SHA-512 hash update part 2
This instruction takes the values from the three 128-bit source SIMD&FP registers and produces a 128-bit output value that combines the sigma0 and majority functions of two iterations of the SHA-512 calculation. It returns this value to the destination SIMD&FP register.
| 31 | 30 | 29 | 28 | 27 | 26 | 25 | 24 | 23 | 22 | 21 | 20 | 19 | 18 | 17 | 16 | 15 | 14 | 13 | 12 | 11 | 10 | 9 | 8 | 7 | 6 | 5 | 4 | 3 | 2 | 1 | 0 |
| 1 | 1 | 0 | 0 | 1 | 1 | 1 | 0 | 0 | 1 | 1 | Rm | 1 | 0 | 0 | 0 | 0 | 1 | Rn | Rd | ||||||||||||
| O | opcode | ||||||||||||||||||||||||||||||
if !IsFeatureImplemented(FEAT_SHA512) then EndOfDecode(Decode_UNDEF); end; let d : integer{} = UInt(Rd); let n : integer{} = UInt(Rn); let m : integer{} = UInt(Rm);
| <Qd> |
Is the 128-bit name of the SIMD&FP source and destination register, encoded in the "Rd" field. |
| <Qn> |
Is the 128-bit name of the second SIMD&FP source register, encoded in the "Rn" field. |
| <Vm> |
Is the name of the third SIMD&FP source register, encoded in the "Rm" field. |
AArch64_CheckFPAdvSIMDEnabled(); var Vtmp : bits(128); var NSigma0 : bits(64); let x : bits(128) = V{}(n); let y : bits(128) = V{}(m); let w : bits(128) = V{}(d); NSigma0 = ROR(y[63:0], 28) XOR ROR(y[63:0], 34) XOR ROR(y[63:0], 39); Vtmp[127:64] = SHAmajority{64}(x[63:0], y[127:64], y[63:0]); Vtmp[127:64] = (Vtmp[127:64] + NSigma0 + w[127:64]); NSigma0 = ROR(Vtmp[127:64], 28) XOR ROR(Vtmp[127:64], 34) XOR ROR(Vtmp[127:64], 39); Vtmp[63:0] = SHAmajority{64}(Vtmp[127:64], y[63:0], y[127:64]); Vtmp[63:0] = (Vtmp[63:0] + NSigma0 + w[63:0]); V{128}(d) = Vtmp;
This instruction is a data-independent-time instruction as described in About PSTATE.DIT.
2026-03_rel 2026-03-26 20:48:11
Copyright © 2010-2026 Arm Limited or its affiliates. All rights reserved. This document is Non-Confidential.