mirror of
https://github.com/openssl/openssl.git
synced 2024-12-03 05:41:46 +08:00
1aa89a7a3a
They now generally conform to the following argument sequence: script.pl "$(PERLASM_SCHEME)" [ C preprocessor arguments ... ] \ $(PROCESSOR) <output file> However, in the spirit of being able to use these scripts manually, they also allow for no argument, or for only the flavour, or for only the output file. This is done by only using the last argument as output file if it's a file (it has an extension), and only using the first argument as flavour if it isn't a file (it doesn't have an extension). While we're at it, we make all $xlate calls the same, i.e. the $output argument is always quoted, and we always die on error when trying to start $xlate. There's a perl lesson in this, regarding operator priority... This will always succeed, even when it fails: open FOO, "something" || die "ERR: $!"; The reason is that '||' has higher priority than list operators (a function is essentially a list operator and gobbles up everything following it that isn't lower priority), and since a non-empty string is always true, so that ends up being exactly the same as: open FOO, "something"; This, however, will fail if "something" can't be opened: open FOO, "something" or die "ERR: $!"; The reason is that 'or' has lower priority that list operators, i.e. it's performed after the 'open' call. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/9884)
811 lines
22 KiB
Raku
Executable File
811 lines
22 KiB
Raku
Executable File
#! /usr/bin/env perl
|
|
# Copyright 2009-2018 The OpenSSL Project Authors. All Rights Reserved.
|
|
#
|
|
# Licensed under the Apache License 2.0 (the "License"). You may not use
|
|
# this file except in compliance with the License. You can obtain a copy
|
|
# in the file LICENSE in the source distribution or at
|
|
# https://www.openssl.org/source/license.html
|
|
|
|
|
|
# ====================================================================
|
|
# Written by Andy Polyakov <appro@openssl.org> for the OpenSSL
|
|
# project. The module is, however, dual licensed under OpenSSL and
|
|
# CRYPTOGAMS licenses depending on where you obtain it. For further
|
|
# details see http://www.openssl.org/~appro/cryptogams/.
|
|
# ====================================================================
|
|
|
|
# SHA256/512 block procedure for PA-RISC.
|
|
|
|
# June 2009.
|
|
#
|
|
# SHA256 performance is >75% better than gcc 3.2 generated code on
|
|
# PA-7100LC. Compared to code generated by vendor compiler this
|
|
# implementation is almost 70% faster in 64-bit build, but delivers
|
|
# virtually same performance in 32-bit build on PA-8600.
|
|
#
|
|
# SHA512 performance is >2.9x better than gcc 3.2 generated code on
|
|
# PA-7100LC, PA-RISC 1.1 processor. Then implementation detects if the
|
|
# code is executed on PA-RISC 2.0 processor and switches to 64-bit
|
|
# code path delivering adequate performance even in "blended" 32-bit
|
|
# build. Though 64-bit code is not any faster than code generated by
|
|
# vendor compiler on PA-8600...
|
|
#
|
|
# Special thanks to polarhome.com for providing HP-UX account.
|
|
|
|
