Intel® Carry-Less Multiplication Instruction and its Usage for Computing the GCM Mode - Rev 2.02

Published:04/13/2011   Last Updated:04/13/2011


Intel® PCLMULQDQ instruction is a new instruction available beginning with the all new 2010 Intel® Core™ processor family based on the 32nm Intel® microarchitecture codename Westmere. PCLMULQDQ instruction performs carry-less multiplication of two 64-bit operands.

This paper provides information on the instruction, and its usage for computing the Galois Hash. It also provides code examples for the usage of PCLMULQDQ, together with the new AES instructions (introduced together with PCLMULQDQ) for efficient implementation of AES in Galois Counter Mode (AES-GCM).

This version of the paper also provides high performance code examples for AES-GCM, and discloses, for the first time, their measured performance numbers.

[Revisions history: Rev. 1.0 in 4/2008; Rev. 2.0 in 5/2009; Rev. 2.01 in 9/2012; Rev. 2.02 in 4/2014]

Download Article

Attachment Size
clmul-wp-rev-2-02-2014-04-20.pdf 1.4 MB

Product and Performance Information


Performance varies by use, configuration and other factors. Learn more at