openssl/providers/implementations/digests
slontis 5366490822 Add EVP_DigestSqueeze() API.
Fixes #7894

This allows SHAKE to squeeze multiple times with different output sizes.

The existing EVP_DigestFinalXOF() API has been left as a one shot
operation. A similar interface is used by another toolkit.

The low level SHA3_Squeeze() function needed to change slightly so
that it can handle multiple squeezes. This involves changing the
assembler code so that it passes a boolean to indicate whether
the Keccak function should be called on entry.
At the provider level, the squeeze is buffered, so that it only requests
a multiple of the blocksize when SHA3_Squeeze() is called. On the first
call the value is zero, on subsequent calls the value passed is 1.

This PR is derived from the excellent work done by @nmathewson in
https://github.com/openssl/openssl/pull/7921

Reviewed-by: Paul Dale <pauli@openssl.org>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/21511)
2023-11-10 13:27:00 +01:00
..
blake2_impl.h
blake2_prov.c Implement BLAKE2s with the same macro as BLAKE2b 2023-11-08 09:42:13 +01:00
blake2b_prov.c Lift BLAKE2B provider definition into a macro 2023-11-08 09:41:49 +01:00
blake2s_prov.c
build.info
digestcommon.c
md2_prov.c
md4_prov.c
md5_prov.c
md5_sha1_prov.c
mdc2_prov.c
null_prov.c
ripemd_prov.c
sha2_prov.c Copyright year updates 2023-09-07 09:59:15 +01:00
sha3_prov.c Add EVP_DigestSqueeze() API. 2023-11-10 13:27:00 +01:00
sm3_prov.c
wp_prov.c