ceb79fef03 263 {
kevman 0:38ceb79fef03 264 return( MBEDTLS_ERR_CHACHA20_BAD_INPUT_DATA );
kevman 0:38ceb79fef03 265 }
kevman 0:38ceb79fef03 266 else if( ( size > 0U ) && ( ( input == NULL ) || ( output == NULL ) ) )
kevman 0:38ceb79fef03 267 {
kevman 0:38ceb79fef03 268 /* input and output pointers are allowed to be NULL only if size == 0 */
kevman 0:38ceb79fef03 269 return( MBEDTLS_ERR_CHACHA20_BAD_INPUT_DATA );
kevman 0:38ceb79fef03 270 }
kevman 0:38ceb79fef03 271
kevman 0:38ceb79fef03 272 /* Use leftover keystream bytes, if available */
kevman 0:38ceb79fef03 273 while( size > 0U && ctx->keystream_bytes_used < CHACHA20_BLOCK_SIZE_BYTES )
kevman 0:38ceb79fef03 274 {
kevman 0:38ceb79fef03 275 output[offset] = input[offset]
kevman 0:38ceb79fef03 276 ^ ctx->keystream8[ctx->keystream_bytes_used];
kevman 0:38ceb79fef03 277
kevman 0:38ceb79fef03 278 ctx->keystream_bytes_used++;
kevman 0:38ceb79fef03 279 offset++;
kevman 0:38ceb79fef03 280 size--;
kevman 0:38ceb79fef03 281 }
kevman 0:38ceb79fef03 282
kevman 0:38ceb79fef03 283 /* Process full blocks */
kevman 0:38ceb79fef03 284 while( size >= CHACHA20_BLOCK_SIZE_BYTES )
kevman 0:38ceb79fef03 285 {
kevman 0:38ceb79fef03 286 /* Generate new keystream block and increment counter */
kevman 0:38ceb79fef03 287 chacha20_block( ctx->state, ctx->keystream8 );
kevman 0:38ceb79fef03 288 ctx->state[CHACHA20_CTR_INDEX]++;
kevman 0:38ceb79fef03 289
kevman 0:38ceb79fef03 290 for( i = 0U; i < 64U; i += 8U )
kevman 0:38ceb79fef03 291 {
kevman 0:38ceb79fef03 292 output[offset + i ] = input[offset + i ] ^ ctx->keystream8[i ];
kevman 0:38ceb79fef03 293 output[offset + i+1] = input[offset + i+1] ^ ctx->keystream8[i+1];
kevman 0:38ceb79fef03 294 output[offset + i+2] = input[offset + i+2] ^ ctx->keystream8[i+2];
kevman 0:38ceb79fef03 295 output[offset + i+3] = input[offset + i+3] ^ ctx->keystream8[i+3];
kevman 0:38ceb79fef03 296 output[offset + i+4] = input[offset + i+4] ^ ctx->keystream8[i+4];
kevman 0:38ceb79fef03 297 output[offset + i+5] = input[offset + i+5] ^ ctx->keystream8[i+5];
kevman 0:38ceb79fef03 298 output[offset + i+6] = input[offset + i+6] ^ ctx->keystream8[i+6];
kevman 0:38ceb79fef03 299 output[offset + i+7] = input[offset + i+7] ^ ctx->keystream8[i+7];
kevman 0:38ceb79fef03 300 }
kevman 0:38ceb79fef03 301
kevman 0:38ceb79fef03 302 offset += CHACHA20_BLOCK_SIZE_BYTES;
kevman 0:38ceb79fef03 303 size -= CHACHA20_BLOCK_SIZE_BYTES;
kevman 0:38ceb79fef03 304 }
kevman 0:38ceb79fef03 305
