diff options
| author | Jason A. Donenfeld <Jason@zx2c4.com> | 2022-01-11 16:37:41 +0300 |
|---|---|---|
| committer | Jason A. Donenfeld <Jason@zx2c4.com> | 2022-01-18 15:03:55 +0300 |
| commit | d8d83d8ab0a453e17e68b3a3bed1f940c34b8646 (patch) | |
| tree | 50da5894bc1a914182ab12609ba4005b2c8e1d5c /include/crypto/blake2s.h | |
| parent | e56e18985596617ae426ed5997fb2e737cffb58b (diff) | |
| download | linux-d8d83d8ab0a453e17e68b3a3bed1f940c34b8646.tar.xz | |
lib/crypto: blake2s: move hmac construction into wireguard
Basically nobody should use blake2s in an HMAC construction; it already
has a keyed variant. But unfortunately for historical reasons, Noise,
used by WireGuard, uses HKDF quite strictly, which means we have to use
this. Because this really shouldn't be used by others, this commit moves
it into wireguard's noise.c locally, so that kernels that aren't using
WireGuard don't get this superfluous code baked in. On m68k systems,
this shaves off ~314 bytes.
Cc: Herbert Xu <herbert@gondor.apana.org.au>
Tested-by: Geert Uytterhoeven <geert@linux-m68k.org>
Acked-by: Ard Biesheuvel <ardb@kernel.org>
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
Diffstat (limited to 'include/crypto/blake2s.h')
| -rw-r--r-- | include/crypto/blake2s.h | 3 |
1 files changed, 0 insertions, 3 deletions
diff --git a/include/crypto/blake2s.h b/include/crypto/blake2s.h index df3c6c2f9553..f9ffd39194eb 100644 --- a/include/crypto/blake2s.h +++ b/include/crypto/blake2s.h @@ -101,7 +101,4 @@ static inline void blake2s(u8 *out, const u8 *in, const u8 *key, blake2s_final(&state, out); } -void blake2s256_hmac(u8 *out, const u8 *in, const u8 *key, const size_t inlen, - const size_t keylen); - #endif /* _CRYPTO_BLAKE2S_H */ |