| /linux/arch/arm64/crypto/ |
| H A D | sm4-ce-gcm-glue.c | 23 asmlinkage void pmull_ghash_update(const u8 *ghash_table, u8 *ghash,
27 unsigned int nbytes, u8 *ghash,
31 unsigned int nbytes, u8 *ghash,
71 static void gcm_calculate_auth_mac(struct aead_request *req, u8 ghash[]) in gcm_calculate_auth_mac() argument
103 pmull_ghash_update(ctx->ghash_table, ghash, in gcm_calculate_auth_mac()
109 pmull_ghash_update(ctx->ghash_table, ghash, in gcm_calculate_auth_mac()
126 pmull_ghash_update(ctx->ghash_table, ghash, buffer, 1); in gcm_calculate_auth_mac()
131 u8 ghash[], int err, in gcm_crypt() argument
134 unsigned int nbytes, u8 *ghash, in gcm_crypt() argument
142 memset(ghash, 0, SM4_BLOCK_SIZE); in gcm_crypt()
[all …]
|
| H A D | Makefile | 29 obj-$(CONFIG_CRYPTO_GHASH_ARM64_CE) += ghash-ce.o
30 ghash-ce-y := ghash-ce-glue.o ghash-ce-core.o
|
| /linux/arch/arm/crypto/ |
| H A D | Makefile | 9 obj-$(CONFIG_CRYPTO_GHASH_ARM_CE) += ghash-arm-ce.o
13 ghash-arm-ce-y := ghash-ce-core.o ghash-ce-glue.o
|
| /linux/crypto/ |
| H A D | gcm.c | 23 struct crypto_ahash_spawn ghash; member
28 struct crypto_ahash *ghash; member
92 struct crypto_ahash *ghash = ctx->ghash; in crypto_gcm_setkey() local
133 crypto_ahash_clear_flags(ghash, CRYPTO_TFM_REQ_MASK); in crypto_gcm_setkey()
134 crypto_ahash_set_flags(ghash, crypto_aead_get_flags(aead) & in crypto_gcm_setkey()
136 err = crypto_ahash_setkey(ghash, (u8 *)&data->hash, sizeof(be128)); in crypto_gcm_setkey()
398 ahash_request_set_tfm(ahreq, ctx->ghash); in gcm_hash()
521 struct crypto_ahash *ghash; in crypto_gcm_init_tfm() local
525 ghash = crypto_spawn_ahash(&ictx->ghash); in crypto_gcm_init_tfm()
526 if (IS_ERR(ghash)) in crypto_gcm_init_tfm()
[all …]
|
| /linux/lib/crypto/ |
| H A D | aesgcm.c | 63 static void aesgcm_ghash(be128 *ghash, const be128 *key, const void *src, in aesgcm_ghash() argument
67 crypto_xor((u8 *)ghash, src, min(len, GHASH_BLOCK_SIZE)); in aesgcm_ghash()
68 gf128mul_lle(ghash, key); in aesgcm_ghash()
93 be128 ghash = {}; in aesgcm_mac() local
95 aesgcm_ghash(&ghash, &ctx->ghash_key, assoc, assoc_len); in aesgcm_mac()
96 aesgcm_ghash(&ghash, &ctx->ghash_key, src, src_len); in aesgcm_mac()
97 aesgcm_ghash(&ghash, &ctx->ghash_key, &tail, sizeof(tail)); in aesgcm_mac()
101 crypto_xor_cpy(authtag, buf, (u8 *)&ghash, ctx->authsize); in aesgcm_mac()
103 memzero_explicit(&ghash, sizeof(ghash)); in aesgcm_mac()
|
| /linux/arch/riscv/crypto/ |
| H A D | Makefile | 7 obj-$(CONFIG_CRYPTO_GHASH_RISCV64) += ghash-riscv64.o
8 ghash-riscv64-y := ghash-riscv64-glue.o ghash-riscv64-zvkg.o
|
| /linux/arch/x86/crypto/ |
| H A D | Makefile | 53 obj-$(CONFIG_CRYPTO_GHASH_CLMUL_NI_INTEL) += ghash-clmulni-intel.o
54 ghash-clmulni-intel-y := ghash-clmulni-intel_asm.o ghash-clmulni-intel_glue.o
|
| /linux/arch/powerpc/crypto/ |
| H A D | aes-gcm-p10.S | 232 # Compute update single ghash
302 # Compute AES and ghash one block at a time.
464 # - Don't compute ghash if not full block. gcm_update will take care of it
552 # Update partial flag and combine ghash.
568 # Update IV and ghash here
759 # Loop 8x blocks and compute ghash
800 # ghash here
1037 # Loop 8x blocks and compute ghash
1088 # ghash here
|
| H A D | Makefile | 14 vmx-crypto-objs := vmx.o ghashp8-ppc.o aes_cbc.o aes_ctr.o aes_xts.o ghash.o
|
| /linux/drivers/crypto/ |
| H A D | atmel-aes.c | 122 __be32 ghash[AES_BLOCK_SIZE / sizeof(u32)]; member
1471 atmel_aes_read_block(dd, AES_GHASHR(0), ctx->ghash); in atmel_aes_gcm_tag_init()
1477 ctx->ghash, ctx->ghash, atmel_aes_gcm_tag); in atmel_aes_gcm_tag_init()
1495 atmel_aes_write_block(dd, AES_IDATAR(0), ctx->ghash); in atmel_aes_gcm_tag()
|
| /linux/Documentation/crypto/ |
| H A D | architecture.rst | 258 generic C implementations (gcm.c, aes-generic.c, ctr.c, ghash-generic.c,
305 | (ctr) | ---+ | (ghash) |
|
| /linux/ |
| H A D | MAINTAINERS | 12282 F: arch/powerpc/crypto/ghash.c
|