3 Commits

Author	SHA1	Message	Date
Ard Biesheuvel	9c433ad508	crypto: arm64/ghash-ce - fix for big endian ... The GHASH key and digest are both pairs of 64-bit quantities, but the GHASH code does not always refer to them as such, causing failures when built for big endian. So replace the 16x1 loads and stores with 2x8 ones. Fixes: b913a6404c ("arm64/crypto: improve performance of GHASH algorithm") Signed-off-by: Ard Biesheuvel <ard.biesheuvel@linaro.org> Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>	2016-10-21 11:03:43 +08:00
Ard Biesheuvel	b913a6404c	arm64/crypto: improve performance of GHASH algorithm ... This patches modifies the GHASH secure hash implementation to switch to a faster, polynomial multiplication based reduction instead of one that uses shifts and rotates. Signed-off-by: Ard Biesheuvel <ard.biesheuvel@linaro.org> Signed-off-by: Catalin Marinas <catalin.marinas@arm.com>	2014-06-18 12:40:54 +01:00
Ard Biesheuvel	fdd2389457	arm64/crypto: GHASH secure hash using ARMv8 Crypto Extensions ... This is a port to ARMv8 (Crypto Extensions) of the Intel implementation of the GHASH Secure Hash (used in the Galois/Counter chaining mode). It relies on the optional PMULL/PMULL2 instruction (polynomial multiply long, what Intel call carry-less multiply). Signed-off-by: Ard Biesheuvel <ard.biesheuvel@linaro.org> Acked-by: Herbert Xu <herbert@gondor.apana.org.au>	2014-05-14 10:04:07 -07:00