1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
|
/*
* Implementation of core functions for GOST R 34.11-2012 using SSE2.
*
* Copyright (c) 2013 Cryptocom LTD.
* This file is distributed under the same license as OpenSSL.
*
* Author: Alexey Degtyarev <alexey@renatasystems.org>
*
*/
#ifndef __GOST3411_HAS_SSE2__
# error "GOST R 34.11-2012: SSE2 not enabled"
#endif
#include <mmintrin.h>
#include <emmintrin.h>
#define LO(v) ((unsigned char) (v))
#define HI(v) ((unsigned char) (((unsigned int) (v)) >> 8))
#ifdef __i386__
# define EXTRACT EXTRACT32
#else
# define EXTRACT EXTRACT64
#endif
#ifndef __ICC
# define _mm_cvtsi64_m64(v) (__m64) v
# define _mm_cvtm64_si64(v) (long long) v
#endif
#define LOAD(P, xmm0, xmm1, xmm2, xmm3) { \
const __m128i *__m128p = (const __m128i *) &P[0]; \
xmm0 = _mm_load_si128(&__m128p[0]); \
xmm1 = _mm_load_si128(&__m128p[1]); \
xmm2 = _mm_load_si128(&__m128p[2]); \
xmm3 = _mm_load_si128(&__m128p[3]); \
}
#define UNLOAD(P, xmm0, xmm1, xmm2, xmm3) { \
__m128i *__m128p = (__m128i *) &P[0]; \
_mm_store_si128(&__m128p[0], xmm0); \
_mm_store_si128(&__m128p[1], xmm1); \
_mm_store_si128(&__m128p[2], xmm2); \
_mm_store_si128(&__m128p[3], xmm3); \
}
#define X128R(xmm0, xmm1, xmm2, xmm3, xmm4, xmm5, xmm6, xmm7) { \
xmm0 = _mm_xor_si128(xmm0, xmm4); \
xmm1 = _mm_xor_si128(xmm1, xmm5); \
xmm2 = _mm_xor_si128(xmm2, xmm6); \
xmm3 = _mm_xor_si128(xmm3, xmm7); \
}
#define X128M(P, xmm0, xmm1, xmm2, xmm3) { \
const __m128i *__m128p = (const __m128i *) &P[0]; \
xmm0 = _mm_xor_si128(xmm0, _mm_load_si128(&__m128p[0])); \
xmm1 = _mm_xor_si128(xmm1, _mm_load_si128(&__m128p[1])); \
xmm2 = _mm_xor_si128(xmm2, _mm_load_si128(&__m128p[2])); \
xmm3 = _mm_xor_si128(xmm3, _mm_load_si128(&__m128p[3])); \
}
#define _mm_xor_64(mm0, mm1) _mm_xor_si64(mm0, _mm_cvtsi64_m64(mm1))
#define EXTRACT32(row, xmm0, xmm1, xmm2, xmm3, xmm4) { \
register unsigned short ax; \
__m64 mm0, mm1; \
\
ax = (unsigned short) _mm_extract_epi16(xmm0, row + 0); \
mm0 = _mm_cvtsi64_m64(Ax[0][LO(ax)]); \
mm1 = _mm_cvtsi64_m64(Ax[0][HI(ax)]); \
\
ax = (unsigned short) _mm_extract_epi16(xmm0, row + 4); \
mm0 = _mm_xor_64(mm0, Ax[1][LO(ax)]); \
mm1 = _mm_xor_64(mm1, Ax[1][HI(ax)]); \
\
ax = (unsigned short) _mm_extract_epi16(xmm1, row + 0); \
mm0 = _mm_xor_64(mm0, Ax[2][LO(ax)]); \
mm1 = _mm_xor_64(mm1, Ax[2][HI(ax)]); \
\
ax = (unsigned short) _mm_extract_epi16(xmm1, row + 4); \
mm0 = _mm_xor_64(mm0, Ax[3][LO(ax)]); \
mm1 = _mm_xor_64(mm1, Ax[3][HI(ax)]); \
\
ax = (unsigned short) _mm_extract_epi16(xmm2, row + 0); \
mm0 = _mm_xor_64(mm0, Ax[4][LO(ax)]); \
mm1 = _mm_xor_64(mm1, Ax[4][HI(ax)]); \
\
ax = (unsigned short) _mm_extract_epi16(xmm2, row + 4); \
mm0 = _mm_xor_64(mm0, Ax[5][LO(ax)]); \
mm1 = _mm_xor_64(mm1, Ax[5][HI(ax)]); \
\
ax = (unsigned short) _mm_extract_epi16(xmm3, row + 0); \
mm0 = _mm_xor_64(mm0, Ax[6][LO(ax)]); \
mm1 = _mm_xor_64(mm1, Ax[6][HI(ax)]); \
\
ax = (unsigned short) _mm_extract_epi16(xmm3, row + 4); \
mm0 = _mm_xor_64(mm0, Ax[7][LO(ax)]); \
mm1 = _mm_xor_64(mm1, Ax[7][HI(ax)]); \
\
xmm4 = _mm_set_epi64(mm1, mm0); \
}
