aes-x86_64-asm_64.S 4.7 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189
  1. /* AES (Rijndael) implementation (FIPS PUB 197) for x86_64
  2. *
  3. * Copyright (C) 2005 Andreas Steinmetz, <ast@domdv.de>
  4. *
  5. * License:
  6. * This code can be distributed under the terms of the GNU General Public
  7. * License (GPL) Version 2 provided that the above header down to and
  8. * including this sentence is retained in full.
  9. */
  10. .extern crypto_ft_tab
  11. .extern crypto_it_tab
  12. .extern crypto_fl_tab
  13. .extern crypto_il_tab
  14. .text
  15. #include <asm/asm-offsets.h>
  16. #define R1 %rax
  17. #define R1E %eax
  18. #define R1X %ax
  19. #define R1H %ah
  20. #define R1L %al
  21. #define R2 %rbx
  22. #define R2E %ebx
  23. #define R2X %bx
  24. #define R2H %bh
  25. #define R2L %bl
  26. #define R3 %rcx
  27. #define R3E %ecx
  28. #define R3X %cx
  29. #define R3H %ch
  30. #define R3L %cl
  31. #define R4 %rdx
  32. #define R4E %edx
  33. #define R4X %dx
  34. #define R4H %dh
  35. #define R4L %dl
  36. #define R5 %rsi
  37. #define R5E %esi
  38. #define R6 %rdi
  39. #define R6E %edi
  40. #define R7 %rbp
  41. #define R7E %ebp
  42. #define R8 %r8
  43. #define R9 %r9
  44. #define R10 %r10
  45. #define R11 %r11
  46. #define prologue(FUNC,KEY,B128,B192,r1,r2,r3,r4,r5,r6,r7,r8,r9,r10,r11) \
  47. .global FUNC; \
  48. .type FUNC,@function; \
  49. .align 8; \
  50. FUNC: movq r1,r2; \
  51. movq r3,r4; \
  52. leaq KEY+48(r8),r9; \
  53. movq r10,r11; \
  54. movl (r7),r5 ## E; \
  55. movl 4(r7),r1 ## E; \
  56. movl 8(r7),r6 ## E; \
  57. movl 12(r7),r7 ## E; \
  58. movl 480(r8),r10 ## E; \
  59. xorl -48(r9),r5 ## E; \
  60. xorl -44(r9),r1 ## E; \
  61. xorl -40(r9),r6 ## E; \
  62. xorl -36(r9),r7 ## E; \
  63. cmpl $24,r10 ## E; \
  64. jb B128; \
  65. leaq 32(r9),r9; \
  66. je B192; \
  67. leaq 32(r9),r9;
  68. #define epilogue(r1,r2,r3,r4,r5,r6,r7,r8,r9) \
  69. movq r1,r2; \
  70. movq r3,r4; \
  71. movl r5 ## E,(r9); \
  72. movl r6 ## E,4(r9); \
  73. movl r7 ## E,8(r9); \
  74. movl r8 ## E,12(r9); \
  75. ret;
  76. #define round(TAB,OFFSET,r1,r2,r3,r4,r5,r6,r7,r8,ra,rb,rc,rd) \
  77. movzbl r2 ## H,r5 ## E; \
  78. movzbl r2 ## L,r6 ## E; \
  79. movl TAB+1024(,r5,4),r5 ## E;\
  80. movw r4 ## X,r2 ## X; \
  81. movl TAB(,r6,4),r6 ## E; \
  82. roll $16,r2 ## E; \
  83. shrl $16,r4 ## E; \
  84. movzbl r4 ## H,r7 ## E; \
  85. movzbl r4 ## L,r4 ## E; \
  86. xorl OFFSET(r8),ra ## E; \
  87. xorl OFFSET+4(r8),rb ## E; \
  88. xorl TAB+3072(,r7,4),r5 ## E;\
  89. xorl TAB+2048(,r4,4),r6 ## E;\
  90. movzbl r1 ## L,r7 ## E; \
  91. movzbl r1 ## H,r4 ## E; \
  92. movl TAB+1024(,r4,4),r4 ## E;\
  93. movw r3 ## X,r1 ## X; \
  94. roll $16,r1 ## E; \
  95. shrl $16,r3 ## E; \
  96. xorl TAB(,r7,4),r5 ## E; \
  97. movzbl r3 ## H,r7 ## E; \
  98. movzbl r3 ## L,r3 ## E; \
  99. xorl TAB+3072(,r7,4),r4 ## E;\
