Instruction
VGF2P8AFFINEINVQB
Replaces each byte with its inverse in GF(2^8), then applies an affine transformation given by an 8x8 bit matrix and an immediate constant.
VGF2P8AFFINEINVQB is GF2P8AFFINEINVQB in VEX and EVEX encodings: each byte is replaced by its inverse in GF(2^8), multiplied by the 8-by-8 bit matrix in the matching quadword of the second source, and XORed with the immediate. That page covers the field, the inverse and AES’s S-box, and GF2P8AFFINEQB the layout of the matrix. The new encodings add a separate destination, zeroed above the vector length, a memory operand at any alignment, and wider vectors:
- The VEX forms, on xmm and ymm registers, need GFNI and AVX, not AVX-512.
- The EVEX forms need GFNI with AVX512VL below 512 bits, AVX512F at 512 bits, or AVX10.1. Their write mask selects bytes, but their broadcast repeats a quadword: one matrix for every group of eight bytes.
- The EVEX forms belong to exception class E4NF, without fault suppression: a memory operand is read in full whatever the mask.
On Zen 5
vgf2p8affineinvqb zmm17, zmm30, qword bcst [mem], 0 broadcast the
identity matrix 0102040810204080h to all eight quadwords, which leaves
the plain inverse: 02h became 8Dh, 80h became 83h, FFh became 1Ch,
53h and CAh swapped, and 00h stayed 00h, as the SDM’s table lists. With
AES’s matrix F1E3C78F1F3E7CF8h in its third quadword and an immediate
of 63h, {evex} vgf2p8affineinvqb zmm1, zmm2, zmmword ptr [mem], 0x63
turned 00h, 01h, 53h and FFh into 63h, 7Ch, EDh and 16h, their S-box
values in FIPS-197; a zero quadword in the matrix gave 63h for each of
its bytes, the immediate alone.
In our builds
GCC 14 and Clang 23 at -O2 emit it only for the intrinsics, which need
-mgfni on top of -mavx2 or an x86-64 level: both reject them with
-march=x86-64-v4 alone and accept them with -march=znver5. An
S-box loop over _mm256_gf2p8affineinv_epi64_epi8 keeps the VEX form
even with -march=x86-64-v4 -mgfni; the _mm512_ and masked
intrinsics give EVEX. Both compilers keep the matrix in a register:
GCC loads it as a full vector constant, Clang with a VPBROADCASTQ of
one quadword.
AMD’s latency spreadsheet for Zen 5 gives the VEX and the EVEX rows alike a latency of 3 cycles, two per cycle on pipes FP1 and FP2.
Forms
| Instruction | Encoding | Requires |
|---|---|---|
VGF2P8AFFINEINVQB xmm, xmm, xmm, imm8
VGF2P8AFFINEINVQB_XMMu8_XMMu8_XMMu64_IMM8 | VEX.128.66.0F3A.W1 CF /r ib | GFNI + AVX |
VGF2P8AFFINEINVQB xmm, xmm, m128, imm8
VGF2P8AFFINEINVQB_XMMu8_XMMu8_MEMu64_IMM8 | VEX.128.66.0F3A.W1 CF /r ib | GFNI + AVX |
VGF2P8AFFINEINVQB ymm, ymm, ymm, imm8
VGF2P8AFFINEINVQB_YMMu8_YMMu8_YMMu64_IMM8 | VEX.256.66.0F3A.W1 CF /r ib | GFNI + AVX |
VGF2P8AFFINEINVQB ymm, ymm, m256, imm8
VGF2P8AFFINEINVQB_YMMu8_YMMu8_MEMu64_IMM8 | VEX.256.66.0F3A.W1 CF /r ib | GFNI + AVX |
