crypto/des/asm/des-586.pl

   1 #! /usr/bin/env perl
   2 # Copyright 1995-2020 The OpenSSL Project Authors. All Rights Reserved.
   3 #
   4 # Licensed under the Apache License 2.0 (the "License").  You may not use
   5 # this file except in compliance with the License.  You can obtain a copy
   6 # in the file LICENSE in the source distribution or at
   7 # https://www.openssl.org/source/license.html
   8
   9 # The inner loop instruction sequence and the IP/FP modifications are from
  10 # Svend Olaf Mikkelsen.
  11
  12 $0 =~ m/(.*[\/\\])[^\/\\]+$/; $dir=$1;
  13 push(@INC,"${dir}","${dir}../../perlasm");
  14 require "x86asm.pl";
  15 require "cbc.pl";
  16 require "desboth.pl";
  17
  18 # base code is in Microsoft
  19 # op dest, source
  20 # format.
  21 #
  22
  23 $output=pop and open STDOUT,">$output";
  24
  25 &asm_init($ARGV[0]);
  26
  27 $L="edi";
  28 $R="esi";
  29 $trans="ebp";
  30 $small_footprint=1 if (grep(/\-DOPENSSL_SMALL_FOOTPRINT/,@ARGV));
  31 # one can discuss setting this variable to 1 unconditionally, as
  32 # the folded loop is only 3% slower than unrolled, but >7 times smaller
  33
  34 &public_label("DES_SPtrans");
  35 &static_label("des_sptrans");
  36
  37 &DES_encrypt_internal();
  38 &DES_decrypt_internal();
  39 &DES_encrypt("DES_encrypt1",1);
  40 &DES_encrypt("DES_encrypt2",0);
  41 &DES_encrypt3("DES_encrypt3",1);
  42 &DES_encrypt3("DES_decrypt3",0);
  43 &cbc("DES_ncbc_encrypt","DES_encrypt1","DES_encrypt1",0,4,5,3,5,-1);
  44 &cbc("DES_ede3_cbc_encrypt","DES_encrypt3","DES_decrypt3",0,6,7,3,4,5);
  45 &DES_SPtrans();
  46
  47 &asm_finish();
  48
  49 close STDOUT or die "error closing STDOUT: $!";
  50
  51 sub DES_encrypt_internal()
  52         {
  53         &function_begin_B("_x86_DES_encrypt");
  54
  55         if ($small_footprint)
  56             {
  57             &lea("edx",&DWP(128,"ecx"));
  58             &push("edx");
  59             &push("ecx");
  60             &set_label("eloop");
  61                 &D_ENCRYPT(0,$L,$R,0,$trans,"eax","ebx","ecx","edx",&swtmp(0));
  62                 &comment("");
  63                 &D_ENCRYPT(1,$R,$L,2,$trans,"eax","ebx","ecx","edx",&swtmp(0));
  64                 &comment("");
  65                 &add("ecx",16);
  66                 &cmp("ecx",&swtmp(1));
  67                 &mov(&swtmp(0),"ecx");
  68                 &jb(&label("eloop"));
  69             &add("esp",8);
  70             }
  71         else
  72             {
  73             &push("ecx");
  74             for ($i=0; $i<16; $i+=2)
  75                 {
  76                 &comment("Round $i");
  77                 &D_ENCRYPT($i,$L,$R,$i*2,$trans,"eax","ebx","ecx","edx",&swtmp(0));
  78                 &comment("Round ".sprintf("%d",$i+1));
  79                 &D_ENCRYPT($i+1,$R,$L,($i+1)*2,$trans,"eax","ebx","ecx","edx",&swtmp(0));
  80                 }
  81             &add("esp",4);
  82         }
  83         &ret();
  84
  85         &function_end_B("_x86_DES_encrypt");
  86         }
  87
  88 sub DES_decrypt_internal()
  89         {
  90         &function_begin_B("_x86_DES_decrypt");
  91
  92         if ($small_footprint)
  93             {
  94             &push("ecx");
  95             &lea("ecx",&DWP(128,"ecx"));
  96             &push("ecx");
  97             &set_label("dloop");
  98                 &D_ENCRYPT(0,$L,$R,-2,$trans,"eax","ebx","ecx","edx",&swtmp(0));
  99                 &comment("");
 100                 &D_ENCRYPT(1,$R,$L,-4,$trans,"eax","ebx","ecx","edx",&swtmp(0));
