diff options
author | Niels Möller <nisse@lysator.liu.se> | 2013-03-13 10:02:32 +0100 |
---|---|---|
committer | Niels Möller <nisse@lysator.liu.se> | 2013-03-13 10:11:25 +0100 |
commit | e8ddf9577049a929adc0fbc8b7f418be9f6b8448 (patch) | |
tree | 355ba33b5ca04c6328897147b0fb85c27665c4aa /x86_64/sha512-compress.asm | |
parent | 495fa3b3fab0d15a6823eaf598758b48db3050b0 (diff) | |
download | nettle-e8ddf9577049a929adc0fbc8b7f418be9f6b8448.tar.gz |
x86_64 assembly for sha512.
Diffstat (limited to 'x86_64/sha512-compress.asm')
-rw-r--r-- | x86_64/sha512-compress.asm | 196 |
1 files changed, 196 insertions, 0 deletions
diff --git a/x86_64/sha512-compress.asm b/x86_64/sha512-compress.asm new file mode 100644 index 00000000..3b0391a6 --- /dev/null +++ b/x86_64/sha512-compress.asm @@ -0,0 +1,196 @@ +C nettle, low-level cryptographics library +C +C Copyright (C) 2013 Niels Möller +C +C The nettle library is free software; you can redistribute it and/or modify +C it under the terms of the GNU Lesser General Public License as published by +C the Free Software Foundation; either version 2.1 of the License, or (at your +C option) any later version. +C +C The nettle library is distributed in the hope that it will be useful, but +C WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY +C or FITNESS FOR A PARTICULAR PURPOSE. See the GNU Lesser General Public +C License for more details. +C +C You should have received a copy of the GNU Lesser General Public License +C along with the nettle library; see the file COPYING.LIB. If not, write to +C the Free Software Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, +C MA 02111-1301, USA. + + .file "sha512-compress.asm" +define(<STATE>, <%rdi>) +define(<INPUT>, <%rsi>) +define(<K>, <%rdx>) +define(<SA>, <%rax>) +define(<SB>, <%rbx>) +define(<SC>, <%rcx>) +define(<SD>, <%r8>) +define(<SE>, <%r9>) +define(<SF>, <%r10>) +define(<SG>, <%r11>) +define(<SH>, <%r12>) +define(<T0>, <%r13>) +define(<T1>, <%rdi>) C Overlap STATE +define(<COUNT>, <%r14>) +define(<W>, <%r15>) + +define(<EXPN>, < + mov OFFSET64($1)(%rsp), W + mov OFFSET64(eval(($1 + 14) % 16))(%rsp), T0 + mov T0, T1 + shr <$>6, T0 + rol <$>3, T1 + xor T1, T0 + rol <$>42, T1 + xor T1, T0 + add T0, W + mov OFFSET64(eval(($1 + 1) % 16))(%rsp), T0 + mov T0, T1 + shr <$>7, T0 + rol <$>56, T1 + xor T1, T0 + rol <$>7, T1 + xor T1, T0 + add T0, W + add OFFSET64(eval(($1 + 9) % 16))(%rsp), W + mov W, OFFSET64($1)(%rsp) +>) + +C ROUND(A,B,C,D,E,F,G,H,K) +C +C H += S1(E) + Choice(E,F,G) + K + W +C D += H +C H += S0(A) + Majority(A,B,C) +C +C Where +C +C S1(E) = E<<<50 ^ E<<<46 ^ E<<<23 +C S0(A) = A<<<36 ^ A<<<30 ^ A<<<25 +C Choice (E, F, G) = G^(E&(F^G)) +C Majority (A,B,C) = (A&B) + (C&(A^B)) + +define(<ROUND>, < + mov $5, T0 + mov $5, T1 + rol <$>23, T0 + rol <$>46, T1 + xor T0, T1 + rol <$>27, T0 + xor T0, T1 + add W, $8 + add T1, $8 + mov $7, T0 + xor $6, T0 + and $5, T0 + xor $7, T0 + add OFFSET64($9)(K,COUNT,8), $8 + add T0, $8 + add $8, $4 + + mov $1, T0 + mov $1, T1 + rol <$>25, T0 + rol <$>30, T1 + xor T0, T1 + rol <$>11, T0 + xor T0, T1 + add T1, $8 + mov $1, T0 + mov $1, T1 + and $2, T0 + xor $2, T1 + add T0, $8 + and $3, T1 + add T1, $8 +>) + +define(<NOEXPN>, < + mov OFFSET64($1)(INPUT, COUNT, 8), W + bswap W + mov W, OFFSET64($1)(%rsp, COUNT, 8) +>) + + C void + C _nettle_sha512_compress(uint32_t *state, const uint8_t *input, const uint32_t *k) + + .text + ALIGN(4) + +PROLOGUE(_nettle_sha512_compress) + W64_ENTRY(3, 0) + + sub $184, %rsp + mov %rbx, 128(%rsp) + mov STATE, 136(%rsp) C Save state, to free a register + mov %rbp, 144(%rsp) + mov %r12, 152(%rsp) + mov %r13, 160(%rsp) + mov %r14, 168(%rsp) + mov %r15, 176(%rsp) + + mov (STATE), SA + mov 8(STATE), SB + mov 16(STATE), SC + mov 24(STATE), SD + mov 32(STATE), SE + mov 40(STATE), SF + mov 48(STATE), SG + mov 56(STATE), SH + xor COUNT, COUNT + ALIGN(4) + +.Loop1: + NOEXPN(0) ROUND(SA,SB,SC,SD,SE,SF,SG,SH,0) + NOEXPN(1) ROUND(SH,SA,SB,SC,SD,SE,SF,SG,1) + NOEXPN(2) ROUND(SG,SH,SA,SB,SC,SD,SE,SF,2) + NOEXPN(3) ROUND(SF,SG,SH,SA,SB,SC,SD,SE,3) + NOEXPN(4) ROUND(SE,SF,SG,SH,SA,SB,SC,SD,4) + NOEXPN(5) ROUND(SD,SE,SF,SG,SH,SA,SB,SC,5) + NOEXPN(6) ROUND(SC,SD,SE,SF,SG,SH,SA,SB,6) + NOEXPN(7) ROUND(SB,SC,SD,SE,SF,SG,SH,SA,7) + add $8, COUNT + cmp $16, COUNT + jne .Loop1 + +.Loop2: + EXPN( 0) ROUND(SA,SB,SC,SD,SE,SF,SG,SH,0) + EXPN( 1) ROUND(SH,SA,SB,SC,SD,SE,SF,SG,1) + EXPN( 2) ROUND(SG,SH,SA,SB,SC,SD,SE,SF,2) + EXPN( 3) ROUND(SF,SG,SH,SA,SB,SC,SD,SE,3) + EXPN( 4) ROUND(SE,SF,SG,SH,SA,SB,SC,SD,4) + EXPN( 5) ROUND(SD,SE,SF,SG,SH,SA,SB,SC,5) + EXPN( 6) ROUND(SC,SD,SE,SF,SG,SH,SA,SB,6) + EXPN( 7) ROUND(SB,SC,SD,SE,SF,SG,SH,SA,7) + EXPN( 8) ROUND(SA,SB,SC,SD,SE,SF,SG,SH,8) + EXPN( 9) ROUND(SH,SA,SB,SC,SD,SE,SF,SG,9) + EXPN(10) ROUND(SG,SH,SA,SB,SC,SD,SE,SF,10) + EXPN(11) ROUND(SF,SG,SH,SA,SB,SC,SD,SE,11) + EXPN(12) ROUND(SE,SF,SG,SH,SA,SB,SC,SD,12) + EXPN(13) ROUND(SD,SE,SF,SG,SH,SA,SB,SC,13) + EXPN(14) ROUND(SC,SD,SE,SF,SG,SH,SA,SB,14) + EXPN(15) ROUND(SB,SC,SD,SE,SF,SG,SH,SA,15) + add $16, COUNT + cmp $80, COUNT + jne .Loop2 + + mov 136(%rsp), STATE + + add SA, (STATE) + add SB, 8(STATE) + add SC, 16(STATE) + add SD, 24(STATE) + add SE, 32(STATE) + add SF, 40(STATE) + add SG, 48(STATE) + add SH, 56(STATE) + + mov 128(%rsp), %rbx + mov 144(%rsp), %rbp + mov 152(%rsp), %r12 + mov 160(%rsp), %r13 + mov 168(%rsp),%r14 + mov 176(%rsp),%r15 + + add $184, %rsp + ret +EPILOGUE(_nettle_sha512_compress) |