crypto/sha/asm/sha512-parisc.pl

   1 #!/usr/bin/env perl
   2
   3 # ====================================================================
   4 # Written by Andy Polyakov <appro@fy.chalmers.se> for the OpenSSL
   5 # project. The module is, however, dual licensed under OpenSSL and
   6 # CRYPTOGAMS licenses depending on where you obtain it. For further
   7 # details see http://www.openssl.org/~appro/cryptogams/.
   8 # ====================================================================
   9
  10 # SHA256/512 block procedure for PA-RISC.
  11
  12 # June 2009.
  13 #
  14 # SHA256 performance is >75% better than gcc 3.2 generated code on
  15 # PA-7100LC. Compared to code generated by vendor compiler this
  16 # implementation is almost 70% faster in 64-bit build, but delivers
  17 # virtually same performance in 32-bit build on PA-8600.
  18 #
  19 # SHA512 performance is >2.9x better than gcc 3.2 generated code on
  20 # PA-7100LC, PA-RISC 1.1 processor. Then implementation detects if the
  21 # code is executed on PA-RISC 2.0 processor and switches to 64-bit
  22 # code path delivering adequate peformance even in "blended" 32-bit
  23 # build. Though 64-bit code is not any faster than code generated by
  24 # vendor compiler on PA-8600...
  25 #
  26 # Special thanks to polarhome.com for providing HP-UX account.
  27
  28 $flavour = shift;
  29 $output = shift;
  30 open STDOUT,">$output";
  31
  32 if ($flavour =~ /64/) {
  33         $LEVEL          ="2.0W";
  34         $SIZE_T         =8;
  35         $FRAME_MARKER   =80;
  36         $SAVED_RP       =16;
  37         $PUSH           ="std";
  38         $PUSHMA         ="std,ma";
  39         $POP            ="ldd";
  40         $POPMB          ="ldd,mb";
  41 } else {
  42         $LEVEL          ="1.0";
  43         $SIZE_T         =4;
  44         $FRAME_MARKER   =48;
  45         $SAVED_RP       =20;
  46         $PUSH           ="stw";
  47         $PUSHMA         ="stwm";
  48         $POP            ="ldw";
  49         $POPMB          ="ldwm";
  50 }
  51
  52 if ($output =~ /512/) {
  53         $func="sha512_block_data_order";
  54         $SZ=8;
  55         @Sigma0=(28,34,39);
  56         @Sigma1=(14,18,41);
  57         @sigma0=(1,  8, 7);
  58         @sigma1=(19,61, 6);
  59         $rounds=80;
  60         $LAST10BITS=0x017;
  61         $LD="ldd";
  62         $LDM="ldd,ma";
  63         $ST="std";
  64 } else {
  65         $func="sha256_block_data_order";
  66         $SZ=4;
  67         @Sigma0=( 2,13,22);
  68         @Sigma1=( 6,11,25);
  69         @sigma0=( 7,18, 3);
  70         @sigma1=(17,19,10);
  71         $rounds=64;
  72         $LAST10BITS=0x0f2;
  73         $LD="ldw";
  74         $LDM="ldwm";
  75         $ST="stw";
  76 }
  77
  78 $FRAME=16*$SIZE_T+$FRAME_MARKER;# 16 saved regs + frame marker
  79                                 #                 [+ argument transfer]
  80 $XOFF=16*$SZ+32;                # local variables
  81 $FRAME+=$XOFF;
  82 $XOFF+=$FRAME_MARKER;           # distance between %sp and local variables
  83
  84 $ctx="%r26";    # zapped by $a0
  85 $inp="%r25";    # zapped by $a1
  86 $num="%r24";    # zapped by $t0
  87
  88 $a0 ="%r26";
  89 $a1 ="%r25";
  90 $t0 ="%r24";
  91 $t1 ="%r29";
  92 $Tbl="%r31";
  93
  94 @V=($A,$B,$C,$D,$E,$F,$G,$H)=("%r17","%r18","%r19","%r20","%r21","%r22","%r23","%r28");
  95
  96 @X=("%r1", "%r2", "%r3", "%r4", "%r5", "%r6", "%r7", "%r8",
  97     "%r9", "%r10","%r11","%r12","%r13","%r14","%r15","%r16",$inp);
  98
  99 sub ROUND_00_15 {
 100 my ($i,$a,$b,$c,$d,$e,$f,$g,$h)=@_;
 101 $code.=<<___;
 102         _ror    $e,$Sigma1[0],$a0
 103         and     $f,$e,$t0
 104         _ror    $e,$Sigma1[1],$a1
 105         addl    $t1,$h,$h
 106         andcm   $g,$e,$t1
 107         xor     $a1,$a0,$a0