 101                 &comment("");
 102                 &sub("ecx",16);
 103                 &cmp("ecx",&swtmp(1));
 104                 &mov(&swtmp(0),"ecx");
 105                 &ja(&label("dloop"));
 106             &add("esp",8);
 107             }
 108         else
 109             {
 110             &push("ecx");
 111             for ($i=15; $i>0; $i-=2)
 112                 {
 113                 &comment("Round $i");
 114                 &D_ENCRYPT(15-$i,$L,$R,$i*2,$trans,"eax","ebx","ecx","edx",&swtmp(0));
 115                 &comment("Round ".sprintf("%d",$i-1));
 116                 &D_ENCRYPT(15-$i+1,$R,$L,($i-1)*2,$trans,"eax","ebx","ecx","edx",&swtmp(0));
 117                 }
 118             &add("esp",4);
 119             }
 120         &ret();
 121
 122         &function_end_B("_x86_DES_decrypt");
 123         }
 124
 125 sub DES_encrypt
 126         {
 127         local($name,$do_ip)=@_;
 128
 129         &function_begin_B($name);
 130
 131         &push("esi");
 132         &push("edi");
 133
 134         &comment("");
 135         &comment("Load the 2 words");
 136
 137         if ($do_ip)
 138                 {
 139                 &mov($R,&wparam(0));
 140                  &xor(  "ecx",          "ecx"           );
 141
 142                 &push("ebx");
 143                 &push("ebp");
 144
 145                 &mov("eax",&DWP(0,$R,"",0));
 146                  &mov("ebx",&wparam(2));        # get encrypt flag
 147                 &mov($L,&DWP(4,$R,"",0));
 148                 &comment("");
 149                 &comment("IP");
 150                 &IP_new("eax",$L,$R,3);
 151                 }
 152         else
 153                 {
 154                 &mov("eax",&wparam(0));
 155                  &xor(  "ecx",          "ecx"           );
 156
 157                 &push("ebx");
 158                 &push("ebp");
 159
 160                 &mov($R,&DWP(0,"eax","",0));
 161                  &mov("ebx",&wparam(2));        # get encrypt flag
 162                 &rotl($R,3);
 163                 &mov($L,&DWP(4,"eax","",0));
 164                 &rotl($L,3);
 165                 }
 166
 167         # PIC-ification:-)
 168         &call   (&label("pic_point"));
 169         &set_label("pic_point");
 170         &blindpop($trans);
 171         &lea    ($trans,&DWP(&label("des_sptrans")."-".&label("pic_point"),$trans));
 172
 173         &mov(   "ecx",  &wparam(1)      );
 174
 175         &cmp("ebx","0");
 176         &je(&label("decrypt"));
 177         &call("_x86_DES_encrypt");
 178         &jmp(&label("done"));
 179         &set_label("decrypt");
 180         &call("_x86_DES_decrypt");
 181         &set_label("done");
 182
 183         if ($do_ip)
 184                 {
 185                 &comment("");
 186                 &comment("FP");
 187                 &mov("edx",&wparam(0));
 188                 &FP_new($L,$R,"eax",3);
 189
 190                 &mov(&DWP(0,"edx","",0),"eax");
 191                 &mov(&DWP(4,"edx","",0),$R);
 192                 }
 193         else
 194                 {
 195                 &comment("");
 196                 &comment("Fixup");
 197                 &rotr($L,3);            # r
 198                  &mov("eax",&wparam(0));
 199                 &rotr($R,3);            # l
 200                  &mov(&DWP(0,"eax","",0),$L);
 201                  &mov(&DWP(4,"eax","",0),$R);
 202                 }
 203
 204         &pop("ebp");
 205         &pop("ebx");
 206         &pop("edi");
