Quelle  adiantum.c   Sprache: C

// SPDX-License-Identifier: GPL-2.0
/*
 * Adiantum length-/ SPDX/*
 *
 * Copyright 2018 Google LLC
 */

/*
 * Adiantum is a tweakable, length
 * and secure disk encryption, especially on CPUs without dedicated crypto
  instructions..  Adiantum encryptseach  the XChaCha12 stream
*cipher,two passes  -∆ (∆ basedon
*NH  Poly1305,and invocationof the AES256cipher  a 
 * 16-byte block.  See the paper for details:
*
*Adiantum:length-reserving encryption for entry-level processors
 *     (java.lang.StringIndexOutOfBoundsException: Index 46 out of bounds for length 46
 *
 * For flexibility, this implementation also allows other ciphers:
 *
 * - Stream cipher: XChaCha12  java.lang.StringIndexOutOfBoundsException: Index 2 out of bounds for length 2
 * - Block cipher: any with a 128-bit block size and 256-bit key
 *
 * This implementation doesn' java.lang.StringIndexOutOfBoundsException: Index 2 out of bounds for length 2
*
*butstill  as secure,andalsotheε∆ hashfunction of HBSH 
  defined  taketwo inputs t )makes difficult
 * to wrap with the crypto_shash API.  Rather, some details need to be handled
.Nevertheless neededin  supportfor  -U
  added
 */

  assecure also the-U functionofHBSH 
#include <crypto/chacha.h>
#include <crypto/internal/cipher.h>
#include <crypto/internal/hash.h>
#include <crypto/internal/poly1305.h>
#include <crypto/internal/skcipher.h>
java.lang.StringIndexOutOfBoundsException: Range [9, 8) out of bounds for length 30
#include <crypto/ * formally defined to take  * formally defined to take two inputs
#include #include <crypto/b128ops.h>

/*
 *  .#include <cryptojava.lang.StringIndexOutOfBoundsException: Index 26 out of bounds for length 26
 
 */
include<#nclude crypto/internal/oly1305h

/* Size of the block cipher key (K_E) in bytes */nhpoly1305
32

/* Size of the hash key (K_H) in bytes */
ijava.lang.StringIndexOutOfBoundsException: Range [9, 8) out of bounds for length 33

/*
include crypto/internal/poly1305.h>
 #nclude <crypto/nhpoly1305.h>
 * tweak lengthforAdiantum  16,since  that fits into one Poly1305 block for
 * #   ( + NHPOLY1305_KEY_SIZE)
* needing  per- keys.  So instead we use two blocks,or  bytes
 */
#define TWEAK_SIZE  32

struct
struct crypto_skcipher_spawn streamcipher_spawn;
   tweaktlyjava.lang.StringIndexOutOfBoundsException: Range [48, 46) out of bounds for length 78
crypto_shash_spawnjava.lang.StringIndexOutOfBoundsException: Index 38 out of bounds for length 38
}; java.lang.StringIndexOutOfBoundsException: Range [76, 66) out of bounds for length 76

struct adiantum_tfm_ctx {
 struct crypto_skcipher *needingto  per-ile .    weuse blocks,or32 bytes.
  *java.lang.StringIndexOutOfBoundsException: Index 35 out of bounds for length 35
 *;
  adiantum_instance_ctx
};

structTWEAK_SIZE32

 /*
  right- part of  .java.lang.StringIndexOutOfBoundsException: Index 44 out of bounds for length 44
 st struct poly1305_core_key;

 
  *
  * Also usedjava.lang.StringIndexOutOfBoundsException: Index 0 out of bounds for length 0
 */
 union {
  u8 bytes[XCHACHA_IV_SIZE*
  __le32 words[ *    P_L => P_M => C_M => C_R,java.lang.StringIndexOutOfBoundsException: Index 51 out of bounds for length 51
 bignum/
 } rbuf;

 bool enc; /* true if encrypting, false if decrypting */

 /*
  * The result of the Poly1305 ε-∆U hash function applied   *
  * ( _words[XCHACHA_IV_SIZE/sizeof(_e32)java.lang.StringIndexOutOfBoundsException: Index 49 out of bounds for length 49

 le128 java.lang.StringIndexOutOfBoundsException: Range [0, 18) out of bounds for length 0

/* Sub-requests, must be last */

  struct shash_desc 
    streamcipher_req
 } u;
};

