Granted Patent B2

US 12,737,155 · App. 17/884,777 · Granted Sep 15, 2026

Inventors: Silvia Melitta Mueller (St. Ingbert, DE); Debapriya Chatterjee (Austin, TX); Maarten J. Boersma (Holzgerlingen, DE); Martijn Diede Berkers (Boeblingen, DE)

Assignee: International Business Machines Corporation

G06F7/724G06F7/722

Abstract

Claims (73)

1 . A processor, comprising:

an instruction fetch unit that fetches instructions to be executed;

an architected register file including a plurality of registers for storing source and destination operands; and

an execution unit for executing a Galois multiply instruction, the Galois multiply instruction including a mode field that specifies a data format applicable to a Galois carryless multiplication and modular reduction operation, wherein the execution unit includes:

a carryless multiplier configured to multiply operands of the Galois multiply instruction to generate a product; and

a modular reduction circuit configured to receive the product and determine, based on a logical combination of the product and a fixed polynomial, a reduced product having a fewer number of bits than the product, wherein the execution unit is configured to store the reduced product to the architected register file as a result of the Galois multiply instruction, and wherein the execution unit executes the Galois multiply instruction based on the data format specified by the mode field.

2 . The processor of claim 1 , wherein the fixed polynomial is g (x)=1+X+x{circumflex over ( )}2+x{circumflex over ( )}7+x{circumflex over ( )}128.

3 . The processor of claim 1 , wherein:

the product includes a high part including high-order bits of the product and a low part including low-order bits of the product;

the modular reduction circuit is configured to compute a first result equivalent to a carryless multiplication of the high part and the fixed polynomial, wherein the modular reduction circuit includes:

shift circuitry that applies multiple different bit position shifts to the high part of the product consistent with asserted bits in the fixed polynomial; and

bitwise exclusive OR (XOR) circuitry that logically combines multiple instances of the high part of the product having different respective bit position shifts applied by the shift circuitry.

4 . The processor of claim 3 , wherein:

the shift circuitry is further configured to apply multiple different bit position shifts to the high part of the first result consistent with the asserted bits in the fixed polynomial;

the bitwise exclusive OR (XOR) circuitry is further configured to logically combine multiple instances of the high part of the first result having the different respective bit position shifts applied by the shift circuitry to obtain a second result, wherein the bitwise XOR circuitry generates the reduced product based on the first result, the second result, and the low part of the product.

5 . The processor of claim 3 , wherein the bitwise exclusive OR (XOR) circuitry includes at least two stages of bitwise XOR circuitry.

6 . The processor of claim 1 , further comprising:

a conditional bit reversal circuit configured to, prior to multiplication of the operands, conditionally reverse a bit ordering of bytes in one of the operands based on an endianness mode indicated by the Galois multiply instruction.

7 . The processor of claim 1 , wherein:

the carryless multiplier is a first multiply-multiply engine;

the execution unit includes a second multiply-multiply engine, wherein the first and second multiply-multiply engines have a first data width;

the operands include first and second operands having a second data width that is an integer multiple of the first data width; and

the first and second multiply-multiply engines are configured to multiply subsets of the first and second operands in parallel.

8 . A data processing system, comprising:

multiple processors, including the processor of claim 1 ;

a shared memory; and

a system interconnect communicatively coupling the shared memory and the multiple processors.

9 . A method of data processing in a processor, said method comprising:

fetching, by an instruction fetch unit, instructions to be executed by the processor, wherein the instructions include a Galois multiply instruction including a mode field that specifies a data format applicable to a Galois carryless multiplication and modular reduction operation; and

based on receiving the Galois multiply instruction, an execution unit of the processor executing the Galois multiply instruction based on the data format specified by the mode field, wherein the executing includes:

multiplying, by a carryless multiplier, operands of the Galois multiply instruction to generate a product;

a modular reduction circuit receiving the product and determining, based on a logical combination of the product and a fixed polynomial, a reduced product having a fewer number of bits than the product; and

storing the reduced product to an architected register file of the processor as a result of the Galois multiply instruction.

10 . The method of claim 9 , wherein the fixed polynomial is g (x)=1+X+x{circumflex over ( )}2+x{circumflex over ( )}7+x{circumflex over ( )}128.

