summaryrefslogtreecommitdiffstats
path: root/crypto/modes
AgeCommit message (Collapse)Author
2014-06-28x86_64 assembly pack: refine clang detection.Andy Polyakov
(cherry picked from commit a356e488ad50ca9de3fc4955839441c5aff11ed3) Resolved conflicts: crypto/bn/asm/rsaz-avx2.pl
2014-06-27x86_64 assembly pack: addendum to last clang commit.Andy Polyakov
(cherry picked from commit 7eb048828008f195fb6edceb8f767622694e7426)
2014-06-27x86_64 assembly pack: allow clang to compile AVX code.Andy Polyakov
(cherry picked from commit ac171925ab527a55fbb27872ff69af94f7ec995b)
2014-06-24ARMv8 assembly pack: add Cortex performance numbers.Andy Polyakov
(cherry picked from commit 0f777aeb50b109052d41b8a55d97faecf728ea00)
2014-06-11ghash-x86_64.pl: optimize for upcoming Atom.Andy Polyakov
(cherry picked from commit 1cf8f57b43a99275ac0938e9e230bd0434699d87)
2014-06-11Engage GHASH for ARMv8.Andy Polyakov
(cherry picked from commit 82741e9c8980f96e4b3bba9e54e5904bc3e385bd)
2014-06-11Add GHASH for ARMv8 Crypto Extension.Andy Polyakov
Result of joint effort with Ard Biesheuvel. (cherry picked from commit 2d5a799d27d36ee0477b2e05a7aa14394e3ad4fc)
2014-06-10ARM assembly pack: get ARMv7 instruction endianness right.Andy Polyakov
Pointer out and suggested by: Ard Biesheuvel. (cherry picked from commit 5dcf70a1c57c2019bfad640fe14fd4a73212860a)
2014-04-24bn/asm/armv4-gf2m.pl, modes/asm/ghash-armv4.pl: faster multiplicationAndy Polyakov
algorithm suggested in following paper: Câmara, D.; Gouvêa, C. P. L.; López, J. & Dahab, R.: Fast Software Polynomial Multiplication on ARM Processors using the NEON Engine. http://conradoplg.cryptoland.net/files/2010/12/mocrysen13.pdf (cherry picked from commit f8cee9d08181f9e966ef01d3b69ba78b6cb7c8a8)
2014-04-06crypto/modes/gcm128.c: more strict aliasing fixes.Andy Polyakov
(cherry picked from commit 997d1aac7cfb957decb62d8f0034a7eca6177fec)
2014-02-13ghash-x86[_64].pl: ~15% improvement on Atom SilvermontAndy Polyakov
(other processors unaffected). (cherry picked from commit 98e143f118aedc2fa79fa0ae90f1b039da106309)
2014-02-02modes/asm/ghash-s390x.pl: +15% performance improvement on z10.Andy Polyakov
(cherry picked from commit d162584b1154153d997fed18a9df2e60771fe06c)
2013-12-01make updateDr. Stephen Henson
2013-11-12modes/asm/ghash-alpha.pl: update from HEAD.Andy Polyakov
PR: 3165
2013-11-12Make Makefiles OSF-make-friendly.Andy Polyakov
PR: 3165 (cherry picked from commit d1cf23ac86c05b22b8780e2c03b67230564d2d34)
2013-11-08modes/asm/ghash-alpha.pl: make it work with older assembler.Andy Polyakov
PR: 3165 (cherry picked from commit d24d1d7daf515aa19fbf18f6371e3e617028a07c)
2013-10-13Initial aarch64 bits.Andy Polyakov
(cherry picked from commit 039081b80977e2a5de84e1f88f8b4d025b559956)
2013-10-01EVP support for wrapping algorithms.Dr. Stephen Henson
Add support for key wrap algorithms via EVP interface. Generalise AES wrap algorithm and add to modes, making existing AES wrap algorithm a special case. Move test code to evptests.txt (cherry picked from commit 97cf1f6c2854a3a955fd7dd3a1f113deba00c9ef) Conflicts: CHANGES
2013-09-09crypto/modes/asm/aesni-gcm-x86_64.pl: minor optimization.Andy Polyakov
Avoid occasional up to 8% performance drops. (cherry picked from commit 7a1a12232a84621271bf808107f3be9a2df5121a)
2013-06-30PA-RISC assembler pack: switch to bve in 64-bit builds.Andy Polyakov
PR: 3074 (cherry picked from commit 02450ec69dda7815ba1e7bd74eb30f0ae1eb3042)
2013-06-10ghash-x86_64.pl: add Haswell performance data.Andy Polyakov
(cherry picked from commit b42759158d8b7e5b23c7a24d11bc7f2194f55007)
2013-06-04crypto/modes: even more strict aliasing fixes [and fix bug in cbc128.c fromAndy Polyakov
previous cbc128.c commit].
