Avoid creating an illegal pointer
[openssl.git] / crypto / bn / asm / ppc64-mont.pl
index 3449b35855da3c6b0df48b8c5660f42aba7d2869..1e19c958a16f108db25119f2849d278573f065bc 100644 (file)
@@ -1,7 +1,14 @@
-#!/usr/bin/env perl
+#! /usr/bin/env perl
+# Copyright 2007-2016 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
 
 # ====================================================================
-# Written by Andy Polyakov <appro@fy.chalmers.se> for the OpenSSL
+# Written by Andy Polyakov <appro@openssl.org> for the OpenSSL
 # project. The module is, however, dual licensed under OpenSSL and
 # CRYPTOGAMS licenses depending on where you obtain it. For further
 # details see http://www.openssl.org/~appro/cryptogams/.
 # on 1.8GHz PPC970, it's only 5-55% faster. Still far from impressive
 # in absolute terms, but it's apparently the way Power 6 is...
 
+# December 2009
+
+# Adapted for 32-bit build this module delivers 25-120%, yes, more
+# than *twice* for longer keys, performance improvement over 32-bit
+# ppc-mont.pl on 1.8GHz PPC970. However! This implementation utilizes
+# even 64-bit integer operations and the trouble is that most PPC
+# operating systems don't preserve upper halves of general purpose
+# registers upon 32-bit signal delivery. They do preserve them upon
+# context switch, but not signalling:-( This means that asynchronous
+# signals have to be blocked upon entry to this subroutine. Signal
+# masking (and of course complementary unmasking) has quite an impact
+# on performance, naturally larger for shorter keys. It's so severe
+# that 512-bit key performance can be as low as 1/3 of expected one.
+# This is why this routine can be engaged for longer key operations
+# only on these OSes, see crypto/ppccap.c for further details. MacOS X
+# is an exception from this and doesn't require signal masking, and
+# that's where above improvement coefficients were collected. For
+# others alternative would be to break dependence on upper halves of
+# GPRs by sticking to 32-bit integer operations...
+
+# December 2012
+
+# Remove above mentioned dependence on GPRs' upper halves in 32-bit
+# build. No signal masking overhead, but integer instructions are
+# *more* numerous... It's still "universally" faster than 32-bit
+# ppc-mont.pl, but improvement coefficient is not as impressive
+# for longer keys...
+
 $flavour = shift;
 
 if ($flavour =~ /32/) {
        $SIZE_T=4;
        $RZONE= 224;
-       $FRAME= $SIZE_T*12+8*12;
-       $fname= "bn_mul_mont_ppc64";
+       $fname= "bn_mul_mont_fpu64";
 
        $STUX=  "stwux";        # store indexed and update
        $PUSH=  "stw";
        $POP=   "lwz";
-       die "not implemented yet";
 } elsif ($flavour =~ /64/) {
        $SIZE_T=8;
        $RZONE= 288;
-       $FRAME= $SIZE_T*12+8*12;
-       $fname= "bn_mul_mont";
+       $fname= "bn_mul_mont_fpu64";
 
        # same as above, but 64-bit mnemonics...
        $STUX=  "stdux";        # store indexed and update
@@ -69,6 +101,8 @@ if ($flavour =~ /32/) {
        $POP=   "ld";
 } else { die "nonsense $flavour"; }
 
+$LITTLE_ENDIAN = ($flavour=~/le$/) ? 4 : 0;
+
 $0 =~ m/(.*[\/\\])[^\/\\]+$/; $dir=$1;
 ( $xlate="${dir}ppc-xlate.pl" and -f $xlate ) or
 ( $xlate="${dir}../../perlasm/ppc-xlate.pl" and -f $xlate) or
@@ -76,7 +110,7 @@ die "can't locate ppc-xlate.pl";
 
 open STDOUT,"| $^X $xlate $flavour ".shift || die "can't call $xlate: $!";
 
-$FRAME=($FRAME+63)&~63;
+$FRAME=64;     # padded frame header
 $TRANSFER=16*8;
 
 $carry="r0";
@@ -93,16 +127,19 @@ $tp="r10";
 $j="r11";
 $i="r12";
 # non-volatile registers
-$nap_d="r14";  # interleaved ap and np in double format
-$a0="r15";     # ap[0]
-$t0="r16";     # temporary registers
-$t1="r17";
-$t2="r18";
-$t3="r19";
-$t4="r20";
-$t5="r21";
-$t6="r22";
-$t7="r23";
+$c1="r19";
+$n1="r20";
+$a1="r21";
+$nap_d="r22";  # interleaved ap and np in double format
+$a0="r23";     # ap[0]
+$t0="r24";     # temporary registers
+$t1="r25";
+$t2="r26";
+$t3="r27";
+$t4="r28";
+$t5="r29";
+$t6="r30";
+$t7="r31";
 
 # PPC offers enough register bank capacity to unroll inner loops twice
 #
@@ -132,28 +169,17 @@ $ba="f0"; $bb="f1";       $bc="f2";       $bd="f3";
 $na="f4";      $nb="f5";       $nc="f6";       $nd="f7";
 $dota="f8";    $dotb="f9";
 $A0="f10";     $A1="f11";      $A2="f12";      $A3="f13";
-$N0="f14";     $N1="f15";      $N2="f16";      $N3="f17";
-$T0a="f18";    $T0b="f19";
-$T1a="f20";    $T1b="f21";
-$T2a="f22";    $T2b="f23";
-$T3a="f24";    $T3b="f25";
+$N0="f20";     $N1="f21";      $N2="f22";      $N3="f23";
+$T0a="f24";    $T0b="f25";
+$T1a="f26";    $T1b="f27";
+$T2a="f28";    $T2b="f29";
+$T3a="f30";    $T3b="f31";
 \f
 # sp----------->+-------------------------------+
 #              | saved sp                      |
 #              +-------------------------------+
-#              |                               |
-#              +-------------------------------+
-#              | 10 saved gpr, r14-r23         |
-#              .                               .
-#              .                               .
-#   +12*size_t +-------------------------------+
-#              | 12 saved fpr, f14-f25         |
-#              .                               .
 #              .                               .
-#   +12*8      +-------------------------------+
-#              | padding to 64 byte boundary   |
-#              .                               .
-#   +X         +-------------------------------+
+#   +64                +-------------------------------+
 #              | 16 gpr<->fpr transfer zone    |
 #              .                               .
 #              .                               .
@@ -173,6 +199,16 @@ $T3a="f24";        $T3b="f25";
 #              .                               .
 #              .                               .
 #              +-------------------------------+
+#              .                               .
+#   -13*size_t +-------------------------------+
+#              | 13 saved gpr, r19-r31         |
+#              .                               .
+#              .                               .
+#   -12*8      +-------------------------------+
+#              | 12 saved fpr, f20-f31         |
+#              .                               .
+#              .                               .
+#              +-------------------------------+
 \f
 $code=<<___;
 .machine "any"
@@ -181,14 +217,14 @@ $code=<<___;
 .globl .$fname
 .align 5
 .$fname:
-       cmpwi   $num,4
+       cmpwi   $num,`3*8/$SIZE_T`
        mr      $rp,r3          ; $rp is reassigned
        li      r3,0            ; possible "not handled" return code
        bltlr-
-       andi.   r0,$num,1       ; $num has to be even
+       andi.   r0,$num,`16/$SIZE_T-1`          ; $num has to be "even"
        bnelr-
 
