diff options
| author |   Jason A. Donenfeld <Jason@zx2c4.com> | 2018-09-12 18:42:14 +0200 |
|---|---|---|
| committer | Jason A. Donenfeld <Jason@zx2c4.com> | 2018-09-12 18:53:11 +0200 |
| commit | efc5c78af2d18992ca876d5268fc89e1d01aab75 (patch) | |
| tree | 4727daaf5a83698c862ec848f5e567365df48da8 /src/crypto/zinc/poly1305/poly1305-donna32.h | |
| parent | curve25519-x86_64: remove useless define (diff) | |
| download | wireguard-monolithic-historical-efc5c78af2d18992ca876d5268fc89e1d01aab75.tar.xz wireguard-monolithic-historical-efc5c78af2d18992ca876d5268fc89e1d01aab75.zip | |
poly1305: precompute 5*r in init instead of blocks
Diffstat (limited to 'src/crypto/zinc/poly1305/poly1305-donna32.h')
| -rw-r--r-- | src/crypto/zinc/poly1305/poly1305-donna32.h | 15 |
1 files changed, 11 insertions, 4 deletions
diff --git a/src/crypto/zinc/poly1305/poly1305-donna32.h b/src/crypto/zinc/poly1305/poly1305-donna32.h index 1decb33..dc32123 100644 --- a/src/crypto/zinc/poly1305/poly1305-donna32.h +++ b/src/crypto/zinc/poly1305/poly1305-donna32.h @@ -9,6 +9,7 @@ struct poly1305_internal { u32 h[5]; u32 r[5]; + u32 s[4]; }; static void poly1305_init_generic(void *ctx, const u8 key[16]) @@ -22,6 +23,12 @@ static void poly1305_init_generic(void *ctx, const u8 key[16]) st->r[3] = (get_unaligned_le32(&key[9]) >> 6) & 0x3f03fff; st->r[4] = (get_unaligned_le32(&key[12]) >> 8) & 0x00fffff; + /* s = 5*r */ + st->s[0] = st->r[1] * 5; + st->s[1] = st->r[2] * 5; + st->s[2] = st->r[3] * 5; + st->s[3] = st->r[4] * 5; + /* h = 0 */ st->h[0] = 0; st->h[1] = 0; @@ -47,10 +54,10 @@ static void poly1305_blocks_generic(void *ctx, const u8 *input, size_t len, r3 = st->r[3]; r4 = st->r[4]; - s1 = r1 * 5; - s2 = r2 * 5; - s3 = r3 * 5; - s4 = r4 * 5; + s1 = st->s[0]; + s2 = st->s[1]; + s3 = st->s[2]; + s4 = st->s[3]; h0 = st->h[0]; h1 = st->h[1]; |