Lines Matching full:tweak

65 	// tweak each time a 1 is carried out of the high 64 bits.
68 	// exists when there's a carry out of the low 64 bits of the tweak.
91 .set	TWEAK,		%r8	// Pointer to next tweak  define
153 	// V6-V9 hold XTS tweaks.  Each 128-bit lane holds one tweak.
161 	// V10-V13 are used for computing the next values of TWEAK[0-3].
256 // Given a 128-bit XTS tweak in the xmm register \src, compute the next tweak
266 // Given the XTS tweak(s) in the vector \src, compute the next vector of
267 // tweak(s) (by multiplying by the polynomial 'x^(VL/16)') and write it to \dst.
271 // computation without vpclmulqdq, as it's the faster method for a single tweak.
284 // Given the first XTS tweak at (TWEAK), compute the first set of tweaks and
287 	vmovdqu		(TWEAK), TWEAK0_XMM
308 	// Compute TWEAK[1-3] from TWEAK0.
372 // each tweak by x^(4*VL/16) independently.  Since 4*VL/16 is a multiple of 8
405 // TWEAK[0-3].  To complete all steps, this is invoked with increasing values of
533 // Do tweaked AES en/decryption (i.e., XOR with \tweak, then AES en/decrypt,
534 // then XOR with \tweak again) of the block(s) in \data.  To process a single
537 .macro	_aes_crypt	enc, xmm_suffix, tweak, data
538 	_xor3		KEY0\xmm_suffix, \tweak, \data
558 	_vpxor		\tweak, \data, \data
581 	// Compute the first set of tweaks TWEAK[0-3].
590 	// XOR each source block with its tweak and the zero-th round key.
658 	// Store the next tweak back to *TWEAK to support continuation calls.
659 	vmovdqu		TWEAK0_XMM, (TWEAK)
715 	// Do it now by advancing the tweak and decrypting the last full block.
801 //			u8 tweak[AES_BLOCK_SIZE]);
803 // |key| is the data key.  |tweak| contains the next tweak; the encryption of
804 // the original IV with the tweak key was already done.  This function supports
807 // multiple of 16, then this function updates |tweak| to contain the next tweak.