4 files changed, 83 insertions, 0 deletions
diff --git a/src/crypto/cipher/CMakeLists.txt b/src/crypto/cipher/CMakeLists.txt
index 98140f4..a68fece 100644
--- a/src/crypto/cipher/CMakeLists.txt
+++ b/src/crypto/cipher/CMakeLists.txt
@@ -39,6 +39,7 @@ endmacro(fastd_cipher_impl_require)
 add_subdirectory(aes128_ctr)
 add_subdirectory(blowfish_ctr)
 add_subdirectory(null)
+add_subdirectory(salsa20)
 
 
 set(CIPHER_DEFINITIONS "")
diff --git a/src/crypto/cipher/salsa20/CMakeLists.txt b/src/crypto/cipher/salsa20/CMakeLists.txt
new file mode 100644
index 0000000..3d325dc
--- /dev/null
+++ b/src/crypto/cipher/salsa20/CMakeLists.txt
@@ -0,0 +1,2 @@
+fastd_cipher(salsa20)
+add_subdirectory(nacl)
diff --git a/src/crypto/cipher/salsa20/nacl/CMakeLists.txt b/src/crypto/cipher/salsa20/nacl/CMakeLists.txt
new file mode 100644
index 0000000..d76ff34
--- /dev/null
+++ b/src/crypto/cipher/salsa20/nacl/CMakeLists.txt
@@ -0,0 +1,6 @@
+fastd_cipher_impl(salsa20 nacl
+  salsa20_nacl.c
+)
+fastd_cipher_impl_include_directories(salsa20 nacl ${NACL_INCLUDE_DIRS})
+fastd_cipher_impl_link_libraries(salsa20 nacl ${NACL_LIBRARIES})
+fastd_cipher_impl_require(salsa20 nacl NACL)
diff --git a/src/crypto/cipher/salsa20/nacl/salsa20_nacl.c b/src/crypto/cipher/salsa20/nacl/salsa20_nacl.c
new file mode 100644
index 0000000..cb78afc
--- /dev/null
+++ b/src/crypto/cipher/salsa20/nacl/salsa20_nacl.c
@@ -0,0 +1,74 @@
+/*
+  Copyright (c) 2012-2013, Matthias Schiffer <mschiffer@universe-factory.net>
+  All rights reserved.
+
+  Redistribution and use in source and binary forms, with or without
+  modification, are permitted provided that the following conditions are met:
+
+    1. Redistributions of source code must retain the above copyright notice,
+       this list of conditions and the following disclaimer.
+    2. Redistributions in binary form must reproduce the above copyright notice,
+       this list of conditions and the following disclaimer in the documentation
+       and/or other materials provided with the distribution.
+
+  THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
+  AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
+  IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
+  DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE
+  FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
+  DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+  SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
+  CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
+  OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
+  OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+*/
+
+
+#include "../../../../fastd.h"
+#include <crypto_stream_salsa20.h>
+
+
+struct __attribute__((aligned(16))) fastd_cipher_state {
+	uint8_t key[crypto_stream_salsa20_KEYBYTES];
+};
+
+
+static fastd_cipher_context_t* salsa20_initialize(fastd_context_t *ctx UNUSED) {
+	return NULL;
+}
+
+static fastd_cipher_state_t* salsa20_init_state(fastd_context_t *ctx UNUSED, const fastd_cipher_context_t *cctx UNUSED, const uint8_t *key) {
+	fastd_cipher_state_t *state = malloc(sizeof(fastd_cipher_state_t));
+	memcpy(state->key, key, crypto_stream_salsa20_KEYBYTES);
+
+	return state;
+}
+
+static bool salsa20_crypt(fastd_context_t *ctx UNUSED, const fastd_cipher_state_t *state, fastd_block128_t *out, const fastd_block128_t *in, size_t len, const uint8_t *iv) {
+	crypto_stream_salsa20_xor(out->b, in->b, len, iv, state->key);
+	return true;
+}
+
+static void salsa20_free_state(fastd_context_t *ctx UNUSED, fastd_cipher_state_t *state) {
+	if (state) {
+		secure_memzero(state, sizeof(*state));
+		free(state);
+	}
+}
+
+static void salsa20_free(fastd_context_t *ctx UNUSED, fastd_cipher_context_t *cctx UNUSED) {
+}
+
+const fastd_cipher_t fastd_cipher_salsa20_nacl = {
+	.name = "nacl",
+	.key_length = crypto_stream_salsa20_KEYBYTES,
+	.iv_length = crypto_stream_salsa20_NONCEBYTES,
+
+	.initialize = salsa20_initialize,
+	.init_state = salsa20_init_state,
+
+	.crypt = salsa20_crypt,
+
+	.free_state = salsa20_free_state,
+	.free = salsa20_free,
+};