168 строки
5.1 KiB
C
168 строки
5.1 KiB
C
/* poly1305-internal.h - Poly1305 internals
|
|
* Copyright (C) 2014 Jussi Kivilinna <jussi.kivilinna@iki.fi>
|
|
*
|
|
* This file is part of Libgcrypt.
|
|
*
|
|
* Libgcrypt is free software; you can redistribute it and/or modify
|
|
* it under the terms of the GNU Lesser general Public License as
|
|
* published by the Free Software Foundation; either version 2.1 of
|
|
* the License, or (at your option) any later version.
|
|
*
|
|
* Libgcrypt is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
* GNU Lesser General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU Lesser General Public
|
|
* License along with this program; if not, see <http://www.gnu.org/licenses/>.
|
|
*/
|
|
|
|
#ifndef G10_POLY1305_INTERNAL_H
|
|
#define G10_POLY1305_INTERNAL_H
|
|
|
|
#include <config.h>
|
|
#include <stdio.h>
|
|
#include <stdlib.h>
|
|
#include <string.h>
|
|
#include "types.h"
|
|
#include "g10lib.h"
|
|
#include "cipher.h"
|
|
#include "bufhelp.h"
|
|
|
|
|
|
#define POLY1305_TAGLEN 16
|
|
#define POLY1305_KEYLEN 32
|
|
|
|
|
|
/* Block-size used in default implementation. */
|
|
#define POLY1305_REF_BLOCKSIZE 16
|
|
|
|
/* State size of default implementation. */
|
|
#define POLY1305_REF_STATESIZE 64
|
|
|
|
/* State alignment for default implementation. */
|
|
#define POLY1305_REF_ALIGNMENT sizeof(void *)
|
|
|
|
|
|
#undef POLY1305_SYSV_FUNC_ABI
|
|
|
|
/* POLY1305_USE_SSE2 indicates whether to compile with AMD64 SSE2 code. */
|
|
#undef POLY1305_USE_SSE2
|
|
#if defined(__x86_64__) && (defined(HAVE_COMPATIBLE_GCC_AMD64_PLATFORM_AS) || \
|
|
defined(HAVE_COMPATIBLE_GCC_WIN64_PLATFORM_AS))
|
|
# define POLY1305_USE_SSE2 1
|
|
# define POLY1305_SSE2_BLOCKSIZE 32
|
|
# define POLY1305_SSE2_STATESIZE 248
|
|
# define POLY1305_SSE2_ALIGNMENT 16
|
|
# define POLY1305_SYSV_FUNC_ABI 1
|
|
#endif
|
|
|
|
|
|
/* POLY1305_USE_AVX2 indicates whether to compile with AMD64 AVX2 code. */
|
|
#undef POLY1305_USE_AVX2
|
|
#if defined(__x86_64__) && (defined(HAVE_COMPATIBLE_GCC_AMD64_PLATFORM_AS) || \
|
|
defined(HAVE_COMPATIBLE_GCC_WIN64_PLATFORM_AS)) && \
|
|
defined(ENABLE_AVX2_SUPPORT)
|
|
# define POLY1305_USE_AVX2 1
|
|
# define POLY1305_AVX2_BLOCKSIZE 64
|
|
# define POLY1305_AVX2_STATESIZE 328
|
|
# define POLY1305_AVX2_ALIGNMENT 32
|
|
# define POLY1305_SYSV_FUNC_ABI 1
|
|
#endif
|
|
|
|
|
|
/* POLY1305_USE_NEON indicates whether to enable ARM NEON assembly code. */
|
|
#undef POLY1305_USE_NEON
|
|
#if defined(ENABLE_NEON_SUPPORT) && defined(HAVE_ARM_ARCH_V6) && \
|
|
defined(__ARMEL__) && defined(HAVE_COMPATIBLE_GCC_ARM_PLATFORM_AS) && \
|
|
defined(HAVE_GCC_INLINE_ASM_NEON)
|
|
# define POLY1305_USE_NEON 1
|
|
# define POLY1305_NEON_BLOCKSIZE 32
|
|
# define POLY1305_NEON_STATESIZE 128
|
|
# define POLY1305_NEON_ALIGNMENT 16
|
|
#endif
|
|
|
