Add the ability to clone MAC states

src/aegis128l/aegis128l.c

@@ -214,6 +214,12 @@ aegis128l_mac_verify(aegis128l_state *st_, const uint8_t *mac, size_t maclen)
     }
 }
 
+void
+aegis128l_mac_state_clone(aegis128l_state *dst, const aegis128l_state *src)
+{
+    implementation->state_clone(dst, src);
+}
+
 int
 aegis128l_pick_best_implementation(void)
 {

src/aegis128l/aegis128l_aesni.c

@@ -65,6 +65,7 @@ struct aegis128l_implementation aegis128l_aesni_implementation = {
     .state_decrypt_detached_final  = state_decrypt_detached_final,
     .state_mac_update              = state_mac_update,
     .state_mac_final               = state_mac_final,
+    .state_clone                   = state_clone,
 };
 
 #    ifdef __clang__

src/aegis128l/aegis128l_armcrypto.c

@@ -69,6 +69,7 @@ struct aegis128l_implementation aegis128l_armcrypto_implementation = {
     .state_decrypt_detached_final  = state_decrypt_detached_final,
     .state_mac_update              = state_mac_update,
     .state_mac_final               = state_mac_final,
+    .state_clone                   = state_clone,
 };
 
 #    ifdef __clang__

src/aegis128l/aegis128l_common.h

@@ -573,4 +573,15 @@ state_mac_final(aegis128l_state *st_, uint8_t *mac, size_t maclen)
     aegis128l_mac(mac, maclen, st->adlen, 0, st->state);
 
     return 0;
+}
+
+static void
+state_clone(aegis128l_state *dst, const aegis128l_state *src)
+{
+    _aegis128l_state *const dst_ =
+        (_aegis128l_state *) ((((uintptr_t) &dst->opaque) + (RATE - 1)) & ~(uintptr_t) (RATE - 1));
+    const _aegis128l_state *const src_ =
+        (const _aegis128l_state *) ((((uintptr_t) &src->opaque) + (RATE - 1)) &
+                                    ~(uintptr_t) (RATE - 1));
+    *dst_ = *src_;
 }

src/aegis128l/aegis128l_soft.c

@@ -59,6 +59,7 @@ struct aegis128l_implementation aegis128l_soft_implementation = {
     .state_decrypt_detached_final  = state_decrypt_detached_final,
     .state_mac_update              = state_mac_update,
     .state_mac_final               = state_mac_final,
+    .state_clone                   = state_clone,
 };
 
 #endif

src/aegis128l/implementations.h

@@ -31,6 +31,7 @@ typedef struct aegis128l_implementation {
                                         size_t *written, const uint8_t *mac, size_t maclen);
     int (*state_mac_update)(aegis128l_state *st_, const uint8_t *ad, size_t adlen);
     int (*state_mac_final)(aegis128l_state *st_, uint8_t *mac, size_t maclen);
+    void (*state_clone)(aegis128l_state *dst, const aegis128l_state *src);
 } aegis128l_implementation;
 
 #endif

src/aegis128x2/aegis128x2.c

@@ -215,6 +215,12 @@ aegis128x2_mac_verify(aegis128x2_state *st_, const uint8_t *mac, size_t maclen)
     }
 }
 
+void
+aegis128x2_mac_state_clone(aegis128x2_state *dst, const aegis128x2_state *src)
+{
+    implementation->state_clone(dst, src);
+}
+
 int
 aegis128x2_pick_best_implementation(void)
 {

src/aegis128x2/aegis128x2_aesni.c

@@ -100,6 +100,7 @@ struct aegis128x2_implementation aegis128x2_aesni_implementation = {
     .state_decrypt_detached_final  = state_decrypt_detached_final,
     .state_mac_update              = state_mac_update,
     .state_mac_final               = state_mac_final,
+    .state_clone                   = state_clone,
 };
 
 #    ifdef __clang__

src/aegis128x2/aegis128x2_armcrypto.c

@@ -103,6 +103,7 @@ struct aegis128x2_implementation aegis128x2_armcrypto_implementation = {
     .state_decrypt_detached_final  = state_decrypt_detached_final,
     .state_mac_update              = state_mac_update,
     .state_mac_final               = state_mac_final,
+    .state_clone                   = state_clone,
 };
 
 #    ifdef __clang__

src/aegis128x2/aegis128x2_avx2.c

@@ -68,6 +68,7 @@ struct aegis128x2_implementation aegis128x2_avx2_implementation = {
     .state_decrypt_detached_final  = state_decrypt_detached_final,
     .state_mac_update              = state_mac_update,
     .state_mac_final               = state_mac_final,
+    .state_clone                   = state_clone,
 };
 
