Get rid of pointless indirect calls where the target of the call is decided at boot and never changes. Also, make the size of the key struct variable, and only carry the extra keys needed for aggregation when using a version of the algorithm that makes use of them. Ard Biesheuvel (5): crypto: arm64/ghash - drop PMULL based shash crypto: arm64/gcm - disentangle ghash and gcm setkey() routines crypto: arm64/gcm - use variably sized key struct crypto: arm64/gcm - use inline helper to suppress indirect calls crypto: arm/ghash - use variably sized key struct arch/arm/crypto/ghash-ce-glue.c | 51 ++-- arch/arm64/crypto/ghash-ce-glue.c | 257 +++++++------------- 2 files changed, 118 insertions(+), 190 deletions(-) -- 2.20.1