 108         _ror    $a1,`$Sigma1[2]-$Sigma1[1]`,$a1
 109         or      $t0,$t1,$t1             ; Ch(e,f,g)
 110         addl    @X[$i%16],$h,$h
 111         xor     $a0,$a1,$a1             ; Sigma1(e)
 112         addl    $t1,$h,$h
 113         _ror    $a,$Sigma0[0],$a0
 114         addl    $a1,$h,$h
 115
 116         _ror    $a,$Sigma0[1],$a1
 117         and     $a,$b,$t0
 118         and     $a,$c,$t1
 119         xor     $a1,$a0,$a0
 120         _ror    $a1,`$Sigma0[2]-$Sigma0[1]`,$a1
 121         xor     $t1,$t0,$t0
 122         and     $b,$c,$t1
 123         xor     $a0,$a1,$a1             ; Sigma0(a)
 124         addl    $h,$d,$d
 125         xor     $t1,$t0,$t0             ; Maj(a,b,c)
 126         `"$LDM  $SZ($Tbl),$t1" if ($i<15)`
 127         addl    $a1,$h,$h
 128         addl    $t0,$h,$h
 129
 130 ___
 131 }
 132
 133 sub ROUND_16_xx {
 134 my ($i,$a,$b,$c,$d,$e,$f,$g,$h)=@_;
 135 $i-=16;
 136 $code.=<<___;
 137         _ror    @X[($i+1)%16],$sigma0[0],$a0
 138         _ror    @X[($i+1)%16],$sigma0[1],$a1
 139         addl    @X[($i+9)%16],@X[$i],@X[$i]
 140         _ror    @X[($i+14)%16],$sigma1[0],$t0
 141         _ror    @X[($i+14)%16],$sigma1[1],$t1
 142         xor     $a1,$a0,$a0
 143         _shr    @X[($i+1)%16],$sigma0[2],$a1
 144         xor     $t1,$t0,$t0
 145         _shr    @X[($i+14)%16],$sigma1[2],$t1
 146         xor     $a1,$a0,$a0             ; sigma0(X[(i+1)&0x0f])
 147         xor     $t1,$t0,$t0             ; sigma1(X[(i+14)&0x0f])
 148         $LDM    $SZ($Tbl),$t1
 149         addl    $a0,@X[$i],@X[$i]
 150         addl    $t0,@X[$i],@X[$i]
 151 ___
 152 $code.=<<___ if ($i==15);
 153         extru   $t1,31,10,$a1
 154         comiclr,<> $LAST10BITS,$a1,%r0
 155         ldo     1($Tbl),$Tbl            ; signal end of $Tbl
 156 ___
 157 &ROUND_00_15($i+16,$a,$b,$c,$d,$e,$f,$g,$h);
 158 }
 159
 160 $code=<<___;
 161         .LEVEL  $LEVEL
 162         .SPACE  \$TEXT\$
 163         .SUBSPA \$CODE\$,QUAD=0,ALIGN=8,ACCESS=0x2C,CODE_ONLY
 164
 165         .ALIGN  64
 166 L\$table
 167 ___
 168 $code.=<<___ if ($SZ==8);
 169         .WORD   0x428a2f98,0xd728ae22,0x71374491,0x23ef65cd
 170         .WORD   0xb5c0fbcf,0xec4d3b2f,0xe9b5dba5,0x8189dbbc
 171         .WORD   0x3956c25b,0xf348b538,0x59f111f1,0xb605d019
 172         .WORD   0x923f82a4,0xaf194f9b,0xab1c5ed5,0xda6d8118
 173         .WORD   0xd807aa98,0xa3030242,0x12835b01,0x45706fbe
 174         .WORD   0x243185be,0x4ee4b28c,0x550c7dc3,0xd5ffb4e2
 175         .WORD   0x72be5d74,0xf27b896f,0x80deb1fe,0x3b1696b1
 176         .WORD   0x9bdc06a7,0x25c71235,0xc19bf174,0xcf692694
 177         .WORD   0xe49b69c1,0x9ef14ad2,0xefbe4786,0x384f25e3
 178         .WORD   0x0fc19dc6,0x8b8cd5b5,0x240ca1cc,0x77ac9c65
 179         .WORD   0x2de92c6f,0x592b0275,0x4a7484aa,0x6ea6e483
 180         .WORD   0x5cb0a9dc,0xbd41fbd4,0x76f988da,0x831153b5
 181         .WORD   0x983e5152,0xee66dfab,0xa831c66d,0x2db43210
 182         .WORD   0xb00327c8,0x98fb213f,0xbf597fc7,0xbeef0ee4
 183         .WORD   0xc6e00bf3,0x3da88fc2,0xd5a79147,0x930aa725
 184         .WORD   0x06ca6351,0xe003826f,0x14292967,0x0a0e6e70
 185         .WORD   0x27b70a85,0x46d22ffc,0x2e1b2138,0x5c26c926
 186         .WORD   0x4d2c6dfc,0x5ac42aed,0x53380d13,0x9d95b3df
 187         .WORD   0x650a7354,0x8baf63de,0x766a0abb,0x3c77b2a8
 188         .WORD   0x81c2c92e,0x47edaee6,0x92722c85,0x1482353b
 189         .WORD   0xa2bfe8a1,0x4cf10364,0xa81a664b,0xbc423001
 190         .WORD   0xc24b8b70,0xd0f89791,0xc76c51a3,0x0654be30
 191         .WORD   0xd192e819,0xd6ef5218,0xd6990624,0x5565a910
 192         .WORD   0xf40e3585,0x5771202a,0x106aa070,0x32bbd1b8
 193         .WORD   0x19a4c116,0xb8d2d0c8,0x1e376c08,0x5141ab53
 194         .WORD   0x2748774c,0xdf8eeb99,0x34b0bcb5,0xe19b48a8
 195         .WORD   0x391c0cb3,0xc5c95a63,0x4ed8aa4a,0xe3418acb
