/openssl/crypto/modes/ |
H A D | gcm128.c | 122 Htable[3].hi = V.hi ^ Htable[2].hi, Htable[3].lo = V.lo ^ Htable[2].lo; in gcm_init_4bit() 124 Htable[5].hi = V.hi ^ Htable[1].hi, Htable[5].lo = V.lo ^ Htable[1].lo; in gcm_init_4bit() 125 Htable[6].hi = V.hi ^ Htable[2].hi, Htable[6].lo = V.lo ^ Htable[2].lo; in gcm_init_4bit() 126 Htable[7].hi = V.hi ^ Htable[3].hi, Htable[7].lo = V.lo ^ Htable[3].lo; in gcm_init_4bit() 128 Htable[9].hi = V.hi ^ Htable[1].hi, Htable[9].lo = V.lo ^ Htable[1].lo; in gcm_init_4bit() 129 Htable[10].hi = V.hi ^ Htable[2].hi, Htable[10].lo = V.lo ^ Htable[2].lo; in gcm_init_4bit() 130 Htable[11].hi = V.hi ^ Htable[3].hi, Htable[11].lo = V.lo ^ Htable[3].lo; in gcm_init_4bit() 131 Htable[12].hi = V.hi ^ Htable[4].hi, Htable[12].lo = V.lo ^ Htable[4].lo; in gcm_init_4bit() 132 Htable[13].hi = V.hi ^ Htable[5].hi, Htable[13].lo = V.lo ^ Htable[5].lo; in gcm_init_4bit() 133 Htable[14].hi = V.hi ^ Htable[6].hi, Htable[14].lo = V.lo ^ Htable[6].lo; in gcm_init_4bit() [all …]
|
/openssl/crypto/modes/asm/ |
H A D | ghash-riscv64-zvkg.pl | 73 my ($Htable,$H,$VAL0,$VAL1,$TMP0) = ("a0","a1","a2","a3","t0"); 82 @{[sd_rev8_rv64i $VAL0, $Htable, 0, $TMP0]} 83 @{[sd_rev8_rv64i $VAL1, $Htable, 8, $TMP0]} 90 my ($Htable,$H,$V0) = ("a0","a1","v0"); 100 @{[vse64_v $V0, $Htable]} # vse64.v v0, (a0) 113 my ($Xi,$Htable) = ("a0","a1"); 122 @{[vle32_v $VS2, $Htable]} 141 my ($Xi,$Htable,$inp,$len) = ("a0","a1","a2","a3"); 150 @{[vle32_v $vH, $Htable]}
|
H A D | ghash-riscv64.pl | 102 sd $VAL0,0($Htable) 103 sd $VAL1,8($Htable) 123 sd $TMP0,0($Htable) 124 sd $TMP1,8($Htable) 162 ld $y0, 0($Htable) 163 ld $y1, 8($Htable) 219 ld $y0, 0($Htable) 220 ld $y1, 8($Htable) 287 ld $y0, 0($Htable) 288 ld $y1, 8($Htable) [all …]
|
H A D | ghash-ia64.pl | 255 { .mmi; add $Htbl=256,sp // &Htable[0] 279 dep $Atbl=$xi[1],$Htbl,4,4 //(p17) &Htable[nlo].lo 286 add $Btbl=$xi[1],$Htbl };; //(p17) &Htable[nhi].lo 291 { .mmi; ld8 $Alo=[$Atbl],8 //(p18) Htable[nlo].lo,&Htable[nlo].hi 295 dep $Atbl=$xi[1],$Htbl,4,4 } //(p17) &Htable[nlo].lo 307 add $Btbl=$xi[1],$Htbl };; //(p17) &Htable[nhi] 323 dep $Atbl=$xi[1],$Htbl,4,4 } //(p17) &Htable[nlo].lo 338 add $Btbl=$xi[1],$Htbl };; //(p17) &Htable[nhi] 352 dep $Atbl=$xi[1],$Htbl,4,4 };; //(p17) &Htable[nlo].lo 365 add $Btbl=$xi[1],$Htbl };; //(p17) &Htable[nhi] [all …]
|
H A D | ghash-riscv64-zvkb-zvbc.pl | 68 my ($Htable,$H,$TMP0,$TMP1,$TMP2) = ("a0","a1","t0","t1","t2"); 111 @{[vse64_v $V1, $Htable]} # vse64.v v1, (a0) 124 my ($Xi,$Htable,$TMP0,$TMP1,$TMP2,$TMP3,$TMP4) = ("a0","a1","t0","t1","t2","t3","t4"); 133 ld $TMP0, ($Htable) 134 ld $TMP1, 8($Htable) 245 my ($Xi,$Htable,$inp,$len,$TMP0,$TMP1,$TMP2,$TMP3,$M8,$TMP5,$TMP6) = ("a0","a1","a2","a3","t0","t1"… 253 ld $TMP0, ($Htable) 254 ld $TMP1, 8($Htable)
|
H A D | ghash-c64xplus.pl | 31 ($Xip,$Htable,$inp,$len)=("A4","B4","A6","B6"); # arguments 59 ADDAD $Htable,2,$Htable 64 LDDW *${Htable}[-1],$H1:$H0 ; H.lo 65 LDDW *${Htable}[-2],$H3:$H2 ; H.hi 91 LDDW *${Htable}[-1],$H1:$H0 ; H.lo 93 LDDW *${Htable}[-2],$H3:$H2 ; H.hi
