123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765766767768769770771772773774775776777778779780781782783784785786787788789790791792793794795796797798799800801802803804805806807808809810811812813814815816817818819820821822823824825826827828829830831832833834835836837838839840841842843844845846847848849850851852853854855856857858859860861862863864865866867868869870871872873874875876877878879880881882883884885886887888889890891892893894895896897898899900901902903904905906907908909910911912913914915916917918919920921922923924925926927928929930931932933934935936937938939940941942943944945946947948949950951952953954955956957958959960961962963964965966967968969970971972973974975976977978979980981982983984985986987988989990991992993994995996997998999100010011002100310041005100610071008100910101011101210131014101510161017101810191020102110221023102410251026102710281029103010311032103310341035103610371038103910401041104210431044104510461047104810491050105110521053105410551056105710581059106010611062106310641065106610671068106910701071107210731074107510761077107810791080108110821083108410851086108710881089109010911092109310941095109610971098109911001101110211031104110511061107110811091110111111121113111411151116111711181119112011211122112311241125112611271128112911301131113211331134113511361137113811391140114111421143114411451146114711481149115011511152115311541155115611571158115911601161116211631164116511661167116811691170117111721173117411751176117711781179118011811182118311841185118611871188118911901191119211931194119511961197119811991200120112021203120412051206120712081209121012111212121312141215121612171218121912201221122212231224122512261227122812291230123112321233123412351236123712381239124012411242124312441245124612471248124912501251125212531254125512561257125812591260126112621263126412651266126712681269127012711272127312741275127612771278127912801281128212831284128512861287128812891290129112921293129412951296129712981299130013011302130313041305130613071308130913101311131213131314131513161317131813191320132113221323132413251326132713281329133013311332133313341335133613371338133913401341134213431344134513461347134813491350135113521353135413551356135713581359136013611362136313641365136613671368136913701371137213731374137513761377137813791380138113821383138413851386138713881389139013911392139313941395139613971398139914001401140214031404140514061407140814091410141114121413141414151416141714181419142014211422142314241425142614271428142914301431143214331434143514361437143814391440144114421443144414451446144714481449145014511452145314541455145614571458145914601461146214631464146514661467146814691470147114721473147414751476147714781479148014811482148314841485148614871488148914901491149214931494149514961497149814991500150115021503150415051506150715081509151015111512151315141515151615171518151915201521152215231524152515261527152815291530153115321533153415351536153715381539154015411542154315441545154615471548154915501551155215531554155515561557155815591560156115621563156415651566156715681569157015711572157315741575157615771578157915801581158215831584158515861587158815891590159115921593159415951596159715981599160016011602160316041605160616071608160916101611161216131614161516161617161816191620162116221623162416251626162716281629163016311632163316341635163616371638163916401641164216431644164516461647164816491650165116521653165416551656165716581659166016611662166316641665166616671668166916701671167216731674167516761677167816791680168116821683168416851686168716881689169016911692169316941695169616971698169917001701170217031704170517061707170817091710171117121713171417151716171717181719172017211722172317241725172617271728172917301731173217331734173517361737173817391740174117421743174417451746174717481749175017511752175317541755175617571758175917601761176217631764176517661767176817691770177117721773177417751776177717781779178017811782178317841785178617871788178917901791179217931794179517961797179817991800180118021803180418051806180718081809181018111812181318141815181618171818181918201821182218231824182518261827182818291830183118321833183418351836183718381839184018411842184318441845184618471848184918501851185218531854185518561857185818591860186118621863186418651866186718681869187018711872187318741875187618771878187918801881188218831884188518861887188818891890189118921893189418951896189718981899190019011902190319041905190619071908190919101911191219131914191519161917191819191920192119221923192419251926192719281929193019311932193319341935193619371938193919401941194219431944194519461947194819491950195119521953195419551956195719581959196019611962196319641965196619671968 |
- ! Copyright 2000-2018 The OpenSSL Project Authors. All Rights Reserved.
- !
- ! Licensed under the Apache License 2.0 (the "License"). You may not use
- ! this file except in compliance with the License. You can obtain a copy
- ! in the file LICENSE in the source distribution or at
- ! https://www.openssl.org/source/license.html
- !
- ! To expand the m4 macros: m4 -B 8192 des_enc.m4 > des_enc.S
- !
- ! Global registers 1 to 5 are used. This is the same as done by the
- ! cc compiler. The UltraSPARC load/store little endian feature is used.
- !
- ! Instruction grouping often refers to one CPU cycle.
- !
- ! Assemble through gcc: gcc -c -mcpu=ultrasparc -o des_enc.o des_enc.S
- !
- ! Assemble through cc: cc -c -xarch=v8plusa -o des_enc.o des_enc.S
- !
- ! Performance improvement according to './apps/openssl speed des'
- !
- ! 32-bit build:
- ! 23% faster than cc-5.2 -xarch=v8plus -xO5
- ! 115% faster than gcc-3.2.1 -m32 -mcpu=ultrasparc -O5
- ! 64-bit build:
- ! 50% faster than cc-5.2 -xarch=v9 -xO5
- ! 100% faster than gcc-3.2.1 -m64 -mcpu=ultrasparc -O5
- !
- .ident "des_enc.m4 2.1"
- .file "des_enc-sparc.S"
- #include <openssl/opensslconf.h>
- #if defined(__SUNPRO_C) && defined(__sparcv9)
- # define ABI64 /* They've said -xarch=v9 at command line */
- #elif defined(__GNUC__) && defined(__arch64__)
- # define ABI64 /* They've said -m64 at command line */
- #endif
- #ifdef ABI64
- .register %g2,#scratch
- .register %g3,#scratch
- # define FRAME -192
- # define BIAS 2047
- # define LDPTR ldx
- # define STPTR stx
- # define ARG0 128
- # define ARGSZ 8
- #else
- # define FRAME -96
- # define BIAS 0
- # define LDPTR ld
- # define STPTR st
- # define ARG0 68
- # define ARGSZ 4
- #endif
- #define LOOPS 7
- #define global0 %g0
- #define global1 %g1
- #define global2 %g2
- #define global3 %g3
- #define global4 %g4
- #define global5 %g5
- #define local0 %l0
- #define local1 %l1
- #define local2 %l2
- #define local3 %l3
- #define local4 %l4
- #define local5 %l5
- #define local7 %l6
- #define local6 %l7
- #define in0 %i0
- #define in1 %i1
- #define in2 %i2
- #define in3 %i3
- #define in4 %i4
- #define in5 %i5
- #define in6 %i6
- #define in7 %i7
- #define out0 %o0
- #define out1 %o1
- #define out2 %o2
- #define out3 %o3
- #define out4 %o4
- #define out5 %o5
- #define out6 %o6
- #define out7 %o7
- #define stub stb
- changequote({,})
- ! Macro definitions:
- ! {ip_macro}
- !
- ! The logic used in initial and final permutations is the same as in
- ! the C code. The permutations are done with a clever shift, xor, and
- ! technique.
- !
- ! The macro also loads address sbox 1 to 5 to global 1 to 5, address
- ! sbox 6 to local6, and addres sbox 8 to out3.
- !
- ! Rotates the halfs 3 left to bring the sbox bits in convenient positions.
- !
- ! Loads key first round from address in parameter 5 to out0, out1.
- !
- ! After the original LibDES initial permutation, the resulting left
- ! is in the variable initially used for right and vice versa. The macro
- ! implements the possibility to keep the halfs in the original registers.
- !
