Re: GCM with ARM Neon (was: Re: [PATCH] "PowerPC64" GCM support)

2020-10-11 Thread Jeffrey Walton
On Sun, Oct 11, 2020 at 1:42 PM Niels Möller wrote: > > ni...@lysator.liu.se (Niels Möller) writes: > > > So if we have the input in register A (loaded from memory with no > > processing besides ensuring proper *byte* order), and precompute two > > values, M representing b_1(x) x^64 + c_1(x), and

GCM with ARM Neon (was: Re: [PATCH] "PowerPC64" GCM support)

2020-10-11 Thread Niels Möller
ni...@lysator.liu.se (Niels Möller) writes: > So if we have the input in register A (loaded from memory with no > processing besides ensuring proper *byte* order), and precompute two > values, M representing b_1(x) x^64 + c_1(x), and L representing b_0(x) > x^64 + d_1(x)), then we get the two