Re: [AArch64] Optimize GHASH

2021-01-24 Thread Niels Möller
Maamoun TK writes: > subkey 'H' value is calculated by enciphering (usually using AES) a > sequence of ZERO data, then gcm_set_key() assign the calculated value > (subkey 'H') at the middle of TABLE array, that is TABLE[80], And the reason for it being stored in the *middle* is the "unnatural" g

Re: [AArch64] Optimize GHASH

2021-01-24 Thread Maamoun TK
Hello Michael, On Sun, Jan 24, 2021 at 3:15 PM Michael Weiser wrote: > I think there might be a misunderstanding here (possibly caused by > my attemps at explaining what ldr does, sorry): > > On arm(32) and aarch64, endianness is also exclusively handled on > load and store operations. Register

Re: [AArch64] Optimize GHASH

2021-01-24 Thread Michael Weiser
Hello Mamone, On Sat, Jan 23, 2021 at 08:52:30PM +0200, Maamoun TK wrote: > > @@ -280,9 +266,9 @@ L1x: > > tstLENGTH,#-16 > > b.eq Lmod > > > > -ld1{H1M.16b,H1L.16b},[TABLE] > > +ld1{H1M.2d,H1L.2d},[TABLE] > > > > -ld1