crypto: arm64/aes-ce-gcm - implement 2-way aggregation

Browse source

Implement a faster version of the GHASH transform which amortizes
the reduction modulo the characteristic polynomial across two
input blocks at a time.

On a Cortex-A53, the gcm(aes) performance increases 24%, from
3.0 cycles per byte to 2.4 cpb for large input sizes.

Signed-off-by: Ard Biesheuvel <ard.biesheuvel@linaro.org>
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>

...

This commit is contained in:

Ard Biesheuvel 2018-07-30 23:06:41 +02:00 • committed by Herbert Xu

parent 71e52c278c

commit e0bd888dc4

2 changed files with 52 additions and 68 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

98

arch/arm64/crypto/ghash-ce-core.S

View file

34

arch/arm64/crypto/ghash-ce-glue.c

View file