| blob | efb6dc17dc90799aa2a7da10bb8f245ede34a207 |
1 /* SPDX-License-Identifier: GPL-2.0-or-later */
2 /*
3 * Serpent Cipher 8-way parallel algorithm (x86_64/SSE2)
4 *
5 * Copyright (C) 2011 Jussi Kivilinna <jussi.kivilinna@mbnet.fi>
6 *
7 * Based on crypto/serpent.c by
8 * Copyright (C) 2002 Dag Arne Osvik <osvik@ii.uib.no>
9 * 2003 Herbert Valerio Riedel <hvr@gnu.org>
10 */
12 #include <linux/linkage.h>
14 .file "serpent-sse2-x86_64-asm_64.S"
15 .text
17 #define CTX %rdi
19 /**********************************************************************
20 8-way SSE2 serpent
21 **********************************************************************/
22 #define RA1 %xmm0
23 #define RB1 %xmm1
24 #define RC1 %xmm2
25 #define RD1 %xmm3
26 #define RE1 %xmm4
28 #define RA2 %xmm5
29 #define RB2 %xmm6
30 #define RC2 %xmm7
31 #define RD2 %xmm8
32 #define RE2 %xmm9
34 #define RNOT %xmm10
36 #define RK0 %xmm11
37 #define RK1 %xmm12
38 #define RK2 %xmm13
39 #define RK3 %xmm14
41 #define S0_1(x0, x1, x2, x3, x4) \
42 movdqa x3, x4; \
43 por x0, x3; \
44 pxor x4, x0; \
45 pxor x2, x4; \
46 pxor RNOT, x4; \
47 pxor x1, x3; \
48 pand x0, x1; \
49 pxor x4, x1; \
50 pxor x0, x2;
51 #define S0_2(x0, x1, x2, x3, x4) \
52 pxor x3, x0; \
53 por x0, x4; \
54 pxor x2, x0; \
55 pand x1, x2; \
56 pxor x2, x3; \
57 pxor RNOT, x1; \
58 pxor x4, x2; \
59 pxor x2, x1;
61 #define S1_1(x0, x1, x2, x3, x4) \
62 movdqa x1, x4; \
63 pxor x0, x1; \
64 pxor x3, x0; \
65 pxor RNOT, x3; \
66 pand x1, x4; \
67 por x1, x0; \
68 pxor x2, x3; \
69 pxor x3, x0; \
70 pxor x3, x1;
71 #define S1_2(x0, x1, x2, x3, x4) \
72 pxor x4, x3; \
73 por x4, x1; \
74 pxor x2, x4; \
75 pand x0, x2; \
76 pxor x1, x2; \
77 por x0, x1; \
78 pxor RNOT, x0; \
79 pxor x2, x0; \
80 pxor x1, x4;
82 #define S2_1(x0, x1, x2, x3, x4) \
83 pxor RNOT, x3; \
84 pxor x0, x1; \
85 movdqa x0, x4; \
86 pand x2, x0; \
87 pxor x3, x0; \
88 por x4, x3; \
89 pxor x1, x2; \
90 pxor x1, x3; \
91 pand x0, x1;
92 #define S2_2(x0, x1, x2, x3, x4) \
93 pxor x2, x0; \
94 pand x3, x2; \
95 por x1, x3; \
96 pxor RNOT, x0; \
97 pxor x0, x3; \
98 pxor x0, x4; \
99 pxor x2, x0; \
100 por x2, x1;
102 #define S3_1(x0, x1, x2, x3, x4) \
103 movdqa x1, x4; \
104 pxor x3, x1; \
105 por x0, x3; \
106 pand x0, x4; \
107 pxor x2, x0; \
108 pxor x1, x2; \
109 pand x3, x1; \
110 pxor x3, x2; \
111 por x4, x0; \
