openssl/crypto/modes
Andy Polyakov c1b2569d23 modes/gcm128.c: coalesce calls to GHASH.
On contemporary platforms assembly GHASH processes multiple blocks
faster than one by one. For TLS payloads shorter than 16 bytes, e.g.
alerts, it's possible to reduce hashing operation to single call.
And for block lengths not divisible by 16 - fold two final calls to
one. Improvement is most noticeable with "reptoline", because call to
assembly GHASH is indirect.

Reviewed-by: Rich Salz <rsalz@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/6312)
2018-06-03 21:13:28 +02:00
..
asm Update copyright year 2018-05-29 13:16:04 +01:00
build.info Harmonize the make variables across all known platforms families 2018-02-14 17:13:53 +01:00
cbc128.c Don't call memcpy if len is zero. 2017-02-20 19:17:53 -05:00
ccm128.c
cfb128.c
ctr128.c modes/ctr128.c: fix false carry in counter increment procedure. 2016-11-25 17:22:21 +01:00
cts128.c
gcm128.c modes/gcm128.c: coalesce calls to GHASH. 2018-06-03 21:13:28 +02:00
modes_lcl.h modes/gcm128.c: coalesce calls to GHASH. 2018-06-03 21:13:28 +02:00
ocb128.c Update copyright year 2018-04-17 15:18:40 +02:00
ofb128.c
wrap128.c Reduce minimal out length in CRYPTO_128_unwrap_pad 2018-05-30 23:16:52 +02:00
xts128.c