QPQ-AG/libsodium
12
0
Fork 0
mirror of https://github.com/jedisct1/libsodium.git synced 2026-08-25 19:27:12 +09:00
Code Issues Packages Projects Releases Wiki Activity

SHAKE: if the rate is exactly full, process that block before padding

Browse Source
This commit is contained in:
Frank Denis
2025-11-26 23:00:42 +01:00
parent 9b161dccfa
commit 6a892675bc
4 changed files with 24 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/libsodium/crypto_xof/shake128/ref/shake128_ref.c
+6
View File
@@ -56,6 +56,12 @@ shake128_finalize(shake128_state_internal *state)
{
unsigned char pad;
/* If the rate is exactly full, process that block before padding */
if (state->offset == SHAKE128_RATE) {
crypto_core_keccak1600_permute_24(state->state);
state->offset = 0;
}
/* Apply padding: domain byte at current position, 0x80 at last byte */
if (state->offset == SHAKE128_RATE - 1) {
/* Special case: padding fits in one byte */
src/libsodium/crypto_xof/shake256/ref/shake256_ref.c
+6
View File
@@ -56,6 +56,12 @@ shake256_finalize(shake256_state_internal *state)
{
unsigned char pad;
/* If the rate is exactly full, process that block before padding */
if (state->offset == SHAKE256_RATE) {
crypto_core_keccak1600_permute_24(state->state);
state->offset = 0;
}
/* Apply padding: domain byte at current position, 0x80 at last byte */
if (state->offset == SHAKE256_RATE - 1) {
/* Special case: padding fits in one byte */
src/libsodium/crypto_xof/turboshake128/ref/turboshake128_ref.c
+6
View File
@@ -56,6 +56,12 @@ turboshake128_finalize(turboshake128_state_internal *state)
{
unsigned char pad;
/* If the rate is exactly full, process that block before padding */
if (state->offset == TURBOSHAKE128_RATE) {
crypto_core_keccak1600_permute_12(state->state);
state->offset = 0;
}
/* Apply padding: domain byte at current position, 0x80 at last byte */
if (state->offset == TURBOSHAKE128_RATE - 1) {
/* Special case: padding fits in one byte */
src/libsodium/crypto_xof/turboshake256/ref/turboshake256_ref.c
+6
View File
@@ -56,6 +56,12 @@ turboshake256_finalize(turboshake256_state_internal *state)
{
unsigned char pad;
/* If the rate is exactly full, process that block before padding */
if (state->offset == TURBOSHAKE256_RATE) {
crypto_core_keccak1600_permute_12(state->state);
state->offset = 0;
}
/* Apply padding: domain byte at current position, 0x80 at last byte */
if (state->offset == TURBOSHAKE256_RATE - 1) {
/* Special case: padding fits in one byte */