VGF2P8AFFINEINVQB xmm {k}{z}, xmm, xmm, imm8
VGF2P8AFFINEINVQB_XMMu8_MASKmskw_XMMu8_XMMu64_IMM8_AVX512 | EVEX.128.66.0F3A.W1 CF /r ib | AVX10.1 + GFNI or GFNI + AVX512F + AVX512VL |
VGF2P8AFFINEINVQB xmm {k}{z}, xmm, m128/m64bcst, imm8
VGF2P8AFFINEINVQB_XMMu8_MASKmskw_XMMu8_MEMu64_IMM8_AVX512 | EVEX.128.66.0F3A.W1 CF /r ib | AVX10.1 + GFNI or GFNI + AVX512F + AVX512VL |
VGF2P8AFFINEINVQB ymm {k}{z}, ymm, ymm, imm8
VGF2P8AFFINEINVQB_YMMu8_MASKmskw_YMMu8_YMMu64_IMM8_AVX512 | EVEX.256.66.0F3A.W1 CF /r ib | AVX10.1 + GFNI or GFNI + AVX512F + AVX512VL |
VGF2P8AFFINEINVQB ymm {k}{z}, ymm, m256/m64bcst, imm8
VGF2P8AFFINEINVQB_YMMu8_MASKmskw_YMMu8_MEMu64_IMM8_AVX512 | EVEX.256.66.0F3A.W1 CF /r ib | AVX10.1 + GFNI or GFNI + AVX512F + AVX512VL |
VGF2P8AFFINEINVQB zmm {k}{z}, zmm, zmm, imm8
VGF2P8AFFINEINVQB_ZMMu8_MASKmskw_ZMMu8_ZMMu64_IMM8_AVX512 | EVEX.512.66.0F3A.W1 CF /r ib | AVX10.1 + GFNI or GFNI + AVX512F |
VGF2P8AFFINEINVQB zmm {k}{z}, zmm, m512/m64bcst, imm8
VGF2P8AFFINEINVQB_ZMMu8_MASKmskw_ZMMu8_MEMu64_IMM8_AVX512 | EVEX.512.66.0F3A.W1 CF /r ib | AVX10.1 + GFNI or GFNI + AVX512F |
Latency and throughput
| Model | xmm, xmm, xmm, imm8ymm, ymm, ymm, imm8xmm {k}{z}, xmm, xmm, imm8no maskymm {k}{z}, ymm, ymm, imm8no mask | xmm, xmm, m128, imm8xmm {k}{z}, xmm, m128/m64bcst, imm8no mask, broadcast | ymm, ymm, m256, imm8ymm {k}{z}, ymm, m256/m64bcst, imm8no mask, broadcast | xmm {k}{z}, xmm, xmm, imm8with a maskymm {k}{z}, ymm, ymm, imm8with a mask | xmm {k}{z}, xmm, xmm, imm8zeroingymm {k}{z}, ymm, ymm, imm8zeroing | xmm {k}{z}, xmm, m128/m64bcst, imm8with a mask, zeroing | ymm {k}{z}, ymm, m256/m64bcst, imm8with a mask, zeroing | zmm {k}{z}, zmm, zmm, imm8no mask | zmm {k}{z}, zmm, zmm, imm8with a mask | zmm {k}{z}, zmm, zmm, imm8zeroing | zmm {k}{z}, zmm, m512/m64bcst, imm8no mask, broadcast | zmm {k}{z}, zmm, m512/m64bcst, imm8with a mask, zeroing |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Ice Lake | 5 / 0.5p01 | 11 / 0.5p01 | 12 / 0.5p01 | 5 / 0.5p01 | 5 / 0.5p01 | 11 / 0.5p01 | 12 / 0.5p01 | 5 / 0.5p05 | 5 / 0.5p05 | 5 / 0.5p05 | 12 / 0.5p05 | 12 / 0.5p05 |
| Alder Lake | 5 / 0.5p01 | 12 / 0.5p01 | 12 / 0.5p01 | |||||||||
| Sapphire Rapids | 5 / 0.5p01 | 12 / 0.5p01 | 12 / 0.5p01 | 9 / 0.5p01 | 10 / 0.5p01 | 15 / 0.5p01 | 15 / 0.5p01 | 5 / 1p0 | 9 / 1p0 | 10 / 1p0 | 12 / 1p0 | 15 / 1p0 |
| Lunar Lake | 4 / 2V0 V1 | 10 / 2V0 V1 | 11 / 2.33V0 V1 | |||||||||
| Zen 4 | 3 / 0.5FP0 FP3 | 10 / 0.5FP0 FP3 | 10 / 0.5FP0 FP3 | 3 / 0.5FP0 FP3 | 3 / 0.5FP0 FP3 | 10 / 0.5FP0 FP3 | 10 / 0.5FP0 FP3 | 3 / 1FP0 FP3 | 3 / 1FP0 FP3 | 3 / 1FP0 FP3 | 10 / 1FP0 FP3 | 10 / 1FP0 FP3 |
Data flow
Where the elements of the sources go, element 0 on the right; results that depend on a control value are drawn for an example. How to read.
