Re: [PATCH v2 2/2] crypto: arm/aes - add some hardening against cache-timing attacks

Hi Eric, Thanks for looking into this. On 17 October 2018 at 14:18, Eric Biggers wrote: > From: Eric Biggers > > Make the ARM scalar AES implementation closer to constant-time by > disabling interrupts and prefetching the tables into L1 cache. This is > feasible because due to ARM's "free"

[PATCH v2 2/2] crypto: arm/aes - add some hardening against cache-timing attacks

From: Eric Biggers Make the ARM scalar AES implementation closer to constant-time by disabling interrupts and prefetching the tables into L1 cache. This is feasible because due to ARM's "free" rotations, the main tables are only 1024 bytes instead of the usual 4096 used by most AES