[Libre-soc-dev] gcc binutils sv cryptoprimitives etc

Luke Kenneth Casson Leighton lkcl at lkcl.net
Wed Jan 20 16:57:34 GMT 2021


pretty much by the numbers going through the hash algorithms used in
cryptonote i encountered groestl which was a candidate for SHA-3

it looks "inspired" by Rijndael, uses the same S-Box (actually GF2), same
MixColumns concept (expanded to 8x8 matrix size) with a different
circulant, same cyclic shift concept.

basically they jumped the size from 4x4 to 8x8 and kept the primitives the

the nice thing about that is that the exact same REMAP capability can be
used from SV, however a trick that could be used in Rijndael (swizzle)
cannot, because there is no vec8 and we really don't want one to be honest.

instead a static circulant matrix can be used, prepared once, and a
*SINGLE* GF(256) multiply-accumulate instruction used with a full VL=64 to
literally cover the whole matrix.

which is fascinating and pushes the limits of SV in precisely the right

crowd-funded eco-conscious hardware: https://www.crowdsupply.com/eoma68

More information about the Libre-soc-dev mailing list