  100. xorl TAB+2048(,r3,4),r5 ## E;\
  101. movzbl r1 ## H,r7 ## E; \
  102. movzbl r1 ## L,r3 ## E; \
  103. shrl $16,r1 ## E; \
  104. xorl TAB+3072(,r7,4),r6 ## E;\
  105. movl TAB+2048(,r3,4),r3 ## E;\
  106. movzbl r1 ## H,r7 ## E; \
  107. movzbl r1 ## L,r1 ## E; \
  108. xorl TAB+1024(,r7,4),r6 ## E;\
  109. xorl TAB(,r1,4),r3 ## E; \
  110. movzbl r2 ## H,r1 ## E; \
  111. movzbl r2 ## L,r7 ## E; \
  112. shrl $16,r2 ## E; \
  113. xorl TAB+3072(,r1,4),r3 ## E;\
  114. xorl TAB+2048(,r7,4),r4 ## E;\
  115. movzbl r2 ## H,r1 ## E; \
  116. movzbl r2 ## L,r2 ## E; \
  117. xorl OFFSET+8(r8),rc ## E; \
  118. xorl OFFSET+12(r8),rd ## E; \
  119. xorl TAB+1024(,r1,4),r3 ## E;\
  120. xorl TAB(,r2,4),r4 ## E;
  121. #define move_regs(r1,r2,r3,r4) \
  122. movl r3 ## E,r1 ## E; \
  123. movl r4 ## E,r2 ## E;
  124. #define entry(FUNC,KEY,B128,B192) \
  125. prologue(FUNC,KEY,B128,B192,R2,R8,R7,R9,R1,R3,R4,R6,R10,R5,R11)
  126. #define return epilogue(R8,R2,R9,R7,R5,R6,R3,R4,R11)
  127. #define encrypt_round(TAB,OFFSET) \
  128. round(TAB,OFFSET,R1,R2,R3,R4,R5,R6,R7,R10,R5,R6,R3,R4) \
  129. move_regs(R1,R2,R5,R6)
  130. #define encrypt_final(TAB,OFFSET) \
  131. round(TAB,OFFSET,R1,R2,R3,R4,R5,R6,R7,R10,R5,R6,R3,R4)
  132. #define decrypt_round(TAB,OFFSET) \
  133. round(TAB,OFFSET,R2,R1,R4,R3,R6,R5,R7,R10,R5,R6,R3,R4) \
  134. move_regs(R1,R2,R5,R6)
  135. #define decrypt_final(TAB,OFFSET) \
  136. round(TAB,OFFSET,R2,R1,R4,R3,R6,R5,R7,R10,R5,R6,R3,R4)
  137. /* void aes_enc_blk(stuct crypto_tfm *tfm, u8 *out, const u8 *in) */
  138. entry(aes_enc_blk,0,enc128,enc192)
  139. encrypt_round(crypto_ft_tab,-96)
  140. encrypt_round(crypto_ft_tab,-80)
  141. enc192: encrypt_round(crypto_ft_tab,-64)
  142. encrypt_round(crypto_ft_tab,-48)
  143. enc128: encrypt_round(crypto_ft_tab,-32)
  144. encrypt_round(crypto_ft_tab,-16)
  145. encrypt_round(crypto_ft_tab, 0)
  146. encrypt_round(crypto_ft_tab, 16)
  147. encrypt_round(crypto_ft_tab, 32)
  148. encrypt_round(crypto_ft_tab, 48)
  149. encrypt_round(crypto_ft_tab, 64)
  150. encrypt_round(crypto_ft_tab, 80)
  151. encrypt_round(crypto_ft_tab, 96)
  152. encrypt_final(crypto_fl_tab,112)
  153. return
  154. /* void aes_dec_blk(struct crypto_tfm *tfm, u8 *out, const u8 *in) */
  155. entry(aes_dec_blk,240,dec128,dec192)
  156. decrypt_round(crypto_it_tab,-96)
  157. decrypt_round(crypto_it_tab,-80)
  158. dec192: decrypt_round(crypto_it_tab,-64)
  159. decrypt_round(crypto_it_tab,-48)
  160. dec128: decrypt_round(crypto_it_tab,-32)
  161. decrypt_round(crypto_it_tab,-16)
  162. decrypt_round(crypto_it_tab, 0)
  163. decrypt_round(crypto_it_tab, 16)
  164. decrypt_round(crypto_it_tab, 32)
  165. decrypt_round(crypto_it_tab, 48)
  166. decrypt_round(crypto_it_tab, 64)
  167. decrypt_round(crypto_it_tab, 80)
  168. decrypt_round(crypto_it_tab, 96)
  169. decrypt_final(crypto_il_tab,112)
  170. return