aes32dsi

AES final round decryption instruction for RV32

Sources a single byte from xs2 according to bs. To this it applies the inverse AES SBox operation, and XOR’s the result with xs1. This instruction must always be implemented such that its execution latency does not depend on the data being operated on.

This instruction must have data-independent timing when extension Zkt is enabled.

Assembly format

aes32dsi rd, rs1, rs2, bs

Decode Variables

Bits<2> bs = $encoding[31:30];
Bits<5> xs2 = $encoding[24:20];
Bits<5> xs1 = $encoding[19:15];
Bits<5> xd = $encoding[11:7];

Execution

  • IDL

Encoding

svg

Defining extension

Zknd, version >= Zknd@1.0.0

Access

M

Always

Containing profiles

  • Mandatory:

  • Optional: RVA22S64, RVA22U64, RVA23M64, RVA23S64, RVB23M64, RVB23S64, RVB23U64