- ! parameter 1 left
- ! parameter 2 right
- ! parameter 3 result left (modify in first round)
- ! parameter 4 result right (use in first round)
- ! parameter 5 key address
- ! parameter 6 1/2 for include encryption/decryption
- ! parameter 7 1 for move in1 to in3
- ! parameter 8 1 for move in3 to in4, 2 for move in4 to in3
- ! parameter 9 1 for load ks3 and ks2 to in4 and in3
- define(ip_macro, {
- ! {ip_macro}
- ! $1 $2 $4 $3 $5 $6 $7 $8 $9
- ld [out2+256], local1
- srl $2, 4, local4
- xor local4, $1, local4
- ifelse($7,1,{mov in1, in3},{nop})
- ld [out2+260], local2
- and local4, local1, local4
- ifelse($8,1,{mov in3, in4},{})
- ifelse($8,2,{mov in4, in3},{})
- ld [out2+280], out4 ! loop counter
- sll local4, 4, local1
- xor $1, local4, $1
- ld [out2+264], local3
- srl $1, 16, local4
- xor $2, local1, $2
- ifelse($9,1,{LDPTR KS3, in4},{})
- xor local4, $2, local4
- nop !sethi %hi(DES_SPtrans), global1 ! sbox addr
- ifelse($9,1,{LDPTR KS2, in3},{})
- and local4, local2, local4
- nop !or global1, %lo(DES_SPtrans), global1 ! sbox addr
- sll local4, 16, local1
- xor $2, local4, $2
- srl $2, 2, local4
- xor $1, local1, $1
- sethi %hi(16711680), local5
- xor local4, $1, local4
- and local4, local3, local4
- or local5, 255, local5
- sll local4, 2, local2
- xor $1, local4, $1
- srl $1, 8, local4
- xor $2, local2, $2
- xor local4, $2, local4
- add global1, 768, global4
- and local4, local5, local4
- add global1, 1024, global5
- ld [out2+272], local7
- sll local4, 8, local1
- xor $2, local4, $2
- srl $2, 1, local4
- xor $1, local1, $1
- ld [$5], out0 ! key 7531
- xor local4, $1, local4
- add global1, 256, global2
- ld [$5+4], out1 ! key 8642
- and local4, local7, local4
- add global1, 512, global3
- sll local4, 1, local1
- xor $1, local4, $1
- sll $1, 3, local3
- xor $2, local1, $2
- sll $2, 3, local2
- add global1, 1280, local6 ! address sbox 8
- srl $1, 29, local4
- add global1, 1792, out3 ! address sbox 8
- srl $2, 29, local1
- or local4, local3, $4
- or local2, local1, $3
- ifelse($6, 1, {
- ld [out2+284], local5 ! 0x0000FC00 used in the rounds
- or local2, local1, $3
- xor $4, out0, local1
- call .des_enc.1
- and local1, 252, local1
- },{})
- ifelse($6, 2, {
- ld [out2+284], local5 ! 0x0000FC00 used in the rounds
- or local2, local1, $3
- xor $4, out0, local1
- call .des_dec.1
- and local1, 252, local1
- },{})
- })
- ! {rounds_macro}
- !
- ! The logic used in the DES rounds is the same as in the C code,
- ! except that calculations for sbox 1 and sbox 5 begin before
- ! the previous round is finished.
- !
- ! In each round one half (work) is modified based on key and the
- ! other half (use).
- !
- ! In this version we do two rounds in a loop repeated 7 times
- ! and two rounds separately.
- !
- ! One half has the bits for the sboxes in the following positions:
- !
- ! 777777xx555555xx333333xx111111xx
- !
- ! 88xx666666xx444444xx222222xx8888
- !
- ! The bits for each sbox are xor-ed with the key bits for that box.
- ! The above xx bits are cleared, and the result used for lookup in
- ! the sbox table. Each sbox entry contains the 4 output bits permuted
- ! into 32 bits according to the P permutation.
- !
- ! In the description of DES, left and right are switched after
- ! each round, except after last round. In this code the original
- ! left and right are kept in the same register in all rounds, meaning
- ! that after the 16 rounds the result for right is in the register
- ! originally used for left.
- !
- ! parameter 1 first work (left in first round)
- ! parameter 2 first use (right in first round)
- ! parameter 3 enc/dec 1/-1
- ! parameter 4 loop label
- ! parameter 5 key address register
- ! parameter 6 optional address for key next encryption/decryption
- ! parameter 7 not empty for include retl
- !
- ! also compares in2 to 8
- define(rounds_macro, {
- ! {rounds_macro}
- ! $1 $2 $3 $4 $5 $6 $7 $8 $9
- xor $2, out0, local1
- ld [out2+284], local5 ! 0x0000FC00
- ba $4
- and local1, 252, local1
- .align 32
- $4:
- ! local6 is address sbox 6
- ! out3 is address sbox 8
- ! out4 is loop counter
- ld [global1+local1], local1
- xor $2, out1, out1 ! 8642
- xor $2, out0, out0 ! 7531
- ! fmovs %f0, %f0 ! fxor used for alignment
- srl out1, 4, local0 ! rotate 4 right
- and out0, local5, local3 ! 3
- ! fmovs %f0, %f0
- ld [$5+$3*8], local7 ! key 7531 next round
- srl local3, 8, local3 ! 3
- and local0, 252, local2 ! 2
- ! fmovs %f0, %f0
- ld [global3+local3],local3 ! 3
- sll out1, 28, out1 ! rotate
- xor $1, local1, $1 ! 1 finished, local1 now sbox 7
- ld [global2+local2], local2 ! 2
- srl out0, 24, local1 ! 7
- or out1, local0, out1 ! rotate
- ldub [out2+local1], local1 ! 7 (and 0xFC)
- srl out1, 24, local0 ! 8
- and out1, local5, local4 ! 4
- ldub [out2+local0], local0 ! 8 (and 0xFC)
- srl local4, 8, local4 ! 4
- xor $1, local2, $1 ! 2 finished local2 now sbox 6
- ld [global4+local4],local4 ! 4
- srl out1, 16, local2 ! 6
- xor $1, local3, $1 ! 3 finished local3 now sbox 5
- ld [out3+local0],local0 ! 8
- and local2, 252, local2 ! 6
- add global1, 1536, local5 ! address sbox 7
- ld [local6+local2], local2 ! 6
- srl out0, 16, local3 ! 5
- xor $1, local4, $1 ! 4 finished
- ld [local5+local1],local1 ! 7
- and local3, 252, local3 ! 5
- xor $1, local0, $1 ! 8 finished
- ld [global5+local3],local3 ! 5
- xor $1, local2, $1 ! 6 finished
- subcc out4, 1, out4
- ld [$5+$3*8+4], out0 ! key 8642 next round
- xor $1, local7, local2 ! sbox 5 next round
- xor $1, local1, $1 ! 7 finished
- srl local2, 16, local2 ! sbox 5 next round
- xor $1, local3, $1 ! 5 finished
- ld [$5+$3*16+4], out1 ! key 8642 next round again
- and local2, 252, local2 ! sbox5 next round
- ! next round
- xor $1, local7, local7 ! 7531
- ld [global5+local2], local2 ! 5
- srl local7, 24, local3 ! 7
- xor $1, out0, out0 ! 8642
- ldub [out2+local3], local3 ! 7 (and 0xFC)
- srl out0, 4, local0 ! rotate 4 right
- and local7, 252, local1 ! 1
- sll out0, 28, out0 ! rotate
- xor $2, local2, $2 ! 5 finished local2 used
- srl local0, 8, local4 ! 4
- and local0, 252, local2 ! 2
- ld [local5+local3], local3 ! 7
- srl local0, 16, local5 ! 6
- or out0, local0, out0 ! rotate
- ld [global2+local2], local2 ! 2
- srl out0, 24, local0
- ld [$5+$3*16], out0 ! key 7531 next round
- and local4, 252, local4 ! 4
- and local5, 252, local5 ! 6
- ld [global4+local4], local4 ! 4
- xor $2, local3, $2 ! 7 finished local3 used
- and local0, 252, local0 ! 8
- ld [local6+local5], local5 ! 6
- xor $2, local2, $2 ! 2 finished local2 now sbox 3
- srl local7, 8, local2 ! 3 start
- ld [out3+local0], local0 ! 8
- xor $2, local4, $2 ! 4 finished
- and local2, 252, local2 ! 3
- ld [global1+local1], local1 ! 1
- xor $2, local5, $2 ! 6 finished local5 used
- ld [global3+local2], local2 ! 3
- xor $2, local0, $2 ! 8 finished
- add $5, $3*16, $5 ! enc add 8, dec add -8 to key pointer
- ld [out2+284], local5 ! 0x0000FC00
- xor $2, out0, local4 ! sbox 1 next round
- xor $2, local1, $2 ! 1 finished
- xor $2, local2, $2 ! 3 finished
- bne $4
