pmull

Polynomial Multiply Long

PMULL <Vd>.<Td>, <Vn>.<Ts>, <Vm>.<Ts>

Performs polynomial multiplication over {0,1} producing wide result (Used for GCM).

Details

Performs polynomial multiplication over GF(2) on pairs of narrow SIMD elements, producing wider polynomial results. This AArch64-only NEON instruction is primarily used for AES-GCM cryptographic operations and operates on 64-bit or 128-bit input vectors producing 128-bit or 256-bit results. Condition flags are not affected.

Pseudocode Operation

for i = 0 to (128 >> (size+1)) - 1 do
  result ← PolynomialMultiply(Vn[i], Vm[i])
  Vd[i] ← result
end for

Example

PMULL v0.4s.Td, v1.4s.Ts, v2.4s.Ts

Encoding

Binary Layout
0
Q
0
01110
size
1
Rm
1110
00
Rn
Rd
 
Format SIMD Three Register Diff
Opcode 0x0E20E000
Extension NEON (Crypto/SIMD)

Operands

  • Vd
    Dest (Wide)
  • Vn
    First source SIMD/FP vector register
  • Vm
    Second source SIMD/FP vector register

Reference (Arm A64 ISA)

Instruction Forms

Encoding Instruction ISA Bit pattern
0x0E20E000 PMULL{2} <Vd>.<Ta>, <Vn>.<Tb>, <Vm>.<Tb> A64 0 | Q | 0 | 01110 | size | 1 | Rm | 1110 | 00 | Rn | Rd

Description

Polynomial Multiply Long. This instruction multiplies corresponding elements in the lower or upper half of the vectors of the two source SIMD&FP registers, places the results in a vector, and writes the vector to the destination SIMD&FP register. The destination vector elements are twice as long as the elements that are multiplied. For information about multiplying polynomials, see Polynomial arithmetic over {0, 1}. The PMULL instruction extracts each source vector from the lower half of each source register. The PMULL2 instruction extracts each source vector from the upper half of each source register. The PMULL and PMULL2 variants that operate on 64-bit source elements are defined only when FEAT_PMULL is implemented. Depending on the settings in the CPACR_EL1, CPTR_EL2, and CPTR_EL3 registers, and the current Security state and Exception level, an attempt to execute the instruction might be trapped.

Operation

CheckFPAdvSIMDEnabled64();
bits(datasize) operand1 = Vpart[n, part, datasize];
bits(datasize) operand2 = Vpart[m, part, datasize];
bits(2*datasize) result;
bits(esize) element1;
bits(esize) element2;

for e = 0 to elements-1
    element1 = Elem[operand1, e, esize];
    element2 = Elem[operand2, e, esize];
    Elem[result, e, 2*esize] = PolynomialMult(element1, element2);

V[d, 2*datasize] = result;