mirror of
https://codeberg.org/forgejo/forgejo.git
synced 2024-12-04 17:38:42 +00:00
267 lines
8 KiB
ArmAsm
267 lines
8 KiB
ArmAsm
|
//+build !noasm,!appengine
|
||
|
|
|
||
|
|
// SHA intrinsic version of SHA256
|
||
|
|
|
||
|
|
// Kristofer Peterson, (C) 2018.
|
||
|
|
//
|
||
|
|
// Licensed under the Apache License, Version 2.0 (the "License");
|
||
|
|
// you may not use this file except in compliance with the License.
|
||
|
|
// You may obtain a copy of the License at
|
||
|
|
//
|
||
|
|
// http://www.apache.org/licenses/LICENSE-2.0
|
||
|
|
//
|
||
|
|
// Unless required by applicable law or agreed to in writing, software
|
||
|
|
// distributed under the License is distributed on an "AS IS" BASIS,
|
||
|
|
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||
|
|
// See the License for the specific language governing permissions and
|
||
|
|
// limitations under the License.
|
||
|
|
//
|
||
|
|
|
||
|
|
#include "textflag.h"
|
||
|
|
|
||
|
|
DATA K<>+0x00(SB)/4, $0x428a2f98
|
||
|
|
DATA K<>+0x04(SB)/4, $0x71374491
|
||
|
|
DATA K<>+0x08(SB)/4, $0xb5c0fbcf
|
||
|
|
DATA K<>+0x0c(SB)/4, $0xe9b5dba5
|
||
|
|
DATA K<>+0x10(SB)/4, $0x3956c25b
|
||
|
|
DATA K<>+0x14(SB)/4, $0x59f111f1
|
||
|
|
DATA K<>+0x18(SB)/4, $0x923f82a4
|
||
|
|
DATA K<>+0x1c(SB)/4, $0xab1c5ed5
|
||
|
|
DATA K<>+0x20(SB)/4, $0xd807aa98
|
||
|
|
DATA K<>+0x24(SB)/4, $0x12835b01
|
||
|
|
DATA K<>+0x28(SB)/4, $0x243185be
|
||
|
|
DATA K<>+0x2c(SB)/4, $0x550c7dc3
|
||
|
|
DATA K<>+0x30(SB)/4, $0x72be5d74
|
||
|
|
DATA K<>+0x34(SB)/4, $0x80deb1fe
|
||
|
|
DATA K<>+0x38(SB)/4, $0x9bdc06a7
|
||
|
|
DATA K<>+0x3c(SB)/4, $0xc19bf174
|
||
|
|
DATA K<>+0x40(SB)/4, $0xe49b69c1
|
||
|
|
DATA K<>+0x44(SB)/4, $0xefbe4786
|
||
|
|
DATA K<>+0x48(SB)/4, $0x0fc19dc6
|
||
|
|
DATA K<>+0x4c(SB)/4, $0x240ca1cc
|
||
|
|
DATA K<>+0x50(SB)/4, $0x2de92c6f
|
||
|
|
DATA K<>+0x54(SB)/4, $0x4a7484aa
|
||
|
|
DATA K<>+0x58(SB)/4, $0x5cb0a9dc
|
||
|
|
DATA K<>+0x5c(SB)/4, $0x76f988da
|
||
|
|
DATA K<>+0x60(SB)/4, $0x983e5152
|
||
|
|
DATA K<>+0x64(SB)/4, $0xa831c66d
|
||
|
|
DATA K<>+0x68(SB)/4, $0xb00327c8
|
||
|
|
DATA K<>+0x6c(SB)/4, $0xbf597fc7
|
||
|
|
DATA K<>+0x70(SB)/4, $0xc6e00bf3
|
||
|
|
DATA K<>+0x74(SB)/4, $0xd5a79147
|
||
|
|
DATA K<>+0x78(SB)/4, $0x06ca6351
|
||
|
|
DATA K<>+0x7c(SB)/4, $0x14292967
|
||
|
|
DATA K<>+0x80(SB)/4, $0x27b70a85
|
||
|
|
DATA K<>+0x84(SB)/4, $0x2e1b2138
|
||
|
|
DATA K<>+0x88(SB)/4, $0x4d2c6dfc