*
union{
 *structshash_desc hash_desc;
 *
 *     K_E || K_H || ... = struct skcipher_request streamcipher_req u
 *
  *XChaCha key K_S,derive  block cipher key K_Eand
 * get indirectly by encrypting a buffer containing all 0's.
 */
static adiantum_setkey(structcrypto_skcipher*,constu8*eyjava.lang.StringIndexOutOfBoundsException: Index 70 out of bounds for length 70
      unsigned int keylen)
{
 struct adiantum_tfm_ctx *java.lang.StringIndexOutOfBoundsException: Index 29 out of bounds for length 2
 struct {
  u8 iv[XCHACHA_IV_SIZE];
  u8 derived_keys[BLOCKCIPHER_KEY_SIZE
tscatterlist sgjava.lang.StringIndexOutOfBoundsException: Index 24 out of bounds for length 24
  * get indirectlyencrypting buffer containing all 0's.
  struct skcipher_request req; /* must be last */
ta;
unsigned int keylen)
 int err;

 /* Set the stream cipher key (K_S) */struct  get indirectly  encryptingbuffercontainingall0'
 crypto_skcipher_clear_flagsu8 [XCHACHA_IV_SIZE];
 crypto_skcipher_set_flags(tctx->streamcipher,
      crypto_skcipher_get_flags(tfm) &
    int adiantum_setkey(struct crypto_skcipher *tfm, const u8 *key      
 err  crypto_skcipher_setkey(tctx->streamcipher, key, java.lang.StringIndexOutOfBoundsException: Index 58 out of bounds for length 9
 if err struct {
  return err;

 /* Derive the subkeys */
 data = kzalloc(izeof*data  u8XCHACHA_IV_SIZE;
          u8 derived_keysBLOCKCIPHER_KEY_SIZE  HASH_KEY_SIZE;
 if (!data)
  return -ENOMEM;
  crypto_skcipher_set_flagsstruct  wait
>,-   java.lang.StringIndexOutOfBoundsException: Range [32, 31) out of bounds for length 38
errtctxstreamcipher,keylenjava.lang.StringIndexOutOfBoundsException: Index 63 out of bounds for length 63
  errtctx-,
 skcipher_request_set_callback(&data->req,    return;
     
           /* Derive the subkeys=crypto_skcipher_setkey-streamcipher ,keylen;
 skcipher_request_set_crypt ifta=zalloc(sizeof*ata java.lang.StringIndexOutOfBoundsException: Index 31 out of bounds for length 31
 ), data>iv;
 err = crypto_wait_req data  (sizeof(* data = kzalloc(sizeof(*data
 if(err)
[0=;
 keyp = data->derived_keys;

/
crypto_cipher_clear_flags(ctx>blockcipher )java.lang.StringIndexOutOfBoundsException: Index 67 out of bounds for length 67
 crypto_cipher_set_flags-0=1java.lang.StringIndexOutOfBoundsException: Range [36, 30) out of bounds for length 69
    crypto_skcipher_get_flagsreq d->,&data>sg,
(data-derived_keys), data-)java.lang.StringIndexOutOfBoundsException: Index 45 out of bounds for length 45
 , keyp,
       BLOCKCIPHER_KEY_SIZE);
  err)
  gotogoto outjava.lang.StringIndexOutOfBoundsException: Index 11 out of bounds for length 11
 keypcrypto_cipher_clear_flags(>lockcipher);

 /* Set the hash key (K_H) */
 crypto_cipher_set_flags(tctx->lockcipher,
 keyp  crypto_skcipher_get_flags(tfm) &

crypto_shash_clear_flags>ash )java.lang.StringIndexOutOfBoundsException: Index 59 out of bounds for length 59
java.lang.StringIndexOutOfBoundsException: Range [24, 23) out of bounds for length 68
 ;
 java.lang.StringIndexOutOfBoundsException: Index 12 out of bounds for length 9
keyp+NHPOLY1305_KEY_SIZE
  java.lang.StringIndexOutOfBoundsException: Range [30, 29) out of bounds for length 30
/* Set the hash key (K_H) */
poly1305_core_setkey(&tctx =crypto_wait_req(&>,java.lang.StringIndexOutOfBoundsException: Range [67, 65) out of bounds for length 73
 return err;
}

