| /optee_os-3.20.0/core/crypto/ |
| A D | aes-gcm-ghash-tbl.c | 64 ghash_key->HH[8] = vh; in internal_aes_gcm_ghash_gen_tbl()
67 ghash_key->HH[0] = 0; in internal_aes_gcm_ghash_gen_tbl()
77 ghash_key->HH[i] = vh; in internal_aes_gcm_ghash_gen_tbl()
82 uint64_t *HiH = ghash_key->HH + i; in internal_aes_gcm_ghash_gen_tbl()
87 HiH[j] = vh ^ ghash_key->HH[j]; in internal_aes_gcm_ghash_gen_tbl()
119 zh = ghash_key->HH[lo]; in internal_aes_gcm_ghash_mult_tbl()
131 zh ^= ghash_key->HH[lo]; in internal_aes_gcm_ghash_mult_tbl()
139 zh ^= ghash_key->HH[hi]; in internal_aes_gcm_ghash_mult_tbl()
|
| /optee_os-3.20.0/core/lib/libtomcrypt/src/hashes/ |
| A D | md4.c | 62 #define HH(a, b, c, d, x, s) { \ macro
124 HH (a, b, c, d, x[ 0], S31); /* 33 */ in ss_md4_compress()
125 HH (d, a, b, c, x[ 8], S32); /* 34 */ in ss_md4_compress()
126 HH (c, d, a, b, x[ 4], S33); /* 35 */ in ss_md4_compress()
127 HH (b, c, d, a, x[12], S34); /* 36 */ in ss_md4_compress()
128 HH (a, b, c, d, x[ 2], S31); /* 37 */ in ss_md4_compress()
129 HH (d, a, b, c, x[10], S32); /* 38 */ in ss_md4_compress()
130 HH (c, d, a, b, x[ 6], S33); /* 39 */ in ss_md4_compress()
131 HH (b, c, d, a, x[14], S34); /* 40 */ in ss_md4_compress()
132 HH (a, b, c, d, x[ 1], S31); /* 41 */ in ss_md4_compress()
[all …]
|
| A D | md5.c | 44 #define HH(a,b,c,d,M,s,t) \ macro
83 #define HH(a,b,c,d,M,s,t) \ macro
168 HH(a,b,c,d,W[5],4,0xfffa3942UL) in ss_md5_compress()
169 HH(d,a,b,c,W[8],11,0x8771f681UL) in ss_md5_compress()
172 HH(a,b,c,d,W[1],4,0xa4beea44UL) in ss_md5_compress()
173 HH(d,a,b,c,W[4],11,0x4bdecfa9UL) in ss_md5_compress()
174 HH(c,d,a,b,W[7],16,0xf6bb4b60UL) in ss_md5_compress()
176 HH(a,b,c,d,W[13],4,0x289b7ec6UL) in ss_md5_compress()
177 HH(d,a,b,c,W[0],11,0xeaa127faUL) in ss_md5_compress()
178 HH(c,d,a,b,W[3],16,0xd4ef3085UL) in ss_md5_compress()
[all …]
|
| A D | rmd128.c | 132 HH(aa, bb, cc, dd, X[ 3], 11); in ss_rmd128_compress()
133 HH(dd, aa, bb, cc, X[10], 13); in ss_rmd128_compress()
134 HH(cc, dd, aa, bb, X[14], 6); in ss_rmd128_compress()
135 HH(bb, cc, dd, aa, X[ 4], 7); in ss_rmd128_compress()
136 HH(aa, bb, cc, dd, X[ 9], 14); in ss_rmd128_compress()
137 HH(dd, aa, bb, cc, X[15], 9); in ss_rmd128_compress()
138 HH(cc, dd, aa, bb, X[ 8], 13); in ss_rmd128_compress()
139 HH(bb, cc, dd, aa, X[ 1], 15); in ss_rmd128_compress()
140 HH(aa, bb, cc, dd, X[ 2], 14); in ss_rmd128_compress()
141 HH(dd, aa, bb, cc, X[ 7], 8); in ss_rmd128_compress()
[all …]
|
| A D | rmd256.c | 170 HH(aa, bb, cc, dd, X[ 3], 11); in ss_rmd256_compress()
171 HH(dd, aa, bb, cc, X[10], 13); in ss_rmd256_compress()
172 HH(cc, dd, aa, bb, X[14], 6); in ss_rmd256_compress()
173 HH(bb, cc, dd, aa, X[ 4], 7); in ss_rmd256_compress()
174 HH(aa, bb, cc, dd, X[ 9], 14); in ss_rmd256_compress()