# $output is the last argument if it looks like a file (it has an extension)
|
|
# $flavour is the first argument if it doesn't look like a file
|
|
$output = $#ARGV >= 0 && $ARGV[$#ARGV] =~ m|\.\w+$| ? pop : undef;
|
|
$flavour = $#ARGV >= 0 && $ARGV[0] !~ m|\.| ? shift : undef;
|
|
|
|
$output and open STDOUT,">$output";
|
|
|
|
if ($flavour =~ /64/) {
|
|
$LEVEL ="2.0W";
|
|
$SIZE_T =8;
|
|
$FRAME_MARKER =80;
|
|
$SAVED_RP =16;
|
|
$PUSH ="std";
|
|
$PUSHMA ="std,ma";
|
|
$POP ="ldd";
|
|
$POPMB ="ldd,mb";
|
|
} else {
|
|
$LEVEL ="1.0";
|
|
$SIZE_T =4;
|
|
$FRAME_MARKER =48;
|
|
$SAVED_RP =20;
|
|
$PUSH ="stw";
|
|
$PUSHMA ="stwm";
|
|
$POP ="ldw";
|
|
$POPMB ="ldwm";
|
|
}
|
|
|
|
if ($output =~ /512/) {
|
|
$func="sha512_block_data_order";
|
|
$SZ=8;
|
|
@Sigma0=(28,34,39);
|
|
@Sigma1=(14,18,41);
|
|
@sigma0=(1, 8, 7);
|
|
@sigma1=(19,61, 6);
|
|
$rounds=80;
|
|
$LAST10BITS=0x017;
|
|
$LD="ldd";
|
|
$LDM="ldd,ma";
|
|
$ST="std";
|
|
} else {
|
|
$func="sha256_block_data_order";
|
|
$SZ=4;
|
|
@Sigma0=( 2,13,22);
|
|
@Sigma1=( 6,11,25);
|
|
@sigma0=( 7,18, 3);
|
|
@sigma1=(17,19,10);
|
|
$rounds=64;
|
|
$LAST10BITS=0x0f2;
|
|
$LD="ldw";
|
|
$LDM="ldwm";
|
|
$ST="stw";
|
|
}
|
|
|
|
$FRAME=16*$SIZE_T+$FRAME_MARKER;# 16 saved regs + frame marker
|
|
# [+ argument transfer]
|
|
$XOFF=16*$SZ+32; # local variables
|
|
$FRAME+=$XOFF;
|
|
$XOFF+=$FRAME_MARKER; # distance between %sp and local variables
|
|
|
|
$ctx="%r26"; # zapped by $a0
|
|
$inp="%r25"; # zapped by $a1
|
|
$num="%r24"; # zapped by $t0
|
|
|
|
$a0 ="%r26";
|
|
$a1 ="%r25";
|
|
$t0 ="%r24";
|
|
$t1 ="%r29";
|
|
$Tbl="%r31";
|
|
|
|
@V=($A,$B,$C,$D,$E,$F,$G,$H)=("%r17","%r18","%r19","%r20","%r21","%r22","%r23","%r28");
|
|
|
|
@X=("%r1", "%r2", "%r3", "%r4", "%r5", "%r6", "%r7", "%r8",
|
|
"%r9", "%r10","%r11","%r12","%r13","%r14","%r15","%r16",$inp);
|
|
|
|
sub ROUND_00_15 {
|
|
my ($i,$a,$b,$c,$d,$e,$f,$g,$h)=@_;
|
|
$code.=<<___;
|
|
_ror $e,$Sigma1[0],$a0
|
|
and $f,$e,$t0
|
|
_ror $e,$Sigma1[1],$a1
|
|
addl $t1,$h,$h
|
|
andcm $g,$e,$t1
|
|
xor $a1,$a0,$a0
|
|
_ror $a1,`$Sigma1[2]-$Sigma1[1]`,$a1
|
|
or $t0,$t1,$t1 ; Ch(e,f,g)
|
|
addl @X[$i%16],$h,$h
|
|
xor $a0,$a1,$a1 ; Sigma1(e)
|
|
addl $t1,$h,$h
|
|
_ror $a,$Sigma0[0],$a0
|
|
addl $a1,$h,$h
|
|
|
|
_ror $a,$Sigma0[1],$a1
|
|
and $a,$b,$t0
|
|
and $a,$c,$t1
|
|
xor $a1,$a0,$a0
|
|
_ror $a1,`$Sigma0[2]-$Sigma0[1]`,$a1
|
|
xor $t1,$t0,$t0
|
|
and $b,$c,$t1
|
|
xor $a0,$a1,$a1 ; Sigma0(a)
|
|
addl $h,$d,$d
|
|
xor $t1,$t0,$t0 ; Maj(a,b,c)
|
|
`"$LDM $SZ($Tbl),$t1" if ($i<15)`
|
|
addl $a1,$h,$h
|
|
addl $t0,$h,$h
|
|
|
|
___
|
|
}
|
|
|
|
sub ROUND_16_xx {
|
|
my ($i,$a,$b,$c,$d,$e,$f,$g,$h)=@_;
|
|
$i-=16;
|
|
$code.=<<___;
|
|
_ror @X[($i+1)%16],$sigma0[0],$a0
|
|
_ror @X[($i+1)%16],$sigma0[1],$a1
|
|
addl @X[($i+9)%16],@X[$i],@X[$i]
|
|
_ror @X[($i+14)%16],$sigma1[0],$t0
|
|
_ror @X[($i+14)%16],$sigma1[1],$t1
|
|
xor $a1,$a0,$a0
|
|
_shr @X[($i+1)%16],$sigma0[2],$a1
|
|
xor $t1,$t0,$t0
|
|
_shr @X[($i+14)%16],$sigma1[2],$t1
|
|
xor $a1,$a0,$a0 ; sigma0(X[(i+1)&0x0f])
|
|
xor $t1,$t0,$t0 ; sigma1(X[(i+14)&0x0f])
|
|
$LDM $SZ($Tbl),$t1
|
|
addl $a0,@X[$i],@X[$i]
|
|
addl $t0,@X[$i],@X[$i]
|
|
___
|