 207         &pop("esi");
 208         &ret();
 209
 210         &function_end_B($name);
 211         }
 212
 213 sub D_ENCRYPT
 214         {
 215         local($r,$L,$R,$S,$trans,$u,$tmp1,$tmp2,$t,$wp1)=@_;
 216
 217          &mov(  $u,             &DWP(&n2a($S*4),$tmp2,"",0));
 218         &xor(   $tmp1,          $tmp1);
 219          &mov(  $t,             &DWP(&n2a(($S+1)*4),$tmp2,"",0));
 220         &xor(   $u,             $R);
 221         &xor(   $tmp2,          $tmp2);
 222          &xor(  $t,             $R);
 223         &and(   $u,             "0xfcfcfcfc"    );
 224          &and(  $t,             "0xcfcfcfcf"    );
 225         &movb(  &LB($tmp1),     &LB($u) );
 226          &movb( &LB($tmp2),     &HB($u) );
 227         &rotr(  $t,             4               );
 228         &xor(   $L,             &DWP("     ",$trans,$tmp1,0));
 229          &movb( &LB($tmp1),     &LB($t) );
 230          &xor(  $L,             &DWP("0x200",$trans,$tmp2,0));
 231          &movb( &LB($tmp2),     &HB($t) );
 232         &shr(   $u,             16);
 233          &xor(  $L,             &DWP("0x100",$trans,$tmp1,0));
 234          &movb( &LB($tmp1),     &HB($u) );
 235         &shr(   $t,             16);
 236          &xor(  $L,             &DWP("0x300",$trans,$tmp2,0));
 237         &movb(  &LB($tmp2),     &HB($t) );
 238          &and(  $u,             "0xff"  );
 239         &and(   $t,             "0xff"  );
 240          &xor(  $L,             &DWP("0x600",$trans,$tmp1,0));
 241          &xor(  $L,             &DWP("0x700",$trans,$tmp2,0));
 242         &mov(   $tmp2,          $wp1    );
 243          &xor(  $L,             &DWP("0x400",$trans,$u,0));
 244          &xor(  $L,             &DWP("0x500",$trans,$t,0));
 245         }
 246
 247 sub n2a
 248         {
 249         sprintf("%d",$_[0]);
 250         }
 251
 252 # now has a side affect of rotating $a by $shift
 253 sub R_PERM_OP
 254         {
 255         local($a,$b,$tt,$shift,$mask,$last)=@_;
 256
 257         &rotl(  $a,             $shift          ) if ($shift != 0);
 258         &mov(   $tt,            $a              );
 259         &xor(   $a,             $b              );
 260         &and(   $a,             $mask           );
 261         # This can never succeed, and besides it is difficult to see what the
 262         # idea was - Ben 13 Feb 99
 263         if (!$last eq $b)
 264                 {
 265                 &xor(   $b,             $a              );
 266                 &xor(   $tt,            $a              );
 267                 }
 268         else
 269                 {
 270                 &xor(   $tt,            $a              );
 271                 &xor(   $b,             $a              );
 272                 }
 273         &comment("");
 274         }
 275
 276 sub IP_new
 277         {
 278         local($l,$r,$tt,$lr)=@_;
 279
 280         &R_PERM_OP($l,$r,$tt, 4,"0xf0f0f0f0",$l);
 281         &R_PERM_OP($r,$tt,$l,20,"0xfff0000f",$l);
 282         &R_PERM_OP($l,$tt,$r,14,"0x33333333",$r);
 283         &R_PERM_OP($tt,$r,$l,22,"0x03fc03fc",$r);
 284         &R_PERM_OP($l,$r,$tt, 9,"0xaaaaaaaa",$r);
 285
 286         if ($lr != 3)
 287                 {
 288                 if (($lr-3) < 0)
 289                         { &rotr($tt,    3-$lr); }
 290                 else    { &rotl($tt,    $lr-3); }
 291                 }
 292         if ($lr != 2)
 293                 {
 294                 if (($lr-2) < 0)
 295                         { &rotr($r,     2-$lr); }
