Re: PadLock XSHA

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Herbert Xu wrote:
On Sat, Aug 30, 2008 at 09:55:00PM +1200, Michal Ludvig wrote:
IIRC The first versions of VIA PadLock required the input data to be
aligned on 16-bytes boundaries and more importantly they always
finalised the hash. Therefore we had to collect all data before hashing
them.

Hmm, the current manual states that it does a bswap on the input
and therefore alignment isn't required.  There is no mention about
older processors requiring 16-byte alignment.

That's right, I confused SHA with AES in PadLock, sorry. With AES the first versions required 16-byte alignment on input and output data as well as on the control word and there's a flag in newer PadLocks that allow doing AES on unaligned data.

AFAIK Recent versions of PadLock don't insist on finalising the hash and
 don't insist on input data alignment either and this workaround isn't
needed anymore. I don't know if VIA still sells their motherboard models
with the older CPUs or not.

Interesting.  I couldn't find anything in the manual about not
requireing finalisation.  Do you know where I can find out more
about this?

I can't find any PadLock guide newer than 2005-05-03 (probably the same one that you have). I'll check with VIA what the status of this is.

Michal
--
To unsubscribe from this list: send the line "unsubscribe linux-crypto" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html

[Index of Archives]     [Kernel]     [Gnu Classpath]     [Gnu Crypto]     [DM Crypt]     [Netfilter]     [Bugtraq]

  Powered by Linux