Home
last modified time | relevance | path

Searched refs:Xi (Results 1 – 4 of 4) sorted by relevance

/f-stack/freebsd/crypto/armv8/
H A Darmv8_crypto_wrap.c251 __uint128_val_t EK0, EKi, Xi, lenblock; in armv8_aes_encrypt_gcm() local
265 memset(Xi.c, 0, sizeof(Xi.c)); in armv8_aes_encrypt_gcm()
312 Xi.u[0] ^= EK0.u[0]; in armv8_aes_encrypt_gcm()
313 Xi.u[1] ^= EK0.u[1]; in armv8_aes_encrypt_gcm()
314 memcpy(tag, Xi.c, GMAC_DIGEST_LEN); in armv8_aes_encrypt_gcm()
317 explicit_bzero(Xi.c, sizeof(Xi.c)); in armv8_aes_encrypt_gcm()
337 __uint128_val_t EK0, EKi, Xi, lenblock; in armv8_aes_decrypt_gcm() local
350 memset(Xi.c, 0, sizeof(Xi.c)); in armv8_aes_decrypt_gcm()
377 Xi.u[0] ^= EK0.u[0]; in armv8_aes_decrypt_gcm()
378 Xi.u[1] ^= EK0.u[1]; in armv8_aes_decrypt_gcm()
[all …]
H A Darmv8_crypto.h63 void gcm_init_v8(__uint128_val_t Htable[16], const uint64_t Xi[2]);
64 void gcm_gmult_v8(uint64_t Xi[2], const __uint128_val_t Htable[16]);
65 void gcm_ghash_v8(uint64_t Xi[2], const __uint128_val_t Htable[16], const uint8_t *inp, size_t len);
/f-stack/freebsd/crypto/openssl/arm/
H A Dghashv8-armx.S63 vld1.64 {q9},[r0] @ load Xi
75 .byte 0xa2,0x2e,0xaa,0xf2 @ pmull q1,q13,q9 @ (H.lo+H.hi)·(Xi.lo+Xi.hi)
96 vst1.64 {q0},[r0] @ write out Xi
105 vld1.64 {q0},[r0] @ load [rotated] Xi
125 vext.8 q0,q0,q0,#8 @ rotate Xi
139 veor q3,q3,q0 @ I[i]^=Xi
156 .byte 0xa5,0x2e,0xab,0xf2 @ pmull2 q1,q13,q10 @ (H^2.lo+H^2.hi)·(Xi.lo+Xi.hi)
199 veor q3,q3,q0 @ inp^=Xi
200 veor q9,q8,q10 @ q9 is rotated inp^Xi
205 .byte 0xa2,0x2e,0xaa,0xf2 @ pmull q1,q13,q9 @ (H.lo+H.hi)·(Xi.lo+Xi.hi)
[all …]
H A Dghash-armv4.S379 vld1.64 d7,[r0]! @ load Xi
397 vld1.64 d1,[r0]! @ load Xi
414 veor q3,q0 @ inp^=Xi
557 vst1.64 d1,[r0]! @ write out Xi