image/svg+xml AESENC128KL—Perform Ten Rounds of AES Encryption Flow with Key Locker Using 128-Bit Key Instruction Operand Encoding Description The AESENC128KL 1 instruction performs ten rounds of AES to encrypt the first operand using the 128-bit key indi- cated by the handle from the second operand. It stores the result in the first operand if the operation succeeds (e.g., does not run into a handle violation failure). Operation AESENC128KL Handle := UnalignedLoad of 384 bit (SRC); // Load is not guaranteed to be atomic. Illegal Handle = ( HandleReservedBitSet (Handle) || (Handle[0] AND (CPL > 0)) || Handle [1] || HandleKeyType (Handle) != HANDLE_KEY_TYPE_AES128 ); IF (Illegal Handle) { THEN RFLAGS.ZF := 1; ELSE (UnwrappedKey, Authentic) := UnwrapKeyAndAuthenticate384 (Handle[383:0], IWKey); IF (Authentic == 0) THEN RFLAGS.ZF := 1; ELSE DEST := AES128Encrypt (DEST, UnwrappedKey) ; RFLAGS.ZF := 0; FI; FI; RFLAGS.OF, SF, AF, PF, CF := 0; Flags Affected ZF is set to 0 if the operation succeeded and set to 1 if the operation failed due to a handle violation. The other arithmetic flags (OF, SF, AF, PF, CF) are cleared to 0. Intel C/C++ Compiler Intrinsic Equivalent AESENC128KLunsigned char _mm_aesenc128kl_u8(__m128i* odata, __m128i idata, const void* h); Opcode/ Instruction Op/ En 64/32-bit Mode CPUID Feature Flag Description F3 0F 38 DC !(11):rrr:bbb AESENC128KL xmm, m384 AV/VAESKLEEncrypt xmm using 128-bit AES key indicated by han- dle at m384 and store result in xmm. Op/EnTupleOperand 1Operand 2Operand 3Operand 4 ANAModRM:reg (r, w)ModRM:r/m (r)NANA 1.Further details on Key Locker and usage of this instruction can be found here: https://software.intel.com/content/www/us/en/develop/download/intel-key-locker-specification.html. image/svg+xml Exceptions (All Operating Modes) #UD If the LOCK prefix is used. If CPUID.07H:ECX.KL [bit 23] = 0. If CR4.KL = 0. If CPUID.19H:EBX.AESKLE [bit 0] = 0. If CR0.EM = 1. If CR4.OSFXSR = 0. #NM If CR0.TS = 1. #PF If a page fault occurs. #GP(0) If a memory operand effective address is outside the CS, DS, ES, FS, or GS segment limit. If the DS, ES, FS, or GS register is used to access memory and it contains a NULL segment selector. If the memory address is in a non-canonical form. #SS(0) If a memory operand effective address is outside the SS segment limit. If a memory address referencing the SS segment is in a non-canonical form. This UNOFFICIAL reference was generated from the official Intel® 64 and IA-32 Architectures Software Developer’s Manual by a dumb script. There is no guarantee that some parts aren't mangled or broken and is distributed WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE .