diff options
Diffstat (limited to 'src/ref/lilliput-i.c')
| -rw-r--r-- | src/ref/lilliput-i.c | 7 |
1 files changed, 4 insertions, 3 deletions
diff --git a/src/ref/lilliput-i.c b/src/ref/lilliput-i.c index 3ba7ea2..11fdc45 100644 --- a/src/ref/lilliput-i.c +++ b/src/ref/lilliput-i.c @@ -42,7 +42,7 @@ static void _fill_msg_tweak( /* With an s-bit block index, the t-bit tweak is filled as follows: * * - bits [ 1, t-|N|-4]: block index - * [ 1, s]: actual 64-bit block index + * [ 1, s]: actual block index * [ s+1, t-|N|-4]: 0-padding * - bits [t-|N|-4, t-4]: nonce * - bits [ t-3, t]: 4-bit prefix @@ -50,11 +50,12 @@ static void _fill_msg_tweak( copy_block_index(block_index, tweak); - tweak[sizeof(block_index)] = lower_nibble(N[0]) << 4; + size_t N_start = TWEAK_BYTES - NONCE_BYTES - 1; + tweak[N_start] = lower_nibble(N[0]) << 4; for (size_t i=1; i<NONCE_BYTES; i++) { - tweak[sizeof(block_index)+i] = lower_nibble(N[i]) << 4 ^ upper_nibble(N[i-1]); + tweak[N_start+i] = lower_nibble(N[i]) << 4 ^ upper_nibble(N[i-1]); } tweak[TWEAK_BYTES-1] = prefix << 4 ^ upper_nibble(N[NONCE_BYTES-1]); |