intel / intel-ipsec-mb

Intel(R) Multi-Buffer Crypto for IPSec

BSD 3-Clause "New" or "Revised" License

289 stars 87 forks source link

Planned change of key structure for AES-GCM #35

Closed tkanteck closed 4 years ago

tkanteck commented 5 years ago

What is happening?

In the next release, it is planned to change GCM key structure to include larger number of ghash keys. As of today, the structure includes expanded AES keys, 8 schoolbook ghash keys and 8 Karatsuba ghash keys.

So what?

Note that this change will break GCM binary compatibility with previous versions of the library (v0.52 and older).

What needs to be done?

Applications using GCM API will need to be recompiled in order to use the new library version.

tkanteck commented 5 years ago

Please also note that GCM key structure may have different content for different arch type (arch API). For example, library cross validation tool required an update to separately expand keys for encrypt and decrypt operations (see https://github.com/intel/intel-ipsec-mb/commit/32f5a4438b29eb766ba0d1575fa6079bd2276af9)