On Wed, May 04, 2022 at 12:18:19AM +0000, Nathan Huckleberry wrote: > Add hardware accelerated version of XCTR for ARM64 CPUs with ARMv8 > Crypto Extension support. This XCTR implementation is based on the CTR > implementation in aes-modes.S. > > More information on XCTR can be found in > the HCTR2 paper: Length-preserving encryption with HCTR2: > https://eprint.iacr.org/2021/1441.pdf > > Signed-off-by: Nathan Huckleberry <nhuck@xxxxxxxxxx> > Reviewed-by: Ard Biesheuvel <ardb@xxxxxxxxxx> > --- > arch/arm64/crypto/Kconfig | 4 +- > arch/arm64/crypto/aes-glue.c | 64 ++++++++++++- > arch/arm64/crypto/aes-modes.S | 168 +++++++++++++++++++++------------- > 3 files changed, 169 insertions(+), 67 deletions(-) Looks good, although the assembly code gets easier to read after the next patch. Reviewed-by: Eric Biggers <ebiggers@xxxxxxxxxx> - Eric