SWCU185G January 2018 – June 2024 CC1312PSIP , CC1312R , CC1352P , CC1352R , CC2642R , CC2642R-Q1 , CC2652P , CC2652PSIP , CC2652R , CC2652RB , CC2652RSIP , CC2662R-Q1
For AES-GCM operations, the following configuration parameters are required:
The AES module is used in the mode where it calculates the Y0 encrypted and H (hash key) internally based on cipher key from the key-store module.
The AAD and cryptographic data may end misaligned. In this case, the module internally pads both sets of data to a 128-bit boundary with zeroes. Padding is done as follows: the AAD and crypto data padding satisfies the bit string: 0n, with 0 ≤ n ≤ 127 such that the input AAD and data block lengths including padding are 128-bit aligned. The AAD data must be transferred to the AES engine with a separate DMA operation (it may not be combined with the payload data) or using slave transfers.
The length field can have any value. If a data stream is done and the next data stream uses the same key and control, only the IV and length fields can be written with a new value. It is not allowed to write both length fields with zeroes. A GCM operation cannot be interrupted. The result TAG is typically read through the slave interface, but can also be written to an external memory location through a separate DMA operation.