|
$code.=<<___ if ($i==15);
|
|
extru $t1,31,10,$a1
|
|
comiclr,<> $LAST10BITS,$a1,%r0
|
|
ldo 1($Tbl),$Tbl ; signal end of $Tbl
|
|
___
|
|
&ROUND_00_15($i+16,$a,$b,$c,$d,$e,$f,$g,$h);
|
|
}
|
|
|
|
$code=<<___;
|
|
.LEVEL $LEVEL
|
|
.SPACE \$TEXT\$
|
|
.SUBSPA \$CODE\$,QUAD=0,ALIGN=8,ACCESS=0x2C,CODE_ONLY
|
|
|
|
.ALIGN 64
|
|
L\$table
|
|
___
|
|
$code.=<<___ if ($SZ==8);
|
|
.WORD 0x428a2f98,0xd728ae22,0x71374491,0x23ef65cd
|
|
.WORD 0xb5c0fbcf,0xec4d3b2f,0xe9b5dba5,0x8189dbbc
|
|
.WORD 0x3956c25b,0xf348b538,0x59f111f1,0xb605d019
|
|
.WORD 0x923f82a4,0xaf194f9b,0xab1c5ed5,0xda6d8118
|
|
.WORD 0xd807aa98,0xa3030242,0x12835b01,0x45706fbe
|
|
.WORD 0x243185be,0x4ee4b28c,0x550c7dc3,0xd5ffb4e2
|
|
.WORD 0x72be5d74,0xf27b896f,0x80deb1fe,0x3b1696b1
|
|
.WORD 0x9bdc06a7,0x25c71235,0xc19bf174,0xcf692694
|
|
.WORD 0xe49b69c1,0x9ef14ad2,0xefbe4786,0x384f25e3
|
|
.WORD 0x0fc19dc6,0x8b8cd5b5,0x240ca1cc,0x77ac9c65
|
|
.WORD 0x2de92c6f,0x592b0275,0x4a7484aa,0x6ea6e483
|
|
.WORD 0x5cb0a9dc,0xbd41fbd4,0x76f988da,0x831153b5
|
|
.WORD 0x983e5152,0xee66dfab,0xa831c66d,0x2db43210
|
|
.WORD 0xb00327c8,0x98fb213f,0xbf597fc7,0xbeef0ee4
|
|
.WORD 0xc6e00bf3,0x3da88fc2,0xd5a79147,0x930aa725
|
|
.WORD 0x06ca6351,0xe003826f,0x14292967,0x0a0e6e70
|
|
.WORD 0x27b70a85,0x46d22ffc,0x2e1b2138,0x5c26c926
|
|
.WORD 0x4d2c6dfc,0x5ac42aed,0x53380d13,0x9d95b3df
|
|
.WORD 0x650a7354,0x8baf63de,0x766a0abb,0x3c77b2a8
|
|
.WORD 0x81c2c92e,0x47edaee6,0x92722c85,0x1482353b
|
|
.WORD 0xa2bfe8a1,0x4cf10364,0xa81a664b,0xbc423001
|
|
.WORD 0xc24b8b70,0xd0f89791,0xc76c51a3,0x0654be30
|
|
.WORD 0xd192e819,0xd6ef5218,0xd6990624,0x5565a910
|
|
.WORD 0xf40e3585,0x5771202a,0x106aa070,0x32bbd1b8
|
|
.WORD 0x19a4c116,0xb8d2d0c8,0x1e376c08,0x5141ab53
|
|
.WORD 0x2748774c,0xdf8eeb99,0x34b0bcb5,0xe19b48a8
|
|
.WORD 0x391c0cb3,0xc5c95a63,0x4ed8aa4a,0xe3418acb
|
|
.WORD 0x5b9cca4f,0x7763e373,0x682e6ff3,0xd6b2b8a3
|
|
.WORD 0x748f82ee,0x5defb2fc,0x78a5636f,0x43172f60
|
|
.WORD 0x84c87814,0xa1f0ab72,0x8cc70208,0x1a6439ec
|
|
.WORD 0x90befffa,0x23631e28,0xa4506ceb,0xde82bde9
|
|
.WORD 0xbef9a3f7,0xb2c67915,0xc67178f2,0xe372532b
|
|
.WORD 0xca273ece,0xea26619c,0xd186b8c7,0x21c0c207
|
|
.WORD 0xeada7dd6,0xcde0eb1e,0xf57d4f7f,0xee6ed178
|
|
.WORD 0x06f067aa,0x72176fba,0x0a637dc5,0xa2c898a6
|
|
.WORD 0x113f9804,0xbef90dae,0x1b710b35,0x131c471b
|
|
.WORD 0x28db77f5,0x23047d84,0x32caab7b,0x40c72493
|
|
.WORD 0x3c9ebe0a,0x15c9bebc,0x431d67c4,0x9c100d4c
|
|
.WORD 0x4cc5d4be,0xcb3e42b6,0x597f299c,0xfc657e2a
|
|
.WORD 0x5fcb6fab,0x3ad6faec,0x6c44198c,0x4a475817
|
|
___
|
|
$code.=<<___ if ($SZ==4);
|
|
.WORD 0x428a2f98,0x71374491,0xb5c0fbcf,0xe9b5dba5
|
|
.WORD 0x3956c25b,0x59f111f1,0x923f82a4,0xab1c5ed5
|
|
.WORD 0xd807aa98,0x12835b01,0x243185be,0x550c7dc3
|
|
.WORD 0x72be5d74,0x80deb1fe,0x9bdc06a7,0xc19bf174
|
|
.WORD 0xe49b69c1,0xefbe4786,0x0fc19dc6,0x240ca1cc
|
|
.WORD 0x2de92c6f,0x4a7484aa,0x5cb0a9dc,0x76f988da
|
|
.WORD 0x983e5152,0xa831c66d,0xb00327c8,0xbf597fc7
|
|
.WORD 0xc6e00bf3,0xd5a79147,0x06ca6351,0x14292967
|
|
.WORD 0x27b70a85,0x2e1b2138,0x4d2c6dfc,0x53380d13
|
|
.WORD 0x650a7354,0x766a0abb,0x81c2c92e,0x92722c85
|
|
.WORD 0xa2bfe8a1,0xa81a664b,0xc24b8b70,0xc76c51a3