 196         .WORD   0x5b9cca4f,0x7763e373,0x682e6ff3,0xd6b2b8a3
 197         .WORD   0x748f82ee,0x5defb2fc,0x78a5636f,0x43172f60
 198         .WORD   0x84c87814,0xa1f0ab72,0x8cc70208,0x1a6439ec
 199         .WORD   0x90befffa,0x23631e28,0xa4506ceb,0xde82bde9
 200         .WORD   0xbef9a3f7,0xb2c67915,0xc67178f2,0xe372532b
 201         .WORD   0xca273ece,0xea26619c,0xd186b8c7,0x21c0c207
 202         .WORD   0xeada7dd6,0xcde0eb1e,0xf57d4f7f,0xee6ed178
 203         .WORD   0x06f067aa,0x72176fba,0x0a637dc5,0xa2c898a6
 204         .WORD   0x113f9804,0xbef90dae,0x1b710b35,0x131c471b
 205         .WORD   0x28db77f5,0x23047d84,0x32caab7b,0x40c72493
 206         .WORD   0x3c9ebe0a,0x15c9bebc,0x431d67c4,0x9c100d4c
 207         .WORD   0x4cc5d4be,0xcb3e42b6,0x597f299c,0xfc657e2a
 208         .WORD   0x5fcb6fab,0x3ad6faec,0x6c44198c,0x4a475817
 209 ___
 210 $code.=<<___ if ($SZ==4);
 211         .WORD   0x428a2f98,0x71374491,0xb5c0fbcf,0xe9b5dba5
 212         .WORD   0x3956c25b,0x59f111f1,0x923f82a4,0xab1c5ed5
 213         .WORD   0xd807aa98,0x12835b01,0x243185be,0x550c7dc3
 214         .WORD   0x72be5d74,0x80deb1fe,0x9bdc06a7,0xc19bf174
 215         .WORD   0xe49b69c1,0xefbe4786,0x0fc19dc6,0x240ca1cc
 216         .WORD   0x2de92c6f,0x4a7484aa,0x5cb0a9dc,0x76f988da
 217         .WORD   0x983e5152,0xa831c66d,0xb00327c8,0xbf597fc7
 218         .WORD   0xc6e00bf3,0xd5a79147,0x06ca6351,0x14292967
 219         .WORD   0x27b70a85,0x2e1b2138,0x4d2c6dfc,0x53380d13
 220         .WORD   0x650a7354,0x766a0abb,0x81c2c92e,0x92722c85
 221         .WORD   0xa2bfe8a1,0xa81a664b,0xc24b8b70,0xc76c51a3
 222         .WORD   0xd192e819,0xd6990624,0xf40e3585,0x106aa070
 223         .WORD   0x19a4c116,0x1e376c08,0x2748774c,0x34b0bcb5
 224         .WORD   0x391c0cb3,0x4ed8aa4a,0x5b9cca4f,0x682e6ff3
 225         .WORD   0x748f82ee,0x78a5636f,0x84c87814,0x8cc70208
 226         .WORD   0x90befffa,0xa4506ceb,0xbef9a3f7,0xc67178f2
 227 ___
 228 $code.=<<___;
 229
 230         .EXPORT $func,ENTRY,ARGW0=GR,ARGW1=GR,ARGW2=GR
 231         .ALIGN  64
 232 $func
 233         .PROC
 234         .CALLINFO       FRAME=`$FRAME-16*$SIZE_T`,NO_CALLS,SAVE_RP,ENTRY_GR=18
 235         .ENTRY
 236         $PUSH   %r2,-$SAVED_RP(%sp)     ; standard prologue
 237         $PUSHMA %r3,$FRAME(%sp)
 238         $PUSH   %r4,`-$FRAME+1*$SIZE_T`(%sp)
 239         $PUSH   %r5,`-$FRAME+2*$SIZE_T`(%sp)
 240         $PUSH   %r6,`-$FRAME+3*$SIZE_T`(%sp)
 241         $PUSH   %r7,`-$FRAME+4*$SIZE_T`(%sp)
 242         $PUSH   %r8,`-$FRAME+5*$SIZE_T`(%sp)
 243         $PUSH   %r9,`-$FRAME+6*$SIZE_T`(%sp)
 244         $PUSH   %r10,`-$FRAME+7*$SIZE_T`(%sp)
 245         $PUSH   %r11,`-$FRAME+8*$SIZE_T`(%sp)
 246         $PUSH   %r12,`-$FRAME+9*$SIZE_T`(%sp)
 247         $PUSH   %r13,`-$FRAME+10*$SIZE_T`(%sp)
 248         $PUSH   %r14,`-$FRAME+11*$SIZE_T`(%sp)
 249         $PUSH   %r15,`-$FRAME+12*$SIZE_T`(%sp)
 250         $PUSH   %r16,`-$FRAME+13*$SIZE_T`(%sp)
 251         $PUSH   %r17,`-$FRAME+14*$SIZE_T`(%sp)
 252         $PUSH   %r18,`-$FRAME+15*$SIZE_T`(%sp)
 253
 254         _shl    $num,`log(16*$SZ)/log(2)`,$num
 255         addl    $inp,$num,$num          ; $num to point at the end of $inp
 256
 257         $PUSH   $num,`-$FRAME_MARKER-4*$SIZE_T`(%sp)    ; save arguments
 258         $PUSH   $inp,`-$FRAME_MARKER-3*$SIZE_T`(%sp)
 259         $PUSH   $ctx,`-$FRAME_MARKER-2*$SIZE_T`(%sp)
 260
 261         blr     %r0,$Tbl
 262         ldi     3,$t1
 263 L\$pic
 264         andcm   $Tbl,$t1,$Tbl           ; wipe privilege level
 265         ldo     L\$table-L\$pic($Tbl),$Tbl
 266 ___
 267 $code.=<<___ if ($SZ==8 && $SIZE_T==4);
 268         ldi     31,$t1
 269         mtctl   $t1,%cr11
 270         extrd,u,*= $t1,%sar,1,$t1       ; executes on PA-RISC 1.0
 271         b       L\$parisc1
 272         nop
 273 ___
 274 $code.=<<___;
