2
0

sha512-mips.pl 15 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527
  1. #! /usr/bin/env perl
  2. # Copyright 2010-2020 The OpenSSL Project Authors. All Rights Reserved.
  3. #
  4. # Licensed under the Apache License 2.0 (the "License"). You may not use
  5. # this file except in compliance with the License. You can obtain a copy
  6. # in the file LICENSE in the source distribution or at
  7. # https://www.openssl.org/source/license.html
  8. # ====================================================================
  9. # Written by Andy Polyakov <appro@openssl.org> for the OpenSSL
  10. # project. The module is, however, dual licensed under OpenSSL and
  11. # CRYPTOGAMS licenses depending on where you obtain it. For further
  12. # details see http://www.openssl.org/~appro/cryptogams/.
  13. # ====================================================================
  14. # SHA2 block procedures for MIPS.
  15. # October 2010.
  16. #
  17. # SHA256 performance improvement on MIPS R5000 CPU is ~27% over gcc-
  18. # generated code in o32 build and ~55% in n32/64 build. SHA512 [which
  19. # for now can only be compiled for MIPS64 ISA] improvement is modest
  20. # ~17%, but it comes for free, because it's same instruction sequence.
  21. # Improvement coefficients are for aligned input.
  22. # September 2012.
  23. #
  24. # Add MIPS[32|64]R2 code (>25% less instructions).
  25. ######################################################################
  26. # There is a number of MIPS ABI in use, O32 and N32/64 are most
  27. # widely used. Then there is a new contender: NUBI. It appears that if
  28. # one picks the latter, it's possible to arrange code in ABI neutral
  29. # manner. Therefore let's stick to NUBI register layout:
  30. #
  31. ($zero,$at,$t0,$t1,$t2)=map("\$$_",(0..2,24,25));
  32. ($a0,$a1,$a2,$a3,$a4,$a5,$a6,$a7)=map("\$$_",(4..11));
  33. ($s0,$s1,$s2,$s3,$s4,$s5,$s6,$s7,$s8,$s9,$s10,$s11)=map("\$$_",(12..23));
  34. ($gp,$tp,$sp,$fp,$ra)=map("\$$_",(3,28..31));
  35. #
  36. # The return value is placed in $a0. Following coding rules facilitate
  37. # interoperability:
  38. #
  39. # - never ever touch $tp, "thread pointer", former $gp [o32 can be
  40. # excluded from the rule, because it's specified volatile];
  41. # - copy return value to $t0, former $v0 [or to $a0 if you're adapting
  42. # old code];
  43. # - on O32 populate $a4-$a7 with 'lw $aN,4*N($sp)' if necessary;
  44. #
  45. # For reference here is register layout for N32/64 MIPS ABIs:
  46. #
  47. # ($zero,$at,$v0,$v1)=map("\$$_",(0..3));
  48. # ($a0,$a1,$a2,$a3,$a4,$a5,$a6,$a7)=map("\$$_",(4..11));
  49. # ($t0,$t1,$t2,$t3,$t8,$t9)=map("\$$_",(12..15,24,25));
  50. # ($s0,$s1,$s2,$s3,$s4,$s5,$s6,$s7)=map("\$$_",(16..23));
  51. # ($gp,$sp,$fp,$ra)=map("\$$_",(28..31));
  52. #
  53. # if $output doesn't have an extension, it's not an output file
  54. # so use it for $flavour.
