Ard Biesheuvel c8bf850e99 crypto: arm/aes-neonbs-ctr - deal with non-multiples of AES block size ... Instead of falling back to C code to deal with the final bit of input that is not a round multiple of the block size, handle this in the asm code, permitting us to use overlapping loads and stores for performance, and implement the 16-byte wide XOR using a single NEON instruction. Since NEON loads and stores have a natural width of 16 bytes, we need to handle inputs of less than 16 bytes in a special way, but this rarely occurs in practice so it does not impact performance. All other input sizes can be consumed directly by the NEON asm code, although it should be noted that the core AES transform can still only process 128 bytes (8 AES blocks) at a time. Signed-off-by: Ard Biesheuvel <ardb@kernel.org> Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>		2022-02-05 15:10:51 +11:00
..
.gitignore	SPDX patches for 5.7-rc1.	2020-04-03 13:12:26 -07:00
aes-ce-core.S	crypto: arm/aes-ce - work around Cortex-A57/A72 silion errata	2020-12-04 18:13:14 +11:00
aes-ce-glue.c	crypto: remove CRYPTO_TFM_RES_BAD_KEY_LEN	2020-01-09 11:30:53 +08:00
aes-cipher-core.S	crypto: arm/aes-scalar - switch to common rev_l/mov_l macros	2021-03-19 21:59:46 +11:00
aes-cipher-glue.c	crypto: arm/aes-scalar - unexport en/decryption routines	2019-07-26 14:58:38 +10:00
aes-neonbs-core.S	crypto: arm/aes-neonbs-ctr - deal with non-multiples of AES block size	2022-02-05 15:10:51 +11:00
aes-neonbs-glue.c	crypto: arm/aes-neonbs-ctr - deal with non-multiples of AES block size	2022-02-05 15:10:51 +11:00
blake2b-neon-core.S	crypto: arm/blake2b - add NEON-accelerated BLAKE2b	2021-01-03 08:41:39 +11:00
blake2b-neon-glue.c	crypto: arm/blake2b - drop unnecessary return statement	2021-03-07 15:13:14 +11:00
blake2s-core.S	lib/crypto: blake2s: include as built-in	2022-01-07 00:25:25 +01:00
blake2s-glue.c	lib/crypto: blake2s: include as built-in	2022-01-07 00:25:25 +01:00
blake2s-shash.c	lib/crypto: blake2s: include as built-in	2022-01-07 00:25:25 +01:00
chacha-glue.c	crypto: arm/chacha-neon - add missing counter increment	2021-01-03 08:35:35 +11:00
chacha-neon-core.S	crypto: arm/chacha-neon - optimize for non-block size multiples	2020-11-13 20:38:44 +11:00
chacha-scalar-core.S	crypto: arm/chacha-scalar - switch to common rev_l macro	2021-03-19 21:59:46 +11:00
crc32-ce-core.S	crypto: Replace HTTP links with HTTPS ones	2020-07-23 17:34:20 +10:00
crc32-ce-glue.c	crypto: remove CRYPTO_TFM_RES_BAD_KEY_LEN	2020-01-09 11:30:53 +08:00
crct10dif-ce-core.S	crypto: arm - use Kconfig based compiler checks for crypto opcodes	2019-10-23 19:46:56 +11:00
crct10dif-ce-glue.c
curve25519-core.S	crypto: arm/curve25519 - Move '.fpu' after '.arch'	2021-04-16 21:16:34 +10:00
curve25519-glue.c	crypto: arm/curve25519 - rename 'mod_init' & 'mod_exit' functions to be module-specific	2021-07-16 15:49:35 +08:00
ghash-ce-core.S	crypto: arm/ghash-ce - define fpu before fpu registers are referenced	2020-03-06 12:28:25 +11:00
ghash-ce-glue.c	crypto: arm/ghash - use variably sized key struct	2020-07-09 22:14:33 +10:00
Kconfig	crypto: arm/blake2b - add NEON-accelerated BLAKE2b	2021-01-03 08:41:39 +11:00
Makefile	lib/crypto: blake2s: include as built-in	2022-01-07 00:25:25 +01:00
nh-neon-core.S
nhpoly1305-neon-glue.c	crypto: arch/nhpoly1305 - process in explicit 4k chunks	2020-04-30 15:16:59 +10:00
poly1305-armv4.pl	crypto: arm/poly1305 - incorporate OpenSSL/CRYPTOGAMS NEON implementation	2019-11-17 09:02:42 +08:00
poly1305-glue.c	crypto: poly1305 - fix poly1305_core_setkey() declaration	2021-04-02 18:28:12 +11:00
sha1-armv4-large.S	crypto: Replace HTTP links with HTTPS ones	2020-07-23 17:34:20 +10:00
sha1-armv7-neon.S
sha1-ce-core.S	crypto: arm - use Kconfig based compiler checks for crypto opcodes	2019-10-23 19:46:56 +11:00
sha1-ce-glue.c	crypto: sha - split sha.h into sha1.h and sha2.h	2020-11-20 14:45:33 +11:00
sha1.h	crypto: sha - split sha.h into sha1.h and sha2.h	2020-11-20 14:45:33 +11:00
sha1_glue.c	crypto: sha - split sha.h into sha1.h and sha2.h	2020-11-20 14:45:33 +11:00
sha1_neon_glue.c	crypto: sha - split sha.h into sha1.h and sha2.h	2020-11-20 14:45:33 +11:00
sha2-ce-core.S	crypto: arm - use Kconfig based compiler checks for crypto opcodes	2019-10-23 19:46:56 +11:00
sha2-ce-glue.c	crypto: sha - split sha.h into sha1.h and sha2.h	2020-11-20 14:45:33 +11:00
sha256-armv4.pl	crypto: arm/sha256-neon - avoid ADRL pseudo instruction	2020-09-25 17:48:13 +10:00
sha256_glue.c	crypto: sha - split sha.h into sha1.h and sha2.h	2020-11-20 14:45:33 +11:00
sha256_glue.h
sha256_neon_glue.c	crypto: sha - split sha.h into sha1.h and sha2.h	2020-11-20 14:45:33 +11:00
sha512-armv4.pl	crypto: arm/sha512-neon - avoid ADRL pseudo instruction	2020-09-25 17:48:14 +10:00
sha512-glue.c	crypto: sha - split sha.h into sha1.h and sha2.h	2020-11-20 14:45:33 +11:00
sha512-neon-glue.c	crypto: sha - split sha.h into sha1.h and sha2.h	2020-11-20 14:45:33 +11:00
sha512.h