lilliput-ae-reference-implementation

commit 72d8430b398d1cf9f69a29f0602b3e0aab10395e
parent 384266125a9ada7f011e4e742f4cb88045a66bca
Author: Kévin Le Gouguec <kevin.legouguec@airbus.com>
Date:   Mon, 26 Nov 2018 15:52:13 +0100

Corrections diverses sur ΘCB3

Et les tests passent. Merci Léo !

Diffstat:
M
crypto_aead/lilliputaei128v1/ref/lilliput-ae-i.c
 | 
4
++--

1 file changed, 2 insertions(+), 2 deletions(-)
diff --git a/crypto_aead/lilliputaei128v1/ref/lilliput-ae-i.c b/crypto_aead/lilliputaei128v1/ref/lilliput-ae-i.c
@@ -115,9 +115,9 @@ static void _fill_msg_tweak(
 
     tweak[sizeof(block_nb)] = _lower_nibble(N[0]) << 4;
 
-    for (size_t i=1; i<NONCE_BYTES-1; i++)
+    for (size_t i=1; i<NONCE_BYTES; i++)
     {
-        tweak[sizeof(block_nb)+i] = _lower_nibble(N[i]) ^ _upper_nibble(N[i-1]);
+        tweak[sizeof(block_nb)+i] = _lower_nibble(N[i]) << 4 ^ _upper_nibble(N[i-1]);
     }
 
     tweak[TWEAK_BYTES-1] = prefix << 4 ^ _upper_nibble(N[NONCE_BYTES-1]);