Struct Aes128Gcm

pub struct Aes128Gcm<'a, A: AES128<'a> + AES128Ctr + AES128CBC + AES128ECB + AES128CCM<'a>> { /* private fields */ }

Implementations

impl<'a, A: AES128<'a> + AES128Ctr + AES128CBC + AES128ECB + AES128CCM<'a>> Aes128Gcm<'a, A>

pub fn new(aes: &'a A, crypt_buf: &'static mut [u8]) -> Aes128Gcm<'a, A>

Trait Implementations

impl<'a, A: AES128<'a> + AES128Ctr + AES128CBC + AES128ECB + AES128CCM<'a>> AES128<'a> for Aes128Gcm<'a, A>

fn enable(&self)

Enable the AES hardware. Must be called before any other methods

fn disable(&self)

Disable the AES hardware

fn set_client(&'a self, client: &'a dyn Client<'a>)

Set the client instance which will receive crypt_done() callbacks

fn set_key(&self, key: &[u8]) -> Result<(), ErrorCode>

Set the encryption key. Returns INVAL if length is not AES128_KEY_SIZE

fn set_iv(&self, iv: &[u8]) -> Result<(), ErrorCode>

Set the IV (or initial counter). Returns INVAL if length is not AES128_BLOCK_SIZE

fn start_message(&self)

Begin a new message (with the configured IV) when crypt() is next called. Multiple calls to crypt() may be made between calls to start_message(), allowing the encryption context to extend over non-contiguous extents of data.

fn crypt( &self, source: Option<&'static mut [u8]>, dest: &'static mut [u8], start_index: usize, stop_index: usize, ) -> Option<(Result<(), ErrorCode>, Option<&'static mut [u8]>, &'static mut [u8])>

Request an encryption/decryption

impl<'a, A: AES128<'a> + AES128Ctr + AES128CBC + AES128ECB + AES128CCM<'a>> AES128CBC for Aes128Gcm<'a, A>

fn set_mode_aes128cbc(&self, encrypting: bool) -> Result<(), ErrorCode>

Call before AES128::crypt() to perform AES128CBC

impl<'a, A: AES128<'a> + AES128Ctr + AES128CBC + AES128ECB + AES128CCM<'a>> AES128CCM<'a> for Aes128Gcm<'a, A>

fn set_client(&'a self, client: &'a dyn CCMClient)

Set the client instance which will receive crypt_done() callbacks

fn set_key(&self, key: &[u8]) -> Result<(), ErrorCode>

Set the key to be used for CCM encryption

fn set_nonce(&self, nonce: &[u8]) -> Result<(), ErrorCode>

Set the nonce (length NONCE_LENGTH) to be used for CCM encryption

fn crypt( &self, buf: &'static mut [u8], a_off: usize, m_off: usize, m_len: usize, mic_len: usize, confidential: bool, encrypting: bool, ) -> Result<(), (ErrorCode, &'static mut [u8])>

Try to begin the encryption/decryption process

impl<'a, A: AES128<'a> + AES128Ctr + AES128CBC + AES128ECB + AES128CCM<'a>> AES128Ctr for Aes128Gcm<'a, A>

fn set_mode_aes128ctr(&self, encrypting: bool) -> Result<(), ErrorCode>

Call before AES128::crypt() to perform AES128Ctr

impl<'a, A: AES128<'a> + AES128Ctr + AES128CBC + AES128ECB + AES128CCM<'a>> AES128ECB for Aes128Gcm<'a, A>

fn set_mode_aes128ecb(&self, encrypting: bool) -> Result<(), ErrorCode>

Call before AES128::crypt() to perform AES128ECB

impl<'a, A: AES128<'a> + AES128Ctr + AES128CBC + AES128ECB + AES128CCM<'a>> AES128GCM<'a> for Aes128Gcm<'a, A>

fn set_client(&self, client: &'a dyn GCMClient)

Set the client instance which will receive crypt_done() callbacks

fn set_key(&self, key: &[u8]) -> Result<(), ErrorCode>

Set the key to be used for GCM encryption Returns INVAL if length is not AES128_KEY_SIZE

fn set_iv(&self, nonce: &[u8]) -> Result<(), ErrorCode>

Set the IV to be used for GCM encryption. The IV should be less or equal to 12 bytes (96 bits) as recommened in NIST-800-38D. Returns INVAL if length is greater then 12 bytes

fn crypt( &self, buf: &'static mut [u8], aad_offset: usize, message_offset: usize, message_len: usize, encrypting: bool, ) -> Result<(), (ErrorCode, &'static mut [u8])>

Try to begin the encryption/decryption process The possible ErrorCodes are: - BUSY: An operation is already in progress - SIZE: The offset and lengths don’t fit inside the buffer

impl<'a, A: AES128<'a> + AES128Ctr + AES128CBC + AES128ECB + AES128CCM<'a>> CCMClient for Aes128Gcm<'a, A>

fn crypt_done( &self, buf: &'static mut [u8], res: Result<(), ErrorCode>, tag_is_valid: bool, )

res is Ok(()) if the encryption/decryption process succeeded. This does not mean that the message has been verified in the case of decryption. If we are encrypting: tag_is_valid is true iff res is Ok(()). If we are decrypting: tag_is_valid is true iff res is Ok(()) and the message authentication tag is valid.

impl<'a, A: AES128<'a> + AES128Ctr + AES128CBC + AES128ECB + AES128CCM<'a>> Client<'a> for Aes128Gcm<'a, A>

fn crypt_done(&self, _: Option<&'static mut [u8]>, crypt_buf: &'static mut [u8])