[Libre-soc-dev] gcc binutils sv cryptoprimitives etc

[Luke Kenneth Casson Leighton]

https://www.groestl.info/specification.html

pretty much by the numbers going through the hash algorithms used in
cryptonote i encountered groestl which was a candidate for SHA-3

it looks "inspired" by Rijndael, uses the same S-Box (actually GF2), same
MixColumns concept (expanded to 8x8 matrix size) with a different
circulant, same cyclic shift concept.

basically they jumped the size from 4x4 to 8x8 and kept the primitives the
same.

the nice thing about that is that the exact same REMAP capability can be
used from SV, however a trick that could be used in Rijndael (swizzle)
cannot, because there is no vec8 and we really don't want one to be honest.

instead a static circulant matrix can be used, prepared once, and a
*SINGLE* GF(256) multiply-accumulate instruction used with a full VL=64 to
literally cover the whole matrix.

which is fascinating and pushes the limits of SV in precisely the right
ways.





-- 
---
crowd-funded eco-conscious hardware: https://www.crowdsupply.com/eoma68