| /freebsd-13-stable/contrib/bearssl/src/symcipher/ |
| H A D | aes_x86ni.c | 124 #define KEXP128(k, i, rcon) do { \
125 k = expand_step128(k, _mm_aeskeygenassist_si128(k, rcon)); \
144 #define KEXP256(i, rcon) do { \
146 t2 = _mm_aeskeygenassist_si128(t3, rcon); \
|
| /freebsd-13-stable/crypto/openssl/crypto/aes/asm/ |
| H A D | aesv8-armx.pl | 77 my ($zero,$rcon,$mask,$in0,$in1,$tmp,$key)=
118 vld1.32 {$rcon,$mask},[$ptr],#32
136 veor $key,$key,$rcon
138 vshl.u8 $rcon,$rcon,#1
142 vld1.32 {$rcon},[$ptr]
153 veor $key,$key,$rcon
155 vshl.u8 $rcon,$rcon,#1
167 veor $key,$key,$rcon
[all...] |
| H A D | aesp8-ppc.pl | 84 my ($zero,$in0,$in1,$key,$rcon,$mask,$tmp)=map("v$_",(0..6));
93 rcon: label
101 mflr $ptr #vvvvv "distance between . and rcon
144 lvx $rcon,0,$ptr
171 vcipherlast $key,$key,$rcon
180 vadduwm $rcon,$rcon,$rcon
184 lvx $rcon,0,$ptr # last two round keys
191 vcipherlast $key,$key,$rcon
[all...] |
| H A D | vpaes-armv8.pl | 130 .Lk_rcon: // rcon
645 my ($invlo,$invhi,$iptlo,$ipthi,$rcon) = map("v$_.16b",(18..21,8));
772 ## high side's, except no rcon and no rotation.
881 ## Adds rcon from low byte of %xmm8, then rotates %xmm8 for
882 ## next rcon.
893 // extract rcon from xmm8
895 ext v1.16b, $rcon, v4.16b, #15 // vpalignr \$15, %xmm8, %xmm4, %xmm1
896 ext $rcon, $rcon, $rcon, #1
[all...] |
| H A D | aes-c64xplus.pl | 599 || ADD $TEA,A0,A30 ; rcon
601 LDW *A30++[1],A31 ; rcon[i]
623 XOR A31,$K[0],$K[0] ; ^=rcon[i]
671 || ADD $TEA,A0,A30 ; rcon
674 LDW *A30++[1],A31 ; rcon[i]
698 XOR A31,$K[0],$K[0] ; ^=rcon[i]
752 || ADD $TEA,A0,A30 ; rcon
755 LDW *A30++[1],A31 ; rcon[i]
780 || XOR A31,$K[0],$K[0] ; ^=rcon[i]
1208 rcon label
[all...] |
| H A D | aes-mips.pl | 1309 my ($rcon,$cnt)=($gp,$fp);
1320 $PTR_ADD $rcon,$Tbl,256
1407 lw $i0,0($rcon)
1419 $PTR_ADD $rcon,4
1464 lw $i0,0($rcon)
1478 $PTR_ADD $rcon,4
1524 lw $i0,0($rcon)
1565 $PTR_ADD $rcon,4
2120 .byte 0x01,0x00,0x00,0x00, 0x02,0x00,0x00,0x00 # rcon
|
| H A D | vpaes-ppc.pl | 146 Lk_rcon: # rcon
868 my ($invlo,$invhi,$iptlo,$ipthi,$rcon) = map("v$_",(10..13,24));
1062 ## high side's, except no rcon and no rotation.
1207 ## Adds rcon from low byte of %xmm8, then rotates %xmm8 for
1208 ## next rcon.
1218 # extract rcon from xmm8
1220 ?vsldoi v1, $rcon, v9, 15 # vpalignr \$15, %xmm8, %xmm4, %xmm1
1221 ?vsldoi $rcon, $rcon, $rcon, 1
[all...] |
| H A D | aes-armv4.pl | 188 @ rcon[]
544 add $t3,$tbl,#256 @ rcon
558 ldr $t1,[$t3],#4 @ rcon[i++]
607 add $t3,$tbl,#256 @ rcon
622 ldr $t1,[$t3],#4 @ rcon[i++]
679 add $t3,$tbl,#256 @ rcon
694 ldr $t1,[$t3],#4 @ rcon[i++]
|
| /freebsd-13-stable/contrib/wpa/src/crypto/ |
| H A D | aes_i.h | 27 extern const u32 rcon[10];
33 #define RCON(i) rcon[(i)]
|
| H A D | aes-internal.c | 729 const u32 rcon[] = { variable
732 0x1B000000, 0x36000000, /* for 128-bit blocks, Rijndael never uses more than 10 rcon values */
771 /* for 128-bit blocks, Rijndael never uses more than 10 rcon values */
|
| /freebsd-13-stable/crypto/openssl/crypto/aes/ |
| H A D | aes_core.c | 586 u32 rcon; local
592 memcpy(&rcon, "\1\0\0\0", 4);
600 temp ^= rcon;
601 XtimeWord(&rcon);
1253 static const u32 rcon[] = { variable
1256 0x1B000000, 0x36000000, /* for 128-bit blocks, Rijndael never uses more than 10 rcon values */
1296 rcon[i];
1316 rcon[i];
1338 rcon[i];
1832 static const u32 rcon[] variable
[all...] |
| H A D | aes_x86core.c | 465 static const u32 rcon[] = { variable
468 0x0000001bU, 0x00000036U, /* for 128-bit blocks, Rijndael never uses more than 10 rcon values */
508 rcon[i];
528 rcon[i];
550 rcon[i];
|
| /freebsd-13-stable/sys/crypto/openssl/arm/ |
| H A D | aes-armv4.S | 158 @ rcon[]
514 add r6,r10,#256 @ rcon
528 ldr r4,[r6],#4 @ rcon[i++]
577 add r6,r10,#256 @ rcon
592 ldr r4,[r6],#4 @ rcon[i++]
649 add r6,r10,#256 @ rcon
664 ldr r4,[r6],#4 @ rcon[i++]
|
| /freebsd-13-stable/sys/contrib/openzfs/module/icp/algs/aes/ |
| H A D | aes_impl_generic.c | 768 static const uint32_t rcon[RC_LENGTH] = variable
770 /* for 128-bit blocks, Rijndael never uses more than 10 rcon values */
809 rcon[i];
832 rcon[i];
858 rcon[i];
|
| /freebsd-13-stable/sys/crypto/rijndael/ |
| H A D | rijndael-alg-fst.c | 719 static const u32 rcon[] = { variable
722 0x1B000000, 0x36000000, /* for 128-bit blocks, Rijndael never uses more than 10 rcon values */
753 rcon[i];
773 rcon[i];
795 rcon[i];
|
| /freebsd-13-stable/crypto/openssh/ |
| H A D | rijndael.c | 615 static const u32 rcon[] = { variable
618 0x1B000000, 0x36000000, /* for 128-bit blocks, Rijndael never uses more than 10 rcon values */
647 rcon[i];
667 rcon[i];
689 rcon[i];
|
| /freebsd-13-stable/sys/crypto/openssl/aarch64/ |
| H A D | vpaes-armv8.S | 81 .Lk_rcon: // rcon
705 ## high side's, except no rcon and no rotation.
814 ## Adds rcon from low byte of %xmm8, then rotates %xmm8 for
815 ## next rcon.
826 // extract rcon from xmm8
838 // low round: same as high round, but no rotation and no rcon.
|