  55. # $output is the last argument if it looks like a file (it has an extension)
  56. # $flavour is the first argument if it doesn't look like a file
  57. $output = $#ARGV >= 0 && $ARGV[$#ARGV] =~ m|\.\w+$| ? pop : undef;
  58. # supported flavours are o32,n32,64,nubi32,nubi64, default is o32
  59. $flavour = $#ARGV >= 0 && $ARGV[0] !~ m|\.| ? shift : "o32";
  60. if ($flavour =~ /64|n32/i) {
  61. $PTR_LA="dla";
  62. $PTR_ADD="daddu"; # incidentally works even on n32
  63. $PTR_SUB="dsubu"; # incidentally works even on n32
  64. $REG_S="sd";
  65. $REG_L="ld";
  66. $PTR_SLL="dsll"; # incidentally works even on n32
  67. $SZREG=8;
  68. } else {
  69. $PTR_LA="la";
  70. $PTR_ADD="addu";
  71. $PTR_SUB="subu";
  72. $REG_S="sw";
  73. $REG_L="lw";
  74. $PTR_SLL="sll";
  75. $SZREG=4;
  76. }
  77. $pf = ($flavour =~ /nubi/i) ? $t0 : $t2;
  78. #
  79. # <appro@openssl.org>
  80. #
  81. ######################################################################
  82. $big_endian=(`echo MIPSEB | $ENV{CC} -E -`=~/MIPSEB/)?0:1 if ($ENV{CC});
  83. open STDOUT,">$output";
  84. if (!defined($big_endian)) { $big_endian=(unpack('L',pack('N',1))==1); }
  85. if ($output =~ /512/) {
  86. $label="512";
  87. $SZ=8;
  88. $LD="ld"; # load from memory
  89. $ST="sd"; # store to memory
  90. $SLL="dsll"; # shift left logical
  91. $SRL="dsrl"; # shift right logical
  92. $ADDU="daddu";
  93. $ROTR="drotr";
  94. @Sigma0=(28,34,39);
  95. @Sigma1=(14,18,41);
  96. @sigma0=( 7, 1, 8); # right shift first
  97. @sigma1=( 6,19,61); # right shift first
  98. $lastK=0x817;
  99. $rounds=80;
  100. } else {
  101. $label="256";
  102. $SZ=4;
  103. $LD="lw"; # load from memory
  104. $ST="sw"; # store to memory
  105. $SLL="sll"; # shift left logical
  106. $SRL="srl"; # shift right logical
  107. $ADDU="addu";
  108. $ROTR="rotr";
  109. @Sigma0=( 2,13,22);
  110. @Sigma1=( 6,11,25);
  111. @sigma0=( 3, 7,18); # right shift first
  112. @sigma1=(10,17,19); # right shift first
  113. $lastK=0x8f2;
  114. $rounds=64;
  115. }
  116. $MSB = $big_endian ? 0 : ($SZ-1);
  117. $LSB = ($SZ-1)&~$MSB;
  118. @V=($A,$B,$C,$D,$E,$F,$G,$H)=map("\$$_",(1,2,3,7,24,25,30,31));
  119. @X=map("\$$_",(8..23));
  120. $ctx=$a0;
  121. $inp=$a1;
  122. $len=$a2; $Ktbl=$len;
  123. sub BODY_00_15 {
  124. my ($i,$a,$b,$c,$d,$e,$f,$g,$h)=@_;
  125. my ($T1,$tmp0,$tmp1,$tmp2)=(@X[4],@X[5],@X[6],@X[7]);
  126. $code.=<<___ if ($i<15);
  127. #if defined(_MIPS_ARCH_MIPS32R6) || defined(_MIPS_ARCH_MIPS64R6)
