Switch to libsodium generic hash API - dedup - deduplicating backup program
 (HTM) git clone git://bitreich.org/dedup/ git://enlrupgkhuxnvlhsf6lc3fziv5h2hhfrinws65d7roiv6bfj7d652fid.onion/dedup/
 (DIR) Log
 (DIR) Files
 (DIR) Refs
 (DIR) Tags
 (DIR) README
 (DIR) LICENSE
       ---
 (DIR) commit 7d0e3db7c6c61fdea091bccb1d8a8e61545be235
 (DIR) parent 15855f967c85fbeb0fe5ce7a41cd66162a29b270
 (HTM) Author: sin <sin@2f30.org>
       Date:   Wed,  1 May 2019 22:09:16 +0100
       
       Switch to libsodium generic hash API
       
       Diffstat:
         M CHANGELOG                           |       5 +++--
         M Makefile                            |       6 +-----
         M README                              |       1 +
         M TODO                                |       1 -
         D blake2-impl.h                       |     160 -------------------------------
         D blake2.h                            |     195 -------------------------------
         D blake2b-ref.c                       |     379 -------------------------------
         D blake2s-ref.c                       |     367 ------------------------------
         M block.c                             |       2 +-
         M block.h                             |       1 -
         M bstorage.c                          |     100 ++++---------------------------
         M dup-init.1                          |       6 ------
         M dup-init.c                          |       6 +-----
         D test006                             |      16 ----------------
       
       14 files changed, 19 insertions(+), 1226 deletions(-)
       ---
 (DIR) diff --git a/CHANGELOG b/CHANGELOG
       @@ -10,10 +10,11 @@
        - dup-unpack(1) to extract a snapshot.
        
        ### Changed
       -- Incompatible file format changes.  Requires manual migration of data.
       +- Change file format specification.  Requires manual migration of data.
       +- Use libsodium generic hash API.
        
        ### Removed
       -- Support for blake2bp and blake2sp.
       +- Explicit support for hash type.
        
        ## [1.0] - 2019-04-14
        ### Added
 (DIR) diff --git a/Makefile b/Makefile
       @@ -5,8 +5,6 @@ MAN = dup-check.1 dup-gc.1 dup-init.1 dup-pack.1 dup-rm.1 dup-unpack.1
        
        HDR = \
                arg.h \
       -        blake2-impl.h \
       -        blake2.h \
                block.h \
                chunker.h \
                config.h \
       @@ -17,8 +15,6 @@ HDR = \
        COMMOBJ = \
                bcompat.o \
                bcompress.o \
       -        blake2b-ref.o \
       -        blake2s-ref.o \
                block.o \
                bstorage.o \
                chunker.o \
       @@ -34,7 +30,7 @@ DPACKOBJ = $(COMMOBJ) dup-pack.o
        DRMOBJ = $(COMMOBJ) dup-rm.o
        DUNPACKOBJ = $(COMMOBJ) dup-unpack.o
        
       -LDLIBS = -lsnappy
       +LDLIBS = -lsnappy -lsodium
        
        all: $(BIN)
        
 (DIR) diff --git a/README b/README
       @@ -34,6 +34,7 @@ Dependencies
        ============
        
