authorgravatar for 124872+jedisct1@users.noreply.github.comFrank Denis <124872+jedisct1@users.noreply.github.com> 2022-11-17 23:54:21+01:00
committergravatar for 124872+jedisct1@users.noreply.github.comFrank Denis <124872+jedisct1@users.noreply.github.com> 2022-11-17 23:54:21+01:00
log4dd061a7ac3160c322fd035bc4a7bfa7a0bb9d13
tree87fb9da6610b7f2e9c5bad598ed6aad0e64571f7
parent3051e279a5b9519481e38ce61fba436664b17d0e

ghash: handle the .hi_lo case when no CLMUL acceleration is present, too

1 files changed, 1 insertions(+), 1 deletions(-)

lib/std/crypto/ghash.zig+1-1
......@@ -146,7 +146,7 @@ pub const Ghash = struct {
146146
147147 // Software carryless multiplication of two 64-bit integers.
148148 fn clmulSoft(x_: u128, y_: u128, comptime half: Selector) u128 {
149 const x = @truncate(u64, if (half == .hi) x_ >> 64 else x_);
149 const x = @truncate(u64, if (half == .hi or half == .hi_lo) x_ >> 64 else x_);
150150 const y = @truncate(u64, if (half == .hi) y_ >> 64 else y_);
151151
152152 const x0 = x & 0x1111111111111110;