Maamoun TK maamoun.tk@googlemail.com writes:
Are you looking for removing rev64s on LE? If so, I don't think we can figure a variant that allows us continue working on an unsorted register value on LE as pmull requires the input to be sorted properly, that is transposed doublewords.
I haven't been following along closely, but it would be if gcm_hash could work with a minimum of data shuffling, and let gsm_init_key move the precomputed data around for best layout.
Regards, /Niels