Skip to main content
Version: 0.3.0

Encryption

Block and stream ciphers by mode: AES (ECB, CBC, CTR, CFB, OFB, GCM, CCM, XTS), ARIA, Camellia, DES/3DES, ChaCha20, ChaCha20-Poly1305, RC4 (legacy; not recommended).

AES hardware acceleration​

NoxTLS supports build-targeted AES block acceleration while keeping API compatibility:

  • NOXTLS_CFG_FEATURE_AES_ACCEL_NI=ON enables AES-NI backend for x86/x64 targets.
  • NOXTLS_CFG_FEATURE_AES_ACCEL_APPLE=ON enables ARMv8 AES backend for Apple Silicon targets.
  • Unsupported targets or disabled flags automatically use the software AES backend.

Acceleration is wired at AES block level and is reused by existing AES modes and TLS AES call paths.

Platform accelerator ports are selected the same way, and all are off by default. New in 0.3.0:

  • TI CC13xx callback ports: NOXTLS_CFG_FEATURE_CC13XX_HW_ACCEL
  • nRF54L CRACEN: NOXTLS_CFG_FEATURE_NRF54_HW_ACCEL
  • NoxV: NOXTLS_CFG_FEATURE_NOXV_HW_ACCEL

Since 0.3.0, the software path is used only when a port reports an operation as not supported. A real accelerator error or timeout is returned to the caller, and partial output is erased first, so a failed hardware operation is never reported as a successful software result.

Streaming / incremental processing​

If your application receives data in chunks, use context-based APIs:

  • AES: noxtls_aes_init() / noxtls_aes_update() / noxtls_aes_final()
  • ARIA: noxtls_aria_init() / noxtls_aria_update() / noxtls_aria_final()
  • Camellia: noxtls_camellia_init() / noxtls_camellia_update() / noxtls_camellia_final()
  • ChaCha20 already supports streaming with noxtls_chacha20_init() / noxtls_chacha20_process()
  • RC4 supports streaming with noxtls_rc4_init() / noxtls_rc4_process() (legacy only; RC4 is weak and should not be used for new designs)
  • Poly1305 already supports incremental MAC with noxtls_poly1305_init() / noxtls_poly1305_update() / noxtls_poly1305_final()

Pages​

AES (grouped)​

ARIA​

Camellia (grouped)​

Other​