3 # ====================================================================
4 # Written by Andy Polyakov <appro@openssl.org> for the OpenSSL
5 # project. The module is, however, dual licensed under OpenSSL and
6 # CRYPTOGAMS licenses depending on where you obtain it. For further
7 # details see http://www.openssl.org/~appro/cryptogams/.
8 # ====================================================================
12 # The module implements "4-bit" GCM GHASH function and underlying
13 # single multiplication operation in GF(2^128). "4-bit" means that it
14 # uses 256 bytes per-key table [+128 bytes shared table]. Performance
15 # results are for streamed GHASH subroutine on UltraSPARC pre-Tx CPU
16 # and are expressed in cycles per processed byte, less is better:
18 # gcc 3.3.x cc 5.2 this assembler
20 # 32-bit build 81.4 43.3 12.6 (+546%/+244%)
21 # 64-bit build 20.2 21.2 12.6 (+60%/+68%)
23 # Here is data collected on UltraSPARC T1 system running Linux:
25 # gcc 4.4.1 this assembler
27 # 32-bit build 566 50 (+1000%)
28 # 64-bit build 56 50 (+12%)
30 # I don't quite understand why difference between 32-bit and 64-bit
31 # compiler-generated code is so big. Compilers *were* instructed to
32 # generate code for UltraSPARC and should have used 64-bit registers
33 # for Z vector (see C code) even in 32-bit build... Oh well, it only
34 # means more impressive improvement coefficients for this assembler
35 # module;-) Loops are aggressively modulo-scheduled in respect to
36 # references to input data and Z.hi updates to achieve 12 cycles
37 # timing. To anchor to something else, sha1-sparcv9.pl spends 11.6
38 # cycles to process one byte on UltraSPARC pre-Tx CPU and ~24 on T1.
41 for (@ARGV) { $bits=64 if (/\-m64/ || /\-xarch\=v9/); }
42 if ($bits==64) { $bias=2047; $frame=192; }
43 else { $bias=0; $frame=112; }
46 open STDOUT,">$output";
48 $Zhi="%o0"; # 64-bit values
55 $nhi="%l0"; # small values and pointers
64 $Xi="%i0"; # input argument block
70 .section ".text",#alloc,#execinstr
74 .long `0x0000<<16`,0,`0x1C20<<16`,0,`0x3840<<16`,0,`0x2460<<16`,0
75 .long `0x7080<<16`,0,`0x6CA0<<16`,0,`0x48C0<<16`,0,`0x54E0<<16`,0
76 .long `0xE100<<16`,0,`0xFD20<<16`,0,`0xD940<<16`,0,`0xC560<<16`,0
77 .long `0x9180<<16`,0,`0x8DA0<<16`,0,`0xA9C0<<16`,0,`0xB5E0<<16`,0
78 .type rem_4bit,#object
79 .size rem_4bit,(.-rem_4bit)
92 add %o7,rem_4bit-1b,$rem_4bit
99 ldx [$Htblo+$nlo],$Zlo
100 ldx [$Htbl+$nlo],$Zhi
104 ldx [$Htblo+$nhi],$Tlo
106 ldx [$Htbl+$nhi],$Thi
108 ldx [$rem_4bit+$remi],$rem
124 ldx [$Htblo+$nlo],$Tlo
127 ldx [$Htbl+$nlo],$Thi
130 ldx [$rem_4bit+$remi],$rem
133 ldub [$inp+$cnt],$nlo
140 ldx [$Htblo+$nhi],$Tlo
143 ldx [$Htbl+$nhi],$Thi
145 ldx [$rem_4bit+$remi],$rem
158 ldx [$Htblo+$nlo],$Tlo
161 ldx [$Htbl+$nlo],$Thi
164 ldx [$rem_4bit+$remi],$rem
173 be,pn `$bits==64?"%xcc":"%icc"`,.Ldone
176 ldx [$Htblo+$nhi],$Tlo
179 ldx [$Htbl+$nhi],$Thi
181 ldx [$rem_4bit+$remi],$rem
197 ldx [$Htblo+$nhi],$Tlo
200 ldx [$Htbl+$nhi],$Thi
202 ldx [$rem_4bit+$remi],$rem
214 .type gcm_ghash_4bit,#function
215 .size gcm_ghash_4bit,(.-gcm_ghash_4bit)
222 .globl gcm_gmult_4bit
230 add %o7,rem_4bit-1b,$rem_4bit
235 ldx [$Htblo+$nlo],$Zlo
236 ldx [$Htbl+$nlo],$Zhi
240 ldx [$Htblo+$nhi],$Tlo
242 ldx [$Htbl+$nhi],$Thi
244 ldx [$rem_4bit+$remi],$rem
259 ldx [$Htblo+$nlo],$Tlo
262 ldx [$Htbl+$nlo],$Thi
265 ldx [$rem_4bit+$remi],$rem
274 ldx [$Htblo+$nhi],$Tlo
277 ldx [$Htbl+$nhi],$Thi
279 ldx [$rem_4bit+$remi],$rem
291 ldx [$Htblo+$nlo],$Tlo
294 ldx [$Htbl+$nlo],$Thi
297 ldx [$rem_4bit+$remi],$rem
305 ldx [$Htblo+$nhi],$Tlo
308 ldx [$Htbl+$nhi],$Thi
310 ldx [$rem_4bit+$remi],$rem
322 .type gcm_gmult_4bit,#function
323 .size gcm_gmult_4bit,(.-gcm_gmult_4bit)
324 .asciz "GHASH for SPARCv9, CRYPTOGAMS by <appro\@openssl.org>"
328 $code =~ s/\`([^\`]*)\`/eval $1/gem;