zig

commit 391663e497f1871f6bddcf9cbc500710aa9aac4d (tree)
parent 83970b6d916a1526869aba2680d5017d495df12a
Author: Frank Denis <124872+jedisct1@users.noreply.github.com>
Date:   Fri, 21 Apr 2023 13:52:33 -0600

AEGIS MAC: add support for 128-bit tags (#15379)

When used as a MAC, 256-bit tags are recommended.
But in interactive protocols, 128 bits may be acceptable.
Diffstat:
M
lib/std/crypto.zig
 | 
2
++
M
lib/std/crypto/aegis.zig
 | 
14
++++++++++++++

2 files changed, 16 insertions(+), 0 deletions(-)
diff --git a/lib/std/crypto.zig b/lib/std/crypto.zig
@@ -41,7 +41,9 @@ pub const auth = struct {
     pub const siphash = @import("crypto/siphash.zig");
     pub const aegis = struct {
         pub const Aegis128LMac = @import("crypto/aegis.zig").Aegis128LMac;
+        pub const Aegis128LMac_128 = @import("crypto/aegis.zig").Aegis128LMac_128;
         pub const Aegis256Mac = @import("crypto/aegis.zig").Aegis256Mac;
+        pub const Aegis256Mac_128 = @import("crypto/aegis.zig").Aegis256Mac_128;
     };
     pub const cmac = @import("crypto/cmac.zig");
 };
diff --git a/lib/std/crypto/aegis.zig b/lib/std/crypto/aegis.zig
@@ -417,6 +417,20 @@ pub const Aegis128LMac = AegisMac(Aegis128L_256);
 /// - It has a large security margin against internal collisions.
 pub const Aegis256Mac = AegisMac(Aegis256_256);
 
+/// Aegis128L MAC with a 128-bit output.
+/// A MAC with a 128-bit output is not safe unless the number of messages
+/// authenticated with the same key remains small.
+/// After 2^48 messages, the probability of a collision is already ~ 2^-33.
+/// If unsure, use the  Aegis128LMac type, that has a 256 bit output.
+pub const Aegis128LMac_128 = AegisMac(Aegis128L);
+
+/// Aegis256 MAC with a 128-bit output.
+/// A MAC with a 128-bit output is not safe unless the number of messages
+/// authenticated with the same key remains small.
+/// After 2^48 messages, the probability of a collision is already ~ 2^-33.
+/// If unsure, use the  Aegis256Mac type, that has a 256 bit output.
+pub const Aegis256Mac_128 = AegisMac(Aegis256);
+
 fn AegisMac(comptime T: type) type {
     return struct {
         const Self = @This();