 296                 else    { &rotl($r,     $lr-2); }
 297                 }
 298         }
 299
 300 sub FP_new
 301         {
 302         local($l,$r,$tt,$lr)=@_;
 303
 304         if ($lr != 2)
 305                 {
 306                 if (($lr-2) < 0)
 307                         { &rotl($r,     2-$lr); }
 308                 else    { &rotr($r,     $lr-2); }
 309                 }
 310         if ($lr != 3)
 311                 {
 312                 if (($lr-3) < 0)
 313                         { &rotl($l,     3-$lr); }
 314                 else    { &rotr($l,     $lr-3); }
 315                 }
 316
 317         &R_PERM_OP($l,$r,$tt, 0,"0xaaaaaaaa",$r);
 318         &R_PERM_OP($tt,$r,$l,23,"0x03fc03fc",$r);
 319         &R_PERM_OP($l,$r,$tt,10,"0x33333333",$l);
 320         &R_PERM_OP($r,$tt,$l,18,"0xfff0000f",$l);
 321         &R_PERM_OP($l,$tt,$r,12,"0xf0f0f0f0",$r);
 322         &rotr($tt       , 4);
 323         }
 324
 325 sub DES_SPtrans
 326         {
 327         &set_label("DES_SPtrans",64);
 328         &set_label("des_sptrans");
 329         &data_word(0x02080800, 0x00080000, 0x02000002, 0x02080802);
 330         &data_word(0x02000000, 0x00080802, 0x00080002, 0x02000002);
 331         &data_word(0x00080802, 0x02080800, 0x02080000, 0x00000802);
 332         &data_word(0x02000802, 0x02000000, 0x00000000, 0x00080002);
 333         &data_word(0x00080000, 0x00000002, 0x02000800, 0x00080800);
 334         &data_word(0x02080802, 0x02080000, 0x00000802, 0x02000800);
 335         &data_word(0x00000002, 0x00000800, 0x00080800, 0x02080002);
 336         &data_word(0x00000800, 0x02000802, 0x02080002, 0x00000000);
 337         &data_word(0x00000000, 0x02080802, 0x02000800, 0x00080002);
 338         &data_word(0x02080800, 0x00080000, 0x00000802, 0x02000800);
 339         &data_word(0x02080002, 0x00000800, 0x00080800, 0x02000002);
 340         &data_word(0x00080802, 0x00000002, 0x02000002, 0x02080000);
 341         &data_word(0x02080802, 0x00080800, 0x02080000, 0x02000802);
 342         &data_word(0x02000000, 0x00000802, 0x00080002, 0x00000000);
 343         &data_word(0x00080000, 0x02000000, 0x02000802, 0x02080800);
 344         &data_word(0x00000002, 0x02080002, 0x00000800, 0x00080802);
 345         # nibble 1
 346         &data_word(0x40108010, 0x00000000, 0x00108000, 0x40100000);
 347         &data_word(0x40000010, 0x00008010, 0x40008000, 0x00108000);
 348         &data_word(0x00008000, 0x40100010, 0x00000010, 0x40008000);
 349         &data_word(0x00100010, 0x40108000, 0x40100000, 0x00000010);
 350         &data_word(0x00100000, 0x40008010, 0x40100010, 0x00008000);
 351         &data_word(0x00108010, 0x40000000, 0x00000000, 0x00100010);
 352         &data_word(0x40008010, 0x00108010, 0x40108000, 0x40000010);
 353         &data_word(0x40000000, 0x00100000, 0x00008010, 0x40108010);
 354         &data_word(0x00100010, 0x40108000, 0x40008000, 0x00108010);
 355         &data_word(0x40108010, 0x00100010, 0x40000010, 0x00000000);
 356         &data_word(0x40000000, 0x00008010, 0x00100000, 0x40100010);
 357         &data_word(0x00008000, 0x40000000, 0x00108010, 0x40008010);
 358         &data_word(0x40108000, 0x00008000, 0x00000000, 0x40000010);
 359         &data_word(0x00000010, 0x40108010, 0x00108000, 0x40100000);
 360         &data_word(0x40100010, 0x00100000, 0x00008010, 0x40008000);
 361         &data_word(0x40008010, 0x00000010, 0x40100000, 0x00108000);
 362         # nibble 2
 363         &data_word(0x04000001, 0x04040100, 0x00000100, 0x04000101);
