Black Lives Matter. Support the Equal Justice Initiative.

Text file src/crypto/sha256/sha256block_386.s

Documentation: crypto/sha256

     1  // Copyright 2013 The Go Authors. All rights reserved.
     2  // Use of this source code is governed by a BSD-style
     3  // license that can be found in the LICENSE file.
     4  
     5  // SHA256 block routine. See sha256block.go for Go equivalent.
     6  //
     7  // The algorithm is detailed in FIPS 180-4:
     8  //
     9  //  https://csrc.nist.gov/publications/fips/fips180-4/fips-180-4.pdf
    10  //
    11  // Wt = Mt; for 0 <= t <= 15
    12  // Wt = SIGMA1(Wt-2) + SIGMA0(Wt-15) + Wt-16; for 16 <= t <= 63
    13  //
    14  // a = H0
    15  // b = H1
    16  // c = H2
    17  // d = H3
    18  // e = H4
    19  // f = H5
    20  // g = H6
    21  // h = H7
    22  //
    23  // for t = 0 to 63 {
    24  //    T1 = h + BIGSIGMA1(e) + Ch(e,f,g) + Kt + Wt
    25  //    T2 = BIGSIGMA0(a) + Maj(a,b,c)
    26  //    h = g
    27  //    g = f
    28  //    f = e
    29  //    e = d + T1
    30  //    d = c
    31  //    c = b
    32  //    b = a
    33  //    a = T1 + T2
    34  // }
    35  //
    36  // H0 = a + H0
    37  // H1 = b + H1
    38  // H2 = c + H2
    39  // H3 = d + H3
    40  // H4 = e + H4
    41  // H5 = f + H5
    42  // H6 = g + H6
    43  // H7 = h + H7
    44  
    45  // Wt = Mt; for 0 <= t <= 15
    46  #define MSGSCHEDULE0(index) \
    47  	MOVL	(index*4)(SI), AX; \
    48  	BSWAPL	AX; \
    49  	MOVL	AX, (index*4)(BP)
    50  
    51  // Wt = SIGMA1(Wt-2) + Wt-7 + SIGMA0(Wt-15) + Wt-16; for 16 <= t <= 63
    52  //   SIGMA0(x) = ROTR(7,x) XOR ROTR(18,x) XOR SHR(3,x)
    53  //   SIGMA1(x) = ROTR(17,x) XOR ROTR(19,x) XOR SHR(10,x)
    54  #define MSGSCHEDULE1(index) \
    55  	MOVL	((index-2)*4)(BP), AX; \
    56  	MOVL	AX, CX; \
    57  	RORL	$17, AX; \
    58  	MOVL	CX, DX; \
    59  	RORL	$19, CX; \
    60  	SHRL	$10, DX; \
    61  	MOVL	((index-15)*4)(BP), BX; \
    62  	XORL	CX, AX; \
    63  	MOVL	BX, CX; \
    64  	XORL	DX, AX; \
    65  	RORL	$7, BX; \
    66  	MOVL	CX, DX; \
    67  	SHRL	$3, DX; \
    68  	RORL	$18, CX; \
    69  	ADDL	((index-7)*4)(BP), AX; \
    70  	XORL	CX, BX; \
    71  	XORL	DX, BX; \
    72  	ADDL	((index-16)*4)(BP), BX; \
    73  	ADDL	BX, AX; \
    74  	MOVL	AX, ((index)*4)(BP)
    75  
    76  // Calculate T1 in AX - uses AX, BX, CX and DX registers.
    77  // Wt is passed in AX.
    78  //   T1 = h + BIGSIGMA1(e) + Ch(e, f, g) + Kt + Wt
    79  //     BIGSIGMA1(x) = ROTR(6,x) XOR ROTR(11,x) XOR ROTR(25,x)
    80  //     Ch(x, y, z) = (x AND y) XOR (NOT x AND z)
    81  #define SHA256T1(const, e, f, g, h) \
    82  	MOVL	(h*4)(DI), BX; \
    83  	ADDL	AX, BX; \
    84  	MOVL	(e*4)(DI), AX; \
    85  	ADDL	$const, BX; \
    86  	MOVL	(e*4)(DI), CX; \
    87  	RORL	$6, AX; \
    88  	MOVL	(e*4)(DI), DX; \
    89  	RORL	$11, CX; \
    90  	XORL	CX, AX; \
    91  	MOVL	(e*4)(DI), CX; \
    92  	RORL	$25, DX; \
    93  	ANDL	(f*4)(DI), CX; \
    94  	XORL	AX, DX; \
    95  	MOVL	(e*4)(DI), AX; \
    96  	NOTL	AX; \
    97  	ADDL	DX, BX; \
    98  	ANDL	(g*4)(DI), AX; \
    99  	XORL	CX, AX; \
   100  	ADDL	BX, AX
   101  
   102  // Calculate T2 in BX - uses AX, BX, CX and DX registers.
