.TH AES 2.SH NAMEsetupAESstate, aesCBCencrypt, aesCBCdecrypt, aesCTRencrypt, aesCTRdecrypt, setupAESXCBCstate, aesXCBCmac - advanced encryption standard (rijndael).SH SYNOPSIS.B #include <u.h>.br.B #include <libc.h>.br.B #include <mp.h>.br.B #include <libsec.h>.PP.in +0.5i.ti -0.5i.Bvoid	aes_encrypt(ulong rk[], int Nr, uchar pt[16], uchar ct[16]);.PP.Bvoid	aes_decrypt(ulong rk[], int Nr, uchar ct[16], uchar pt[16]);.PP.Bvoid	setupAESstate(AESstate *s, uchar key[], int keybytes, uchar *ivec).PP.Bvoid	aesCBCencrypt(uchar *p, int len, AESstate *s).PP.Bvoid	aesCBCdecrypt(uchar *p, int len, AESstate *s).PP.Bvoid	aesCTRencrypt(uchar *p, int len, AESstate *s).PP.Bvoid	aesCTRdecrypt(uchar *p, int len, AESstate *s).PP.Bvoid	setupAESXCBCstate(AESstate *s).PP.Bvoid	aesXCBCmac(uchar *p, int len, AESstate *s).SH DESCRIPTIONAES (a.k.a. Rijndael) has replaced DES as the preferredblock cipher..I Aes_encryptand.I aes_decryptare the block ciphers, corresponding to.IR des (2)'s.IR block_cipher ..IR SetupAESstate ,.IR aesCBCencrypt ,and.I aesCBCdecryptimplement cipher-block-chaining encryption..I AesCTRencryptand.I aesCTRdecryptimplement counter mode, per RFC 3686;they are identical operations..I setupAESXCBCstateand.I aesXCBCmacimplement AES XCBC message authentication, per RFC 3566.All ciphering is performed in place..I Keybytesshould be 16, 24, or 32.The initialization vector.I ivecof.I AESbsizebytes should be random enough to be unlikely to be reusedbut does not need to becryptographically strongly unpredictable..SH SOURCE.B /sys/src/libsec.SH SEE ALSO.I aescbcin.IR secstore (1),.IR mp (2),.IR blowfish (2),.IR des (2),.IR dsa (2),.IR elgamal (2),.IR rc4 (2),.IR rsa (2),.IR sechash (2),.IR prime (2),.IR rand (2).br.B http://csrc.nist.gov/publications/fips/fips197/fips-197.pdf.SH BUGSThe functions.IR aes_encrypt ,.IR aes_decrypt ,.IR aesCTRencrypt ,.IR aesCTRdecrypt ,.IR setupAESXCBCstate ,and.IR aesXCBCmachave not yet been verified by running test vectors through them.