|
||
|
|
DATA K<>+0x8c(SB)/4, $0x53380d13
|
||
|
|
DATA K<>+0x90(SB)/4, $0x650a7354
|
||
|
|
DATA K<>+0x94(SB)/4, $0x766a0abb
|
||
|
|
DATA K<>+0x98(SB)/4, $0x81c2c92e
|
||
|
|
DATA K<>+0x9c(SB)/4, $0x92722c85
|
||
|
|
DATA K<>+0xa0(SB)/4, $0xa2bfe8a1
|
||
|
|
DATA K<>+0xa4(SB)/4, $0xa81a664b
|
||
|
|
DATA K<>+0xa8(SB)/4, $0xc24b8b70
|
||
|
|
DATA K<>+0xac(SB)/4, $0xc76c51a3
|
||
|
|
DATA K<>+0xb0(SB)/4, $0xd192e819
|
||
|
|
DATA K<>+0xb4(SB)/4, $0xd6990624
|
||
|
|
DATA K<>+0xb8(SB)/4, $0xf40e3585
|
||
|
|
DATA K<>+0xbc(SB)/4, $0x106aa070
|
||
|
|
DATA K<>+0xc0(SB)/4, $0x19a4c116
|
||
|
|
DATA K<>+0xc4(SB)/4, $0x1e376c08
|
||
|
|
DATA K<>+0xc8(SB)/4, $0x2748774c
|
||
|
|
DATA K<>+0xcc(SB)/4, $0x34b0bcb5
|
||
|
|
DATA K<>+0xd0(SB)/4, $0x391c0cb3
|
||
|
|
DATA K<>+0xd4(SB)/4, $0x4ed8aa4a
|
||
|
|
DATA K<>+0xd8(SB)/4, $0x5b9cca4f
|
||
|
|
DATA K<>+0xdc(SB)/4, $0x682e6ff3
|
||
|
|
DATA K<>+0xe0(SB)/4, $0x748f82ee
|
||
|
|
DATA K<>+0xe4(SB)/4, $0x78a5636f
|
||
|
|
DATA K<>+0xe8(SB)/4, $0x84c87814
|
||
|
|
DATA K<>+0xec(SB)/4, $0x8cc70208
|
||
|
|
DATA K<>+0xf0(SB)/4, $0x90befffa
|
||
|
|
DATA K<>+0xf4(SB)/4, $0xa4506ceb
|
||
|
|
DATA K<>+0xf8(SB)/4, $0xbef9a3f7
|
||
|
|
DATA K<>+0xfc(SB)/4, $0xc67178f2
|
||
|
|
GLOBL K<>(SB), RODATA|NOPTR, $256
|
||
|
|
|
||
|
|
DATA SHUF_MASK<>+0x00(SB)/8, $0x0405060700010203
|
||
|
|
DATA SHUF_MASK<>+0x08(SB)/8, $0x0c0d0e0f08090a0b
|
||
|
|
GLOBL SHUF_MASK<>(SB), RODATA|NOPTR, $16
|
||
|
|
|
||
|
|
// Register Usage
|
||
|
|
// BX base address of constant table (constant)
|
||
|
|
// DX hash_state (constant)
|
||
|
|
// SI hash_data.data
|
||
|
|
// DI hash_data.data + hash_data.length - 64 (constant)
|
||
|
|
// X0 scratch
|
||
|
|
// X1 scratch
|
||
|
|
// X2 working hash state // ABEF
|
||
|
|
// X3 working hash state // CDGH
|
||
|
|
// X4 first 16 bytes of block
|
||
|
|
// X5 second 16 bytes of block
|
||
|
|
// X6 third 16 bytes of block
|
||
|
|
// X7 fourth 16 bytes of block
|
||
|
|
// X12 saved hash state // ABEF
|
||
|
|
// X13 saved hash state // CDGH
|
||
|
|
// X15 data shuffle mask (constant)
|
||
|
|
|
||
|
|
TEXT ·blockSha(SB), NOSPLIT, $0-32
|
||
|
|
MOVQ h+0(FP), DX
|
||
|
|
MOVQ message_base+8(FP), SI
|
||
|
|
MOVQ message_len+16(FP), DI
|
||
|
|
LEAQ -64(SI)(DI*1), DI
|
||
|
|
MOVOU (DX), X2
|
||
|
|
MOVOU 16(DX), X1
|
||
|
|
MOVO X2, X3
|
||
|
|
PUNPCKLLQ X1, X2
|
||
|
|
PUNPCKHLQ X1, X3
|
||
|
|
PSHUFD $0x27, X2, X2
|
||