112 pxor x3, x4;
113 #define S3_2(x0, x1, x2, x3, x4) \
114 pxor x0, x1; \
115 pand x3, x0; \
116 pand x4, x3; \
117 pxor x2, x3; \
118 por x1, x4; \
119 pand x1, x2; \
120 pxor x3, x4; \
121 pxor x3, x0; \
122 pxor x2, x3;
124 #define S4_1(x0, x1, x2, x3, x4) \
125 movdqa x3, x4; \
126 pand x0, x3; \
127 pxor x4, x0; \
128 pxor x2, x3; \
129 por x4, x2; \
130 pxor x1, x0; \
131 pxor x3, x4; \
132 por x0, x2; \
133 pxor x1, x2;
134 #define S4_2(x0, x1, x2, x3, x4) \
135 pand x0, x1; \
136 pxor x4, x1; \
137 pand x2, x4; \
138 pxor x3, x2; \
139 pxor x0, x4; \
140 por x1, x3; \
141 pxor RNOT, x1; \
142 pxor x0, x3;
144 #define S5_1(x0, x1, x2, x3, x4) \
145 movdqa x1, x4; \
146 por x0, x1; \
147 pxor x1, x2; \
148 pxor RNOT, x3; \
149 pxor x0, x4; \
150 pxor x2, x0; \
151 pand x4, x1; \
152 por x3, x4; \
153 pxor x0, x4;
154 #define S5_2(x0, x1, x2, x3, x4) \
155 pand x3, x0; \
156 pxor x3, x1; \
157 pxor x2, x3; \
158 pxor x1, x0; \
159 pand x4, x2; \
160 pxor x2, x1; \
161 pand x0, x2; \
162 pxor x2, x3;
164 #define S6_1(x0, x1, x2, x3, x4) \
165 movdqa x1, x4; \
166 pxor x0, x3; \
167 pxor x2, x1; \
168 pxor x0, x2; \
169 pand x3, x0; \
170 por x3, x1; \
171 pxor RNOT, x4; \
172 pxor x1, x0; \
173 pxor x2, x1;
174 #define S6_2(x0, x1, x2, x3, x4) \
175 pxor x4, x3; \
176 pxor x0, x4; \
177 pand x0, x2; \
178 pxor x1, x4; \
179 pxor x3, x2; \
180 pand x1, x3; \
181 pxor x0, x3; \
182 pxor x2, x1;
184 #define S7_1(x0, x1, x2, x3, x4) \
185 pxor RNOT, x1; \
186 movdqa x1, x4; \
187 pxor RNOT, x0; \
188 pand x2, x1; \
189 pxor x3, x1; \
190 por x4, x3; \
191 pxor x2, x4; \
192 pxor x3, x2; \
193 pxor x0, x3; \
194 por x1, x0;
195 #define S7_2(x0, x1, x2, x3, x4) \
196 pand x0, x2; \
197 pxor x4, x0; \
198 pxor x3, x4; \
199 pand x0, x3; \
200 pxor x1, x4; \
201 pxor x4, x2; \
202 pxor x1, x3; \
203 por x0, x4; \
204 pxor x1, x4;
206 #define SI0_1(x0, x1, x2, x3, x4) \
207 movdqa x3, x4; \
208 pxor x0, x1; \
209 por x1, x3; \
210 pxor x1, x4; \
211 pxor RNOT, x0; \
212 pxor x3, x2; \
213 pxor x0, x3; \
214 pand x1, x0; \
215 pxor x2, x0;
216 #define SI0_2(x0, x1, x2, x3, x4) \
217 pand x3, x2; \
218 pxor x4, x3; \
219 pxor x3, x2; \
220 pxor x3, x1; \
221 pand x0, x3; \
222 pxor x0, x1; \
223 pxor x2, x0; \
224 pxor x3, x4;
226 #define SI1_1(x0, x1, x2, x3, x4) \
227 pxor x3, x1; \
