1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
|
/* poly1305-internal.h - Poly1305 internals
* Copyright (C) 2014 Jussi Kivilinna <jussi.kivilinna@iki.fi>
*
* This file is part of Libgcrypt.
*
* Libgcrypt is free software; you can redistribute it and/or modify
* it under the terms of the GNU Lesser general Public License as
* published by the Free Software Foundation; either version 2.1 of
* the License, or (at your option) any later version.
*
* Libgcrypt is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* GNU Lesser General Public License for more details.
*
* You should have received a copy of the GNU Lesser General Public
* License along with this program; if not, see <http://www.gnu.org/licenses/>.
*/
#ifndef G10_POLY1305_INTERNAL_H
#define G10_POLY1305_INTERNAL_H
#include <config.h>
#include <stdio.h>
#include <stdlib.h>
#include <string.h>
#include "types.h"
#include "g10lib.h"
#include "cipher.h"
#include "bufhelp.h"
#define POLY1305_TAGLEN 16
#define POLY1305_KEYLEN 32
/* Block-size used in default implementation. */
#define POLY1305_REF_BLOCKSIZE 16
/* State size of default implementation. */
#define POLY1305_REF_STATESIZE 64
/* State alignment for default implementation. */
#define POLY1305_REF_ALIGNMENT sizeof(void *)
#undef POLY1305_SYSV_FUNC_ABI
/* POLY1305_USE_SSE2 indicates whether to compile with AMD64 SSE2 code. */
#undef POLY1305_USE_SSE2
#if defined(__x86_64__) && (defined(HAVE_COMPATIBLE_GCC_AMD64_PLATFORM_AS) || \
defined(HAVE_COMPATIBLE_GCC_WIN64_PLATFORM_AS))
# define POLY1305_USE_SSE2 1
# define POLY1305_SSE2_BLOCKSIZE 32
# define POLY1305_SSE2_STATESIZE 248
# define POLY1305_SSE2_ALIGNMENT 16
# define POLY1305_SYSV_FUNC_ABI 1
#endif
/* POLY1305_USE_AVX2 indicates whether to compile with AMD64 AVX2 code. */
#undef POLY1305_USE_AVX2
#if defined(__x86_64__) && (defined(HAVE_COMPATIBLE_GCC_AMD64_PLATFORM_AS) || \
defined(HAVE_COMPATIBLE_GCC_WIN64_PLATFORM_AS)) && \
defined(ENABLE_AVX2_SUPPORT)
# define POLY1305_USE_AVX2 1
# define POLY1305_AVX2_BLOCKSIZE 64
# define POLY1305_AVX2_STATESIZE 328
# define POLY1305_AVX2_ALIGNMENT 32
# define POLY1305_SYSV_FUNC_ABI 1
#endif
/* POLY1305_USE_NEON indicates whether to enable ARM NEON assembly code. */
#undef POLY1305_USE_NEON
#if defined(ENABLE_NEON_SUPPORT) && defined(HAVE_ARM_ARCH_V6) && \
defined(__ARMEL__) && defined(HAVE_COMPATIBLE_GCC_ARM_PLATFORM_AS) && \
defined(HAVE_GCC_INLINE_ASM_NEON)
# define POLY1305_USE_NEON 1
# define POLY1305_NEON_BLOCKSIZE 32
# define POLY1305_NEON_STATESIZE 128
# define POLY1305_NEON_ALIGNMENT 16
#endif
/* Largest block-size used in any implementation (optimized implementations
* might use block-size multiple of 16). */
#ifdef POLY1305_USE_AVX2
# define POLY1305_LARGEST_BLOCKSIZE POLY1305_AVX2_BLOCKSIZE
#elif defined(POLY1305_USE_NEON)
# define POLY1305_LARGEST_BLOCKSIZE POLY1305_NEON_BLOCKSIZE
#elif defined(POLY1305_USE_SSE2)
# define POLY1305_LARGEST_BLOCKSIZE POLY1305_SSE2_BLOCKSIZE
#else
# define POLY1305_LARGEST_BLOCKSIZE POLY1305_REF_BLOCKSIZE
#endif
/* Largest state-size used in any implementation. */
#ifdef POLY1305_USE_AVX2
# define POLY1305_LARGEST_STATESIZE POLY1305_AVX2_STATESIZE
#elif defined(POLY1305_USE_NEON)
# define POLY1305_LARGEST_STATESIZE POLY1305_NEON_STATESIZE
#elif defined(POLY1305_USE_SSE2)
# define POLY1305_LARGEST_STATESIZE POLY1305_SSE2_STATESIZE
#else
# define POLY1305_LARGEST_STATESIZE POLY1305_REF_STATESIZE
#endif
/* Minimum alignment for state pointer passed to implementations. */
#ifdef POLY1305_USE_AVX2
# define POLY1305_STATE_ALIGNMENT POLY1305_AVX2_ALIGNMENT
#elif defined(POLY1305_USE_NEON)
# define POLY1305_STATE_ALIGNMENT POLY1305_NEON_ALIGNMENT
#elif defined(POLY1305_USE_SSE2)
# define POLY1305_STATE_ALIGNMENT POLY1305_SSE2_ALIGNMENT
#else
# define POLY1305_STATE_ALIGNMENT POLY1305_REF_ALIGNMENT
#endif
/* Assembly implementations use SystemV ABI, ABI conversion and additional
* stack to store XMM6-XMM15 needed on Win64. */
#undef OPS_FUNC_ABI
#if defined(POLY1305_SYSV_FUNC_ABI) && \
defined(HAVE_COMPATIBLE_GCC_WIN64_PLATFORM_AS)
# define OPS_FUNC_ABI __attribute__((sysv_abi))
#else
# define OPS_FUNC_ABI
#endif
typedef struct poly1305_key_s
{
byte b[POLY1305_KEYLEN];
} poly1305_key_t;
typedef struct poly1305_ops_s
{
size_t block_size;
void (*init_ext) (void *ctx, const poly1305_key_t * key) OPS_FUNC_ABI;
unsigned int (*blocks) (void *ctx, const byte * m, size_t bytes) OPS_FUNC_ABI;
unsigned int (*finish_ext) (void *ctx, const byte * m, size_t remaining,
byte mac[POLY1305_TAGLEN]) OPS_FUNC_ABI;
} poly1305_ops_t;
typedef struct poly1305_context_s
{
byte state[POLY1305_LARGEST_STATESIZE + POLY1305_STATE_ALIGNMENT];
byte buffer[POLY1305_LARGEST_BLOCKSIZE];
const poly1305_ops_t *ops;
unsigned int leftover;
} poly1305_context_t;
gcry_err_code_t _gcry_poly1305_init (poly1305_context_t * ctx, const byte * key,
size_t keylen);
void _gcry_poly1305_finish (poly1305_context_t * ctx,
byte mac[POLY1305_TAGLEN]);
void _gcry_poly1305_update (poly1305_context_t * ctx, const byte * buf,
size_t buflen);
#endif /* G10_POLY1305_INTERNAL_H */
|