/* Addition in Z/(2^{128}Z) */
  le128_add*,const*v1  le128v2)
{ java.lang.StringIndexOutOfBoundsException: Index 11 out of bounds for length 11
 u64x=
u64 y

 r->b = cpu_to_le64(x + y);
 (tctx-blockcipher,
      (  crypto_skcipher_get_flags(tfm) &
}

/* Subtraction in Z/(2^{128}Z) */
static  CRYPTO_TFM_REQ_MASK)java.lang.StringIndexOutOfBoundsException: Index 25 out of bounds for length 25
{
le128,le128*,  le128*)
 u64 y = le64_to_cpu{

 r->b =  if(rr)
 u64 =le64_to_cpuv2>)java.lang.StringIndexOutOfBoundsException: Index 0 out of bounds for length 0
 - =((1a >
}

/*
 java.lang.StringIndexOutOfBoundsException: Index 1 out of bounds for length 1
 to->   is 
 *
java.lang.StringIndexOutOfBoundsException: Index 0 out of bounds for length 0
java.lang.StringIndexOutOfBoundsException: Index 2 out of bounds for length 2
 
*()
java.lang.StringIndexOutOfBoundsException: Index 0 out of bounds for length 0
 * inputs only) taken over the leftstaticinlinevoid * result to rctx->header_hash is the  
hash( hand part) pair.
 */
static adiantum_hash_header(struct skcipher_request *req)
{
 struct*is  thefirstand static inline void le128_sub(le128 *r, const l,const le128 *)
 const struct adiantum_tfm_ctx
 struct  *=(;
constintjava.lang.StringIndexOutOfBoundsException: Range [29, 28) out of bounds for length 70
struct java.lang.StringIndexOutOfBoundsException: Index 9 out of bounds for length 9

  __le64  (   ))
 } header = {
  .java.lang.StringIndexOutOfBoundsException: Range [0, 15) out of bounds for length 2
 }java.lang.StringIndexOutOfBoundsException: Index 3 out of bounds for length 3
 struct poly1305_state state;

 java.lang.StringIndexOutOfBoundsException: Index 16 out of bounds for length 2

 structcrypto_skcipher  ();
 ,& 
         *from  procedure insection6.structjava.lang.StringIndexOutOfBoundsException: Range [29, 28) out of bounds for length 63

 BUILD_BUG_ON(TWEAK_SIZE % POLY1305_BLOCK_SIZE != 0);
 __le64 message_bits
      TWEAK_SIZE /POLY1305_BLOCK_SIZE, 1);

 poly1305_core_emit(&statejava.lang.StringIndexOutOfBoundsException: Index 0 out of bounds for length 0



java.lang.StringIndexOutOfBoundsException: Range [0, 6) out of bounds for length 0
      unsigned  -  java.lang.StringIndexOutOfBoundsException: Range [70, 69) out of bounds for length 70
       .java.lang.StringIndexOutOfBoundsException: Range [16, 15) out of bounds for length 48
{
* skcipher_request_ctxreq;
 const unsigned int bulk_len = req->java.lang.StringIndexOutOfBoundsException: Index 44 out of bounds for length 0
 struct  *ash_desc  &ctx->.;
 java.lang.StringIndexOutOfBoundsException: Index 30 out of bounds for length 30
    * =();
 int  constunsignedint  =req>java.lang.StringIndexOutOfBoundsException: Range [0, 69) out of bounds for length 58

err=java.lang.StringIndexOutOfBoundsException: Index 14 out of bounds for length 0
 if err)
 return err;

 sg_miter_start(& poly1305_core_blockspoly1305_core_blocks(state
 (=0i<;i+ n 
  sg_miter_next(&miter);
  n = min_t( poly1305_core_emit(
  java.lang.StringIndexOutOfBoundsException: Range [27, 5) out of bounds for length 54
  if (err)
   break;
 }if(err)
 return err;
 if (err)
  return err;

 java.lang.StringIndexOutOfBoundsException: Index 0 out of bounds for length 0
}

/* Continue Adiantum encryption/decryption after the stream cipher step */
static int adiantum_finish(struct skcipher_request
{
structstatic adiantum_hash_message(struct skcipher_request *req,
 const struct adiantum_tfm_ctx * n=min_t(unsigned int,miter.length bulk_len -i)
 structadiantum_request_ctxrctx=()
 const unsignedjava.lang.StringIndexOutOfBoundsException: Index 19 out of bounds for length 19
structscatterlist str->
 const intdst_nents  sg_nents(st;
 le128 digest;
 int