          - snappy
       +  - libsodium
        
        Contact
        =======
 (DIR) diff --git a/TODO b/TODO
       @@ -1,5 +1,4 @@
        Use a ring buffer in the chunker (avoid memmove() call)
       -Create a library archive out of the blake2b files and link with it
        pledge/unveil support
        Use flock() to avoid corruption
        Add back lz4 support
 (DIR) diff --git a/blake2-impl.h b/blake2-impl.h
       @@ -1,160 +0,0 @@
       -/*
       -   BLAKE2 reference source code package - reference C implementations
       -
       -   Copyright 2012, Samuel Neves <sneves@dei.uc.pt>.  You may use this under the
       -   terms of the CC0, the OpenSSL Licence, or the Apache Public License 2.0, at
       -   your option.  The terms of these licenses can be found at:
       -
       -   - CC0 1.0 Universal : http://creativecommons.org/publicdomain/zero/1.0
       -   - OpenSSL license   : https://www.openssl.org/source/license.html
       -   - Apache 2.0        : http://www.apache.org/licenses/LICENSE-2.0
       -
       -   More information about the BLAKE2 hash function can be found at
       -   https://blake2.net.
       -*/
       -#ifndef BLAKE2_IMPL_H
       -#define BLAKE2_IMPL_H
       -
       -#include <stdint.h>
       -#include <string.h>
       -
       -#if !defined(__cplusplus) && (!defined(__STDC_VERSION__) || __STDC_VERSION__ < 199901L)
       -  #if   defined(_MSC_VER)
       -    #define BLAKE2_INLINE __inline
       -  #elif defined(__GNUC__)
       -    #define BLAKE2_INLINE __inline__
       -  #else
       -    #define BLAKE2_INLINE
       -  #endif
       -#else
       -  #define BLAKE2_INLINE inline
       -#endif
       -
       -static BLAKE2_INLINE uint32_t load32( const void *src )
       -{
       -#if defined(NATIVE_LITTLE_ENDIAN)
       -  uint32_t w;
       -  memcpy(&w, src, sizeof w);
       -  return w;
       -#else
       -  const uint8_t *p = ( const uint8_t * )src;
       -  return (( uint32_t )( p[0] ) <<  0) |
       -         (( uint32_t )( p[1] ) <<  8) |
       -         (( uint32_t )( p[2] ) << 16) |
       -         (( uint32_t )( p[3] ) << 24) ;
       -#endif
       -}
       -
       -static BLAKE2_INLINE uint64_t load64( const void *src )
       -{
       -#if defined(NATIVE_LITTLE_ENDIAN)
       -  uint64_t w;
       -  memcpy(&w, src, sizeof w);
       -  return w;
       -#else
       -  const uint8_t *p = ( const uint8_t * )src;
       -  return (( uint64_t )( p[0] ) <<  0) |
       -         (( uint64_t )( p[1] ) <<  8) |
       -         (( uint64_t )( p[2] ) << 16) |
       -         (( uint64_t )( p[3] ) << 24) |
       -         (( uint64_t )( p[4] ) << 32) |
       -         (( uint64_t )( p[5] ) << 40) |
       -         (( uint64_t )( p[6] ) << 48) |
       -         (( uint64_t )( p[7] ) << 56) ;
       -#endif
       -}
       -
       -static BLAKE2_INLINE uint16_t load16( const void *src )
       -{
       -#if defined(NATIVE_LITTLE_ENDIAN)
       -  uint16_t w;
       -  memcpy(&w, src, sizeof w);
       -  return w;
       -#else
       -  const uint8_t *p = ( const uint8_t * )src;
       -  return ( uint16_t )((( uint32_t )( p[0] ) <<  0) |
       -                      (( uint32_t )( p[1] ) <<  8));
       -#endif
       -}
       -
       -static BLAKE2_INLINE void store16( void *dst, uint16_t w )
       -{
       -#if defined(NATIVE_LITTLE_ENDIAN)
       -  memcpy(dst, &w, sizeof w);
       -#else
       -  uint8_t *p = ( uint8_t * )dst;
       -  *p++ = ( uint8_t )w; w >>= 8;
       -  *p++ = ( uint8_t )w;
       -#endif
       -}
       -
       -static BLAKE2_INLINE void store32( void *dst, uint32_t w )
       -{
       -#if defined(NATIVE_LITTLE_ENDIAN)
       -  memcpy(dst, &w, sizeof w);
       -#else
       -  uint8_t *p = ( uint8_t * )dst;
       -  p[0] = (uint8_t)(w >>  0);
       -  p[1] = (uint8_t)(w >>  8);
       -  p[2] = (uint8_t)(w >> 16);
       -  p[3] = (uint8_t)(w >> 24);
       -#endif
       -}
       -
       -static BLAKE2_INLINE void store64( void *dst, uint64_t w )
       -{
       -#if defined(NATIVE_LITTLE_ENDIAN)
       -  memcpy(dst, &w, sizeof w);
       -#else
       -  uint8_t *p = ( uint8_t * )dst;
       -  p[0] = (uint8_t)(w >>  0);
       -  p[1] = (uint8_t)(w >>  8);
       -  p[2] = (uint8_t)(w >> 16);
       -  p[3] = (uint8_t)(w >> 24);
       -  p[4] = (uint8_t)(w >> 32);
       -  p[5] = (uint8_t)(w >> 40);
       -  p[6] = (uint8_t)(w >> 48);
       -  p[7] = (uint8_t)(w >> 56);
       -#endif
       -}
       -
       -static BLAKE2_INLINE uint64_t load48( const void *src )
       -{
       -  const uint8_t *p = ( const uint8_t * )src;
       -  return (( uint64_t )( p[0] ) <<  0) |
       -         (( uint64_t )( p[1] ) <<  8) |
       -         (( uint64_t )( p[2] ) << 16) |
       -         (( uint64_t )( p[3] ) << 24) |
       -         (( uint64_t )( p[4] ) << 32) |
       -         (( uint64_t )( p[5] ) << 40) ;
       -}
       -
       -static BLAKE2_INLINE void store48( void *dst, uint64_t w )
       -{
       -  uint8_t *p = ( uint8_t * )dst;
       -  p[0] = (uint8_t)(w >>  0);
       -  p[1] = (uint8_t)(w >>  8);
       -  p[2] = (uint8_t)(w >> 16);
       -  p[3] = (uint8_t)(w >> 24);
       -  p[4] = (uint8_t)(w >> 32);
       -  p[5] = (uint8_t)(w >> 40);
       -}
       -
       -static BLAKE2_INLINE uint32_t rotr32( const uint32_t w, const unsigned c )
       -{
       -  return ( w >> c ) | ( w << ( 32 - c ) );
       -}
       -
       -static BLAKE2_INLINE uint64_t rotr64( const uint64_t w, const unsigned c )
       -{
       -  return ( w >> c ) | ( w << ( 64 - c ) );
       -}
       -
       -/* prevents compiler optimizing out memset() */
       -static BLAKE2_INLINE void secure_zero_memory(void *v, size_t n)
       -{
       -  static void *(*const volatile memset_v)(void *, int, size_t) = &memset;
       -  memset_v(v, 0, n);
       -}
       -
       -#endif
 (DIR) diff --git a/blake2.h b/blake2.h
       @@ -1,195 +0,0 @@
       -/*
       -   BLAKE2 reference source code package - reference C implementations
       -
       -   Copyright 2012, Samuel Neves <sneves@dei.uc.pt>.  You may use this under the
       -   terms of the CC0, the OpenSSL Licence, or the Apache Public License 2.0, at
       -   your option.  The terms of these licenses can be found at:
       -
       -   - CC0 1.0 Universal : http://creativecommons.org/publicdomain/zero/1.0
       -   - OpenSSL license   : https://www.openssl.org/source/license.html
       -   - Apache 2.0        : http://www.apache.org/licenses/LICENSE-2.0
       -
       -   More information about the BLAKE2 hash function can be found at
       -   https://blake2.net.
       -*/
       -#ifndef BLAKE2_H
       -#define BLAKE2_H
       -
       -#include <stddef.h>
       -#include <stdint.h>
       -
       -#if defined(_MSC_VER)
       -#define BLAKE2_PACKED(x) __pragma(pack(push, 1)) x __pragma(pack(pop))
       -#else
       -#define BLAKE2_PACKED(x) x __attribute__((packed))
       -#endif
       -
       -#if defined(__cplusplus)
       -extern "C" {
       -#endif
       -
       -  enum blake2s_constant
       -  {
       -    BLAKE2S_BLOCKBYTES = 64,
       -    BLAKE2S_OUTBYTES   = 32,
       -    BLAKE2S_KEYBYTES   = 32,
       -    BLAKE2S_SALTBYTES  = 8,
       -    BLAKE2S_PERSONALBYTES = 8
       -  };
       -
       -  enum blake2b_constant
       -  {
       -    BLAKE2B_BLOCKBYTES = 128,
       -    BLAKE2B_OUTBYTES   = 64,
       -    BLAKE2B_KEYBYTES   = 64,
       -    BLAKE2B_SALTBYTES  = 16,
       -    BLAKE2B_PERSONALBYTES = 16
       -  };
       -
       -  typedef struct blake2s_state__
       -  {
       -    uint32_t h[8];
       -    uint32_t t[2];
       -    uint32_t f[2];
       -    uint8_t  buf[BLAKE2S_BLOCKBYTES];
       -    size_t   buflen;
       -    size_t   outlen;
       -    uint8_t  last_node;
       -  } blake2s_state;
       -
       -  typedef struct blake2b_state__
       -  {
       -    uint64_t h[8];
       -    uint64_t t[2];
