Unified AES-SMS4—Camellia symmetric key block cipher acceleration

A method performed by a computing apparatus, the method comprising:

• fetching, using fetch circuitry, a cipher instruction specifying a datum, a key, and an opcode to specify a first cryptographic mode or a second cryptographic mode and an operation;
• decoding, using decode circuitry, the fetched cipher instruction;
• and
• executing, using execution circuitry, the decoded cipher instruction by:
• in response to the opcode specifying the first cryptographic mode, configuring a unified cipher datapath to the first cryptographic mode for a first block cipher corresponding to the first cryptographic mode, and performing the operation using the unified cipher datapath configured in the first cryptographic mode, and
• in response to the opcode specifying the second cryptographic mode, configuring the unified cipher datapath to the second cryptographic mode for a second block cipher corresponding to the second cryptographic mode and different than the first block cipher, and performing the operation using the unified cipher datapath configured in the second cryptographic mode, wherein the unified cipher datapath comprises a plurality of hybrid substitution boxes (Sboxes) to perform Galois Field (GF) multiplications and inverse computations.

A non-transitory machine-readable medium containing code, when executed by a processor, to cause the processor to perform a method comprising:

• fetching, using fetch circuitry, a cipher instruction specifying a datum, a key, and an opcode to specify a first cryptographic mode or a second cryptographic mode and an operation;
• decoding, using decode circuitry, the fetched cipher instruction;
• and
• executing, using execution circuitry, the decoded cipher instruction by:
• in response to the opcode specifying the first cryptographic mode, configuring a unified cipher datapath to the first cryptographic mode for a first block cipher corresponding to the first cryptographic mode, and performing the operation using the unified cipher datapath configured in the first cryptographic mode, and
• in response to the opcode specifying the second cryptographic mode, configuring the unified cipher datapath to the second cryptographic mode for a second block cipher corresponding to the second cryptographic mode and different than the first block cipher, and performing the operation using the unified cipher datapath configured in the second cryptographic mode, wherein the unified cipher datapath comprises a plurality of hybrid substitution boxes (Sboxes) to perform Galois Field (GF) multiplications and inverse computations.