40d012a8d16e0eeb7edb1e1e2622837cdac129d0
[openssl.git] / crypto / include / internal / ciphermode_platform.h
1 /*
2  * Copyright 2019 The OpenSSL Project Authors. All Rights Reserved.
3  *
4  * Licensed under the Apache License 2.0 (the "License").  You may not use
5  * this file except in compliance with the License.  You can obtain a copy
6  * in the file LICENSE in the source distribution or at
7  * https://www.openssl.org/source/license.html
8  */
9
10 #ifndef HEADER_INTERNAL_CIPHERMODE_PLATFORM_H
11 # define HEADER_INTERNAL_CIPHERMODE_PLATFORM_H
12
13 # include "openssl/aes.h"
14
15 # ifdef VPAES_ASM
16 int vpaes_set_encrypt_key(const unsigned char *userKey, int bits,
17                           AES_KEY *key);
18 int vpaes_set_decrypt_key(const unsigned char *userKey, int bits,
19                           AES_KEY *key);
20 void vpaes_encrypt(const unsigned char *in, unsigned char *out,
21                    const AES_KEY *key);
22 void vpaes_decrypt(const unsigned char *in, unsigned char *out,
23                    const AES_KEY *key);
24 void vpaes_cbc_encrypt(const unsigned char *in,
25                        unsigned char *out,
26                        size_t length,
27                        const AES_KEY *key, unsigned char *ivec, int enc);
28 # endif /* VPAES_ASM */
29
30 # ifdef BSAES_ASM
31 void bsaes_cbc_encrypt(const unsigned char *in, unsigned char *out,
32                        size_t length, const AES_KEY *key,
33                        unsigned char ivec[16], int enc);
34 void bsaes_ctr32_encrypt_blocks(const unsigned char *in, unsigned char *out,
35                                 size_t len, const AES_KEY *key,
36                                 const unsigned char ivec[16]);
37 void bsaes_xts_encrypt(const unsigned char *inp, unsigned char *out,
38                        size_t len, const AES_KEY *key1,
39                        const AES_KEY *key2, const unsigned char iv[16]);
40 void bsaes_xts_decrypt(const unsigned char *inp, unsigned char *out,
41                        size_t len, const AES_KEY *key1,
42                        const AES_KEY *key2, const unsigned char iv[16]);
43 # endif /* BSAES_ASM */
44
45 # ifdef AES_CTR_ASM
46 void AES_ctr32_encrypt(const unsigned char *in, unsigned char *out,
47                        size_t blocks, const AES_KEY *key,
48                        const unsigned char ivec[AES_BLOCK_SIZE]);
49 # endif /*  AES_CTR_ASM */
50
51 # ifdef AES_XTS_ASM
52 void AES_xts_encrypt(const unsigned char *inp, unsigned char *out, size_t len,
53                      const AES_KEY *key1, const AES_KEY *key2,
54                      const unsigned char iv[16]);
55 void AES_xts_decrypt(const unsigned char *inp, unsigned char *out, size_t len,
56                      const AES_KEY *key1, const AES_KEY *key2,
57                      const unsigned char iv[16]);
58 # endif /* AES_XTS_ASM */
59
60 # if defined(OPENSSL_CPUID_OBJ)
61 #  if (defined(__powerpc__) || defined(__ppc__) || defined(_ARCH_PPC))
62 #   include "ppc_arch.h"
63 #   ifdef VPAES_ASM
64 #    define VPAES_CAPABLE (OPENSSL_ppccap_P & PPC_ALTIVEC)
65 #   endif
66 #   define HWAES_CAPABLE  (OPENSSL_ppccap_P & PPC_CRYPTO207)
67 #   define HWAES_set_encrypt_key aes_p8_set_encrypt_key
68 #   define HWAES_set_decrypt_key aes_p8_set_decrypt_key
69 #   define HWAES_encrypt aes_p8_encrypt
70 #   define HWAES_decrypt aes_p8_decrypt
71 #   define HWAES_cbc_encrypt aes_p8_cbc_encrypt
72 #   define HWAES_ctr32_encrypt_blocks aes_p8_ctr32_encrypt_blocks
73 #   define HWAES_xts_encrypt aes_p8_xts_encrypt
74 #   define HWAES_xts_decrypt aes_p8_xts_decrypt
75 #  endif /* PPC */
76
77 #  if (defined(__arm__) || defined(__arm) || defined(__aarch64__))
78 #   include "arm_arch.h"
79 #   if __ARM_MAX_ARCH__>=7
80 #    if defined(BSAES_ASM)
81 #     define BSAES_CAPABLE (OPENSSL_armcap_P & ARMV7_NEON)
82 #    endif
83 #    if defined(VPAES_ASM)
84 #     define VPAES_CAPABLE (OPENSSL_armcap_P & ARMV7_NEON)
85 #    endif
86 #    define HWAES_CAPABLE (OPENSSL_armcap_P & ARMV8_AES)
87 #    define HWAES_set_encrypt_key aes_v8_set_encrypt_key
