## Security
### ⚠️ Warning: [Hazmat!][hazmat-link]
This crate does not ensure ciphertexts are authentic (i.e. by using a MAC to
verify ciphertext integrity), which can lead to serious vulnerabilities
if used incorrectly!
To avoid this, use an [AEAD][2] mode based on AES, such as [AES-GCM][3] or [AES-GCM-SIV][4].
See the [RustCrypto/AEADs][5] repository for more information.
USE AT YOUR OWN RISK!
### Notes
This crate has received one [security audit by NCC Group][6], with no significant
findings. We would like to thank [MobileCoin][7] for funding the audit.
All implementations contained in the crate are designed to execute in constant
time, either by relying on hardware intrinsics (i.e. AES-NI on x86/x86_64), or
using a portable implementation based on bitslicing.
## Minimum Supported Rust Version
Rust **1.41** or higher.
Minimum supported Rust version can be changed in the future, but it will be
done with a minor version bump.
## SemVer Policy
- All on-by-default features of this library are covered by SemVer
- MSRV is considered exempt from SemVer as noted above
## License
Licensed under either of:
* [Apache License, Version 2.0](http://www.apache.org/licenses/LICENSE-2.0)
* [MIT license](http://opensource.org/licenses/MIT)
at your option.
### Contribution
Unless you explicitly state otherwise, any contribution intentionally submitted
for inclusion in the work by you, as defined in the Apache-2.0 license, shall be
dual licensed as above, without any additional terms or conditions.
[//]: # (badges)
[crate-image]: https://img.shields.io/crates/v/aes.svg
[crate-link]: https://crates.io/crates/aes
[docs-image]: https://docs.rs/aes/badge.svg
[docs-link]: https://docs.rs/aes/
[license-image]: https://img.shields.io/badge/license-Apache2.0/MIT-blue.svg
[rustc-image]: https://img.shields.io/badge/rustc-1.41+-blue.svg
[hazmat-image]: https://img.shields.io/badge/crypto-hazmat%E2%9A%A0-red.svg
[hazmat-link]: https://github.com/RustCrypto/meta/blob/master/HAZMAT.md
[chat-image]: https://img.shields.io/badge/zulip-join_chat-blue.svg
[chat-link]: https://rustcrypto.zulipchat.com/#narrow/stream/260039-block-ciphers
[build-image]: https://github.com/RustCrypto/block-ciphers/workflows/aes/badge.svg?branch=master&event=push
[build-link]: https://github.com/RustCrypto/block-ciphers/actions?query=workflow%3Aaes
[//]: # (general links)
[1]: https://en.wikipedia.org/wiki/Advanced_Encryption_Standard
[2]: https://en.wikipedia.org/wiki/Authenticated_encryption
[3]: https://github.com/RustCrypto/AEADs/tree/master/aes-gcm
[4]: https://github.com/RustCrypto/AEADs/tree/master/aes-gcm-siv
[5]: https://github.com/RustCrypto/AEADs
[6]: https://research.nccgroup.com/2020/02/26/public-report-rustcrypto-aes-gcm-and-chacha20poly1305-implementation-review/
[7]: https://www.mobilecoin.com/
aes-0.6.0/benches/aes128.rs 0100644 0000765 0000024 00000003031 13742317602 0013426 0 ustar 0000000 0000000 #![feature(test)]
extern crate test;
use aes::{Aes128, BlockCipher, NewBlockCipher};
#[bench]
pub fn aes128_encrypt(bh: &mut test::Bencher) {
let cipher = Aes128::new(&Default::default());
let mut input = Default::default();
bh.iter(|| {
cipher.encrypt_block(&mut input);
test::black_box(&input);
});
bh.bytes = input.len() as u64;
}
#[bench]
pub fn aes128_decrypt(bh: &mut test::Bencher) {
let cipher = Aes128::new(&Default::default());
let mut input = Default::default();
bh.iter(|| {
cipher.decrypt_block(&mut input);
test::black_box(&input);
});
bh.bytes = input.len() as u64;
}
#[bench]
pub fn aes128_encrypt8(bh: &mut test::Bencher) {
let cipher = Aes128::new(&Default::default());
let mut input = Default::default();
bh.iter(|| {
cipher.encrypt_blocks(&mut input);
test::black_box(&input);
