On Sun, 2009-03-29 at 15:43 +0800, Herbert Xu wrote: > On Wed, Mar 18, 2009 at 04:52:12PM +0800, Huang Ying wrote: > > > > To accelerate GCM with it, I make the following design: > > > > 1. Implement ghash as an ahash algorithm, Use ghash in gcm > > implementation. > > 2. Provide a new implementation of ghash with PCLMULQDQ-NI. > > > > What do you think about that? > > Sounds OK to me. I presume the choice of ahash instead of shash > is due to the use of XMM registers, just like AES? Yes, because PCLMULQDQ touches XMMs too. Just like AES, there is a raw shash: ghash-clmul and an ahash via cryptd(ghash-clmul). Best Regards, Huang Ying
Attachment:
signature.asc
Description: This is a digitally signed message part
