| /linux-6.15/arch/arm64/crypto/ |
| H A D | sm4-ce-gcm-glue.c | 27 unsigned int nbytes, u8 *ghash,
31 unsigned int nbytes, u8 *ghash,
133 u8 ghash[], int err, in gcm_crypt() argument
136 unsigned int nbytes, u8 *ghash, in gcm_crypt() argument
144 memset(ghash, 0, SM4_BLOCK_SIZE); in gcm_crypt()
155 gcm_calculate_auth_mac(req, ghash); in gcm_crypt()
164 walk->nbytes, ghash, in gcm_crypt()
174 walk->nbytes - tail, ghash, in gcm_crypt()
196 u8 __aligned(8) ghash[SM4_BLOCK_SIZE]; in gcm_encrypt()
216 u8 __aligned(8) ghash[SM4_BLOCK_SIZE]; in gcm_decrypt()
[all …]
|
| H A D | Makefile | 41 obj-$(CONFIG_CRYPTO_GHASH_ARM64_CE) += ghash-ce.o
42 ghash-ce-y := ghash-ce-glue.o ghash-ce-core.o
|
| /linux-6.15/lib/crypto/ |
| H A D | aesgcm.c | 64 static void aesgcm_ghash(be128 *ghash, const be128 *key, const void *src, in aesgcm_ghash() argument
68 crypto_xor((u8 *)ghash, src, min(len, GHASH_BLOCK_SIZE)); in aesgcm_ghash()
69 gf128mul_lle(ghash, key); in aesgcm_ghash()
94 be128 ghash = {}; in aesgcm_mac() local
96 aesgcm_ghash(&ghash, &ctx->ghash_key, assoc, assoc_len); in aesgcm_mac()
97 aesgcm_ghash(&ghash, &ctx->ghash_key, src, src_len); in aesgcm_mac()
98 aesgcm_ghash(&ghash, &ctx->ghash_key, &tail, sizeof(tail)); in aesgcm_mac()
102 crypto_xor_cpy(authtag, buf, (u8 *)&ghash, ctx->authsize); in aesgcm_mac()
104 memzero_explicit(&ghash, sizeof(ghash)); in aesgcm_mac()
|
| /linux-6.15/crypto/ |
| H A D | gcm.c | 24 struct crypto_ahash_spawn ghash; member
29 struct crypto_ahash *ghash; member
96 struct crypto_ahash *ghash = ctx->ghash; in crypto_gcm_setkey() local
525 struct crypto_ahash *ghash; in crypto_gcm_init_tfm() local
529 ghash = crypto_spawn_ahash(&ictx->ghash); in crypto_gcm_init_tfm()
530 if (IS_ERR(ghash)) in crypto_gcm_init_tfm()
531 return PTR_ERR(ghash); in crypto_gcm_init_tfm()
539 ctx->ghash = ghash; in crypto_gcm_init_tfm()
553 crypto_free_ahash(ghash); in crypto_gcm_init_tfm()
599 ghash = crypto_spawn_ahash_alg(&ctx->ghash); in crypto_gcm_create_common()
[all …]
|
| H A D | Makefile | 176 obj-$(CONFIG_CRYPTO_GHASH) += ghash-generic.o
|
| /linux-6.15/arch/riscv/crypto/ |
| H A D | Makefile | 10 obj-$(CONFIG_CRYPTO_GHASH_RISCV64) += ghash-riscv64.o
11 ghash-riscv64-y := ghash-riscv64-glue.o ghash-riscv64-zvkg.o
|
| /linux-6.15/arch/arm/crypto/ |
| H A D | Makefile | 22 obj-$(CONFIG_CRYPTO_GHASH_ARM_CE) += ghash-arm-ce.o
37 ghash-arm-ce-y := ghash-ce-core.o ghash-ce-glue.o
|
| /linux-6.15/arch/x86/crypto/ |
| H A D | Makefile | 72 obj-$(CONFIG_CRYPTO_GHASH_CLMUL_NI_INTEL) += ghash-clmulni-intel.o
73 ghash-clmulni-intel-y := ghash-clmulni-intel_asm.o ghash-clmulni-intel_glue.o
|
| /linux-6.15/arch/powerpc/crypto/ |
| H A D | aes-gcm-p10.S | 232 # Compute update single ghash
302 # Compute AES and ghash one block at a time.
464 # - Don't compute ghash if not full block. gcm_update will take care of it
552 # Update partial flag and combine ghash.
568 # Update IV and ghash here
759 # Loop 8x blocks and compute ghash
800 # ghash here
1037 # Loop 8x blocks and compute ghash
1088 # ghash here
|
| H A D | Makefile | 27 vmx-crypto-objs := vmx.o aesp8-ppc.o ghashp8-ppc.o aes.o aes_cbc.o aes_ctr.o aes_xts.o ghash.o
|
| /linux-6.15/drivers/crypto/ |
| H A D | atmel-aes.c | 122 __be32 ghash[AES_BLOCK_SIZE / sizeof(u32)]; member
1471 atmel_aes_read_block(dd, AES_GHASHR(0), ctx->ghash); in atmel_aes_gcm_tag_init()
1477 ctx->ghash, ctx->ghash, atmel_aes_gcm_tag); in atmel_aes_gcm_tag_init()
1495 atmel_aes_write_block(dd, AES_IDATAR(0), ctx->ghash); in atmel_aes_gcm_tag()
|
| /linux-6.15/Documentation/crypto/ |
| H A D | architecture.rst | 258 generic C implementations (gcm.c, aes-generic.c, ctr.c, ghash-generic.c,
305 | (ctr) | ---+ | (ghash) |
|
| /linux-6.15/ |
| H A D | MAINTAINERS | 11414 F: arch/powerpc/crypto/ghash.c
|