  128. ${LD} @X[1],`($i+1)*$SZ`($inp)
  129. #else
  130. ${LD}l @X[1],`($i+1)*$SZ+$MSB`($inp)
  131. ${LD}r @X[1],`($i+1)*$SZ+$LSB`($inp)
  132. #endif
  133. ___
  134. $code.=<<___ if (!$big_endian && $i<16 && $SZ==4);
  135. #if defined(_MIPS_ARCH_MIPS32R2) || defined(_MIPS_ARCH_MIPS64R2)
  136. wsbh @X[0],@X[0] # byte swap($i)
  137. rotr @X[0],@X[0],16
  138. #else
  139. srl $tmp0,@X[0],24 # byte swap($i)
  140. srl $tmp1,@X[0],8
  141. andi $tmp2,@X[0],0xFF00
  142. sll @X[0],@X[0],24
  143. andi $tmp1,0xFF00
  144. sll $tmp2,$tmp2,8
  145. or @X[0],$tmp0
  146. or $tmp1,$tmp2
  147. or @X[0],$tmp1
  148. #endif
  149. ___
  150. $code.=<<___ if (!$big_endian && $i<16 && $SZ==8);
  151. #if defined(_MIPS_ARCH_MIPS64R2)
  152. dsbh @X[0],@X[0] # byte swap($i)
  153. dshd @X[0],@X[0]
  154. #else
  155. ori $tmp0,$zero,0xFF
  156. dsll $tmp2,$tmp0,32
  157. or $tmp0,$tmp2 # 0x000000FF000000FF
  158. and $tmp1,@X[0],$tmp0 # byte swap($i)
  159. dsrl $tmp2,@X[0],24
  160. dsll $tmp1,24
  161. and $tmp2,$tmp0
  162. dsll $tmp0,8 # 0x0000FF000000FF00
  163. or $tmp1,$tmp2
  164. and $tmp2,@X[0],$tmp0
  165. dsrl @X[0],8
  166. dsll $tmp2,8
  167. and @X[0],$tmp0
  168. or $tmp1,$tmp2
  169. or @X[0],$tmp1
  170. dsrl $tmp1,@X[0],32
  171. dsll @X[0],32
  172. or @X[0],$tmp1
  173. #endif
  174. ___
  175. $code.=<<___;
  176. #if defined(_MIPS_ARCH_MIPS32R2) || defined(_MIPS_ARCH_MIPS64R2)
  177. xor $tmp2,$f,$g # $i
  178. $ROTR $tmp0,$e,@Sigma1[0]
  179. $ADDU $T1,$X[0],$h
  180. $ROTR $tmp1,$e,@Sigma1[1]
  181. and $tmp2,$e
  182. $ROTR $h,$e,@Sigma1[2]
  183. xor $tmp0,$tmp1
  184. $ROTR $tmp1,$a,@Sigma0[0]
  185. xor $tmp2,$g # Ch(e,f,g)
  186. xor $tmp0,$h # Sigma1(e)
  187. $ROTR $h,$a,@Sigma0[1]
  188. $ADDU $T1,$tmp2
  189. $LD $tmp2,`$i*$SZ`($Ktbl) # K[$i]
  190. xor $h,$tmp1
  191. $ROTR $tmp1,$a,@Sigma0[2]
  192. $ADDU $T1,$tmp0
  193. and $tmp0,$b,$c
  194. xor $h,$tmp1 # Sigma0(a)
  195. xor $tmp1,$b,$c
  196. #else
  197. $ADDU $T1,$X[0],$h # $i
  198. $SRL $h,$e,@Sigma1[0]
  199. xor $tmp2,$f,$g
  200. $SLL $tmp1,$e,`$SZ*8-@Sigma1[2]`
  201. and $tmp2,$e
  202. $SRL $tmp0,$e,@Sigma1[1]
  203. xor $h,$tmp1
  204. $SLL $tmp1,$e,`$SZ*8-@Sigma1[1]`
  205. xor $h,$tmp0
  206. $SRL $tmp0,$e,@Sigma1[2]
  207. xor $h,$tmp1
  208. $SLL $tmp1,$e,`$SZ*8-@Sigma1[0]`
  209. xor $h,$tmp0
  210. xor $tmp2,$g # Ch(e,f,g)
  211. xor $tmp0,$tmp1,$h # Sigma1(e)
  212. $SRL $h,$a,@Sigma0[0]
  213. $ADDU $T1,$tmp2
  214. $LD $tmp2,`$i*$SZ`($Ktbl) # K[$i]
