ENCODEKEY256—Encode 256-Bit Key with Key LockerInstruction Operand EncodingDescriptionThe ENCODEKEY2561 instruction wraps a 256-bit AES key from the implicit operand XMM1:XMM0 into a key handle that is then stored in the implicit destination operands XMM0-3.The explicit source operand is a general-purpose register and specifies what handle restrictions should be built into the handle.The explicit destination operand is populated with information on the source of the key and its attributes. XMM4 through XMM6 are reserved for future usages and software should not rely upon them being zeroed.OperationENCODEKEY256 #GP (0) if a reserved bit2 in SRC[31:0] is setInputKey[255:0] := XMM1:XMM0;KeyMetadata[2:0] = SRC[2:0];KeyMetadata[23:3] = 0; // Reserved for future usageKeyMetadata[27:24] = 1; // KeyType is AES-256 (value of 1)KeyMetadata[127:28] = 0; // Reserved for future usage// KeyMetadata is the AAD input and InputKey is the Plaintext input for WrapKey256Handle[511:0] := WrapKey256(InputKey[255:0], KeyMetadata[127:0], IWKey.Integrity Key[127:0], IWKey.Encryption Key[255:0]);DEST[0] := IWKey.NoBackup;DEST[4:1] := IWKey.KeySource[3:0];DEST[31:5] = 0;XMM0 := Handle[127:0]; // AADXMM1 := Handle[255:128]; // Integrity TagXMM2 := Handle[383:256]; // CipherText[127:0]XMM3 := Handle[511:384]; // CipherText[255:128]XMM4 := 0; // Reserved for future usageXMM5 := 0; // Reserved for future usageXMM6 := 0; // Reserved for future usageRFLAGS.OF, SF, ZF, AF, PF, CF := 0;Opcode/InstructionOp/ En64/32-bit ModeCPUID Feature FlagDescriptionF3 0F 38 FB 11:rrr:bbb ENCODEKEY256 r32, r32 <XMM0-6>AV/VAESKLEWrap a 256-bit AES key from XMM1:XMM0 into a key handle and store it in XMM0-3.Op/EnTupleOperand 1Operand 2Operands 3 - 4Operands 5 - 9ANAModRM:reg (w)ModRM:r/m (r)Implicit XMM0-1 (r, w)Implicit XMM2-6 (w)1.Further details on Key Locker and usage of this instruction can be found here:https://software.intel.com/content/www/us/en/develop/download/intel-key-locker-specification.html.2.SRC[31:3] are currently reserved for future usages. SRC[2], which indicates a no-decrypt restriction, is reserved if CPUID.19H:EAX[2] is 0. SRC[1], which indicates a no-encrypt restriction, is reserved if CPUID.19H:EAX[1] is 0. SRC[0], which indicates a CPL0-only restriction, is reserved if CPUID.19H:EAX[0] is 0.
This UNOFFICIAL reference was generated from the official Intel® 64 and IA-32 Architectures Software Developer’s Manual by a dumb script. There is no guarantee that some parts aren't mangled or broken and is distributed WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.