 #        ifdef __clang__

src/aegis128x2/aegis128x2_common.h

@@ -607,4 +607,15 @@ state_mac_final(aegis128x2_state *st_, uint8_t *mac, size_t maclen)
     aegis128x2_mac(mac, maclen, st->adlen, 0, st->state);
 
     return 0;
+}
+
+static void
+state_clone(aegis128x2_state *dst, const aegis128x2_state *src)
+{
+    _aegis128x2_state *const dst_ =
+        (_aegis128x2_state *) ((((uintptr_t) &dst->opaque) + (RATE - 1)) & ~(uintptr_t) (RATE - 1));
+    const _aegis128x2_state *const src_ =
+        (const _aegis128x2_state *) ((((uintptr_t) &src->opaque) + (RATE - 1)) &
+                                     ~(uintptr_t) (RATE - 1));
+    *dst_ = *src_;
 }

src/aegis128x2/aegis128x2_soft.c

@@ -92,6 +92,7 @@ struct aegis128x2_implementation aegis128x2_soft_implementation = {
     .state_decrypt_detached_final  = state_decrypt_detached_final,
     .state_mac_update              = state_mac_update,
     .state_mac_final               = state_mac_final,
+    .state_clone                   = state_clone,
 };
 
 #endif

src/aegis128x2/implementations.h

@@ -31,7 +31,7 @@ typedef struct aegis128x2_implementation {
                                         size_t *written, const uint8_t *mac, size_t maclen);
     int (*state_mac_update)(aegis128x2_state *st_, const uint8_t *ad, size_t adlen);
     int (*state_mac_final)(aegis128x2_state *st_, uint8_t *mac, size_t maclen);
-
+    void (*state_clone)(aegis128x2_state *dst, const aegis128x2_state *src);
 } aegis128x2_implementation;
 
 #endif

src/aegis128x4/aegis128x4.c

@@ -216,6 +216,12 @@ aegis128x4_mac_verify(aegis128x4_state *st_, const uint8_t *mac, size_t maclen)
     }
 }
 
+void
+aegis128x4_mac_state_clone(aegis128x4_state *dst, const aegis128x4_state *src)
+{
+    implementation->state_clone(dst, src);
+}
+
 int
 aegis128x4_pick_best_implementation(void)
 {

src/aegis128x4/aegis128x4_aesni.c

@@ -109,6 +109,7 @@ struct aegis128x4_implementation aegis128x4_aesni_implementation = {
     .state_decrypt_detached_final  = state_decrypt_detached_final,
     .state_mac_update              = state_mac_update,
     .state_mac_final               = state_mac_final,
+    .state_clone                   = state_clone,
 };
 
 #    ifdef __clang__

src/aegis128x4/aegis128x4_armcrypto.c

@@ -111,6 +111,7 @@ struct aegis128x4_implementation aegis128x4_armcrypto_implementation = {
     .state_decrypt_detached_final  = state_decrypt_detached_final,
     .state_mac_update              = state_mac_update,
     .state_mac_final               = state_mac_final,
+    .state_clone                   = state_clone,
 };
 
 #    ifdef __clang__

src/aegis128x4/aegis128x4_avx2.c

@@ -101,6 +101,7 @@ struct aegis128x4_implementation aegis128x4_avx2_implementation = {
     .state_decrypt_detached_final  = state_decrypt_detached_final,
     .state_mac_update              = state_mac_update,
     .state_mac_final               = state_mac_final,
+    .state_clone                   = state_clone,
 };
 
 #        ifdef __clang__

src/aegis128x4/aegis128x4_avx512.c

@@ -74,6 +74,7 @@ struct aegis128x4_implementation aegis128x4_avx512_implementation = {
     .state_decrypt_detached_final  = state_decrypt_detached_final,
     .state_mac_update              = state_mac_update,
     .state_mac_final               = state_mac_final,
+    .state_clone                   = state_clone,
 };
 
 #        ifdef __clang__

src/aegis128x4/aegis128x4_common.h

@@ -622,4 +622,15 @@ state_mac_final(aegis128x4_state *st_, uint8_t *mac, size_t maclen)
     aegis128x4_mac(mac, maclen, st->adlen, 0, st->state);
 
     return 0;
+}
+
+static void
+state_clone(aegis128x4_state *dst, const aegis128x4_state *src)
+{
+    _aegis128x4_state *const dst_ =
+        (_aegis128x4_state *) ((((uintptr_t) &dst->opaque) + (RATE - 1)) & ~(uintptr_t) (RATE - 1));
+    const _aegis128x4_state *const src_ =
+        (const _aegis128x4_state *) ((((uintptr_t) &src->opaque) + (RATE - 1)) &
+                                     ~(uintptr_t) (RATE - 1));
+    *dst_ = *src_;
 }

src/aegis128x4/aegis128x4_soft.c

@@ -100,6 +100,7 @@ struct aegis128x4_implementation aegis128x4_soft_implementation = {
     .state_decrypt_detached_final  = state_decrypt_detached_final,
     .state_mac_update              = state_mac_update,
     .state_mac_final               = state_mac_final,
+    .state_clone                   = state_clone,
 };
 