 364         &data_word(0x00040001, 0x04000000, 0x04000101, 0x00040100);
 365         &data_word(0x04000100, 0x00040000, 0x04040000, 0x00000001);
 366         &data_word(0x04040101, 0x00000101, 0x00000001, 0x04040001);
 367         &data_word(0x00000000, 0x00040001, 0x04040100, 0x00000100);
 368         &data_word(0x00000101, 0x04040101, 0x00040000, 0x04000001);
 369         &data_word(0x04040001, 0x04000100, 0x00040101, 0x04040000);
 370         &data_word(0x00040100, 0x00000000, 0x04000000, 0x00040101);
 371         &data_word(0x04040100, 0x00000100, 0x00000001, 0x00040000);
 372         &data_word(0x00000101, 0x00040001, 0x04040000, 0x04000101);
 373         &data_word(0x00000000, 0x04040100, 0x00040100, 0x04040001);
 374         &data_word(0x00040001, 0x04000000, 0x04040101, 0x00000001);
 375         &data_word(0x00040101, 0x04000001, 0x04000000, 0x04040101);
 376         &data_word(0x00040000, 0x04000100, 0x04000101, 0x00040100);
 377         &data_word(0x04000100, 0x00000000, 0x04040001, 0x00000101);
 378         &data_word(0x04000001, 0x00040101, 0x00000100, 0x04040000);
 379         # nibble 3
 380         &data_word(0x00401008, 0x10001000, 0x00000008, 0x10401008);
 381         &data_word(0x00000000, 0x10400000, 0x10001008, 0x00400008);
 382         &data_word(0x10401000, 0x10000008, 0x10000000, 0x00001008);
 383         &data_word(0x10000008, 0x00401008, 0x00400000, 0x10000000);
 384         &data_word(0x10400008, 0x00401000, 0x00001000, 0x00000008);
 385         &data_word(0x00401000, 0x10001008, 0x10400000, 0x00001000);
 386         &data_word(0x00001008, 0x00000000, 0x00400008, 0x10401000);
 387         &data_word(0x10001000, 0x10400008, 0x10401008, 0x00400000);
 388         &data_word(0x10400008, 0x00001008, 0x00400000, 0x10000008);
 389         &data_word(0x00401000, 0x10001000, 0x00000008, 0x10400000);
 390         &data_word(0x10001008, 0x00000000, 0x00001000, 0x00400008);
 391         &data_word(0x00000000, 0x10400008, 0x10401000, 0x00001000);
 392         &data_word(0x10000000, 0x10401008, 0x00401008, 0x00400000);
 393         &data_word(0x10401008, 0x00000008, 0x10001000, 0x00401008);
 394         &data_word(0x00400008, 0x00401000, 0x10400000, 0x10001008);
 395         &data_word(0x00001008, 0x10000000, 0x10000008, 0x10401000);
 396         # nibble 4
 397         &data_word(0x08000000, 0x00010000, 0x00000400, 0x08010420);
 398         &data_word(0x08010020, 0x08000400, 0x00010420, 0x08010000);
 399         &data_word(0x00010000, 0x00000020, 0x08000020, 0x00010400);
 400         &data_word(0x08000420, 0x08010020, 0x08010400, 0x00000000);
 401         &data_word(0x00010400, 0x08000000, 0x00010020, 0x00000420);
 402         &data_word(0x08000400, 0x00010420, 0x00000000, 0x08000020);
 403         &data_word(0x00000020, 0x08000420, 0x08010420, 0x00010020);
 404         &data_word(0x08010000, 0x00000400, 0x00000420, 0x08010400);
 405         &data_word(0x08010400, 0x08000420, 0x00010020, 0x08010000);
 406         &data_word(0x00010000, 0x00000020, 0x08000020, 0x08000400);
 407         &data_word(0x08000000, 0x00010400, 0x08010420, 0x00000000);
 408         &data_word(0x00010420, 0x08000000, 0x00000400, 0x00010020);
 409         &data_word(0x08000420, 0x00000400, 0x00000000, 0x08010420);
 410         &data_word(0x08010020, 0x08010400, 0x00000420, 0x00010000);
 411         &data_word(0x00010400, 0x08010020, 0x08000400, 0x00000420);
 412         &data_word(0x00000020, 0x00010420, 0x08010000, 0x08000020);
 413         # nibble 5
 414         &data_word(0x80000040, 0x00200040, 0x00000000, 0x80202000);