  215. $SLL $tmp1,$a,`$SZ*8-@Sigma0[2]`
  216. $ADDU $T1,$tmp0
  217. $SRL $tmp0,$a,@Sigma0[1]
  218. xor $h,$tmp1
  219. $SLL $tmp1,$a,`$SZ*8-@Sigma0[1]`
  220. xor $h,$tmp0
  221. $SRL $tmp0,$a,@Sigma0[2]
  222. xor $h,$tmp1
  223. $SLL $tmp1,$a,`$SZ*8-@Sigma0[0]`
  224. xor $h,$tmp0
  225. and $tmp0,$b,$c
  226. xor $h,$tmp1 # Sigma0(a)
  227. xor $tmp1,$b,$c
  228. #endif
  229. $ST @X[0],`($i%16)*$SZ`($sp) # offload to ring buffer
  230. $ADDU $h,$tmp0
  231. and $tmp1,$a
  232. $ADDU $T1,$tmp2 # +=K[$i]
  233. $ADDU $h,$tmp1 # +=Maj(a,b,c)
  234. $ADDU $d,$T1
  235. $ADDU $h,$T1
  236. ___
  237. $code.=<<___ if ($i>=13);
  238. $LD @X[3],`(($i+3)%16)*$SZ`($sp) # prefetch from ring buffer
  239. ___
  240. }
  241. sub BODY_16_XX {
  242. my $i=@_[0];
  243. my ($tmp0,$tmp1,$tmp2,$tmp3)=(@X[4],@X[5],@X[6],@X[7]);
  244. $code.=<<___;
  245. #if defined(_MIPS_ARCH_MIPS32R2) || defined(_MIPS_ARCH_MIPS64R2)
  246. $SRL $tmp2,@X[1],@sigma0[0] # Xupdate($i)
  247. $ROTR $tmp0,@X[1],@sigma0[1]
  248. $ADDU @X[0],@X[9] # +=X[i+9]
  249. xor $tmp2,$tmp0
  250. $ROTR $tmp0,@X[1],@sigma0[2]
  251. $SRL $tmp3,@X[14],@sigma1[0]
  252. $ROTR $tmp1,@X[14],@sigma1[1]
  253. xor $tmp2,$tmp0 # sigma0(X[i+1])
  254. $ROTR $tmp0,@X[14],@sigma1[2]
  255. xor $tmp3,$tmp1
  256. $ADDU @X[0],$tmp2
  257. #else
  258. $SRL $tmp2,@X[1],@sigma0[0] # Xupdate($i)
  259. $ADDU @X[0],@X[9] # +=X[i+9]
  260. $SLL $tmp1,@X[1],`$SZ*8-@sigma0[2]`
  261. $SRL $tmp0,@X[1],@sigma0[1]
  262. xor $tmp2,$tmp1
  263. $SLL $tmp1,`@sigma0[2]-@sigma0[1]`
  264. xor $tmp2,$tmp0
  265. $SRL $tmp0,@X[1],@sigma0[2]
  266. xor $tmp2,$tmp1
  267. $SRL $tmp3,@X[14],@sigma1[0]
  268. xor $tmp2,$tmp0 # sigma0(X[i+1])
  269. $SLL $tmp1,@X[14],`$SZ*8-@sigma1[2]`
  270. $ADDU @X[0],$tmp2
  271. $SRL $tmp0,@X[14],@sigma1[1]
  272. xor $tmp3,$tmp1
  273. $SLL $tmp1,`@sigma1[2]-@sigma1[1]`
  274. xor $tmp3,$tmp0
  275. $SRL $tmp0,@X[14],@sigma1[2]
  276. xor $tmp3,$tmp1
  277. #endif
  278. xor $tmp3,$tmp0 # sigma1(X[i+14])
  279. $ADDU @X[0],$tmp3
  280. ___
  281. &BODY_00_15(@_);
  282. }
  283. $FRAMESIZE=16*$SZ+16*$SZREG;
  284. $SAVED_REGS_MASK = ($flavour =~ /nubi/i) ? "0xc0fff008" : "0xc0ff0000";
  285. $code.=<<___;
  286. #include "mips_arch.h"
  287. .text
  288. .set noat
  289. #if !defined(__mips_eabi) && (!defined(__vxworks) || defined(__pic__))
  290. .option pic2
  291. #endif
  292. .align 5
  293. .globl sha${label}_block_data_order
  294. .ent sha${label}_block_data_order