-       slwi    $num,$num,3     ; num*=8
+       slwi    $num,$num,`log($SIZE_T)/log(2)` ; num*=sizeof(BN_LONG)
        li      $i,-4096
        slwi    $tp,$num,2      ; place for {an}p_{lh}[num], i.e. 4*num
        add     $tp,$tp,$num    ; place for tp[num+1]
@@ -196,50 +232,54 @@ $code=<<___;
        subf    $tp,$tp,$sp     ; $sp-$tp
        and     $tp,$tp,$i      ; minimize TLB usage
        subf    $tp,$sp,$tp     ; $tp-$sp
+       mr      $i,$sp
        $STUX   $sp,$sp,$tp     ; alloca
 
-       $PUSH   r14,`2*$SIZE_T`($sp)
-       $PUSH   r15,`3*$SIZE_T`($sp)
-       $PUSH   r16,`4*$SIZE_T`($sp)
-       $PUSH   r17,`5*$SIZE_T`($sp)
-       $PUSH   r18,`6*$SIZE_T`($sp)
-       $PUSH   r19,`7*$SIZE_T`($sp)
-       $PUSH   r20,`8*$SIZE_T`($sp)
-       $PUSH   r21,`9*$SIZE_T`($sp)
-       $PUSH   r22,`10*$SIZE_T`($sp)
-       $PUSH   r23,`11*$SIZE_T`($sp)
-       stfd    f14,`12*$SIZE_T+0`($sp)
-       stfd    f15,`12*$SIZE_T+8`($sp)
-       stfd    f16,`12*$SIZE_T+16`($sp)
-       stfd    f17,`12*$SIZE_T+24`($sp)
-       stfd    f18,`12*$SIZE_T+32`($sp)
-       stfd    f19,`12*$SIZE_T+40`($sp)
-       stfd    f20,`12*$SIZE_T+48`($sp)
-       stfd    f21,`12*$SIZE_T+56`($sp)
-       stfd    f22,`12*$SIZE_T+64`($sp)
-       stfd    f23,`12*$SIZE_T+72`($sp)
-       stfd    f24,`12*$SIZE_T+80`($sp)
-       stfd    f25,`12*$SIZE_T+88`($sp)
-
-       ld      $a0,0($ap)      ; pull ap[0] value
-       ld      $n0,0($n0)      ; pull n0[0] value
-       ld      $t3,0($bp)      ; bp[0]
+       $PUSH   r19,`-12*8-13*$SIZE_T`($i)
+       $PUSH   r20,`-12*8-12*$SIZE_T`($i)
+       $PUSH   r21,`-12*8-11*$SIZE_T`($i)
+       $PUSH   r22,`-12*8-10*$SIZE_T`($i)
+       $PUSH   r23,`-12*8-9*$SIZE_T`($i)
+       $PUSH   r24,`-12*8-8*$SIZE_T`($i)
+       $PUSH   r25,`-12*8-7*$SIZE_T`($i)
+       $PUSH   r26,`-12*8-6*$SIZE_T`($i)
+       $PUSH   r27,`-12*8-5*$SIZE_T`($i)
+       $PUSH   r28,`-12*8-4*$SIZE_T`($i)
+       $PUSH   r29,`-12*8-3*$SIZE_T`($i)
+       $PUSH   r30,`-12*8-2*$SIZE_T`($i)
+       $PUSH   r31,`-12*8-1*$SIZE_T`($i)
+       stfd    f20,`-12*8`($i)
+       stfd    f21,`-11*8`($i)
+       stfd    f22,`-10*8`($i)
+       stfd    f23,`-9*8`($i)
+       stfd    f24,`-8*8`($i)
+       stfd    f25,`-7*8`($i)
+       stfd    f26,`-6*8`($i)
+       stfd    f27,`-5*8`($i)
+       stfd    f28,`-4*8`($i)
+       stfd    f29,`-3*8`($i)
+       stfd    f30,`-2*8`($i)
+       stfd    f31,`-1*8`($i)
 
        addi    $tp,$sp,`$FRAME+$TRANSFER+8+64`
        li      $i,-64
        add     $nap_d,$tp,$num
        and     $nap_d,$nap_d,$i        ; align to 64 bytes
-\f
-       mulld   $t7,$a0,$t3     ; ap[0]*bp[0]
        ; nap_d is off by 1, because it's used with stfdu/lfdu
        addi    $nap_d,$nap_d,-8
        srwi    $j,$num,`3+1`   ; counter register, num/2
-       mulld   $t7,$t7,$n0     ; tp[0]*n0
        addi    $j,$j,-1
        addi    $tp,$sp,`$FRAME+$TRANSFER-8`
        li      $carry,0
        mtctr   $j
+___
+\f
+$code.=<<___ if ($SIZE_T==8);
+       ld      $a0,0($ap)              ; pull ap[0] value
+       ld      $t3,0($bp)              ; bp[0]
+       ld      $n0,0($n0)              ; pull n0[0] value
 
