crypto: golang.org/x/crypto/poly1305 Index | Files

package poly1305

import "golang.org/x/crypto/poly1305"

Package poly1305 implements Poly1305 one-time message authentication code as specified in https://cr.yp.to/mac/poly1305-20050329.pdf.

Poly1305 is a fast, one-time authentication function. It is infeasible for an attacker to generate an authenticator for a message without the key. However, a key must only be used for a single message. Authenticating two different messages with the same key allows an attacker to forge authenticators for other messages with the same key.

Poly1305 was originally coupled with AES in order to make Poly1305-AES. AES was used with a fixed key in order to generate one-time keys from an nonce. However, in this package AES isn't used and the one-time key is specified directly.

Index

Package Files

poly1305.go sum_amd64.go sum_generic.go

Constants

const TagSize = 16

TagSize is the size, in bytes, of a poly1305 authenticator.

func Sum Uses

func Sum(out *[16]byte, m []byte, key *[32]byte)

Sum generates an authenticator for m using a one-time key and puts the 16-byte result into out. Authenticating two different messages with the same key allows an attacker to forge messages at will.

func Verify Uses

func Verify(mac *[16]byte, m []byte, key *[32]byte) bool

Verify returns true if mac is a valid authenticator for m with the given key.

type MAC Uses

type MAC struct {
    // contains filtered or unexported fields
}

MAC is an io.Writer computing an authentication tag of the data written to it.

MAC cannot be used like common hash.Hash implementations, because using a poly1305 key twice breaks its security. Therefore writing data to a running MAC after calling Sum causes it to panic.

func New Uses

func New(key *[32]byte) *MAC

New returns a new MAC computing an authentication tag of all data written to it with the given key. This allows writing the message progressively instead of passing it as a single slice. Common users should use the Sum function instead.

The key must be unique for each message, as authenticating two different messages with the same key allows an attacker to forge messages at will.

func (*MAC) Size Uses

func (h *MAC) Size() int

Size returns the number of bytes Sum will return.

func (*MAC) Sum Uses

func (h *MAC) Sum(b []byte) []byte

Sum computes the authenticator of all data written to the message authentication code.

func (*MAC) Write Uses

func (h *MAC) Write(p []byte) (n int, err error)

Write adds more data to the running message authentication code. It never returns an error.

It must not be called after the first call of Sum.

Package poly1305 imports 2 packages (graph) and is imported by 86 packages. Updated 2019-10-12. Refresh now. Tools for package owners.