Scalar Cryptography v1.0.0-rc4

This is an update to the public review release of the scalar cryptography extensions to RISC-V. The public review period has been announced on the RISC-V isa-dev mailing list, and runs for 45 days from that announcement until October 17'th, 2021.

To respond to the public review, please either email comments to the public isa-dev mailing list or add issues to the Crypto GitHub repo. We welcome all input and appreciate your time and effort in helping us by reviewing the specification.

During the public review period, corrections, comments, and suggestions, will be gathered for review by the Cryptography task group. Any minor corrections and/or uncontroversial changes will be incorporated into the specification. Any remaining issues or proposed changes will be addressed in the public review summary report. If there are no issues that require incompatible changes to the public review specification, the unprivileged ISA committee will recommend the updated specifications be approved and ratified by the RISC-V Technical Steering Committee and the RISC-V Board of Directors.

We, the RISC-V Cryptography Task Group, would like to sincerely thank everyone taking part in the public review, and who has contributed to our specification so far.

Changes since the previous release candidate:

• Final fixes to zip and unzip descriptions and encodings for clarity. (#130)
  • Sincere apologies to everyone affected by this, there was confusion about the encodings and matching the correct descriptions to the right mnemonics. The previous RC fixed the encodings but broke the descriptions. This release has been made to ensure everything is now consistent with expectation, given the original Bitmanip 0.93 definition of the more general shfli/unshfli instructions and their specific zip/unzip instances.