- and local4, 252, local1 ! sbox 1 next round
- ! two rounds more:
- ld [global1+local1], local1
- xor $2, out1, out1
- xor $2, out0, out0
- srl out1, 4, local0 ! rotate
- and out0, local5, local3
- ld [$5+$3*8], local7 ! key 7531
- srl local3, 8, local3
- and local0, 252, local2
- ld [global3+local3],local3
- sll out1, 28, out1 ! rotate
- xor $1, local1, $1 ! 1 finished, local1 now sbox 7
- ld [global2+local2], local2
- srl out0, 24, local1
- or out1, local0, out1 ! rotate
- ldub [out2+local1], local1
- srl out1, 24, local0
- and out1, local5, local4
- ldub [out2+local0], local0
- srl local4, 8, local4
- xor $1, local2, $1 ! 2 finished local2 now sbox 6
- ld [global4+local4],local4
- srl out1, 16, local2
- xor $1, local3, $1 ! 3 finished local3 now sbox 5
- ld [out3+local0],local0
- and local2, 252, local2
- add global1, 1536, local5 ! address sbox 7
- ld [local6+local2], local2
- srl out0, 16, local3
- xor $1, local4, $1 ! 4 finished
- ld [local5+local1],local1
- and local3, 252, local3
- xor $1, local0, $1
- ld [global5+local3],local3
- xor $1, local2, $1 ! 6 finished
- cmp in2, 8
- ifelse($6,{}, {}, {ld [out2+280], out4}) ! loop counter
- xor $1, local7, local2 ! sbox 5 next round
- xor $1, local1, $1 ! 7 finished
- ld [$5+$3*8+4], out0
- srl local2, 16, local2 ! sbox 5 next round
- xor $1, local3, $1 ! 5 finished
- and local2, 252, local2
- ! next round (two rounds more)
- xor $1, local7, local7 ! 7531
- ld [global5+local2], local2
- srl local7, 24, local3
- xor $1, out0, out0 ! 8642
- ldub [out2+local3], local3
- srl out0, 4, local0 ! rotate
- and local7, 252, local1
- sll out0, 28, out0 ! rotate
- xor $2, local2, $2 ! 5 finished local2 used
- srl local0, 8, local4
- and local0, 252, local2
- ld [local5+local3], local3
- srl local0, 16, local5
- or out0, local0, out0 ! rotate
- ld [global2+local2], local2
- srl out0, 24, local0
- ifelse($6,{}, {}, {ld [$6], out0}) ! key next encryption/decryption
- and local4, 252, local4
- and local5, 252, local5
- ld [global4+local4], local4
- xor $2, local3, $2 ! 7 finished local3 used
- and local0, 252, local0
- ld [local6+local5], local5
- xor $2, local2, $2 ! 2 finished local2 now sbox 3
- srl local7, 8, local2 ! 3 start
- ld [out3+local0], local0
- xor $2, local4, $2
- and local2, 252, local2
- ld [global1+local1], local1
- xor $2, local5, $2 ! 6 finished local5 used
- ld [global3+local2], local2
- srl $1, 3, local3
- xor $2, local0, $2
- ifelse($6,{}, {}, {ld [$6+4], out1}) ! key next encryption/decryption
- sll $1, 29, local4
- xor $2, local1, $2
- ifelse($7,{}, {}, {retl})
- xor $2, local2, $2
- })
- ! {fp_macro}
- !
- ! parameter 1 right (original left)
- ! parameter 2 left (original right)
- ! parameter 3 1 for optional store to [in0]
- ! parameter 4 1 for load input/output address to local5/7
- !
- ! The final permutation logic switches the halves, meaning that
- ! left and right ends up the registers originally used.
- define(fp_macro, {
- ! {fp_macro}
- ! $1 $2 $3 $4 $5 $6 $7 $8 $9
- ! initially undo the rotate 3 left done after initial permutation
- ! original left is received shifted 3 right and 29 left in local3/4
- sll $2, 29, local1
- or local3, local4, $1
- srl $2, 3, $2
- sethi %hi(0x55555555), local2
- or $2, local1, $2
- or local2, %lo(0x55555555), local2
- srl $2, 1, local3
- sethi %hi(0x00ff00ff), local1
- xor local3, $1, local3
- or local1, %lo(0x00ff00ff), local1
- and local3, local2, local3
- sethi %hi(0x33333333), local4
- sll local3, 1, local2
- xor $1, local3, $1
- srl $1, 8, local3
- xor $2, local2, $2
- xor local3, $2, local3
- or local4, %lo(0x33333333), local4
- and local3, local1, local3
- sethi %hi(0x0000ffff), local1
- sll local3, 8, local2
- xor $2, local3, $2
- srl $2, 2, local3
- xor $1, local2, $1
- xor local3, $1, local3
- or local1, %lo(0x0000ffff), local1
- and local3, local4, local3
- sethi %hi(0x0f0f0f0f), local4
- sll local3, 2, local2
- ifelse($4,1, {LDPTR INPUT, local5})
- xor $1, local3, $1
- ifelse($4,1, {LDPTR OUTPUT, local7})
- srl $1, 16, local3
- xor $2, local2, $2
- xor local3, $2, local3
- or local4, %lo(0x0f0f0f0f), local4
- and local3, local1, local3
- sll local3, 16, local2
- xor $2, local3, local1
- srl local1, 4, local3
- xor $1, local2, $1
- xor local3, $1, local3
- and local3, local4, local3
- sll local3, 4, local2
- xor $1, local3, $1
- ! optional store:
- ifelse($3,1, {st $1, [in0]})
- xor local1, local2, $2
- ifelse($3,1, {st $2, [in0+4]})
- })
- ! {fp_ip_macro}
- !
- ! Does initial permutation for next block mixed with
- ! final permutation for current block.
- !
- ! parameter 1 original left
- ! parameter 2 original right
- ! parameter 3 left ip
- ! parameter 4 right ip
- ! parameter 5 1: load ks1/ks2 to in3/in4, add 120 to in4
- ! 2: mov in4 to in3
- !
- ! also adds -8 to length in2 and loads loop counter to out4
- define(fp_ip_macro, {
- ! {fp_ip_macro}
- ! $1 $2 $3 $4 $5 $6 $7 $8 $9
- define({temp1},{out4})
- define({temp2},{local3})
- define({ip1},{local1})
- define({ip2},{local2})
- define({ip4},{local4})
- define({ip5},{local5})
- ! $1 in local3, local4
- ld [out2+256], ip1
- sll out5, 29, temp1
- or local3, local4, $1
- srl out5, 3, $2
- ifelse($5,2,{mov in4, in3})
- ld [out2+272], ip5
- srl $4, 4, local0
- or $2, temp1, $2
- srl $2, 1, temp1
- xor temp1, $1, temp1
- and temp1, ip5, temp1
- xor local0, $3, local0
- sll temp1, 1, temp2
- xor $1, temp1, $1
- and local0, ip1, local0
- add in2, -8, in2
- sll local0, 4, local7
- xor $3, local0, $3
- ld [out2+268], ip4
- srl $1, 8, temp1
- xor $2, temp2, $2
- ld [out2+260], ip2
- srl $3, 16, local0
- xor $4, local7, $4
- xor temp1, $2, temp1
- xor local0, $4, local0
- and temp1, ip4, temp1
- and local0, ip2, local0
- sll temp1, 8, temp2
- xor $2, temp1, $2
- sll local0, 16, local7
- xor $4, local0, $4
- srl $2, 2, temp1
- xor $1, temp2, $1
- ld [out2+264], temp2 ! ip3
- srl $4, 2, local0
- xor $3, local7, $3
- xor temp1, $1, temp1
- xor local0, $3, local0
- and temp1, temp2, temp1
- and local0, temp2, local0
- sll temp1, 2, temp2
- xor $1, temp1, $1
- sll local0, 2, local7
- xor $3, local0, $3
- srl $1, 16, temp1
- xor $2, temp2, $2
- srl $3, 8, local0
- xor $4, local7, $4
- xor temp1, $2, temp1
- xor local0, $4, local0
- and temp1, ip2, temp1
- and local0, ip4, local0
- sll temp1, 16, temp2
- xor $2, temp1, local4
- sll local0, 8, local7
- xor $4, local0, $4
- srl $4, 1, local0
- xor $3, local7, $3
- srl local4, 4, temp1
- xor local0, $3, local0
- xor $1, temp2, $1
- and local0, ip5, local0
- sll local0, 1, local7
- xor temp1, $1, temp1
- xor $3, local0, $3
- xor $4, local7, $4
- sll $3, 3, local5
- and temp1, ip1, temp1
- sll temp1, 4, temp2
- xor $1, temp1, $1
- ifelse($5,1,{LDPTR KS2, in4})
- sll $4, 3, local2
- xor local4, temp2, $2
- ! reload since used as temporary:
- ld [out2+280], out4 ! loop counter
- srl $3, 29, local0
- ifelse($5,1,{add in4, 120, in4})
- ifelse($5,1,{LDPTR KS1, in3})
- srl $4, 29, local7
- or local0, local5, $4
- or local2, local7, $3
- })
- ! {load_little_endian}
- !