175 HH(dd, aa, bb, cc, X[15], 9); in ss_rmd256_compress()
176 HH(cc, dd, aa, bb, X[ 8], 13); in ss_rmd256_compress()
177 HH(bb, cc, dd, aa, X[ 1], 15); in ss_rmd256_compress()
178 HH(aa, bb, cc, dd, X[ 2], 14); in ss_rmd256_compress()
179 HH(dd, aa, bb, cc, X[ 7], 8); in ss_rmd256_compress()
[all …]
|
| A D | rmd160.c | 153 HH(dd, ee, aa, bb, cc, X[ 3], 11); in ss_rmd160_compress()
154 HH(cc, dd, ee, aa, bb, X[10], 13); in ss_rmd160_compress()
155 HH(bb, cc, dd, ee, aa, X[14], 6); in ss_rmd160_compress()
156 HH(aa, bb, cc, dd, ee, X[ 4], 7); in ss_rmd160_compress()
157 HH(ee, aa, bb, cc, dd, X[ 9], 14); in ss_rmd160_compress()
158 HH(dd, ee, aa, bb, cc, X[15], 9); in ss_rmd160_compress()
159 HH(cc, dd, ee, aa, bb, X[ 8], 13); in ss_rmd160_compress()
160 HH(bb, cc, dd, ee, aa, X[ 1], 15); in ss_rmd160_compress()
161 HH(aa, bb, cc, dd, ee, X[ 2], 14); in ss_rmd160_compress()
162 HH(ee, aa, bb, cc, dd, X[ 7], 8); in ss_rmd160_compress()
[all …]
|
| A D | rmd320.c | 49 #define HH(a, b, c, d, e, x, s) \ macro
193 HH(dd, ee, aa, bb, cc, X[ 3], 11); in ss_rmd320_compress()
194 HH(cc, dd, ee, aa, bb, X[10], 13); in ss_rmd320_compress()
195 HH(bb, cc, dd, ee, aa, X[14], 6); in ss_rmd320_compress()
196 HH(aa, bb, cc, dd, ee, X[ 4], 7); in ss_rmd320_compress()
197 HH(ee, aa, bb, cc, dd, X[ 9], 14); in ss_rmd320_compress()
198 HH(dd, ee, aa, bb, cc, X[15], 9); in ss_rmd320_compress()
199 HH(cc, dd, ee, aa, bb, X[ 8], 13); in ss_rmd320_compress()
200 HH(bb, cc, dd, ee, aa, X[ 1], 15); in ss_rmd320_compress()
201 HH(aa, bb, cc, dd, ee, X[ 2], 14); in ss_rmd320_compress()
[all …]
|
| /optee_os-3.20.0/lib/libmbedtls/mbedtls/library/ |
| A D | gcm.c | 101 ctx->HH[8] = vh; in gcm_gen_table()
110 ctx->HH[0] = 0; in gcm_gen_table()
120 ctx->HH[i] = vh; in gcm_gen_table()
125 uint64_t *HiL = ctx->HL + i, *HiH = ctx->HH + i; in gcm_gen_table()
130 HiH[j] = vh ^ ctx->HH[j]; in gcm_gen_table()
203 MBEDTLS_PUT_UINT32_BE( ctx->HH[8] >> 32, h, 0 ); in gcm_mult()
204 MBEDTLS_PUT_UINT32_BE( ctx->HH[8], h, 4 ); in gcm_mult()
215 zh = ctx->HH[lo]; in gcm_mult()
229 zh ^= ctx->HH[lo]; in gcm_mult()
238 zh ^= ctx->HH[hi]; in gcm_mult()
|
| /optee_os-3.20.0/core/arch/arm/crypto/ |
| A D | ghash-ce-core_a64.S | 63 HH .req v16
156 ld1 {HH.2d-HH4.2d}, [x8]
158 trn1 SHASH2.2d, SHASH.2d, HH.2d
159 trn2 T1.2d, SHASH.2d, HH.2d
281 pmull2 XH3.1q, HH.2d, XL3.2d // a1 * b1
282 pmull XL3.1q, HH.1d, XL3.1d // a0 * b0
413 ld1 {HH.2d}, [x4]
422 trn1 SHASH2.2d, SHASH.2d, HH.2d
423 trn2 T1.2d, SHASH.2d, HH.2d
513 pmull2 XH.1q, HH.2d, XL.2d // a1 * b1
[all …]
|
| /optee_os-3.20.0/lib/libmbedtls/mbedtls/include/mbedtls/ |
| A D | gcm.h | 70 uint64_t HH[16]; /*!< Precalculated HTable high. */ member
|
| /optee_os-3.20.0/core/include/crypto/ |
| A D | internal_aes-gcm.h | 21 uint64_t HH[16]; member
|