|
|
PSHUFD $0x27, X3, X3
|
||
|
|
MOVO SHUF_MASK<>(SB), X15
|
||
|
|
LEAQ K<>(SB), BX
|
||
|
|
|
||
|
|
JMP TEST
|
||
|
|
|
||
|
|
LOOP:
|
||
|
|
MOVO X2, X12
|
||
|
|
MOVO X3, X13
|
||
|
|
|
||
|
|
// load block and shuffle
|
||
|
|
MOVOU (SI), X4
|
||
|
|
MOVOU 16(SI), X5
|
||
|
|
MOVOU 32(SI), X6
|
||
|
|
MOVOU 48(SI), X7
|
||
|
|
PSHUFB X15, X4
|
||
|
|
PSHUFB X15, X5
|
||
|
|
PSHUFB X15, X6
|
||
|
|
PSHUFB X15, X7
|
||
|
|
|
||
|
|
#define ROUND456 \
|
||
|
|
PADDL X5, X0 \
|
||
|
|
LONG $0xdacb380f \ // SHA256RNDS2 XMM3, XMM2
|
||
|
|
MOVO X5, X1 \
|
||
|
|
LONG $0x0f3a0f66; WORD $0x04cc \ // PALIGNR XMM1, XMM4, 4
|
||
|
|
PADDL X1, X6 \
|
||
|
|
LONG $0xf5cd380f \ // SHA256MSG2 XMM6, XMM5
|
||
|
|
PSHUFD $0x4e, X0, X0 \
|
||
|
|
LONG $0xd3cb380f \ // SHA256RNDS2 XMM2, XMM3
|
||
|
|
LONG $0xe5cc380f // SHA256MSG1 XMM4, XMM5
|
||
|
|
|
||
|
|
#define ROUND567 \
|
||
|
|
PADDL X6, X0 \
|
||
|
|
LONG $0xdacb380f \ // SHA256RNDS2 XMM3, XMM2
|
||
|
|
MOVO X6, X1 \
|
||
|
|
LONG $0x0f3a0f66; WORD $0x04cd \ // PALIGNR XMM1, XMM5, 4
|
||
|
|
PADDL X1, X7 \
|
||
|
|
LONG $0xfecd380f \ // SHA256MSG2 XMM7, XMM6
|
||
|
|
PSHUFD $0x4e, X0, X0 \
|
||
|
|
LONG $0xd3cb380f \ // SHA256RNDS2 XMM2, XMM3
|
||
|
|
LONG $0xeecc380f // SHA256MSG1 XMM5, XMM6
|
||
|
|
|
||
|
|
#define ROUND674 \
|
||
|
|
PADDL X7, X0 \
|
||
|
|
LONG $0xdacb380f \ // SHA256RNDS2 XMM3, XMM2
|
||
|
|
MOVO X7, X1 \
|
||
|
|
LONG $0x0f3a0f66; WORD $0x04ce \ // PALIGNR XMM1, XMM6, 4
|
||
|
|
PADDL X1, X4 \
|
||
|
|
LONG $0xe7cd380f \ // SHA256MSG2 XMM4, XMM7
|
||
|
|
PSHUFD $0x4e, X0, X0 \
|
||
|
|
LONG $0xd3cb380f \ // SHA256RNDS2 XMM2, XMM3
|
||
|
|
LONG $0xf7cc380f // SHA256MSG1 XMM6, XMM7
|
||
|
|
|
||
|
|
#define ROUND745 \
|
||
|
|
PADDL X4, X0 \
|
||
|
|
LONG $0xdacb380f \ // SHA256RNDS2 XMM3, XMM2
|
||
|
|
MOVO X4, X1 \
|
||
|
|
LONG $0x0f3a0f66; WORD $0x04cf \ // PALIGNR XMM1, XMM7, 4
|
||
|
|
PADDL X1, X5 \
|
||
|
|
LONG $0xeccd380f \ // SHA256MSG2 XMM5, XMM4
|
||
|
|
PSHUFD $0x4e, X0, X0 \
|
||
|
|
LONG $0xd3cb380f \ // SHA256RNDS2 XMM2, XMM3
|
||
|
|
LONG $0xfccc380f // SHA256MSG1 XMM7, XMM4
|
||
|
|
|
||
|
|
// rounds 0-3
|
||
|
|
MOVO (BX), X0
|
||
|
|
PADDL X4, X0
|
||
|
|
LONG $0xdacb380f // SHA256RNDS2 XMM3, XMM2
|
||
|
|
PSHUFD $0x4e, X0, X0
|
||
|
|
LONG $0xd3cb380f // SHA256RNDS2 XMM2, XMM3
|
||
|
|
|
||
|
|
// rounds 4-7
|
||
|
|
MOVO 1*16(BX), X0
|
||
|
|
PADDL X5, X0
|
||
|
|
LONG $0xdacb380f // SHA256RNDS2 XMM3, XMM2
