tree dcb15118889f4a97706f86adac7b7ec16d04cf2b
parent 18254e25a6c0befdce98528724cb3622f7f75775
author Adam Langley <alangley@gmail.com> 1559687946 -0700
committer CQ bot account: commit-bot@chromium.org <commit-bot@chromium.org> 1560465839 +0000

Add AES-KWP

KWP is Key Wrap with Padding, defined in RFC 5649 and SP 800-38F. Like
Key Wrap, it's a poor-man's AEAD and shouldn't be used. However, some
existing systems use it and we need to interoperate.

The interface of the added functions is a little unfortunate, but they
match the interfaces of the existing Key Wrap functions which, in turn,
match functions in OpenSSL. Hopefully this way, if OpenSSL ever add
support, we'll line up.

Change-Id: I3496c288f32230a891261586ca2e9c4ee8456c09
Reviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/36324
Commit-Queue: Adam Langley <agl@google.com>
Reviewed-by: David Benjamin <davidben@google.com>