2013-06-04cbc128.c: fix strict aliasing warning.Andy Polyakov
2013-05-19Add AES-NI GCM stich and take it into build loop [from master].Andy Polyakov
2013-05-19gcm128.c: update from master (add AVX and VIS3 support).Andy Polyakov
2013-05-19ghash-sparcv9.pl: update from master.Andy Polyakov
2013-05-19ghash-x86_64.pl: update from master.Andy Polyakov
2013-05-19ghash-x86.pl: update from master.Andy Polyakov
2013-04-13crypto/modes/modes_lcl.h: let STRICT_ALIGNMENT be on ARMv7.Andy Polyakov
While ARMv7 in general is capable of unaligned access, not all instructions actually are. And trouble is that compiler doesn't seem to differentiate those capable and incapable of unaligned access. Side effect is that kernel goes into endless loop retrying same instruction triggering unaligned trap. Problem was observed in xts128.c and ccm128.c modules. It's possible to resolve it by using (volatile u32*) casts, but letting STRICT_ALIGNMENT be feels more appropriate. (cherry picked from commit 3bdd80521a81d50ade4214053cd9b293f920a77b)
2013-01-22x86_64 assembly pack: make Windows build more robust [from master].Andy Polyakov
PR: 2963 and a number of others
2012-12-13Ignore more.Ben Laurie
2012-08-13gcm128.c: fix AAD-only case with AAD length not divisible by 16 [from HEAD].Andy Polyakov
PR: 2859 Submitted by: John Foley
2012-06-27x86_64 assembly pack: make it possible to compile with Perl locatedAndy Polyakov
on path with spaces [from HEAD]. PR: 2835
2012-06-03Reduce version skew: trivia (I hope).Ben Laurie
2012-04-12s390x asm pack: fix typos.Andy Polyakov
2012-03-31modes_lcl.h: make it work on i386 [from HEAD].Andy Polyakov
PR: 2780
2012-01-25ghash-x86.pl: engage original MMX version in no-sse2 builds [from HEAD].Andy Polyakov
2012-01-15Fix OPNESSL vs. OPENSSL typos [from HEAD].Andy Polyakov
PR: 2613 Submitted by: Leena Heino
2011-08-11Sync ASM/modes to add CCM and XTS modes and assembly language optimisationDr. Stephen Henson
(from HEAD, original by Andy).
2011-08-04Backport GCM support from HEAD. Minimal support at present: no assemblyDr. Stephen Henson
language optimisation. [original by Andy]
2011-06-28AES-NI backport from HEAD. Note that e_aes.c doesn't implement all modesAndy Polyakov
from HEAD yet, more will be back-ported later.
2010-04-14[co]cf128.c: fix "n=0" bug [from HEAD].Andy Polyakov
2010-04-10ctr129.c: fix typo, simplify ctr128_inc and fix "n=0" bug [from HEAD].Andy Polyakov
2010-02-15PR: 2164Dr. Stephen Henson
Submitted by: "Noszticzius, Istvan" <inoszticzius@rightnow.com> Don't clear the output buffer: ciphers should correctly the same input and output buffers.
2008-12-29Fix "possible loss of data" Win64 compiler warnings.Andy Polyakov
2008-12-29Add standard .cvsignore file.Dr. Stephen Henson
2008-12-27Add modes/cts128.c, Ciphertext Stealing implementation.Andy Polyakov
2008-12-23crypto/modes: make modes.h selfsufficient and rename block_f to block128_t.Andy Polyakov
2008-12-16128-bit block cipher modes consolidation. As consolidated functionsAndy Polyakov
rely on indirect call to block functions, they are not as fast as non-consolidated routines. However, performance loss(*) is within measurement error and consolidation advantages are considered to outweigh it. (*) actually one can observe performance *improvement* on e.g. CBC benchmarks thanks to optimization, which also becomes shared among ciphers.