- ! parameter 1 address
- ! parameter 2 destination left
- ! parameter 3 destination right
- ! parameter 4 temporary
- ! parameter 5 label
- define(load_little_endian, {
- ! {load_little_endian}
- ! $1 $2 $3 $4 $5 $6 $7 $8 $9
- ! first in memory to rightmost in register
- $5:
- ldub [$1+3], $2
- ldub [$1+2], $4
- sll $2, 8, $2
- or $2, $4, $2
- ldub [$1+1], $4
- sll $2, 8, $2
- or $2, $4, $2
- ldub [$1+0], $4
- sll $2, 8, $2
- or $2, $4, $2
- ldub [$1+3+4], $3
- ldub [$1+2+4], $4
- sll $3, 8, $3
- or $3, $4, $3
- ldub [$1+1+4], $4
- sll $3, 8, $3
- or $3, $4, $3
- ldub [$1+0+4], $4
- sll $3, 8, $3
- or $3, $4, $3
- $5a:
- })
- ! {load_little_endian_inc}
- !
- ! parameter 1 address
- ! parameter 2 destination left
- ! parameter 3 destination right
- ! parameter 4 temporary
- ! parameter 4 label
- !
- ! adds 8 to address
- define(load_little_endian_inc, {
- ! {load_little_endian_inc}
- ! $1 $2 $3 $4 $5 $6 $7 $8 $9
- ! first in memory to rightmost in register
- $5:
- ldub [$1+3], $2
- ldub [$1+2], $4
- sll $2, 8, $2
- or $2, $4, $2
- ldub [$1+1], $4
- sll $2, 8, $2
- or $2, $4, $2
- ldub [$1+0], $4
- sll $2, 8, $2
- or $2, $4, $2
- ldub [$1+3+4], $3
- add $1, 8, $1
- ldub [$1+2+4-8], $4
- sll $3, 8, $3
- or $3, $4, $3
- ldub [$1+1+4-8], $4
- sll $3, 8, $3
- or $3, $4, $3
- ldub [$1+0+4-8], $4
- sll $3, 8, $3
- or $3, $4, $3
- $5a:
- })
- ! {load_n_bytes}
- !
- ! Loads 1 to 7 bytes little endian
- ! Remaining bytes are zeroed.
- !
- ! parameter 1 address
- ! parameter 2 length
- ! parameter 3 destination register left
- ! parameter 4 destination register right
- ! parameter 5 temp
- ! parameter 6 temp2
- ! parameter 7 label
- ! parameter 8 return label
- define(load_n_bytes, {
- ! {load_n_bytes}
- ! $1 $2 $5 $6 $7 $8 $7 $8 $9
- $7.0: call .+8
- sll $2, 2, $6
- add %o7,$7.jmp.table-$7.0,$5
- add $5, $6, $5
- mov 0, $4
- ld [$5], $5
- jmp %o7+$5
- mov 0, $3
- $7.7:
- ldub [$1+6], $5
- sll $5, 16, $5
- or $3, $5, $3
- $7.6:
- ldub [$1+5], $5
- sll $5, 8, $5
- or $3, $5, $3
- $7.5:
- ldub [$1+4], $5
- or $3, $5, $3
- $7.4:
- ldub [$1+3], $5
- sll $5, 24, $5
- or $4, $5, $4
- $7.3:
- ldub [$1+2], $5
- sll $5, 16, $5
- or $4, $5, $4
- $7.2:
- ldub [$1+1], $5
- sll $5, 8, $5
- or $4, $5, $4
- $7.1:
- ldub [$1+0], $5
- ba $8
- or $4, $5, $4
- .align 4
- $7.jmp.table:
- .word 0
- .word $7.1-$7.0
- .word $7.2-$7.0
- .word $7.3-$7.0
- .word $7.4-$7.0
- .word $7.5-$7.0
- .word $7.6-$7.0
- .word $7.7-$7.0
- })
- ! {store_little_endian}
- !
- ! parameter 1 address
- ! parameter 2 source left
- ! parameter 3 source right
- ! parameter 4 temporary
- define(store_little_endian, {
- ! {store_little_endian}
- ! $1 $2 $3 $4 $5 $6 $7 $8 $9
- ! rightmost in register to first in memory
- $5:
- and $2, 255, $4
- stub $4, [$1+0]
- srl $2, 8, $4
- and $4, 255, $4
- stub $4, [$1+1]
- srl $2, 16, $4
- and $4, 255, $4
- stub $4, [$1+2]
- srl $2, 24, $4
- stub $4, [$1+3]
- and $3, 255, $4
- stub $4, [$1+0+4]
- srl $3, 8, $4
- and $4, 255, $4
- stub $4, [$1+1+4]
- srl $3, 16, $4
- and $4, 255, $4
- stub $4, [$1+2+4]
- srl $3, 24, $4
- stub $4, [$1+3+4]
- $5a:
- })
- ! {store_n_bytes}
- !
- ! Stores 1 to 7 bytes little endian
- !
- ! parameter 1 address
- ! parameter 2 length
- ! parameter 3 source register left
- ! parameter 4 source register right
- ! parameter 5 temp
- ! parameter 6 temp2
- ! parameter 7 label
- ! parameter 8 return label
- define(store_n_bytes, {
- ! {store_n_bytes}
- ! $1 $2 $5 $6 $7 $8 $7 $8 $9
- $7.0: call .+8
- sll $2, 2, $6
- add %o7,$7.jmp.table-$7.0,$5
- add $5, $6, $5
- ld [$5], $5
- jmp %o7+$5
- nop
- $7.7:
- srl $3, 16, $5
- and $5, 0xff, $5
- stub $5, [$1+6]
- $7.6:
- srl $3, 8, $5
- and $5, 0xff, $5
- stub $5, [$1+5]
- $7.5:
- and $3, 0xff, $5
- stub $5, [$1+4]
- $7.4:
- srl $4, 24, $5
- stub $5, [$1+3]
- $7.3:
- srl $4, 16, $5
- and $5, 0xff, $5
- stub $5, [$1+2]
- $7.2:
- srl $4, 8, $5
- and $5, 0xff, $5
- stub $5, [$1+1]
- $7.1:
- and $4, 0xff, $5
- ba $8
- stub $5, [$1]
- .align 4
- $7.jmp.table:
- .word 0
- .word $7.1-$7.0
- .word $7.2-$7.0
- .word $7.3-$7.0
- .word $7.4-$7.0
- .word $7.5-$7.0
- .word $7.6-$7.0
- .word $7.7-$7.0
- })
- define(testvalue,{1})
- define(register_init, {
- ! For test purposes:
- sethi %hi(testvalue), local0
- or local0, %lo(testvalue), local0
- ifelse($1,{},{}, {mov local0, $1})
- ifelse($2,{},{}, {mov local0, $2})
- ifelse($3,{},{}, {mov local0, $3})
- ifelse($4,{},{}, {mov local0, $4})
- ifelse($5,{},{}, {mov local0, $5})
- ifelse($6,{},{}, {mov local0, $6})
- ifelse($7,{},{}, {mov local0, $7})
- ifelse($8,{},{}, {mov local0, $8})
- mov local0, local1
- mov local0, local2
- mov local0, local3
- mov local0, local4
- mov local0, local5
- mov local0, local7
- mov local0, local6
- mov local0, out0
- mov local0, out1
- mov local0, out2
- mov local0, out3
- mov local0, out4
- mov local0, out5
- mov local0, global1
- mov local0, global2
- mov local0, global3
- mov local0, global4
- mov local0, global5
- })
- .section ".text"
- .align 32
- .des_enc:
- ! key address in3
- ! loads key next encryption/decryption first round from [in4]
- rounds_macro(in5, out5, 1, .des_enc.1, in3, in4, retl)
- .align 32
- .des_dec:
- ! implemented with out5 as first parameter to avoid
- ! register exchange in ede modes
- ! key address in4
- ! loads key next encryption/decryption first round from [in3]
- rounds_macro(out5, in5, -1, .des_dec.1, in4, in3, retl)
- ! void DES_encrypt1(data, ks, enc)
- ! *******************************
- .align 32
- .global DES_encrypt1
- .type DES_encrypt1,#function
- DES_encrypt1:
- save %sp, FRAME, %sp
- sethi %hi(.PIC.DES_SPtrans-1f),global1
- or global1,%lo(.PIC.DES_SPtrans-1f),global1
- 1: call .+8
- add %o7,global1,global1
- sub global1,.PIC.DES_SPtrans-.des_and,out2
- ld [in0], in5 ! left
- cmp in2, 0 ! enc
- be .encrypt.dec
- ld [in0+4], out5 ! right
- ! parameter 6 1/2 for include encryption/decryption
- ! parameter 7 1 for move in1 to in3
- ! parameter 8 1 for move in3 to in4, 2 for move in4 to in3
- ip_macro(in5, out5, in5, out5, in3, 0, 1, 1)
- rounds_macro(in5, out5, 1, .des_encrypt1.1, in3, in4) ! in4 not used
- fp_macro(in5, out5, 1) ! 1 for store to [in0]
- ret
- restore
- .encrypt.dec:
