openssl/crypto/modes
Andy Polyakov c1b2569d23 modes/gcm128.c: coalesce calls to GHASH.
On contemporary platforms assembly GHASH processes multiple blocks
faster than one by one. For TLS payloads shorter than 16 bytes, e.g.
alerts, it's possible to reduce hashing operation to single call.
And for block lengths not divisible by 16 - fold two final calls to
one. Improvement is most noticeable with "reptoline", because call to
assembly GHASH is indirect.

Reviewed-by: Rich Salz <rsalz@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/6312)
2018-06-03 21:13:28 +02:00
..
asm Update copyright year 2018-05-29 13:16:04 +01:00
build.info Harmonize the make variables across all known platforms families 2018-02-14 17:13:53 +01:00
cbc128.c Don't call memcpy if len is zero. 2017-02-20 19:17:53 -05:00
ccm128.c Copyright consolidation 06/10 2016-05-17 14:51:04 -04:00
cfb128.c Copyright consolidation 06/10 2016-05-17 14:51:04 -04:00
ctr128.c modes/ctr128.c: fix false carry in counter increment procedure. 2016-11-25 17:22:21 +01:00
cts128.c Convert modes selftests (cts128 and gcm128) to internal test 2016-11-03 13:13:31 +01:00
gcm128.c modes/gcm128.c: coalesce calls to GHASH. 2018-06-03 21:13:28 +02:00
modes_lcl.h modes/gcm128.c: coalesce calls to GHASH. 2018-06-03 21:13:28 +02:00
ocb128.c Update copyright year 2018-04-17 15:18:40 +02:00
ofb128.c Copyright consolidation 06/10 2016-05-17 14:51:04 -04:00
wrap128.c Reduce minimal out length in CRYPTO_128_unwrap_pad 2018-05-30 23:16:52 +02:00
xts128.c Copyright consolidation 06/10 2016-05-17 14:51:04 -04:00