       -    uint64_t f[2];
       -    uint8_t  buf[BLAKE2B_BLOCKBYTES];
       -    size_t   buflen;
       -    size_t   outlen;
       -    uint8_t  last_node;
       -  } blake2b_state;
       -
       -  typedef struct blake2sp_state__
       -  {
       -    blake2s_state S[8][1];
       -    blake2s_state R[1];
       -    uint8_t       buf[8 * BLAKE2S_BLOCKBYTES];
       -    size_t        buflen;
       -    size_t        outlen;
       -  } blake2sp_state;
       -
       -  typedef struct blake2bp_state__
       -  {
       -    blake2b_state S[4][1];
       -    blake2b_state R[1];
       -    uint8_t       buf[4 * BLAKE2B_BLOCKBYTES];
       -    size_t        buflen;
       -    size_t        outlen;
       -  } blake2bp_state;
       -
       -
       -  BLAKE2_PACKED(struct blake2s_param__
       -  {
       -    uint8_t  digest_length; /* 1 */
       -    uint8_t  key_length;    /* 2 */
       -    uint8_t  fanout;        /* 3 */
       -    uint8_t  depth;         /* 4 */
       -    uint32_t leaf_length;   /* 8 */
       -    uint32_t node_offset;  /* 12 */
       -    uint16_t xof_length;    /* 14 */
       -    uint8_t  node_depth;    /* 15 */
       -    uint8_t  inner_length;  /* 16 */
       -    /* uint8_t  reserved[0]; */
       -    uint8_t  salt[BLAKE2S_SALTBYTES]; /* 24 */
       -    uint8_t  personal[BLAKE2S_PERSONALBYTES];  /* 32 */
       -  });
       -
       -  typedef struct blake2s_param__ blake2s_param;
       -
       -  BLAKE2_PACKED(struct blake2b_param__
       -  {
       -    uint8_t  digest_length; /* 1 */
       -    uint8_t  key_length;    /* 2 */
       -    uint8_t  fanout;        /* 3 */
       -    uint8_t  depth;         /* 4 */
       -    uint32_t leaf_length;   /* 8 */
       -    uint32_t node_offset;   /* 12 */
       -    uint32_t xof_length;    /* 16 */
       -    uint8_t  node_depth;    /* 17 */
       -    uint8_t  inner_length;  /* 18 */
       -    uint8_t  reserved[14];  /* 32 */
       -    uint8_t  salt[BLAKE2B_SALTBYTES]; /* 48 */
       -    uint8_t  personal[BLAKE2B_PERSONALBYTES];  /* 64 */
       -  });
       -
       -  typedef struct blake2b_param__ blake2b_param;
       -
       -  typedef struct blake2xs_state__
       -  {
       -    blake2s_state S[1];
       -    blake2s_param P[1];
       -  } blake2xs_state;
       -
       -  typedef struct blake2xb_state__
       -  {
       -    blake2b_state S[1];
       -    blake2b_param P[1];
       -  } blake2xb_state;
       -
       -  /* Padded structs result in a compile-time error */
       -  enum {
       -    BLAKE2_DUMMY_1 = 1/(sizeof(blake2s_param) == BLAKE2S_OUTBYTES),
       -    BLAKE2_DUMMY_2 = 1/(sizeof(blake2b_param) == BLAKE2B_OUTBYTES)
       -  };
       -
       -  /* Streaming API */
       -  int blake2s_init( blake2s_state *S, size_t outlen );
       -  int blake2s_init_key( blake2s_state *S, size_t outlen, const void *key, size_t keylen );
       -  int blake2s_init_param( blake2s_state *S, const blake2s_param *P );
       -  int blake2s_update( blake2s_state *S, const void *in, size_t inlen );
       -  int blake2s_final( blake2s_state *S, void *out, size_t outlen );
       -
       -  int blake2b_init( blake2b_state *S, size_t outlen );
       -  int blake2b_init_key( blake2b_state *S, size_t outlen, const void *key, size_t keylen );
       -  int blake2b_init_param( blake2b_state *S, const blake2b_param *P );
       -  int blake2b_update( blake2b_state *S, const void *in, size_t inlen );
       -  int blake2b_final( blake2b_state *S, void *out, size_t outlen );
       -
       -  int blake2sp_init( blake2sp_state *S, size_t outlen );
       -  int blake2sp_init_key( blake2sp_state *S, size_t outlen, const void *key, size_t keylen );
       -  int blake2sp_update( blake2sp_state *S, const void *in, size_t inlen );
       -  int blake2sp_final( blake2sp_state *S, void *out, size_t outlen );
       -
       -  int blake2bp_init( blake2bp_state *S, size_t outlen );
       -  int blake2bp_init_key( blake2bp_state *S, size_t outlen, const void *key, size_t keylen );
       -  int blake2bp_update( blake2bp_state *S, const void *in, size_t inlen );
       -  int blake2bp_final( blake2bp_state *S, void *out, size_t outlen );
       -
       -  /* Variable output length API */
       -  int blake2xs_init( blake2xs_state *S, const size_t outlen );
       -  int blake2xs_init_key( blake2xs_state *S, const size_t outlen, const void *key, size_t keylen );
       -  int blake2xs_update( blake2xs_state *S, const void *in, size_t inlen );
       -  int blake2xs_final(blake2xs_state *S, void *out, size_t outlen);
       -
       -  int blake2xb_init( blake2xb_state *S, const size_t outlen );
       -  int blake2xb_init_key( blake2xb_state *S, const size_t outlen, const void *key, size_t keylen );
       -  int blake2xb_update( blake2xb_state *S, const void *in, size_t inlen );
       -  int blake2xb_final(blake2xb_state *S, void *out, size_t outlen);
       -
       -  /* Simple API */
       -  int blake2s( void *out, size_t outlen, const void *in, size_t inlen, const void *key, size_t keylen );
       -  int blake2b( void *out, size_t outlen, const void *in, size_t inlen, const void *key, size_t keylen );
       -
       -  int blake2sp( void *out, size_t outlen, const void *in, size_t inlen, const void *key, size_t keylen );
       -  int blake2bp( void *out, size_t outlen, const void *in, size_t inlen, const void *key, size_t keylen );
       -
       -  int blake2xs( void *out, size_t outlen, const void *in, size_t inlen, const void *key, size_t keylen );
       -  int blake2xb( void *out, size_t outlen, const void *in, size_t inlen, const void *key, size_t keylen );
       -
       -  /* This is simply an alias for blake2b */
       -  int blake2( void *out, size_t outlen, const void *in, size_t inlen, const void *key, size_t keylen );
       -
       -#if defined(__cplusplus)
       -}
       -#endif
       -
       -#endif
 (DIR) diff --git a/blake2b-ref.c b/blake2b-ref.c
       @@ -1,379 +0,0 @@
       -/*
       -   BLAKE2 reference source code package - reference C implementations
       -
       -   Copyright 2012, Samuel Neves <sneves@dei.uc.pt>.  You may use this under the
       -   terms of the CC0, the OpenSSL Licence, or the Apache Public License 2.0, at
       -   your option.  The terms of these licenses can be found at:
       -
       -   - CC0 1.0 Universal : http://creativecommons.org/publicdomain/zero/1.0
       -   - OpenSSL license   : https://www.openssl.org/source/license.html
       -   - Apache 2.0        : http://www.apache.org/licenses/LICENSE-2.0
       -
       -   More information about the BLAKE2 hash function can be found at
       -   https://blake2.net.
       -*/
       -
       -#include <stdint.h>
       -#include <string.h>
       -#include <stdio.h>
       -
       -#include "blake2.h"
       -#include "blake2-impl.h"
       -
       -static const uint64_t blake2b_IV[8] =
       -{
       -  0x6a09e667f3bcc908ULL, 0xbb67ae8584caa73bULL,
       -  0x3c6ef372fe94f82bULL, 0xa54ff53a5f1d36f1ULL,
       -  0x510e527fade682d1ULL, 0x9b05688c2b3e6c1fULL,
       -  0x1f83d9abfb41bd6bULL, 0x5be0cd19137e2179ULL
       -};
       -
       -static const uint8_t blake2b_sigma[12][16] =
       -{
       -  {  0,  1,  2,  3,  4,  5,  6,  7,  8,  9, 10, 11, 12, 13, 14, 15 } ,
       -  { 14, 10,  4,  8,  9, 15, 13,  6,  1, 12,  0,  2, 11,  7,  5,  3 } ,
       -  { 11,  8, 12,  0,  5,  2, 15, 13, 10, 14,  3,  6,  7,  1,  9,  4 } ,
       -  {  7,  9,  3,  1, 13, 12, 11, 14,  2,  6,  5, 10,  4,  0, 15,  8 } ,
       -  {  9,  0,  5,  7,  2,  4, 10, 15, 14,  1, 11, 12,  6,  8,  3, 13 } ,
       -  {  2, 12,  6, 10,  0, 11,  8,  3,  4, 13,  7,  5, 15, 14,  1,  9 } ,
       -  { 12,  5,  1, 15, 14, 13,  4, 10,  0,  7,  6,  3,  9,  2,  8, 11 } ,
       -  { 13, 11,  7, 14, 12,  1,  3,  9,  5,  0, 15,  4,  8,  6,  2, 10 } ,
       -  {  6, 15, 14,  9, 11,  3,  0,  8, 12,  2, 13,  7,  1,  4, 10,  5 } ,
