diff options
author | Ard Biesheuvel <ardb@kernel.org> | 2020-12-08 00:34:02 +0100 |
---|---|---|
committer | Herbert Xu <herbert@gondor.apana.org.au> | 2021-01-03 08:41:34 +1100 |
commit | ddf169a98f01d6fd46295ec0dd4c1d6385be65d4 (patch) | |
tree | 67811b959d2e4af9d06d09be2b60774cba7404d8 /crypto/tcrypt.c | |
parent | a417178abc4ae2517231ee67a1291d58929fade1 (diff) | |
download | linux-ddf169a98f01d6fd46295ec0dd4c1d6385be65d4.tar.gz linux-ddf169a98f01d6fd46295ec0dd4c1d6385be65d4.tar.bz2 linux-ddf169a98f01d6fd46295ec0dd4c1d6385be65d4.zip |
crypto: aesni - implement support for cts(cbc(aes))
Follow the same approach as the arm64 driver for implementing a version
of AES-NI in CBC mode that supports ciphertext stealing. This results in
a ~2x speed increase for relatively short inputs (less than 256 bytes),
which is relevant given that AES-CBC with ciphertext stealing is used
for filename encryption in the fscrypt layer. For larger inputs, the
speedup is still significant (~25% on decryption, ~6% on encryption)
Tested-by: Eric Biggers <ebiggers@google.com> # x86_64
Signed-off-by: Ard Biesheuvel <ardb@kernel.org>
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
Diffstat (limited to 'crypto/tcrypt.c')
0 files changed, 0 insertions, 0 deletions