});
bh.bytes = (input[0].len() * input.len()) as u64;
}
#[bench]
pub fn aes128_decrypt8(bh: &mut test::Bencher) {
let cipher = Aes128::new(&Default::default());
let mut input = Default::default();
bh.iter(|| {
cipher.decrypt_blocks(&mut input);
test::black_box(&input);
});
bh.bytes = (input[0].len() * input.len()) as u64;
}
/*
#[bench]
pub fn ctr_aes128(bh: &mut test::Bencher) {
let mut cipher = aes::CtrAes128::new(&[0; 16], &[0; 16]);
let mut input = [0u8; 10000];
bh.iter(|| {
cipher.xor(&mut input);
test::black_box(&input);
});
bh.bytes = input.len() as u64;
}
*/
aes-0.6.0/benches/aes192.rs 0100644 0000765 0000024 00000003032 13742317602 0013430 0 ustar 0000000 0000000 #![feature(test)]
extern crate test;
use aes::{Aes192, BlockCipher, NewBlockCipher};
#[bench]
pub fn aes192_encrypt(bh: &mut test::Bencher) {
let cipher = Aes192::new(&Default::default());
let mut input = Default::default();
bh.iter(|| {
cipher.encrypt_block(&mut input);
test::black_box(&input);
});
bh.bytes = input.len() as u64;
}
#[bench]
pub fn aes192_decrypt(bh: &mut test::Bencher) {
let cipher = Aes192::new(&Default::default());
let mut input = Default::default();
bh.iter(|| {
cipher.decrypt_block(&mut input);
test::black_box(&input);
});
bh.bytes = input.len() as u64;
}
#[bench]
pub fn aes192_encrypt8(bh: &mut test::Bencher) {
let cipher = Aes192::new(&Default::default());
let mut input = Default::default();
bh.iter(|| {
cipher.encrypt_blocks(&mut input);
test::black_box(&input);
});
bh.bytes = (input[0].len() * input.len()) as u64;
}
#[bench]
pub fn aes192_decrypt8(bh: &mut test::Bencher) {
let cipher = Aes192::new(&Default::default());
let mut input = Default::default();
bh.iter(|| {
cipher.decrypt_blocks(&mut input);
test::black_box(&input);
});
bh.bytes = (input[0].len() * input.len()) as u64;
}
/*
#[bench]
pub fn ctr_aes192(bh: &mut test::Bencher) {
let mut cipher = aes::CtrAes192::new(&[0; 24], &[0; 16]);
let mut input = [0u8; 10000];
bh.iter(|| {
cipher.xor(&mut input);
test::black_box(&input);
});
bh.bytes = input.len() as u64;
}
*/
aes-0.6.0/benches/aes256.rs 0100644 0000765 0000024 00000003031 13742317602 0013430 0 ustar 0000000 0000000 #![feature(test)]
extern crate test;
use aes::{Aes256, BlockCipher, NewBlockCipher};
#[bench]
pub fn aes256_encrypt(bh: &mut test::Bencher) {
let cipher = Aes256::new(&Default::default());
let mut input = Default::default();
bh.iter(|| {
cipher.encrypt_block(&mut input);
test::black_box(&input);
});
bh.bytes = input.len() as u64;
}
#[bench]
pub fn aes256_decrypt(bh: &mut test::Bencher) {
let cipher = Aes256::new(&Default::default());
let mut input = Default::default();
bh.iter(|| {
cipher.decrypt_block(&mut input);
test::black_box(&input);
});
bh.bytes = input.len() as u64;
}
#[bench]
pub fn aes256_encrypt8(bh: &mut test::Bencher) {
let cipher = Aes256::new(&Default::default());
let mut input = Default::default();
bh.iter(|| {
cipher.encrypt_blocks(&mut input);
test::black_box(&input);
});
bh.bytes = (input[0].len() * input.len()) as u64;
}
#[bench]
pub fn aes256_decrypt8(bh: &mut test::Bencher) {
let cipher = Aes256::new(&Default::default());
let mut input = Default::default();
bh.iter(|| {
cipher.decrypt_blocks(&mut input);
test::black_box(&input);
});
bh.bytes = (input[0].len() * input.len()) as u64;
}
/*
#[bench]
pub fn ctr_aes256(bh: &mut test::Bencher) {
let mut cipher = aes::CtrAes256::new(&[0; 32], &[0; 16]);
let mut input = [0u8; 10000];
bh.iter(|| {
cipher.xor(&mut input);
test::black_box(&input);
});
bh.bytes = input.len() as u64;
}
*/
aes-0.6.0/src/lib.rs 0100644 0000765 0000024 00000004343 13742324650 0012361 0 ustar 0000000 0000000 //! This crate is a wrapper around different implementations of AES block ciphers.