88 #    define HWAES_set_decrypt_key aes_v8_set_decrypt_key
89 #    define HWAES_encrypt aes_v8_encrypt
90 #    define HWAES_decrypt aes_v8_decrypt
91 #    define HWAES_cbc_encrypt aes_v8_cbc_encrypt
92 #    define HWAES_ctr32_encrypt_blocks aes_v8_ctr32_encrypt_blocks
93 #   endif
94 #  endif
95 # endif /* OPENSSL_CPUID_OBJ */
96
97 # if     defined(AES_ASM) && !defined(I386_ONLY) &&      (  \
98          ((defined(__i386)       || defined(__i386__)    || \
99            defined(_M_IX86)) && defined(OPENSSL_IA32_SSE2))|| \
100          defined(__x86_64)       || defined(__x86_64__)  || \
101          defined(_M_AMD64)       || defined(_M_X64)      )
102
103 /* AES-NI section */
104 extern unsigned int OPENSSL_ia32cap_P[];
105
106 #  define AESNI_CAPABLE   (OPENSSL_ia32cap_P[1]&(1<<(57-32)))
107 #  ifdef VPAES_ASM
108 #   define VPAES_CAPABLE   (OPENSSL_ia32cap_P[1]&(1<<(41-32)))
109 #  endif
110 #  ifdef BSAES_ASM
111 #   define BSAES_CAPABLE   (OPENSSL_ia32cap_P[1]&(1<<(41-32)))
112 #  endif
113
114 int aesni_set_encrypt_key(const unsigned char *userKey, int bits,
115                           AES_KEY *key);
116 int aesni_set_decrypt_key(const unsigned char *userKey, int bits,
117                           AES_KEY *key);
118
119 void aesni_encrypt(const unsigned char *in, unsigned char *out,
120                    const AES_KEY *key);
121 void aesni_decrypt(const unsigned char *in, unsigned char *out,
122                    const AES_KEY *key);
123
124 void aesni_ecb_encrypt(const unsigned char *in,
125                        unsigned char *out,
126                        size_t length, const AES_KEY *key, int enc);
127 void aesni_cbc_encrypt(const unsigned char *in,
128                        unsigned char *out,
129                        size_t length,
130                        const AES_KEY *key, unsigned char *ivec, int enc);
131 #  ifndef OPENSSL_NO_OCB
132 void aesni_ocb_encrypt(const unsigned char *in, unsigned char *out,
133                        size_t blocks, const void *key,
134                        size_t start_block_num,
135                        unsigned char offset_i[16],
136                        const unsigned char L_[][16],
137                        unsigned char checksum[16]);
138 void aesni_ocb_decrypt(const unsigned char *in, unsigned char *out,
139                        size_t blocks, const void *key,
140                        size_t start_block_num,
141                        unsigned char offset_i[16],
142                        const unsigned char L_[][16],
143                        unsigned char checksum[16]);
144 #  endif /* OPENSSL_NO_OCB */
145
146 void aesni_ctr32_encrypt_blocks(const unsigned char *in,
147                                 unsigned char *out,
148                                 size_t blocks,
149                                 const void *key, const unsigned char *ivec);
150
151 void aesni_xts_encrypt(const unsigned char *in,
152                        unsigned char *out,
153                        size_t length,
154                        const AES_KEY *key1, const AES_KEY *key2,
155                        const unsigned char iv[16]);
156
157 void aesni_xts_decrypt(const unsigned char *in,
158                        unsigned char *out,
159                        size_t length,
160                        const AES_KEY *key1, const AES_KEY *key2,
161                        const unsigned char iv[16]);
162
163 void aesni_ccm64_encrypt_blocks(const unsigned char *in,
164                                 unsigned char *out,
165                                 size_t blocks,
166                                 const void *key,
167                                 const unsigned char ivec[16],
168                                 unsigned char cmac[16]);
169
170 void aesni_ccm64_decrypt_blocks(const unsigned char *in,
171                                 unsigned char *out,
172                                 size_t blocks,
173                                 const void *key,
174                                 const unsigned char ivec[16],
