sha1-mips.pl 10 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461
  1. #! /usr/bin/env perl
  2. # Copyright 2009-2020 The OpenSSL Project Authors. All Rights Reserved.
  3. #
  4. # Licensed under the OpenSSL license (the "License"). You may not use
  5. # this file except in compliance with the License. You can obtain a copy
  6. # in the file LICENSE in the source distribution or at
  7. # https://www.openssl.org/source/license.html
  8. # ====================================================================
  9. # Written by Andy Polyakov <appro@openssl.org> for the OpenSSL
  10. # project. The module is, however, dual licensed under OpenSSL and
  11. # CRYPTOGAMS licenses depending on where you obtain it. For further
  12. # details see http://www.openssl.org/~appro/cryptogams/.
  13. # ====================================================================
  14. # SHA1 block procedure for MIPS.
  15. # Performance improvement is 30% on unaligned input. The "secret" is
  16. # to deploy lwl/lwr pair to load unaligned input. One could have
  17. # vectorized Xupdate on MIPSIII/IV, but the goal was to code MIPS32-
  18. # compatible subroutine. There is room for minor optimization on
  19. # little-endian platforms...
  20. # September 2012.
  21. #
  22. # Add MIPS32r2 code (>25% less instructions).
  23. ######################################################################
  24. # There is a number of MIPS ABI in use, O32 and N32/64 are most
  25. # widely used. Then there is a new contender: NUBI. It appears that if
  26. # one picks the latter, it's possible to arrange code in ABI neutral
  27. # manner. Therefore let's stick to NUBI register layout:
  28. #
  29. ($zero,$at,$t0,$t1,$t2)=map("\$$_",(0..2,24,25));
  30. ($a0,$a1,$a2,$a3,$a4,$a5,$a6,$a7)=map("\$$_",(4..11));
  31. ($s0,$s1,$s2,$s3,$s4,$s5,$s6,$s7,$s8,$s9,$s10,$s11)=map("\$$_",(12..23));
  32. ($gp,$tp,$sp,$fp,$ra)=map("\$$_",(3,28..31));
  33. #
  34. # The return value is placed in $a0. Following coding rules facilitate
  35. # interoperability:
  36. #
  37. # - never ever touch $tp, "thread pointer", former $gp;
  38. # - copy return value to $t0, former $v0 [or to $a0 if you're adapting
  39. # old code];
  40. # - on O32 populate $a4-$a7 with 'lw $aN,4*N($sp)' if necessary;
  41. #
  42. # For reference here is register layout for N32/64 MIPS ABIs:
  43. #
  44. # ($zero,$at,$v0,$v1)=map("\$$_",(0..3));
  45. # ($a0,$a1,$a2,$a3,$a4,$a5,$a6,$a7)=map("\$$_",(4..11));
  46. # ($t0,$t1,$t2,$t3,$t8,$t9)=map("\$$_",(12..15,24,25));
  47. # ($s0,$s1,$s2,$s3,$s4,$s5,$s6,$s7)=map("\$$_",(16..23));
  48. # ($gp,$sp,$fp,$ra)=map("\$$_",(28..31));
  49. #