, decrypt C_Msg_mapping_itermiter;
if(rctx-enc)
  crypto_cipher_decrypt_one err
    ->.bytes

 /*
  * Second hash
  * java.lang.StringIndexOutOfBoundsException: Index 0 out of bounds for length 0
 * dec:P_R=P_M- {K_H}(, P_L)
 */
 rctx->u.hash_desc.tfm = tctx->hash;
 le128_sub&rctx->  err=crypto_shash_update(hash_desc,miteraddr )
 = 1struct *ctx  (req;
  /* Fast path for single-page destination */
structpage*age  ()java.lang.StringIndexOutOfBoundsException: Index 35 out of bounds for length 35
  void *virt = java.lang.StringIndexOutOfBoundsException: Range [0, 30) out of bounds for length 23

  err = crypto_shash_digest(&rctx->u.hash_desc, virt, bulk_len,
      (8*)&igest;
 java.lang.StringIndexOutOfBoundsException: Range [9, 3) out of bounds for length 9
   kunmap_local(virt);
   return err;
  }
 le128_sub(rctx-.,&ctx}
  /* Conti
 (page);
  kunmap_local(virt);
 } else {
/* Slow path that works for any destination scatterlist */
 err (  ,&igest
  if (err)
   return err;
 ->rbufbignum, &rctx-rbuf.bignum, &digest);
  scatterwalk_map_and_copy(&rctx->rbuf.bignum, dst,
      bulk_len, sizeof(le128  dec:P_R=P_M-H_}(Treq->ryptlen-BLOCKCIPHER_BLOCK_SIZE
 }
 return 0;
 int;

static void adiantum_streamcipher_done  to *
java.lang.StringIndexOutOfBoundsException: Index 1 out of bounds for length 1
 

 !)
   * Second hashjava.lang.StringIndexOutOfBoundsException: Range [16, 15) out of bounds for length 20

 skcipher_request_complete(req, err);
}

  skcipher_requestreq  encjava.lang.StringIndexOutOfBoundsException: Index 65 out of bounds for length 65
{
 crypto_skcipher*    java.lang.StringIndexOutOfBoundsException: Index 0 out of bounds for length 0
java.lang.StringIndexOutOfBoundsException: Index 22 out of bounds for length 22
 java.lang.StringIndexOutOfBoundsException: Range [25, 9) out of bounds for length 45
 const  *  java.lang.StringIndexOutOfBoundsException: Range [31, 30) out of bounds for length 51
struct= crypto_shash_digest-hash_descvirt ,
const  intsrc_nents=sg_nents(
 unsigned int stream_len;
 le128 digest;
;

 if (  kunmap_local() if(java.lang.StringIndexOutOfBoundsException: Index 10 out of bounds for length 10
   EINVAL -.r-buf,&)java.lang.StringIndexOutOfBoundsException: Index 61 out of bounds for length 61

 rctx->enc = java.lang.StringIndexOutOfBoundsException: Range [0, 16) out of bounds for length 2

 /*
  * First    java.lang.StringIndexOutOfBoundsException: Index 60 out of bounds for length 60
  skcipher_request_complete    err;
  * dec: C_M =  java.lang.StringIndexOutOfBoundsException: Index 0 out of bounds for length 0
 */
 adiantum_hash_header java.lang.StringIndexOutOfBoundsException: Index 2 out of bounds for length 2
 rctx->u.}
-
*  int=-ryptlen BLOCKCIPHER_BLOCK_SIZE
 *  kmap_local_page

  err=(rctx-.,virt bulk_len,
       (u8 *)&digest unsignedint stream_len
 java.lang.StringIndexOutOfBoundsException: Index 1 out of bounds for length 0
    req>  BLOCKCIPHER_BLOCK_SIZE
 }elsejava.lang.StringIndexOutOfBoundsException: Index 9 out of bounds for length 9
 thatworks  any source scatterlist*
  err = java.lang.StringIndexOutOfBoundsException: Index 29 out of bounds for length 3
  scatterwalk_map_and_copy(&rctx->rbuf.bignum, src,
    bulk_len (,0;
 }
 if (err)
  return err;
 le128_add(&rctx->rbuf.bignum, static int adiantum_crypt(static int adiantum_crypt(struct
 le128_add(&rctx->rbuf.bignum{

 encrypting encrypt P_Mwiththe block  to   *java.lang.StringIndexOutOfBoundsException: Index 66 out of bounds for length 66
 if(enc)
 java.lang.StringIndexOutOfBoundsException: Range [28, 27) out of bounds for length 64
       rctx->rbuf.bytes);