175                                 unsigned char cmac[16]);
176
177 #  if defined(__x86_64) || defined(__x86_64__) || defined(_M_AMD64) || defined(_M_X64)
178 size_t aesni_gcm_encrypt(const unsigned char *in, unsigned char *out, size_t len,
179                          const void *key, unsigned char ivec[16], u64 *Xi);
180 size_t aesni_gcm_decrypt(const unsigned char *in, unsigned char *out, size_t len,
181                          const void *key, unsigned char ivec[16], u64 *Xi);
182 void gcm_ghash_avx(u64 Xi[2], const u128 Htable[16], const u8 *in, size_t len);
183
184 #   define AES_GCM_ASM(ctx)    (ctx->ctr == aesni_ctr32_encrypt_blocks && \
185                                 ctx->gcm.ghash == gcm_ghash_avx)
186 #  endif
187
188
189 # elif defined(AES_ASM) && (defined(__sparc) || defined(__sparc__))
190
191 /* Fujitsu SPARC64 X support */
192 extern unsigned int OPENSSL_sparcv9cap_P[];
193 #  include "sparc_arch.h"
194
195 #  ifndef OPENSSL_NO_CAMELLIA
196 #   define SPARC_CMLL_CAPABLE      (OPENSSL_sparcv9cap_P[1] & CFR_CAMELLIA)
197 #   include "openssl/camellia.h"
198
199 void cmll_t4_set_key(const unsigned char *key, int bits, CAMELLIA_KEY *ks);
200 void cmll_t4_encrypt(const unsigned char *in, unsigned char *out,
201                      const CAMELLIA_KEY *key);
202 void cmll_t4_decrypt(const unsigned char *in, unsigned char *out,
203                      const CAMELLIA_KEY *key);
204
205 void cmll128_t4_cbc_encrypt(const unsigned char *in, unsigned char *out,
206                             size_t len, const CAMELLIA_KEY *key,
207                             unsigned char *ivec);
208 void cmll128_t4_cbc_decrypt(const unsigned char *in, unsigned char *out,
209                             size_t len, const CAMELLIA_KEY *key,
210                             unsigned char *ivec);
211 void cmll256_t4_cbc_encrypt(const unsigned char *in, unsigned char *out,
212                             size_t len, const CAMELLIA_KEY *key,
213                             unsigned char *ivec);
214 void cmll256_t4_cbc_decrypt(const unsigned char *in, unsigned char *out,
215                             size_t len, const CAMELLIA_KEY *key,
216                             unsigned char *ivec);
217 void cmll128_t4_ctr32_encrypt(const unsigned char *in, unsigned char *out,
218                               size_t blocks, const CAMELLIA_KEY *key,
219                               unsigned char *ivec);
220 void cmll256_t4_ctr32_encrypt(const unsigned char *in, unsigned char *out,
221                               size_t blocks, const CAMELLIA_KEY *key,
222                               unsigned char *ivec);
223 #  endif /* OPENSSL_NO_CAMELLIA */
224
225
226 #  define SPARC_AES_CAPABLE       (OPENSSL_sparcv9cap_P[1] & CFR_AES)
227 #  define SPARC_DES_CAPABLE       (OPENSSL_sparcv9cap_P[1] & CFR_DES)
228 #  define HWAES_CAPABLE           (OPENSSL_sparcv9cap_P[0] & SPARCV9_FJAESX)
229 #  define HWAES_set_encrypt_key aes_fx_set_encrypt_key
230 #  define HWAES_set_decrypt_key aes_fx_set_decrypt_key
231 #  define HWAES_encrypt aes_fx_encrypt
232 #  define HWAES_decrypt aes_fx_decrypt
233 #  define HWAES_cbc_encrypt aes_fx_cbc_encrypt
234 #  define HWAES_ctr32_encrypt_blocks aes_fx_ctr32_encrypt_blocks
235
236 void aes_t4_set_encrypt_key(const unsigned char *key, int bits, AES_KEY *ks);
237 void aes_t4_set_decrypt_key(const unsigned char *key, int bits, AES_KEY *ks);
238 void aes_t4_encrypt(const unsigned char *in, unsigned char *out,
239                     const AES_KEY *key);
240 void aes_t4_decrypt(const unsigned char *in, unsigned char *out,
241                     const AES_KEY *key);
242 void des_t4_key_expand(const void *key, DES_key_schedule *ks);
243 void des_t4_ede3_cbc_encrypt(const void *inp, void *out, size_t len,
244                              const DES_key_schedule ks[3], unsigned char iv[8]);
245 void des_t4_ede3_cbc_decrypt(const void *inp, void *out, size_t len,
246                              const DES_key_schedule ks[3], unsigned char iv[8]);
247
248 /*
249  * Key-length specific subroutines were chosen for following reason.