kevman 0:38ceb79fef03 306 /* Last (partial) block */
kevman 0:38ceb79fef03 307 if( size > 0U )
kevman 0:38ceb79fef03 308 {
kevman 0:38ceb79fef03 309 /* Generate new keystream block and increment counter */
kevman 0:38ceb79fef03 310 chacha20_block( ctx->state, ctx->keystream8 );
kevman 0:38ceb79fef03 311 ctx->state[CHACHA20_CTR_INDEX]++;
kevman 0:38ceb79fef03 312
kevman 0:38ceb79fef03 313 for( i = 0U; i < size; i++)
kevman 0:38ceb79fef03 314 {
kevman 0:38ceb79fef03 315 output[offset + i] = input[offset + i] ^ ctx->keystream8[i];
kevman 0:38ceb79fef03 316 }
kevman 0:38ceb79fef03 317
kevman 0:38ceb79fef03 318 ctx->keystream_bytes_used = size;
kevman 0:38ceb79fef03 319
kevman 0:38ceb79fef03 320 }
kevman 0:38ceb79fef03 321
kevman 0:38ceb79fef03 322 return( 0 );
kevman 0:38ceb79fef03 323 }
kevman 0:38ceb79fef03 324
kevman 0:38ceb79fef03 325 int mbedtls_chacha20_crypt( const unsigned char key[32],
kevman 0:38ceb79fef03 326 const unsigned char nonce[12],
kevman 0:38ceb79fef03 327 uint32_t counter,
kevman 0:38ceb79fef03 328 size_t data_len,
kevman 0:38ceb79fef03 329 const unsigned char* input,
kevman 0:38ceb79fef03 330 unsigned char* output )
kevman 0:38ceb79fef03 331 {
kevman 0:38ceb79fef03 332 mbedtls_chacha20_context ctx;
kevman 0:38ceb79fef03 333 int ret;
kevman 0:38ceb79fef03 334
kevman 0:38ceb79fef03 335 mbedtls_chacha20_init( &ctx );
kevman 0:38ceb79fef03 336
kevman 0:38ceb79fef03 337 ret = mbedtls_chacha20_setkey( &ctx, key );
kevman 0:38ceb79fef03 338 if( ret != 0 )
kevman 0:38ceb79fef03 339 goto cleanup;
kevman 0:38ceb79fef03 340
kevman 0:38ceb79fef03 341 ret = mbedtls_chacha20_starts( &ctx, nonce, counter );
kevman 0:38ceb79fef03 342 if( ret != 0 )
kevman 0:38ceb79fef03 343 goto cleanup;
kevman 0:38ceb79fef03 344
kevman 0:38ceb79fef03 345 ret = mbedtls_chacha20_update( &ctx, data_len, input, output );
kevman 0:38ceb79fef03 346
kevman 0:38ceb79fef03 347 cleanup:
kevman 0:38ceb79fef03 348 mbedtls_chacha20_free( &ctx );
kevman 0:38ceb79fef03 349 return( ret );
kevman 0:38ceb79fef03 350 }
kevman 0:38ceb79fef03 351
kevman 0:38ceb79fef03 352 #endif /* !MBEDTLS_CHACHA20_ALT */
kevman 0:38ceb79fef03 353
kevman 0:38ceb79fef03 354 #if defined(MBEDTLS_SELF_TEST)
kevman 0:38ceb79fef03 355
kevman 0:38ceb79fef03 356 static const unsigned char test_keys[2][32] =
kevman 0:38ceb79fef03 357 {
kevman 0:38ceb79fef03 358 {
kevman 0:38ceb79fef03 359 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
kevman 0:38ceb79fef03 360 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
