Re: [PATCH 0/2] lib/crypto: x86/sha512: Partially roll up loops

[Eric Biggers <ebiggers@kernel.org>]

On Thu, Nov 12, 2026 at 12:28:37AM -0800, Eric Biggers wrote:
> Some freshly baked loop rolls in the SSSE3 and AVX optimized SHA-512
> code.
> 
> In each file, SHA-512 rounds 14 through 77 are rolled up into 8 groups
> of 8 rounds.  This saves 20.2 KB of text.  It's also likely to increase
> performance on the CPUs that actually run this code (i.e., CPUs without
> AVX2), due to the improved use of the cache, though the oldest I was
> able to confirm that on is Haswell which has AVX2 anyway.
> 
> Eric Biggers (2):
>   lib/crypto: x86/sha512: Partially roll up sha512_transform_avx()
>   lib/crypto: x86/sha512: Partially roll up sha512_transform_ssse3()
> 
>  lib/crypto/x86/sha512-avx-asm.S   | 124 +++++++++++++++--------------
>  lib/crypto/x86/sha512-ssse3-asm.S | 126 ++++++++++++++++--------------
>  2 files changed, 135 insertions(+), 115 deletions(-)

Applied to https://git.kernel.org/pub/scm/linux/kernel/git/ebiggers/linux.git/log/?h=libcrypto-next

- Eric