lib/crypto: arm/blake2s: Fix some comments

Fix the indices in some comments in blake2s-core.S.

Reviewed-by: Ard Biesheuvel <ardb@kernel.org>
Link: https://lore.kernel.org/r/20251102021553.176587-1-ebiggers@kernel.org
Signed-off-by: Eric Biggers <ebiggers@kernel.org>

diff --git a/lib/crypto/arm/blake2s-core.S b/lib/crypto/arm/blake2s-core.S
index 14eb7c18a8365a4c1e80747f7c8b92658f9cbee0..933f0558b7cdab0cb82eb8949b0e3332ec4aa61a 100644 (file)
--- a/lib/crypto/arm/blake2s-core.S
+++ b/lib/crypto/arm/blake2s-core.S
@@ -115,7 +115,7 @@
 
 // Execute one round of BLAKE2s by updating the state matrix v[0..15].  v[0..9]
 // are in r0..r9.  The stack pointer points to 8 bytes of scratch space for
-// spilling v[8..9], then to v[9..15], then to the message block.  r10-r12 and
+// spilling v[8..9], then to v[10..15], then to the message block.  r10-r12 and
 // r14 are free to use.  The macro arguments s0-s15 give the order in which the
 // message words are used in this round.
 //
@@ -209,18 +209,18 @@ ENTRY(blake2s_compress)
 .Lcopy_block_done:
        str             r1, [sp, #68]           // Update message pointer
 
-       // Calculate v[8..15].  Push v[9..15] onto the stack, and leave space
+       // Calculate v[8..15].  Push v[10..15] onto the stack, and leave space
        // for spilling v[8..9].  Leave v[8..9] in r8-r9.
        mov             r14, r0                 // r14 = ctx
        adr             r12, .Lblake2s_IV
        ldmia           r12!, {r8-r9}           // load IV[0..1]
        __ldrd          r0, r1, r14, 40         // load f[0..1]
-       ldm             r12, {r2-r7}            // load IV[3..7]
+       ldm             r12, {r2-r7}            // load IV[2..7]
        eor             r4, r4, r10             // v[12] = IV[4] ^ t[0]
        eor             r5, r5, r11             // v[13] = IV[5] ^ t[1]
        eor             r6, r6, r0              // v[14] = IV[6] ^ f[0]
        eor             r7, r7, r1              // v[15] = IV[7] ^ f[1]
-       push            {r2-r7}                 // push v[9..15]
+       push            {r2-r7}                 // push v[10..15]
        sub             sp, sp, #8              // leave space for v[8..9]
 
        // Load h[0..7] == v[0..7].