  50. $flavour = shift || "o32"; # supported flavours are o32,n32,64,nubi32,nubi64
  51. if ($flavour =~ /64|n32/i) {
  52. $PTR_ADD="daddu"; # incidentally works even on n32
  53. $PTR_SUB="dsubu"; # incidentally works even on n32
  54. $REG_S="sd";
  55. $REG_L="ld";
  56. $PTR_SLL="dsll"; # incidentally works even on n32
  57. $SZREG=8;
  58. } else {
  59. $PTR_ADD="addu";
  60. $PTR_SUB="subu";
  61. $REG_S="sw";
  62. $REG_L="lw";
  63. $PTR_SLL="sll";
  64. $SZREG=4;
  65. }
  66. #
  67. # <appro@openssl.org>
  68. #
  69. ######################################################################
  70. $big_endian=(`echo MIPSEB | $ENV{CC} -E -`=~/MIPSEB/)?0:1 if ($ENV{CC});
  71. for (@ARGV) { $output=$_ if (/\w[\w\-]*\.\w+$/); }
  72. open STDOUT,">$output";
  73. if (!defined($big_endian))
  74. { $big_endian=(unpack('L',pack('N',1))==1); }
  75. # offsets of the Most and Least Significant Bytes
  76. $MSB=$big_endian?0:3;
  77. $LSB=3&~$MSB;
  78. @X=map("\$$_",(8..23)); # a4-a7,s0-s11
  79. $ctx=$a0;
  80. $inp=$a1;
  81. $num=$a2;
  82. $A="\$1";
  83. $B="\$2";
  84. $C="\$3";
  85. $D="\$7";
  86. $E="\$24"; @V=($A,$B,$C,$D,$E);
  87. $t0="\$25";
  88. $t1=$num; # $num is offloaded to stack
  89. $t2="\$30"; # fp
  90. $K="\$31"; # ra
  91. sub BODY_00_14 {
  92. my ($i,$a,$b,$c,$d,$e)=@_;
  93. my $j=$i+1;
  94. $code.=<<___ if (!$big_endian);
  95. #if defined(_MIPS_ARCH_MIPS32R2) || defined(_MIPS_ARCH_MIPS64R2)
  96. wsbh @X[$i],@X[$i] # byte swap($i)
  97. rotr @X[$i],@X[$i],16
  98. #else
  99. srl $t0,@X[$i],24 # byte swap($i)
  100. srl $t1,@X[$i],8
  101. andi $t2,@X[$i],0xFF00
  102. sll @X[$i],@X[$i],24
  103. andi $t1,0xFF00
  104. sll $t2,$t2,8
  105. or @X[$i],$t0
  106. or $t1,$t2
  107. or @X[$i],$t1
  108. #endif
  109. ___
  110. $code.=<<___;
  111. #if defined(_MIPS_ARCH_MIPS32R2) || defined(_MIPS_ARCH_MIPS64R2)
  112. addu $e,$K # $i
  113. xor $t0,$c,$d
  114. rotr $t1,$a,27
  115. and $t0,$b
  116. addu $e,$t1
  117. #if defined(_MIPS_ARCH_MIPS32R6) || defined(_MIPS_ARCH_MIPS64R6)
  118. lw @X[$j],$j*4($inp)
  119. #else
  120. lwl @X[$j],$j*4+$MSB($inp)
  121. lwr @X[$j],$j*4+$LSB($inp)
  122. #endif
  123. xor $t0,$d
  124. addu $e,@X[$i]
  125. rotr $b,$b,2
  126. addu $e,$t0
  127. #else
  128. lwl @X[$j],$j*4+$MSB($inp)
  129. sll $t0,$a,5 # $i
  130. addu $e,$K
  131. lwr @X[$j],$j*4+$LSB($inp)
  132. srl $t1,$a,27
  133. addu $e,$t0
  134. xor $t0,$c,$d
  135. addu $e,$t1
  136. sll $t2,$b,30
  137. and $t0,$b
  138. srl $b,$b,2
  139. xor $t0,$d
  140. addu $e,@X[$i]
  141. or $b,$t2
  142. addu $e,$t0
  143. #endif
  144. ___
  145. }
  146. sub BODY_15_19 {
  147. my ($i,$a,$b,$c,$d,$e)=@_;