kevman 0:38ceb79fef03 361 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
kevman 0:38ceb79fef03 362 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00
kevman 0:38ceb79fef03 363 },
kevman 0:38ceb79fef03 364 {
kevman 0:38ceb79fef03 365 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
kevman 0:38ceb79fef03 366 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
kevman 0:38ceb79fef03 367 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
kevman 0:38ceb79fef03 368 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x01
kevman 0:38ceb79fef03 369 }
kevman 0:38ceb79fef03 370 };
kevman 0:38ceb79fef03 371
kevman 0:38ceb79fef03 372 static const unsigned char test_nonces[2][12] =
kevman 0:38ceb79fef03 373 {
kevman 0:38ceb79fef03 374 {
kevman 0:38ceb79fef03 375 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
kevman 0:38ceb79fef03 376 0x00, 0x00, 0x00, 0x00
kevman 0:38ceb79fef03 377 },
kevman 0:38ceb79fef03 378 {
kevman 0:38ceb79fef03 379 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
kevman 0:38ceb79fef03 380 0x00, 0x00, 0x00, 0x02
kevman 0:38ceb79fef03 381 }
kevman 0:38ceb79fef03 382 };
kevman 0:38ceb79fef03 383
kevman 0:38ceb79fef03 384 static const uint32_t test_counters[2] =
kevman 0:38ceb79fef03 385 {
kevman 0:38ceb79fef03 386 0U,
kevman 0:38ceb79fef03 387 1U
kevman 0:38ceb79fef03 388 };
kevman 0:38ceb79fef03 389
kevman 0:38ceb79fef03 390 static const unsigned char test_input[2][375] =
kevman 0:38ceb79fef03 391 {
kevman 0:38ceb79fef03 392 {
kevman 0:38ceb79fef03 393 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
kevman 0:38ceb79fef03 394 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
kevman 0:38ceb79fef03 395 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
kevman 0:38ceb79fef03 396 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
kevman 0:38ceb79fef03 397 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
kevman 0:38ceb79fef03 398 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
kevman 0:38ceb79fef03 399 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
kevman 0:38ceb79fef03 400 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00
kevman 0:38ceb79fef03 401 },
kevman 0:38ceb79fef03 402 {
kevman 0:38ceb79fef03 403 0x41, 0x6e, 0x79, 0x20, 0x73, 0x75, 0x62, 0x6d,
kevman 0:38ceb79fef03 404 0x69, 0x73, 0x73, 0x69, 0x6f, 0x6e, 0x20, 0x74,
kevman 0:38ceb79fef03 405 0x6f, 0x20, 0x74, 0x68, 0x65, 0x20, 0x49, 0x45,
kevman 0:38ceb79fef03 406 0x54, 0x46, 0x20, 0x69, 0x6e, 0x74, 0x65, 0x6e,