11 . The method of claim 9 , wherein:

the product includes a high part including high-order bits of the product and a low part including low-order bits of the product;

determining the reduced product includes computing a first result equivalent to a carryless multiplication of the high part and the fixed polynomial, wherein the computing includes:

applying, by shift circuitry, multiple different bit position shifts to the high part of the product consistent with asserted bits in the fixed polynomial; and

logically combining, by bitwise exclusive OR (XOR) circuitry, multiple instances of the high part of the product having different respective bit position shifts applied by the shift circuitry.

12 . The method of claim 11 , further comprising:

applying, by the shift circuitry, multiple different bit position shifts to the high part of the first result consistent with the asserted bits in the fixed polynomial; and

logically combining, by the bitwise exclusive OR (XOR) circuitry, multiple instances of the high part of the first result having the different respective bit position shifts applied by the shift circuitry to obtain a second result;

wherein determining the reduced product comprises determining the reduced product based on the first result, the second result, and the low part of the product.

13 . The method of claim 9 , further comprising:

prior to multiplication of the operands, conditionally reversing a bit ordering of bytes in one of the operands based on an endianness mode indicated by the Galois multiply instruction.

14 . The method of claim 9 , wherein:

the carryless multiplier is a first multiply-multiply engine;

the execution unit includes a second multiply-multiply engine, wherein the first and second multiply-multiply engines have a first data width;

the operands include first and second operands having a second data width that is an integer multiple of the first data width; and

multiplying the operands includes the first and second multiply-multiply engines multiplying subsets of the first and second operands in parallel.

15 . A design structure tangibly embodied in a machine-readable storage device for designing, manufacturing, or testing an integrated circuit, the design structure comprising:

a processor, including:

an instruction fetch unit that fetches instructions to be executed;

an architected register file including a plurality of registers for storing source and destination operands; and

an execution unit for executing a Galois multiply instruction, the Galois multiply instruction including a mode field that specifies a data format applicable to a Galois carryless multiplication and modular reduction operation, wherein the execution unit includes:

a carryless multiplier configured to multiply operands of the Galois multiply instruction to generate a product; and

a modular reduction circuit configured to receive the product and determine, based on a logical combination of the product and a fixed polynomial, a reduced product having a fewer number of bits than the product, wherein the execution unit is configured to store the reduced product to the architected register file as a result of the Galois multiply instruction, and wherein the execution unit executes the Galois multiply instruction based on the data format specified by the mode field.

16 . The design structure of claim 15 , wherein the fixed polynomial is g (x)=1+X+x{circumflex over ( )}2+x{circumflex over ( )}7+x{circumflex over ( )}128.

17 . The design structure of claim 15 , wherein:

the product includes a high part including high-order bits of the product and a low part including low-order bits of the product;

the modular reduction circuit is configured to compute a first result equivalent to a carryless multiplication of the high part and the fixed polynomial, wherein the modular reduction circuit includes:

shift circuitry that applies multiple different bit position shifts to the high part of the product consistent with asserted bits in the fixed polynomial; and

bitwise exclusive OR (XOR) circuitry that logically combines multiple instances of the high part of the product having different respective bit position shifts applied by the shift circuitry.

18 . The design structure of claim 17 , wherein:

the shift circuitry is further configured to apply multiple different bit position shifts to the high part of the first result consistent with the asserted bits in the fixed polynomial;

the bitwise exclusive OR (XOR) circuitry is further configured to logically combine multiple instances of the high part of the first result having the different respective bit position shifts applied by the shift circuitry to obtain a second result, wherein the bitwise XOR circuitry generates the reduced product based on the first result, the second result, and the low part of the product.

19 . The design structure of claim 15 , further comprising:

a conditional bit reversal circuit configured to, prior to multiplication of the operands, conditionally reverse a bit ordering of bytes in one of the operands based on an endianness mode indicated by the Galois multiply instruction.

20 . The design structure of claim 15 , wherein:

the carryless multiplier is a first multiply-multiply engine;

the execution unit includes a second multiply-multiply engine, wherein the first and second multiply-multiply engines have a first data width;

the operands include first and second operands having a second data width that is an integer multiple of the first data width; and

the first and second multiply-multiply engines are configured to multiply subsets of the first and second operands in parallel.

Assignments (1)

Continuity (1)

References Cited (110)