Multiply b and c as GF(2) polynomials modulo poly

NewCipher creates and returns a new cipher.Block. The key argument should be the AES key, either 16, 24, or 32 bytes to select AES-128, AES-192, or AE

Key expansion algorithm. See FIPS-197, Figure 11. Their rcon[i] is our powx[i-1] << 24.

paddedGHASH pads data with zeroes until its length is a multiple of 16-bytes. It then calculates a new value for hash using the GHASH algorithm.

deriveCounter computes the initial GCM counter state from the given nonce. See NIST SP 800-38D, section 7.1.

go:noescape

go:noescape

sliceForAppend takes a slice and a requested number of bytes. It returns a slice with the contents of the given slice followed by that many bytes and

cryptBlocks invokes the cipher message (KM) instruction with the given function code. This is equivalent to AES in ECB mode. The length must be a mult

inc increments the rightmost 32-bits of the count value by 1.

newCipherGeneric creates and returns a new cipher.Block implemented in pure Go.

Open authenticates and decrypts ciphertext. See the cipher.AEAD interface for details.

go:noescape

auth calculates GHASH(ciphertext, additionalData), masks the result with tagMask and writes the result to out.

counterCrypt encrypts src using AES in counter mode and places the result into dst. cnt is the initial count value and will be updated with the next c

gcmLengths writes len0 || len1 as big-endian values to a 16-byte array.

ghash uses the GHASH algorithm to hash data with the given key. The initial hash value is given by hash which will be updated with the new hash value.

kmaGCM executes the encryption or decryption operation given by fn. The tag will be calculated and written to tag. cnt should contain the current coun

go:noescape

defined in asm_ppc64le.s go:noescape

sliceForAppend takes a slice and a requested number of bytes. It returns a slice with the contents of the given slice followed by that many bytes and

Apply sbox0 to each byte in w.

cryptBlocksChain invokes the cipher message with chaining (KMC) instruction with the given function code. The length must be a multiple of BlockSize (

cryptBlocksGCM encrypts src using AES in counter mode using the given function code and key. The rightmost 32-bits of the counter are incremented betw

go:noescape

Decrypt one block from src into dst, using the expanded key xk.

defined in asm_amd64.s

go:noescape

Encrypt one block from src into dst, using the expanded key xk.

expandKey is used by BenchmarkExpand to ensure that the asm implementation of key expansion is used for the benchmark when it is available.

go:noescape

go:noescape

go:noescape

defined in asm_amd64.s

hasHWSupport reports whether the AES-128, AES-192 and AES-256 cipher message (KM) function codes are supported. Note that this function is expensive.

Rotate

supportsKMA reports whether the message-security-assist 8 facility is available. This function call may be expensive so hasKMA should be queried inste

xorBytes xors the contents of a and b and places the resulting values into dst. If a and b are not the same length then the number of bytes processed

AESGCMSupport returns true if the Go standard library supports AES-GCM in hardware.

NewCTR returns a Stream which encrypts/decrypts using the AES block cipher in counter mode. The length of iv must be the same as BlockSize.

NewGCM returns the AES cipher wrapped in Galois Counter Mode. This is only called by crypto/cipher.NewGCM via the gcmAble interface.

NewGCM returns the AES cipher wrapped in Galois Counter Mode. This is only called by crypto/cipher.NewGCM via the gcmAble interface.