|
|
|
/* Largest block-size used in any implementation (optimized implementations
|
|
* might use block-size multiple of 16). */
|
|
#ifdef POLY1305_USE_AVX2
|
|
# define POLY1305_LARGEST_BLOCKSIZE POLY1305_AVX2_BLOCKSIZE
|
|
#elif defined(POLY1305_USE_NEON)
|
|
# define POLY1305_LARGEST_BLOCKSIZE POLY1305_NEON_BLOCKSIZE
|
|
#elif defined(POLY1305_USE_SSE2)
|
|
# define POLY1305_LARGEST_BLOCKSIZE POLY1305_SSE2_BLOCKSIZE
|
|
#else
|
|
# define POLY1305_LARGEST_BLOCKSIZE POLY1305_REF_BLOCKSIZE
|
|
#endif
|
|
|
|
/* Largest state-size used in any implementation. */
|
|
#ifdef POLY1305_USE_AVX2
|
|
# define POLY1305_LARGEST_STATESIZE POLY1305_AVX2_STATESIZE
|
|
#elif defined(POLY1305_USE_NEON)
|
|
# define POLY1305_LARGEST_STATESIZE POLY1305_NEON_STATESIZE
|
|
#elif defined(POLY1305_USE_SSE2)
|
|
# define POLY1305_LARGEST_STATESIZE POLY1305_SSE2_STATESIZE
|
|
#else
|
|
# define POLY1305_LARGEST_STATESIZE POLY1305_REF_STATESIZE
|
|
#endif
|
|
|
|
/* Minimum alignment for state pointer passed to implementations. */
|
|
#ifdef POLY1305_USE_AVX2
|
|
# define POLY1305_STATE_ALIGNMENT POLY1305_AVX2_ALIGNMENT
|
|
#elif defined(POLY1305_USE_NEON)
|
|
# define POLY1305_STATE_ALIGNMENT POLY1305_NEON_ALIGNMENT
|
|
#elif defined(POLY1305_USE_SSE2)
|
|
# define POLY1305_STATE_ALIGNMENT POLY1305_SSE2_ALIGNMENT
|
|
#else
|
|
# define POLY1305_STATE_ALIGNMENT POLY1305_REF_ALIGNMENT
|
|
#endif
|
|
|
|
|
|
/* Assembly implementations use SystemV ABI, ABI conversion and additional
|
|
* stack to store XMM6-XMM15 needed on Win64. */
|
|
#undef OPS_FUNC_ABI
|
|
#if defined(POLY1305_SYSV_FUNC_ABI) && \
|
|
defined(HAVE_COMPATIBLE_GCC_WIN64_PLATFORM_AS)
|
|
# define OPS_FUNC_ABI __attribute__((sysv_abi))
|
|
#else
|
|
# define OPS_FUNC_ABI
|
|
#endif
|
|
|
|
|
|
typedef struct poly1305_key_s
|
|
{
|
|
byte b[POLY1305_KEYLEN];
|
|
} poly1305_key_t;
|
|
|
|
|
|
typedef struct poly1305_ops_s
|
|
{
|
|
size_t block_size;
|
|
void (*init_ext) (void *ctx, const poly1305_key_t * key) OPS_FUNC_ABI;
|
|
unsigned int (*blocks) (void *ctx, const byte * m, size_t bytes) OPS_FUNC_ABI;
|
|
unsigned int (*finish_ext) (void *ctx, const byte * m, size_t remaining,
|
|
byte mac[POLY1305_TAGLEN]) OPS_FUNC_ABI;
|
|
} poly1305_ops_t;
|
|
|
|
|
|
typedef struct poly1305_context_s
|
|
{
|
|
byte state[POLY1305_LARGEST_STATESIZE + POLY1305_STATE_ALIGNMENT];
|
|
byte buffer[POLY1305_LARGEST_BLOCKSIZE];
|
|
const poly1305_ops_t *ops;
|
|
unsigned int leftover;
|
|
} poly1305_context_t;
|
|
|
|
|
|
gcry_err_code_t _gcry_poly1305_init (poly1305_context_t * ctx, const byte * key,
|
|
size_t keylen);
|
|
|
|
void _gcry_poly1305_finish (poly1305_context_t * ctx,
|
|
byte mac[POLY1305_TAGLEN]);
|
|
|
|
void _gcry_poly1305_update (poly1305_context_t * ctx, const byte * buf,
|
|
size_t buflen);
|
|
|
|
|
|
#endif /* G10_POLY1305_INTERNAL_H */
|