crypto: arm64/aes-ce-gcm - implement 2-way aggregation
authorArd Biesheuvel <ard.biesheuvel@linaro.org>
Mon, 30 Jul 2018 21:06:41 +0000 (23:06 +0200)
committerHerbert Xu <herbert@gondor.apana.org.au>
Tue, 7 Aug 2018 09:38:04 +0000 (17:38 +0800)
commite0bd888dc487e0c444ee5f3bf55020862d16a225
treed47256d0fbe502566da59e2efbc3811ebf6cfbbf
parent71e52c278c54db10e368c54687234390357b08d6
crypto: arm64/aes-ce-gcm - implement 2-way aggregation

Implement a faster version of the GHASH transform which amortizes
the reduction modulo the characteristic polynomial across two
input blocks at a time.

On a Cortex-A53, the gcm(aes) performance increases 24%, from
3.0 cycles per byte to 2.4 cpb for large input sizes.

Signed-off-by: Ard Biesheuvel <ard.biesheuvel@linaro.org>
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
arch/arm64/crypto/ghash-ce-core.S
arch/arm64/crypto/ghash-ce-glue.c