+       mulld   $t7,$a0,$t3             ; ap[0]*bp[0]
        ; transfer bp[0] to FPU as 4x16-bit values
        extrdi  $t0,$t3,16,48
        extrdi  $t1,$t3,16,32
@@ -249,6 +289,8 @@ $code=<<___;
        std     $t1,`$FRAME+8`($sp)
        std     $t2,`$FRAME+16`($sp)
        std     $t3,`$FRAME+24`($sp)
+
+       mulld   $t7,$t7,$n0             ; tp[0]*n0
        ; transfer (ap[0]*bp[0])*n0 to FPU as 4x16-bit values
        extrdi  $t4,$t7,16,48
        extrdi  $t5,$t7,16,32
@@ -258,14 +300,68 @@ $code=<<___;
        std     $t5,`$FRAME+40`($sp)
        std     $t6,`$FRAME+48`($sp)
        std     $t7,`$FRAME+56`($sp)
-       lwz     $t0,4($ap)              ; load a[j] as 32-bit word pair
-       lwz     $t1,0($ap)
-       lwz     $t2,12($ap)             ; load a[j+1] as 32-bit word pair
-       lwz     $t3,8($ap)
-       lwz     $t4,4($np)              ; load n[j] as 32-bit word pair
-       lwz     $t5,0($np)
-       lwz     $t6,12($np)             ; load n[j+1] as 32-bit word pair
-       lwz     $t7,8($np)
+
+       extrdi  $t0,$a0,32,32           ; lwz   $t0,4($ap)
+       extrdi  $t1,$a0,32,0            ; lwz   $t1,0($ap)
+       lwz     $t2,`12^$LITTLE_ENDIAN`($ap)    ; load a[1] as 32-bit word pair
+       lwz     $t3,`8^$LITTLE_ENDIAN`($ap)
+       lwz     $t4,`4^$LITTLE_ENDIAN`($np)     ; load n[0] as 32-bit word pair
+       lwz     $t5,`0^$LITTLE_ENDIAN`($np)
+       lwz     $t6,`12^$LITTLE_ENDIAN`($np)    ; load n[1] as 32-bit word pair
+       lwz     $t7,`8^$LITTLE_ENDIAN`($np)
+___
+$code.=<<___ if ($SIZE_T==4);
+       lwz     $a0,0($ap)              ; pull ap[0,1] value
+       mr      $n1,$n0
+       lwz     $a1,4($ap)
+       li      $c1,0
+       lwz     $t1,0($bp)              ; bp[0,1]
+       lwz     $t3,4($bp)
+       lwz     $n0,0($n1)              ; pull n0[0,1] value
+       lwz     $n1,4($n1)
+
+       mullw   $t4,$a0,$t1             ; mulld ap[0]*bp[0]
+       mulhwu  $t5,$a0,$t1
+       mullw   $t6,$a1,$t1
+       mullw   $t7,$a0,$t3
+       add     $t5,$t5,$t6
+       add     $t5,$t5,$t7
+       ; transfer bp[0] to FPU as 4x16-bit values
+       extrwi  $t0,$t1,16,16
+       extrwi  $t1,$t1,16,0
+       extrwi  $t2,$t3,16,16
+       extrwi  $t3,$t3,16,0
+       std     $t0,`$FRAME+0`($sp)     ; yes, std in 32-bit build
+       std     $t1,`$FRAME+8`($sp)
+       std     $t2,`$FRAME+16`($sp)
+       std     $t3,`$FRAME+24`($sp)
+
+       mullw   $t0,$t4,$n0             ; mulld tp[0]*n0
+       mulhwu  $t1,$t4,$n0
+       mullw   $t2,$t5,$n0
+       mullw   $t3,$t4,$n1
+       add     $t1,$t1,$t2
+       add     $t1,$t1,$t3
+       ; transfer (ap[0]*bp[0])*n0 to FPU as 4x16-bit values
+       extrwi  $t4,$t0,16,16
+       extrwi  $t5,$t0,16,0
+       extrwi  $t6,$t1,16,16
+       extrwi  $t7,$t1,16,0
+       std     $t4,`$FRAME+32`($sp)    ; yes, std in 32-bit build
+       std     $t5,`$FRAME+40`($sp)
+       std     $t6,`$FRAME+48`($sp)
+       std     $t7,`$FRAME+56`($sp)
+
+       mr      $t0,$a0                 ; lwz   $t0,0($ap)
+       mr      $t1,$a1                 ; lwz   $t1,4($ap)
+       lwz     $t2,8($ap)              ; load a[j..j+3] as 32-bit word pairs
+       lwz     $t3,12($ap)
+       lwz     $t4,0($np)              ; load n[j..j+3] as 32-bit word pairs
+       lwz     $t5,4($np)
+       lwz     $t6,8($np)
+       lwz     $t7,12($np)
+___
+$code.=<<___;
        lfd     $ba,`$FRAME+0`($sp)
        lfd     $bb,`$FRAME+8`($sp)
        lfd     $bc,`$FRAME+16`($sp)
@@ -274,7 +370,7 @@ $code=<<___;
        lfd     $nb,`$FRAME+40`($sp)
        lfd     $nc,`$FRAME+48`($sp)
        lfd     $nd,`$FRAME+56`($sp)
-       std     $t0,`$FRAME+64`($sp)
+       std     $t0,`$FRAME+64`($sp)    ; yes, std even in 32-bit build
        std     $t1,`$FRAME+72`($sp)
        std     $t2,`$FRAME+80`($sp)
        std     $t3,`$FRAME+88`($sp)
@@ -374,15 +470,29 @@ $code=<<___;
 \f
 .align 5
 L1st:
-       lwz     $t0,4($ap)              ; load a[j] as 32-bit word pair
-       lwz     $t1,0($ap)
-       lwz     $t2,12($ap)             ; load a[j+1] as 32-bit word pair
-       lwz     $t3,8($ap)
-       lwz     $t4,4($np)              ; load n[j] as 32-bit word pair
-       lwz     $t5,0($np)
-       lwz     $t6,12($np)             ; load n[j+1] as 32-bit word pair
-       lwz     $t7,8($np)
-       std     $t0,`$FRAME+64`($sp)
+___
+$code.=<<___ if ($SIZE_T==8);
+       lwz     $t0,`4^$LITTLE_ENDIAN`($ap)     ; load a[j] as 32-bit word pair
+       lwz     $t1,`0^$LITTLE_ENDIAN`($ap)
+       lwz     $t2,`12^$LITTLE_ENDIAN`($ap)    ; load a[j+1] as 32-bit word pair
+       lwz     $t3,`8^$LITTLE_ENDIAN`($ap)
+       lwz     $t4,`4^$LITTLE_ENDIAN`($np)     ; load n[j] as 32-bit word pair
+       lwz     $t5,`0^$LITTLE_ENDIAN`($np)
+       lwz     $t6,`12^$LITTLE_ENDIAN`($np)    ; load n[j+1] as 32-bit word pair
+       lwz     $t7,`8^$LITTLE_ENDIAN`($np)
+___
+$code.=<<___ if ($SIZE_T==4);
+       lwz     $t0,0($ap)              ; load a[j..j+3] as 32-bit word pairs
+       lwz     $t1,4($ap)
+       lwz     $t2,8($ap)
+       lwz     $t3,12($ap)
+       lwz     $t4,0($np)              ; load n[j..j+3] as 32-bit word pairs
+       lwz     $t5,4($np)
+       lwz     $t6,8($np)
+       lwz     $t7,12($np)
+___
+$code.=<<___;
+       std     $t0,`$FRAME+64`($sp)    ; yes, std even in 32-bit build
        std     $t1,`$FRAME+72`($sp)
        std     $t2,`$FRAME+80`($sp)
        std     $t3,`$FRAME+88`($sp)
@@ -390,6 +500,9 @@ L1st:
        std     $t5,`$FRAME+104`($sp)
        std     $t6,`$FRAME+112`($sp)
        std     $t7,`$FRAME+120`($sp)
+___
+if ($SIZE_T==8 or $flavour =~ /osx/) {
+$code.=<<___;
        ld      $t0,`$FRAME+0`($sp)
        ld      $t1,`$FRAME+8`($sp)
        ld      $t2,`$FRAME+16`($sp)
@@ -398,6 +511,20 @@ L1st:
        ld      $t5,`$FRAME+40`($sp)
        ld      $t6,`$FRAME+48`($sp)
        ld      $t7,`$FRAME+56`($sp)
+___
+} else {
+$code.=<<___;
+       lwz     $t1,`$FRAME+0^$LITTLE_ENDIAN`($sp)
+       lwz     $t0,`$FRAME+4^$LITTLE_ENDIAN`($sp)
+       lwz     $t3,`$FRAME+8^$LITTLE_ENDIAN`($sp)
+       lwz     $t2,`$FRAME+12^$LITTLE_ENDIAN`($sp)
+       lwz     $t5,`$FRAME+16^$LITTLE_ENDIAN`($sp)
+       lwz     $t4,`$FRAME+20^$LITTLE_ENDIAN`($sp)
+       lwz     $t7,`$FRAME+24^$LITTLE_ENDIAN`($sp)
+       lwz     $t6,`$FRAME+28^$LITTLE_ENDIAN`($sp)
+___
+}
+$code.=<<___;
        lfd     $A0,`$FRAME+64`($sp)
        lfd     $A1,`$FRAME+72`($sp)
        lfd     $A2,`$FRAME+80`($sp)
@@ -429,7 +556,9 @@ L1st:
        fmadd   $T0b,$A0,$bb,$dotb
        stfd    $A2,24($nap_d)          ; save a[j+1] in double format
        stfd    $A3,32($nap_d)
-
+___
+if ($SIZE_T==8 or $flavour =~ /osx/) {
+$code.=<<___;
        fmadd   $T1a,$A0,$bc,$T1a
        fmadd   $T1b,$A0,$bd,$T1b
        fmadd   $T2a,$A1,$bc,$T2a
@@ -502,11 +631,123 @@ L1st:
        stfd    $T3b,`$FRAME+56`($sp)
         std    $t0,8($tp)              ; tp[j-1]
         stdu   $t4,16($tp)             ; tp[j]
-       bdnz-   L1st
+___
+} else {
+$code.=<<___;
+       fmadd   $T1a,$A0,$bc,$T1a
+       fmadd   $T1b,$A0,$bd,$T1b
+        addc   $t0,$t0,$carry
+        adde   $t1,$t1,$c1
+        srwi   $carry,$t0,16
+       fmadd   $T2a,$A1,$bc,$T2a
+       fmadd   $T2b,$A1,$bd,$T2b
+       stfd    $N0,40($nap_d)          ; save n[j] in double format
+       stfd    $N1,48($nap_d)
+        srwi   $c1,$t1,16
+        insrwi $carry,$t1,16,0
+       fmadd   $T3a,$A2,$bc,$T3a
+       fmadd   $T3b,$A2,$bd,$T3b
+        addc   $t2,$t2,$carry
+        adde   $t3,$t3,$c1
+        srwi   $carry,$t2,16
+       fmul    $dota,$A3,$bc
+       fmul    $dotb,$A3,$bd
+       stfd    $N2,56($nap_d)          ; save n[j+1] in double format
+       stfdu   $N3,64($nap_d)
+        insrwi $t0,$t2,16,0            ; 0..31 bits
+        srwi   $c1,$t3,16
+        insrwi $carry,$t3,16,0
+
+       fmadd   $T1a,$N1,$na,$T1a
+       fmadd   $T1b,$N1,$nb,$T1b
+        lwz    $t3,`$FRAME+32^$LITTLE_ENDIAN`($sp)     ; permuted $t1
+        lwz    $t2,`$FRAME+36^$LITTLE_ENDIAN`($sp)     ; permuted $t0
+        addc   $t4,$t4,$carry
+        adde   $t5,$t5,$c1
+        srwi   $carry,$t4,16
+       fmadd   $T2a,$N2,$na,$T2a
+       fmadd   $T2b,$N2,$nb,$T2b
+        srwi   $c1,$t5,16
+        insrwi $carry,$t5,16,0
+       fmadd   $T3a,$N3,$na,$T3a
+       fmadd   $T3b,$N3,$nb,$T3b
+        addc   $t6,$t6,$carry
+        adde   $t7,$t7,$c1
+        srwi   $carry,$t6,16
+       fmadd   $T0a,$N0,$na,$T0a
+       fmadd   $T0b,$N0,$nb,$T0b
+        insrwi $t4,$t6,16,0            ; 32..63 bits
+        srwi   $c1,$t7,16
+        insrwi $carry,$t7,16,0
+
+       fmadd   $T1a,$N0,$nc,$T1a
+       fmadd   $T1b,$N0,$nd,$T1b
+        lwz    $t7,`$FRAME+40^$LITTLE_ENDIAN`($sp)     ; permuted $t3
+        lwz    $t6,`$FRAME+44^$LITTLE_ENDIAN`($sp)     ; permuted $t2
+        addc   $t2,$t2,$carry
+        adde   $t3,$t3,$c1
+        srwi   $carry,$t2,16
+       fmadd   $T2a,$N1,$nc,$T2a
+       fmadd   $T2b,$N1,$nd,$T2b
+        stw    $t0,12($tp)             ; tp[j-1]
+        stw    $t4,8($tp)
+        srwi   $c1,$t3,16
+        insrwi $carry,$t3,16,0
+       fmadd   $T3a,$N2,$nc,$T3a
+       fmadd   $T3b,$N2,$nd,$T3b
+        lwz    $t1,`$FRAME+48^$LITTLE_ENDIAN`($sp)     ; permuted $t5
+        lwz    $t0,`$FRAME+52^$LITTLE_ENDIAN`($sp)     ; permuted $t4
+        addc   $t6,$t6,$carry
+        adde   $t7,$t7,$c1
+        srwi   $carry,$t6,16
+       fmadd   $dota,$N3,$nc,$dota
+       fmadd   $dotb,$N3,$nd,$dotb
+        insrwi $t2,$t6,16,0            ; 64..95 bits
+        srwi   $c1,$t7,16
+        insrwi $carry,$t7,16,0
+
+       fctid   $T0a,$T0a
+       fctid   $T0b,$T0b
+        lwz    $t5,`$FRAME+56^$LITTLE_ENDIAN`($sp)     ; permuted $t7
+        lwz    $t4,`$FRAME+60^$LITTLE_ENDIAN`($sp)     ; permuted $t6
+        addc   $t0,$t0,$carry
+        adde   $t1,$t1,$c1
+        srwi   $carry,$t0,16
+       fctid   $T1a,$T1a
+       fctid   $T1b,$T1b
+        srwi   $c1,$t1,16
+        insrwi $carry,$t1,16,0
+       fctid   $T2a,$T2a
+       fctid   $T2b,$T2b
+        addc   $t4,$t4,$carry
+        adde   $t5,$t5,$c1
+        srwi   $carry,$t4,16
+       fctid   $T3a,$T3a
+       fctid   $T3b,$T3b
+        insrwi $t0,$t4,16,0            ; 96..127 bits
+        srwi   $c1,$t5,16
+        insrwi $carry,$t5,16,0
+
+       stfd    $T0a,`$FRAME+0`($sp)
+       stfd    $T0b,`$FRAME+8`($sp)
+       stfd    $T1a,`$FRAME+16`($sp)
+       stfd    $T1b,`$FRAME+24`($sp)
+       stfd    $T2a,`$FRAME+32`($sp)
+       stfd    $T2b,`$FRAME+40`($sp)
+       stfd    $T3a,`$FRAME+48`($sp)
+       stfd    $T3b,`$FRAME+56`($sp)
+        stw    $t2,20($tp)             ; tp[j]
+        stwu   $t0,16($tp)
+___
+}
+$code.=<<___;
+       bdnz    L1st
 \f
        fctid   $dota,$dota
        fctid   $dotb,$dotb
-
+___
+if ($SIZE_T==8 or $flavour =~ /osx/) {
+$code.=<<___;
        ld      $t0,`$FRAME+0`($sp)
        ld      $t1,`$FRAME+8`($sp)
        ld      $t2,`$FRAME+16`($sp)
@@ -552,23 +793,117 @@ L1st:
        insrdi  $t6,$t7,48,0
        srdi    $ovf,$t7,48
        std     $t6,8($tp)              ; tp[num-1]
+___
+} else {
+$code.=<<___;
+       lwz     $t1,`$FRAME+0^$LITTLE_ENDIAN`($sp)
+       lwz     $t0,`$FRAME+4^$LITTLE_ENDIAN`($sp)
+       lwz     $t3,`$FRAME+8^$LITTLE_ENDIAN`($sp)
+       lwz     $t2,`$FRAME+12^$LITTLE_ENDIAN`($sp)
+       lwz     $t5,`$FRAME+16^$LITTLE_ENDIAN`($sp)
+       lwz     $t4,`$FRAME+20^$LITTLE_ENDIAN`($sp)
+       lwz     $t7,`$FRAME+24^$LITTLE_ENDIAN`($sp)
+       lwz     $t6,`$FRAME+28^$LITTLE_ENDIAN`($sp)
+       stfd    $dota,`$FRAME+64`($sp)
+       stfd    $dotb,`$FRAME+72`($sp)
+
+       addc    $t0,$t0,$carry
+       adde    $t1,$t1,$c1
+       srwi    $carry,$t0,16
+       insrwi  $carry,$t1,16,0
+       srwi    $c1,$t1,16
+       addc    $t2,$t2,$carry
+       adde    $t3,$t3,$c1
+       srwi    $carry,$t2,16
+        insrwi $t0,$t2,16,0            ; 0..31 bits
+       insrwi  $carry,$t3,16,0
+       srwi    $c1,$t3,16
+       addc    $t4,$t4,$carry
+       adde    $t5,$t5,$c1
+       srwi    $carry,$t4,16
+       insrwi  $carry,$t5,16,0
+       srwi    $c1,$t5,16
+       addc    $t6,$t6,$carry
+       adde    $t7,$t7,$c1
+       srwi    $carry,$t6,16
+        insrwi $t4,$t6,16,0            ; 32..63 bits
+       insrwi  $carry,$t7,16,0
+       srwi    $c1,$t7,16
+        stw    $t0,12($tp)             ; tp[j-1]
+        stw    $t4,8($tp)
+
+       lwz     $t3,`$FRAME+32^$LITTLE_ENDIAN`($sp)     ; permuted $t1
+       lwz     $t2,`$FRAME+36^$LITTLE_ENDIAN`($sp)     ; permuted $t0
+       lwz     $t7,`$FRAME+40^$LITTLE_ENDIAN`($sp)     ; permuted $t3
+       lwz     $t6,`$FRAME+44^$LITTLE_ENDIAN`($sp)     ; permuted $t2
+       lwz     $t1,`$FRAME+48^$LITTLE_ENDIAN`($sp)     ; permuted $t5
+       lwz     $t0,`$FRAME+52^$LITTLE_ENDIAN`($sp)     ; permuted $t4
+       lwz     $t5,`$FRAME+56^$LITTLE_ENDIAN`($sp)     ; permuted $t7
+       lwz     $t4,`$FRAME+60^$LITTLE_ENDIAN`($sp)     ; permuted $t6
+
+       addc    $t2,$t2,$carry
+       adde    $t3,$t3,$c1
+       srwi    $carry,$t2,16
+       insrwi  $carry,$t3,16,0
+       srwi    $c1,$t3,16
+       addc    $t6,$t6,$carry
+       adde    $t7,$t7,$c1
+       srwi    $carry,$t6,16
+        insrwi $t2,$t6,16,0            ; 64..95 bits
+       insrwi  $carry,$t7,16,0
+       srwi    $c1,$t7,16
+       addc    $t0,$t0,$carry
+       adde    $t1,$t1,$c1
+       srwi    $carry,$t0,16
+       insrwi  $carry,$t1,16,0
+       srwi    $c1,$t1,16
+       addc    $t4,$t4,$carry
+       adde    $t5,$t5,$c1
+       srwi    $carry,$t4,16
+        insrwi $t0,$t4,16,0            ; 96..127 bits
+       insrwi  $carry,$t5,16,0
+       srwi    $c1,$t5,16
+        stw    $t2,20($tp)             ; tp[j]
+        stwu   $t0,16($tp)
+
+       lwz     $t7,`$FRAME+64^$LITTLE_ENDIAN`($sp)
+       lwz     $t6,`$FRAME+68^$LITTLE_ENDIAN`($sp)
+       lwz     $t5,`$FRAME+72^$LITTLE_ENDIAN`($sp)
+       lwz     $t4,`$FRAME+76^$LITTLE_ENDIAN`($sp)
 
