Intel® Carry-Less Multiplication Instruction and its Usage for Computing the GCM Mode

  • File: carry-less-multiplication-instruction.pdf
  • Size:320.35 KB


This paper provides information on the instruction, and its usage for computing the Galois Hash. It also provides code examples for the usage of PCLMULQDQ, together with the Intel® AES New Instructions (Intel® AES-NI) for efficient implementation of AES in Galois Counter Mode (AES-GCM).

For all Intel® 64 and IA-32 Architectures Software Developer Manuals, see:

For more complete information about compiler optimizations, see our Optimization Notice.