   103  //   T2 = BIGSIGMA0(a) + Maj(a, b, c)
   104  //     BIGSIGMA0(x) = ROTR(2,x) XOR ROTR(13,x) XOR ROTR(22,x)
   105  //     Maj(x, y, z) = (x AND y) XOR (x AND z) XOR (y AND z)
   106  #define SHA256T2(a, b, c) \
   107  	MOVL	(a*4)(DI), AX; \
   108  	MOVL	(c*4)(DI), BX; \
   109  	RORL	$2, AX; \
   110  	MOVL	(a*4)(DI), DX; \
   111  	ANDL	(b*4)(DI), BX; \
   112  	RORL	$13, DX; \
   113  	MOVL	(a*4)(DI), CX; \
   114  	ANDL	(c*4)(DI), CX; \
   115  	XORL	DX, AX; \
   116  	XORL	CX, BX; \
   117  	MOVL	(a*4)(DI), DX; \
   118  	MOVL	(b*4)(DI), CX; \
   119  	RORL	$22, DX; \
   120  	ANDL	(a*4)(DI), CX; \
   121  	XORL	CX, BX; \
   122  	XORL	DX, AX; \
   123  	ADDL	AX, BX
   124  
   125  // Calculate T1 and T2, then e = d + T1 and a = T1 + T2.
   126  // The values for e and a are stored in d and h, ready for rotation.
   127  #define SHA256ROUND(index, const, a, b, c, d, e, f, g, h) \
   128  	SHA256T1(const, e, f, g, h); \
   129  	MOVL	AX, 292(SP); \
   130  	SHA256T2(a, b, c); \
   131  	MOVL	292(SP), AX; \
   132  	ADDL	AX, BX; \
   133  	ADDL	AX, (d*4)(DI); \
   134  	MOVL	BX, (h*4)(DI)
   135  
   136  #define SHA256ROUND0(index, const, a, b, c, d, e, f, g, h) \
   137  	MSGSCHEDULE0(index); \
   138  	SHA256ROUND(index, const, a, b, c, d, e, f, g, h)
   139  
   140  #define SHA256ROUND1(index, const, a, b, c, d, e, f, g, h) \
   141  	MSGSCHEDULE1(index); \
   142  	SHA256ROUND(index, const, a, b, c, d, e, f, g, h)
   143  
   144  TEXT ¬∑block(SB),0,$296-16
   145  	MOVL	p_base+4(FP), SI
   146  	MOVL	p_len+8(FP), DX
   147  	SHRL	$6, DX
   148  	SHLL	$6, DX
   149  
   150  	LEAL	(SI)(DX*1), DI
   151  	MOVL	DI, 288(SP)
   152  	CMPL	SI, DI
   153  	JEQ	end
   154  
   155  	LEAL	256(SP), DI		// variables
   156  
   157  	MOVL	dig+0(FP), BP
   158  	MOVL	(0*4)(BP), AX		// a = H0
   159  	MOVL	AX, (0*4)(DI)
   160  	MOVL	(1*4)(BP), BX		// b = H1
   161  	MOVL	BX, (1*4)(DI)
   162  	MOVL	(2*4)(BP), CX		// c = H2
   163  	MOVL	CX, (2*4)(DI)
   164  	MOVL	(3*4)(BP), DX		// d = H3
   165  	MOVL	DX, (3*4)(DI)
   166  	MOVL	(4*4)(BP), AX		// e = H4
   167  	MOVL	AX, (4*4)(DI)
   168  	MOVL	(5*4)(BP), BX		// f = H5
   169  	MOVL	BX, (5*4)(DI)
   170  	MOVL	(6*4)(BP), CX		// g = H6
   171  	MOVL	CX, (6*4)(DI)
   172  	MOVL	(7*4)(BP), DX		// h = H7
   173  	MOVL	DX, (7*4)(DI)
   174  
   175  loop:
   176  	MOVL	SP, BP			// message schedule
   177  
   178  	SHA256ROUND0(0, 0x428a2f98, 0, 1, 2, 3, 4, 5, 6, 7)
   179  	SHA256ROUND0(1, 0x71374491, 7, 0, 1, 2, 3, 4, 5, 6)