|
|
.WORD 0xd192e819,0xd6990624,0xf40e3585,0x106aa070
|
|
.WORD 0x19a4c116,0x1e376c08,0x2748774c,0x34b0bcb5
|
|
.WORD 0x391c0cb3,0x4ed8aa4a,0x5b9cca4f,0x682e6ff3
|
|
.WORD 0x748f82ee,0x78a5636f,0x84c87814,0x8cc70208
|
|
.WORD 0x90befffa,0xa4506ceb,0xbef9a3f7,0xc67178f2
|
|
___
|
|
$code.=<<___;
|
|
|
|
.EXPORT $func,ENTRY,ARGW0=GR,ARGW1=GR,ARGW2=GR
|
|
.ALIGN 64
|
|
$func
|
|
.PROC
|
|
.CALLINFO FRAME=`$FRAME-16*$SIZE_T`,NO_CALLS,SAVE_RP,ENTRY_GR=18
|
|
.ENTRY
|
|
$PUSH %r2,-$SAVED_RP(%sp) ; standard prologue
|
|
$PUSHMA %r3,$FRAME(%sp)
|
|
$PUSH %r4,`-$FRAME+1*$SIZE_T`(%sp)
|
|
$PUSH %r5,`-$FRAME+2*$SIZE_T`(%sp)
|
|
$PUSH %r6,`-$FRAME+3*$SIZE_T`(%sp)
|
|
$PUSH %r7,`-$FRAME+4*$SIZE_T`(%sp)
|
|
$PUSH %r8,`-$FRAME+5*$SIZE_T`(%sp)
|
|
$PUSH %r9,`-$FRAME+6*$SIZE_T`(%sp)
|
|
$PUSH %r10,`-$FRAME+7*$SIZE_T`(%sp)
|
|
$PUSH %r11,`-$FRAME+8*$SIZE_T`(%sp)
|
|
$PUSH %r12,`-$FRAME+9*$SIZE_T`(%sp)
|
|
$PUSH %r13,`-$FRAME+10*$SIZE_T`(%sp)
|
|
$PUSH %r14,`-$FRAME+11*$SIZE_T`(%sp)
|
|
$PUSH %r15,`-$FRAME+12*$SIZE_T`(%sp)
|
|
$PUSH %r16,`-$FRAME+13*$SIZE_T`(%sp)
|
|
$PUSH %r17,`-$FRAME+14*$SIZE_T`(%sp)
|
|
$PUSH %r18,`-$FRAME+15*$SIZE_T`(%sp)
|
|
|
|
_shl $num,`log(16*$SZ)/log(2)`,$num
|
|
addl $inp,$num,$num ; $num to point at the end of $inp
|
|
|
|
$PUSH $num,`-$FRAME_MARKER-4*$SIZE_T`(%sp) ; save arguments
|
|
$PUSH $inp,`-$FRAME_MARKER-3*$SIZE_T`(%sp)
|
|
$PUSH $ctx,`-$FRAME_MARKER-2*$SIZE_T`(%sp)
|
|
|
|
blr %r0,$Tbl
|
|
ldi 3,$t1
|
|
L\$pic
|
|
andcm $Tbl,$t1,$Tbl ; wipe privilege level
|
|
ldo L\$table-L\$pic($Tbl),$Tbl
|
|
___
|
|
$code.=<<___ if ($SZ==8 && $SIZE_T==4);
|
|
ldi 31,$t1
|
|
mtctl $t1,%cr11
|
|
extrd,u,*= $t1,%sar,1,$t1 ; executes on PA-RISC 1.0
|
|
b L\$parisc1
|
|
nop
|
|
___
|
|
$code.=<<___;
|
|
$LD `0*$SZ`($ctx),$A ; load context
|
|
$LD `1*$SZ`($ctx),$B
|
|
$LD `2*$SZ`($ctx),$C
|
|
$LD `3*$SZ`($ctx),$D
|
|
$LD `4*$SZ`($ctx),$E
|
|
$LD `5*$SZ`($ctx),$F
|
|
$LD `6*$SZ`($ctx),$G
|
|
$LD `7*$SZ`($ctx),$H
|
|
|
|
extru $inp,31,`log($SZ)/log(2)`,$t0
|
|
sh3addl $t0,%r0,$t0
|
|
subi `8*$SZ`,$t0,$t0
|
|
mtctl $t0,%cr11 ; load %sar with align factor
|
|
|
|
L\$oop
|
|
ldi `$SZ-1`,$t0
|
|
$LDM $SZ($Tbl),$t1
|
|
andcm $inp,$t0,$t0 ; align $inp
|
|
___
|
|
for ($i=0;$i<15;$i++) { # load input block
|
|
$code.="\t$LD `$SZ*$i`($t0),@X[$i]\n"; }
|
|
$code.=<<___;
|
|
cmpb,*= $inp,$t0,L\$aligned
|
|
$LD `$SZ*15`($t0),@X[15]
|
|
$LD `$SZ*16`($t0),@X[16]
|
|
___
|
|
for ($i=0;$i<16;$i++) { # align data
|
|
$code.="\t_align @X[$i],@X[$i+1],@X[$i]\n"; }
|
|
$code.=<<___;
|
|
L\$aligned
|
|
nop ; otherwise /usr/ccs/bin/as is confused by below .WORD
|
|
___
|
|
|
|
for($i=0;$i<16;$i++) { &ROUND_00_15($i,@V); unshift(@V,pop(@V)); }
|
|
$code.=<<___;
|
|
L\$rounds
|
|
nop ; otherwise /usr/ccs/bin/as is confused by below .WORD
|
|
___
|
|
for(;$i<32;$i++) { &ROUND_16_xx($i,@V); unshift(@V,pop(@V)); }
|
|
$code.=<<___;
|
|
bb,>= $Tbl,31,L\$rounds ; end of $Tbl signalled?
|
|
nop
|
|
|
|
$POP `-$FRAME_MARKER-2*$SIZE_T`(%sp),$ctx ; restore arguments
|
|
$POP `-$FRAME_MARKER-3*$SIZE_T`(%sp),$inp
|
|
$POP `-$FRAME_MARKER-4*$SIZE_T`(%sp),$num
|
|
ldo `-$rounds*$SZ-1`($Tbl),$Tbl ; rewind $Tbl
|
|
|
|
$LD `0*$SZ`($ctx),@X[0] ; load context