       -  { 10,  2,  8,  4,  7,  6,  1,  5, 15, 11,  9, 14,  3, 12, 13 , 0 } ,
       -  {  0,  1,  2,  3,  4,  5,  6,  7,  8,  9, 10, 11, 12, 13, 14, 15 } ,
       -  { 14, 10,  4,  8,  9, 15, 13,  6,  1, 12,  0,  2, 11,  7,  5,  3 }
       -};
       -
       -
       -static void blake2b_set_lastnode( blake2b_state *S )
       -{
       -  S->f[1] = (uint64_t)-1;
       -}
       -
       -/* Some helper functions, not necessarily useful */
       -static int blake2b_is_lastblock( const blake2b_state *S )
       -{
       -  return S->f[0] != 0;
       -}
       -
       -static void blake2b_set_lastblock( blake2b_state *S )
       -{
       -  if( S->last_node ) blake2b_set_lastnode( S );
       -
       -  S->f[0] = (uint64_t)-1;
       -}
       -
       -static void blake2b_increment_counter( blake2b_state *S, const uint64_t inc )
       -{
       -  S->t[0] += inc;
       -  S->t[1] += ( S->t[0] < inc );
       -}
       -
       -static void blake2b_init0( blake2b_state *S )
       -{
       -  size_t i;
       -  memset( S, 0, sizeof( blake2b_state ) );
       -
       -  for( i = 0; i < 8; ++i ) S->h[i] = blake2b_IV[i];
       -}
       -
       -/* init xors IV with input parameter block */
       -int blake2b_init_param( blake2b_state *S, const blake2b_param *P )
       -{
       -  const uint8_t *p = ( const uint8_t * )( P );
       -  size_t i;
       -
       -  blake2b_init0( S );
       -
       -  /* IV XOR ParamBlock */
       -  for( i = 0; i < 8; ++i )
       -    S->h[i] ^= load64( p + sizeof( S->h[i] ) * i );
       -
       -  S->outlen = P->digest_length;
       -  return 0;
       -}
       -
       -
       -
       -int blake2b_init( blake2b_state *S, size_t outlen )
       -{
       -  blake2b_param P[1];
       -
       -  if ( ( !outlen ) || ( outlen > BLAKE2B_OUTBYTES ) ) return -1;
       -
       -  P->digest_length = (uint8_t)outlen;
       -  P->key_length    = 0;
       -  P->fanout        = 1;
       -  P->depth         = 1;
       -  store32( &P->leaf_length, 0 );
       -  store32( &P->node_offset, 0 );
       -  store32( &P->xof_length, 0 );
       -  P->node_depth    = 0;
       -  P->inner_length  = 0;
       -  memset( P->reserved, 0, sizeof( P->reserved ) );
       -  memset( P->salt,     0, sizeof( P->salt ) );
       -  memset( P->personal, 0, sizeof( P->personal ) );
       -  return blake2b_init_param( S, P );
       -}
       -
       -
       -int blake2b_init_key( blake2b_state *S, size_t outlen, const void *key, size_t keylen )
       -{
       -  blake2b_param P[1];
       -
       -  if ( ( !outlen ) || ( outlen > BLAKE2B_OUTBYTES ) ) return -1;
       -
       -  if ( !key || !keylen || keylen > BLAKE2B_KEYBYTES ) return -1;
       -
       -  P->digest_length = (uint8_t)outlen;
       -  P->key_length    = (uint8_t)keylen;
       -  P->fanout        = 1;
       -  P->depth         = 1;
       -  store32( &P->leaf_length, 0 );
       -  store32( &P->node_offset, 0 );
       -  store32( &P->xof_length, 0 );
       -  P->node_depth    = 0;
       -  P->inner_length  = 0;
       -  memset( P->reserved, 0, sizeof( P->reserved ) );
       -  memset( P->salt,     0, sizeof( P->salt ) );
       -  memset( P->personal, 0, sizeof( P->personal ) );
       -
       -  if( blake2b_init_param( S, P ) < 0 ) return -1;
       -
       -  {
       -    uint8_t block[BLAKE2B_BLOCKBYTES];
       -    memset( block, 0, BLAKE2B_BLOCKBYTES );
       -    memcpy( block, key, keylen );
       -    blake2b_update( S, block, BLAKE2B_BLOCKBYTES );
       -    secure_zero_memory( block, BLAKE2B_BLOCKBYTES ); /* Burn the key from stack */
       -  }
       -  return 0;
       -}
       -
       -#define G(r,i,a,b,c,d)                      \
       -  do {                                      \
       -    a = a + b + m[blake2b_sigma[r][2*i+0]]; \
       -    d = rotr64(d ^ a, 32);                  \
       -    c = c + d;                              \
       -    b = rotr64(b ^ c, 24);                  \
       -    a = a + b + m[blake2b_sigma[r][2*i+1]]; \
       -    d = rotr64(d ^ a, 16);                  \
       -    c = c + d;                              \
       -    b = rotr64(b ^ c, 63);                  \
       -  } while(0)
       -
       -#define ROUND(r)                    \
       -  do {                              \
       -    G(r,0,v[ 0],v[ 4],v[ 8],v[12]); \
       -    G(r,1,v[ 1],v[ 5],v[ 9],v[13]); \
       -    G(r,2,v[ 2],v[ 6],v[10],v[14]); \
       -    G(r,3,v[ 3],v[ 7],v[11],v[15]); \
       -    G(r,4,v[ 0],v[ 5],v[10],v[15]); \
       -    G(r,5,v[ 1],v[ 6],v[11],v[12]); \
       -    G(r,6,v[ 2],v[ 7],v[ 8],v[13]); \
       -    G(r,7,v[ 3],v[ 4],v[ 9],v[14]); \
       -  } while(0)
       -
       -static void blake2b_compress( blake2b_state *S, const uint8_t block[BLAKE2B_BLOCKBYTES] )
       -{
       -  uint64_t m[16];
       -  uint64_t v[16];
       -  size_t i;
       -
       -  for( i = 0; i < 16; ++i ) {
       -    m[i] = load64( block + i * sizeof( m[i] ) );
       -  }
       -
       -  for( i = 0; i < 8; ++i ) {
       -    v[i] = S->h[i];
       -  }
       -
       -  v[ 8] = blake2b_IV[0];
       -  v[ 9] = blake2b_IV[1];
       -  v[10] = blake2b_IV[2];
       -  v[11] = blake2b_IV[3];
       -  v[12] = blake2b_IV[4] ^ S->t[0];
       -  v[13] = blake2b_IV[5] ^ S->t[1];
       -  v[14] = blake2b_IV[6] ^ S->f[0];
       -  v[15] = blake2b_IV[7] ^ S->f[1];
       -
       -  ROUND( 0 );
       -  ROUND( 1 );
       -  ROUND( 2 );
       -  ROUND( 3 );
       -  ROUND( 4 );
       -  ROUND( 5 );
       -  ROUND( 6 );
       -  ROUND( 7 );
       -  ROUND( 8 );
       -  ROUND( 9 );
       -  ROUND( 10 );
       -  ROUND( 11 );
       -
       -  for( i = 0; i < 8; ++i ) {
       -    S->h[i] = S->h[i] ^ v[i] ^ v[i + 8];
       -  }
       -}
       -
       -#undef G
       -#undef ROUND
       -
       -int blake2b_update( blake2b_state *S, const void *pin, size_t inlen )
       -{
       -  const unsigned char * in = (const unsigned char *)pin;
       -  if( inlen > 0 )
       -  {
       -    size_t left = S->buflen;
       -    size_t fill = BLAKE2B_BLOCKBYTES - left;
       -    if( inlen > fill )
       -    {
       -      S->buflen = 0;
       -      memcpy( S->buf + left, in, fill ); /* Fill buffer */
       -      blake2b_increment_counter( S, BLAKE2B_BLOCKBYTES );
       -      blake2b_compress( S, S->buf ); /* Compress */
       -      in += fill; inlen -= fill;
       -      while(inlen > BLAKE2B_BLOCKBYTES) {
       -        blake2b_increment_counter(S, BLAKE2B_BLOCKBYTES);
       -        blake2b_compress( S, in );
       -        in += BLAKE2B_BLOCKBYTES;
       -        inlen -= BLAKE2B_BLOCKBYTES;
       -      }
       -    }
       -    memcpy( S->buf + S->buflen, in, inlen );
       -    S->buflen += inlen;
       -  }
       -  return 0;
       -}
       -
       -int blake2b_final( blake2b_state *S, void *out, size_t outlen )
       -{
       -  uint8_t buffer[BLAKE2B_OUTBYTES] = {0};
       -  size_t i;
       -
       -  if( out == NULL || outlen < S->outlen )
       -    return -1;
       -
       -  if( blake2b_is_lastblock( S ) )
       -    return -1;
       -
       -  blake2b_increment_counter( S, S->buflen );
       -  blake2b_set_lastblock( S );
       -  memset( S->buf + S->buflen, 0, BLAKE2B_BLOCKBYTES - S->buflen ); /* Padding */
       -  blake2b_compress( S, S->buf );
       -
       -  for( i = 0; i < 8; ++i ) /* Output full hash to temp buffer */
       -    store64( buffer + sizeof( S->h[i] ) * i, S->h[i] );
       -
       -  memcpy( out, buffer, S->outlen );
       -  secure_zero_memory(buffer, sizeof(buffer));
       -  return 0;
       -}
       -
       -/* inlen, at least, should be uint64_t. Others can be size_t. */
       -int blake2b( void *out, size_t outlen, const void *in, size_t inlen, const void *key, size_t keylen )
       -{
       -  blake2b_state S[1];
       -
       -  /* Verify parameters */
       -  if ( NULL == in && inlen > 0 ) return -1;
       -