  148. my $j=$i+1;
  149. $code.=<<___ if (!$big_endian && $i==15);
  150. #if defined(_MIPS_ARCH_MIPS32R2) || defined(_MIPS_ARCH_MIPS64R2)
  151. wsbh @X[$i],@X[$i] # byte swap($i)
  152. rotr @X[$i],@X[$i],16
  153. #else
  154. srl $t0,@X[$i],24 # byte swap($i)
  155. srl $t1,@X[$i],8
  156. andi $t2,@X[$i],0xFF00
  157. sll @X[$i],@X[$i],24
  158. andi $t1,0xFF00
  159. sll $t2,$t2,8
  160. or @X[$i],$t0
  161. or @X[$i],$t1
  162. or @X[$i],$t2
  163. #endif
  164. ___
  165. $code.=<<___;
  166. #if defined(_MIPS_ARCH_MIPS32R2) || defined(_MIPS_ARCH_MIPS64R2)
  167. addu $e,$K # $i
  168. xor @X[$j%16],@X[($j+2)%16]
  169. xor $t0,$c,$d
  170. rotr $t1,$a,27
  171. xor @X[$j%16],@X[($j+8)%16]
  172. and $t0,$b
  173. addu $e,$t1
  174. xor @X[$j%16],@X[($j+13)%16]
  175. xor $t0,$d
  176. addu $e,@X[$i%16]
  177. rotr @X[$j%16],@X[$j%16],31
  178. rotr $b,$b,2
  179. addu $e,$t0
  180. #else
  181. xor @X[$j%16],@X[($j+2)%16]
  182. sll $t0,$a,5 # $i
  183. addu $e,$K
  184. srl $t1,$a,27
  185. addu $e,$t0
  186. xor @X[$j%16],@X[($j+8)%16]
  187. xor $t0,$c,$d
  188. addu $e,$t1
  189. xor @X[$j%16],@X[($j+13)%16]
  190. sll $t2,$b,30
  191. and $t0,$b
  192. srl $t1,@X[$j%16],31
  193. addu @X[$j%16],@X[$j%16]
  194. srl $b,$b,2
  195. xor $t0,$d
  196. or @X[$j%16],$t1
  197. addu $e,@X[$i%16]
  198. or $b,$t2
  199. addu $e,$t0
  200. #endif
  201. ___
  202. }
  203. sub BODY_20_39 {
  204. my ($i,$a,$b,$c,$d,$e)=@_;
  205. my $j=$i+1;
  206. $code.=<<___ if ($i<79);
  207. #if defined(_MIPS_ARCH_MIPS32R2) || defined(_MIPS_ARCH_MIPS64R2)
  208. xor @X[$j%16],@X[($j+2)%16]
  209. addu $e,$K # $i
  210. rotr $t1,$a,27
  211. xor @X[$j%16],@X[($j+8)%16]
  212. xor $t0,$c,$d
  213. addu $e,$t1
  214. xor @X[$j%16],@X[($j+13)%16]
  215. xor $t0,$b
  216. addu $e,@X[$i%16]
  217. rotr @X[$j%16],@X[$j%16],31
  218. rotr $b,$b,2
  219. addu $e,$t0
  220. #else
  221. xor @X[$j%16],@X[($j+2)%16]
  222. sll $t0,$a,5 # $i
  223. addu $e,$K
  224. srl $t1,$a,27
  225. addu $e,$t0
  226. xor @X[$j%16],@X[($j+8)%16]
  227. xor $t0,$c,$d
  228. addu $e,$t1
  229. xor @X[$j%16],@X[($j+13)%16]
  230. sll $t2,$b,30
  231. xor $t0,$b
  232. srl $t1,@X[$j%16],31
  233. addu @X[$j%16],@X[$j%16]
  234. srl $b,$b,2
  235. addu $e,@X[$i%16]
  236. or @X[$j%16],$t1
  237. or $b,$t2
  238. addu $e,$t0
  239. #endif
  240. ___
  241. $code.=<<___ if ($i==79);
  242. #if defined(_MIPS_ARCH_MIPS32R2) || defined(_MIPS_ARCH_MIPS64R2)
  243. lw @X[0],0($ctx)
  244. addu $e,$K # $i
  245. lw @X[1],4($ctx)
  246. rotr $t1,$a,27
  247. lw @X[2],8($ctx)
  248. xor $t0,$c,$d
  249. addu $e,$t1
  250. lw @X[3],12($ctx)
  251. xor $t0,$b
  252. addu $e,@X[$i%16]
