tree 61f95376e521444e93951d3e2eee5ad00b2347a0
parent 6c5e4a4bc9d153c9046928613809ec6617a269bb
author Adam Langley <agl@google.com> 1575673132 -0800
committer CQ bot account: commit-bot@chromium.org <commit-bot@chromium.org> 1576878883 +0000

Switch HRSS inversion algorithm.

This algorithm is much simplier and more obvious than the one from the
HRSS paper. Unfortunately it's not immediately any faster (roughly a
no-op on most platforms, +5% on ARM) but it does allow a bunch of
constant-time rotation code to be deleted.

Since it's simplier, however, it's easier to speed-up a little with
future changes.

Change-Id: Ic0e92c77c44ea9aeb6fe35940af9767084fe5f58
Reviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/39084
Commit-Queue: David Benjamin <davidben@google.com>
Reviewed-by: David Benjamin <davidben@google.com>