  295. sha${label}_block_data_order:
  296. .frame $sp,$FRAMESIZE,$ra
  297. .mask $SAVED_REGS_MASK,-$SZREG
  298. .set noreorder
  299. ___
  300. $code.=<<___ if ($flavour =~ /o32/i); # o32 PIC-ification
  301. .cpload $pf
  302. ___
  303. $code.=<<___;
  304. $PTR_SUB $sp,$FRAMESIZE
  305. $REG_S $ra,$FRAMESIZE-1*$SZREG($sp)
  306. $REG_S $fp,$FRAMESIZE-2*$SZREG($sp)
  307. $REG_S $s11,$FRAMESIZE-3*$SZREG($sp)
  308. $REG_S $s10,$FRAMESIZE-4*$SZREG($sp)
  309. $REG_S $s9,$FRAMESIZE-5*$SZREG($sp)
  310. $REG_S $s8,$FRAMESIZE-6*$SZREG($sp)
  311. $REG_S $s7,$FRAMESIZE-7*$SZREG($sp)
  312. $REG_S $s6,$FRAMESIZE-8*$SZREG($sp)
  313. $REG_S $s5,$FRAMESIZE-9*$SZREG($sp)
  314. $REG_S $s4,$FRAMESIZE-10*$SZREG($sp)
  315. ___
  316. $code.=<<___ if ($flavour =~ /nubi/i); # optimize non-nubi prologue
  317. $REG_S $s3,$FRAMESIZE-11*$SZREG($sp)
  318. $REG_S $s2,$FRAMESIZE-12*$SZREG($sp)
  319. $REG_S $s1,$FRAMESIZE-13*$SZREG($sp)
  320. $REG_S $s0,$FRAMESIZE-14*$SZREG($sp)
  321. $REG_S $gp,$FRAMESIZE-15*$SZREG($sp)
  322. ___
  323. $code.=<<___;
  324. $PTR_SLL @X[15],$len,`log(16*$SZ)/log(2)`
  325. ___
  326. $code.=<<___ if ($flavour !~ /o32/i); # non-o32 PIC-ification
  327. .cplocal $Ktbl
  328. .cpsetup $pf,$zero,sha${label}_block_data_order
  329. ___
  330. $code.=<<___;
  331. .set reorder
  332. $PTR_LA $Ktbl,K${label} # PIC-ified 'load address'
  333. $LD $A,0*$SZ($ctx) # load context
  334. $LD $B,1*$SZ($ctx)
  335. $LD $C,2*$SZ($ctx)
  336. $LD $D,3*$SZ($ctx)
  337. $LD $E,4*$SZ($ctx)
  338. $LD $F,5*$SZ($ctx)
  339. $LD $G,6*$SZ($ctx)
  340. $LD $H,7*$SZ($ctx)
  341. $PTR_ADD @X[15],$inp # pointer to the end of input
  342. $REG_S @X[15],16*$SZ($sp)
  343. b .Loop
  344. .align 5
  345. .Loop:
  346. #if defined(_MIPS_ARCH_MIPS32R6) || defined(_MIPS_ARCH_MIPS64R6)
  347. ${LD} @X[0],($inp)
  348. #else
  349. ${LD}l @X[0],$MSB($inp)
  350. ${LD}r @X[0],$LSB($inp)
  351. #endif
  352. ___
  353. for ($i=0;$i<16;$i++)
  354. { &BODY_00_15($i,@V); unshift(@V,pop(@V)); push(@X,shift(@X)); }
  355. $code.=<<___;
  356. b .L16_xx
  357. .align 4
  358. .L16_xx:
  359. ___
  360. for (;$i<32;$i++)
  361. { &BODY_16_XX($i,@V); unshift(@V,pop(@V)); push(@X,shift(@X)); }
  362. $code.=<<___;
  363. and @X[6],0xfff
  364. li @X[7],$lastK
  365. .set noreorder
  366. bne @X[6],@X[7],.L16_xx
  367. $PTR_ADD $Ktbl,16*$SZ # Ktbl+=16
  368. $REG_L @X[15],16*$SZ($sp) # restore pointer to the end of input
  369. $LD @X[0],0*$SZ($ctx)
  370. $LD @X[1],1*$SZ($ctx)
