/*

 * Copyright 2015-2016 The OpenSSL Project Authors. All Rights Reserved.

 *

 * Licensed under the Apache License 2.0 (the "License").  You may not use

 * this file except in compliance with the License.  You can obtain a copy

 * in the file LICENSE in the source distribution or at

 * https://www.openssl.org/source/license.html

 */

#include <stddef.h>

#define POLY1305_BLOCK_SIZE  16

#define POLY1305_DIGEST_SIZE 16

#define POLY1305_KEY_SIZE    32

typedef struct poly1305_context POLY1305;

typedef void (*poly1305_blocks_f) (void *ctx, const unsigned char *inp,

                                   size_t len, unsigned int padbit);

typedef void (*poly1305_emit_f) (void *ctx, unsigned char mac[16],

                                 const unsigned int nonce[4]);

struct poly1305_context {

    double opaque[24];  /* large enough to hold internal state, declared

                         * 'double' to ensure at least 64-bit invariant

                         * alignment across all platforms and

                         * configurations */

    unsigned int nonce[4];

    unsigned char data[POLY1305_BLOCK_SIZE];

    size_t num;

    struct {

        poly1305_blocks_f blocks;

        poly1305_emit_f emit;

    } func;

};

size_t Poly1305_ctx_size(void);

void Poly1305_Init(POLY1305 *ctx, const unsigned char key[32]);

void Poly1305_Update(POLY1305 *ctx, const unsigned char *inp, size_t len);

void Poly1305_Final(POLY1305 *ctx, unsigned char mac[16]);