#define __EXTRACT64(row, xmm0, xmm1, xmm2, xmm3, xmm4) { \
__m128i tmm4; \
register unsigned long long r0, r1; \
r0 = Ax[0][_mm_extract_epi8(xmm0, row + 0)]; \
r0 ^= Ax[1][_mm_extract_epi8(xmm0, row + 8)]; \
r0 ^= Ax[2][_mm_extract_epi8(xmm1, row + 0)]; \
r0 ^= Ax[3][_mm_extract_epi8(xmm1, row + 8)]; \
r0 ^= Ax[4][_mm_extract_epi8(xmm2, row + 0)]; \
r0 ^= Ax[5][_mm_extract_epi8(xmm2, row + 8)]; \
r0 ^= Ax[6][_mm_extract_epi8(xmm3, row + 0)]; \
r0 ^= Ax[7][_mm_extract_epi8(xmm3, row + 8)]; \
\
r1 = Ax[0][_mm_extract_epi8(xmm0, row + 1)]; \
r1 ^= Ax[1][_mm_extract_epi8(xmm0, row + 9)]; \
r1 ^= Ax[2][_mm_extract_epi8(xmm1, row + 1)]; \
r1 ^= Ax[3][_mm_extract_epi8(xmm1, row + 9)]; \
r1 ^= Ax[4][_mm_extract_epi8(xmm2, row + 1)]; \
r1 ^= Ax[5][_mm_extract_epi8(xmm2, row + 9)]; \
r1 ^= Ax[6][_mm_extract_epi8(xmm3, row + 1)]; \
r1 ^= Ax[7][_mm_extract_epi8(xmm3, row + 9)]; \
xmm4 = _mm_cvtsi64_si128((long long) r0); \
tmm4 = _mm_cvtsi64_si128((long long) r1); \
xmm4 = _mm_unpacklo_epi64(xmm4, tmm4); \
}
#define EXTRACT64(row, xmm0, xmm1, xmm2, xmm3, xmm4) { \
__m128i tmm4; \
register unsigned short ax; \
register unsigned long long r0, r1; \
\
ax = (unsigned short) _mm_extract_epi16(xmm0, row + 0); \
r0 = Ax[0][LO(ax)]; \
r1 = Ax[0][HI(ax)]; \
\
ax = (unsigned short) _mm_extract_epi16(xmm0, row + 4); \
r0 ^= Ax[1][LO(ax)]; \
r1 ^= Ax[1][HI(ax)]; \
\
ax = (unsigned short) _mm_extract_epi16(xmm1, row + 0); \
r0 ^= Ax[2][LO(ax)]; \
r1 ^= Ax[2][HI(ax)]; \
\
ax = (unsigned short) _mm_extract_epi16(xmm1, row + 4); \
r0 ^= Ax[3][LO(ax)]; \
r1 ^= Ax[3][HI(ax)]; \
\
ax = (unsigned short) _mm_extract_epi16(xmm2, row + 0); \
r0 ^= Ax[4][LO(ax)]; \
r1 ^= Ax[4][HI(ax)]; \
\
ax = (unsigned short) _mm_extract_epi16(xmm2, row + 4); \
r0 ^= Ax[5][LO(ax)]; \
r1 ^= Ax[5][HI(ax)]; \
\
ax = (unsigned short) _mm_extract_epi16(xmm3, row + 0); \
r0 ^= Ax[6][LO(ax)]; \
r1 ^= Ax[6][HI(ax)]; \
\
ax = (unsigned short) _mm_extract_epi16(xmm3, row + 4); \
r0 ^= Ax[7][LO(ax)]; \
r1 ^= Ax[7][HI(ax)]; \
\
xmm4 = _mm_cvtsi64_si128((long long) r0); \
tmm4 = _mm_cvtsi64_si128((long long) r1); \
xmm4 = _mm_unpacklo_epi64(xmm4, tmm4); \
}
#define XLPS128M(P, xmm0, xmm1, xmm2, xmm3) { \
__m128i tmm0, tmm1, tmm2, tmm3; \
X128M(P, xmm0, xmm1, xmm2, xmm3); \
\
EXTRACT(0, xmm0, xmm1, xmm2, xmm3, tmm0); \
EXTRACT(1, xmm0, xmm1, xmm2, xmm3, tmm1); \
EXTRACT(2, xmm0, xmm1, xmm2, xmm3, tmm2); \
EXTRACT(3, xmm0, xmm1, xmm2, xmm3, tmm3); \
\
xmm0 = tmm0; \
xmm1 = tmm1; \
xmm2 = tmm2; \
xmm3 = tmm3; \
}
#define XLPS128R(xmm0, xmm1, xmm2, xmm3, xmm4, xmm5, xmm6, xmm7) { \
__m128i tmm0, tmm1, tmm2, tmm3; \
X128R(xmm4, xmm5, xmm6, xmm7, xmm0, xmm1, xmm2, xmm3); \
\
EXTRACT(0, xmm4, xmm5, xmm6, xmm7, tmm0); \
EXTRACT(1, xmm4, xmm5, xmm6, xmm7, tmm1); \
EXTRACT(2, xmm4, xmm5, xmm6, xmm7, tmm2); \
EXTRACT(3, xmm4, xmm5, xmm6, xmm7, tmm3); \
\
xmm4 = tmm0; \
xmm5 = tmm1; \
xmm6 = tmm2; \
xmm7 = tmm3; \
}
#define ROUND128(i, xmm0, xmm2, xmm4, xmm6, xmm1, xmm3, xmm5, xmm7) { \
XLPS128M((&C[i]), xmm0, xmm2, xmm4, xmm6); \
XLPS128R(xmm0, xmm2, xmm4, xmm6, xmm1, xmm3, xmm5, xmm7); \
}
|