kevman 0:38ceb79fef03 407 0x64, 0x65, 0x64, 0x20, 0x62, 0x79, 0x20, 0x74,
kevman 0:38ceb79fef03 408 0x68, 0x65, 0x20, 0x43, 0x6f, 0x6e, 0x74, 0x72,
kevman 0:38ceb79fef03 409 0x69, 0x62, 0x75, 0x74, 0x6f, 0x72, 0x20, 0x66,
kevman 0:38ceb79fef03 410 0x6f, 0x72, 0x20, 0x70, 0x75, 0x62, 0x6c, 0x69,
kevman 0:38ceb79fef03 411 0x63, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x20, 0x61,
kevman 0:38ceb79fef03 412 0x73, 0x20, 0x61, 0x6c, 0x6c, 0x20, 0x6f, 0x72,
kevman 0:38ceb79fef03 413 0x20, 0x70, 0x61, 0x72, 0x74, 0x20, 0x6f, 0x66,
kevman 0:38ceb79fef03 414 0x20, 0x61, 0x6e, 0x20, 0x49, 0x45, 0x54, 0x46,
kevman 0:38ceb79fef03 415 0x20, 0x49, 0x6e, 0x74, 0x65, 0x72, 0x6e, 0x65,
kevman 0:38ceb79fef03 416 0x74, 0x2d, 0x44, 0x72, 0x61, 0x66, 0x74, 0x20,
kevman 0:38ceb79fef03 417 0x6f, 0x72, 0x20, 0x52, 0x46, 0x43, 0x20, 0x61,
kevman 0:38ceb79fef03 418 0x6e, 0x64, 0x20, 0x61, 0x6e, 0x79, 0x20, 0x73,
kevman 0:38ceb79fef03 419 0x74, 0x61, 0x74, 0x65, 0x6d, 0x65, 0x6e, 0x74,
kevman 0:38ceb79fef03 420 0x20, 0x6d, 0x61, 0x64, 0x65, 0x20, 0x77, 0x69,
kevman 0:38ceb79fef03 421 0x74, 0x68, 0x69, 0x6e, 0x20, 0x74, 0x68, 0x65,
kevman 0:38ceb79fef03 422 0x20, 0x63, 0x6f, 0x6e, 0x74, 0x65, 0x78, 0x74,
kevman 0:38ceb79fef03 423 0x20, 0x6f, 0x66, 0x20, 0x61, 0x6e, 0x20, 0x49,
kevman 0:38ceb79fef03 424 0x45, 0x54, 0x46, 0x20, 0x61, 0x63, 0x74, 0x69,
kevman 0:38ceb79fef03 425 0x76, 0x69, 0x74, 0x79, 0x20, 0x69, 0x73, 0x20,
kevman 0:38ceb79fef03 426 0x63, 0x6f, 0x6e, 0x73, 0x69, 0x64, 0x65, 0x72,
kevman 0:38ceb79fef03 427 0x65, 0x64, 0x20, 0x61, 0x6e, 0x20, 0x22, 0x49,
kevman 0:38ceb79fef03 428 0x45, 0x54, 0x46, 0x20, 0x43, 0x6f, 0x6e, 0x74,
kevman 0:38ceb79fef03 429 0x72, 0x69, 0x62, 0x75, 0x74, 0x69, 0x6f, 0x6e,
kevman 0:38ceb79fef03 430 0x22, 0x2e, 0x20, 0x53, 0x75, 0x63, 0x68, 0x20,
kevman 0:38ceb79fef03 431 0x73, 0x74, 0x61, 0x74, 0x65, 0x6d, 0x65, 0x6e,
kevman 0:38ceb79fef03 432 0x74, 0x73, 0x20, 0x69, 0x6e, 0x63, 0x6c, 0x75,
kevman 0:38ceb79fef03 433 0x64, 0x65, 0x20, 0x6f, 0x72, 0x61, 0x6c, 0x20,
kevman 0:38ceb79fef03 434 0x73, 0x74, 0x61, 0x74, 0x65, 0x6d, 0x65, 0x6e,
kevman 0:38ceb79fef03 435 0x74, 0x73, 0x20, 0x69, 0x6e, 0x20, 0x49, 0x45,
kevman 0:38ceb79fef03 436 0x54, 0x46, 0x20, 0x73, 0x65, 0x73, 0x73, 0x69,
kevman 0:38ceb79fef03 437 0x6f, 0x6e, 0x73, 0x2c, 0x20, 0x61, 0x73, 0x20,
kevman 0:38ceb79fef03 438 0x77, 0x65, 0x6c, 0x6c, 0x20, 0x61, 0x73, 0x20,
kevman 0:38ceb79fef03 439 0x77, 0x72, 0x69, 0x74, 0x74, 0x65, 0x6e, 0x20,