 275         $LD     `0*$SZ`($ctx),$A        ; load context
 276         $LD     `1*$SZ`($ctx),$B
 277         $LD     `2*$SZ`($ctx),$C
 278         $LD     `3*$SZ`($ctx),$D
 279         $LD     `4*$SZ`($ctx),$E
 280         $LD     `5*$SZ`($ctx),$F
 281         $LD     `6*$SZ`($ctx),$G
 282         $LD     `7*$SZ`($ctx),$H
 283
 284         extru   $inp,31,`log($SZ)/log(2)`,$t0
 285         sh3addl $t0,%r0,$t0
 286         subi    `8*$SZ`,$t0,$t0
 287         mtctl   $t0,%cr11               ; load %sar with align factor
 288
 289 L\$oop
 290         ldi     `$SZ-1`,$t0
 291         $LDM    $SZ($Tbl),$t1
 292         andcm   $inp,$t0,$t0            ; align $inp
 293 ___
 294         for ($i=0;$i<15;$i++) {         # load input block
 295         $code.="\t$LD   `$SZ*$i`($t0),@X[$i]\n";                }
 296 $code.=<<___;
 297         cmpb,*= $inp,$t0,L\$aligned
 298         $LD     `$SZ*15`($t0),@X[15]
 299         $LD     `$SZ*16`($t0),@X[16]
 300 ___
 301         for ($i=0;$i<16;$i++) {         # align data
 302         $code.="\t_align        @X[$i],@X[$i+1],@X[$i]\n";      }
 303 $code.=<<___;
 304 L\$aligned
 305         nop     ; otherwise /usr/ccs/bin/as is confused by below .WORD
 306 ___
 307
 308 for($i=0;$i<16;$i++)    { &ROUND_00_15($i,@V); unshift(@V,pop(@V)); }
 309 $code.=<<___;
 310 L\$rounds
 311         nop     ; otherwise /usr/ccs/bin/as is confused by below .WORD
 312 ___
 313 for(;$i<32;$i++)        { &ROUND_16_xx($i,@V); unshift(@V,pop(@V)); }
 314 $code.=<<___;
 315         bb,>=   $Tbl,31,L\$rounds       ; end of $Tbl signalled?
 316         nop
 317
 318         $POP    `-$FRAME_MARKER-2*$SIZE_T`(%sp),$ctx    ; restore arguments
 319         $POP    `-$FRAME_MARKER-3*$SIZE_T`(%sp),$inp
 320         $POP    `-$FRAME_MARKER-4*$SIZE_T`(%sp),$num
 321         ldo     `-$rounds*$SZ-1`($Tbl),$Tbl             ; rewind $Tbl
 322
 323         $LD     `0*$SZ`($ctx),@X[0]     ; load context
 324         $LD     `1*$SZ`($ctx),@X[1]
 325         $LD     `2*$SZ`($ctx),@X[2]
 326         $LD     `3*$SZ`($ctx),@X[3]
 327         $LD     `4*$SZ`($ctx),@X[4]
 328         $LD     `5*$SZ`($ctx),@X[5]
 329         addl    @X[0],$A,$A
 330         $LD     `6*$SZ`($ctx),@X[6]
 331         addl    @X[1],$B,$B
 332         $LD     `7*$SZ`($ctx),@X[7]
 333         ldo     `16*$SZ`($inp),$inp     ; advance $inp
 334
 335         $ST     $A,`0*$SZ`($ctx)        ; save context
 336         addl    @X[2],$C,$C
 337         $ST     $B,`1*$SZ`($ctx)
 338         addl    @X[3],$D,$D
 339         $ST     $C,`2*$SZ`($ctx)
 340         addl    @X[4],$E,$E
 341         $ST     $D,`3*$SZ`($ctx)
 342         addl    @X[5],$F,$F
 343         $ST     $E,`4*$SZ`($ctx)
 344         addl    @X[6],$G,$G
 345         $ST     $F,`5*$SZ`($ctx)
 346         addl    @X[7],$H,$H
 347         $ST     $G,`6*$SZ`($ctx)
 348         $ST     $H,`7*$SZ`($ctx)
 349
 350         cmpb,*<>,n $inp,$num,L\$oop
 351         $PUSH   $inp,`-$FRAME_MARKER-3*$SIZE_T`(%sp)    ; save $inp
 352 ___
 353 if ($SZ==8 && $SIZE_T==4)       # SHA512 for 32-bit PA-RISC 1.0
 354 {{
 355 $code.=<<___;
 356         b       L\$done
 357         nop
 358
 359         .ALIGN  64
 360 L\$parisc1
 361 ___
 362
 363 @V=(  $Ahi,  $Alo,  $Bhi,  $Blo,  $Chi,  $Clo,  $Dhi,  $Dlo,
 364       $Ehi,  $Elo,  $Fhi,  $Flo,  $Ghi,  $Glo,  $Hhi,  $Hlo) =
 365    ( "%r1", "%r2", "%r3", "%r4", "%r5", "%r6", "%r7", "%r8",
 366      "%r9","%r10","%r11","%r12","%r13","%r14","%r15","%r16");
 367 $a0 ="%r17";
 368 $a1 ="%r18";
 369 $a2 ="%r19";
 370 $a3 ="%r20";
 371 $t0 ="%r21";
 372 $t1 ="%r22";
 373 $t2 ="%r28";
 374 $t3 ="%r29";
 375 $Tbl="%r31";
 376
 377 @X=("%r23","%r24","%r25","%r26");       # zaps $num,$inp,$ctx
 378
 379 sub ROUND_00_15_pa1 {
 380 my ($i,$ahi,$alo,$bhi,$blo,$chi,$clo,$dhi,$dlo,
 381        $ehi,$elo,$fhi,$flo,$ghi,$glo,$hhi,$hlo,$flag)=@_;
