Pre-calculation of H:
- Provide AES-ECB context (key and mode)
- Provide zeros as data
- Read result data (H)
IV truncation/pre-calculation (GHASH only operation):
- Provide GHASH context (H, lengths and mode)
Note: GHASH only: Y0-encrypted forced to zero, H loaded, and no crypto mode selected
- Provide IV-data-block
- Provide next IV-data-block
- Read dummy result and provide next IV-data-block
- ...
- Read dummy result data and provide last IV-data-block
- Read dummy result data
- Read dummy result data
- Read authentication result (TAG... this data is Y0)
GCM operation with pre-calculated H:
- Provide GCM context (key, Y0 as IV, H, lengths and mode)
- Provide AAD data (and wait for encryption of Y0)
- Provide next AAD data
- Provide last AAD data
- Provide first crypto data
- Provide next crypto data
- Read result data and provide next crypto data
-
...
- Read result data and provide last crypto data
- Read result data
-
Read result data
- Read authentication result (TAG)
For GCM with pre-calculated H, select GCM mode by setting CTRL[GCM] = 2