228 movdqa x0, x4; \
229 pxor x2, x0; \
230 pxor RNOT, x2; \
231 por x1, x4; \
232 pxor x3, x4; \
233 pand x1, x3; \
234 pxor x2, x1; \
235 pand x4, x2;
236 #define SI1_2(x0, x1, x2, x3, x4) \
237 pxor x1, x4; \
238 por x3, x1; \
239 pxor x0, x3; \
240 pxor x0, x2; \
241 por x4, x0; \
242 pxor x4, x2; \
243 pxor x0, x1; \
244 pxor x1, x4;
246 #define SI2_1(x0, x1, x2, x3, x4) \
247 pxor x1, x2; \
248 movdqa x3, x4; \
249 pxor RNOT, x3; \
250 por x2, x3; \
251 pxor x4, x2; \
252 pxor x0, x4; \
253 pxor x1, x3; \
254 por x2, x1; \
255 pxor x0, x2;
256 #define SI2_2(x0, x1, x2, x3, x4) \
257 pxor x4, x1; \
258 por x3, x4; \
259 pxor x3, x2; \
260 pxor x2, x4; \
261 pand x1, x2; \
262 pxor x3, x2; \
263 pxor x4, x3; \
264 pxor x0, x4;
266 #define SI3_1(x0, x1, x2, x3, x4) \
267 pxor x1, x2; \
268 movdqa x1, x4; \
269 pand x2, x1; \
270 pxor x0, x1; \
271 por x4, x0; \
272 pxor x3, x4; \
273 pxor x3, x0; \
274 por x1, x3; \
275 pxor x2, x1;
276 #define SI3_2(x0, x1, x2, x3, x4) \
277 pxor x3, x1; \
278 pxor x2, x0; \
279 pxor x3, x2; \
280 pand x1, x3; \
281 pxor x0, x1; \
282 pand x2, x0; \
283 pxor x3, x4; \
284 pxor x0, x3; \
285 pxor x1, x0;
287 #define SI4_1(x0, x1, x2, x3, x4) \
288 pxor x3, x2; \
289 movdqa x0, x4; \
290 pand x1, x0; \
291 pxor x2, x0; \
292 por x3, x2; \
293 pxor RNOT, x4; \
294 pxor x0, x1; \
295 pxor x2, x0; \
296 pand x4, x2;
297 #define SI4_2(x0, x1, x2, x3, x4) \
298 pxor x0, x2; \
299 por x4, x0; \
300 pxor x3, x0; \
301 pand x2, x3; \
302 pxor x3, x4; \
303 pxor x1, x3; \
304 pand x0, x1; \
305 pxor x1, x4; \
306 pxor x3, x0;
308 #define SI5_1(x0, x1, x2, x3, x4) \
309 movdqa x1, x4; \
310 por x2, x1; \
311 pxor x4, x2; \
312 pxor x3, x1; \
313 pand x4, x3; \
314 pxor x3, x2; \
315 por x0, x3; \
316 pxor RNOT, x0; \
317 pxor x2, x3; \
318 por x0, x2;
319 #define SI5_2(x0, x1, x2, x3, x4) \
320 pxor x1, x4; \
321 pxor x4, x2; \
322 pand x0, x4; \
323 pxor x1, x0; \
324 pxor x3, x1; \
325 pand x2, x0; \
326 pxor x3, x2; \
327 pxor x2, x0; \
328 pxor x4, x2; \
329 pxor x3, x4;
331 #define SI6_1(x0, x1, x2, x3, x4) \
332 pxor x2, x0; \
333 movdqa x0, x4; \
334 pand x3, x0; \
335 pxor x3, x2; \
336 pxor x2, x0; \
337 pxor x1, x3; \
338 por x4, x2; \
339 pxor x3, x2; \
340 pand x0, x3;
341 #define SI6_2(x0, x1, x2, x3, x4) \
342 pxor RNOT, x0; \
343 pxor x1, x3; \
344 pand x2, x1; \
