On Thu, Apr 17, 2025 at 04:42:46PM +0800, Qingfang Deng wrote: > > I see. But do you have a particular configuration in mind? Does it > > have scalar AES too? I looked into that a while ago but I was told > > that nobody actually incorporates that. So what about these > > extensions? Are they commonly implemented? > > It's aes-generic.c (LUT-based) with accelerated GHASH. That's an odd combination. Normally accelerated AES and GHASH go together. Presumably you're targeting some specific RISC-V CPU. Is this going to be a one-off thing for that specific CPU? Or can we expect many RISC-V CPUs to have GHASH acceleration without AES? And if so, why? - Eric