//!
//! Currently it uses:
//! - [`aes-soft`](https://docs.rs/aes-soft) hardware independent bit-sliced
//! implementation
//! - [`aesni`](https://docs.rs/aesni) implementation using
//! [AES-NI](https://en.wikipedia.org/wiki/AES_instruction_set) instruction set.
//! Used for x86-64 and x86 target architectures with enabled `aes` and `sse2`
//! target features (the latter is usually enabled by default).
//!
//! Crate switches between implementations automatically at compile time.
//! (i.e. it does not use run-time feature detection)
//!
//! # Usage example
//! ```
//! use aes::cipher::generic_array::GenericArray;
//! use aes::cipher::{BlockCipher, NewBlockCipher};
//! use aes::Aes128;
//!
//! let key = GenericArray::from_slice(&[0u8; 16]);
//! let mut block = GenericArray::clone_from_slice(&[0u8; 16]);
//! let mut block8 = GenericArray::clone_from_slice(&[block; 8]);
//! // Initialize cipher
//! let cipher = Aes128::new(&key);
//!
//! let block_copy = block.clone();
//! // Encrypt block in-place
//! cipher.encrypt_block(&mut block);
//! // And decrypt it back
//! cipher.decrypt_block(&mut block);
//! assert_eq!(block, block_copy);
//!
//! // We can encrypt 8 blocks simultaneously using
//! // instruction-level parallelism
//! let block8_copy = block8.clone();
//! cipher.encrypt_blocks(&mut block8);
//! cipher.decrypt_blocks(&mut block8);
//! assert_eq!(block8, block8_copy);
//! ```
//!
//! For implementations of block cipher modes of operation see
//! [`block-modes`](https://docs.rs/block-modes) crate.
#![no_std]
#![doc(
html_logo_url = "https://raw.githubusercontent.com/RustCrypto/meta/master/logo.svg",
html_favicon_url = "https://raw.githubusercontent.com/RustCrypto/meta/master/logo.svg"
)]
#![deny(unsafe_code)]
#![warn(missing_docs, rust_2018_idioms)]
pub use cipher::{self, BlockCipher, NewBlockCipher};
#[cfg(not(all(
target_feature = "aes",
target_feature = "sse2",
any(target_arch = "x86_64", target_arch = "x86"),
)))]
pub use aes_soft::{Aes128, Aes192, Aes256};
#[cfg(all(
target_feature = "aes",
target_feature = "sse2",
any(target_arch = "x86_64", target_arch = "x86"),
))]
pub use aesni::{Aes128, Aes192, Aes256};
aes-0.6.0/tests/data/aes128.blb 0100644 0000765 0000024 00000065432 13721501502 0014211 0 ustar 0000000 0000000 \\\\\\\\\\\\\\\\ 8888888888888888@@@@@@@@@@@@@@@@**************** @ tttttttttttttttt 3333333333333333[[[[[[[[[[[[[[[[ CCCCCCCCCCCCCCCCmmmmmmmmmmmmmmmm9999999999999999"""""""""""""""" cccccccccccccccc %%%%%%%%%%%%%%%% vvvvvvvvvvvvvvvv aaaaaaaaaaaaaaaa @ @