kevman 0:38ceb79fef03 440 0x61, 0x6e, 0x64, 0x20, 0x65, 0x6c, 0x65, 0x63,
kevman 0:38ceb79fef03 441 0x74, 0x72, 0x6f, 0x6e, 0x69, 0x63, 0x20, 0x63,
kevman 0:38ceb79fef03 442 0x6f, 0x6d, 0x6d, 0x75, 0x6e, 0x69, 0x63, 0x61,
kevman 0:38ceb79fef03 443 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x20, 0x6d, 0x61,
kevman 0:38ceb79fef03 444 0x64, 0x65, 0x20, 0x61, 0x74, 0x20, 0x61, 0x6e,
kevman 0:38ceb79fef03 445 0x79, 0x20, 0x74, 0x69, 0x6d, 0x65, 0x20, 0x6f,
kevman 0:38ceb79fef03 446 0x72, 0x20, 0x70, 0x6c, 0x61, 0x63, 0x65, 0x2c,
kevman 0:38ceb79fef03 447 0x20, 0x77, 0x68, 0x69, 0x63, 0x68, 0x20, 0x61,
kevman 0:38ceb79fef03 448 0x72, 0x65, 0x20, 0x61, 0x64, 0x64, 0x72, 0x65,
kevman 0:38ceb79fef03 449 0x73, 0x73, 0x65, 0x64, 0x20, 0x74, 0x6f
kevman 0:38ceb79fef03 450 }
kevman 0:38ceb79fef03 451 };
kevman 0:38ceb79fef03 452
kevman 0:38ceb79fef03 453 static const unsigned char test_output[2][375] =
kevman 0:38ceb79fef03 454 {
kevman 0:38ceb79fef03 455 {
kevman 0:38ceb79fef03 456 0x76, 0xb8, 0xe0, 0xad, 0xa0, 0xf1, 0x3d, 0x90,
kevman 0:38ceb79fef03 457 0x40, 0x5d, 0x6a, 0xe5, 0x53, 0x86, 0xbd, 0x28,
kevman 0:38ceb79fef03 458 0xbd, 0xd2, 0x19, 0xb8, 0xa0, 0x8d, 0xed, 0x1a,
kevman 0:38ceb79fef03 459 0xa8, 0x36, 0xef, 0xcc, 0x8b, 0x77, 0x0d, 0xc7,
kevman 0:38ceb79fef03 460 0xda, 0x41, 0x59, 0x7c, 0x51, 0x57, 0x48, 0x8d,
kevman 0:38ceb79fef03 461 0x77, 0x24, 0xe0, 0x3f, 0xb8, 0xd8, 0x4a, 0x37,
kevman 0:38ceb79fef03 462 0x6a, 0x43, 0xb8, 0xf4, 0x15, 0x18, 0xa1, 0x1c,
kevman 0:38ceb79fef03 463 0xc3, 0x87, 0xb6, 0x69, 0xb2, 0xee, 0x65, 0x86
kevman 0:38ceb79fef03 464 },
kevman 0:38ceb79fef03 465 {
kevman 0:38ceb79fef03 466 0xa3, 0xfb, 0xf0, 0x7d, 0xf3, 0xfa, 0x2f, 0xde,
kevman 0:38ceb79fef03 467 0x4f, 0x37, 0x6c, 0xa2, 0x3e, 0x82, 0x73, 0x70,
kevman 0:38ceb79fef03 468 0x41, 0x60, 0x5d, 0x9f, 0x4f, 0x4f, 0x57, 0xbd,
kevman 0:38ceb79fef03 469 0x8c, 0xff, 0x2c, 0x1d, 0x4b, 0x79, 0x55, 0xec,
kevman 0:38ceb79fef03 470 0x2a, 0x97, 0x94, 0x8b, 0xd3, 0x72, 0x29, 0x15,
kevman 0:38ceb79fef03 471 0xc8, 0xf3, 0xd3, 0x37, 0xf7, 0xd3, 0x70, 0x05,
kevman 0:38ceb79fef03 472 0x0e, 0x9e, 0x96, 0xd6, 0x47, 0xb7, 0xc3, 0x9f,
kevman 0:38ceb79fef03 473 0x56, 0xe0, 0x31, 0xca, 0x5e, 0xb6, 0x25, 0x0d,
kevman 0:38ceb79fef03 474 0x40, 0x42, 0xe0, 0x27, 0x85, 0xec, 0xec, 0xfa,
kevman 0:38ceb79fef03 475 0x4b, 0x4b, 0xb5, 0xe8, 0xea, 0xd0, 0x44, 0x0e,
kevman 0:38ceb79fef03 476 0x20, 0xb6, 0xe8, 0xdb, 0x09, 0xd8, 0x81, 0xa7,