   180  	SHA256ROUND0(2, 0xb5c0fbcf, 6, 7, 0, 1, 2, 3, 4, 5)
   181  	SHA256ROUND0(3, 0xe9b5dba5, 5, 6, 7, 0, 1, 2, 3, 4)
   182  	SHA256ROUND0(4, 0x3956c25b, 4, 5, 6, 7, 0, 1, 2, 3)
   183  	SHA256ROUND0(5, 0x59f111f1, 3, 4, 5, 6, 7, 0, 1, 2)
   184  	SHA256ROUND0(6, 0x923f82a4, 2, 3, 4, 5, 6, 7, 0, 1)
   185  	SHA256ROUND0(7, 0xab1c5ed5, 1, 2, 3, 4, 5, 6, 7, 0)
   186  	SHA256ROUND0(8, 0xd807aa98, 0, 1, 2, 3, 4, 5, 6, 7)
   187  	SHA256ROUND0(9, 0x12835b01, 7, 0, 1, 2, 3, 4, 5, 6)
   188  	SHA256ROUND0(10, 0x243185be, 6, 7, 0, 1, 2, 3, 4, 5)
   189  	SHA256ROUND0(11, 0x550c7dc3, 5, 6, 7, 0, 1, 2, 3, 4)
   190  	SHA256ROUND0(12, 0x72be5d74, 4, 5, 6, 7, 0, 1, 2, 3)
   191  	SHA256ROUND0(13, 0x80deb1fe, 3, 4, 5, 6, 7, 0, 1, 2)
   192  	SHA256ROUND0(14, 0x9bdc06a7, 2, 3, 4, 5, 6, 7, 0, 1)
   193  	SHA256ROUND0(15, 0xc19bf174, 1, 2, 3, 4, 5, 6, 7, 0)
   194  
   195  	SHA256ROUND1(16, 0xe49b69c1, 0, 1, 2, 3, 4, 5, 6, 7)
   196  	SHA256ROUND1(17, 0xefbe4786, 7, 0, 1, 2, 3, 4, 5, 6)
   197  	SHA256ROUND1(18, 0x0fc19dc6, 6, 7, 0, 1, 2, 3, 4, 5)
   198  	SHA256ROUND1(19, 0x240ca1cc, 5, 6, 7, 0, 1, 2, 3, 4)
   199  	SHA256ROUND1(20, 0x2de92c6f, 4, 5, 6, 7, 0, 1, 2, 3)
   200  	SHA256ROUND1(21, 0x4a7484aa, 3, 4, 5, 6, 7, 0, 1, 2)
   201  	SHA256ROUND1(22, 0x5cb0a9dc, 2, 3, 4, 5, 6, 7, 0, 1)
   202  	SHA256ROUND1(23, 0x76f988da, 1, 2, 3, 4, 5, 6, 7, 0)
   203  	SHA256ROUND1(24, 0x983e5152, 0, 1, 2, 3, 4, 5, 6, 7)
   204  	SHA256ROUND1(25, 0xa831c66d, 7, 0, 1, 2, 3, 4, 5, 6)
   205  	SHA256ROUND1(26, 0xb00327c8, 6, 7, 0, 1, 2, 3, 4, 5)
   206  	SHA256ROUND1(27, 0xbf597fc7, 5, 6, 7, 0, 1, 2, 3, 4)
   207  	SHA256ROUND1(28, 0xc6e00bf3, 4, 5, 6, 7, 0, 1, 2, 3)
   208  	SHA256ROUND1(29, 0xd5a79147, 3, 4, 5, 6, 7, 0, 1, 2)
   209  	SHA256ROUND1(30, 0x06ca6351, 2, 3, 4, 5, 6, 7, 0, 1)
   210  	SHA256ROUND1(31, 0x14292967, 1, 2, 3, 4, 5, 6, 7, 0)
   211  	SHA256ROUND1(32, 0x27b70a85, 0, 1, 2, 3, 4, 5, 6, 7)
   212  	SHA256ROUND1(33, 0x2e1b2138, 7, 0, 1, 2, 3, 4, 5, 6)
   213  	SHA256ROUND1(34, 0x4d2c6dfc, 6, 7, 0, 1, 2, 3, 4, 5)
   214  	SHA256ROUND1(35, 0x53380d13, 5, 6, 7, 0, 1, 2, 3, 4)
   215  	SHA256ROUND1(36, 0x650a7354, 4, 5, 6, 7, 0, 1, 2, 3)
   216  	SHA256ROUND1(37, 0x766a0abb, 3, 4, 5, 6, 7, 0, 1, 2)
   217  	SHA256ROUND1(38, 0x81c2c92e, 2, 3, 4, 5, 6, 7, 0, 1)
   218  	SHA256ROUND1(39, 0x92722c85, 1, 2, 3, 4, 5, 6, 7, 0)
   219  	SHA256ROUND1(40, 0xa2bfe8a1, 0, 1, 2, 3, 4, 5, 6, 7)
   220  	SHA256ROUND1(41, 0xa81a664b, 7, 0, 1, 2, 3, 4, 5, 6)
   221  	SHA256ROUND1(42, 0xc24b8b70, 6, 7, 0, 1, 2, 3, 4, 5)