DDDDDDDDDDDDDDDD ================oooooooooooooooo```````````````` <<<<<<<<<<<<<<<<zzzzzzzzzzzzzzzz QQQQQQQQQQQQQQQQGGGGGGGGGGGGGGGG @ dddddddddddddddd @ LLLLLLLLLLLLLLLLrrrrrrrrrrrrrrrr 7777777777777777 @ //////////////// 1111111111111111YYYYYYYYYYYYYYYYVVVVVVVVVVVVVVVV::::::::::::::::................ yyyyyyyyyyyyyyyyeeeeeeeeeeeeeeee++++++++++++++++qqqqqqqqqqqqqqqqxxxxxxxxxxxxxxxx (((((((((((((((( {{{{{{{{{{{{{{{{ssssssssssssssssPPPPPPPPPPPPPPPPhhhhhhhhhhhhhhhh ~~~~~~~~~~~~~~~~ 2222222222222222 ppppppppppppppppOOOOOOOOOOOOOOOO bbbbbbbbbbbbbbbb @ IIIIIIIIIIIIIIIIJJJJJJJJJJJJJJJJ >>>>>>>>>>>>>>>> HHHHHHHHHHHHHHHH5555555555555555 @ BBBBBBBBBBBBBBBB NNNNNNNNNNNNNNNN ]]]]]]]]]]]]]]]]ffffffffffffffff}}}}}}}}}}}}}}}} MMMMMMMMMMMMMMMMllllllllllllllll'''''''''''''''' AAAAAAAAAAAAAAAA @ @ wwwwwwwwwwwwwwwwiiiiiiiiiiiiiiii4444444444444444 @ $$$$$$$$$$$$$$$$ @ @ RRRRRRRRRRRRRRRR---------------- nnnnnnnnnnnnnnnn @ WWWWWWWWWWWWWWWW ^^^^^^^^^^^^^^^^ @ &&&&&&&&&&&&&&&& @ ;;;;;;;;;;;;;;;;________________ ???????????????? TTTTTTTTTTTTTTTT
gggggggggggggggg !!!!!!!!!!!!!!!! kkkkkkkkkkkkkkkk ZZZZZZZZZZZZZZZZ,,,,,,,,,,,,,,,, ################SSSSSSSSSSSSSSSS KKKKKKKKKKKKKKKK6666666666666666|||||||||||||||| 0000000000000000 )))))))))))))))) jjjjjjjjjjjjjjjj XXXXXXXXXXXXXXXXuuuuuuuuuuuuuuuu FFFFFFFFFFFFFFFF EEEEEEEEEEEEEEEEUUUUUUUUUUUUUUUU
G\MG\M "3DUfw+Eų ,IHH 3!FE[غȀ7 ]cJwOR"g ;|5C#]e? NNUQcA q
(yMQx쑋?A R[2<߀1 `~7z66n>C ~˒QΣ1S' 7 (Vťnr; ZOɡS Nn +9=>4k ln!I_ ay 5@݅7 Q,Vj 6HCD @:n(]
-ޘ\v\WYA;m ?8 7O, kw BR=LA!C
5 ,ڐۦ=)Vq[ ԕ[AYWI \vXg 2IK kF=tF^ ZѬ 24`y
-Kb9py !Τ5,MXj_- n%!&4M&6#' *gU%)
V~x r2YJ}b x,݁s /Ʉ0 C r@cEH˙ do虜|! &HZ0@ZzW6)$P Em|6cC*= o _H uI 8~O 6[} ?M{m uj]`LC0H pKˎiF%u n! ש+ Uw n"JiE ~2i`{ / KqwmBY &ݑ\L:+k f直S U
3;M kYEf& wFz y0ͨ%ұ9Q zq:S4[ЁW J+Fb
2,-I% .|p|t{|~= kƤj`ś1I) H=2gL# 1 k / /mv[ Z(R) ¼} CeDYg"g U R]>K&; \.G1;[m B[ߔ ?
\D u2
5 S9@F.(SI 4 v qD8Ly #?=a.XEɖU 7NRhgnDu)?U BL"3X/ ' +N9 sdQф7 $Hj0HWȂw gV[h=w{= o"_oL .gy"m ] x~gEg~&69 <\VU/A}= gC zO u@8Gw(TG:oc ~4j LKH1 } ^Q36Ȣ+ }'U,ń# ^U7C tUf;x8C44 }Sr ^: 8R!] $ h+S\r#:Σk \v + e`P th8GT) |k1ڌiVP4[ xQ1Hee g0UxKs <>SV :I# s >벍q 1 0 )C2 ]arIhF~g cO8 ζq]MK Zɰ)eH} W, eԍ-%9 ~bU 7? ԺM(! 1q C AhX}Ni ^3nY&Ei S)A3P/~/
%)?s #1óa }g V3HBQ wXW[{Ade; sWƇѴr = eOvB?\N!
