Next Major Definition-of-Done Milestone: Freeze (allows start of formal public review period)

Scalar Crypto Specification:

Lightweight instruction set extensions for RV32 and RV64 HARTs. Proposed extensions:

Defined in the Scalar Crypto Specification: K, Zkn, Zks, Zkr, Zkne, Zknd, Zknh, Zkse, Zksd, Zksh
Shared with Bit-Manipulation: Zkg, Zkb

...

Opcodes and encodings proposed
Instruction extensions (instruction groupings) proposed
Submitted to review task group
The Bit-Manip Manipulation shared subset subsets are being reviewed first as part of Bit-Manip reviewManipulation specification review
- Proposed as Zkg (clmul) and Zkb (specific crypto-required bit-manipulation commands)
Proposed Scalar Crypto-unique subsets Scalar Crypto unique subset next in line for review:
- K (Krypto):
  - Zkn (NIST Suite): ZKne (NIST encrypt suite), ZKnd (NIST decrypt suite), ZKnh (NIST hash suite)
  - Zkr (random entropy source)
- Zks (ShangMi Suite): Zkse (SM encrypt suite), Zksd (SM decrypt suite), Zksh (SM hash suite)

...