kevman 0:38ceb79fef03 477 0xc6, 0x13, 0x2f, 0x42, 0x0e, 0x52, 0x79, 0x50,
kevman 0:38ceb79fef03 478 0x42, 0xbd, 0xfa, 0x77, 0x73, 0xd8, 0xa9, 0x05,
kevman 0:38ceb79fef03 479 0x14, 0x47, 0xb3, 0x29, 0x1c, 0xe1, 0x41, 0x1c,
kevman 0:38ceb79fef03 480 0x68, 0x04, 0x65, 0x55, 0x2a, 0xa6, 0xc4, 0x05,
kevman 0:38ceb79fef03 481 0xb7, 0x76, 0x4d, 0x5e, 0x87, 0xbe, 0xa8, 0x5a,
kevman 0:38ceb79fef03 482 0xd0, 0x0f, 0x84, 0x49, 0xed, 0x8f, 0x72, 0xd0,
kevman 0:38ceb79fef03 483 0xd6, 0x62, 0xab, 0x05, 0x26, 0x91, 0xca, 0x66,
kevman 0:38ceb79fef03 484 0x42, 0x4b, 0xc8, 0x6d, 0x2d, 0xf8, 0x0e, 0xa4,
kevman 0:38ceb79fef03 485 0x1f, 0x43, 0xab, 0xf9, 0x37, 0xd3, 0x25, 0x9d,
kevman 0:38ceb79fef03 486 0xc4, 0xb2, 0xd0, 0xdf, 0xb4, 0x8a, 0x6c, 0x91,
kevman 0:38ceb79fef03 487 0x39, 0xdd, 0xd7, 0xf7, 0x69, 0x66, 0xe9, 0x28,
kevman 0:38ceb79fef03 488 0xe6, 0x35, 0x55, 0x3b, 0xa7, 0x6c, 0x5c, 0x87,
kevman 0:38ceb79fef03 489 0x9d, 0x7b, 0x35, 0xd4, 0x9e, 0xb2, 0xe6, 0x2b,
kevman 0:38ceb79fef03 490 0x08, 0x71, 0xcd, 0xac, 0x63, 0x89, 0x39, 0xe2,
kevman 0:38ceb79fef03 491 0x5e, 0x8a, 0x1e, 0x0e, 0xf9, 0xd5, 0x28, 0x0f,
kevman 0:38ceb79fef03 492 0xa8, 0xca, 0x32, 0x8b, 0x35, 0x1c, 0x3c, 0x76,
kevman 0:38ceb79fef03 493 0x59, 0x89, 0xcb, 0xcf, 0x3d, 0xaa, 0x8b, 0x6c,
kevman 0:38ceb79fef03 494 0xcc, 0x3a, 0xaf, 0x9f, 0x39, 0x79, 0xc9, 0x2b,
kevman 0:38ceb79fef03 495 0x37, 0x20, 0xfc, 0x88, 0xdc, 0x95, 0xed, 0x84,
kevman 0:38ceb79fef03 496 0xa1, 0xbe, 0x05, 0x9c, 0x64, 0x99, 0xb9, 0xfd,
kevman 0:38ceb79fef03 497 0xa2, 0x36, 0xe7, 0xe8, 0x18, 0xb0, 0x4b, 0x0b,
kevman 0:38ceb79fef03 498 0xc3, 0x9c, 0x1e, 0x87, 0x6b, 0x19, 0x3b, 0xfe,
kevman 0:38ceb79fef03 499 0x55, 0x69, 0x75, 0x3f, 0x88, 0x12, 0x8c, 0xc0,
kevman 0:38ceb79fef03 500 0x8a, 0xaa, 0x9b, 0x63, 0xd1, 0xa1, 0x6f, 0x80,
kevman 0:38ceb79fef03 501 0xef, 0x25, 0x54, 0xd7, 0x18, 0x9c, 0x41, 0x1f,
kevman 0:38ceb79fef03 502 0x58, 0x69, 0xca, 0x52, 0xc5, 0xb8, 0x3f, 0xa3,
kevman 0:38ceb79fef03 503 0x6f, 0xf2, 0x16, 0xb9, 0xc1, 0xd3, 0x00, 0x62,
kevman 0:38ceb79fef03 504 0xbe, 0xbc, 0xfd, 0x2d, 0xc5, 0xbc, 0xe0, 0x91,
kevman 0:38ceb79fef03 505 0x19, 0x34, 0xfd, 0xa7, 0x9a, 0x86, 0xf6, 0xe6,
kevman 0:38ceb79fef03 506 0x98, 0xce, 0xd7, 0x59, 0xc3, 0xff, 0x9b, 0x64,
kevman 0:38ceb79fef03 507 0x77, 0x33, 0x8f, 0x3d, 0xa4, 0xf9, 0xcd, 0x85,
kevman 0:38ceb79fef03 508 0x14, 0xea, 0x99, 0x82, 0xcc, 0xaf, 0xb3, 0x41,
kevman 0:38ceb79fef03 509 0xb2, 0x38, 0x4d, 0xd9, 0x02, 0xf3, 0xd1, 0xab,
kevman 0:38ceb79fef03 510 0x7a, 0xc6, 0x1d, 0xd2, 0x9c, 0x6f, 0x21, 0xba,
