Re: gcm/ghash organization (was Re: x86_64 gcm)

2022-03-21 Thread Niels Möller
Maamoun TK writes: >> I've done the needed changes for the C, the x86_64, arm64 and powerpc64 >> implementations. s390x code also needs update, I hope to get to that in >> a few days (unless someone else wants to do that). > > I handled the s390x part and pushed a MR for changes. I've now

Re: gcm/ghash organization (was Re: x86_64 gcm)

2022-02-23 Thread Maamoun TK
On Tue, Feb 22, 2022 at 9:55 PM Niels Möller wrote: > ni...@lysator.liu.se (Niels Möller) writes: > > > I'm considering reorganizing the internal gcm functions. I think I'd > > like to have > > > > void > > _nettle_ghash_set_key (struct gcm_key *gcm, const union nettle_block16 > *key); > > >

Re: gcm/ghash organization (was Re: x86_64 gcm)

2022-02-22 Thread Niels Möller
ni...@lysator.liu.se (Niels Möller) writes: > I'm considering reorganizing the internal gcm functions. I think I'd > like to have > > void > _nettle_ghash_set_key (struct gcm_key *gcm, const union nettle_block16 > *key); > > which sets the key (typically, the key block is zero encrypte using

gcm/ghash organization (was Re: x86_64 gcm)

2022-02-16 Thread Niels Möller
ni...@lysator.liu.se (Niels Möller) writes: > I've written a first version of a gcm_hash for x86_64, using the > pclmulqdq (carryless mul) instructions. With only a single block at a time, > no interleaving, this gives to 4.3 GByte/s, I've added proper config and fat setup and merged this. It