 #endif

src/aegis128x4/implementations.h

@@ -31,6 +31,7 @@ typedef struct aegis128x4_implementation {
                                         size_t *written, const uint8_t *mac, size_t maclen);
     int (*state_mac_update)(aegis128x4_state *st_, const uint8_t *ad, size_t adlen);
     int (*state_mac_final)(aegis128x4_state *st_, uint8_t *mac, size_t maclen);
+    void (*state_clone)(aegis128x4_state *dst, const aegis128x4_state *src);
 } aegis128x4_implementation;
 
 #endif

src/aegis256/aegis256.c

@@ -214,6 +214,12 @@ aegis256_mac_verify(aegis256_state *st_, const uint8_t *mac, size_t maclen)
     }
 }
 
+void
+aegis256_mac_state_clone(aegis256_state *dst, const aegis256_state *src)
+{
+    implementation->state_clone(dst, src);
+}
+
 int
 aegis256_pick_best_implementation(void)
 {

src/aegis256/aegis256_aesni.c

@@ -60,6 +60,7 @@ struct aegis256_implementation aegis256_aesni_implementation = {
     .state_decrypt_detached_final  = state_decrypt_detached_final,
     .state_mac_update              = state_mac_update,
     .state_mac_final               = state_mac_final,
+    .state_clone                   = state_clone,
 };
 
 #    ifdef __clang__

src/aegis256/aegis256_armcrypto.c

@@ -67,6 +67,7 @@ struct aegis256_implementation aegis256_armcrypto_implementation = {
     .state_decrypt_detached_final  = state_decrypt_detached_final,
     .state_mac_update              = state_mac_update,
     .state_mac_final               = state_mac_final,
+    .state_clone                   = state_clone,
 };
 
 #    ifdef __clang__

src/aegis256/aegis256_common.h

@@ -559,4 +559,15 @@ state_mac_final(aegis256_state *st_, uint8_t *mac, size_t maclen)
     aegis256_mac(mac, maclen, st->adlen, 0, st->state);
 
     return 0;
+}
+
+static void
+state_clone(aegis256_state *dst, const aegis256_state *src)
+{
+    _aegis256_state *const dst_ =
+        (_aegis256_state *) ((((uintptr_t) &dst->opaque) + (RATE - 1)) & ~(uintptr_t) (RATE - 1));
+    const _aegis256_state *const src_ =
+        (const _aegis256_state *) ((((uintptr_t) &src->opaque) + (RATE - 1)) &
+                                   ~(uintptr_t) (RATE - 1));
+    *dst_ = *src_;
 }

src/aegis256/aegis256_soft.c

@@ -54,6 +54,7 @@ struct aegis256_implementation aegis256_soft_implementation = {
     .state_decrypt_detached_final  = state_decrypt_detached_final,
     .state_mac_update              = state_mac_update,
     .state_mac_final               = state_mac_final,
+    .state_clone                   = state_clone,
 };
 
 #endif

src/aegis256/implementations.h

@@ -31,6 +31,7 @@ typedef struct aegis256_implementation {
                                         size_t *written, const uint8_t *mac, size_t maclen);
     int (*state_mac_update)(aegis256_state *st_, const uint8_t *ad, size_t adlen);
     int (*state_mac_final)(aegis256_state *st_, uint8_t *mac, size_t maclen);
+    void (*state_clone)(aegis256_state *dst, const aegis256_state *src);
 } aegis256_implementation;
 
 #endif

src/aegis256x2/aegis256x2.c

@@ -215,6 +215,12 @@ aegis256x2_mac_verify(aegis256x2_state *st_, const uint8_t *mac, size_t maclen)
     }
 }
 
+void
+aegis256x2_mac_state_clone(aegis256x2_state *dst, const aegis256x2_state *src)
+{
+    implementation->state_clone(dst, src);
+}
+
 int
 aegis256x2_pick_best_implementation(void)
 {

src/aegis256x2/aegis256x2_aesni.c

@@ -95,6 +95,7 @@ struct aegis256x2_implementation aegis256x2_aesni_implementation = {
     .state_decrypt_detached_final  = state_decrypt_detached_final,
     .state_mac_update              = state_mac_update,
     .state_mac_final               = state_mac_final,
+    .state_clone                   = state_clone,
 };
 