345 pxor x0, x4; \
346 pxor x4, x3; \
347 pxor x2, x4; \
348 pxor x1, x0; \
349 pxor x0, x2;
351 #define SI7_1(x0, x1, x2, x3, x4) \
352 movdqa x3, x4; \
353 pand x0, x3; \
354 pxor x2, x0; \
355 por x4, x2; \
356 pxor x1, x4; \
357 pxor RNOT, x0; \
358 por x3, x1; \
359 pxor x0, x4; \
360 pand x2, x0; \
361 pxor x1, x0;
362 #define SI7_2(x0, x1, x2, x3, x4) \
363 pand x2, x1; \
364 pxor x2, x3; \
365 pxor x3, x4; \
366 pand x3, x2; \
367 por x0, x3; \
368 pxor x4, x1; \
369 pxor x4, x3; \
370 pand x0, x4; \
371 pxor x2, x4;
373 #define get_key(i, j, t) \
374 movd (4*(i)+(j))*4(CTX), t; \
375 pshufd $0, t, t;
377 #define K2(x0, x1, x2, x3, x4, i) \
378 get_key(i, 0, RK0); \
379 get_key(i, 1, RK1); \
380 get_key(i, 2, RK2); \
381 get_key(i, 3, RK3); \
382 pxor RK0, x0 ## 1; \
383 pxor RK1, x1 ## 1; \
384 pxor RK2, x2 ## 1; \
385 pxor RK3, x3 ## 1; \
386 pxor RK0, x0 ## 2; \
387 pxor RK1, x1 ## 2; \
388 pxor RK2, x2 ## 2; \
389 pxor RK3, x3 ## 2;
391 #define LK2(x0, x1, x2, x3, x4, i) \
392 movdqa x0 ## 1, x4 ## 1; \
393 pslld $13, x0 ## 1; \
394 psrld $(32 - 13), x4 ## 1; \
395 por x4 ## 1, x0 ## 1; \
396 pxor x0 ## 1, x1 ## 1; \
397 movdqa x2 ## 1, x4 ## 1; \
398 pslld $3, x2 ## 1; \
399 psrld $(32 - 3), x4 ## 1; \
400 por x4 ## 1, x2 ## 1; \
401 pxor x2 ## 1, x1 ## 1; \
402 movdqa x0 ## 2, x4 ## 2; \
403 pslld $13, x0 ## 2; \
404 psrld $(32 - 13), x4 ## 2; \
405 por x4 ## 2, x0 ## 2; \
406 pxor x0 ## 2, x1 ## 2; \
407 movdqa x2 ## 2, x4 ## 2; \
408 pslld $3, x2 ## 2; \
409 psrld $(32 - 3), x4 ## 2; \
410 por x4 ## 2, x2 ## 2; \
411 pxor x2 ## 2, x1 ## 2; \
412 movdqa x1 ## 1, x4 ## 1; \
413 pslld $1, x1 ## 1; \
414 psrld $(32 - 1), x4 ## 1; \
415 por x4 ## 1, x1 ## 1; \
416 movdqa x0 ## 1, x4 ## 1; \
417 pslld $3, x4 ## 1; \
418 pxor x2 ## 1, x3 ## 1; \
419 pxor x4 ## 1, x3 ## 1; \
420 movdqa x3 ## 1, x4 ## 1; \
421 get_key(i, 1, RK1); \
422 movdqa x1 ## 2, x4 ## 2; \
423 pslld $1, x1 ## 2; \
424 psrld $(32 - 1), x4 ## 2; \
425 por x4 ## 2, x1 ## 2; \
426 movdqa x0 ## 2, x4 ## 2; \
427 pslld $3, x4 ## 2; \
428 pxor x2 ## 2, x3 ## 2; \
429 pxor x4 ## 2, x3 ## 2; \
430 movdqa x3 ## 2, x4 ## 2; \
431 get_key(i, 3, RK3); \
432 pslld $7, x3 ## 1; \
433 psrld $(32 - 7), x4 ## 1; \
434 por x4 ## 1, x3 ## 1; \
435 movdqa x1 ## 1, x4 ## 1; \
436 pslld $7, x4 ## 1; \
437 pxor x1 ## 1, x0 ## 1; \