 415         &data_word(0x00200040, 0x00002000, 0x80002040, 0x00200000);
 416         &data_word(0x00002040, 0x80202040, 0x00202000, 0x80000000);
 417         &data_word(0x80002000, 0x80000040, 0x80200000, 0x00202040);
 418         &data_word(0x00200000, 0x80002040, 0x80200040, 0x00000000);
 419         &data_word(0x00002000, 0x00000040, 0x80202000, 0x80200040);
 420         &data_word(0x80202040, 0x80200000, 0x80000000, 0x00002040);
 421         &data_word(0x00000040, 0x00202000, 0x00202040, 0x80002000);
 422         &data_word(0x00002040, 0x80000000, 0x80002000, 0x00202040);
 423         &data_word(0x80202000, 0x00200040, 0x00000000, 0x80002000);
 424         &data_word(0x80000000, 0x00002000, 0x80200040, 0x00200000);
 425         &data_word(0x00200040, 0x80202040, 0x00202000, 0x00000040);
 426         &data_word(0x80202040, 0x00202000, 0x00200000, 0x80002040);
 427         &data_word(0x80000040, 0x80200000, 0x00202040, 0x00000000);
 428         &data_word(0x00002000, 0x80000040, 0x80002040, 0x80202000);
 429         &data_word(0x80200000, 0x00002040, 0x00000040, 0x80200040);
 430         # nibble 6
 431         &data_word(0x00004000, 0x00000200, 0x01000200, 0x01000004);
 432         &data_word(0x01004204, 0x00004004, 0x00004200, 0x00000000);
 433         &data_word(0x01000000, 0x01000204, 0x00000204, 0x01004000);
 434         &data_word(0x00000004, 0x01004200, 0x01004000, 0x00000204);
 435         &data_word(0x01000204, 0x00004000, 0x00004004, 0x01004204);
 436         &data_word(0x00000000, 0x01000200, 0x01000004, 0x00004200);
 437         &data_word(0x01004004, 0x00004204, 0x01004200, 0x00000004);
 438         &data_word(0x00004204, 0x01004004, 0x00000200, 0x01000000);
 439         &data_word(0x00004204, 0x01004000, 0x01004004, 0x00000204);
 440         &data_word(0x00004000, 0x00000200, 0x01000000, 0x01004004);
 441         &data_word(0x01000204, 0x00004204, 0x00004200, 0x00000000);
 442         &data_word(0x00000200, 0x01000004, 0x00000004, 0x01000200);
 443         &data_word(0x00000000, 0x01000204, 0x01000200, 0x00004200);
 444         &data_word(0x00000204, 0x00004000, 0x01004204, 0x01000000);
 445         &data_word(0x01004200, 0x00000004, 0x00004004, 0x01004204);
 446         &data_word(0x01000004, 0x01004200, 0x01004000, 0x00004004);
 447         # nibble 7
 448         &data_word(0x20800080, 0x20820000, 0x00020080, 0x00000000);
 449         &data_word(0x20020000, 0x00800080, 0x20800000, 0x20820080);
 450         &data_word(0x00000080, 0x20000000, 0x00820000, 0x00020080);
 451         &data_word(0x00820080, 0x20020080, 0x20000080, 0x20800000);
 452         &data_word(0x00020000, 0x00820080, 0x00800080, 0x20020000);
 453         &data_word(0x20820080, 0x20000080, 0x00000000, 0x00820000);
 454         &data_word(0x20000000, 0x00800000, 0x20020080, 0x20800080);
 455         &data_word(0x00800000, 0x00020000, 0x20820000, 0x00000080);
 456         &data_word(0x00800000, 0x00020000, 0x20000080, 0x20820080);
 457         &data_word(0x00020080, 0x20000000, 0x00000000, 0x00820000);
 458         &data_word(0x20800080, 0x20020080, 0x20020000, 0x00800080);
 459         &data_word(0x20820000, 0x00000080, 0x00800080, 0x20020000);
 460         &data_word(0x20820080, 0x00800000, 0x20800000, 0x20000080);
 461         &data_word(0x00820000, 0x00020080, 0x20020080, 0x20800000);
 462         &data_word(0x00000080, 0x20820000, 0x00820080, 0x00000000);
 463         &data_word(0x20000000, 0x20800080, 0x00020000, 0x00820080);
 464         }