       -  if ( NULL == out ) return -1;
       -
       -  if( NULL == key && keylen > 0 ) return -1;
       -
       -  if( !outlen || outlen > BLAKE2B_OUTBYTES ) return -1;
       -
       -  if( keylen > BLAKE2B_KEYBYTES ) return -1;
       -
       -  if( keylen > 0 )
       -  {
       -    if( blake2b_init_key( S, outlen, key, keylen ) < 0 ) return -1;
       -  }
       -  else
       -  {
       -    if( blake2b_init( S, outlen ) < 0 ) return -1;
       -  }
       -
       -  blake2b_update( S, ( const uint8_t * )in, inlen );
       -  blake2b_final( S, out, outlen );
       -  return 0;
       -}
       -
       -int blake2( void *out, size_t outlen, const void *in, size_t inlen, const void *key, size_t keylen ) {
       -  return blake2b(out, outlen, in, inlen, key, keylen);
       -}
       -
       -#if defined(SUPERCOP)
       -int crypto_hash( unsigned char *out, unsigned char *in, unsigned long long inlen )
       -{
       -  return blake2b( out, BLAKE2B_OUTBYTES, in, inlen, NULL, 0 );
       -}
       -#endif
       -
       -#if defined(BLAKE2B_SELFTEST)
       -#include <string.h>
       -#include "blake2-kat.h"
       -int main( void )
       -{
       -  uint8_t key[BLAKE2B_KEYBYTES];
       -  uint8_t buf[BLAKE2_KAT_LENGTH];
       -  size_t i, step;
       -
       -  for( i = 0; i < BLAKE2B_KEYBYTES; ++i )
       -    key[i] = ( uint8_t )i;
       -
       -  for( i = 0; i < BLAKE2_KAT_LENGTH; ++i )
       -    buf[i] = ( uint8_t )i;
       -
       -  /* Test simple API */
       -  for( i = 0; i < BLAKE2_KAT_LENGTH; ++i )
       -  {
       -    uint8_t hash[BLAKE2B_OUTBYTES];
       -    blake2b( hash, BLAKE2B_OUTBYTES, buf, i, key, BLAKE2B_KEYBYTES );
       -
       -    if( 0 != memcmp( hash, blake2b_keyed_kat[i], BLAKE2B_OUTBYTES ) )
       -    {
       -      goto fail;
       -    }
       -  }
       -
       -  /* Test streaming API */
       -  for(step = 1; step < BLAKE2B_BLOCKBYTES; ++step) {
       -    for (i = 0; i < BLAKE2_KAT_LENGTH; ++i) {
       -      uint8_t hash[BLAKE2B_OUTBYTES];
       -      blake2b_state S;
       -      uint8_t * p = buf;
       -      size_t mlen = i;
       -      int err = 0;
       -
       -      if( (err = blake2b_init_key(&S, BLAKE2B_OUTBYTES, key, BLAKE2B_KEYBYTES)) < 0 ) {
       -        goto fail;
       -      }
       -
       -      while (mlen >= step) {
       -        if ( (err = blake2b_update(&S, p, step)) < 0 ) {
       -          goto fail;
       -        }
       -        mlen -= step;
       -        p += step;
       -      }
       -      if ( (err = blake2b_update(&S, p, mlen)) < 0) {
       -        goto fail;
       -      }
       -      if ( (err = blake2b_final(&S, hash, BLAKE2B_OUTBYTES)) < 0) {
       -        goto fail;
       -      }
       -
       -      if (0 != memcmp(hash, blake2b_keyed_kat[i], BLAKE2B_OUTBYTES)) {
       -        goto fail;
       -      }
       -    }
       -  }
       -
       -  puts( "ok" );
       -  return 0;
       -fail:
       -  puts("error");
       -  return -1;
       -}
       -#endif
 (DIR) diff --git a/blake2s-ref.c b/blake2s-ref.c
       @@ -1,367 +0,0 @@
       -/*
       -   BLAKE2 reference source code package - reference C implementations
       -
       -   Copyright 2012, Samuel Neves <sneves@dei.uc.pt>.  You may use this under the
       -   terms of the CC0, the OpenSSL Licence, or the Apache Public License 2.0, at
       -   your option.  The terms of these licenses can be found at:
       -
       -   - CC0 1.0 Universal : http://creativecommons.org/publicdomain/zero/1.0
       -   - OpenSSL license   : https://www.openssl.org/source/license.html
       -   - Apache 2.0        : http://www.apache.org/licenses/LICENSE-2.0
       -
       -   More information about the BLAKE2 hash function can be found at
       -   https://blake2.net.
       -*/
       -
       -#include <stdint.h>
       -#include <string.h>
       -#include <stdio.h>
       -
       -#include "blake2.h"
       -#include "blake2-impl.h"
       -
       -static const uint32_t blake2s_IV[8] =
       -{
       -  0x6A09E667UL, 0xBB67AE85UL, 0x3C6EF372UL, 0xA54FF53AUL,
       -  0x510E527FUL, 0x9B05688CUL, 0x1F83D9ABUL, 0x5BE0CD19UL
       -};
       -
       -static const uint8_t blake2s_sigma[10][16] =
       -{
       -  {  0,  1,  2,  3,  4,  5,  6,  7,  8,  9, 10, 11, 12, 13, 14, 15 } ,
       -  { 14, 10,  4,  8,  9, 15, 13,  6,  1, 12,  0,  2, 11,  7,  5,  3 } ,
       -  { 11,  8, 12,  0,  5,  2, 15, 13, 10, 14,  3,  6,  7,  1,  9,  4 } ,
       -  {  7,  9,  3,  1, 13, 12, 11, 14,  2,  6,  5, 10,  4,  0, 15,  8 } ,
       -  {  9,  0,  5,  7,  2,  4, 10, 15, 14,  1, 11, 12,  6,  8,  3, 13 } ,
       -  {  2, 12,  6, 10,  0, 11,  8,  3,  4, 13,  7,  5, 15, 14,  1,  9 } ,
       -  { 12,  5,  1, 15, 14, 13,  4, 10,  0,  7,  6,  3,  9,  2,  8, 11 } ,
       -  { 13, 11,  7, 14, 12,  1,  3,  9,  5,  0, 15,  4,  8,  6,  2, 10 } ,
       -  {  6, 15, 14,  9, 11,  3,  0,  8, 12,  2, 13,  7,  1,  4, 10,  5 } ,
       -  { 10,  2,  8,  4,  7,  6,  1,  5, 15, 11,  9, 14,  3, 12, 13 , 0 } ,
       -};
       -
       -static void blake2s_set_lastnode( blake2s_state *S )
       -{
       -  S->f[1] = (uint32_t)-1;
       -}
       -
       -/* Some helper functions, not necessarily useful */
       -static int blake2s_is_lastblock( const blake2s_state *S )
       -{
       -  return S->f[0] != 0;
       -}
       -
       -static void blake2s_set_lastblock( blake2s_state *S )
       -{
       -  if( S->last_node ) blake2s_set_lastnode( S );
       -
       -  S->f[0] = (uint32_t)-1;
       -}
       -
       -static void blake2s_increment_counter( blake2s_state *S, const uint32_t inc )
       -{
       -  S->t[0] += inc;
       -  S->t[1] += ( S->t[0] < inc );
       -}
       -
       -static void blake2s_init0( blake2s_state *S )
       -{
       -  size_t i;
       -  memset( S, 0, sizeof( blake2s_state ) );
       -
       -  for( i = 0; i < 8; ++i ) S->h[i] = blake2s_IV[i];
       -}
       -
       -/* init2 xors IV with input parameter block */
       -int blake2s_init_param( blake2s_state *S, const blake2s_param *P )
       -{
       -  const unsigned char *p = ( const unsigned char * )( P );
       -  size_t i;
       -
       -  blake2s_init0( S );
       -
       -  /* IV XOR ParamBlock */
       -  for( i = 0; i < 8; ++i )
       -    S->h[i] ^= load32( &p[i * 4] );
       -
       -  S->outlen = P->digest_length;
       -  return 0;
       -}
       -
       -
       -/* Sequential blake2s initialization */
       -int blake2s_init( blake2s_state *S, size_t outlen )
       -{
       -  blake2s_param P[1];
       -
       -  /* Move interval verification here? */
       -  if ( ( !outlen ) || ( outlen > BLAKE2S_OUTBYTES ) ) return -1;
       -
       -  P->digest_length = (uint8_t)outlen;
       -  P->key_length    = 0;
       -  P->fanout        = 1;
       -  P->depth         = 1;
       -  store32( &P->leaf_length, 0 );
       -  store32( &P->node_offset, 0 );
       -  store16( &P->xof_length, 0 );
       -  P->node_depth    = 0;
       -  P->inner_length  = 0;
       -  /* memset(P->reserved, 0, sizeof(P->reserved) ); */
       -  memset( P->salt,     0, sizeof( P->salt ) );
       -  memset( P->personal, 0, sizeof( P->personal ) );
       -  return blake2s_init_param( S, P );
       -}
       -
       -int blake2s_init_key( blake2s_state *S, size_t outlen, const void *key, size_t keylen )
       -{
       -  blake2s_param P[1];
       -
       -  if ( ( !outlen ) || ( outlen > BLAKE2S_OUTBYTES ) ) return -1;
       -
       -  if ( !key || !keylen || keylen > BLAKE2S_KEYBYTES ) return -1;
       -
       -  P->digest_length = (uint8_t)outlen;
       -  P->key_length    = (uint8_t)keylen;
       -  P->fanout        = 1;
       -  P->depth         = 1;
       -  store32( &P->leaf_length, 0 );
       -  store32( &P->node_offset, 0 );
       -  store16( &P->xof_length, 0 );
       -  P->node_depth    = 0;
       -  P->inner_length  = 0;
