2011-01-06 13:28:03 +01:00
|
|
|
/**
|
2018-01-23 16:36:58 +01:00
|
|
|
* \file doc_encdec.h
|
|
|
|
*
|
|
|
|
* \brief Encryption/decryption module documentation file.
|
|
|
|
*/
|
|
|
|
/*
|
2015-08-06 10:59:26 +02:00
|
|
|
*
|
2020-08-07 13:07:28 +02:00
|
|
|
* Copyright The Mbed TLS Contributors
|
2015-09-04 14:21:07 +02:00
|
|
|
* SPDX-License-Identifier: Apache-2.0
|
2015-08-06 10:59:26 +02:00
|
|
|
*
|
2015-09-04 14:21:07 +02:00
|
|
|
* Licensed under the Apache License, Version 2.0 (the "License"); you may
|
|
|
|
* not use this file except in compliance with the License.
|
|
|
|
* You may obtain a copy of the License at
|
2015-08-06 10:59:26 +02:00
|
|
|
*
|
2015-09-04 14:21:07 +02:00
|
|
|
* http://www.apache.org/licenses/LICENSE-2.0
|
2015-08-06 10:59:26 +02:00
|
|
|
*
|
2015-09-04 14:21:07 +02:00
|
|
|
* Unless required by applicable law or agreed to in writing, software
|
|
|
|
* distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
|
|
|
|
* WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
|
|
* See the License for the specific language governing permissions and
|
|
|
|
* limitations under the License.
|
2011-01-06 13:28:03 +01:00
|
|
|
*/
|
|
|
|
|
|
|
|
/**
|
|
|
|
* @addtogroup encdec_module Encryption/decryption module
|
2013-09-10 16:16:50 +02:00
|
|
|
*
|
|
|
|
* The Encryption/decryption module provides encryption/decryption functions.
|
|
|
|
* One can differentiate between symmetric and asymmetric algorithms; the
|
|
|
|
* symmetric ones are mostly used for message confidentiality and the asymmetric
|
2011-01-06 13:28:03 +01:00
|
|
|
* ones for key exchange and message integrity.
|
2013-09-10 16:16:50 +02:00
|
|
|
* Some symmetric algorithms provide different block cipher modes, mainly
|
|
|
|
* Electronic Code Book (ECB) which is used for short (64-bit) messages and
|
|
|
|
* Cipher Block Chaining (CBC) which provides the structure needed for longer
|
|
|
|
* messages. In addition the Cipher Feedback Mode (CFB-128) stream cipher mode,
|
|
|
|
* Counter mode (CTR) and Galois Counter Mode (GCM) are implemented for
|
|
|
|
* specific algorithms.
|
|
|
|
*
|
|
|
|
* All symmetric encryption algorithms are accessible via the generic cipher layer
|
2015-05-14 13:55:51 +02:00
|
|
|
* (see \c mbedtls_cipher_setup()).
|
2013-09-10 16:16:50 +02:00
|
|
|
*
|
|
|
|
* The asymmetric encryptrion algorithms are accessible via the generic public
|
2015-05-14 13:55:51 +02:00
|
|
|
* key layer (see \c mbedtls_pk_init()).
|
2011-01-27 16:24:17 +01:00
|
|
|
*
|
2011-01-06 13:28:03 +01:00
|
|
|
* The following algorithms are provided:
|
|
|
|
* - Symmetric:
|
2015-05-14 13:55:51 +02:00
|
|
|
* - AES (see \c mbedtls_aes_crypt_ecb(), \c mbedtls_aes_crypt_cbc(), \c mbedtls_aes_crypt_cfb128() and
|
|
|
|
* \c mbedtls_aes_crypt_ctr()).
|
|
|
|
* - Camellia (see \c mbedtls_camellia_crypt_ecb(), \c mbedtls_camellia_crypt_cbc(),
|
|
|
|
* \c mbedtls_camellia_crypt_cfb128() and \c mbedtls_camellia_crypt_ctr()).
|
|
|
|
* - DES/3DES (see \c mbedtls_des_crypt_ecb(), \c mbedtls_des_crypt_cbc(), \c mbedtls_des3_crypt_ecb()
|
|
|
|
* and \c mbedtls_des3_crypt_cbc()).
|
|
|
|
* - GCM (AES-GCM and CAMELLIA-GCM) (see \c mbedtls_gcm_init())
|
2011-01-06 13:28:03 +01:00
|
|
|
* - Asymmetric:
|
2015-05-14 13:55:51 +02:00
|
|
|
* - Diffie-Hellman-Merkle (see \c mbedtls_dhm_read_public(), \c mbedtls_dhm_make_public()
|
|
|
|
* and \c mbedtls_dhm_calc_secret()).
|
|
|
|
* - RSA (see \c mbedtls_rsa_public() and \c mbedtls_rsa_private()).
|
|
|
|
* - Elliptic Curves over GF(p) (see \c mbedtls_ecp_point_init()).
|
|
|
|
* - Elliptic Curve Digital Signature Algorithm (ECDSA) (see \c mbedtls_ecdsa_init()).
|
|
|
|
* - Elliptic Curve Diffie Hellman (ECDH) (see \c mbedtls_ecdh_init()).
|
2011-01-06 13:28:03 +01:00
|
|
|
*
|
2013-09-10 16:16:50 +02:00
|
|
|
* This module provides encryption/decryption which can be used to provide
|
2011-01-06 13:28:03 +01:00
|
|
|
* secrecy.
|
2013-09-10 16:16:50 +02:00
|
|
|
*
|
|
|
|
* It also provides asymmetric key functions which can be used for
|
|
|
|
* confidentiality, integrity, authentication and non-repudiation.
|
2011-01-06 13:28:03 +01:00
|
|
|
*/
|