crypto: arm - add support for GHASH using ARMv8 Crypto Extensions

This implements the GHASH hash algorithm (as used by the GCM AEAD
chaining mode) using the AArch32 version of the 64x64 to 128 bit
polynomial multiplication instruction (vmull.p64) that is part of
the ARMv8 Crypto Extensions.

Signed-off-by: Ard Biesheuvel <ard.biesheuvel@linaro.org>
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>

1 files changed, 10 insertions, 0 deletions

diff --git a/arch/arm/crypto/Kconfig b/arch/arm/crypto/Kconfig
index 63588bdf3b5d..d63f319924d2 100644
--- a/arch/arm/crypto/Kconfig
+++ b/arch/arm/crypto/Kconfig
@@ -110,4 +110,14 @@ config CRYPTO_AES_ARM_CE
           Use an implementation of AES in CBC, CTR and XTS modes that uses
           ARMv8 Crypto Extensions
 
+config CRYPTO_GHASH_ARM_CE
+        tristate "PMULL-accelerated GHASH using ARMv8 Crypto Extensions"
+        depends on KERNEL_MODE_NEON
+        select CRYPTO_HASH
+        select CRYPTO_CRYPTD
+        help
+          Use an implementation of GHASH (used by the GCM AEAD chaining mode)
+          that uses the 64x64 to 128 bit polynomial multiplication (vmull.p64)
+          that is part of the ARMv8 Crypto Extensions
+
 endif