NAME

Crypt::CCM - CCM Mode for symmetric key block ciphers

SYNOPSIS

  use Crypt::CCM;
  use strict;
  
  my $ccm = Crypt::CCM->new(-key => $key);
  $ccm->set_nonce($random_nonce);
  $ccm->set_aad($assoc_data);
  my $cipher_text = $ccm->encrypt($plain_text);

DESCRIPTION

The module implements the CCM Mode for Authentication and Confidentiality.

API

new(ARGS)

  my $cipher = Crypt::CCM->new(
      -key        => $secret_key,
      -cipher     => 'Crypt::Rijndael',
      -nonce      => $nonce,
      -aad        => $associated_data,
      -tag_length => 128/8,
  );

The new() method creates an new Crypt::CCM object. it accepts a list of -artument => value pairs selected form the following list:

  Argument    Description
  --------    -----------
  -key        The encryption/decryption key
  -cipher     The cipher algorithm module name
  -nonce      The nonce. 
  -aad        The associated data (default '')
  -tag_length The bytes length of the MAC (default 128/8)

set_cipher($cipher)

  $cipher->set_cipher(Crypt::Rijndael->new($key));

set_nonce($nonce)

  $cipher->set_nonce($nonce);

This allows you to change the 'nonce'. allow 7,8,9,10,11,12,13 byte string.

set_aad($associated_data)

set_tag_length($length)

This allows you to change the MAC length. allow 4,6,8,10,12,14,16 byte string.

encrypt($plain_text);

  my $cipher_text = $cipher->encrypt($plain_text);

decrypt($cipher_text)

  my $plain_text = $cipher->decrypt($cipher_text);

EXAMPLE

Encrypt

  use Crypt::CCM;
  use strict;
  
  my $key             = pack 'H*', '00000000000000000000000000000000'; 
  my $nonce           = pack 'H*', '0000000000000000';
  my $associated_data = 'this is associated data';
  my $plain_text      = 'Hello World!';
  my $c = Crypt::CCM->new(
      -key    => $key,
      -cipher => 'Crypt::Rijndael'
  );
  $c->set_nonce($nonce);
  $c->set_aad($associated_data);
  my $cipher_text = $c->encrypt($plain_text);
  printf qq{encrypt: %s (hex)\n}, unpack 'H*', $cipher_text;

Decrypt

  use Crypt::CCM;
  use strict;
  
  my $key             = pack 'H*', '00000000000000000000000000000000'; 
  my $nonce           = pack 'H*', '0000000000000000';
  my $associated_data = 'this is associated data';
  my $cipher_text     = pack 'H*', '08da066234def1e5c7481a5a40b6aa4319332731a184426ac77f47de';
  
  my $c = Crypt::CCM->new(
      -key => $key,
      -cipher => 'Crypt::Rijndael'
  );
  $c->set_nonce($nonce);
  $c->set_aad($associated_data);
  my $plain_text = $c->decrypt($cipher_text);
  printf qq{decrypt: %s\n}, $plain_text;

SEE ALSO

NIST Special Publication 800-38C - Recommendation for Block Cipher Modes of Operation: The CCM Mode for Authentication and Confidentiality.

http://csrc.nist.gov/CryptoToolkit/modes/800-38_Series_Publications/SP800-38C.pdf

RFC 3610 - Counter with CBC-MAC (CCM)

http://tools.ietf.org/html/rfc3610

AUTHOR

Hiroyuki OYAMA, <oyama@module.jp<gt>

COPYRIGHT AND LICENSE

Copyright (C) 2006 by Hiroyuki OYAMA

This library is free software; you can redistribute it and/or modify it under the same terms as Perl itself, either Perl version 5.8.6 or, at your option, any later version of Perl 5 you may have available.

cpanm Crypt::CCM

perl -MCPAN -e shell
install Crypt::CCM