  253. lw @X[4],16($ctx)
  254. rotr $b,$b,2
  255. addu $e,$t0
  256. #else
  257. lw @X[0],0($ctx)
  258. sll $t0,$a,5 # $i
  259. addu $e,$K
  260. lw @X[1],4($ctx)
  261. srl $t1,$a,27
  262. addu $e,$t0
  263. lw @X[2],8($ctx)
  264. xor $t0,$c,$d
  265. addu $e,$t1
  266. lw @X[3],12($ctx)
  267. sll $t2,$b,30
  268. xor $t0,$b
  269. lw @X[4],16($ctx)
  270. srl $b,$b,2
  271. addu $e,@X[$i%16]
  272. or $b,$t2
  273. addu $e,$t0
  274. #endif
  275. ___
  276. }
  277. sub BODY_40_59 {
  278. my ($i,$a,$b,$c,$d,$e)=@_;
  279. my $j=$i+1;
  280. $code.=<<___ if ($i<79);
  281. #if defined(_MIPS_ARCH_MIPS32R2) || defined(_MIPS_ARCH_MIPS64R2)
  282. addu $e,$K # $i
  283. and $t0,$c,$d
  284. xor @X[$j%16],@X[($j+2)%16]
  285. rotr $t1,$a,27
  286. addu $e,$t0
  287. xor @X[$j%16],@X[($j+8)%16]
  288. xor $t0,$c,$d
  289. addu $e,$t1
  290. xor @X[$j%16],@X[($j+13)%16]
  291. and $t0,$b
  292. addu $e,@X[$i%16]
  293. rotr @X[$j%16],@X[$j%16],31
  294. rotr $b,$b,2
  295. addu $e,$t0
  296. #else
  297. xor @X[$j%16],@X[($j+2)%16]
  298. sll $t0,$a,5 # $i
  299. addu $e,$K
  300. srl $t1,$a,27
  301. addu $e,$t0
  302. xor @X[$j%16],@X[($j+8)%16]
  303. and $t0,$c,$d
  304. addu $e,$t1
  305. xor @X[$j%16],@X[($j+13)%16]
  306. sll $t2,$b,30
  307. addu $e,$t0
  308. srl $t1,@X[$j%16],31
  309. xor $t0,$c,$d
  310. addu @X[$j%16],@X[$j%16]
  311. and $t0,$b
  312. srl $b,$b,2
  313. or @X[$j%16],$t1
  314. addu $e,@X[$i%16]
  315. or $b,$t2
  316. addu $e,$t0
  317. #endif
  318. ___
  319. }
  320. $FRAMESIZE=16; # large enough to accommodate NUBI saved registers
  321. $SAVED_REGS_MASK = ($flavour =~ /nubi/i) ? "0xc0fff008" : "0xc0ff0000";
  322. $code=<<___;
  323. #include "mips_arch.h"
  324. .text
  325. .set noat
  326. .set noreorder
  327. .align 5
  328. .globl sha1_block_data_order
  329. .ent sha1_block_data_order
  330. sha1_block_data_order:
  331. .frame $sp,$FRAMESIZE*$SZREG,$ra
  332. .mask $SAVED_REGS_MASK,-$SZREG
  333. .set noreorder
  334. $PTR_SUB $sp,$FRAMESIZE*$SZREG
  335. $REG_S $ra,($FRAMESIZE-1)*$SZREG($sp)
  336. $REG_S $fp,($FRAMESIZE-2)*$SZREG($sp)
  337. $REG_S $s11,($FRAMESIZE-3)*$SZREG($sp)
  338. $REG_S $s10,($FRAMESIZE-4)*$SZREG($sp)
  339. $REG_S $s9,($FRAMESIZE-5)*$SZREG($sp)
  340. $REG_S $s8,($FRAMESIZE-6)*$SZREG($sp)
  341. $REG_S $s7,($FRAMESIZE-7)*$SZREG($sp)
  342. $REG_S $s6,($FRAMESIZE-8)*$SZREG($sp)
  343. $REG_S $s5,($FRAMESIZE-9)*$SZREG($sp)
  344. $REG_S $s4,($FRAMESIZE-10)*$SZREG($sp)
  345. ___
  346. $code.=<<___ if ($flavour =~ /nubi/i); # optimize non-nubi prologue
  347. $REG_S $s3,($FRAMESIZE-11)*$SZREG($sp)
  348. $REG_S $s2,($FRAMESIZE-12)*$SZREG($sp)
  349. $REG_S $s1,($FRAMESIZE-13)*$SZREG($sp)