kevman 0:38ceb79fef03 511 0x5b, 0x86, 0x2f, 0x37, 0x30, 0xe3, 0x7c, 0xfd,
kevman 0:38ceb79fef03 512 0xc4, 0xfd, 0x80, 0x6c, 0x22, 0xf2, 0x21
kevman 0:38ceb79fef03 513 }
kevman 0:38ceb79fef03 514 };
kevman 0:38ceb79fef03 515
kevman 0:38ceb79fef03 516 static const size_t test_lengths[2] =
kevman 0:38ceb79fef03 517 {
kevman 0:38ceb79fef03 518 64U,
kevman 0:38ceb79fef03 519 375U
kevman 0:38ceb79fef03 520 };
kevman 0:38ceb79fef03 521
kevman 0:38ceb79fef03 522 #define ASSERT( cond, args ) \
kevman 0:38ceb79fef03 523 do \
kevman 0:38ceb79fef03 524 { \
kevman 0:38ceb79fef03 525 if( ! ( cond ) ) \
kevman 0:38ceb79fef03 526 { \
kevman 0:38ceb79fef03 527 if( verbose != 0 ) \
kevman 0:38ceb79fef03 528 mbedtls_printf args; \
kevman 0:38ceb79fef03 529 \
kevman 0:38ceb79fef03 530 return( -1 ); \
kevman 0:38ceb79fef03 531 } \
kevman 0:38ceb79fef03 532 } \
kevman 0:38ceb79fef03 533 while( 0 )
kevman 0:38ceb79fef03 534
kevman 0:38ceb79fef03 535 int mbedtls_chacha20_self_test( int verbose )
kevman 0:38ceb79fef03 536 {
kevman 0:38ceb79fef03 537 unsigned char output[381];
kevman 0:38ceb79fef03 538 unsigned i;
kevman 0:38ceb79fef03 539 int ret;
kevman 0:38ceb79fef03 540
kevman 0:38ceb79fef03 541 for( i = 0U; i < 2U; i++ )
kevman 0:38ceb79fef03 542 {
kevman 0:38ceb79fef03 543 if( verbose != 0 )
kevman 0:38ceb79fef03 544 mbedtls_printf( " ChaCha20 test %u ", i );
kevman 0:38ceb79fef03 545
kevman 0:38ceb79fef03 546 ret = mbedtls_chacha20_crypt( test_keys[i],
kevman 0:38ceb79fef03 547 test_nonces[i],
kevman 0:38ceb79fef03 548 test_counters[i],
kevman 0:38ceb79fef03 549 test_lengths[i],
kevman 0:38ceb79fef03 550 test_input[i],
kevman 0:38ceb79fef03 551 output );
kevman 0:38ceb79fef03 552
kevman 0:38ceb79fef03 553 ASSERT( 0 == ret, ( "error code: %i\n", ret ) );
kevman 0:38ceb79fef03 554
kevman 0:38ceb79fef03 555 ASSERT( 0 == memcmp( output, test_output[i], test_lengths[i] ),
kevman 0:38ceb79fef03 556 ( "failed (output)\n" ) );
kevman 0:38ceb79fef03 557
kevman 0:38ceb79fef03 558 if( verbose != 0 )
kevman 0:38ceb79fef03 559 mbedtls_printf( "passed\n" );
kevman 0:38ceb79fef03 560 }
kevman 0:38ceb79fef03 561
kevman 0:38ceb79fef03 562 if( verbose != 0 )
kevman 0:38ceb79fef03 563 mbedtls_printf( "\n" );
kevman 0:38ceb79fef03 564
kevman 0:38ceb79fef03 565 return( 0 );
kevman 0:38ceb79fef03 566 }
kevman 0:38ceb79fef03 567
kevman 0:38ceb79fef03 568 #endif /* MBEDTLS_SELF_TEST */
kevman 0:38ceb79fef03 569
kevman 0:38ceb79fef03 570 #endif /* !MBEDTLS_CHACHA20_C */