arm64/crypto/aes-ce-ccm-core.S

1 /* SPDX-License-Identifier: GPL-2.0-only */
3  * aes-ce-ccm-core.S - AES-CCM transform for ARMv8 with Crypto Extensions
5  * Copyright (C) 2013 - 2017 Linaro Ltd.
15 	.arch	armv8-a+crypto
20 	ld1	{v10.4s-v13.4s}, [\rk]
21 	ld1	{v14.4s-v17.4s}, [\tmp], #64
22 	ld1	{v18.4s-v21.4s}, [\tmp], #64
23 	ld1	{v3.4s-v5.4s}, [\tmp]
65 	ld1	{v2.16b}, [x1], #16		/* load next input block */
67 	eor	v2.16b, v2.16b, v5.16b		/* final round enc+mac */
68 	eor	v6.16b, v1.16b, v2.16b		/* xor with crypted ctr */
70 	eor	v2.16b, v2.16b, v1.16b		/* xor with crypted ctr */
71 	eor	v6.16b, v2.16b, v5.16b		/* final round enc */
73 	eor	v0.16b, v0.16b, v2.16b		/* xor mac with pt ^ rk[last] */
93 	ld1	{v7.16b-v8.16b}, [x9]
96 	ld1	{v2.16b}, [x1]			/* load a full block of input */
98 	eor	v7.16b, v2.16b, v1.16b		/* encrypt partial input block */
99 	bif	v2.16b, v7.16b, v22.16b		/* select plaintext */
101 	tbl	v2.16b, {v2.16b}, v9.16b	/* copy plaintext to start of v2 */
102 	eor	v0.16b, v0.16b, v2.16b		/* fold plaintext into mac */
113 	eor	v0.16b, v0.16b, v1.16b		/* en-/decrypt the mac */