|
||
|
|
PSHUFD $0x4e, X0, X0
|
||
|
|
LONG $0xd3cb380f // SHA256RNDS2 XMM2, XMM3
|
||
|
|
LONG $0xe5cc380f // SHA256MSG1 XMM4, XMM5
|
||
|
|
|
||
|
|
// rounds 8-11
|
||
|
|
MOVO 2*16(BX), X0
|
||
|
|
PADDL X6, X0
|
||
|
|
LONG $0xdacb380f // SHA256RNDS2 XMM3, XMM2
|
||
|
|
PSHUFD $0x4e, X0, X0
|
||
|
|
LONG $0xd3cb380f // SHA256RNDS2 XMM2, XMM3
|
||
|
|
LONG $0xeecc380f // SHA256MSG1 XMM5, XMM6
|
||
|
|
|
||
|
|
MOVO 3*16(BX), X0; ROUND674 // rounds 12-15
|
||
|
|
MOVO 4*16(BX), X0; ROUND745 // rounds 16-19
|
||
|
|
MOVO 5*16(BX), X0; ROUND456 // rounds 20-23
|
||
|
|
MOVO 6*16(BX), X0; ROUND567 // rounds 24-27
|
||
|
|
MOVO 7*16(BX), X0; ROUND674 // rounds 28-31
|
||
|
|
MOVO 8*16(BX), X0; ROUND745 // rounds 32-35
|
||
|
|
MOVO 9*16(BX), X0; ROUND456 // rounds 36-39
|
||
|
|
MOVO 10*16(BX), X0; ROUND567 // rounds 40-43
|
||
|
|
MOVO 11*16(BX), X0; ROUND674 // rounds 44-47
|
||
|
|
MOVO 12*16(BX), X0; ROUND745 // rounds 48-51
|
||
|
|
|
||
|
|
// rounds 52-55
|
||
|
|
MOVO 13*16(BX), X0
|
||
|
|
PADDL X5, X0
|
||
|
|
LONG $0xdacb380f // SHA256RNDS2 XMM3, XMM2
|
||
|
|
MOVO X5, X1
|
||
|
|
LONG $0x0f3a0f66; WORD $0x04cc // PALIGNR XMM1, XMM4, 4
|
||
|
|
PADDL X1, X6
|
||
|
|
LONG $0xf5cd380f // SHA256MSG2 XMM6, XMM5
|
||
|
|
PSHUFD $0x4e, X0, X0
|
||
|
|
LONG $0xd3cb380f // SHA256RNDS2 XMM2, XMM3
|
||
|
|
|
||
|
|
// rounds 56-59
|
||
|
|
MOVO 14*16(BX), X0
|
||
|
|
PADDL X6, X0
|
||
|
|
LONG $0xdacb380f // SHA256RNDS2 XMM3, XMM2
|
||
|
|
MOVO X6, X1
|
||
|
|
LONG $0x0f3a0f66; WORD $0x04cd // PALIGNR XMM1, XMM5, 4
|
||
|
|
PADDL X1, X7
|
||
|
|
LONG $0xfecd380f // SHA256MSG2 XMM7, XMM6
|
||
|
|
PSHUFD $0x4e, X0, X0
|
||
|
|
LONG $0xd3cb380f // SHA256RNDS2 XMM2, XMM3
|
||
|
|
|
||
|
|
// rounds 60-63
|
||
|
|
MOVO 15*16(BX), X0
|
||
|
|
PADDL X7, X0
|
||
|
|
LONG $0xdacb380f // SHA256RNDS2 XMM3, XMM2
|
||
|
|
PSHUFD $0x4e, X0, X0
|
||
|
|
LONG $0xd3cb380f // SHA256RNDS2 XMM2, XMM3
|
||
|
|
|
||
|
|
PADDL X12, X2
|
||
|
|
PADDL X13, X3
|
||
|
|
|
||
|
|
ADDQ $64, SI
|
||
|
|
|
||
|
|
TEST:
|
||
|
|
CMPQ SI, DI
|
||
|
|
JBE LOOP
|
||
|
|
|
||
|
|
PSHUFD $0x4e, X3, X0
|
||
|
|
LONG $0x0e3a0f66; WORD $0xf0c2 // PBLENDW XMM0, XMM2, 0xf0
|
||
|
|
PSHUFD $0x4e, X2, X1
|
||
|
|
LONG $0x0e3a0f66; WORD $0x0fcb // PBLENDW XMM1, XMM3, 0x0f
|
||
|
|
PSHUFD $0x1b, X0, X0
|
||
|
|
PSHUFD $0x1b, X1, X1
|
||
|
|
|
||
|
|
MOVOU X0, (DX)
|
||
|
|
MOVOU X1, 16(DX)
|
||
|
|
|
||
|
|
RET
|