Enum yaca::BlockCipherMode

pub enum BlockCipherMode {
    None,
    Ecb,
    Ctr,
    Cbc,
    Gcm,
    Cfb,
    Cfb1,
    Cfb8,
    Ofb,
    Ccm,
    Wrap,
}

Enumeration of YACA chaining modes for block ciphers

Variants

None

Used when algorithm doesn't support block ciphers modes.

• Initialization Vector is not used.

Ecb

ECB block cipher mode.

• Initialization Vector is not used.
• By default the input data is padded using standard block padding PKCS7.
• Padding can be disabled using CtxPad::set_property_padding() and Padding::None. The total length of data passed until *::finalize() must be a multiple of block size in such case.
• In case of Encrypt/Seal Padding can be set at the latest before the *::finalize() call. In case of Decrypt/Open it can be set at the latest before the *::update() call.

Ctr

CTR block cipher mode

• 128-bit Initialization Vector for AES, 64-bit for other algorithms is mandatory.

Cbc

CBC block cipher mode

• 128-bit Initialization Vector for AES.
• 64-bit for other algorithms is mandatory.
• By default the input data is padded using standard block padding PKCS7.
• Padding can be disabled using CtxPad::set_property_padding and Padding::None. The total length of data passed until *::finalize() must be a multiple of block size in such case.
• In case of Encrypt/Seal Padding can be set at the latest before the *::finalize() call. In case of Decrypt/Open it can be set at the latest before the *::update() call.

Gcm

GCM block cipher mode

• This is a variable Initialization Vector length mode (recommended 96-bits).
• Supported properties:
  • GCM tag length (optional)
    CtxXcmEnc::set_property_gcm_tag_len()
    Supported tag lengths: 4, 8, 12, 13, 14, 15, 16 (16 bytes tag by default).
    Set after EncryptContext::finalize() / SealContext::finalize() and before CtxXcmEnc::get_property_gcm_tag() in Encryption/Seal operation. In Decryption/Open operation tag length is not set.
  • GCM tag
    CtxXcmEnc::get_property_gcm_tag()
CtxXcmDec::set_property_gcm_tag()
    Get after EncryptContext::finalize() / SealContext::finalize() in Encryption/Seal operation.
    Set after DecryptContext::update() / OpenContext::update() and before DecryptContext::finalize() / OpenContext::finalize() in Decryption/Open operation.
  • AAD - additional authentication data (optional)
    CtxXcmEnc::set_property_gcm_aad()
CtxXcmDec::set_property_gcm_aad()
    AAD length can have any positive value.
    Set after EncryptContext::initialize() / SealContext::initialize() and before EncryptContext::update() / SealContext::update() in Encryption/Seal operation.
    Set after DecryptContext::initialize() / OpenContext::initialize() and before DecryptContext::update() / OpenContext::update() in Decryption/Open operation.

Cfb

Default CFB block cipher mode

• 128-bit Initialization Vector for AES, 64-bit for other algorithms is mandatory.

Cfb1

1 bit CFB block cipher mode

• 128-bit Initialization Vector for AES, 64-bit for other algorithms is mandatory.

Cfb8

8 bits CFB block cipher mode

• 128-bit Initialization Vector for AES, 64-bit for other algorithms is mandatory.

Ofb

OFB block cipher mode

• 128-bit Initialization Vector for AES, 64-bit for other algorithms is mandatory.

Ccm

CBC-MAC Mode (AES)

• This is a variable Initialization Vector length mode.

• Supported Initialization Vector lengths: 56-104 bits in steps of 8 bits (recommended 56-bits).

• Supported properties:

  • CCM tag length (optional)
    CtxXcmEnc::set_property_ccm_tag_len()
    Supported tag lengths: 4-16 bytes in steps of 2 bytes (12 bytes tag by default).
    Set after EncryptContext::initialize() / SealContext::initialize() and before EncryptContext::update() / SealContext::update() in Encryption/Seal operation.
    In Decryption/Open operation tag length is not set.

  • CCM tag
    CtxXcmEnc::get_property_ccm_tag()
CtxXcmDec::set_property_ccm_tag()
    Get after EncryptContext::finalize() / SealContext::finalize() in Encryption/Seal operation.
    Set after DecryptContext::initialize() / OpenContext::initialize() and before DecryptContext::update() / OpenContext::update() in decryption / open operation.

  • AAD - additional authentication data (optional)
    CtxXcmEnc::set_property_ccm_aad()
CtxXcmDec::set_property_ccm_aad()
    AAD length can have any positive value.

    The total plaintext length must be passed to CtxXcmEnc::set_property_ccm_aad() if AAD is used.
    Set after EncryptContext::initialize() / SealContext::initialize() and before EncryptContext::update() / SealContext::update() in Encryption/Seal operation.

    The total ciphertext length must be passed to CtxXcmDec::set_property_ccm_aad() if AAD is used.
    Set after DecryptContext::initialize() / OpenContext::initialize() and before DecryptContext::update() / OpenContext::update() in Decryption/Open operation.

• You can only call EncryptContext::update() / SealContext::update() once for the plaintext.
  You can only call DecryptContext::update() / OpenContext::update() once for the ciphertext.

Wrap

Used with AES or 3DES_3TDEA to perform a key wrapping (key material symmetric encryption)

• Only a single EncryptContext::update() / DecryptContext::update() is allowed.
• Usage in SealContext::initialize() / OpenContext::initialize() is forbidden.
• Key used to do the wrapping with EncryptAlgorithm::Aes can be a 128, 192 or a 256 bit key.
  64 bit Initialization Vector is used.
  Wrapped key can be a 128, 192, or a 256 bit key.
  EncryptAlgorithm::Aes allows wrapping multiple keys together.
• Key used to do the wrapping with EncryptAlgorithm::UnsafeTripleDes2Tdea can be a 192 bit DES key only. Initialization Vector is not used.
  Wrapped key can be a 128 bit DES key (two-key), or a 192 bit DES key (three-key).
  EncryptAlgorithm::UnsafeTripleDes2Tdea allows wrapping only one key.

Trait Implementations

impl Debug for BlockCipherMode

pub fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl PartialEq<BlockCipherMode> for BlockCipherMode

pub fn eq(&self, other: &BlockCipherMode) -> bool

This method tests for self and other values to be equal, and is used by ==.

#[must_use]pub fn ne(&self, other: &Rhs) -> bool

This method tests for !=.

impl StructuralPartialEq for BlockCipherMode