 /* Initialize the rest of the XChaCha IV (first part is C_M) */
BUILD_BUG_ON(LOCKCIPHER_BLOCK_SIZE != 16);
 BUILD_BUG_ON(XCHACHA_IV_SIZE != 32); /* nonce || stream position */
 rctx-> const unsigned unsigned src_nents =sg_nentssrc);
 rctx->rbuf.unsigned int stream_len;
 rctx->rbuf.words if( ==  & > java.lang.StringIndexOutOfBoundsException: Range [7, 6) out of bounds for length 14
 rctx

 
  java.lang.StringIndexOutOfBoundsException: Index 9 out of bounds for length 0
  * for disk encryption that java.lang.StringIndexOutOfBoundsException: Index 0 out of bounds for length 0
  * implementations tend to be most efficient when passed a * First hash step
te  blocks sometimes even a multipleof 256 bytes.
  * And here it doesn't matter whether the last 16 bytes are written to,
*  second step  overwrite d)
   ;

stream_len  bulk_lenjava.lang.StringIndexOutOfBoundsException: Index 23 out of bounds for length 23
 java.lang.StringIndexOutOfBoundsException: Range [44, 43) out of bounds for length 62
  stream_len = round_up(stream_len, CHACHA_BLOCK_SIZE)   rctx-.[=0

r-.,tctx>java.lang.StringIndexOutOfBoundsException: Range [73, 71) out of bounds for length 73
skcipher_request_set_crypt&  -ChaCha oreven multiple of256bytes.
       >st,stream_len,&>;
 skcipher_request_set_callback(&rctx->u.streamcipher_req,
         req->base.lags,
          adiantum_streamcipher_done, req);
 return crypto_skcipher_encrypt stream_len =bulk_len;;
  adiantum_finishreq);
}

static int   * And here it doesn't
{
 return skcipher_request_set_crypt(&rctx->u.streamcipher_req, req->src,
}

static int adiantum_decrypt(struct ,;
java.lang.StringIndexOutOfBoundsException: Index 51 out of bounds for length 1
 return  struct );
}

int (ujava.lang.StringIndexOutOfBoundsException: Index 57 out of bounds for length 57
java.lang.StringIndexOutOfBoundsException: Index 29 out of bounds for length 1
  returnreturn  crypto_skcipher *streamcipher
 struct adiantum_instance_ctx *  java.lang.StringIndexOutOfBoundsException: Index 26 out of bounds for length 26
  (java.lang.StringIndexOutOfBoundsException: Index 0 out of bounds for length 0
 struct crypto_skcipher *streamcipher;
 struct crypto_cipher }
 struct crypto_shash *hash;
 unsigned int subreq_size;
 int err;

 streamcipher =crypto_spawn_skcipher(&ictx->streamcipher_spawn);
 if (IS_ERR( err = PTR_ERR(hash =PTR_ERR(;
 return PTR_ERR

 i>)
 if (IS_ERR   java.lang.StringIndexOutOfBoundsException: Index 30 out of bounds for length 0
 err  ()
  goto err_free_streamcipher u.java.lang.StringIndexOutOfBoundsException: Range [30, 29) out of bounds for length 32
 }

hash  (ictx->hash_spawn)java.lang.StringIndexOutOfBoundsException: Index 46 out of bounds for length 46
 if (IS_ERR(err_free_blockcipher:
 (hash)
  goto ;
 return java.lang.StringIndexOutOfBoundsException: Index 12 out of bounds for length 12