250  * Each SPARC T4 core can execute up to 8 threads which share core's
251  * resources. Loading as much key material to registers allows to
252  * minimize references to shared memory interface, as well as amount
253  * of instructions in inner loops [much needed on T4]. But then having
254  * non-key-length specific routines would require conditional branches
255  * either in inner loops or on subroutines' entries. Former is hardly
256  * acceptable, while latter means code size increase to size occupied
257  * by multiple key-length specific subroutines, so why fight?
258  */
259 void aes128_t4_cbc_encrypt(const unsigned char *in, unsigned char *out,
260                            size_t len, const AES_KEY *key,
261                            unsigned char *ivec);
262 void aes128_t4_cbc_decrypt(const unsigned char *in, unsigned char *out,
263                            size_t len, const AES_KEY *key,
264                            unsigned char *ivec);
265 void aes192_t4_cbc_encrypt(const unsigned char *in, unsigned char *out,
266                            size_t len, const AES_KEY *key,
267                            unsigned char *ivec);
268 void aes192_t4_cbc_decrypt(const unsigned char *in, unsigned char *out,
269                            size_t len, const AES_KEY *key,
270                            unsigned char *ivec);
271 void aes256_t4_cbc_encrypt(const unsigned char *in, unsigned char *out,
272                            size_t len, const AES_KEY *key,
273                            unsigned char *ivec);
274 void aes256_t4_cbc_decrypt(const unsigned char *in, unsigned char *out,
275                            size_t len, const AES_KEY *key,
276                            unsigned char *ivec);
277 void aes128_t4_ctr32_encrypt(const unsigned char *in, unsigned char *out,
278                              size_t blocks, const AES_KEY *key,
279                              unsigned char *ivec);
280 void aes192_t4_ctr32_encrypt(const unsigned char *in, unsigned char *out,
281                              size_t blocks, const AES_KEY *key,
282                              unsigned char *ivec);
283 void aes256_t4_ctr32_encrypt(const unsigned char *in, unsigned char *out,
284                              size_t blocks, const AES_KEY *key,
285                              unsigned char *ivec);
286 void aes128_t4_xts_encrypt(const unsigned char *in, unsigned char *out,
287                            size_t blocks, const AES_KEY *key1,
288                            const AES_KEY *key2, const unsigned char *ivec);
289 void aes128_t4_xts_decrypt(const unsigned char *in, unsigned char *out,
290                            size_t blocks, const AES_KEY *key1,
291                            const AES_KEY *key2, const unsigned char *ivec);
292 void aes256_t4_xts_encrypt(const unsigned char *in, unsigned char *out,
293                            size_t blocks, const AES_KEY *key1,
294                            const AES_KEY *key2, const unsigned char *ivec);
295 void aes256_t4_xts_decrypt(const unsigned char *in, unsigned char *out,
296                            size_t blocks, const AES_KEY *key1,
297                            const AES_KEY *key2, const unsigned char *ivec);
298
299 # elif defined(OPENSSL_CPUID_OBJ) && defined(__s390__)
300 /* IBM S390X support */
301 #  include "s390x_arch.h"
302
303
304 /* Convert key size to function code: [16,24,32] -> [18,19,20]. */
305 #  define S390X_AES_FC(keylen)  (S390X_AES_128 + ((((keylen) << 3) - 128) >> 6))
306
307 /* Most modes of operation need km for partial block processing. */
308 #  define S390X_aes_128_CAPABLE (OPENSSL_s390xcap_P.km[0] &  \