+       addc    $t6,$t6,$carry
+       adde    $t7,$t7,$c1
+       srwi    $carry,$t6,16
+       insrwi  $carry,$t7,16,0
+       srwi    $c1,$t7,16
+       addc    $t4,$t4,$carry
+       adde    $t5,$t5,$c1
+
+       insrwi  $t6,$t4,16,0
+       srwi    $t4,$t4,16
+       insrwi  $t4,$t5,16,0
+       srwi    $ovf,$t5,16
+       stw     $t6,12($tp)             ; tp[num-1]
+       stw     $t4,8($tp)
+___
+}
+$code.=<<___;
        slwi    $t7,$num,2
        subf    $nap_d,$t7,$nap_d       ; rewind pointer
 \f
        li      $i,8                    ; i=1
 .align 5
 Louter:
-       ldx     $t3,$bp,$i      ; bp[i]
-       ld      $t6,`$FRAME+$TRANSFER+8`($sp)   ; tp[0]
-       mulld   $t7,$a0,$t3     ; ap[0]*bp[i]
-
        addi    $tp,$sp,`$FRAME+$TRANSFER`
-       add     $t7,$t7,$t6     ; ap[0]*bp[i]+tp[0]
        li      $carry,0
-       mulld   $t7,$t7,$n0     ; tp[0]*n0
        mtctr   $j
+___
+$code.=<<___ if ($SIZE_T==8);
+       ldx     $t3,$bp,$i              ; bp[i]
 