|
H A D | ghash-sparcv9.pl | 358 ($Xip,$Htable,$inp,$len)=map("%i$_",(0..3)); 407 ldx [$Htable+8],$Hlo ! load twisted H 408 ldx [$Htable+0],$Hhi 412 ldx [$Htable+16],$V ! (0xE0·i)&0xff=0xA040608020C0E000 463 ldx [$Htable+8],$Hlo ! load twisted H 464 ldx [$Htable+0],$Hhi 468 ldx [$Htable+16],$V ! (0xE0·i)&0xff=0xA040608020C0E000
|
/openssl/providers/implementations/ciphers/ |
H A D | cipher_aes_gcm_siv_polyval.c | 61 void ossl_polyval_ghash_init(u128 Htable[16], const uint64_t H[2]) in ossl_polyval_ghash_init() 74 ossl_gcm_init_4bit(Htable, (u64*)tmp); in ossl_polyval_ghash_init() 78 void ossl_polyval_ghash_hash(const u128 Htable[16], uint8_t *tag, const uint8_t *inp, size_t len) in ossl_polyval_ghash_hash() 92 ossl_gcm_ghash_4bit((u64*)out, Htable, (uint8_t *)tmp, 16); in ossl_polyval_ghash_hash()
|
H A D | cipher_aes_gcm_siv_hw.c | 176 ossl_polyval_ghash_init(ctx->Htable, (const uint64_t*)ctx->msg_auth_key); in aes_gcm_siv_encrypt() 180 ossl_polyval_ghash_hash(ctx->Htable, S_s, ctx->aad, UP16(ctx->aad_len)); in aes_gcm_siv_encrypt() 183 ossl_polyval_ghash_hash(ctx->Htable, S_s, (uint8_t *) in, DOWN16(len)); in aes_gcm_siv_encrypt() 188 ossl_polyval_ghash_hash(ctx->Htable, S_s, padding, sizeof(padding)); in aes_gcm_siv_encrypt() 190 ossl_polyval_ghash_hash(ctx->Htable, S_s, (uint8_t *) len_blk, sizeof(len_blk)); in aes_gcm_siv_encrypt() 242 ossl_polyval_ghash_init(ctx->Htable, (const uint64_t*)ctx->msg_auth_key); in aes_gcm_siv_decrypt() 245 ossl_polyval_ghash_hash(ctx->Htable, S_s, ctx->aad, UP16(ctx->aad_len)); in aes_gcm_siv_decrypt() 248 ossl_polyval_ghash_hash(ctx->Htable, S_s, out, DOWN16(len)); in aes_gcm_siv_decrypt() 253 ossl_polyval_ghash_hash(ctx->Htable, S_s, (uint8_t *)padding, sizeof(padding)); in aes_gcm_siv_decrypt() 255 ossl_polyval_ghash_hash(ctx->Htable, S_s, (uint8_t *)len_blk, TAG_SIZE); in aes_gcm_siv_decrypt()
|
H A D | cipher_aes_gcm_siv.h | 47 u128 Htable[16]; /* Polyval calculations via ghash */ member 58 void ossl_polyval_ghash_init(u128 Htable[16], const uint64_t H[2]); 59 void ossl_polyval_ghash_hash(const u128 Htable[16], uint8_t *tag, const uint8_t *inp, size_t len);
|
/openssl/include/crypto/ |
H A D | modes.h | 110 typedef void (*gcm_init_fn)(u128 Htable[16], const u64 H[2]); 111 typedef void (*gcm_ghash_fn)(u64 Xi[2], const u128 Htable[16], const u8 *inp, size_t len); 112 typedef void (*gcm_gmult_fn)(u64 Xi[2], const u128 Htable[16]); 131 u128 Htable[16]; member 142 void ossl_gcm_init_4bit(u128 Htable[16], const u64 H[2]); 143 void ossl_gcm_ghash_4bit(u64 Xi[2], const u128 Htable[16], 145 void ossl_gcm_gmult_4bit(u64 Xi[2], const u128 Htable[16]);
|
H A D | aes_platform.h | 91 void gcm_ghash_p8(u64 Xi[2],const u128 Htable[16],const u8 *inp, size_t len); 158 void gcm_ghash_v8(u64 Xi[2],const u128 Htable[16],const u8 *inp, size_t len); 265 void gcm_ghash_avx(u64 Xi[2], const u128 Htable[16], const u8 *in, size_t len); 506 void gcm_ghash_rv64i_zvkg(u64 Xi[2], const u128 Htable[16], const u8 *inp,
|