309                                 S390X_CAPBIT(S390X_AES_128))
310 #  define S390X_aes_192_CAPABLE (OPENSSL_s390xcap_P.km[0] &  \
311                                 S390X_CAPBIT(S390X_AES_192))
312 #  define S390X_aes_256_CAPABLE (OPENSSL_s390xcap_P.km[0] &  \
313                                 S390X_CAPBIT(S390X_AES_256))
314
315 #  define S390X_aes_128_cbc_CAPABLE     1       /* checked by callee */
316 #  define S390X_aes_192_cbc_CAPABLE     1
317 #  define S390X_aes_256_cbc_CAPABLE     1
318
319 #  define S390X_aes_128_ecb_CAPABLE     S390X_aes_128_CAPABLE
320 #  define S390X_aes_192_ecb_CAPABLE     S390X_aes_192_CAPABLE
321 #  define S390X_aes_256_ecb_CAPABLE     S390X_aes_256_CAPABLE
322
323 #  define S390X_aes_128_ofb_CAPABLE (S390X_aes_128_CAPABLE &&           \
324                                     (OPENSSL_s390xcap_P.kmo[0] &        \
325                                      S390X_CAPBIT(S390X_AES_128)))
326 #  define S390X_aes_192_ofb_CAPABLE (S390X_aes_192_CAPABLE &&           \
327                                     (OPENSSL_s390xcap_P.kmo[0] &        \
328                                      S390X_CAPBIT(S390X_AES_192)))
329 #  define S390X_aes_256_ofb_CAPABLE (S390X_aes_256_CAPABLE &&           \
330                                     (OPENSSL_s390xcap_P.kmo[0] &        \
331                                      S390X_CAPBIT(S390X_AES_256)))
332
333 #  define S390X_aes_128_cfb_CAPABLE (S390X_aes_128_CAPABLE &&           \
334                                     (OPENSSL_s390xcap_P.kmf[0] &        \
335                                      S390X_CAPBIT(S390X_AES_128)))
336 #  define S390X_aes_192_cfb_CAPABLE (S390X_aes_192_CAPABLE &&           \
337                                     (OPENSSL_s390xcap_P.kmf[0] &        \
338                                      S390X_CAPBIT(S390X_AES_192)))
339 #  define S390X_aes_256_cfb_CAPABLE (S390X_aes_256_CAPABLE &&           \
340                                     (OPENSSL_s390xcap_P.kmf[0] &        \
341                                      S390X_CAPBIT(S390X_AES_256)))
342 #  define S390X_aes_128_cfb8_CAPABLE (OPENSSL_s390xcap_P.kmf[0] &       \
343                                      S390X_CAPBIT(S390X_AES_128))
344 #  define S390X_aes_192_cfb8_CAPABLE (OPENSSL_s390xcap_P.kmf[0] &       \
345                                      S390X_CAPBIT(S390X_AES_192))
346 #  define S390X_aes_256_cfb8_CAPABLE (OPENSSL_s390xcap_P.kmf[0] &       \
347                                      S390X_CAPBIT(S390X_AES_256))
348 #  define S390X_aes_128_cfb1_CAPABLE    0
349 #  define S390X_aes_192_cfb1_CAPABLE    0
350 #  define S390X_aes_256_cfb1_CAPABLE    0
351
352 #  define S390X_aes_128_ctr_CAPABLE     1       /* checked by callee */
353 #  define S390X_aes_192_ctr_CAPABLE     1
354 #  define S390X_aes_256_ctr_CAPABLE     1
355
356 #  define S390X_aes_128_xts_CAPABLE     1       /* checked by callee */
357 #  define S390X_aes_256_xts_CAPABLE     1
358
359 # define S390X_aes_128_gcm_CAPABLE (S390X_aes_128_CAPABLE &&        \
360                                     (OPENSSL_s390xcap_P.kma[0] &    \
361                                      S390X_CAPBIT(S390X_AES_128)))
362 # define S390X_aes_192_gcm_CAPABLE (S390X_aes_192_CAPABLE &&        \
363                                     (OPENSSL_s390xcap_P.kma[0] &    \
364                                      S390X_CAPBIT(S390X_AES_192)))
365 # define S390X_aes_256_gcm_CAPABLE (S390X_aes_256_CAPABLE &&        \
366                                     (OPENSSL_s390xcap_P.kma[0] &    \
367                                      S390X_CAPBIT(S390X_AES_256)))
368