       -  /* memset(P->reserved, 0, sizeof(P->reserved) ); */
       -  memset( P->salt,     0, sizeof( P->salt ) );
       -  memset( P->personal, 0, sizeof( P->personal ) );
       -
       -  if( blake2s_init_param( S, P ) < 0 ) return -1;
       -
       -  {
       -    uint8_t block[BLAKE2S_BLOCKBYTES];
       -    memset( block, 0, BLAKE2S_BLOCKBYTES );
       -    memcpy( block, key, keylen );
       -    blake2s_update( S, block, BLAKE2S_BLOCKBYTES );
       -    secure_zero_memory( block, BLAKE2S_BLOCKBYTES ); /* Burn the key from stack */
       -  }
       -  return 0;
       -}
       -
       -#define G(r,i,a,b,c,d)                      \
       -  do {                                      \
       -    a = a + b + m[blake2s_sigma[r][2*i+0]]; \
       -    d = rotr32(d ^ a, 16);                  \
       -    c = c + d;                              \
       -    b = rotr32(b ^ c, 12);                  \
       -    a = a + b + m[blake2s_sigma[r][2*i+1]]; \
       -    d = rotr32(d ^ a, 8);                   \
       -    c = c + d;                              \
       -    b = rotr32(b ^ c, 7);                   \
       -  } while(0)
       -
       -#define ROUND(r)                    \
       -  do {                              \
       -    G(r,0,v[ 0],v[ 4],v[ 8],v[12]); \
       -    G(r,1,v[ 1],v[ 5],v[ 9],v[13]); \
       -    G(r,2,v[ 2],v[ 6],v[10],v[14]); \
       -    G(r,3,v[ 3],v[ 7],v[11],v[15]); \
       -    G(r,4,v[ 0],v[ 5],v[10],v[15]); \
       -    G(r,5,v[ 1],v[ 6],v[11],v[12]); \
       -    G(r,6,v[ 2],v[ 7],v[ 8],v[13]); \
       -    G(r,7,v[ 3],v[ 4],v[ 9],v[14]); \
       -  } while(0)
       -
       -static void blake2s_compress( blake2s_state *S, const uint8_t in[BLAKE2S_BLOCKBYTES] )
       -{
       -  uint32_t m[16];
       -  uint32_t v[16];
       -  size_t i;
       -
       -  for( i = 0; i < 16; ++i ) {
       -    m[i] = load32( in + i * sizeof( m[i] ) );
       -  }
       -
       -  for( i = 0; i < 8; ++i ) {
       -    v[i] = S->h[i];
       -  }
       -
       -  v[ 8] = blake2s_IV[0];
       -  v[ 9] = blake2s_IV[1];
       -  v[10] = blake2s_IV[2];
       -  v[11] = blake2s_IV[3];
       -  v[12] = S->t[0] ^ blake2s_IV[4];
       -  v[13] = S->t[1] ^ blake2s_IV[5];
       -  v[14] = S->f[0] ^ blake2s_IV[6];
       -  v[15] = S->f[1] ^ blake2s_IV[7];
       -
       -  ROUND( 0 );
       -  ROUND( 1 );
       -  ROUND( 2 );
       -  ROUND( 3 );
       -  ROUND( 4 );
       -  ROUND( 5 );
       -  ROUND( 6 );
       -  ROUND( 7 );
       -  ROUND( 8 );
       -  ROUND( 9 );
       -
       -  for( i = 0; i < 8; ++i ) {
       -    S->h[i] = S->h[i] ^ v[i] ^ v[i + 8];
       -  }
       -}
       -
       -#undef G
       -#undef ROUND
       -
       -int blake2s_update( blake2s_state *S, const void *pin, size_t inlen )
       -{
       -  const unsigned char * in = (const unsigned char *)pin;
       -  if( inlen > 0 )
       -  {
       -    size_t left = S->buflen;
       -    size_t fill = BLAKE2S_BLOCKBYTES - left;
       -    if( inlen > fill )
       -    {
       -      S->buflen = 0;
       -      memcpy( S->buf + left, in, fill ); /* Fill buffer */
       -      blake2s_increment_counter( S, BLAKE2S_BLOCKBYTES );
       -      blake2s_compress( S, S->buf ); /* Compress */
       -      in += fill; inlen -= fill;
       -      while(inlen > BLAKE2S_BLOCKBYTES) {
       -        blake2s_increment_counter(S, BLAKE2S_BLOCKBYTES);
       -        blake2s_compress( S, in );
       -        in += BLAKE2S_BLOCKBYTES;
       -        inlen -= BLAKE2S_BLOCKBYTES;
       -      }
       -    }
       -    memcpy( S->buf + S->buflen, in, inlen );
       -    S->buflen += inlen;
       -  }
       -  return 0;
       -}
       -
       -int blake2s_final( blake2s_state *S, void *out, size_t outlen )
       -{
       -  uint8_t buffer[BLAKE2S_OUTBYTES] = {0};
       -  size_t i;
       -
       -  if( out == NULL || outlen < S->outlen )
       -    return -1;
       -
       -  if( blake2s_is_lastblock( S ) )
       -    return -1;
       -
       -  blake2s_increment_counter( S, ( uint32_t )S->buflen );
       -  blake2s_set_lastblock( S );
       -  memset( S->buf + S->buflen, 0, BLAKE2S_BLOCKBYTES - S->buflen ); /* Padding */
       -  blake2s_compress( S, S->buf );
       -
       -  for( i = 0; i < 8; ++i ) /* Output full hash to temp buffer */
       -    store32( buffer + sizeof( S->h[i] ) * i, S->h[i] );
       -
       -  memcpy( out, buffer, outlen );
       -  secure_zero_memory(buffer, sizeof(buffer));
       -  return 0;
       -}
       -
       -int blake2s( void *out, size_t outlen, const void *in, size_t inlen, const void *key, size_t keylen )
       -{
       -  blake2s_state S[1];
       -
       -  /* Verify parameters */
       -  if ( NULL == in && inlen > 0 ) return -1;
       -
       -  if ( NULL == out ) return -1;
       -
       -  if ( NULL == key && keylen > 0) return -1;
       -
       -  if( !outlen || outlen > BLAKE2S_OUTBYTES ) return -1;
       -
       -  if( keylen > BLAKE2S_KEYBYTES ) return -1;
       -
       -  if( keylen > 0 )
       -  {
       -    if( blake2s_init_key( S, outlen, key, keylen ) < 0 ) return -1;
       -  }
       -  else
       -  {
       -    if( blake2s_init( S, outlen ) < 0 ) return -1;
       -  }
       -
       -  blake2s_update( S, ( const uint8_t * )in, inlen );
       -  blake2s_final( S, out, outlen );
       -  return 0;
       -}
       -
       -#if defined(SUPERCOP)
       -int crypto_hash( unsigned char *out, unsigned char *in, unsigned long long inlen )
       -{
       -  return blake2s( out, BLAKE2S_OUTBYTES, in, inlen, NULL, 0 );
       -}
       -#endif
       -
       -#if defined(BLAKE2S_SELFTEST)
       -#include <string.h>
       -#include "blake2-kat.h"
       -int main( void )
       -{
       -  uint8_t key[BLAKE2S_KEYBYTES];
       -  uint8_t buf[BLAKE2_KAT_LENGTH];
       -  size_t i, step;
       -
       -  for( i = 0; i < BLAKE2S_KEYBYTES; ++i )
       -    key[i] = ( uint8_t )i;
       -
       -  for( i = 0; i < BLAKE2_KAT_LENGTH; ++i )
       -    buf[i] = ( uint8_t )i;
       -
       -  /* Test simple API */
       -  for( i = 0; i < BLAKE2_KAT_LENGTH; ++i )
       -  {
       -    uint8_t hash[BLAKE2S_OUTBYTES];
       -    blake2s( hash, BLAKE2S_OUTBYTES, buf, i, key, BLAKE2S_KEYBYTES );
       -
       -    if( 0 != memcmp( hash, blake2s_keyed_kat[i], BLAKE2S_OUTBYTES ) )
       -    {
       -      goto fail;
       -    }
       -  }
       -
       -  /* Test streaming API */
       -  for(step = 1; step < BLAKE2S_BLOCKBYTES; ++step) {
       -    for (i = 0; i < BLAKE2_KAT_LENGTH; ++i) {
       -      uint8_t hash[BLAKE2S_OUTBYTES];
       -      blake2s_state S;
       -      uint8_t * p = buf;
       -      size_t mlen = i;
       -      int err = 0;
       -
       -      if( (err = blake2s_init_key(&S, BLAKE2S_OUTBYTES, key, BLAKE2S_KEYBYTES)) < 0 ) {
       -        goto fail;
       -      }
       -
       -      while (mlen >= step) {
       -        if ( (err = blake2s_update(&S, p, step)) < 0 ) {
       -          goto fail;
       -        }
       -        mlen -= step;
       -        p += step;
       -      }
       -      if ( (err = blake2s_update(&S, p, mlen)) < 0) {
       -        goto fail;
       -      }
       -      if ( (err = blake2s_final(&S, hash, BLAKE2S_OUTBYTES)) < 0) {
       -        goto fail;
       -      }
       -
       -      if (0 != memcmp(hash, blake2s_keyed_kat[i], BLAKE2S_OUTBYTES)) {
       -        goto fail;
       -      }
       -    }
       -  }
       -
       -  puts( "ok" );
       -  return 0;
       -fail:
       -  puts("error");
       -  return -1;
       -}
       -#endif
 (DIR) diff --git a/block.c b/block.c
       @@ -145,7 +145,7 @@ bclose(struct bctx *bctx)
        struct bparam *
        bparamdef(void)
        {
       -        static struct bparam bpar = { .calgo = "snappy", .halgo = "blake2b" };
       +        static struct bparam bpar = { .calgo = "snappy" };
        
