[PATCH] rijndael: use more compact look-up tables and add table prefetching

Jussi Kivilinna jussi.kivilinna at iki.fi
Mon Dec 15 16:47:52 CET 2014

On 2014-12-15 13:29, Werner Koch wrote:
> On Fri, 12 Dec 2014 23:52, jussi.kivilinna at iki.fi said:
>> AMD64 assembly is slower than before because of additional rotation
>> instructions. The generic C implementation is new better optimized and
>> actually faster than before.
> Can you explain why we want a slower implementation of AESNI?  Make
> side-channel attacks harder?

AMD64 assembly implementation is different (rijndael-amd64.S) from
AES-NI implementation (rijndael-aesni.c). AES-NI has not been changed by
this patch and has same performance as before.


> Salam-Shalom,
>    Werner

More information about the Gcrypt-devel mailing list