+       ld      $t6,`$FRAME+$TRANSFER+8`($sp)   ; tp[0]
+       mulld   $t7,$a0,$t3             ; ap[0]*bp[i]
+       add     $t7,$t7,$t6             ; ap[0]*bp[i]+tp[0]
        ; transfer bp[i] to FPU as 4x16-bit values
        extrdi  $t0,$t3,16,48
        extrdi  $t1,$t3,16,32
@@ -578,6 +913,8 @@ Louter:
        std     $t1,`$FRAME+8`($sp)
        std     $t2,`$FRAME+16`($sp)
        std     $t3,`$FRAME+24`($sp)
+
+       mulld   $t7,$t7,$n0             ; tp[0]*n0
        ; transfer (ap[0]*bp[i]+tp[0])*n0 to FPU as 4x16-bit values
        extrdi  $t4,$t7,16,48
        extrdi  $t5,$t7,16,32
@@ -587,7 +924,50 @@ Louter:
        std     $t5,`$FRAME+40`($sp)
        std     $t6,`$FRAME+48`($sp)
        std     $t7,`$FRAME+56`($sp)
+___
+$code.=<<___ if ($SIZE_T==4);
+       add     $t0,$bp,$i
+       li      $c1,0
+       lwz     $t1,0($t0)              ; bp[i,i+1]
+       lwz     $t3,4($t0)
+
+       mullw   $t4,$a0,$t1             ; ap[0]*bp[i]
+       lwz     $t0,`$FRAME+$TRANSFER+8+4`($sp) ; tp[0]
+       mulhwu  $t5,$a0,$t1
+       lwz     $t2,`$FRAME+$TRANSFER+8`($sp)   ; tp[0]
+       mullw   $t6,$a1,$t1
+       mullw   $t7,$a0,$t3
+       add     $t5,$t5,$t6
+       add     $t5,$t5,$t7
+       addc    $t4,$t4,$t0             ; ap[0]*bp[i]+tp[0]
+       adde    $t5,$t5,$t2
+       ; transfer bp[i] to FPU as 4x16-bit values
+       extrwi  $t0,$t1,16,16
+       extrwi  $t1,$t1,16,0
+       extrwi  $t2,$t3,16,16
+       extrwi  $t3,$t3,16,0
+       std     $t0,`$FRAME+0`($sp)     ; yes, std in 32-bit build
+       std     $t1,`$FRAME+8`($sp)
+       std     $t2,`$FRAME+16`($sp)
+       std     $t3,`$FRAME+24`($sp)
 