 382 my ($Xhi,$Xlo,$Xnhi,$Xnlo) = @X;
 383
 384 $code.=<<___ if (!$flag);
 385         ldw     `-$XOFF+8*(($i+1)%16)`(%sp),$Xnhi
 386         ldw     `-$XOFF+8*(($i+1)%16)+4`(%sp),$Xnlo     ; load X[i+1]
 387 ___
 388 $code.=<<___;
 389         shd     $ehi,$elo,$Sigma1[0],$t0
 390          add    $Xlo,$hlo,$hlo
 391         shd     $elo,$ehi,$Sigma1[0],$t1
 392          addc   $Xhi,$hhi,$hhi          ; h += X[i]
 393         shd     $ehi,$elo,$Sigma1[1],$t2
 394          ldwm   8($Tbl),$Xhi
 395         shd     $elo,$ehi,$Sigma1[1],$t3
 396          ldw    -4($Tbl),$Xlo           ; load K[i]
 397         xor     $t2,$t0,$t0
 398         xor     $t3,$t1,$t1
 399          and    $flo,$elo,$a0
 400          and    $fhi,$ehi,$a1
 401         shd     $ehi,$elo,$Sigma1[2],$t2
 402          andcm  $glo,$elo,$a2
 403         shd     $elo,$ehi,$Sigma1[2],$t3
 404          andcm  $ghi,$ehi,$a3
 405         xor     $t2,$t0,$t0
 406         xor     $t3,$t1,$t1             ; Sigma1(e)
 407         add     $Xlo,$hlo,$hlo
 408          xor    $a2,$a0,$a0
 409         addc    $Xhi,$hhi,$hhi          ; h += K[i]
 410          xor    $a3,$a1,$a1             ; Ch(e,f,g)
 411
 412          add    $t0,$hlo,$hlo
 413         shd     $ahi,$alo,$Sigma0[0],$t0
 414          addc   $t1,$hhi,$hhi           ; h += Sigma1(e)
 415         shd     $alo,$ahi,$Sigma0[0],$t1
 416          add    $a0,$hlo,$hlo
 417         shd     $ahi,$alo,$Sigma0[1],$t2
 418          addc   $a1,$hhi,$hhi           ; h += Ch(e,f,g)
 419         shd     $alo,$ahi,$Sigma0[1],$t3
 420
 421         xor     $t2,$t0,$t0
 422         xor     $t3,$t1,$t1
 423         shd     $ahi,$alo,$Sigma0[2],$t2
 424         and     $alo,$blo,$a0
 425         shd     $alo,$ahi,$Sigma0[2],$t3
 426         and     $ahi,$bhi,$a1
 427         xor     $t2,$t0,$t0
 428         xor     $t3,$t1,$t1             ; Sigma0(a)
 429
 430         and     $alo,$clo,$a2
 431         and     $ahi,$chi,$a3
 432         xor     $a2,$a0,$a0
 433          add    $hlo,$dlo,$dlo
 434         xor     $a3,$a1,$a1
 435          addc   $hhi,$dhi,$dhi          ; d += h
 436         and     $blo,$clo,$a2
 437          add    $t0,$hlo,$hlo
 438         and     $bhi,$chi,$a3
 439          addc   $t1,$hhi,$hhi           ; h += Sigma0(a)
 440         xor     $a2,$a0,$a0
 441          add    $a0,$hlo,$hlo
 442         xor     $a3,$a1,$a1             ; Maj(a,b,c)
 443          addc   $a1,$hhi,$hhi           ; h += Maj(a,b,c)
 444
 445 ___
 446 $code.=<<___ if ($i==15 && $flag);
 447         extru   $Xlo,31,10,$Xlo
 448         comiclr,= $LAST10BITS,$Xlo,%r0
 449         b       L\$rounds_pa1
 450         nop
 451 ___
 452 push(@X,shift(@X)); push(@X,shift(@X));
 453 }
 454
 455 sub ROUND_16_xx_pa1 {
 456 my ($Xhi,$Xlo,$Xnhi,$Xnlo) = @X;
 457 my ($i)=shift;
 458 $i-=16;
 459 $code.=<<___;
 460         ldw     `-$XOFF+8*(($i+1)%16)`(%sp),$Xnhi
 461         ldw     `-$XOFF+8*(($i+1)%16)+4`(%sp),$Xnlo     ; load X[i+1]
 462         ldw     `-$XOFF+8*(($i+9)%16)`(%sp),$a1
 463         ldw     `-$XOFF+8*(($i+9)%16)+4`(%sp),$a0       ; load X[i+9]
 464         ldw     `-$XOFF+8*(($i+14)%16)`(%sp),$a3
 465         ldw     `-$XOFF+8*(($i+14)%16)+4`(%sp),$a2      ; load X[i+14]
 466         shd     $Xnhi,$Xnlo,$sigma0[0],$t0
 467         shd     $Xnlo,$Xnhi,$sigma0[0],$t1
 468          add    $a0,$Xlo,$Xlo
 469         shd     $Xnhi,$Xnlo,$sigma0[1],$t2
 470          addc   $a1,$Xhi,$Xhi
 471         shd     $Xnlo,$Xnhi,$sigma0[1],$t3
 472         xor     $t2,$t0,$t0
 473         shd     $Xnhi,$Xnlo,$sigma0[2],$t2
 474         xor     $t3,$t1,$t1
 475         extru   $Xnhi,`31-$sigma0[2]`,`32-$sigma0[2]`,$t3
 476         xor     $t2,$t0,$t0
 477          shd    $a3,$a2,$sigma1[0],$a0
 478         xor     $t3,$t1,$t1             ; sigma0(X[i+1)&0x0f])
 479          shd    $a2,$a3,$sigma1[0],$a1
