On Wed, Mar 18, 2009 at 04:52:12PM +0800, Huang Ying wrote: > > To accelerate GCM with it, I make the following design: > > 1. Implement ghash as an ahash algorithm, Use ghash in gcm > implementation. > 2. Provide a new implementation of ghash with PCLMULQDQ-NI. > > What do you think about that? Sounds OK to me. I presume the choice of ahash instead of shash is due to the use of XMM registers, just like AES? Cheers, -- Visit Openswan at http://www.openswan.org/ Email: Herbert Xu ~{PmV>HI~} <herbert@xxxxxxxxxxxxxxxxxxx> Home Page: http://gondor.apana.org.au/~herbert/ PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt -- To unsubscribe from this list: send the line "unsubscribe linux-crypto" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html