  371. $LD @X[2],2*$SZ($ctx)
  372. $PTR_ADD $inp,16*$SZ
  373. $LD @X[3],3*$SZ($ctx)
  374. $ADDU $A,@X[0]
  375. $LD @X[4],4*$SZ($ctx)
  376. $ADDU $B,@X[1]
  377. $LD @X[5],5*$SZ($ctx)
  378. $ADDU $C,@X[2]
  379. $LD @X[6],6*$SZ($ctx)
  380. $ADDU $D,@X[3]
  381. $LD @X[7],7*$SZ($ctx)
  382. $ADDU $E,@X[4]
  383. $ST $A,0*$SZ($ctx)
  384. $ADDU $F,@X[5]
  385. $ST $B,1*$SZ($ctx)
  386. $ADDU $G,@X[6]
  387. $ST $C,2*$SZ($ctx)
  388. $ADDU $H,@X[7]
  389. $ST $D,3*$SZ($ctx)
  390. $ST $E,4*$SZ($ctx)
  391. $ST $F,5*$SZ($ctx)
  392. $ST $G,6*$SZ($ctx)
  393. $ST $H,7*$SZ($ctx)
  394. bne $inp,@X[15],.Loop
  395. $PTR_SUB $Ktbl,`($rounds-16)*$SZ` # rewind $Ktbl
  396. $REG_L $ra,$FRAMESIZE-1*$SZREG($sp)
  397. $REG_L $fp,$FRAMESIZE-2*$SZREG($sp)
  398. $REG_L $s11,$FRAMESIZE-3*$SZREG($sp)
  399. $REG_L $s10,$FRAMESIZE-4*$SZREG($sp)
  400. $REG_L $s9,$FRAMESIZE-5*$SZREG($sp)
  401. $REG_L $s8,$FRAMESIZE-6*$SZREG($sp)
  402. $REG_L $s7,$FRAMESIZE-7*$SZREG($sp)
  403. $REG_L $s6,$FRAMESIZE-8*$SZREG($sp)
  404. $REG_L $s5,$FRAMESIZE-9*$SZREG($sp)
  405. $REG_L $s4,$FRAMESIZE-10*$SZREG($sp)
  406. ___
  407. $code.=<<___ if ($flavour =~ /nubi/i);
  408. $REG_L $s3,$FRAMESIZE-11*$SZREG($sp)
  409. $REG_L $s2,$FRAMESIZE-12*$SZREG($sp)
  410. $REG_L $s1,$FRAMESIZE-13*$SZREG($sp)
  411. $REG_L $s0,$FRAMESIZE-14*$SZREG($sp)
  412. $REG_L $gp,$FRAMESIZE-15*$SZREG($sp)
  413. ___
  414. $code.=<<___;
  415. jr $ra
  416. $PTR_ADD $sp,$FRAMESIZE
  417. .end sha${label}_block_data_order
  418. .rdata
  419. .align 5
  420. K${label}:
  421. ___
  422. if ($SZ==4) {
  423. $code.=<<___;
  424. .word 0x428a2f98, 0x71374491, 0xb5c0fbcf, 0xe9b5dba5
  425. .word 0x3956c25b, 0x59f111f1, 0x923f82a4, 0xab1c5ed5
  426. .word 0xd807aa98, 0x12835b01, 0x243185be, 0x550c7dc3
  427. .word 0x72be5d74, 0x80deb1fe, 0x9bdc06a7, 0xc19bf174
  428. .word 0xe49b69c1, 0xefbe4786, 0x0fc19dc6, 0x240ca1cc
  429. .word 0x2de92c6f, 0x4a7484aa, 0x5cb0a9dc, 0x76f988da
  430. .word 0x983e5152, 0xa831c66d, 0xb00327c8, 0xbf597fc7
  431. .word 0xc6e00bf3, 0xd5a79147, 0x06ca6351, 0x14292967
  432. .word 0x27b70a85, 0x2e1b2138, 0x4d2c6dfc, 0x53380d13
  433. .word 0x650a7354, 0x766a0abb, 0x81c2c92e, 0x92722c85
  434. .word 0xa2bfe8a1, 0xa81a664b, 0xc24b8b70, 0xc76c51a3
  435. .word 0xd192e819, 0xd6990624, 0xf40e3585, 0x106aa070
  436. .word 0x19a4c116, 0x1e376c08, 0x2748774c, 0x34b0bcb5
  437. .word 0x391c0cb3, 0x4ed8aa4a, 0x5b9cca4f, 0x682e6ff3
  438. .word 0x748f82ee, 0x78a5636f, 0x84c87814, 0x8cc70208
