On 31/8/23 17:41, Ard Biesheuvel wrote:
Use the accelerated SubBytes/ShiftRows/AddRoundKey AES helper to
implement the first half of the key schedule derivation. This does not
actually involve shifting rows, so clone the same value into all four
columns of the AES vector to counter that operation.

Cc: Richard Henderson <[email protected]>
Cc: Philippe Mathieu-Daudé <[email protected]>
Cc: Palmer Dabbelt <[email protected]>
Cc: Alistair Francis <[email protected]>
Signed-off-by: Ard Biesheuvel <[email protected]>
---
v2: assign round constant to elements 0 and 1 only

  target/riscv/crypto_helper.c | 17 +++++------------
  1 file changed, 5 insertions(+), 12 deletions(-)

Reviewed-by: Philippe Mathieu-Daudé <[email protected]>


Reply via email to