369 #  define S390X_aes_128_ccm_CAPABLE (S390X_aes_128_CAPABLE &&       \
370                                     (OPENSSL_s390xcap_P.kmac[0] &   \
371                                      S390X_CAPBIT(S390X_AES_128)))
372 #  define S390X_aes_192_ccm_CAPABLE (S390X_aes_192_CAPABLE &&       \
373                                     (OPENSSL_s390xcap_P.kmac[0] &   \
374                                      S390X_CAPBIT(S390X_AES_192)))
375 #  define S390X_aes_256_ccm_CAPABLE (S390X_aes_256_CAPABLE &&       \
376                                     (OPENSSL_s390xcap_P.kmac[0] &   \
377                                      S390X_CAPBIT(S390X_AES_256)))
378 #  define S390X_CCM_AAD_FLAG    0x40
379
380 #  ifndef OPENSSL_NO_OCB
381 #   define S390X_aes_128_ocb_CAPABLE    0
382 #   define S390X_aes_192_ocb_CAPABLE    0
383 #   define S390X_aes_256_ocb_CAPABLE    0
384 #  endif /* OPENSSL_NO_OCB */
385
386 #  ifndef OPENSSL_NO_SIV
387 #   define S390X_aes_128_siv_CAPABLE    0
388 #   define S390X_aes_192_siv_CAPABLE    0
389 #   define S390X_aes_256_siv_CAPABLE    0
390 #  endif /* OPENSSL_NO_SIV */
391
392 /* Convert key size to function code: [16,24,32] -> [18,19,20]. */
393 #  define S390X_AES_FC(keylen)  (S390X_AES_128 + ((((keylen) << 3) - 128) >> 6))
394 # endif
395
396 # if defined(HWAES_CAPABLE)
397 int HWAES_set_encrypt_key(const unsigned char *userKey, const int bits,
398                           AES_KEY *key);
399 int HWAES_set_decrypt_key(const unsigned char *userKey, const int bits,
400                           AES_KEY *key);
401 void HWAES_encrypt(const unsigned char *in, unsigned char *out,
402                    const AES_KEY *key);
403 void HWAES_decrypt(const unsigned char *in, unsigned char *out,
404                    const AES_KEY *key);
405 void HWAES_cbc_encrypt(const unsigned char *in, unsigned char *out,
406                        size_t length, const AES_KEY *key,
407                        unsigned char *ivec, const int enc);
408 void HWAES_ctr32_encrypt_blocks(const unsigned char *in, unsigned char *out,
409                                 size_t len, const AES_KEY *key,
410                                 const unsigned char ivec[16]);
411 void HWAES_xts_encrypt(const unsigned char *inp, unsigned char *out,
412                        size_t len, const AES_KEY *key1,
413                        const AES_KEY *key2, const unsigned char iv[16]);
414 void HWAES_xts_decrypt(const unsigned char *inp, unsigned char *out,
415                        size_t len, const AES_KEY *key1,
416                        const AES_KEY *key2, const unsigned char iv[16]);
417 #  ifndef OPENSSL_NO_OCB
418 #   ifdef HWAES_ocb_encrypt
419 void HWAES_ocb_encrypt(const unsigned char *in, unsigned char *out,
420                        size_t blocks, const void *key,
421                        size_t start_block_num,
422                        unsigned char offset_i[16],
423                        const unsigned char L_[][16],
424                        unsigned char checksum[16]);
425 #   else
426 #     define HWAES_ocb_encrypt ((ocb128_f)NULL)
427 #   endif
428 #   ifdef HWAES_ocb_decrypt
429 void HWAES_ocb_decrypt(const unsigned char *in, unsigned char *out,
430                        size_t blocks, const void *key,
431                        size_t start_block_num,
432                        unsigned char offset_i[16],
433                        const unsigned char L_[][16],
434                        unsigned char checksum[16]);
435 #   else
436 #     define HWAES_ocb_decrypt ((ocb128_f)NULL)
437 #   endif
438 #  endif /* OPENSSL_NO_OCB */
439
440 # endif /* HWAES_CAPABLE */
441
442 #endif /* HEADER_INTERNAL_CIPHERMODE_PLATFORM_H */