Q b=+NPjbW_ tF W " 4`Q k _}Wfқ]nFB;+ "_Œ?TYA ]Aj_, U J͠1%E>^I. SK:W M>u@Hi c@T6wQgq- dڮGRy.+2 K"]QZ*GS J"}G;>YnA n5 OS_Po 4>NضD2y G\$g
9 I%
e 1w Gd"TȀ p926h+ (Fy :rl +~+#47 Ep}) Mߺ/ g rt5%nI7[? -' > [YV;q ftJB6u fA fP nU#ɇ1 H%aXnC 5x]*}' OMq7; zK̿g9US ]x }wSlwY vxpN _ AS癍? 7 *E 6w0v ֠TJV )5] #ϐ][7
eF"m ЦO ک@bgkqO ;yYDF}iN9k C &b5 mtdn9/) DZ9Бq$[ qǣWR17< e SE؇!.9v s <)! mVAs +|9 ɗ]!1 I%Lkd5hy Ie[B%Ig .
<`1^&K ]Jo1!4;;} LR Q^9 >U=+d? zC}tvq 5$ZΘJO^i
^Hh6Z)i " TUM6ep@+ / _[AU|(sg+s AeQ 63xB|a q|ELݩ qUQ >U^/; bHDaE7bj D= Z+$a "vTdoQ }%㩬SLNoy$j_ ~@OGpCN6 aQO Ek ls cUImb+ ڧ0{jsb knA aS?މ.6U &$&'n< 1"AKwO)`W Tt n¥t )Zq? dn- Gga
oO3咍 bH-oF ^Ȉ{S kGT[ *_A 8JD{m
o $
b@^/ y Ƴ/]{<e "Zr+ɷHBw9 yǬP{ v6Rן? lh>4n7 !~g ?$Ī#p y? l֞? {+埁q )5jYd-7 {MA EerM1 ]v]"2xNC >f O <
' +RA>7; lwU_b_ZS @@& ~*)6'`QI_ L]c.j7 =;r qJCp |˅o>\_@
] x/p« km u
Al
w 5>r5 >w%Ƒ e[ 6)|uӶ>1ep ܶ>\= Kg
ߏK ,g^]8iZ$l AaZmy <SzZY- _ GY{*A 2X vLūd/Nc;U) yߵGV
EҪotYR@ˁs DY #{x>SqUS A`Q! lZuؤZ5ի܄ OIth7m 3F)h}"E1S Qo$CY:jT=u T$ mny?uo /6ᷮy(?{ XL|*'9O TrxQ`-1d}9 e~Jknn_Rԁ Wr؋: )? [Fn&yۚu #DzK1VHI3 {S,-հ>+e @P~|Ȕ"o}+ +4cY+5! vBOv 駅 1 Hx^ZFY eiU!iI @t :Uw 3Ħ:U ʀEO 7BNd[,qN8g! ZAe&Bim 9()9uǵNԓ) 1L K /ψOA IAg+ys D2=@o'n)r]q O ȣ28+;1v3Y 2hbVAHPDGE EL
$NzRҤmo =m30#b1 \ mG{P1|΄%g e`݃S1 Pna`tJAҢY} r P`8W M`]lY;Eh W ;a3xHqO|Y} }A rS7'/ҋM kvʅ
7վOi 5H_5ݝ_*O :,gT̹[33 W&5 T|ݓNzu NQ/\I# j]΅h') 1 .ʗ&% ) q\gHՆM[ ڂ*} $"s' o0{i)ԅWC Æ
~^$9 ?/ nExk4a <[k ^jdl\Ug1 hf;
ިWA GrҪf?{`{'A ԃ㯑Դ+.&Em{ ۮ4H$)9Xƃ% % eDEU i@f9P,i(1E OzxSjb~i .(1C˵eqU
+.JVԴP3S
55 eu )̓0OCo J̠ZZa %= MJ:o4c Ra8e[bmg 'G;|V}&! xhZw (lֈ? 2'RM 7 W\,n"5 n &D`\)*m+ ^C5W[;7E/ P+