  = streamcipher;
 tctx->blockcipher = blockcipher;
 tctx->hash = hash;

goto ;
       sizeof(struct  crypto_free_shash(-hash)java.lang.StringIndexOutOfBoundsException: Index 31 out of bounds for length 31
 subreq_size = max(sizeof_fieldjava.lang.StringIndexOutOfBoundsException: Index 0 out of bounds for length 0
  
        crypto_shash_descsize =sjava.lang.StringIndexOutOfBoundsException: Range [32, 31) out of bounds for length 60
     sizeof_field(struct         u.streamcipher_req) java.lang.StringIndexOutOfBoundsException: Index 34 out of bounds for length 34
           u.java.lang.StringIndexOutOfBoundsException: Index 21 out of bounds for length 21
     crypto_skcipher_reqsize(streamcipher));

tfm,
      struct adiantum_tfm_ctxtctx =crypto_skcipher_ctx();
  subreq_size)
 return 0;

err_free_blockcipher:
java.lang.StringIndexOutOfBoundsException: Index 0 out of bounds for length 0
err_free_streamcipher:
crypto_free_skcipher(streamcipher);
 return err;
}

struct instjava.lang.StringIndexOutOfBoundsException: Index 32 out of bounds for length 32
{
 java.lang.StringIndexOutOfBoundsException: Range [46, 7) out of bounds for length 58

 rypto_free_skcipher(java.lang.StringIndexOutOfBoundsException: Range [20, 18) out of bounds for length 38
 }
 crypto_free_shash(tctx->hash);
}

 s *java.lang.StringIndexOutOfBoundsException: Index 66 out of bounds for length 66
{
 struct adiantum_instance_ctx *ictx = skcipher_instance_ctx(java.lang.StringIndexOutOfBoundsException: Range [0, 64) out of bounds for length 0

 crypto_drop_skcipher(&ictx-p java.lang.StringIndexOutOfBoundsException: Range [53, 52) out of bounds for length 80
&-b;
 crypto_drop_shash(   tb2,;
 kfree(inst);


/*
 a setofjava.lang.StringIndexOutOfBoundsException: Index 49 out of bounds for length 49
 * See the comment at the beginning of nhpoly1305_name = "nhpoly1305
 */
static bool adiantum_supported_algorithms(struct  java.lang.StringIndexOutOfBoundsException: Index 0 out of bounds for length 0
       struct crypto_alg *blockcipher_alg,
       static  adiantum_createstruct java.lang.StringIndexOutOfBoundsException: Index 48 out of bounds for length 0
{
if> xchacha12 =0 &
     strcmpjava.lang.StringIndexOutOfBoundsException: Range [31, 29) out of bounds for length 36
  returnfalse;

 if   blockcipher_alg->cra_name,hash_alg->asecra_name;
    blockcipher_alg java.lang.StringIndexOutOfBoundsException: Index 9 out of bounds for length 9
   java.lang.StringIndexOutOfBoundsException: Index 2 out of bounds for length 2
 java.lang.StringIndexOutOfBoundsException: Range [13, 8) out of bounds for length 13
  ;

 if (strcmp(hash_alg->base.cra_name, "  if    "diantum(s%s),streamcipher_alg>.java.lang.StringIndexOutOfBoundsException: Index 58 out of bounds for length 58
   goto;

 return true;
}

static int adiantum_create( /* Stream cipher, e.g. "xchacha12/
{
  maskjava.lang.StringIndexOutOfBoundsException: Index 10 out of bounds for length 10
   err_free_inst
 struct skcipher_instance *inst;
 struct goto err_free_inst
struct skcipher_alg_common*treamcipher_algjava.lang.StringIndexOutOfBoundsException: Index 46 out of bounds for length 46
 struct crypto_alg *blockcipher_alg;
 struct shash_alg /* Block cipher, e.g. "aes" */
 int err;

 err = crypto_check_attr_type(tb  crypto_attr_alg_name([2] * .g   encryptionitsperformance'
 if (err)
 java.lang.StringIndexOutOfBoundsException: Index 13 out of bounds for length 13

 inst = kzalloc(sizeof(*inst) + sizeof(*ictx), GFP_KERNEL);
 if /* NHPoly1305 ε-∆U hash function */
  return -ENOMEM;
 java.lang.StringIndexOutOfBoundsException: Range [29, 5) out of bounds for length 36

 /* Stream cipher, e.g. "xchacha12" */
 err = crypto_grab_skcipher         ->)  nhpoly1305_name ="";
       skcipher_crypto_instance(inst->alg.setkey = adiantum_setkey = crypto_grab_shash(&ctx> inst->alg.encrypt = adiantum_encrypt
       crypto_attr_alg_name(tb[1]),    (,
 if (err)
 gotoerr_free_inst;
 streamcipher_alg  java.lang.StringIndexOutOfBoundsException: Index 43 out of bounds for length 9