Shown: bytes 7 to 0. Every byte works alike: 16, 32 and 64 bytes in the xmm, ymm and zmm forms. The EVEX forms write under a mask: where its bit is 0, the element keeps its old value, or zeroes it with {z}. With m64bcst, one quadword from memory stands for every element of the last source.
Result byte i comes from byte i of xmm2 and quadword i/8 of xmm3. Result bytes 7 to 0: r7, unchanged (bit 6 of k1 is 0), r5, r4, r3, r2, r1, r0.
Operation
What the forms do, in pseudocode that our tests run against results recorded on real processors. How to read.
for i in range(VL // 8):
if k1[i]: # 1 without a write mask
a = src3.q[i // 8] # the matrix of byte i
x = gf2p8inv(zmm2.b[i]) # the inverse; 0 for 0
r = 0
for j in range(8): # bit j: row 7 - j
row = a >> 8 * (7 - j) & 0xFF
r |= popcount(row & x) % 2 << j
zmm1.b[i] = r ^ imm8
elif zeroing:
zmm1.b[i] = 0
# else: zmm1.b[i] keeps its value
# m64bcst: src3.q[i] is the m64 for every i
# zmm1 is zeroed from bit VL upRun on AMD Zen 5 (EPYC 9645): 23 cases.
Operands
| Operand | Kind | Action |
|---|---|---|
VGF2P8AFFINEINVQB xmm, xmm, xmm/m128, imm8 VGF2P8AFFINEINVQB ymm, ymm, ymm/m256, imm8 | ||
xmm, ymm | explicit | write |
xmm, ymm | explicit | read |
xmm/m128, ymm/m256 | explicit | read |
imm8 | explicit | read |
VGF2P8AFFINEINVQB xmm {k}{z}, xmm, xmm/m128/m64bcst, imm8 VGF2P8AFFINEINVQB ymm {k}{z}, ymm, ymm/m256/m64bcst, imm8 VGF2P8AFFINEINVQB zmm {k}{z}, zmm, zmm/m512/m64bcst, imm8 | ||
xmm, ymm, zmm | explicit | write (masked) |
{k} | explicit | read (write mask) |
xmm, ymm, zmm | explicit | read |
xmm/m128/m64bcst, ymm/m256/m64bcst, zmm/m512/m64bcst | explicit | read |
imm8 | explicit | read |
Flags
None: XED records no flag that the forms test or change.
Exceptions
The exception class is XED's name for the set of exception conditions that a form follows. How to read.
- VEX forms
avx-type-4- EVEX forms
AVX512-E4
Attributes
What else XED records about the forms. How to read.
- EVEX forms
- write masking
- EVEX memory forms
- embedded broadcast (tuple Full)
Intrinsics
The C intrinsics of Clang 23.1.2 that compile to VGF2P8AFFINEINVQB, each with the form it compiles to and the Clang options it needs. The forms come from compiling every intrinsic and decoding the result with Intel XED; all intrinsics A–Z explains the method.
| Intrinsic | Compiles to |
|---|---|
_mm_gf2p8affineinv_epi64_epi8
__m128i _mm_gf2p8affineinv_epi64_epi8(__m128i A, __m128i B, const char I) |
|
_mm_mask_gf2p8affineinv_epi64_epi8
__m128i _mm_mask_gf2p8affineinv_epi64_epi8(__m128i S, __mmask16 U, __m128i A, __m128i B, const char I) |
|
_mm_maskz_gf2p8affineinv_epi64_epi8
__m128i _mm_maskz_gf2p8affineinv_epi64_epi8(__mmask16 U, __m128i A, __m128i B, const char I) |
|
_mm256_gf2p8affineinv_epi64_epi8
__m256i _mm256_gf2p8affineinv_epi64_epi8(__m256i A, __m256i B, const char I) |
|
_mm256_mask_gf2p8affineinv_epi64_epi8
__m256i _mm256_mask_gf2p8affineinv_epi64_epi8(__m256i S, __mmask32 U, __m256i A, __m256i B, const char I) |
|
_mm256_maskz_gf2p8affineinv_epi64_epi8
__m256i _mm256_maskz_gf2p8affineinv_epi64_epi8(__mmask32 U, __m256i A, __m256i B, const char I) |
|
_mm512_gf2p8affineinv_epi64_epi8
__m512i _mm512_gf2p8affineinv_epi64_epi8(__m512i A, __m512i B, const char I) |
|
_mm512_mask_gf2p8affineinv_epi64_epi8
__m512i _mm512_mask_gf2p8affineinv_epi64_epi8(__m512i S, __mmask64 U, __m512i A, __m512i B, const char I) |
|
_mm512_maskz_gf2p8affineinv_epi64_epi8
__m512i _mm512_maskz_gf2p8affineinv_epi64_epi8(__mmask64 U, __m512i A, __m512i B, const char I) |
|
CPUID and processors
Each form belongs to an XED ISA set. A form can be used when the processor reports every CPUID bit of one of its ISA set's alternatives.
