CONFIG_CRYPTO_AES_TI: AES (Advanced Encryption Standard) (fixed time)

General informations

The Linux kernel configuration item CONFIG_CRYPTO_AES_TI has multiple definitions:

AES (Advanced Encryption Standard) (fixed time) found in crypto/Kconfig

The configuration item CONFIG_CRYPTO_AES_TI:

• prompt: AES (Advanced Encryption Standard) (fixed time)
• type: tristate
• depends on: (none)
• defined in crypto/Kconfig
• found in Linux kernels: 6.1–6.8, 6.9-rc+HEAD
• modules built: aes_ti

Help text

AES cipher algorithms (Rijndael)(FIPS-197, ISO/IEC 18033-3)

This is a generic implementation of AES that attempts to eliminate data dependent latencies as much as possible without affecting performance too much. It is intended for use by the generic CCM and GCM drivers, and other CTR or CMAC/XCBC based modes that rely solely on encryption (although decryption is supported as well, but with a more dramatic performance hit)

Instead of using 16 lookup tables of 1 KB each, (8 for encryption and 8 for decryption), this implementation only uses just two S-boxes of 256 bytes each, and attempts to eliminate data dependent latencies by prefetching the entire table into the cache at the start of each block. Interrupts are also disabled to avoid races where cachelines are evicted when the CPU is interrupted to do something else.

Fixed time AES cipher found in crypto/Kconfig

The configuration item CONFIG_CRYPTO_AES_TI:

• prompt: Fixed time AES cipher
• type: tristate
• depends on: (none)
• defined in crypto/Kconfig
• found in Linux kernels: 4.11–4.20, 5.0–5.19, 6.0, 6.0+HEAD
• modules built: aes_ti

Help text

This is a generic implementation of AES that attempts to eliminate data dependent latencies as much as possible without affecting performance too much. It is intended for use by the generic CCM and GCM drivers, and other CTR or CMAC/XCBC based modes that rely solely on encryption (although decryption is supported as well, but with a more dramatic performance hit)

Instead of using 16 lookup tables of 1 KB each, (8 for encryption and 8 for decryption), this implementation only uses just two S-boxes of 256 bytes each, and attempts to eliminate data dependent latencies by prefetching the entire table into the cache at the start of each block. Interrupts are also disabled to avoid races where cachelines are evicted when the CPU is interrupted to do something else.

Hardware

LKDDb

Raw data from LKDDb:

• lkddb module aes_ti CONFIG_CRYPTO_AES_TI : crypto/Kconfig : "AES (Advanced Encryption Standard) (fixed time)" # in 4.11–4.20, 5.0–5.19, 6.0–6.8, 6.9-rc+HEAD

Sources

This page is automaticly generated with free (libre, open) software lkddb(see lkddb-sources).

The data is retrived from:

• Linux kernel
• Linux Kernel Driver DataBase (LKDDb)

Automatic links from Google (and ads)

Custom Search

Popular queries: