tree 67811b959d2e4af9d06d09be2b60774cba7404d8
parent a417178abc4ae2517231ee67a1291d58929fade1
author Ard Biesheuvel <ardb@kernel.org> 1607384042 +0100
committer Herbert Xu <herbert@gondor.apana.org.au> 1609623694 +1100

crypto: aesni - implement support for cts(cbc(aes))

Follow the same approach as the arm64 driver for implementing a version
of AES-NI in CBC mode that supports ciphertext stealing. This results in
a ~2x speed increase for relatively short inputs (less than 256 bytes),
which is relevant given that AES-CBC with ciphertext stealing is used
for filename encryption in the fscrypt layer. For larger inputs, the
speedup is still significant (~25% on decryption, ~6% on encryption)

Tested-by: Eric Biggers <ebiggers@google.com> # x86_64
Signed-off-by: Ard Biesheuvel <ardb@kernel.org>
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>