| ISA set | CPUID | Processors |
|---|---|---|
AVX_GFNI | GFNI + AVX | Ice Lake (client), Tiger Lake, Alder Lake, Arrow Lake, Panther Lake, Nova Lake, Ice Lake (server), Sapphire Rapids, Emerald Rapids, Granite Rapids, Diamond Rapids, Sierra Forest, Clearwater Forest, Zen 4, Zen 5, Zen 6 |
AVX512_GFNI_128 | AVX10.1 + GFNI or GFNI + AVX512F + AVX512VL | Ice Lake (client), Tiger Lake, Nova Lake, Ice Lake (server), Sapphire Rapids, Emerald Rapids, Granite Rapids, Diamond Rapids, Zen 4, Zen 5, Zen 6 |
AVX512_GFNI_256 | Same as AVX512_GFNI_128 | Same as AVX512_GFNI_128 |
AVX512_GFNI_512 | AVX10.1 + GFNI or GFNI + AVX512F | Same as AVX512_GFNI_128 |
More GFNI instructions
More AVX10.1 instructions
- VFPCLASSPS
- VFPCLASSSD
- VFPCLASSSH
- VFPCLASSSS
- VGATHERDPD
- VGATHERDPS
- VGATHERQPD
- VGATHERQPS
- VGETEXPPD
- VGETEXPPH
- VGETEXPPS
- VGETEXPSD
- VGETEXPSH
- VGETEXPSS
- VGETMANTPD
- VGETMANTPH
- VGETMANTPS
- VGETMANTSD
- VGETMANTSH
- VGETMANTSS
- VGF2P8AFFINEQB
- VGF2P8MULB
- VINSERTF32X4
- VINSERTF32X8
- VINSERTF64X2
- VINSERTF64X4
- VINSERTI32X4
- VINSERTI32X8
- VINSERTI64X2
- VINSERTI64X4
- VINSERTPS
- VMAXPD
- VMAXPH
- VMAXPS
- VMAXSD
- VMAXSH
- VMAXSS
- VMINPD
- VMINPH
- VMINPS
Sources
- Intel XED v2026.08.23 (commit
0bcb6237345c): forms, encodings, operands, flags, exception classes, attributes, ISA sets, CPUID bits and chip model. - The CPU data of x86-64.net: Zen 3 to Zen 6, from GCC’s
-marchfeature sets and AMD’s Processor Programming References, which the page of each processor cites. - Clang's x86 intrinsic headers, LLVM 23.1.2 (commit
85ac56026243): the intrinsics, their signatures and doc comments, and the Clang of that release, which compiled each of them. - LLVM 23.1.2's x86 scheduling models (commit
85ac56026243): the latency, reciprocal throughput and ports of each form, as llvm-mca reports them. - Intel 64 and IA-32 Architectures Software Developer's Manual, Volume 2 (325383-093, September 2026): Volume 2A, page 3-426 (GF2P8AFFINEINVQB)
- Intel Advanced Vector Extensions 10.2 Architecture Specification, revision 7.0 (361050-007, April 2026)
- Software Optimization Guide for the AMD Zen5 Microarchitecture (58455, rev. 1.00, August 2024), Wayback Machine copy of AMD's ZIP
The tables are derived from Intel XED, Copyright Intel Corporation, licensed under the Apache License 2.0; x86-64.net converted and reformatted them. The intrinsics and their signatures come from Clang and the timings from LLVM's scheduling models, both part of the LLVM Project, licensed under the Apache License 2.0 with LLVM Exceptions. The text is our own.