Does SHA512SIG1L use floating-point or vector registers?
No. These scalar crypto extension instructions use integer X registers.
SHA512SIG1L
RISC-V SHA512SIG1L Instruction Details
Instruction ManualR-typeLow 32 bits of SHA-512 σ1 (RV32): rs1 is low input and rs2 is high input
Instruction Syntax
sha512sig1l rd, rs1, rs2
Operand Breakdown
Destination rd: register receiving the operation result.
Source rs1: register holding the first operand.
Source rs2: register holding the second operand.
ZknhCrypto & Security
Instruction Behavior
sha512sig1l is the SHA-512 σ1 low-half instruction (RV32 only). It reads rs1 as the low 32-bit input word and rs2 as the high word, then writes the official RV32 formula's low result word to rd. The documented full transform uses sha512sig1l t0, low, high followed by sha512sig1h t1, high, low.
SHA512SIG1L Decode And Execute Animation
Applies the official RV32 formula for one SHA-512 Sigma result word.
rd
rs1
rs2
sha512sig1l
,
,
Execution Context
XLEN is fixed at 32. For the low form, rs1 is the input low word and rs2 is the input high word.
fixed
source
source
fixed
destination
OP
31..25
0101011
24..20
rs2=x12
19..15
rs1=x11
14..12
000
11..7
rd=x10
6..0
0110011
Execution Data Path
X(rs1)[31:0]
0x89ABCDEF
X(rs2)[31:0]
0x01234567
rs1 << 3
0x4D5E6F78
rs1 >> 6
0x0226AF37
rs1 >> 19
0x00001135
rs2 >> 29
0x00000000
rs2 << 26
0x9C000000
rs2 << 13
0x68ACE000
result
0xBBD4317A
Architectural Result
a0(x10) = 0xBBD4317A
This animation shows only official ISA fields and architectural state; it does not model a complete hash algorithm or microarchitecture.
Quick Understanding & Search Notes
SHA512SIG1L is a Zknh scalar cryptography instruction for SHA-512 RV32 split transform. This page is checked against the official scalar crypto extension, avoiding confusion among round functions, key schedule steps, and operand sources.
sha512sig1l computes one half of a SHA-512 64-bit sigma result on RV32 and must be paired with the matching h/l instruction.
Scalar crypto instructions use integer X registers, and the official spec requires the relevant crypto instructions to be implemented with data-independent execution latency.
RV32 SHA-512 split forms need the official h/l or reversed-source sequence to assemble the full 64-bit result.
Common Usage Scenarios
Crypto & Security
Understand this scenario with real code like «sha512sig1l a0, a1, a2».
Hash Algorithms
Understand this scenario with real code like «sha512sig1l a0, a1, a2».
Pre-Use Checklist
Syntax Check
- Verify rd, rs1, rs2 (and rs3) are valid GPRs.
- Confirm funct3 and funct7 encoding is correct.
Semantic Check
- Check if the result affects subsequent branches or address calculations.
- Ensure the rd register is not overwritten by another instruction.
Pitfalls / Common Confusions
RV32 only. For the L form, rs1 is the input low word and rs2 is the input high word; this is reversed from the H form.
Must be paired with sha512sig1h.
FAQ
Is SHA512SIG1L a complete algorithm implementation?
No. It computes one RV32 word of the SHA-512 Sigma1 result; the documented L/H paired sequence combines the complete transform.