   222  	SHA256ROUND1(43, 0xc76c51a3, 5, 6, 7, 0, 1, 2, 3, 4)
   223  	SHA256ROUND1(44, 0xd192e819, 4, 5, 6, 7, 0, 1, 2, 3)
   224  	SHA256ROUND1(45, 0xd6990624, 3, 4, 5, 6, 7, 0, 1, 2)
   225  	SHA256ROUND1(46, 0xf40e3585, 2, 3, 4, 5, 6, 7, 0, 1)
   226  	SHA256ROUND1(47, 0x106aa070, 1, 2, 3, 4, 5, 6, 7, 0)
   227  	SHA256ROUND1(48, 0x19a4c116, 0, 1, 2, 3, 4, 5, 6, 7)
   228  	SHA256ROUND1(49, 0x1e376c08, 7, 0, 1, 2, 3, 4, 5, 6)
   229  	SHA256ROUND1(50, 0x2748774c, 6, 7, 0, 1, 2, 3, 4, 5)
   230  	SHA256ROUND1(51, 0x34b0bcb5, 5, 6, 7, 0, 1, 2, 3, 4)
   231  	SHA256ROUND1(52, 0x391c0cb3, 4, 5, 6, 7, 0, 1, 2, 3)
   232  	SHA256ROUND1(53, 0x4ed8aa4a, 3, 4, 5, 6, 7, 0, 1, 2)
   233  	SHA256ROUND1(54, 0x5b9cca4f, 2, 3, 4, 5, 6, 7, 0, 1)
   234  	SHA256ROUND1(55, 0x682e6ff3, 1, 2, 3, 4, 5, 6, 7, 0)
   235  	SHA256ROUND1(56, 0x748f82ee, 0, 1, 2, 3, 4, 5, 6, 7)
   236  	SHA256ROUND1(57, 0x78a5636f, 7, 0, 1, 2, 3, 4, 5, 6)
   237  	SHA256ROUND1(58, 0x84c87814, 6, 7, 0, 1, 2, 3, 4, 5)
   238  	SHA256ROUND1(59, 0x8cc70208, 5, 6, 7, 0, 1, 2, 3, 4)
   239  	SHA256ROUND1(60, 0x90befffa, 4, 5, 6, 7, 0, 1, 2, 3)
   240  	SHA256ROUND1(61, 0xa4506ceb, 3, 4, 5, 6, 7, 0, 1, 2)
   241  	SHA256ROUND1(62, 0xbef9a3f7, 2, 3, 4, 5, 6, 7, 0, 1)
   242  	SHA256ROUND1(63, 0xc67178f2, 1, 2, 3, 4, 5, 6, 7, 0)
   243  
   244  	MOVL	dig+0(FP), BP
   245  	MOVL	(0*4)(BP), AX		// H0 = a + H0
   246  	ADDL	(0*4)(DI), AX
   247  	MOVL	AX, (0*4)(DI)
   248  	MOVL	AX, (0*4)(BP)
   249  	MOVL	(1*4)(BP), BX		// H1 = b + H1
   250  	ADDL	(1*4)(DI), BX
   251  	MOVL	BX, (1*4)(DI)
   252  	MOVL	BX, (1*4)(BP)
   253  	MOVL	(2*4)(BP), CX		// H2 = c + H2
   254  	ADDL	(2*4)(DI), CX
   255  	MOVL	CX, (2*4)(DI)
   256  	MOVL	CX, (2*4)(BP)
   257  	MOVL	(3*4)(BP), DX		// H3 = d + H3
   258  	ADDL	(3*4)(DI), DX
   259  	MOVL	DX, (3*4)(DI)
   260  	MOVL	DX, (3*4)(BP)
   261  	MOVL	(4*4)(BP), AX		// H4 = e + H4
   262  	ADDL	(4*4)(DI), AX
   263  	MOVL	AX, (4*4)(DI)
   264  	MOVL	AX, (4*4)(BP)
   265  	MOVL	(5*4)(BP), BX		// H5 = f + H5
   266  	ADDL	(5*4)(DI), BX
   267  	MOVL	BX, (5*4)(DI)
   268  	MOVL	BX, (5*4)(BP)
   269  	MOVL	(6*4)(BP), CX		// H6 = g + H6
   270  	ADDL	(6*4)(DI), CX
   271  	MOVL	CX, (6*4)(DI)
   272  	MOVL	CX, (6*4)(BP)
   273  	MOVL	(7*4)(BP), DX		// H7 = h + H7
   274  	ADDL	(7*4)(DI), DX
   275  	MOVL	DX, (7*4)(DI)
   276  	MOVL	DX, (7*4)(BP)
   277  
   278  	ADDL	$64, SI
   279  	CMPL	SI, 288(SP)
   280  	JB	loop
   281  
   282  end:
   283  	RET
   284  

View as plain text