|
|
$LD `1*$SZ`($ctx),@X[1]
|
|
$LD `2*$SZ`($ctx),@X[2]
|
|
$LD `3*$SZ`($ctx),@X[3]
|
|
$LD `4*$SZ`($ctx),@X[4]
|
|
$LD `5*$SZ`($ctx),@X[5]
|
|
addl @X[0],$A,$A
|
|
$LD `6*$SZ`($ctx),@X[6]
|
|
addl @X[1],$B,$B
|
|
$LD `7*$SZ`($ctx),@X[7]
|
|
ldo `16*$SZ`($inp),$inp ; advance $inp
|
|
|
|
$ST $A,`0*$SZ`($ctx) ; save context
|
|
addl @X[2],$C,$C
|
|
$ST $B,`1*$SZ`($ctx)
|
|
addl @X[3],$D,$D
|
|
$ST $C,`2*$SZ`($ctx)
|
|
addl @X[4],$E,$E
|
|
$ST $D,`3*$SZ`($ctx)
|
|
addl @X[5],$F,$F
|
|
$ST $E,`4*$SZ`($ctx)
|
|
addl @X[6],$G,$G
|
|
$ST $F,`5*$SZ`($ctx)
|
|
addl @X[7],$H,$H
|
|
$ST $G,`6*$SZ`($ctx)
|
|
$ST $H,`7*$SZ`($ctx)
|
|
|
|
cmpb,*<>,n $inp,$num,L\$oop
|
|
$PUSH $inp,`-$FRAME_MARKER-3*$SIZE_T`(%sp) ; save $inp
|
|
___
|
|
if ($SZ==8 && $SIZE_T==4) # SHA512 for 32-bit PA-RISC 1.0
|
|
{{
|
|
$code.=<<___;
|
|
b L\$done
|
|
nop
|
|
|
|
.ALIGN 64
|
|
L\$parisc1
|
|
___
|
|
|
|
@V=( $Ahi, $Alo, $Bhi, $Blo, $Chi, $Clo, $Dhi, $Dlo,
|
|
$Ehi, $Elo, $Fhi, $Flo, $Ghi, $Glo, $Hhi, $Hlo) =
|
|
( "%r1", "%r2", "%r3", "%r4", "%r5", "%r6", "%r7", "%r8",
|
|
"%r9","%r10","%r11","%r12","%r13","%r14","%r15","%r16");
|
|
$a0 ="%r17";
|
|
$a1 ="%r18";
|
|
$a2 ="%r19";
|
|
$a3 ="%r20";
|
|
$t0 ="%r21";
|
|
$t1 ="%r22";
|
|
$t2 ="%r28";
|
|
$t3 ="%r29";
|
|
$Tbl="%r31";
|
|
|
|
@X=("%r23","%r24","%r25","%r26"); # zaps $num,$inp,$ctx
|
|
|
|
sub ROUND_00_15_pa1 {
|
|
my ($i,$ahi,$alo,$bhi,$blo,$chi,$clo,$dhi,$dlo,
|
|
$ehi,$elo,$fhi,$flo,$ghi,$glo,$hhi,$hlo,$flag)=@_;
|
|
my ($Xhi,$Xlo,$Xnhi,$Xnlo) = @X;
|
|
|
|
$code.=<<___ if (!$flag);
|
|
ldw `-$XOFF+8*(($i+1)%16)`(%sp),$Xnhi
|
|
ldw `-$XOFF+8*(($i+1)%16)+4`(%sp),$Xnlo ; load X[i+1]
|
|
___
|
|
$code.=<<___;
|
|
shd $ehi,$elo,$Sigma1[0],$t0
|
|
add $Xlo,$hlo,$hlo
|
|
shd $elo,$ehi,$Sigma1[0],$t1
|
|
addc $Xhi,$hhi,$hhi ; h += X[i]
|
|
shd $ehi,$elo,$Sigma1[1],$t2
|
|
ldwm 8($Tbl),$Xhi
|
|
shd $elo,$ehi,$Sigma1[1],$t3
|
|
ldw -4($Tbl),$Xlo ; load K[i]
|
|
xor $t2,$t0,$t0
|
|
xor $t3,$t1,$t1
|
|
and $flo,$elo,$a0
|
|
and $fhi,$ehi,$a1
|
|
shd $ehi,$elo,$Sigma1[2],$t2
|
|
andcm $glo,$elo,$a2
|
|
shd $elo,$ehi,$Sigma1[2],$t3
|
|
andcm $ghi,$ehi,$a3
|
|
xor $t2,$t0,$t0
|
|
xor $t3,$t1,$t1 ; Sigma1(e)
|
|
add $Xlo,$hlo,$hlo
|
|
xor $a2,$a0,$a0
|
|
addc $Xhi,$hhi,$hhi ; h += K[i]
|
|
xor $a3,$a1,$a1 ; Ch(e,f,g)
|
|
|
|
add $t0,$hlo,$hlo
|
|
shd $ahi,$alo,$Sigma0[0],$t0
|
|
addc $t1,$hhi,$hhi ; h += Sigma1(e)
|
|
shd $alo,$ahi,$Sigma0[0],$t1
|
|
add $a0,$hlo,$hlo
|
|
shd $ahi,$alo,$Sigma0[1],$t2
|
|
addc $a1,$hhi,$hhi ; h += Ch(e,f,g)
|
|
shd $alo,$ahi,$Sigma0[1],$t3
|
|
|
|
xor $t2,$t0,$t0
|
|
xor $t3,$t1,$t1
|
|
shd $ahi,$alo,$Sigma0[2],$t2
|
|
and $alo,$blo,$a0
|
|
shd $alo,$ahi,$Sigma0[2],$t3
|
|
and $ahi,$bhi,$a1
|
|
xor $t2,$t0,$t0
|
|
xor $t3,$t1,$t1 ; Sigma0(a)
|
|
|
|
and $alo,$clo,$a2
|
|
and $ahi,$chi,$a3
|
|
xor $a2,$a0,$a0
|
|
add $hlo,$dlo,$dlo
|
|
xor $a3,$a1,$a1
|
|
addc $hhi,$dhi,$dhi ; d += h
|
|
and $blo,$clo,$a2
|
|
add $t0,$hlo,$hlo
|
|
and $bhi,$chi,$a3
|
|
addc $t1,$hhi,$hhi ; h += Sigma0(a)
|
|
xor $a2,$a0,$a0
|
|
add $a0,$hlo,$hlo
|
|
xor $a3,$a1,$a1 ; Maj(a,b,c)
|
|
addc $a1,$hhi,$hhi ; h += Maj(a,b,c)
|
|
|
|
___
|
|
$code.=<<___ if ($i==15 && $flag);