 480         add     $t0,$Xlo,$Xlo
 481          shd    $a3,$a2,$sigma1[1],$t2
 482         addc    $t1,$Xhi,$Xhi
 483          shd    $a2,$a3,$sigma1[1],$t3
 484         xor     $t2,$a0,$a0
 485         shd     $a3,$a2,$sigma1[2],$t2
 486         xor     $t3,$a1,$a1
 487         extru   $a3,`31-$sigma1[2]`,`32-$sigma1[2]`,$t3
 488         xor     $t2,$a0,$a0
 489         xor     $t3,$a1,$a1             ; sigma0(X[i+14)&0x0f])
 490         add     $a0,$Xlo,$Xlo
 491         addc    $a1,$Xhi,$Xhi
 492
 493         stw     $Xhi,`-$XOFF+8*($i%16)`(%sp)
 494         stw     $Xlo,`-$XOFF+8*($i%16)+4`(%sp)
 495 ___
 496 &ROUND_00_15_pa1($i,@_,1);
 497 }
 498 $code.=<<___;
 499         ldw     `0*4`($ctx),$Ahi                ; load context
 500         ldw     `1*4`($ctx),$Alo
 501         ldw     `2*4`($ctx),$Bhi
 502         ldw     `3*4`($ctx),$Blo
 503         ldw     `4*4`($ctx),$Chi
 504         ldw     `5*4`($ctx),$Clo
 505         ldw     `6*4`($ctx),$Dhi
 506         ldw     `7*4`($ctx),$Dlo
 507         ldw     `8*4`($ctx),$Ehi
 508         ldw     `9*4`($ctx),$Elo
 509         ldw     `10*4`($ctx),$Fhi
 510         ldw     `11*4`($ctx),$Flo
 511         ldw     `12*4`($ctx),$Ghi
 512         ldw     `13*4`($ctx),$Glo
 513         ldw     `14*4`($ctx),$Hhi
 514         ldw     `15*4`($ctx),$Hlo
 515
 516         extru   $inp,31,2,$t0
 517         sh3addl $t0,%r0,$t0
 518         subi    32,$t0,$t0
 519         mtctl   $t0,%cr11               ; load %sar with align factor
 520
 521 L\$oop_pa1
 522         extru   $inp,31,2,$a3
 523         comib,= 0,$a3,L\$aligned_pa1
 524         sub     $inp,$a3,$inp
 525
 526         ldw     `0*4`($inp),$X[0]
 527         ldw     `1*4`($inp),$X[1]
 528         ldw     `2*4`($inp),$t2
 529         ldw     `3*4`($inp),$t3
 530         ldw     `4*4`($inp),$a0
 531         ldw     `5*4`($inp),$a1
 532         ldw     `6*4`($inp),$a2
 533         ldw     `7*4`($inp),$a3
 534         vshd    $X[0],$X[1],$X[0]
 535         vshd    $X[1],$t2,$X[1]
 536         stw     $X[0],`-$XOFF+0*4`(%sp)
 537         ldw     `8*4`($inp),$t0
 538         vshd    $t2,$t3,$t2
 539         stw     $X[1],`-$XOFF+1*4`(%sp)
 540         ldw     `9*4`($inp),$t1
 541         vshd    $t3,$a0,$t3
 542 ___
 543 {
 544 my @t=($t2,$t3,$a0,$a1,$a2,$a3,$t0,$t1);
 545 for ($i=2;$i<=(128/4-8);$i++) {
 546 $code.=<<___;
 547         stw     $t[0],`-$XOFF+$i*4`(%sp)
 548         ldw     `(8+$i)*4`($inp),$t[0]
 549         vshd    $t[1],$t[2],$t[1]
 550 ___
 551 push(@t,shift(@t));
 552 }
 553 for (;$i<(128/4-1);$i++) {
 554 $code.=<<___;
 555         stw     $t[0],`-$XOFF+$i*4`(%sp)
 556         vshd    $t[1],$t[2],$t[1]
 557 ___
 558 push(@t,shift(@t));
 559 }
 560 $code.=<<___;
 561         b       L\$collected_pa1
 562         stw     $t[0],`-$XOFF+$i*4`(%sp)
 563
 564 ___
 565 }
 566 $code.=<<___;
 567 L\$aligned_pa1
 568         ldw     `0*4`($inp),$X[0]
 569         ldw     `1*4`($inp),$X[1]
 570         ldw     `2*4`($inp),$t2
 571         ldw     `3*4`($inp),$t3
 572         ldw     `4*4`($inp),$a0
 573         ldw     `5*4`($inp),$a1
 574         ldw     `6*4`($inp),$a2
 575         ldw     `7*4`($inp),$a3
 576         stw     $X[0],`-$XOFF+0*4`(%sp)
 577         ldw     `8*4`($inp),$t0
 578         stw     $X[1],`-$XOFF+1*4`(%sp)
 579         ldw     `9*4`($inp),$t1
 580 ___
 581 {
 582 my @t=($t2,$t3,$a0,$a1,$a2,$a3,$t0,$t1);
 583 for ($i=2;$i<(128/4-8);$i++) {
 584 $code.=<<___;
 585         stw     $t[0],`-$XOFF+$i*4`(%sp)
 586         ldw     `(8+$i)*4`($inp),$t[0]
 587 ___
 588 push(@t,shift(@t));
 589 }
 590 for (;$i<128/4;$i++) {
 591 $code.=<<___;
 592         stw     $t[0],`-$XOFF+$i*4`(%sp)
 593 ___
 594 push(@t,shift(@t));
 595 }
 596 $code.="L\$collected_pa1\n";
 597 }
 598
 599 for($i=0;$i<16;$i++)    { &ROUND_00_15_pa1($i,@V); unshift(@V,pop(@V)); unshift(@V,pop(@V)); }
