Add GCM, CTR, and CTS modes to AES.

nss/mozilla/security/nss/lib/freebl/cts.h

+/* This Source Code Form is subject to the terms of the Mozilla Public
+ * License, v. 2.0. If a copy of the MPL was not distributed with this
+ * file, You can obtain one at http://mozilla.org/MPL/2.0/. */
+
+#ifndef CTS_H
+#define CTS_H 1
+
+#include "blapii.h"
+
+typedef struct CTSContextStr CTSContext;
+
+/*
+ * The context argument is the inner cipher context to use with cipher. The
+ * CTSContext does not own context. context needs to remain valid for as long
+ * as the CTSContext is valid.
+ *
+ * The cipher argument is a block cipher in the CBC mode.
+ *     SECStatus cipher(void *cx, unsigned char *output,
+ *                      unsigned int *outputLen, unsigned int maxOutputLen,
+ *                      const unsigned char *input, unsigned int inputLen,
+ *                      unsigned int blocksize);
+ * inputLen is always a multiple of blocksize and never 0.

[Ryan Sleevi, 2012/09/17 22:57:26]

I found this comment a little confusing at first, because it wasn't clear
whether you were talking about CTS_EncryptUpdate or about the CBC function
(answer: the CBC function).

I'm also not sure if it's necessary to specify here, since that's specifying a
behaviour/implementation detail of the CTS implementation, not on a pre-/post-
condition of the CBC or CTS contexts.

[wtc, 2012/09/18 01:03:40]

Comment removed.

+ * XXX rijndael_encryptCBC and rijndael_decryptCBC do not set the *outputLen
+ * output argument.
+ */
+CTSContext *CTS_CreateContext(void *context, freeblCipherFunc cipher,
+                        const unsigned char *iv, unsigned int blocksize);
+
+void CTS_DestroyContext(CTSContext *cts, PRBool freeit);
+
+SECStatus CTS_EncryptUpdate(CTSContext *cts, unsigned char *outbuf,
+                        unsigned int *outlen, unsigned int maxout,
+                        const unsigned char *inbuf, unsigned int inlen,
+                        unsigned int blocksize);
+SECStatus CTS_DecryptUpdate(CTSContext *cts, unsigned char *outbuf,
+                        unsigned int *outlen, unsigned int maxout,
+                        const unsigned char *inbuf, unsigned int inlen,
+                        unsigned int blocksize);
+
+#endif