- add in1, 120, in3 ! use last subkey for first round
- ! parameter 6 1/2 for include encryption/decryption
- ! parameter 7 1 for move in1 to in3
- ! parameter 8 1 for move in3 to in4, 2 for move in4 to in3
- ip_macro(in5, out5, out5, in5, in4, 2, 0, 1) ! include dec, ks in4
- fp_macro(out5, in5, 1) ! 1 for store to [in0]
- ret
- restore
- .DES_encrypt1.end:
- .size DES_encrypt1,.DES_encrypt1.end-DES_encrypt1
- ! void DES_encrypt2(data, ks, enc)
- !*********************************
- ! encrypts/decrypts without initial/final permutation
- .align 32
- .global DES_encrypt2
- .type DES_encrypt2,#function
- DES_encrypt2:
- save %sp, FRAME, %sp
- sethi %hi(.PIC.DES_SPtrans-1f),global1
- or global1,%lo(.PIC.DES_SPtrans-1f),global1
- 1: call .+8
- add %o7,global1,global1
- sub global1,.PIC.DES_SPtrans-.des_and,out2
- ! Set sbox address 1 to 6 and rotate halfs 3 left
- ! Errors caught by destest? Yes. Still? *NO*
- !sethi %hi(DES_SPtrans), global1 ! address sbox 1
- !or global1, %lo(DES_SPtrans), global1 ! sbox 1
- add global1, 256, global2 ! sbox 2
- add global1, 512, global3 ! sbox 3
- ld [in0], out5 ! right
- add global1, 768, global4 ! sbox 4
- add global1, 1024, global5 ! sbox 5
- ld [in0+4], in5 ! left
- add global1, 1280, local6 ! sbox 6
- add global1, 1792, out3 ! sbox 8
- ! rotate
- sll in5, 3, local5
- mov in1, in3 ! key address to in3
- sll out5, 3, local7
- srl in5, 29, in5
- srl out5, 29, out5
- add in5, local5, in5
- add out5, local7, out5
- cmp in2, 0
- ! we use our own stackframe
- be .encrypt2.dec
- STPTR in0, [%sp+BIAS+ARG0+0*ARGSZ]
- ld [in3], out0 ! key 7531 first round
- mov LOOPS, out4 ! loop counter
- ld [in3+4], out1 ! key 8642 first round
- sethi %hi(0x0000FC00), local5
- call .des_enc
- mov in3, in4
- ! rotate
- sll in5, 29, in0
- srl in5, 3, in5
- sll out5, 29, in1
- add in5, in0, in5
- srl out5, 3, out5
- LDPTR [%sp+BIAS+ARG0+0*ARGSZ], in0
- add out5, in1, out5
- st in5, [in0]
- st out5, [in0+4]
- ret
- restore
- .encrypt2.dec:
- add in3, 120, in4
- ld [in4], out0 ! key 7531 first round
- mov LOOPS, out4 ! loop counter
- ld [in4+4], out1 ! key 8642 first round
- sethi %hi(0x0000FC00), local5
- mov in5, local1 ! left expected in out5
- mov out5, in5
- call .des_dec
- mov local1, out5
- .encrypt2.finish:
- ! rotate
- sll in5, 29, in0
- srl in5, 3, in5
- sll out5, 29, in1
- add in5, in0, in5
- srl out5, 3, out5
- LDPTR [%sp+BIAS+ARG0+0*ARGSZ], in0
- add out5, in1, out5
- st out5, [in0]
- st in5, [in0+4]
- ret
- restore
- .DES_encrypt2.end:
- .size DES_encrypt2, .DES_encrypt2.end-DES_encrypt2
- ! void DES_encrypt3(data, ks1, ks2, ks3)
- ! **************************************
- .align 32
- .global DES_encrypt3
- .type DES_encrypt3,#function
- DES_encrypt3:
- save %sp, FRAME, %sp
-
- sethi %hi(.PIC.DES_SPtrans-1f),global1
- or global1,%lo(.PIC.DES_SPtrans-1f),global1
- 1: call .+8
- add %o7,global1,global1
- sub global1,.PIC.DES_SPtrans-.des_and,out2
- ld [in0], in5 ! left
- add in2, 120, in4 ! ks2
- ld [in0+4], out5 ! right
- mov in3, in2 ! save ks3
- ! parameter 6 1/2 for include encryption/decryption
- ! parameter 7 1 for mov in1 to in3
- ! parameter 8 1 for mov in3 to in4
- ! parameter 9 1 for load ks3 and ks2 to in4 and in3
- ip_macro(in5, out5, in5, out5, in3, 1, 1, 0, 0)
- call .des_dec
- mov in2, in3 ! preload ks3
- call .des_enc
- nop
- fp_macro(in5, out5, 1)
- ret
- restore
- .DES_encrypt3.end:
- .size DES_encrypt3,.DES_encrypt3.end-DES_encrypt3
- ! void DES_decrypt3(data, ks1, ks2, ks3)
- ! **************************************
- .align 32
- .global DES_decrypt3
- .type DES_decrypt3,#function
- DES_decrypt3:
- save %sp, FRAME, %sp
-
- sethi %hi(.PIC.DES_SPtrans-1f),global1
- or global1,%lo(.PIC.DES_SPtrans-1f),global1
- 1: call .+8
- add %o7,global1,global1
- sub global1,.PIC.DES_SPtrans-.des_and,out2
- ld [in0], in5 ! left
- add in3, 120, in4 ! ks3
- ld [in0+4], out5 ! right
- mov in2, in3 ! ks2
- ! parameter 6 1/2 for include encryption/decryption
- ! parameter 7 1 for mov in1 to in3
- ! parameter 8 1 for mov in3 to in4
- ! parameter 9 1 for load ks3 and ks2 to in4 and in3
- ip_macro(in5, out5, out5, in5, in4, 2, 0, 0, 0)
- call .des_enc
- add in1, 120, in4 ! preload ks1
- call .des_dec
- nop
- fp_macro(out5, in5, 1)
- ret
- restore
- .DES_decrypt3.end:
- .size DES_decrypt3,.DES_decrypt3.end-DES_decrypt3
- ! void DES_ncbc_encrypt(input, output, length, schedule, ivec, enc)
- ! *****************************************************************
- .align 32
- .global DES_ncbc_encrypt
- .type DES_ncbc_encrypt,#function
- DES_ncbc_encrypt:
- save %sp, FRAME, %sp
-
- define({INPUT}, { [%sp+BIAS+ARG0+0*ARGSZ] })
- define({OUTPUT}, { [%sp+BIAS+ARG0+1*ARGSZ] })
- define({IVEC}, { [%sp+BIAS+ARG0+4*ARGSZ] })
- sethi %hi(.PIC.DES_SPtrans-1f),global1
- or global1,%lo(.PIC.DES_SPtrans-1f),global1
- 1: call .+8
- add %o7,global1,global1
- sub global1,.PIC.DES_SPtrans-.des_and,out2
- cmp in5, 0 ! enc
- be .ncbc.dec
- STPTR in4, IVEC
- ! addr left right temp label
- load_little_endian(in4, in5, out5, local3, .LLE1) ! iv
- addcc in2, -8, in2 ! bytes missing when first block done
- bl .ncbc.enc.seven.or.less
- mov in3, in4 ! schedule
- .ncbc.enc.next.block:
- load_little_endian(in0, out4, global4, local3, .LLE2) ! block
- .ncbc.enc.next.block_1:
- xor in5, out4, in5 ! iv xor
- xor out5, global4, out5 ! iv xor
- ! parameter 8 1 for move in3 to in4, 2 for move in4 to in3
- ip_macro(in5, out5, in5, out5, in3, 0, 0, 2)
- .ncbc.enc.next.block_2:
- !// call .des_enc ! compares in2 to 8
- ! rounds inlined for alignment purposes
- add global1, 768, global4 ! address sbox 4 since register used below
- rounds_macro(in5, out5, 1, .ncbc.enc.1, in3, in4) ! include encryption ks in3
- bl .ncbc.enc.next.block_fp
- add in0, 8, in0 ! input address
- ! If 8 or more bytes are to be encrypted after this block,
- ! we combine final permutation for this block with initial
- ! permutation for next block. Load next block:
- load_little_endian(in0, global3, global4, local5, .LLE12)
- ! parameter 1 original left
- ! parameter 2 original right
- ! parameter 3 left ip
- ! parameter 4 right ip
- ! parameter 5 1: load ks1/ks2 to in3/in4, add 120 to in4
- ! 2: mov in4 to in3
- !