|
|
extru $Xlo,31,10,$Xlo
|
|
comiclr,= $LAST10BITS,$Xlo,%r0
|
|
b L\$rounds_pa1
|
|
nop
|
|
___
|
|
push(@X,shift(@X)); push(@X,shift(@X));
|
|
}
|
|
|
|
sub ROUND_16_xx_pa1 {
|
|
my ($Xhi,$Xlo,$Xnhi,$Xnlo) = @X;
|
|
my ($i)=shift;
|
|
$i-=16;
|
|
$code.=<<___;
|
|
ldw `-$XOFF+8*(($i+1)%16)`(%sp),$Xnhi
|
|
ldw `-$XOFF+8*(($i+1)%16)+4`(%sp),$Xnlo ; load X[i+1]
|
|
ldw `-$XOFF+8*(($i+9)%16)`(%sp),$a1
|
|
ldw `-$XOFF+8*(($i+9)%16)+4`(%sp),$a0 ; load X[i+9]
|
|
ldw `-$XOFF+8*(($i+14)%16)`(%sp),$a3
|
|
ldw `-$XOFF+8*(($i+14)%16)+4`(%sp),$a2 ; load X[i+14]
|
|
shd $Xnhi,$Xnlo,$sigma0[0],$t0
|
|
shd $Xnlo,$Xnhi,$sigma0[0],$t1
|
|
add $a0,$Xlo,$Xlo
|
|
shd $Xnhi,$Xnlo,$sigma0[1],$t2
|
|
addc $a1,$Xhi,$Xhi
|
|
shd $Xnlo,$Xnhi,$sigma0[1],$t3
|
|
xor $t2,$t0,$t0
|
|
shd $Xnhi,$Xnlo,$sigma0[2],$t2
|
|
xor $t3,$t1,$t1
|
|
extru $Xnhi,`31-$sigma0[2]`,`32-$sigma0[2]`,$t3
|
|
xor $t2,$t0,$t0
|
|
shd $a3,$a2,$sigma1[0],$a0
|
|
xor $t3,$t1,$t1 ; sigma0(X[i+1)&0x0f])
|
|
shd $a2,$a3,$sigma1[0],$a1
|
|
add $t0,$Xlo,$Xlo
|
|
shd $a3,$a2,$sigma1[1],$t2
|
|
addc $t1,$Xhi,$Xhi
|
|
shd $a2,$a3,$sigma1[1],$t3
|
|
xor $t2,$a0,$a0
|
|
shd $a3,$a2,$sigma1[2],$t2
|
|
xor $t3,$a1,$a1
|
|
extru $a3,`31-$sigma1[2]`,`32-$sigma1[2]`,$t3
|
|
xor $t2,$a0,$a0
|
|
xor $t3,$a1,$a1 ; sigma0(X[i+14)&0x0f])
|
|
add $a0,$Xlo,$Xlo
|
|
addc $a1,$Xhi,$Xhi
|
|
|
|
stw $Xhi,`-$XOFF+8*($i%16)`(%sp)
|
|
stw $Xlo,`-$XOFF+8*($i%16)+4`(%sp)
|
|
___
|
|
&ROUND_00_15_pa1($i,@_,1);
|
|
}
|
|
$code.=<<___;
|
|
ldw `0*4`($ctx),$Ahi ; load context
|
|
ldw `1*4`($ctx),$Alo
|
|
ldw `2*4`($ctx),$Bhi
|
|
ldw `3*4`($ctx),$Blo
|
|
ldw `4*4`($ctx),$Chi
|
|
ldw `5*4`($ctx),$Clo
|
|
ldw `6*4`($ctx),$Dhi
|
|
ldw `7*4`($ctx),$Dlo
|
|
ldw `8*4`($ctx),$Ehi
|
|
ldw `9*4`($ctx),$Elo
|
|
ldw `10*4`($ctx),$Fhi
|
|
ldw `11*4`($ctx),$Flo
|
|
ldw `12*4`($ctx),$Ghi
|
|
ldw `13*4`($ctx),$Glo
|
|
ldw `14*4`($ctx),$Hhi
|
|
ldw `15*4`($ctx),$Hlo
|
|
|
|
extru $inp,31,2,$t0
|
|
sh3addl $t0,%r0,$t0
|
|
subi 32,$t0,$t0
|
|
mtctl $t0,%cr11 ; load %sar with align factor
|
|
|
|
L\$oop_pa1
|
|
extru $inp,31,2,$a3
|
|
comib,= 0,$a3,L\$aligned_pa1
|
|
sub $inp,$a3,$inp
|
|
|
|
ldw `0*4`($inp),$X[0]
|
|
ldw `1*4`($inp),$X[1]
|
|
ldw `2*4`($inp),$t2
|
|
ldw `3*4`($inp),$t3
|
|
ldw `4*4`($inp),$a0
|
|
ldw `5*4`($inp),$a1
|
|
ldw `6*4`($inp),$a2
|
|
ldw `7*4`($inp),$a3
|
|
vshd $X[0],$X[1],$X[0]
|
|
vshd $X[1],$t2,$X[1]
|
|
stw $X[0],`-$XOFF+0*4`(%sp)
|
|
ldw `8*4`($inp),$t0
|
|
vshd $t2,$t3,$t2
|
|
stw $X[1],`-$XOFF+1*4`(%sp)
|
|
ldw `9*4`($inp),$t1
|
|
vshd $t3,$a0,$t3
|
|
___
|
|
{
|
|
my @t=($t2,$t3,$a0,$a1,$a2,$a3,$t0,$t1);
|
|
for ($i=2;$i<=(128/4-8);$i++) {
|
|
$code.=<<___;
|
|
stw $t[0],`-$XOFF+$i*4`(%sp)
|
|
ldw `(8+$i)*4`($inp),$t[0]
|
|
vshd $t[1],$t[2],$t[1]
|
|
___
|
|
push(@t,shift(@t));
|
|
}
|
|
for (;$i<(128/4-1);$i++) {
|
|
$code.=<<___;
|
|
stw $t[0],`-$XOFF+$i*4`(%sp)
|
|
vshd $t[1],$t[2],$t[1]
|
|
___
|
|
push(@t,shift(@t));
|
|
}
|
|
$code.=<<___;
|
|
b L\$collected_pa1
|
|
stw $t[0],`-$XOFF+$i*4`(%sp)
|
|
|
|
___
|
|
}
|
|
$code.=<<___;
|
|
L\$aligned_pa1
|
|
ldw `0*4`($inp),$X[0]
|
|
ldw `1*4`($inp),$X[1]
|
|
ldw `2*4`($inp),$t2
|
|
ldw `3*4`($inp),$t3
|
|
ldw `4*4`($inp),$a0
|
|