  350. $REG_S $s0,($FRAMESIZE-14)*$SZREG($sp)
  351. $REG_S $gp,($FRAMESIZE-15)*$SZREG($sp)
  352. ___
  353. $code.=<<___;
  354. $PTR_SLL $num,6
  355. $PTR_ADD $num,$inp
  356. $REG_S $num,0($sp)
  357. lw $A,0($ctx)
  358. lw $B,4($ctx)
  359. lw $C,8($ctx)
  360. lw $D,12($ctx)
  361. b .Loop
  362. lw $E,16($ctx)
  363. .align 4
  364. .Loop:
  365. .set reorder
  366. #if defined(_MIPS_ARCH_MIPS32R6) || defined(_MIPS_ARCH_MIPS64R6)
  367. lui $K,0x5a82
  368. lw @X[0],($inp)
  369. ori $K,0x7999 # K_00_19
  370. #else
  371. lwl @X[0],$MSB($inp)
  372. lui $K,0x5a82
  373. lwr @X[0],$LSB($inp)
  374. ori $K,0x7999 # K_00_19
  375. #endif
  376. ___
  377. for ($i=0;$i<15;$i++) { &BODY_00_14($i,@V); unshift(@V,pop(@V)); }
  378. for (;$i<20;$i++) { &BODY_15_19($i,@V); unshift(@V,pop(@V)); }
  379. $code.=<<___;
  380. lui $K,0x6ed9
  381. ori $K,0xeba1 # K_20_39
  382. ___
  383. for (;$i<40;$i++) { &BODY_20_39($i,@V); unshift(@V,pop(@V)); }
  384. $code.=<<___;
  385. lui $K,0x8f1b
  386. ori $K,0xbcdc # K_40_59
  387. ___
  388. for (;$i<60;$i++) { &BODY_40_59($i,@V); unshift(@V,pop(@V)); }
  389. $code.=<<___;
  390. lui $K,0xca62
  391. ori $K,0xc1d6 # K_60_79
  392. ___
  393. for (;$i<80;$i++) { &BODY_20_39($i,@V); unshift(@V,pop(@V)); }
  394. $code.=<<___;
  395. $PTR_ADD $inp,64
  396. $REG_L $num,0($sp)
  397. addu $A,$X[0]
  398. addu $B,$X[1]
  399. sw $A,0($ctx)
  400. addu $C,$X[2]
  401. addu $D,$X[3]
  402. sw $B,4($ctx)
  403. addu $E,$X[4]
  404. sw $C,8($ctx)
  405. sw $D,12($ctx)
  406. sw $E,16($ctx)
  407. .set noreorder
  408. bne $inp,$num,.Loop
  409. nop
  410. .set noreorder
  411. $REG_L $ra,($FRAMESIZE-1)*$SZREG($sp)
  412. $REG_L $fp,($FRAMESIZE-2)*$SZREG($sp)
  413. $REG_L $s11,($FRAMESIZE-3)*$SZREG($sp)
  414. $REG_L $s10,($FRAMESIZE-4)*$SZREG($sp)
  415. $REG_L $s9,($FRAMESIZE-5)*$SZREG($sp)
  416. $REG_L $s8,($FRAMESIZE-6)*$SZREG($sp)
  417. $REG_L $s7,($FRAMESIZE-7)*$SZREG($sp)
  418. $REG_L $s6,($FRAMESIZE-8)*$SZREG($sp)
  419. $REG_L $s5,($FRAMESIZE-9)*$SZREG($sp)
  420. $REG_L $s4,($FRAMESIZE-10)*$SZREG($sp)
  421. ___
  422. $code.=<<___ if ($flavour =~ /nubi/i);
  423. $REG_L $s3,($FRAMESIZE-11)*$SZREG($sp)
  424. $REG_L $s2,($FRAMESIZE-12)*$SZREG($sp)
  425. $REG_L $s1,($FRAMESIZE-13)*$SZREG($sp)
  426. $REG_L $s0,($FRAMESIZE-14)*$SZREG($sp)
  427. $REG_L $gp,($FRAMESIZE-15)*$SZREG($sp)
  428. ___
  429. $code.=<<___;
  430. jr $ra
  431. $PTR_ADD $sp,$FRAMESIZE*$SZREG
  432. .end sha1_block_data_order
  433. .rdata
  434. .asciiz "SHA1 for MIPS, CRYPTOGAMS by <appro\@openssl.org>"
  435. ___
  436. print $code;
  437. close STDOUT or die "error closing STDOUT: $!";