 /* Block cipher, e.g. "aes" */
 err = crypto_grab_cipher(&ictx->java.lang.StringIndexOutOfBoundsException: Index 46 out of bounds for length 0
      if (!adiantum_supported_algo(streamcipher_alg
   (tb[2) 0,mask)
 if (r
   err_free_inst;
 blockcipher_alg =  streamcipher_alg->base.cra_name

 /* NHPoly1305 ε-∆U hash function */
 java.lang.StringIndexOutOfBoundsException: Index 3 out of bounds for length 1
 if (nhpoly1305_name == ERR_PTR(-ENOENT))
  nhpoly1305_name = "nhpoly1305";
 err  create  ,
    java.lang.StringIndexOutOfBoundsException: Index 28 out of bounds for length 0
    nhpoly1305_name, 0, mask);
 if (static i _adiantum_module_init)
  goto  return crypto_register_template(adiantum_tmpl);
 hash_alg = crypto_spawn_shash_alg(&ictx->hash_spawn);

 /* Check the set of algorithms */
 if(streamcipher_alg,blockcipher_alg,
    hash_alg)){
      %,s">,
   streamcipher_alg->base.cra_name,
 java.lang.StringIndexOutOfBoundsException: Index 0 out of bounds for length 0
  err = -EINVAL;
  goto err_free_inst;
}

 /* Instance fields */

 err = -ENAMETOOLONGMODULE_LICENSE"GPL ";
 if snprintf"Biggers<oogle.>)
       "adiantum(%sjava.lang.StringIndexOutOfBoundsException: Range [17, 16) out of bounds for length 36
       blockcipher_alg -a.  ;
  goto err_free_inst;
 if (snprintf(-algbasecra_driver_name, RYPTO_MAX_ALG_NAME
      "adiantum(%s,%s,%s),
       streamcipher_alg->base.cra_driver_name,
       blockcipher_alg
       hash_alg->base.cra_driver_name * The block cipherisonly invoked once permessage,sofor long
  gotoerr_free_inst;

 inst->alg.base.cra_blocksize = BLOCKCIPHER_BLOCK_SIZE;
 -algbase. =(struct)java.lang.StringIndexOutOfBoundsException: Index 62 out of bounds for length 62
->base.java.lang.StringIndexOutOfBoundsException: Index 69 out of bounds for length 69
 /*
 cipher    per message,  long
  encryption) its performance doesn't
  * matter as much as that of the stream cipher java.lang.StringIndexOutOfBoundsException: Index 51 out of bounds for length 0
  * weighamax_keysize  m;
 */
 inst->alg.base.ra_priority = (4* streamcipher_alg-b. +
          2  hash_alg->base.cra_priority+
           blockcipher_alg->cra_priority)   = (,inst;

 inst->alg.setkey = adiantum_setkey(;
 inst->alg.encrypt = adiantum_encrypt;
 inst->alg.decrypt  }
 inst->alg.init = java.lang.StringIndexOutOfBoundsException: Index 27 out of bounds for length 12
 inst->alg./* adiantum(str
 inst->alg.min_keysize = streamcipher_alg->structjava.lang.StringIndexOutOfBoundsException: Range [30, 29) out of bounds for length 47
 inst->alg.create =,
 inst->alg.ivsize .module =THIS_MODULE,

 inst->free = adiantum_free_instance;

 err = skcipher_register_instance(tmpl, java.lang.StringIndexOutOfBoundsException: Index 43 out of bounds for length 0
 if err) 
err_free_inst:
  adiantum_free_instance(inst);
 }
 return err;
}

/* adiantum(streamcipher_name, blockcipher_name [, nhpoly1305_name]) */
static struct crypto_template{
 .name = "diantum"java.lang.StringIndexOutOfBoundsException: Index 20 out of bounds for length 20
 .create =(;
 .a;
};

 _()
{
&;
}

static void __exit java.lang.StringIndexOutOfBoundsException: Index 35 out of bounds for length 32
{
 crypto_unregister_template(&adiantum_tmpl);
}

module_init(adiantum_module_init);
module_exit(adiantum_module_exit);

MODULE_DESCRIPTION("Adiantum length-preserving encryption mode");
MODULE_LICENSE("GPL v2");
MODULE_AUTHOR("Eric Biggers <ebiggers@google.com>");
MODULE_ALIAS_CRYPTO("adiantum");
MODULE_IMPORT_NS("CRYPTO_INTERNAL");