- ! also adds -8 to length in2 and loads loop counter to out4
- fp_ip_macro(out0, out1, global3, global4, 2)
- store_little_endian(in1, out0, out1, local3, .SLE10) ! block
- ld [in3], out0 ! key 7531 first round next block
- mov in5, local1
- xor global3, out5, in5 ! iv xor next block
- ld [in3+4], out1 ! key 8642
- add global1, 512, global3 ! address sbox 3 since register used
- xor global4, local1, out5 ! iv xor next block
- ba .ncbc.enc.next.block_2
- add in1, 8, in1 ! output address
- .ncbc.enc.next.block_fp:
- fp_macro(in5, out5)
- store_little_endian(in1, in5, out5, local3, .SLE1) ! block
- addcc in2, -8, in2 ! bytes missing when next block done
- bpos .ncbc.enc.next.block
- add in1, 8, in1
- .ncbc.enc.seven.or.less:
- cmp in2, -8
- ble .ncbc.enc.finish
- nop
- add in2, 8, local1 ! bytes to load
- ! addr, length, dest left, dest right, temp, temp2, label, ret label
- load_n_bytes(in0, local1, global4, out4, local2, local3, .LNB1, .ncbc.enc.next.block_1)
- ! Loads 1 to 7 bytes little endian to global4, out4
- .ncbc.enc.finish:
- LDPTR IVEC, local4
- store_little_endian(local4, in5, out5, local5, .SLE2) ! ivec
- ret
- restore
- .ncbc.dec:
- STPTR in0, INPUT
- cmp in2, 0 ! length
- add in3, 120, in3
- LDPTR IVEC, local7 ! ivec
- ble .ncbc.dec.finish
- mov in3, in4 ! schedule
- STPTR in1, OUTPUT
- mov in0, local5 ! input
- load_little_endian(local7, in0, in1, local3, .LLE3) ! ivec
- .ncbc.dec.next.block:
- load_little_endian(local5, in5, out5, local3, .LLE4) ! block
- ! parameter 6 1/2 for include encryption/decryption
- ! parameter 7 1 for mov in1 to in3
- ! parameter 8 1 for mov in3 to in4
- ip_macro(in5, out5, out5, in5, in4, 2, 0, 1) ! include decryption ks in4
- fp_macro(out5, in5, 0, 1) ! 1 for input and output address to local5/7
- ! in2 is bytes left to be stored
- ! in2 is compared to 8 in the rounds
- xor out5, in0, out4 ! iv xor
- bl .ncbc.dec.seven.or.less
- xor in5, in1, global4 ! iv xor
- ! Load ivec next block now, since input and output address might be the same.
- load_little_endian_inc(local5, in0, in1, local3, .LLE5) ! iv
- store_little_endian(local7, out4, global4, local3, .SLE3)
- STPTR local5, INPUT
- add local7, 8, local7
- addcc in2, -8, in2
- bg .ncbc.dec.next.block
- STPTR local7, OUTPUT
- .ncbc.dec.store.iv:
- LDPTR IVEC, local4 ! ivec
- store_little_endian(local4, in0, in1, local5, .SLE4)
- .ncbc.dec.finish:
- ret
- restore
- .ncbc.dec.seven.or.less:
- load_little_endian_inc(local5, in0, in1, local3, .LLE13) ! ivec
- store_n_bytes(local7, in2, global4, out4, local3, local4, .SNB1, .ncbc.dec.store.iv)
- .DES_ncbc_encrypt.end:
- .size DES_ncbc_encrypt, .DES_ncbc_encrypt.end-DES_ncbc_encrypt
- ! void DES_ede3_cbc_encrypt(input, output, length, ks1, ks2, ks3, ivec, enc)
- ! **************************************************************************
- .align 32
- .global DES_ede3_cbc_encrypt
- .type DES_ede3_cbc_encrypt,#function
- DES_ede3_cbc_encrypt:
- save %sp, FRAME, %sp
- define({KS1}, { [%sp+BIAS+ARG0+3*ARGSZ] })
- define({KS2}, { [%sp+BIAS+ARG0+4*ARGSZ] })
- define({KS3}, { [%sp+BIAS+ARG0+5*ARGSZ] })
- sethi %hi(.PIC.DES_SPtrans-1f),global1
- or global1,%lo(.PIC.DES_SPtrans-1f),global1
- 1: call .+8
- add %o7,global1,global1
- sub global1,.PIC.DES_SPtrans-.des_and,out2
- LDPTR [%fp+BIAS+ARG0+7*ARGSZ], local3 ! enc
- LDPTR [%fp+BIAS+ARG0+6*ARGSZ], local4 ! ivec
- cmp local3, 0 ! enc
- be .ede3.dec
- STPTR in4, KS2
- STPTR in5, KS3
- load_little_endian(local4, in5, out5, local3, .LLE6) ! ivec
- addcc in2, -8, in2 ! bytes missing after next block
- bl .ede3.enc.seven.or.less
- STPTR in3, KS1
- .ede3.enc.next.block:
- load_little_endian(in0, out4, global4, local3, .LLE7)
- .ede3.enc.next.block_1:
- LDPTR KS2, in4
- xor in5, out4, in5 ! iv xor
- xor out5, global4, out5 ! iv xor
- LDPTR KS1, in3
- add in4, 120, in4 ! for decryption we use last subkey first
- nop
- ip_macro(in5, out5, in5, out5, in3)
- .ede3.enc.next.block_2:
- call .des_enc ! ks1 in3
- nop
- call .des_dec ! ks2 in4
- LDPTR KS3, in3
- call .des_enc ! ks3 in3 compares in2 to 8
- nop
- bl .ede3.enc.next.block_fp
- add in0, 8, in0
- ! If 8 or more bytes are to be encrypted after this block,
- ! we combine final permutation for this block with initial
- ! permutation for next block. Load next block:
- load_little_endian(in0, global3, global4, local5, .LLE11)
- ! parameter 1 original left
- ! parameter 2 original right
- ! parameter 3 left ip
- ! parameter 4 right ip
- ! parameter 5 1: load ks1/ks2 to in3/in4, add 120 to in4
- ! 2: mov in4 to in3
- !