 #    ifdef __clang__

src/aegis256x2/aegis256x2_armcrypto.c

@@ -101,6 +101,7 @@ struct aegis256x2_implementation aegis256x2_armcrypto_implementation = {
     .state_decrypt_detached_final  = state_decrypt_detached_final,
     .state_mac_update              = state_mac_update,
     .state_mac_final               = state_mac_final,
+    .state_clone                   = state_clone,
 };
 
 #    ifdef __clang__

src/aegis256x2/aegis256x2_avx2.c

@@ -63,6 +63,7 @@ struct aegis256x2_implementation aegis256x2_avx2_implementation = {
     .state_decrypt_detached_final  = state_decrypt_detached_final,
     .state_mac_update              = state_mac_update,
     .state_mac_final               = state_mac_final,
+    .state_clone                   = state_clone,
 };
 
 #        ifdef __clang__

src/aegis256x2/aegis256x2_common.h

@@ -608,4 +608,15 @@ state_mac_final(aegis256x2_state *st_, uint8_t *mac, size_t maclen)
     aegis256x2_mac(mac, maclen, st->adlen, 0, st->state);
 
     return 0;
+}
+
+static void
+state_clone(aegis256x2_state *dst, const aegis256x2_state *src)
+{
+    _aegis256x2_state *const dst_ =
+        (_aegis256x2_state *) ((((uintptr_t) &dst->opaque) + (RATE - 1)) & ~(uintptr_t) (RATE - 1));
+    const _aegis256x2_state *const src_ =
+        (const _aegis256x2_state *) ((((uintptr_t) &src->opaque) + (RATE - 1)) &
+                                     ~(uintptr_t) (RATE - 1));
+    *dst_ = *src_;
 }

src/aegis256x2/aegis256x2_soft.c

@@ -87,6 +87,7 @@ struct aegis256x2_implementation aegis256x2_soft_implementation = {
     .state_decrypt_detached_final  = state_decrypt_detached_final,
     .state_mac_update              = state_mac_update,
     .state_mac_final               = state_mac_final,
+    .state_clone                   = state_clone,
 };
 
 #endif

src/aegis256x2/implementations.h

@@ -31,6 +31,7 @@ typedef struct aegis256x2_implementation {
                                         size_t *written, const uint8_t *mac, size_t maclen);
     int (*state_mac_update)(aegis256x2_state *st_, const uint8_t *ad, size_t adlen);
     int (*state_mac_final)(aegis256x2_state *st_, uint8_t *mac, size_t maclen);
+    void (*state_clone)(aegis256x2_state *dst, const aegis256x2_state *src);
 } aegis256x2_implementation;
 
 #endif

src/aegis256x4/aegis256x4.c

@@ -216,6 +216,12 @@ aegis256x4_mac_verify(aegis256x4_state *st_, const uint8_t *mac, size_t maclen)
     }
 }
 
+void
+aegis256x4_mac_state_clone(aegis256x4_state *dst, const aegis256x4_state *src)
+{
+    implementation->state_clone(dst, src);
+}
+
 int
 aegis256x4_pick_best_implementation(void)
 {

src/aegis256x4/aegis256x4_aesni.c

@@ -104,6 +104,7 @@ struct aegis256x4_implementation aegis256x4_aesni_implementation = {
     .state_decrypt_detached_final  = state_decrypt_detached_final,
     .state_mac_update              = state_mac_update,
     .state_mac_final               = state_mac_final,
+    .state_clone                   = state_clone,
 };
 
 #    ifdef __clang__

src/aegis256x4/aegis256x4_armcrypto.c

@@ -109,6 +109,7 @@ struct aegis256x4_implementation aegis256x4_armcrypto_implementation = {
     .state_decrypt_detached_final  = state_decrypt_detached_final,
     .state_mac_update              = state_mac_update,
     .state_mac_final               = state_mac_final,
+    .state_clone                   = state_clone,
 };
 
 #    ifdef __clang__

src/aegis256x4/aegis256x4_avx2.c

@@ -96,6 +96,7 @@ struct aegis256x4_implementation aegis256x4_avx2_implementation = {
     .state_decrypt_detached_final  = state_decrypt_detached_final,
     .state_mac_update              = state_mac_update,
     .state_mac_final               = state_mac_final,
+    .state_clone                   = state_clone,
 };
 
 #        ifdef __clang__

src/aegis256x4/aegis256x4_avx512.c

@@ -69,6 +69,7 @@ struct aegis256x4_implementation aegis256x4_avx512_implementation = {
     .state_decrypt_detached_final  = state_decrypt_detached_final,
     .state_mac_update              = state_mac_update,
     .state_mac_final               = state_mac_final,
+    .state_clone                   = state_clone,
 };
 
 #        ifdef __clang__