+       mullw   $t0,$t4,$n0             ; mulld tp[0]*n0
+       mulhwu  $t1,$t4,$n0
+       mullw   $t2,$t5,$n0
+       mullw   $t3,$t4,$n1
+       add     $t1,$t1,$t2
+       add     $t1,$t1,$t3
+       ; transfer (ap[0]*bp[i]+tp[0])*n0 to FPU as 4x16-bit values
+       extrwi  $t4,$t0,16,16
+       extrwi  $t5,$t0,16,0
+       extrwi  $t6,$t1,16,16
+       extrwi  $t7,$t1,16,0
+       std     $t4,`$FRAME+32`($sp)    ; yes, std in 32-bit build
+       std     $t5,`$FRAME+40`($sp)
+       std     $t6,`$FRAME+48`($sp)
+       std     $t7,`$FRAME+56`($sp)
+___
+$code.=<<___;
        lfd     $A0,8($nap_d)           ; load a[j] in double format
        lfd     $A1,16($nap_d)
        lfd     $A2,24($nap_d)          ; load a[j+1] in double format
@@ -700,7 +1080,9 @@ Linner:
        fmul    $dotb,$A3,$bd
         lfd    $A2,24($nap_d)          ; load a[j+1] in double format
         lfd    $A3,32($nap_d)
-
+___
+if ($SIZE_T==8 or $flavour =~ /osx/) {
+$code.=<<___;
        fmadd   $T1a,$N1,$na,$T1a
        fmadd   $T1b,$N1,$nb,$T1b
         ld     $t0,`$FRAME+0`($sp)
@@ -761,6 +1143,13 @@ Linner:
        stfd    $T0b,`$FRAME+8`($sp)
         add    $t7,$t7,$carry
         addc   $t3,$t0,$t1
+___
+$code.=<<___ if ($SIZE_T==4);          # adjust XER[CA]
+       extrdi  $t0,$t0,32,0
+       extrdi  $t1,$t1,32,0
+       adde    $t0,$t0,$t1
+___
+$code.=<<___;
        stfd    $T1a,`$FRAME+16`($sp)
        stfd    $T1b,`$FRAME+24`($sp)
         insrdi $t4,$t7,16,0            ; 64..127 bits
@@ -768,15 +1157,143 @@ Linner:
        stfd    $T2a,`$FRAME+32`($sp)
        stfd    $T2b,`$FRAME+40`($sp)
         adde   $t5,$t4,$t2
+___
+$code.=<<___ if ($SIZE_T==4);          # adjust XER[CA]
+       extrdi  $t4,$t4,32,0
+       extrdi  $t2,$t2,32,0
+       adde    $t4,$t4,$t2
+___
+$code.=<<___;
        stfd    $T3a,`$FRAME+48`($sp)
        stfd    $T3b,`$FRAME+56`($sp)
         addze  $carry,$carry
         std    $t3,-16($tp)            ; tp[j-1]
         std    $t5,-8($tp)             ; tp[j]
-       bdnz-   Linner
+___
+} else {
+$code.=<<___;
+       fmadd   $T1a,$N1,$na,$T1a
+       fmadd   $T1b,$N1,$nb,$T1b
+        lwz    $t1,`$FRAME+0^$LITTLE_ENDIAN`($sp)
+        lwz    $t0,`$FRAME+4^$LITTLE_ENDIAN`($sp)
+       fmadd   $T2a,$N2,$na,$T2a
+       fmadd   $T2b,$N2,$nb,$T2b
+        lwz    $t3,`$FRAME+8^$LITTLE_ENDIAN`($sp)
+        lwz    $t2,`$FRAME+12^$LITTLE_ENDIAN`($sp)
+       fmadd   $T3a,$N3,$na,$T3a
+       fmadd   $T3b,$N3,$nb,$T3b
+        lwz    $t5,`$FRAME+16^$LITTLE_ENDIAN`($sp)
+        lwz    $t4,`$FRAME+20^$LITTLE_ENDIAN`($sp)
+        addc   $t0,$t0,$carry
+        adde   $t1,$t1,$c1
+        srwi   $carry,$t0,16
+       fmadd   $T0a,$N0,$na,$T0a
+       fmadd   $T0b,$N0,$nb,$T0b
+        lwz    $t7,`$FRAME+24^$LITTLE_ENDIAN`($sp)
+        lwz    $t6,`$FRAME+28^$LITTLE_ENDIAN`($sp)
+        srwi   $c1,$t1,16
+        insrwi $carry,$t1,16,0
+
+       fmadd   $T1a,$N0,$nc,$T1a
+       fmadd   $T1b,$N0,$nd,$T1b
+        addc   $t2,$t2,$carry
+        adde   $t3,$t3,$c1
+        srwi   $carry,$t2,16
+       fmadd   $T2a,$N1,$nc,$T2a
+       fmadd   $T2b,$N1,$nd,$T2b
+        insrwi $t0,$t2,16,0            ; 0..31 bits
+        srwi   $c1,$t3,16
+        insrwi $carry,$t3,16,0
+       fmadd   $T3a,$N2,$nc,$T3a
+       fmadd   $T3b,$N2,$nd,$T3b
+        lwz    $t2,12($tp)             ; tp[j]
+        lwz    $t3,8($tp)
+        addc   $t4,$t4,$carry
+        adde   $t5,$t5,$c1
+        srwi   $carry,$t4,16
+       fmadd   $dota,$N3,$nc,$dota
+       fmadd   $dotb,$N3,$nd,$dotb
+        srwi   $c1,$t5,16
+        insrwi $carry,$t5,16,0
+
+       fctid   $T0a,$T0a
+        addc   $t6,$t6,$carry
+        adde   $t7,$t7,$c1
+        srwi   $carry,$t6,16
+       fctid   $T0b,$T0b
+        insrwi $t4,$t6,16,0            ; 32..63 bits
+        srwi   $c1,$t7,16
+        insrwi $carry,$t7,16,0
+       fctid   $T1a,$T1a
+        addc   $t0,$t0,$t2
+        adde   $t4,$t4,$t3
+        lwz    $t3,`$FRAME+32^$LITTLE_ENDIAN`($sp)     ; permuted $t1
+        lwz    $t2,`$FRAME+36^$LITTLE_ENDIAN`($sp)     ; permuted $t0
+       fctid   $T1b,$T1b
+        addze  $carry,$carry
+        addze  $c1,$c1
+        stw    $t0,4($tp)              ; tp[j-1]
+        stw    $t4,0($tp)
+       fctid   $T2a,$T2a
+        addc   $t2,$t2,$carry
+        adde   $t3,$t3,$c1
+        srwi   $carry,$t2,16
+        lwz    $t7,`$FRAME+40^$LITTLE_ENDIAN`($sp)     ; permuted $t3
+        lwz    $t6,`$FRAME+44^$LITTLE_ENDIAN`($sp)     ; permuted $t2
+       fctid   $T2b,$T2b
+        srwi   $c1,$t3,16
+        insrwi $carry,$t3,16,0
+        lwz    $t1,`$FRAME+48^$LITTLE_ENDIAN`($sp)     ; permuted $t5
+        lwz    $t0,`$FRAME+52^$LITTLE_ENDIAN`($sp)     ; permuted $t4
+       fctid   $T3a,$T3a
+        addc   $t6,$t6,$carry
+        adde   $t7,$t7,$c1
+        srwi   $carry,$t6,16
+        lwz    $t5,`$FRAME+56^$LITTLE_ENDIAN`($sp)     ; permuted $t7
+        lwz    $t4,`$FRAME+60^$LITTLE_ENDIAN`($sp)     ; permuted $t6
+       fctid   $T3b,$T3b
+
+        insrwi $t2,$t6,16,0            ; 64..95 bits
+       insrwi  $carry,$t7,16,0
+       srwi    $c1,$t7,16
+        lwz    $t6,20($tp)
+        lwzu   $t7,16($tp)
+       addc    $t0,$t0,$carry
+        stfd   $T0a,`$FRAME+0`($sp)
+       adde    $t1,$t1,$c1
+       srwi    $carry,$t0,16
+        stfd   $T0b,`$FRAME+8`($sp)
+       insrwi  $carry,$t1,16,0
+       srwi    $c1,$t1,16
+       addc    $t4,$t4,$carry
+        stfd   $T1a,`$FRAME+16`($sp)
+       adde    $t5,$t5,$c1
+       srwi    $carry,$t4,16
+        insrwi $t0,$t4,16,0            ; 96..127 bits
+        stfd   $T1b,`$FRAME+24`($sp)
+       insrwi  $carry,$t5,16,0
+       srwi    $c1,$t5,16
+
+       addc    $t2,$t2,$t6
+        stfd   $T2a,`$FRAME+32`($sp)
+       adde    $t0,$t0,$t7
+        stfd   $T2b,`$FRAME+40`($sp)
+       addze   $carry,$carry
+        stfd   $T3a,`$FRAME+48`($sp)
+       addze   $c1,$c1
+        stfd   $T3b,`$FRAME+56`($sp)
+        stw    $t2,-4($tp)             ; tp[j]
+        stw    $t0,-8($tp)
+___
+}
+$code.=<<___;
+       bdnz    Linner
 \f
        fctid   $dota,$dota
        fctid   $dotb,$dotb
+___
+if ($SIZE_T==8 or $flavour =~ /osx/) {
+$code.=<<___;
        ld      $t0,`$FRAME+0`($sp)
        ld      $t1,`$FRAME+8`($sp)
        ld      $t2,`$FRAME+16`($sp)
@@ -816,7 +1333,21 @@ Linner:
        ld      $t7,`$FRAME+72`($sp)
 
