Scalar Cryptography v1.0.0-rc3

NOTE: This release has been superseded by v1.0.0-rc4

This is an update to the public review release of the scalar cryptography extensions to RISC-V. The public review period has been announced on the RISC-V isa-dev mailing list, and runs for 45 days from that announcement until October 17'th, 2021.

To respond to the public review, please either email comments to the public isa-dev mailing list or add issues to the Crypto GitHub repo. We welcome all input and appreciate your time and effort in helping us by reviewing the specification.

During the public review period, corrections, comments, and suggestions, will be gathered for review by the Cryptography task group. Any minor corrections and/or uncontroversial changes will be incorporated into the specification. Any remaining issues or proposed changes will be addressed in the public review summary report. If there are no issues that require incompatible changes to the public review specification, the unprivileged ISA committee will recommend the updated specifications be approved and ratified by the RISC-V Technical Steering Committee and the RISC-V Board of Directors.

We, the RISC-V Cryptography Task Group, would like to sincerely thank everyone taking part in the public review, and who has contributed to our specification so far.

Changes since the previous release candidate:

• Fix Sail code for zip and unzip being the wrong way around and update descriptions for clarity. (#130)
• Fix incorrect encodings for zip and unzip. (#130)
  • The immediate values for the instructions in bits 24:20 did not correspond to the correct instance of the more generic shfli and unshfli instructions from the previous Bitmanip (v0.93/4) specifications.
• Miscellaneous editorial updates, with thanks to folks for spotting these. (#119, #122, #124, 9fae816)
• Fix typo in aes64ks1i sail code and update descriptions for clarity. (529c0f1, #127)
• Fix typo in examples for sha512* instructions. (#128)