Thread (7 messages) 7 messages, 2 authors, 2017-02-11

[PATCH v3 0/3] crypto: time invariant AES for CCM (and CMAC/XCBC)

flat view

From: herbert@gondor.apana.org.au (Herbert Xu)
Date: 2017-02-11 18:59:50
Also in: linux-crypto

On Fri, Feb 03, 2017 at 02:49:34PM +0000, Ard Biesheuvel wrote:
This series is primarily directed at improving the performance and security
of CCM on the Rasperry Pi 3. This involves splitting the MAC handling of
CCM into a separate driver so that we can efficiently replace it by something
else using the ordinary algo resolution machinery.

Patch #1 adds some testcases for cbcmac(aes), which will be introduced later.

Patch #2 replaces the open coded CBC MAC hashing routines in the CCM driver
with calls to a cbcmac() hash, and implements a template for producing such
cbcmac transforms. This eliminates all the fuzzy scatterwalk code as well.

Patch #3 implements cbcmac(aes) using NEON on arm64, and CMAC/XCBC at the
same time, since it is trivially implemented reusing the same core transform
All applied.  Please send any fixups on top of these patches.
Thanks.
-- 
Email: Herbert Xu [off-list ref]
Home Page: http://gondor.apana.org.au/~herbert/
PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt
Keyboard shortcuts
hback out one level
jnext message in thread
kprevious message in thread
ldrill in
Escclose help / fold thread tree
?toggle this help