 600 $code.="L\$rounds_pa1\n";
 601 for(;$i<32;$i++)        { &ROUND_16_xx_pa1($i,@V); unshift(@V,pop(@V)); unshift(@V,pop(@V)); }
 602
 603 $code.=<<___;
 604         $POP    `-$FRAME_MARKER-2*$SIZE_T`(%sp),$ctx    ; restore arguments
 605         $POP    `-$FRAME_MARKER-3*$SIZE_T`(%sp),$inp
 606         $POP    `-$FRAME_MARKER-4*$SIZE_T`(%sp),$num
 607         ldo     `-$rounds*$SZ`($Tbl),$Tbl               ; rewind $Tbl
 608
 609         ldw     `0*4`($ctx),$t1         ; update context
 610         ldw     `1*4`($ctx),$t0
 611         ldw     `2*4`($ctx),$t3
 612         ldw     `3*4`($ctx),$t2
 613         ldw     `4*4`($ctx),$a1
 614         ldw     `5*4`($ctx),$a0
 615         ldw     `6*4`($ctx),$a3
 616         add     $t0,$Alo,$Alo
 617         ldw     `7*4`($ctx),$a2
 618         addc    $t1,$Ahi,$Ahi
 619         ldw     `8*4`($ctx),$t1
 620         add     $t2,$Blo,$Blo
 621         ldw     `9*4`($ctx),$t0
 622         addc    $t3,$Bhi,$Bhi
 623         ldw     `10*4`($ctx),$t3
 624         add     $a0,$Clo,$Clo
 625         ldw     `11*4`($ctx),$t2
 626         addc    $a1,$Chi,$Chi
 627         ldw     `12*4`($ctx),$a1
 628         add     $a2,$Dlo,$Dlo
 629         ldw     `13*4`($ctx),$a0
 630         addc    $a3,$Dhi,$Dhi
 631         ldw     `14*4`($ctx),$a3
 632         add     $t0,$Elo,$Elo
 633         ldw     `15*4`($ctx),$a2
 634         addc    $t1,$Ehi,$Ehi
 635         stw     $Ahi,`0*4`($ctx)
 636         add     $t2,$Flo,$Flo
 637         stw     $Alo,`1*4`($ctx)
 638         addc    $t3,$Fhi,$Fhi
 639         stw     $Bhi,`2*4`($ctx)
 640         add     $a0,$Glo,$Glo
 641         stw     $Blo,`3*4`($ctx)
 642         addc    $a1,$Ghi,$Ghi
 643         stw     $Chi,`4*4`($ctx)
 644         add     $a2,$Hlo,$Hlo
 645         stw     $Clo,`5*4`($ctx)
 646         addc    $a3,$Hhi,$Hhi
 647         stw     $Dhi,`6*4`($ctx)
 648         ldo     `16*$SZ`($inp),$inp     ; advance $inp
 649         stw     $Dlo,`7*4`($ctx)
 650         stw     $Ehi,`8*4`($ctx)
 651         stw     $Elo,`9*4`($ctx)
 652         stw     $Fhi,`10*4`($ctx)
 653         stw     $Flo,`11*4`($ctx)
 654         stw     $Ghi,`12*4`($ctx)
 655         stw     $Glo,`13*4`($ctx)
 656         stw     $Hhi,`14*4`($ctx)
 657         comb,=  $inp,$num,L\$done
 658         stw     $Hlo,`15*4`($ctx)
 659         b       L\$oop_pa1
 660         $PUSH   $inp,`-$FRAME_MARKER-3*$SIZE_T`(%sp)    ; save $inp
 661 L\$done
 662 ___
 663 }}
 664 $code.=<<___;
 665         $POP    `-$FRAME-$SAVED_RP`(%sp),%r2            ; standard epilogue
 666         $POP    `-$FRAME+1*$SIZE_T`(%sp),%r4
 667         $POP    `-$FRAME+2*$SIZE_T`(%sp),%r5
 668         $POP    `-$FRAME+3*$SIZE_T`(%sp),%r6
 669         $POP    `-$FRAME+4*$SIZE_T`(%sp),%r7
 670         $POP    `-$FRAME+5*$SIZE_T`(%sp),%r8
 671         $POP    `-$FRAME+6*$SIZE_T`(%sp),%r9
 672         $POP    `-$FRAME+7*$SIZE_T`(%sp),%r10
 673         $POP    `-$FRAME+8*$SIZE_T`(%sp),%r11
 674         $POP    `-$FRAME+9*$SIZE_T`(%sp),%r12
 675         $POP    `-$FRAME+10*$SIZE_T`(%sp),%r13
 676         $POP    `-$FRAME+11*$SIZE_T`(%sp),%r14
 677         $POP    `-$FRAME+12*$SIZE_T`(%sp),%r15
 678         $POP    `-$FRAME+13*$SIZE_T`(%sp),%r16
 679         $POP    `-$FRAME+14*$SIZE_T`(%sp),%r17
 680         $POP    `-$FRAME+15*$SIZE_T`(%sp),%r18
 681         bv      (%r2)
 682         .EXIT
 683         $POPMB  -$FRAME(%sp),%r3
 684         .PROCEND
 685         .STRINGZ "SHA`64*$SZ` block transform for PA-RISC, CRYPTOGAMS by <appro\@openssl.org>"
 686 ___
 687
 688 # Explicitly encode PA-RISC 2.0 instructions used in this module, so
 689 # that it can be compiled with .LEVEL 1.0. It should be noted that I
 690 # wouldn't have to do this, if GNU assembler understood .ALLOW 2.0
 691 # directive...