                return &bpar;
        }
 (DIR) diff --git a/block.h b/block.h
       @@ -11,7 +11,6 @@ struct bctx {
        
        struct bparam {
                char *calgo;
       -        char *halgo;
        };
        
        /*
 (DIR) diff --git a/bstorage.c b/bstorage.c
       @@ -20,7 +20,8 @@
        #include <string.h>
        #include <unistd.h>
        
       -#include "blake2.h"
       +#include <sodium.h>
       +
        #include "block.h"
        #include "config.h"
        #include "queue.h"
       @@ -34,19 +35,14 @@
        #define VMINMASK        0xff
        #define VMAJSHIFT        8
        #define VMAJMASK        0xff
       -#define HALGOSHIFT        19
       -#define HALGOMASK        0x7
        #define CALGOSHIFT        16
        #define CALGOMASK        0x7
        #define CNONETYPE        0
        #define CSNAPPYTYPE        1
       -#define HBLAKE2BTYPE        0
       -#define HBLAKE2STYPE        1
        #define BHDRSIZE        (NBHDRMAGIC + 8 + 8)
        
        /* block descriptor flags */
       -#define BD2BTYPE        0x100
       -#define BD2STYPE        0x101
       +#define BDTYPE                0x100
        #define BDSIZE                (8 + 8 + 8 + 8 + (MDSIZE))
        