        addc    $t3,$t0,$t1
+___
+$code.=<<___ if ($SIZE_T==4);          # adjust XER[CA]
+       extrdi  $t0,$t0,32,0
+       extrdi  $t1,$t1,32,0
+       adde    $t0,$t0,$t1
+___
+$code.=<<___;
        adde    $t5,$t4,$t2
+___
+$code.=<<___ if ($SIZE_T==4);          # adjust XER[CA]
+       extrdi  $t4,$t4,32,0
+       extrdi  $t2,$t2,32,0
+       adde    $t4,$t4,$t2
+___
+$code.=<<___;
        addze   $carry,$carry
 
        std     $t3,-16($tp)            ; tp[j-1]
@@ -829,13 +1360,124 @@ Linner:
        insrdi  $t6,$t7,48,0
        srdi    $ovf,$t7,48
        std     $t6,0($tp)              ; tp[num-1]
+___
+} else {
+$code.=<<___;
+       lwz     $t1,`$FRAME+0^$LITTLE_ENDIAN`($sp)
+       lwz     $t0,`$FRAME+4^$LITTLE_ENDIAN`($sp)
+       lwz     $t3,`$FRAME+8^$LITTLE_ENDIAN`($sp)
+       lwz     $t2,`$FRAME+12^$LITTLE_ENDIAN`($sp)
+       lwz     $t5,`$FRAME+16^$LITTLE_ENDIAN`($sp)
+       lwz     $t4,`$FRAME+20^$LITTLE_ENDIAN`($sp)
+       lwz     $t7,`$FRAME+24^$LITTLE_ENDIAN`($sp)
+       lwz     $t6,`$FRAME+28^$LITTLE_ENDIAN`($sp)
+       stfd    $dota,`$FRAME+64`($sp)
+       stfd    $dotb,`$FRAME+72`($sp)
+
+       addc    $t0,$t0,$carry
+       adde    $t1,$t1,$c1
+       srwi    $carry,$t0,16
+       insrwi  $carry,$t1,16,0
+       srwi    $c1,$t1,16
+       addc    $t2,$t2,$carry
+       adde    $t3,$t3,$c1
+       srwi    $carry,$t2,16
+        insrwi $t0,$t2,16,0            ; 0..31 bits
+        lwz    $t2,12($tp)             ; tp[j]
+       insrwi  $carry,$t3,16,0
+       srwi    $c1,$t3,16
+        lwz    $t3,8($tp)
+       addc    $t4,$t4,$carry
+       adde    $t5,$t5,$c1
+       srwi    $carry,$t4,16
+       insrwi  $carry,$t5,16,0
+       srwi    $c1,$t5,16
+       addc    $t6,$t6,$carry
+       adde    $t7,$t7,$c1
+       srwi    $carry,$t6,16
+        insrwi $t4,$t6,16,0            ; 32..63 bits
+       insrwi  $carry,$t7,16,0
+       srwi    $c1,$t7,16
 
+       addc    $t0,$t0,$t2
+       adde    $t4,$t4,$t3
+       addze   $carry,$carry
+       addze   $c1,$c1
+        stw    $t0,4($tp)              ; tp[j-1]
+        stw    $t4,0($tp)
+
+       lwz     $t3,`$FRAME+32^$LITTLE_ENDIAN`($sp)     ; permuted $t1
+       lwz     $t2,`$FRAME+36^$LITTLE_ENDIAN`($sp)     ; permuted $t0
+       lwz     $t7,`$FRAME+40^$LITTLE_ENDIAN`($sp)     ; permuted $t3
+       lwz     $t6,`$FRAME+44^$LITTLE_ENDIAN`($sp)     ; permuted $t2
+       lwz     $t1,`$FRAME+48^$LITTLE_ENDIAN`($sp)     ; permuted $t5
+       lwz     $t0,`$FRAME+52^$LITTLE_ENDIAN`($sp)     ; permuted $t4
+       lwz     $t5,`$FRAME+56^$LITTLE_ENDIAN`($sp)     ; permuted $t7
+       lwz     $t4,`$FRAME+60^$LITTLE_ENDIAN`($sp)     ; permuted $t6
+
+       addc    $t2,$t2,$carry
+       adde    $t3,$t3,$c1
+       srwi    $carry,$t2,16
+       insrwi  $carry,$t3,16,0
+       srwi    $c1,$t3,16
+       addc    $t6,$t6,$carry
+       adde    $t7,$t7,$c1
+       srwi    $carry,$t6,16
+        insrwi $t2,$t6,16,0            ; 64..95 bits
+        lwz    $t6,20($tp)
+       insrwi  $carry,$t7,16,0
+       srwi    $c1,$t7,16
+        lwzu   $t7,16($tp)
+       addc    $t0,$t0,$carry
+       adde    $t1,$t1,$c1
+       srwi    $carry,$t0,16
+       insrwi  $carry,$t1,16,0
+       srwi    $c1,$t1,16
+       addc    $t4,$t4,$carry
+       adde    $t5,$t5,$c1
+       srwi    $carry,$t4,16
+        insrwi $t0,$t4,16,0            ; 96..127 bits
+       insrwi  $carry,$t5,16,0
+       srwi    $c1,$t5,16
+
+       addc    $t2,$t2,$t6
+       adde    $t0,$t0,$t7
+        lwz    $t7,`$FRAME+64^$LITTLE_ENDIAN`($sp)
+        lwz    $t6,`$FRAME+68^$LITTLE_ENDIAN`($sp)
+       addze   $carry,$carry
+       addze   $c1,$c1
+        lwz    $t5,`$FRAME+72^$LITTLE_ENDIAN`($sp)
+        lwz    $t4,`$FRAME+76^$LITTLE_ENDIAN`($sp)
+
+       addc    $t6,$t6,$carry
+       adde    $t7,$t7,$c1
+        stw    $t2,-4($tp)             ; tp[j]
+        stw    $t0,-8($tp)
+       addc    $t6,$t6,$ovf
+       addze   $t7,$t7
+       srwi    $carry,$t6,16
+       insrwi  $carry,$t7,16,0
+       srwi    $c1,$t7,16
+       addc    $t4,$t4,$carry
+       adde    $t5,$t5,$c1
+
+       insrwi  $t6,$t4,16,0
+       srwi    $t4,$t4,16
+       insrwi  $t4,$t5,16,0
+       srwi    $ovf,$t5,16
+       stw     $t6,4($tp)              ; tp[num-1]
+       stw     $t4,0($tp)
+___
+}
+$code.=<<___;
        slwi    $t7,$num,2
        addi    $i,$i,8
        subf    $nap_d,$t7,$nap_d       ; rewind pointer
        cmpw    $i,$num
        blt-    Louter
+___
 \f
+$code.=<<___ if ($SIZE_T==8);
        subf    $np,$num,$np    ; rewind np
        addi    $j,$j,1         ; restore counter
        subfc   $i,$i,$i        ; j=0 and "clear" XER[CA]
@@ -855,7 +1497,7 @@ Lsub:      ldx     $t0,$tp,$i
        stdx    $t0,$rp,$i
        stdx    $t2,$t6,$i
        addi    $i,$i,16
-       bdnz-   Lsub
+       bdnz    Lsub
 
