Ard Biesheuvel 0d149ce67d crypto: arm/aes - avoid expanded lookup tables in the final round ... For the final round, avoid the expanded and padded lookup tables exported by the generic AES driver. Instead, for encryption, we can perform byte loads from the same table we used for the inner rounds, which will still be hot in the caches. For decryption, use the inverse AES Sbox directly, which is 4x smaller than the inverse lookup table exported by the generic driver. This should significantly reduce the Dcache footprint of our code, which makes the code more robust against timing attacks. It does not introduce any additional module dependencies, given that we already rely on the core AES module for the shared key expansion routines. Signed-off-by: Ard Biesheuvel <ard.biesheuvel@linaro.org> Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>		2017-08-04 09:27:25 +08:00
..
.gitignore
aes-ce-core.S	crypto: arm/aes-ce - remove cra_alignmask	2017-02-03 18:16:16 +08:00
aes-ce-glue.c	crypto: algapi - make crypto_xor() take separate dst and src arguments	2017-08-04 09:27:15 +08:00
aes-cipher-core.S	crypto: arm/aes - avoid expanded lookup tables in the final round	2017-08-04 09:27:25 +08:00
aes-cipher-glue.c	crypto: arm/aes - replace scalar AES cipher	2017-01-13 00:26:50 +08:00
aes-neonbs-core.S	crypto: arm/aes - don't use IV buffer to return final keystream block	2017-02-03 18:16:21 +08:00
aes-neonbs-glue.c	crypto: algapi - make crypto_xor() take separate dst and src arguments	2017-08-04 09:27:15 +08:00
chacha20-neon-core.S	crypto: arm/chacha20 - implement NEON version based on SSE3 code	2017-01-13 00:26:48 +08:00
chacha20-neon-glue.c	crypto: arm/chacha20 - remove cra_alignmask	2017-02-03 18:16:19 +08:00
crc32-ce-core.S	crypto: arm/crc32 - fix build error with outdated binutils	2017-03-01 19:47:51 +08:00
crc32-ce-glue.c	crypto: arm/crc32 - enable module autoloading based on CPU feature bits	2017-06-01 12:55:42 +08:00
crct10dif-ce-core.S	crypto: arm/crct10dif - port x86 SSE implementation to ARM	2016-12-07 20:01:21 +08:00
crct10dif-ce-glue.c	crypto: arm/crct10dif - port x86 SSE implementation to ARM	2016-12-07 20:01:21 +08:00
ghash-ce-core.S	crypto: arm/ghash - add NEON accelerated fallback for vmull.p64	2017-08-04 09:27:24 +08:00
ghash-ce-glue.c	crypto: arm/ghash - add NEON accelerated fallback for vmull.p64	2017-08-04 09:27:24 +08:00
Kconfig	crypto: arm/ghash - add NEON accelerated fallback for vmull.p64	2017-08-04 09:27:24 +08:00
Makefile	crypto: arm/crc32 - add build time test for CRC instruction support	2017-03-01 19:47:53 +08:00
sha1_glue.c
sha1_neon_glue.c
sha1-armv4-large.S
sha1-armv7-neon.S	crypto: arm/sha1-neon - add support for building in Thumb2 mode	2016-09-07 21:08:29 +08:00
sha1-ce-core.S
sha1-ce-glue.c	crypto: arm/sha1-ce - enable module autoloading based on CPU feature bits	2017-06-01 12:55:40 +08:00
sha1.h
sha2-ce-core.S
sha2-ce-glue.c	crypto: arm/sha2-ce - enable module autoloading based on CPU feature bits	2017-06-01 12:55:41 +08:00
sha256_glue.c
sha256_glue.h
sha256_neon_glue.c
sha256-armv4.pl
sha256-core.S_shipped
sha512-armv4.pl
sha512-core.S_shipped
sha512-glue.c
sha512-neon-glue.c
sha512.h