- ! also adds -8 to length in2 and loads loop counter to out4
- fp_ip_macro(out0, out1, global3, global4, 1)
- store_little_endian(in1, out0, out1, local3, .SLE9) ! block
- mov in5, local1
- xor global3, out5, in5 ! iv xor next block
- ld [in3], out0 ! key 7531
- add global1, 512, global3 ! address sbox 3
- xor global4, local1, out5 ! iv xor next block
- ld [in3+4], out1 ! key 8642
- add global1, 768, global4 ! address sbox 4
- ba .ede3.enc.next.block_2
- add in1, 8, in1
- .ede3.enc.next.block_fp:
- fp_macro(in5, out5)
- store_little_endian(in1, in5, out5, local3, .SLE5) ! block
- addcc in2, -8, in2 ! bytes missing when next block done
- bpos .ede3.enc.next.block
- add in1, 8, in1
- .ede3.enc.seven.or.less:
- cmp in2, -8
- ble .ede3.enc.finish
- nop
- add in2, 8, local1 ! bytes to load
- ! addr, length, dest left, dest right, temp, temp2, label, ret label
- load_n_bytes(in0, local1, global4, out4, local2, local3, .LNB2, .ede3.enc.next.block_1)
- .ede3.enc.finish:
- LDPTR [%fp+BIAS+ARG0+6*ARGSZ], local4 ! ivec
- store_little_endian(local4, in5, out5, local5, .SLE6) ! ivec
- ret
- restore
- .ede3.dec:
- STPTR in0, INPUT
- add in5, 120, in5
- STPTR in1, OUTPUT
- mov in0, local5
- add in3, 120, in3
- STPTR in3, KS1
- cmp in2, 0
- ble .ede3.dec.finish
- STPTR in5, KS3
- LDPTR [%fp+BIAS+ARG0+6*ARGSZ], local7 ! iv
- load_little_endian(local7, in0, in1, local3, .LLE8)
- .ede3.dec.next.block:
- load_little_endian(local5, in5, out5, local3, .LLE9)
- ! parameter 6 1/2 for include encryption/decryption
- ! parameter 7 1 for mov in1 to in3
- ! parameter 8 1 for mov in3 to in4
- ! parameter 9 1 for load ks3 and ks2 to in4 and in3
- ip_macro(in5, out5, out5, in5, in4, 2, 0, 0, 1) ! inc .des_dec ks3 in4
- call .des_enc ! ks2 in3
- LDPTR KS1, in4
- call .des_dec ! ks1 in4
- nop
- fp_macro(out5, in5, 0, 1) ! 1 for input and output address local5/7
- ! in2 is bytes left to be stored
- ! in2 is compared to 8 in the rounds
- xor out5, in0, out4
- bl .ede3.dec.seven.or.less
- xor in5, in1, global4
- load_little_endian_inc(local5, in0, in1, local3, .LLE10) ! iv next block
- store_little_endian(local7, out4, global4, local3, .SLE7) ! block
- STPTR local5, INPUT
- addcc in2, -8, in2
- add local7, 8, local7
- bg .ede3.dec.next.block
- STPTR local7, OUTPUT
- .ede3.dec.store.iv:
- LDPTR [%fp+BIAS+ARG0+6*ARGSZ], local4 ! ivec
- store_little_endian(local4, in0, in1, local5, .SLE8) ! ivec
- .ede3.dec.finish:
- ret
- restore
- .ede3.dec.seven.or.less:
- load_little_endian_inc(local5, in0, in1, local3, .LLE14) ! iv
- store_n_bytes(local7, in2, global4, out4, local3, local4, .SNB2, .ede3.dec.store.iv)
- .DES_ede3_cbc_encrypt.end:
- .size DES_ede3_cbc_encrypt,.DES_ede3_cbc_encrypt.end-DES_ede3_cbc_encrypt
- .align 256
- .type .des_and,#object
- .size .des_and,284
- .des_and:
- ! This table is used for AND 0xFC when it is known that register
- ! bits 8-31 are zero. Makes it possible to do three arithmetic
- ! operations in one cycle.
- .byte 0, 0, 0, 0, 4, 4, 4, 4
- .byte 8, 8, 8, 8, 12, 12, 12, 12
- .byte 16, 16, 16, 16, 20, 20, 20, 20
- .byte 24, 24, 24, 24, 28, 28, 28, 28
- .byte 32, 32, 32, 32, 36, 36, 36, 36
- .byte 40, 40, 40, 40, 44, 44, 44, 44
- .byte 48, 48, 48, 48, 52, 52, 52, 52
- .byte 56, 56, 56, 56, 60, 60, 60, 60
- .byte 64, 64, 64, 64, 68, 68, 68, 68
- .byte 72, 72, 72, 72, 76, 76, 76, 76
- .byte 80, 80, 80, 80, 84, 84, 84, 84
- .byte 88, 88, 88, 88, 92, 92, 92, 92
- .byte 96, 96, 96, 96, 100, 100, 100, 100
- .byte 104, 104, 104, 104, 108, 108, 108, 108
- .byte 112, 112, 112, 112, 116, 116, 116, 116
- .byte 120, 120, 120, 120, 124, 124, 124, 124
- .byte 128, 128, 128, 128, 132, 132, 132, 132
- .byte 136, 136, 136, 136, 140, 140, 140, 140
- .byte 144, 144, 144, 144, 148, 148, 148, 148
- .byte 152, 152, 152, 152, 156, 156, 156, 156
- .byte 160, 160, 160, 160, 164, 164, 164, 164
- .byte 168, 168, 168, 168, 172, 172, 172, 172
- .byte 176, 176, 176, 176, 180, 180, 180, 180
- .byte 184, 184, 184, 184, 188, 188, 188, 188
- .byte 192, 192, 192, 192, 196, 196, 196, 196
- .byte 200, 200, 200, 200, 204, 204, 204, 204
- .byte 208, 208, 208, 208, 212, 212, 212, 212
- .byte 216, 216, 216, 216, 220, 220, 220, 220
- .byte 224, 224, 224, 224, 228, 228, 228, 228
- .byte 232, 232, 232, 232, 236, 236, 236, 236
- .byte 240, 240, 240, 240, 244, 244, 244, 244
- .byte 248, 248, 248, 248, 252, 252, 252, 252
- ! 5 numbers for initial/final permutation
- .word 0x0f0f0f0f ! offset 256
- .word 0x0000ffff ! 260
- .word 0x33333333 ! 264
- .word 0x00ff00ff ! 268
- .word 0x55555555 ! 272
- .word 0 ! 276
- .word LOOPS ! 280
- .word 0x0000FC00 ! 284
- .global DES_SPtrans
- .type DES_SPtrans,#object
- .size DES_SPtrans,2048
- .align 64
- DES_SPtrans:
- .PIC.DES_SPtrans:
- ! nibble 0
- .word 0x02080800, 0x00080000, 0x02000002, 0x02080802
- .word 0x02000000, 0x00080802, 0x00080002, 0x02000002
- .word 0x00080802, 0x02080800, 0x02080000, 0x00000802
- .word 0x02000802, 0x02000000, 0x00000000, 0x00080002
- .word 0x00080000, 0x00000002, 0x02000800, 0x00080800
- .word 0x02080802, 0x02080000, 0x00000802, 0x02000800
- .word 0x00000002, 0x00000800, 0x00080800, 0x02080002
- .word 0x00000800, 0x02000802, 0x02080002, 0x00000000
- .word 0x00000000, 0x02080802, 0x02000800, 0x00080002
- .word 0x02080800, 0x00080000, 0x00000802, 0x02000800
- .word 0x02080002, 0x00000800, 0x00080800, 0x02000002
- .word 0x00080802, 0x00000002, 0x02000002, 0x02080000
- .word 0x02080802, 0x00080800, 0x02080000, 0x02000802
- .word 0x02000000, 0x00000802, 0x00080002, 0x00000000
- .word 0x00080000, 0x02000000, 0x02000802, 0x02080800
- .word 0x00000002, 0x02080002, 0x00000800, 0x00080802
- ! nibble 1
- .word 0x40108010, 0x00000000, 0x00108000, 0x40100000
- .word 0x40000010, 0x00008010, 0x40008000, 0x00108000
- .word 0x00008000, 0x40100010, 0x00000010, 0x40008000
- .word 0x00100010, 0x40108000, 0x40100000, 0x00000010
- .word 0x00100000, 0x40008010, 0x40100010, 0x00008000
- .word 0x00108010, 0x40000000, 0x00000000, 0x00100010