 692
 693 my $ldd = sub {
 694   my ($mod,$args) = @_;
 695   my $orig = "ldd$mod\t$args";
 696
 697     if ($args =~ /(\-?[0-9]+)\(%r([0-9]+)\),%r([0-9]+)/) # format 3 suffices
 698     {   my $opcode=(0x14<<26)|($2<<21)|($3<<16)|(($1&0x1FF8)<<1)|(($1>>13)&1);
 699         $opcode|=(1<<3) if ($mod =~ /^,m/);
 700         $opcode|=(1<<2) if ($mod =~ /^,mb/);
 701         sprintf "\t.WORD\t0x%08x\t; %s",$opcode,$orig;
 702     }
 703     else { "\t".$orig; }
 704 };
 705
 706 my $std = sub {
 707   my ($mod,$args) = @_;
 708   my $orig = "std$mod\t$args";
 709
 710     if ($args =~ /%r([0-9]+),(\-?[0-9]+)\(%r([0-9]+)\)/) # format 3 suffices
 711     {   my $opcode=(0x1c<<26)|($3<<21)|($1<<16)|(($2&0x1FF8)<<1)|(($2>>13)&1);
 712         sprintf "\t.WORD\t0x%08x\t; %s",$opcode,$orig;
 713     }
 714     else { "\t".$orig; }
 715 };
 716
 717 my $extrd = sub {
 718   my ($mod,$args) = @_;
 719   my $orig = "extrd$mod\t$args";
 720
 721     # I only have ",u" completer, it's implicitly encoded...
 722     if ($args =~ /%r([0-9]+),([0-9]+),([0-9]+),%r([0-9]+)/)     # format 15
 723     {   my $opcode=(0x36<<26)|($1<<21)|($4<<16);
 724         my $len=32-$3;
 725         $opcode |= (($2&0x20)<<6)|(($2&0x1f)<<5);               # encode pos
 726         $opcode |= (($len&0x20)<<7)|($len&0x1f);                # encode len
 727         sprintf "\t.WORD\t0x%08x\t; %s",$opcode,$orig;
 728     }
 729     elsif ($args =~ /%r([0-9]+),%sar,([0-9]+),%r([0-9]+)/)      # format 12
 730     {   my $opcode=(0x34<<26)|($1<<21)|($3<<16)|(2<<11)|(1<<9);
 731         my $len=32-$2;
 732         $opcode |= (($len&0x20)<<3)|($len&0x1f);                # encode len
 733         $opcode |= (1<<13) if ($mod =~ /,\**=/);
 734         sprintf "\t.WORD\t0x%08x\t; %s",$opcode,$orig;
 735     }
 736     else { "\t".$orig; }
 737 };
 738
 739 my $shrpd = sub {
 740   my ($mod,$args) = @_;
 741   my $orig = "shrpd$mod\t$args";
 742
 743     if ($args =~ /%r([0-9]+),%r([0-9]+),([0-9]+),%r([0-9]+)/)   # format 14
 744     {   my $opcode=(0x34<<26)|($2<<21)|($1<<16)|(1<<10)|$4;
 745         my $cpos=63-$3;
 746         $opcode |= (($cpos&0x20)<<6)|(($cpos&0x1f)<<5);         # encode sa
 747         sprintf "\t.WORD\t0x%08x\t; %s",$opcode,$orig;
 748     }
 749     elsif ($args =~ /%r([0-9]+),%r([0-9]+),%sar,%r([0-9]+)/)    # format 11
 750     {   sprintf "\t.WORD\t0x%08x\t; %s",
 751                 (0x34<<26)|($2<<21)|($1<<16)|(1<<9)|$3,$orig;
 752     }
 753     else { "\t".$orig; }
 754 };
 755
 756 sub assemble {
 757   my ($mnemonic,$mod,$args)=@_;
 758   my $opcode = eval("\$$mnemonic");
 759
 760     ref($opcode) eq 'CODE' ? &$opcode($mod,$args) : "\t$mnemonic$mod\t$args";
 761 }
 762
 763 foreach (split("\n",$code)) {
 764         s/\`([^\`]*)\`/eval $1/ge;
 765
 766         s/shd\s+(%r[0-9]+),(%r[0-9]+),([0-9]+)/
 767                 $3>31 ? sprintf("shd\t%$2,%$1,%d",$3-32)        # rotation for >=32
 768                 :       sprintf("shd\t%$1,%$2,%d",$3)/e                 or
 769         # translate made up instructons: _ror, _shr, _align, _shl
 770         s/_ror(\s+)(%r[0-9]+),/
 771                 ($SZ==4 ? "shd" : "shrpd")."$1$2,$2,"/e                 or
 772
 773         s/_shr(\s+%r[0-9]+),([0-9]+),/
 774                 $SZ==4 ? sprintf("extru%s,%d,%d,",$1,31-$2,32-$2)
 775                 :        sprintf("extrd,u%s,%d,%d,",$1,63-$2,64-$2)/e   or
 776
 777         s/_align(\s+%r[0-9]+,%r[0-9]+),/
 778                 ($SZ==4 ? "vshd$1," : "shrpd$1,%sar,")/e                or
 779
 780         s/_shl(\s+%r[0-9]+),([0-9]+),/
 781                 $SIZE_T==4 ? sprintf("zdep%s,%d,%d,",$1,31-$2,32-$2)
 782                 :            sprintf("depd,z%s,%d,%d,",$1,63-$2,64-$2)/e;
 783
 784         s/^\s+([a-z]+)([\S]*)\s+([\S]*)/&assemble($1,$2,$3)/e if ($SIZE_T==4);
 785
 786         s/cmpb,\*/comb,/ if ($SIZE_T==4);
 787
 788         print $_,"\n";
 789 }
 790
 791 close STDOUT;