tree 6eb1696d05daac420e9543f47bbf1efe25f8f4d2
parent a7f83c4ec19c0e10ca1bc81ce7d632d028f249b7
author David Benjamin <davidben@google.com> 1683062881 -0400
committer Boringssl LUCI CQ <boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com> 1683137041 +0000

Don't make assumptions about GCM128_CONTEXT layout in aesni-gcm-x86_64.pl

This is a little trickier because Intel architectures are so
inconveniently register-starved. This code was already using every
register. However, since Xi is only needed at the start and end of the
function, I just swapped the Xi and Htable parameters. Xi is passed on
the stack, so we don't need to explicitly spill it.

Change-Id: I2ef4552fc181a5350c9b1c733cf2319377a06b74
Reviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/59525
Reviewed-by: Adam Langley <agl@google.com>
Commit-Queue: David Benjamin <davidben@google.com>