438 pxor x3 ## 1, x0 ## 1; \
439 pxor x3 ## 1, x2 ## 1; \
440 pxor x4 ## 1, x2 ## 1; \
441 get_key(i, 0, RK0); \
442 pslld $7, x3 ## 2; \
443 psrld $(32 - 7), x4 ## 2; \
444 por x4 ## 2, x3 ## 2; \
445 movdqa x1 ## 2, x4 ## 2; \
446 pslld $7, x4 ## 2; \
447 pxor x1 ## 2, x0 ## 2; \
448 pxor x3 ## 2, x0 ## 2; \
449 pxor x3 ## 2, x2 ## 2; \
450 pxor x4 ## 2, x2 ## 2; \
451 get_key(i, 2, RK2); \
452 pxor RK1, x1 ## 1; \
453 pxor RK3, x3 ## 1; \
454 movdqa x0 ## 1, x4 ## 1; \
455 pslld $5, x0 ## 1; \
456 psrld $(32 - 5), x4 ## 1; \
457 por x4 ## 1, x0 ## 1; \
458 movdqa x2 ## 1, x4 ## 1; \
459 pslld $22, x2 ## 1; \
460 psrld $(32 - 22), x4 ## 1; \
461 por x4 ## 1, x2 ## 1; \
462 pxor RK0, x0 ## 1; \
463 pxor RK2, x2 ## 1; \
464 pxor RK1, x1 ## 2; \
465 pxor RK3, x3 ## 2; \
466 movdqa x0 ## 2, x4 ## 2; \
467 pslld $5, x0 ## 2; \
468 psrld $(32 - 5), x4 ## 2; \
469 por x4 ## 2, x0 ## 2; \
470 movdqa x2 ## 2, x4 ## 2; \
471 pslld $22, x2 ## 2; \
472 psrld $(32 - 22), x4 ## 2; \
473 por x4 ## 2, x2 ## 2; \
474 pxor RK0, x0 ## 2; \
475 pxor RK2, x2 ## 2;
477 #define KL2(x0, x1, x2, x3, x4, i) \
478 pxor RK0, x0 ## 1; \
479 pxor RK2, x2 ## 1; \
480 movdqa x0 ## 1, x4 ## 1; \
481 psrld $5, x0 ## 1; \
482 pslld $(32 - 5), x4 ## 1; \
483 por x4 ## 1, x0 ## 1; \
484 pxor RK3, x3 ## 1; \
485 pxor RK1, x1 ## 1; \
486 movdqa x2 ## 1, x4 ## 1; \
487 psrld $22, x2 ## 1; \
488 pslld $(32 - 22), x4 ## 1; \
489 por x4 ## 1, x2 ## 1; \
490 pxor x3 ## 1, x2 ## 1; \
491 pxor RK0, x0 ## 2; \
492 pxor RK2, x2 ## 2; \
493 movdqa x0 ## 2, x4 ## 2; \
494 psrld $5, x0 ## 2; \
495 pslld $(32 - 5), x4 ## 2; \
496 por x4 ## 2, x0 ## 2; \
497 pxor RK3, x3 ## 2; \
498 pxor RK1, x1 ## 2; \
499 movdqa x2 ## 2, x4 ## 2; \
500 psrld $22, x2 ## 2; \
501 pslld $(32 - 22), x4 ## 2; \
502 por x4 ## 2, x2 ## 2; \
503 pxor x3 ## 2, x2 ## 2; \
504 pxor x3 ## 1, x0 ## 1; \
505 movdqa x1 ## 1, x4 ## 1; \
506 pslld $7, x4 ## 1; \
507 pxor x1 ## 1, x0 ## 1; \
508 pxor x4 ## 1, x2 ## 1; \
509 movdqa x1 ## 1, x4 ## 1; \
510 psrld $1, x1 ## 1; \
511 pslld $(32 - 1), x4 ## 1; \
512 por x4 ## 1, x1 ## 1; \
513 pxor x3 ## 2, x0 ## 2; \
514 movdqa x1 ## 2, x4 ## 2; \
515 pslld $7, x4 ## 2; \
516 pxor x1 ## 2, x0 ## 2; \
517 pxor x4 ## 2, x2 ## 2; \
518 movdqa x1 ## 2, x4 ## 2; \
519 psrld $1, x1 ## 2; \
520 pslld $(32 - 1), x4 ## 2; \
521 por x4 ## 2, x1 ## 2; \
