EVP_MAC-Poly13057ssl
The poly1305 evp_mac implementation
Overview
Support for computing Poly1305 MACs through the EVP_MAC API.
Identity
This implementation is identified with this name and properties, to be used with EVP_MAC_fetch():
- "POLY1305", "provider=default"
Supported parameters
The general description of these parameters can be found in "PARAMETERS" in EVP_MAC(3).
The following parameter can be set with EVP_MAC_CTX_set_params():
- "key" (
OSSL_MAC_PARAM_KEY) <octet string> -
Sets the MAC key. Setting this parameter is identical to passing a key to EVP_MAC_init(3).
The following parameters can be retrieved with EVP_MAC_CTX_get_params():
- "size" (
OSSL_MAC_PARAM_SIZE) <unsigned integer> -
Gets the MAC size.
The "size" parameter can also be retrieved with EVP_MAC_CTX_get_mac_size(). The length of the "size" parameter should not exceed that of an unsigned int.
Notes
The OpenSSL implementation of the Poly 1305 MAC corresponds to RFC 7539.
It is critical to never reuse the key. The security implication noted in RFC 8439 applies equally to the OpenSSL implementation.
Releases
3 releases since Debian 12 (Bookworm); the text changed 2 times.