- .word 0x40008010, 0x00108010, 0x40108000, 0x40000010
- .word 0x40000000, 0x00100000, 0x00008010, 0x40108010
- .word 0x00100010, 0x40108000, 0x40008000, 0x00108010
- .word 0x40108010, 0x00100010, 0x40000010, 0x00000000
- .word 0x40000000, 0x00008010, 0x00100000, 0x40100010
- .word 0x00008000, 0x40000000, 0x00108010, 0x40008010
- .word 0x40108000, 0x00008000, 0x00000000, 0x40000010
- .word 0x00000010, 0x40108010, 0x00108000, 0x40100000
- .word 0x40100010, 0x00100000, 0x00008010, 0x40008000
- .word 0x40008010, 0x00000010, 0x40100000, 0x00108000
- ! nibble 2
- .word 0x04000001, 0x04040100, 0x00000100, 0x04000101
- .word 0x00040001, 0x04000000, 0x04000101, 0x00040100
- .word 0x04000100, 0x00040000, 0x04040000, 0x00000001
- .word 0x04040101, 0x00000101, 0x00000001, 0x04040001
- .word 0x00000000, 0x00040001, 0x04040100, 0x00000100
- .word 0x00000101, 0x04040101, 0x00040000, 0x04000001
- .word 0x04040001, 0x04000100, 0x00040101, 0x04040000
- .word 0x00040100, 0x00000000, 0x04000000, 0x00040101
- .word 0x04040100, 0x00000100, 0x00000001, 0x00040000
- .word 0x00000101, 0x00040001, 0x04040000, 0x04000101
- .word 0x00000000, 0x04040100, 0x00040100, 0x04040001
- .word 0x00040001, 0x04000000, 0x04040101, 0x00000001
- .word 0x00040101, 0x04000001, 0x04000000, 0x04040101
- .word 0x00040000, 0x04000100, 0x04000101, 0x00040100
- .word 0x04000100, 0x00000000, 0x04040001, 0x00000101
- .word 0x04000001, 0x00040101, 0x00000100, 0x04040000
- ! nibble 3
- .word 0x00401008, 0x10001000, 0x00000008, 0x10401008
- .word 0x00000000, 0x10400000, 0x10001008, 0x00400008
- .word 0x10401000, 0x10000008, 0x10000000, 0x00001008
- .word 0x10000008, 0x00401008, 0x00400000, 0x10000000
- .word 0x10400008, 0x00401000, 0x00001000, 0x00000008
- .word 0x00401000, 0x10001008, 0x10400000, 0x00001000
- .word 0x00001008, 0x00000000, 0x00400008, 0x10401000
- .word 0x10001000, 0x10400008, 0x10401008, 0x00400000
- .word 0x10400008, 0x00001008, 0x00400000, 0x10000008
- .word 0x00401000, 0x10001000, 0x00000008, 0x10400000
- .word 0x10001008, 0x00000000, 0x00001000, 0x00400008
- .word 0x00000000, 0x10400008, 0x10401000, 0x00001000
- .word 0x10000000, 0x10401008, 0x00401008, 0x00400000
- .word 0x10401008, 0x00000008, 0x10001000, 0x00401008
- .word 0x00400008, 0x00401000, 0x10400000, 0x10001008
- .word 0x00001008, 0x10000000, 0x10000008, 0x10401000
- ! nibble 4
- .word 0x08000000, 0x00010000, 0x00000400, 0x08010420
- .word 0x08010020, 0x08000400, 0x00010420, 0x08010000
- .word 0x00010000, 0x00000020, 0x08000020, 0x00010400
- .word 0x08000420, 0x08010020, 0x08010400, 0x00000000
- .word 0x00010400, 0x08000000, 0x00010020, 0x00000420
- .word 0x08000400, 0x00010420, 0x00000000, 0x08000020
- .word 0x00000020, 0x08000420, 0x08010420, 0x00010020
- .word 0x08010000, 0x00000400, 0x00000420, 0x08010400
- .word 0x08010400, 0x08000420, 0x00010020, 0x08010000
- .word 0x00010000, 0x00000020, 0x08000020, 0x08000400
- .word 0x08000000, 0x00010400, 0x08010420, 0x00000000
- .word 0x00010420, 0x08000000, 0x00000400, 0x00010020
- .word 0x08000420, 0x00000400, 0x00000000, 0x08010420
- .word 0x08010020, 0x08010400, 0x00000420, 0x00010000
- .word 0x00010400, 0x08010020, 0x08000400, 0x00000420
- .word 0x00000020, 0x00010420, 0x08010000, 0x08000020
- ! nibble 5
- .word 0x80000040, 0x00200040, 0x00000000, 0x80202000
- .word 0x00200040, 0x00002000, 0x80002040, 0x00200000
- .word 0x00002040, 0x80202040, 0x00202000, 0x80000000
- .word 0x80002000, 0x80000040, 0x80200000, 0x00202040
- .word 0x00200000, 0x80002040, 0x80200040, 0x00000000
- .word 0x00002000, 0x00000040, 0x80202000, 0x80200040
- .word 0x80202040, 0x80200000, 0x80000000, 0x00002040
- .word 0x00000040, 0x00202000, 0x00202040, 0x80002000
- .word 0x00002040, 0x80000000, 0x80002000, 0x00202040
- .word 0x80202000, 0x00200040, 0x00000000, 0x80002000
- .word 0x80000000, 0x00002000, 0x80200040, 0x00200000
- .word 0x00200040, 0x80202040, 0x00202000, 0x00000040
- .word 0x80202040, 0x00202000, 0x00200000, 0x80002040
- .word 0x80000040, 0x80200000, 0x00202040, 0x00000000
- .word 0x00002000, 0x80000040, 0x80002040, 0x80202000
- .word 0x80200000, 0x00002040, 0x00000040, 0x80200040
- ! nibble 6
- .word 0x00004000, 0x00000200, 0x01000200, 0x01000004
- .word 0x01004204, 0x00004004, 0x00004200, 0x00000000
- .word 0x01000000, 0x01000204, 0x00000204, 0x01004000
- .word 0x00000004, 0x01004200, 0x01004000, 0x00000204
- .word 0x01000204, 0x00004000, 0x00004004, 0x01004204
- .word 0x00000000, 0x01000200, 0x01000004, 0x00004200
- .word 0x01004004, 0x00004204, 0x01004200, 0x00000004
- .word 0x00004204, 0x01004004, 0x00000200, 0x01000000
- .word 0x00004204, 0x01004000, 0x01004004, 0x00000204
- .word 0x00004000, 0x00000200, 0x01000000, 0x01004004
- .word 0x01000204, 0x00004204, 0x00004200, 0x00000000
- .word 0x00000200, 0x01000004, 0x00000004, 0x01000200
- .word 0x00000000, 0x01000204, 0x01000200, 0x00004200
- .word 0x00000204, 0x00004000, 0x01004204, 0x01000000
- .word 0x01004200, 0x00000004, 0x00004004, 0x01004204
- .word 0x01000004, 0x01004200, 0x01004000, 0x00004004
- ! nibble 7
- .word 0x20800080, 0x20820000, 0x00020080, 0x00000000
- .word 0x20020000, 0x00800080, 0x20800000, 0x20820080
- .word 0x00000080, 0x20000000, 0x00820000, 0x00020080
- .word 0x00820080, 0x20020080, 0x20000080, 0x20800000
- .word 0x00020000, 0x00820080, 0x00800080, 0x20020000
- .word 0x20820080, 0x20000080, 0x00000000, 0x00820000
- .word 0x20000000, 0x00800000, 0x20020080, 0x20800080
- .word 0x00800000, 0x00020000, 0x20820000, 0x00000080
- .word 0x00800000, 0x00020000, 0x20000080, 0x20820080
- .word 0x00020080, 0x20000000, 0x00000000, 0x00820000
- .word 0x20800080, 0x20020080, 0x20020000, 0x00800080
- .word 0x20820000, 0x00000080, 0x00800080, 0x20020000
- .word 0x20820080, 0x00800000, 0x20800000, 0x20000080
- .word 0x00820000, 0x00020080, 0x20020080, 0x20800000
- .word 0x00000080, 0x20820000, 0x00820080, 0x00000000
- .word 0x20000000, 0x20800080, 0x00020000, 0x00820080
|