  439. .word 0x90befffa, 0xa4506ceb, 0xbef9a3f7, 0xc67178f2
  440. ___
  441. } else {
  442. $code.=<<___;
  443. .dword 0x428a2f98d728ae22, 0x7137449123ef65cd
  444. .dword 0xb5c0fbcfec4d3b2f, 0xe9b5dba58189dbbc
  445. .dword 0x3956c25bf348b538, 0x59f111f1b605d019
  446. .dword 0x923f82a4af194f9b, 0xab1c5ed5da6d8118
  447. .dword 0xd807aa98a3030242, 0x12835b0145706fbe
  448. .dword 0x243185be4ee4b28c, 0x550c7dc3d5ffb4e2
  449. .dword 0x72be5d74f27b896f, 0x80deb1fe3b1696b1
  450. .dword 0x9bdc06a725c71235, 0xc19bf174cf692694
  451. .dword 0xe49b69c19ef14ad2, 0xefbe4786384f25e3
  452. .dword 0x0fc19dc68b8cd5b5, 0x240ca1cc77ac9c65
  453. .dword 0x2de92c6f592b0275, 0x4a7484aa6ea6e483
  454. .dword 0x5cb0a9dcbd41fbd4, 0x76f988da831153b5
  455. .dword 0x983e5152ee66dfab, 0xa831c66d2db43210
  456. .dword 0xb00327c898fb213f, 0xbf597fc7beef0ee4
  457. .dword 0xc6e00bf33da88fc2, 0xd5a79147930aa725
  458. .dword 0x06ca6351e003826f, 0x142929670a0e6e70
  459. .dword 0x27b70a8546d22ffc, 0x2e1b21385c26c926
  460. .dword 0x4d2c6dfc5ac42aed, 0x53380d139d95b3df
  461. .dword 0x650a73548baf63de, 0x766a0abb3c77b2a8
  462. .dword 0x81c2c92e47edaee6, 0x92722c851482353b
  463. .dword 0xa2bfe8a14cf10364, 0xa81a664bbc423001
  464. .dword 0xc24b8b70d0f89791, 0xc76c51a30654be30
  465. .dword 0xd192e819d6ef5218, 0xd69906245565a910
  466. .dword 0xf40e35855771202a, 0x106aa07032bbd1b8
  467. .dword 0x19a4c116b8d2d0c8, 0x1e376c085141ab53
  468. .dword 0x2748774cdf8eeb99, 0x34b0bcb5e19b48a8
  469. .dword 0x391c0cb3c5c95a63, 0x4ed8aa4ae3418acb
  470. .dword 0x5b9cca4f7763e373, 0x682e6ff3d6b2b8a3
  471. .dword 0x748f82ee5defb2fc, 0x78a5636f43172f60
  472. .dword 0x84c87814a1f0ab72, 0x8cc702081a6439ec
  473. .dword 0x90befffa23631e28, 0xa4506cebde82bde9
  474. .dword 0xbef9a3f7b2c67915, 0xc67178f2e372532b
  475. .dword 0xca273eceea26619c, 0xd186b8c721c0c207
  476. .dword 0xeada7dd6cde0eb1e, 0xf57d4f7fee6ed178
  477. .dword 0x06f067aa72176fba, 0x0a637dc5a2c898a6
  478. .dword 0x113f9804bef90dae, 0x1b710b35131c471b
  479. .dword 0x28db77f523047d84, 0x32caab7b40c72493
  480. .dword 0x3c9ebe0a15c9bebc, 0x431d67c49c100d4c
  481. .dword 0x4cc5d4becb3e42b6, 0x597f299cfc657e2a
  482. .dword 0x5fcb6fab3ad6faec, 0x6c44198c4a475817
  483. ___
  484. }
  485. $code.=<<___;
  486. .asciiz "SHA${label} for MIPS, CRYPTOGAMS by <appro\@openssl.org>"
  487. .align 5
  488. ___
  489. $code =~ s/\`([^\`]*)\`/eval $1/gem;
  490. print $code;
  491. close STDOUT or die "error closing STDOUT: $!";