tree b3b0a24c3409dac3790ac49860ad9f103d2b9c05
parent 5f77801ac3f6212f66547df93c11d8add3261878
author Jaeden Amero <jaeden.amero@arm.com> 1527617079 +0100
committer Jaeden Amero <jaeden.amero@arm.com> 1528887809 +0100

gf128mul: Remove the jump table

If we're unlucky with memory placement, gf128mul_table_bbe may spread over
two cache lines and this would leak b >> 63 to a cache timing attack.
Instead, take an approach that is less likely to make different memory
loads depending on the value of b >> 63 and is also unlikely to be compiled
to a condition.