public class OCBBlockCipher extends java.lang.Object implements OCBModeCipher
https://mailarchive.ietf.org/arch/msg/cfrg/qLTveWOdTJcLn4HP3ev-vrj05Vg/
Text reproduced below.Phillip Rogaway >rogaway@cs.ucdavis.edu< Sat, 27 February 2021 02:46 UTCShow header I can confirm that I have abandoned all OCB patents and placed into the public domain all OCB-related IP of mine. While I have been telling people this for quite some time, I don't think I ever made a proper announcement to the CFRG or on the OCB webpage. Consider that done.
| Constructor and Description |
|---|
OCBBlockCipher(BlockCipher hashCipher,
BlockCipher mainCipher) |
| Modifier and Type | Method and Description |
|---|---|
protected void |
clear(byte[] bs) |
int |
doFinal(byte[] output,
int outOff)
Finish the operation either appending or verifying the MAC at the end of the data.
|
java.lang.String |
getAlgorithmName()
Return the name of the algorithm.
|
protected byte[] |
getLSub(int n) |
byte[] |
getMac()
Return the value of the MAC associated with the last stream processed.
|
int |
getOutputSize(int len)
return the size of the output buffer required for a processBytes plus a
doFinal with an input of len bytes.
|
BlockCipher |
getUnderlyingCipher()
return the
BlockCipher this object wraps. |
int |
getUpdateOutputSize(int len)
return the size of the output buffer required for a processBytes
an input of len bytes.
|
void |
init(boolean forEncryption,
CipherParameters parameters)
initialise the underlying cipher.
|
protected static byte[] |
OCB_double(byte[] block) |
protected static void |
OCB_extend(byte[] block,
int pos) |
protected static int |
OCB_ntz(long x) |
void |
processAADByte(byte input)
Add a single byte to the associated data check.
|
void |
processAADBytes(byte[] input,
int off,
int len)
Add a sequence of bytes to the associated data check.
|
int |
processByte(byte input,
byte[] output,
int outOff)
encrypt/decrypt a single byte.
|
int |
processBytes(byte[] input,
int inOff,
int len,
byte[] output,
int outOff)
process a block of bytes from in putting the result into out.
|
protected void |
processHashBlock() |
protected void |
processMainBlock(byte[] output,
int outOff) |
protected int |
processNonce(byte[] N) |
void |
reset()
Reset the cipher.
|
protected void |
reset(boolean clearMac) |
protected static int |
shiftLeft(byte[] block,
byte[] output) |
protected void |
updateHASH(byte[] LSub) |
protected static void |
xor(byte[] block,
byte[] val) |
public OCBBlockCipher(BlockCipher hashCipher, BlockCipher mainCipher)
public BlockCipher getUnderlyingCipher()
AEADBlockCipherBlockCipher this object wraps.getUnderlyingCipher in interface AEADBlockCipherBlockCipher this object wraps.public java.lang.String getAlgorithmName()
AEADCiphergetAlgorithmName in interface AEADCipherpublic void init(boolean forEncryption,
CipherParameters parameters)
throws java.lang.IllegalArgumentException
AEADCipherinit in interface AEADCipherforEncryption - true if we are setting up for encryption, false otherwise.parameters - the necessary parameters for the underlying cipher to be initialised.java.lang.IllegalArgumentException - if the params argument is inappropriate.protected int processNonce(byte[] N)
public byte[] getMac()
AEADCiphergetMac in interface AEADCipherpublic int getOutputSize(int len)
AEADCipher
The returned size may be dependent on the initialisation of this cipher
and may not be accurate once subsequent input data is processed - this method
should be invoked immediately prior to a call to final processing of input data
and a call to AEADCipher.doFinal(byte[], int).
getOutputSize in interface AEADCipherlen - the length of the input.public int getUpdateOutputSize(int len)
AEADCipherThe returned size may be dependent on the initialisation of this cipher and may not be accurate once subsequent input data is processed - this method should be invoked immediately prior to input data being processed.
getUpdateOutputSize in interface AEADCipherlen - the length of the input.public void processAADByte(byte input)
AEADCipherprocessAADByte in interface AEADCipherinput - the byte to be processed.public void processAADBytes(byte[] input,
int off,
int len)
AEADCipherprocessAADBytes in interface AEADCipherinput - the input byte array.off - the offset into the in array where the data to be processed starts.len - the number of bytes to be processed.public int processByte(byte input,
byte[] output,
int outOff)
throws DataLengthException
AEADCipherprocessByte in interface AEADCipherinput - the byte to be processed.output - the output buffer the processed byte goes into.outOff - the offset into the output byte array the processed data starts at.DataLengthException - if the output buffer is too small.public int processBytes(byte[] input,
int inOff,
int len,
byte[] output,
int outOff)
throws DataLengthException
AEADCipherprocessBytes in interface AEADCipherinput - the input byte array.inOff - the offset into the in array where the data to be processed starts.len - the number of bytes to be processed.output - the output buffer the processed bytes go into.outOff - the offset into the output byte array the processed data starts at.DataLengthException - if the output buffer is too small.public int doFinal(byte[] output,
int outOff)
throws java.lang.IllegalStateException,
InvalidCipherTextException
AEADCipherdoFinal in interface AEADCipheroutput - space for any resulting output data.outOff - offset into out to start copying the data at.java.lang.IllegalStateException - if the cipher is in an inappropriate state.InvalidCipherTextException - if the MAC fails to match.public void reset()
AEADCipherreset in interface AEADCipherprotected void clear(byte[] bs)
protected byte[] getLSub(int n)
protected void processHashBlock()
protected void processMainBlock(byte[] output,
int outOff)
protected void reset(boolean clearMac)
protected void updateHASH(byte[] LSub)
protected static byte[] OCB_double(byte[] block)
protected static void OCB_extend(byte[] block,
int pos)
protected static int OCB_ntz(long x)
protected static int shiftLeft(byte[] block,
byte[] output)
protected static void xor(byte[] block,
byte[] val)