ldw `5*4`($inp),$a1
|
|
ldw `6*4`($inp),$a2
|
|
ldw `7*4`($inp),$a3
|
|
stw $X[0],`-$XOFF+0*4`(%sp)
|
|
ldw `8*4`($inp),$t0
|
|
stw $X[1],`-$XOFF+1*4`(%sp)
|
|
ldw `9*4`($inp),$t1
|
|
___
|
|
{
|
|
my @t=($t2,$t3,$a0,$a1,$a2,$a3,$t0,$t1);
|
|
for ($i=2;$i<(128/4-8);$i++) {
|
|
$code.=<<___;
|
|
stw $t[0],`-$XOFF+$i*4`(%sp)
|
|
ldw `(8+$i)*4`($inp),$t[0]
|
|
___
|
|
push(@t,shift(@t));
|
|
}
|
|
for (;$i<128/4;$i++) {
|
|
$code.=<<___;
|
|
stw $t[0],`-$XOFF+$i*4`(%sp)
|
|
___
|
|
push(@t,shift(@t));
|
|
}
|
|
$code.="L\$collected_pa1\n";
|
|
}
|
|
|
|
for($i=0;$i<16;$i++) { &ROUND_00_15_pa1($i,@V); unshift(@V,pop(@V)); unshift(@V,pop(@V)); }
|
|
$code.="L\$rounds_pa1\n";
|
|
for(;$i<32;$i++) { &ROUND_16_xx_pa1($i,@V); unshift(@V,pop(@V)); unshift(@V,pop(@V)); }
|
|
|
|
$code.=<<___;
|
|
$POP `-$FRAME_MARKER-2*$SIZE_T`(%sp),$ctx ; restore arguments
|
|
$POP `-$FRAME_MARKER-3*$SIZE_T`(%sp),$inp
|
|
$POP `-$FRAME_MARKER-4*$SIZE_T`(%sp),$num
|
|
ldo `-$rounds*$SZ`($Tbl),$Tbl ; rewind $Tbl
|
|
|
|
ldw `0*4`($ctx),$t1 ; update context
|
|
ldw `1*4`($ctx),$t0
|
|
ldw `2*4`($ctx),$t3
|
|
ldw `3*4`($ctx),$t2
|
|
ldw `4*4`($ctx),$a1
|
|
ldw `5*4`($ctx),$a0
|
|
ldw `6*4`($ctx),$a3
|
|
add $t0,$Alo,$Alo
|
|
ldw `7*4`($ctx),$a2
|
|
addc $t1,$Ahi,$Ahi
|
|
ldw `8*4`($ctx),$t1
|
|
add $t2,$Blo,$Blo
|
|
ldw `9*4`($ctx),$t0
|
|
addc $t3,$Bhi,$Bhi
|
|
ldw `10*4`($ctx),$t3
|
|
add $a0,$Clo,$Clo
|
|
ldw `11*4`($ctx),$t2
|
|
addc $a1,$Chi,$Chi
|
|
ldw `12*4`($ctx),$a1
|
|
add $a2,$Dlo,$Dlo
|
|
ldw `13*4`($ctx),$a0
|
|
addc $a3,$Dhi,$Dhi
|
|
ldw `14*4`($ctx),$a3
|
|
add $t0,$Elo,$Elo
|
|
ldw `15*4`($ctx),$a2
|
|
addc $t1,$Ehi,$Ehi
|
|
stw $Ahi,`0*4`($ctx)
|
|
add $t2,$Flo,$Flo
|
|
stw $Alo,`1*4`($ctx)
|
|
addc $t3,$Fhi,$Fhi
|
|
stw $Bhi,`2*4`($ctx)
|
|
add $a0,$Glo,$Glo
|
|
stw $Blo,`3*4`($ctx)
|
|
addc $a1,$Ghi,$Ghi
|
|
stw $Chi,`4*4`($ctx)
|
|
add $a2,$Hlo,$Hlo
|
|
stw $Clo,`5*4`($ctx)
|
|
addc $a3,$Hhi,$Hhi
|
|
stw $Dhi,`6*4`($ctx)
|
|
ldo `16*$SZ`($inp),$inp ; advance $inp
|
|
stw $Dlo,`7*4`($ctx)
|
|
stw $Ehi,`8*4`($ctx)
|
|
stw $Elo,`9*4`($ctx)
|
|
stw $Fhi,`10*4`($ctx)
|
|
stw $Flo,`11*4`($ctx)
|
|
stw $Ghi,`12*4`($ctx)
|
|
stw $Glo,`13*4`($ctx)
|
|
stw $Hhi,`14*4`($ctx)
|
|
comb,= $inp,$num,L\$done
|
|
stw $Hlo,`15*4`($ctx)
|
|
b L\$oop_pa1
|
|
$PUSH $inp,`-$FRAME_MARKER-3*$SIZE_T`(%sp) ; save $inp
|
|
L\$done
|
|
___
|
|
}}
|
|
$code.=<<___;
|
|
$POP `-$FRAME-$SAVED_RP`(%sp),%r2 ; standard epilogue
|
|
$POP `-$FRAME+1*$SIZE_T`(%sp),%r4
|
|
$POP `-$FRAME+2*$SIZE_T`(%sp),%r5
|
|
$POP `-$FRAME+3*$SIZE_T`(%sp),%r6
|
|
$POP `-$FRAME+4*$SIZE_T`(%sp),%r7
|
|
$POP `-$FRAME+5*$SIZE_T`(%sp),%r8
|
|
$POP `-$FRAME+6*$SIZE_T`(%sp),%r9
|
|
$POP `-$FRAME+7*$SIZE_T`(%sp),%r10
|
|
$POP `-$FRAME+8*$SIZE_T`(%sp),%r11
|
|
$POP `-$FRAME+9*$SIZE_T`(%sp),%r12
|
|
$POP `-$FRAME+10*$SIZE_T`(%sp),%r13
|
|
$POP `-$FRAME+11*$SIZE_T`(%sp),%r14
|
|
$POP `-$FRAME+12*$SIZE_T`(%sp),%r15
|
|
$POP `-$FRAME+13*$SIZE_T`(%sp),%r16
|
|
$POP `-$FRAME+14*$SIZE_T`(%sp),%r17
|
|
$POP `-$FRAME+15*$SIZE_T`(%sp),%r18
|
|
bv (%r2)
|
|
.EXIT
|
|
$POPMB -$FRAME(%sp),%r3
|
|
.PROCEND
|
|
.STRINGZ "SHA`64*$SZ` block transform for PA-RISC, CRYPTOGAMS by <appro\@openssl.org>"