        li      $i,0
        subfe   $ovf,$i,$ovf    ; handle upmost overflow bit
@@ -882,35 +1524,110 @@ Lcopy:                          ; copy or in-place refresh
        stdx    $i,$tp,$i       ; zap tp at once
        stdx    $i,$t4,$i
        addi    $i,$i,16
-       bdnz-   Lcopy
+       bdnz    Lcopy
+___
+$code.=<<___ if ($SIZE_T==4);
+       subf    $np,$num,$np    ; rewind np
+       addi    $j,$j,1         ; restore counter
+       subfc   $i,$i,$i        ; j=0 and "clear" XER[CA]
+       addi    $tp,$sp,`$FRAME+$TRANSFER`
+       addi    $np,$np,-4
+       addi    $rp,$rp,-4
+       addi    $ap,$sp,`$FRAME+$TRANSFER+4`
+       mtctr   $j
+
+.align 4
+Lsub:  lwz     $t0,12($tp)     ; load tp[j..j+3] in 64-bit word order
+       lwz     $t1,8($tp)
+       lwz     $t2,20($tp)
+       lwzu    $t3,16($tp)
+       lwz     $t4,4($np)      ; load np[j..j+3] in 32-bit word order
+       lwz     $t5,8($np)
+       lwz     $t6,12($np)
+       lwzu    $t7,16($np)
+       subfe   $t4,$t4,$t0     ; tp[j]-np[j]
+        stw    $t0,4($ap)      ; save tp[j..j+3] in 32-bit word order
+       subfe   $t5,$t5,$t1     ; tp[j+1]-np[j+1]
+        stw    $t1,8($ap)
+       subfe   $t6,$t6,$t2     ; tp[j+2]-np[j+2]
+        stw    $t2,12($ap)
+       subfe   $t7,$t7,$t3     ; tp[j+3]-np[j+3]
+        stwu   $t3,16($ap)
+       stw     $t4,4($rp)
+       stw     $t5,8($rp)
+       stw     $t6,12($rp)
+       stwu    $t7,16($rp)
+       bdnz    Lsub
+
+       li      $i,0
+       subfe   $ovf,$i,$ovf    ; handle upmost overflow bit
+       addi    $tp,$sp,`$FRAME+$TRANSFER+4`
+       subf    $rp,$num,$rp    ; rewind rp
+       and     $ap,$tp,$ovf
+       andc    $np,$rp,$ovf
+       or      $ap,$ap,$np     ; ap=borrow?tp:rp
+       addi    $tp,$sp,`$FRAME+$TRANSFER`
+       mtctr   $j
+
+.align 4
+Lcopy:                         ; copy or in-place refresh
+       lwz     $t0,4($ap)
+       lwz     $t1,8($ap)
+       lwz     $t2,12($ap)
+       lwzu    $t3,16($ap)
+       std     $i,8($nap_d)    ; zap nap_d
+       std     $i,16($nap_d)
+       std     $i,24($nap_d)
+       std     $i,32($nap_d)
+       std     $i,40($nap_d)
+       std     $i,48($nap_d)
+       std     $i,56($nap_d)
+       stdu    $i,64($nap_d)
+       stw     $t0,4($rp)
+       stw     $t1,8($rp)
+       stw     $t2,12($rp)
+       stwu    $t3,16($rp)
+       std     $i,8($tp)       ; zap tp at once
+       stdu    $i,16($tp)
+       bdnz    Lcopy
+___
 \f
-       $POP    r14,`2*$SIZE_T`($sp)
-       $POP    r15,`3*$SIZE_T`($sp)
-       $POP    r16,`4*$SIZE_T`($sp)
-       $POP    r17,`5*$SIZE_T`($sp)
-       $POP    r18,`6*$SIZE_T`($sp)
-       $POP    r19,`7*$SIZE_T`($sp)
-       $POP    r20,`8*$SIZE_T`($sp)
-       $POP    r21,`9*$SIZE_T`($sp)
-       $POP    r22,`10*$SIZE_T`($sp)
-       $POP    r23,`11*$SIZE_T`($sp)
-       lfd     f14,`12*$SIZE_T+0`($sp)
-       lfd     f15,`12*$SIZE_T+8`($sp)
-       lfd     f16,`12*$SIZE_T+16`($sp)
-       lfd     f17,`12*$SIZE_T+24`($sp)
-       lfd     f18,`12*$SIZE_T+32`($sp)
-       lfd     f19,`12*$SIZE_T+40`($sp)
-       lfd     f20,`12*$SIZE_T+48`($sp)
-       lfd     f21,`12*$SIZE_T+56`($sp)
-       lfd     f22,`12*$SIZE_T+64`($sp)
-       lfd     f23,`12*$SIZE_T+72`($sp)
-       lfd     f24,`12*$SIZE_T+80`($sp)
-       lfd     f25,`12*$SIZE_T+88`($sp)
-       $POP    $sp,0($sp)
+$code.=<<___;
+       $POP    $i,0($sp)
        li      r3,1    ; signal "handled"
+       $POP    r19,`-12*8-13*$SIZE_T`($i)
+       $POP    r20,`-12*8-12*$SIZE_T`($i)
+       $POP    r21,`-12*8-11*$SIZE_T`($i)
+       $POP    r22,`-12*8-10*$SIZE_T`($i)
+       $POP    r23,`-12*8-9*$SIZE_T`($i)
+       $POP    r24,`-12*8-8*$SIZE_T`($i)
+       $POP    r25,`-12*8-7*$SIZE_T`($i)
+       $POP    r26,`-12*8-6*$SIZE_T`($i)
+       $POP    r27,`-12*8-5*$SIZE_T`($i)
+       $POP    r28,`-12*8-4*$SIZE_T`($i)
+       $POP    r29,`-12*8-3*$SIZE_T`($i)
+       $POP    r30,`-12*8-2*$SIZE_T`($i)
+       $POP    r31,`-12*8-1*$SIZE_T`($i)
+       lfd     f20,`-12*8`($i)
+       lfd     f21,`-11*8`($i)
+       lfd     f22,`-10*8`($i)
+       lfd     f23,`-9*8`($i)
+       lfd     f24,`-8*8`($i)
+       lfd     f25,`-7*8`($i)
+       lfd     f26,`-6*8`($i)
+       lfd     f27,`-5*8`($i)
+       lfd     f28,`-4*8`($i)
+       lfd     f29,`-3*8`($i)
+       lfd     f30,`-2*8`($i)
+       lfd     f31,`-1*8`($i)
+       mr      $sp,$i
        blr
        .long   0
-.asciz  "Montgomery Multiplication for PPC64, CRYPTOGAMS by <appro\@fy.chalmers.se>"
+       .byte   0,12,4,0,0x8c,13,6,0
+       .long   0
+.size  .$fname,.-.$fname
+
+.asciz  "Montgomery Multiplication for PPC64, CRYPTOGAMS by <appro\@openssl.org>"
 ___
 
 $code =~ s/\`([^\`]*)\`/eval $1/gem;