Code

[aes] Masked GHASH implementation#8

Code

Merged

vogelpi merged 7 commits intoaes-gcm-reviewvogelpi/opentitan:aes-gcm-reviewfrom aes-gcm-masked-rtlvogelpi/opentitan:aes-gcm-masked-rtlCopy head branch name to clipboardNov 19, 2024

+471-161

Commits

Commits on Nov 18, 2024

• [aes/rtl] Implement masked version of the GHASH block

  Show description for c623783
  vogelpi

  committed
  c623783

  Copy full SHA for c623783

• [aes/rtl] Optimize GHASH state restoring

  Show description for fc48397
  vogelpi

  committed
  fc48397

  Copy full SHA for fc48397

• [aes/rtl] Only allow moving into GCM_SAVE phase after first block

  Show description for d2de22d
  vogelpi

  committed
  d2de22d

  Copy full SHA for d2de22d

• [aes/rtl] Expose GF multiplier latency as GHASH module parameter

  Show description for f956d6f
  vogelpi

  committed
  f956d6f

  Copy full SHA for f956d6f

• [aes/rtl] Avoid SCA leakage during addition of correction terms in GHASH

  Show description for d347faa
  vogelpi

  committed
  d347faa

  Copy full SHA for d347faa

• [aes/rtl] Unmask GHASH state before finally adding Share 1 of S

  Show description for e8de8b2
  vogelpi

  committed
  e8de8b2

  Copy full SHA for e8de8b2

• [aes/rtl] Optimize GHASH state restoring, align masked and unmasked impl

  Show description for 8bb7f7e
  vogelpi

  committed
  8bb7f7e

  Copy full SHA for 8bb7f7e