|
|
___
|
|
|
|
# Explicitly encode PA-RISC 2.0 instructions used in this module, so
|
|
# that it can be compiled with .LEVEL 1.0. It should be noted that I
|
|
# wouldn't have to do this, if GNU assembler understood .ALLOW 2.0
|
|
# directive...
|
|
|
|
my $ldd = sub {
|
|
my ($mod,$args) = @_;
|
|
my $orig = "ldd$mod\t$args";
|
|
|
|
if ($args =~ /(\-?[0-9]+)\(%r([0-9]+)\),%r([0-9]+)/) # format 3 suffices
|
|
{ my $opcode=(0x14<<26)|($2<<21)|($3<<16)|(($1&0x1FF8)<<1)|(($1>>13)&1);
|
|
$opcode|=(1<<3) if ($mod =~ /^,m/);
|
|
$opcode|=(1<<2) if ($mod =~ /^,mb/);
|
|
sprintf "\t.WORD\t0x%08x\t; %s",$opcode,$orig;
|
|
}
|
|
else { "\t".$orig; }
|
|
};
|
|
|
|
my $std = sub {
|
|
my ($mod,$args) = @_;
|
|
my $orig = "std$mod\t$args";
|
|
|
|
if ($args =~ /%r([0-9]+),(\-?[0-9]+)\(%r([0-9]+)\)/) # format 3 suffices
|
|
{ my $opcode=(0x1c<<26)|($3<<21)|($1<<16)|(($2&0x1FF8)<<1)|(($2>>13)&1);
|
|
sprintf "\t.WORD\t0x%08x\t; %s",$opcode,$orig;
|
|
}
|
|
else { "\t".$orig; }
|
|
};
|
|
|
|
my $extrd = sub {
|
|
my ($mod,$args) = @_;
|
|
my $orig = "extrd$mod\t$args";
|
|
|
|
# I only have ",u" completer, it's implicitly encoded...
|
|
if ($args =~ /%r([0-9]+),([0-9]+),([0-9]+),%r([0-9]+)/) # format 15
|
|
{ my $opcode=(0x36<<26)|($1<<21)|($4<<16);
|
|
my $len=32-$3;
|
|
$opcode |= (($2&0x20)<<6)|(($2&0x1f)<<5); # encode pos
|
|
$opcode |= (($len&0x20)<<7)|($len&0x1f); # encode len
|
|
sprintf "\t.WORD\t0x%08x\t; %s",$opcode,$orig;
|
|
}
|
|
elsif ($args =~ /%r([0-9]+),%sar,([0-9]+),%r([0-9]+)/) # format 12
|
|
{ my $opcode=(0x34<<26)|($1<<21)|($3<<16)|(2<<11)|(1<<9);
|
|
my $len=32-$2;
|
|
$opcode |= (($len&0x20)<<3)|($len&0x1f); # encode len
|
|
$opcode |= (1<<13) if ($mod =~ /,\**=/);
|
|
sprintf "\t.WORD\t0x%08x\t; %s",$opcode,$orig;
|
|
}
|
|
else { "\t".$orig; }
|
|
};
|
|
|
|
my $shrpd = sub {
|
|
my ($mod,$args) = @_;
|
|
my $orig = "shrpd$mod\t$args";
|
|
|
|
if ($args =~ /%r([0-9]+),%r([0-9]+),([0-9]+),%r([0-9]+)/) # format 14
|
|
{ my $opcode=(0x34<<26)|($2<<21)|($1<<16)|(1<<10)|$4;
|
|
my $cpos=63-$3;
|
|
$opcode |= (($cpos&0x20)<<6)|(($cpos&0x1f)<<5); # encode sa
|
|
sprintf "\t.WORD\t0x%08x\t; %s",$opcode,$orig;
|
|
}
|
|
elsif ($args =~ /%r([0-9]+),%r([0-9]+),%sar,%r([0-9]+)/) # format 11
|
|
{ sprintf "\t.WORD\t0x%08x\t; %s",
|
|
(0x34<<26)|($2<<21)|($1<<16)|(1<<9)|$3,$orig;
|
|
}
|
|
else { "\t".$orig; }
|
|
};
|
|
|
|
sub assemble {
|
|
my ($mnemonic,$mod,$args)=@_;
|
|
my $opcode = eval("\$$mnemonic");
|
|
|
|
ref($opcode) eq 'CODE' ? &$opcode($mod,$args) : "\t$mnemonic$mod\t$args";
|
|
}
|
|
|
|
if (`$ENV{CC} -Wa,-v -c -o /dev/null -x assembler /dev/null 2>&1`
|
|
=~ /GNU assembler/) {
|
|
$gnuas = 1;
|
|
}
|
|
|
|
foreach (split("\n",$code)) {
|
|
s/\`([^\`]*)\`/eval $1/ge;
|
|
|
|
s/shd\s+(%r[0-9]+),(%r[0-9]+),([0-9]+)/
|
|
$3>31 ? sprintf("shd\t%$2,%$1,%d",$3-32) # rotation for >=32
|
|
: sprintf("shd\t%$1,%$2,%d",$3)/e or
|
|
# translate made up instructions: _ror, _shr, _align, _shl
|
|
s/_ror(\s+)(%r[0-9]+),/
|
|
($SZ==4 ? "shd" : "shrpd")."$1$2,$2,"/e or
|
|
|
|
s/_shr(\s+%r[0-9]+),([0-9]+),/
|
|
$SZ==4 ? sprintf("extru%s,%d,%d,",$1,31-$2,32-$2)
|
|
: sprintf("extrd,u%s,%d,%d,",$1,63-$2,64-$2)/e or
|
|
|
|
s/_align(\s+%r[0-9]+,%r[0-9]+),/
|
|
($SZ==4 ? "vshd$1," : "shrpd$1,%sar,")/e or
|
|
|
|
s/_shl(\s+%r[0-9]+),([0-9]+),/
|
|
$SIZE_T==4 ? sprintf("zdep%s,%d,%d,",$1,31-$2,32-$2)
|
|
: sprintf("depd,z%s,%d,%d,",$1,63-$2,64-$2)/e;
|
|
|
|
s/^\s+([a-z]+)([\S]*)\s+([\S]*)/&assemble($1,$2,$3)/e if ($SIZE_T==4);
|
|
|
|
s/(\.LEVEL\s+2\.0)W/$1w/ if ($gnuas && $SIZE_T==8);
|
|
s/\.SPACE\s+\$TEXT\$/.text/ if ($gnuas && $SIZE_T==8);
|
|
s/\.SUBSPA.*// if ($gnuas && $SIZE_T==8);
|
|
s/cmpb,\*/comb,/ if ($SIZE_T==4);
|
|
s/\bbv\b/bve/ if ($SIZE_T==8);
|
|
|
|
print $_,"\n";
|
|
}
|
|
|
|
close STDOUT;
|