RFR: 8316592: RISC-V: implement poly1305 intrinsic [v7]

[Andrew Haley]

On Thu, 9 Nov 2023 15:04:36 GMT, Andrew Haley <aph at openjdk.org> wrote:

>> Thanks for updating.
>> Looks safer, but I'm not sure if it's too conservative or not safe enough.
>> Can we wait for a while to see how others think about it or what new discoveries have we made about ourselves?
>
> I think the caller does a full mod N reduction of your result in `IntegerPolynomial::final Reduce()`.

> Thanks for the information @theRealAph Seems the finalReduce in java code does not make reduce in intrinsic code here unnecessary, because in the intrinsic code, we only store back 130 bits back to acc_start,

I agree.

-------------

PR Review Comment: https://git.openjdk.org/jdk/pull/16417#discussion_r1389200752