APT:Unwrap - Revision history

Wwylele: rename a param and make a more intuitive description

2016-12-30T09:12:36Z

rename a param and make a more intuitive description

← Older revision		Revision as of 12:12, 30 December 2016
Line 15:		Line 15:
	\|-		\|-
	\| 3		\| 3
	\| ~~Block Size~~		\| Nonce offset in the output buffer
	\|-		\|-
	\| 4		\| 4
Line 49:		Line 49:
	This decrypts the input data with [[PS:EncryptSignDecryptVerifyAesCcm\|AES-CCM]] using keytype2, when the input noncesize is <12 the low 2-bits are cleared in the noncesize. The 12-byte nonce buffer used by NS is cleared to all-zero, then the nonce from inputbuf+0 with the noncesize is copied to this nonce buffer. NS then uses [[PS:EncryptSignDecryptVerifyAesCcm]] with keytype2 and with the above nonce buffer, where the inputptr is inputbuf+noncesize, outputptr is outputbuf+0, and size is inputbuffersize - noncesize - 16.		This decrypts the input data with [[PS:EncryptSignDecryptVerifyAesCcm\|AES-CCM]] using keytype2, when the input noncesize is <12 the low 2-bits are cleared in the noncesize. The 12-byte nonce buffer used by NS is cleared to all-zero, then the nonce from inputbuf+0 with the noncesize is copied to this nonce buffer. NS then uses [[PS:EncryptSignDecryptVerifyAesCcm]] with keytype2 and with the above nonce buffer, where the inputptr is inputbuf+noncesize, outputptr is outputbuf+0, and size is inputbuffersize - noncesize - 16.

	After decryption, NS copies the data at outbuf+~~blocksize~~ to outbuf+~~blocksize~~+noncesize, with size inputbuffersize-~~blocksize~~-16. NS then copies the nonce from inputbuf+0 with the noncesize, to outbuf+~~blocksize~~.		After decryption, NS copies the data at outbuf+nonceoffset to outbuf+nonceoffset+noncesize, with size inputbuffersize-nonceoffset-16. NS then copies the nonce from inputbuf+0 with the noncesize, to outbuf+nonceoffset.

			In other words, the data begin from inputbuffer+noncesize is decrypted via [[PS:EncryptSignDecryptVerifyAesCcm]] using the nonce located at the beginning of the input buffer (with the size padded or capped to 12). Then the decrypted data is split into two parts, of which the first one is with size nonceoffset. The nonce is then inserted between the two parts, and written to the output buffer together with decrypted data.

Steveice10 at 03:28, 22 November 2015

2015-11-22T02:28:00Z

← Older revision		Revision as of 05:28, 22 November 2015
Line 9:		Line 9:
	\|-		\|-
	\| 1		\| 1
	\| Output ~~buffer size~~		\| Output Size
	\|-		\|-
	\| 2		\| 2
	\| Input ~~buffer size~~		\| Input Size
	\|-		\|-
	\| 3		\| 3
	\| Block ~~size~~		\| Block Size
	\|-		\|-
	\| 4		\| 4
	\| Nonce ~~size, size~~ 12 ~~is used if this is >12.~~		\| Nonce Size (capped to 12)
	\|-		\|-
	\| 5		\| 5
	\| (~~inputbufsize~~<<4) <nowiki>\|</nowiki> 10		\| (Input Size << 4) <nowiki>\|</nowiki> 0xA
	\|-		\|-
	\| 6		\| 6
	\| Input ~~encrypted data buffer ptr~~		\| void*, Input
	\|-		\|-
	\| 7		\| 7
	\| (~~outputbufsize~~<<4) <nowiki>\|</nowiki> 12		\| (Output Size << 4) <nowiki>\|</nowiki> 0xC
	\|-		\|-
	\| 8		\| 8
	\| Output ~~cleartext data buffer ptr~~		\| void*, Output
	\|}		\|}

Yellows8 at 22:24, 31 May 2013

2013-05-31T20:24:39Z

← Older revision		Revision as of 00:24, 1 June 2013
Line 47:		Line 47:

	=Description=		=Description=
	This decrypts the input data with [[PS:EncryptSignDecryptVerifyAesCcm\|AES-CCM]] using keytype2. The 12-byte nonce buffer used by NS is cleared to all-zero, then the nonce from inputbuf+0 with the noncesize is copied to this nonce buffer. NS then uses [[PS:EncryptSignDecryptVerifyAesCcm]] with keytype2 and with the above nonce buffer, where the inputptr is inputbuf+noncesize, outputptr is outputbuf+0, and size is inputbuffersize - noncesize - 16.		This decrypts the input data with [[PS:EncryptSignDecryptVerifyAesCcm\|AES-CCM]] using keytype2, when the input noncesize is <12 the low 2-bits are cleared in the noncesize. The 12-byte nonce buffer used by NS is cleared to all-zero, then the nonce from inputbuf+0 with the noncesize is copied to this nonce buffer. NS then uses [[PS:EncryptSignDecryptVerifyAesCcm]] with keytype2 and with the above nonce buffer, where the inputptr is inputbuf+noncesize, outputptr is outputbuf+0, and size is inputbuffersize - noncesize - 16.

	After decryption, NS copies the data at outbuf+blocksize to outbuf+blocksize+noncesize, with size inputbuffersize-blocksize-16. NS then copies the nonce from inputbuf+0 with the noncesize, to outbuf+blocksize.		After decryption, NS copies the data at outbuf+blocksize to outbuf+blocksize+noncesize, with size inputbuffersize-blocksize-16. NS then copies the nonce from inputbuf+0 with the noncesize, to outbuf+blocksize.

Yellows8: Created page with "=Request= {| class="wikitable" border="1" |- ! Index Word ! Description |- | 0 | Header code [0x00470104] |- | 1 | Output buffer size |- | 2 | Input buffer size |- | 3 | Block ..."

2013-05-31T18:52:18Z

Created page with "=Request= {| class="wikitable" border="1" |- ! Index Word ! Description |- | 0 | Header code [0x00470104] |- | 1 | Output buffer size |- | 2 | Input buffer size |- | 3 | Block ..."

New page

=Request=
{| class="wikitable" border="1"
|-
! Index Word
! Description
|-
| 0
| Header code [0x00470104]
|-
| 1
| Output buffer size
|-
| 2
| Input buffer size
|-
| 3
| Block size
|-
| 4
| Nonce size, size 12 is used if this is >12.
|-
| 5
| (inputbufsize<<4) <nowiki>|</nowiki> 10
|-
| 6
| Input encrypted data buffer ptr
|-
| 7
| (outputbufsize<<4) <nowiki>|</nowiki> 12
|-
| 8
| Output cleartext data buffer ptr
|}

=Response=
{| class="wikitable" border="1"
|-
! Index Word
! Description
|-
| 0
| Header code
|-
| 1
| Result code
|}

=Description=
This decrypts the input data with [[PS:EncryptSignDecryptVerifyAesCcm|AES-CCM]] using keytype2. The 12-byte nonce buffer used by NS is cleared to all-zero, then the nonce from inputbuf+0 with the noncesize is copied to this nonce buffer. NS then uses [[PS:EncryptSignDecryptVerifyAesCcm]] with keytype2 and with the above nonce buffer, where the inputptr is inputbuf+noncesize, outputptr is outputbuf+0, and size is inputbuffersize - noncesize - 16.

After decryption, NS copies the data at outbuf+blocksize to outbuf+blocksize+noncesize, with size inputbuffersize-blocksize-16. NS then copies the nonce from inputbuf+0 with the noncesize, to outbuf+blocksize.