        /* misc helpers */
       @@ -86,7 +82,7 @@ struct bhdr {
        
        /* Block descriptor */
        struct bd {
       -        uint16_t type;                /* type of hashing algorithm used */
       +        uint16_t type;                /* BDTYPE */
                uint8_t reserved[6];        /* should be set to 0 when writing */
                uint64_t offset;        /* block offset */
                uint64_t size;                /* block size */
       @@ -104,7 +100,6 @@ struct sctx {
                struct bhdr bhdr;        /* block header entry */
                int fd;                /* underlying storage file descriptor */
                int rdonly;        /* when set to 1, the bssync() operation is a no-op */
       -        int type;        /* hash algorithm for new blocks */
        };
        
        static int
       @@ -123,27 +118,9 @@ static RB_PROTOTYPE(bdcache, bd, rbe, bd_cmp)
        static RB_GENERATE(bdcache, bd, rbe, bd_cmp)
        
        static int
       -b2bhash(void *buf, size_t n, unsigned char *md)
       -{
       -        blake2b_state ctx;
       -
       -        if (blake2b_init(&ctx, MDSIZE) < 0)
       -                return -1;
       -        if (blake2b_update(&ctx, buf, n) < 0)
       -                return -1;
       -        return blake2b_final(&ctx, md, MDSIZE);
       -}
       -
       -static int
       -b2shash(void *buf, size_t n, unsigned char *md)
       +bhash(void *buf, size_t n, unsigned char *md)
        {
       -        blake2s_state ctx;
       -
       -        if (blake2s_init(&ctx, MDSIZE) < 0)
       -                return -1;
       -        if (blake2s_update(&ctx, buf, n) < 0)
       -                return -1;
       -        return blake2s_final(&ctx, md, MDSIZE);
       +        return crypto_generichash(md, MDSIZE, buf, n, NULL, 0);
        }
        
        /* Read block header */
       @@ -245,7 +222,7 @@ loadbd(struct sctx *sctx)
                        return -1;
                }
        
       -        if (bd->type != BD2BTYPE && bd->type != BD2STYPE) {
       +        if (bd->type != BDTYPE) {
                        free(bd);
                        return -1;
                }
       @@ -340,18 +317,6 @@ bscreat(struct bctx *bctx, char *path, int mode, struct bparam *bpar)
                        return -1;
                }
        
       -        /* Set hash type */
       -        if (strcmp(bpar->halgo, "blake2b") == 0) {
       -                bhdr->flags |= HBLAKE2BTYPE << HALGOSHIFT;
       -                sctx->type = BD2BTYPE;
       -        } else if (strcmp(bpar->halgo, "blake2s") == 0) {
       -                bhdr->flags |= HBLAKE2STYPE << HALGOSHIFT;
       -                sctx->type = BD2STYPE;
       -        } else {
       -                free(sctx);
       -                close(fd);
       -                return -1;
       -        }
                bhdr->nbd = 0;
                sctx->fd = fd;
        
       @@ -370,7 +335,7 @@ bsopen(struct bctx *bctx, char *path, int flags, int mode, struct bparam *bpar)
        {
                struct sctx *sctx;
                struct bhdr *bhdr;
       -        int fd, calgo, halgo;
       +        int fd, calgo;
        
                switch (flags) {
                case B_READ:
       @@ -434,23 +399,6 @@ bsopen(struct bctx *bctx, char *path, int flags, int mode, struct bparam *bpar)
                        return -1;
                }
        
       -        /* Populate bparam hash algo */
       -        halgo = (bhdr->flags >> HALGOSHIFT) & HALGOMASK;
       -        switch (halgo) {
       -        case HBLAKE2BTYPE:
       -                bpar->halgo = "blake2b";
       -                sctx->type = BD2BTYPE;
       -                break;
       -        case HBLAKE2STYPE:
       -                bpar->halgo = "blake2s";
       -                sctx->type = BD2STYPE;
       -                break;
       -        default:
       -                free(sctx);
       -                close(fd);
       -                return -1;
       -        }
       -
                sctx->fd = fd;
                sctx->rdonly = flags == O_RDONLY;
        
       @@ -475,25 +423,15 @@ bsput(struct bctx *bctx, void *buf, size_t n, unsigned char *md)
                struct bd key, *bd;
                off_t offs;
        
       -        sctx = bctx->sctx;
       -        switch (sctx->type) {
       -        case BD2BTYPE:
       -                if (b2bhash(buf, n, key.md) < 0)
       -                        return -1;
       -                break;
       -        case BD2STYPE:
       -                if (b2shash(buf, n, key.md) < 0)
       -                        return -1;
       -                break;
       -        default:
       +        if (bhash(buf, n, key.md) < 0)
                        return -1;
       -        }
        
                /*
                 * If the block is already present in the cache
                 * just increment the reference count and write back
                 * the block descriptor associated for that block.
                 */
       +        sctx = bctx->sctx;
                bd = RB_FIND(bdcache, &sctx->bdcache, &key);
                if (bd != NULL) {
                        off_t bdoffs;
       @@ -521,7 +459,7 @@ bsput(struct bctx *bctx, void *buf, size_t n, unsigned char *md)
                bd = calloc(1, sizeof(*bd));
                if (bd == NULL)
                        return -1;
       -        bd->type = sctx->type;
       +        bd->type = BDTYPE;
                bd->offset = offs + BDSIZE;
                bd->size = n;
                bd->refcnt = 1;
       @@ -684,24 +622,10 @@ bscheck(struct bctx *bctx, unsigned char *md)
                        return -1;
                }
        
       -        switch (bd->type) {
       -        case BD2BTYPE:
       -                if (b2bhash(buf, bd->size, key.md) < 0) {
       -                        free(buf);
       -                        return -1;
       -                }
       -                break;
       -        case BD2STYPE:
       -                if (b2shash(buf, bd->size, key.md) < 0) {
       -                        free(buf);
       -                        return -1;
       -                }
       -                break;
       -        default:
       +        if (bhash(buf, bd->size, key.md) < 0) {
                        free(buf);
                        return -1;
                }
       -        free(buf);
        
                if (memcmp(key.md, md, MDSIZE) != 0)
                        return -1;
 (DIR) diff --git a/dup-init.1 b/dup-init.1
       @@ -7,7 +7,6 @@
        .Sh SYNOPSIS
        .Nm dup-init
        .Op Fl v
       -.Op Fl H Ar hash
        .Op Fl Z Ar compressor
        .Op repo
        .Sh DESCRIPTION
       @@ -18,11 +17,6 @@ If no
        is specified the current working directory is used.
        .Sh OPTIONS
        .Bl -tag -width "-Z compressor"
       -.It Fl H Ar hash
       -The cryptographic hash function used to identify
       -unique blocks in the store.
       -The supported hash functions are blake2b and blake2s.
       -By default blake2b is used.
        .It Fl Z Ar compressor
        The compressor function used to compress the blocks
        in the store.
 (DIR) diff --git a/dup-init.c b/dup-init.c
       @@ -17,7 +17,7 @@ char *argv0;
        static void
        usage(void)
        {
       -        fprintf(stderr, "usage: %s [-v] [-H hash] [-Z compressor] [repo]\n", argv0);
       +        fprintf(stderr, "usage: %s [-v] [-Z compressor] [repo]\n", argv0);
                exit(1);
        }
        
       @@ -29,12 +29,8 @@ main(int argc, char *argv[])
                char *repo;
        
                bpar.calgo = bparamdef()->calgo;
       -        bpar.halgo = bparamdef()->halgo;
        
                ARGBEGIN {
       -        case 'H':
       -                bpar.halgo = EARGF(usage());
       -                break;
                case 'Z':
                        bpar.calgo = EARGF(usage());
                        break;
 (DIR) diff --git a/test006 b/test006
       @@ -1,16 +0,0 @@
       -#!/bin/sh
       -set -ex
       -
       -repo=`mktemp -d`
       -data=`mktemp`
       -dd if=/dev/urandom of="$data" bs=1M count=64
       -./dup-init -H blake2s "$repo"
       -./dup-pack -r "$repo" snap0 < "$data"
       -./dup-pack -r "$repo" snap1 < "$data"
       -du -sh "$repo"
       -sum0=`sha1sum "$data" | awk '{print $1}'`
       -sum1=`./dup-unpack -r "$repo" snap0 | sha1sum | awk '{print $1}'`
       -sum2=`./dup-unpack -r "$repo" snap1 | sha1sum | awk '{print $1}'`
       -[ "$sum0" = "$sum1" ]
       -[ "$sum0" = "$sum2" ]
       -rm -rf "$repo" "$data"