522 movdqa x3 ## 1, x4 ## 1; \
523 psrld $7, x3 ## 1; \
524 pslld $(32 - 7), x4 ## 1; \
525 por x4 ## 1, x3 ## 1; \
526 pxor x0 ## 1, x1 ## 1; \
527 movdqa x0 ## 1, x4 ## 1; \
528 pslld $3, x4 ## 1; \
529 pxor x4 ## 1, x3 ## 1; \
530 movdqa x0 ## 1, x4 ## 1; \
531 movdqa x3 ## 2, x4 ## 2; \
532 psrld $7, x3 ## 2; \
533 pslld $(32 - 7), x4 ## 2; \
534 por x4 ## 2, x3 ## 2; \
535 pxor x0 ## 2, x1 ## 2; \
536 movdqa x0 ## 2, x4 ## 2; \
537 pslld $3, x4 ## 2; \
538 pxor x4 ## 2, x3 ## 2; \
539 movdqa x0 ## 2, x4 ## 2; \
540 psrld $13, x0 ## 1; \
541 pslld $(32 - 13), x4 ## 1; \
542 por x4 ## 1, x0 ## 1; \
543 pxor x2 ## 1, x1 ## 1; \
544 pxor x2 ## 1, x3 ## 1; \
545 movdqa x2 ## 1, x4 ## 1; \
546 psrld $3, x2 ## 1; \
547 pslld $(32 - 3), x4 ## 1; \
548 por x4 ## 1, x2 ## 1; \
549 psrld $13, x0 ## 2; \
550 pslld $(32 - 13), x4 ## 2; \
551 por x4 ## 2, x0 ## 2; \
552 pxor x2 ## 2, x1 ## 2; \
553 pxor x2 ## 2, x3 ## 2; \
554 movdqa x2 ## 2, x4 ## 2; \
555 psrld $3, x2 ## 2; \
556 pslld $(32 - 3), x4 ## 2; \
557 por x4 ## 2, x2 ## 2;
559 #define S(SBOX, x0, x1, x2, x3, x4) \
560 SBOX ## _1(x0 ## 1, x1 ## 1, x2 ## 1, x3 ## 1, x4 ## 1); \
561 SBOX ## _2(x0 ## 1, x1 ## 1, x2 ## 1, x3 ## 1, x4 ## 1); \
562 SBOX ## _1(x0 ## 2, x1 ## 2, x2 ## 2, x3 ## 2, x4 ## 2); \
563 SBOX ## _2(x0 ## 2, x1 ## 2, x2 ## 2, x3 ## 2, x4 ## 2);
565 #define SP(SBOX, x0, x1, x2, x3, x4, i) \
566 get_key(i, 0, RK0); \
567 SBOX ## _1(x0 ## 1, x1 ## 1, x2 ## 1, x3 ## 1, x4 ## 1); \
568 get_key(i, 2, RK2); \
569 SBOX ## _1(x0 ## 2, x1 ## 2, x2 ## 2, x3 ## 2, x4 ## 2); \
570 get_key(i, 3, RK3); \
571 SBOX ## _2(x0 ## 1, x1 ## 1, x2 ## 1, x3 ## 1, x4 ## 1); \
572 get_key(i, 1, RK1); \
573 SBOX ## _2(x0 ## 2, x1 ## 2, x2 ## 2, x3 ## 2, x4 ## 2); \
575 #define transpose_4x4(x0, x1, x2, x3, t0, t1, t2) \
576 movdqa x0, t2; \
577 punpckldq x1, x0; \
578 punpckhdq x1, t2; \
579 movdqa x2, t1; \
580 punpckhdq x3, x2; \
581 punpckldq x3, t1; \
582 movdqa x0, x1; \
583 punpcklqdq t1, x0; \
584 punpckhqdq t1, x1; \
585 movdqa t2, x3; \
586 punpcklqdq x2, t2; \
587 punpckhqdq x2, x3; \
588 movdqa t2, x2;
590 #define read_blocks(in, x0, x1, x2, x3, t0, t1, t2) \
591 movdqu (0*4*4)(in), x0; \
592 movdqu (1*4*4)(in), x1; \
593 movdqu (2*4*4)(in), x2; \
594 movdqu (3*4*4)(in), x3; \
595 \
596 transpose_4x4(x0, x1, x2, x3, t0, t1, t2)
598 #define write_blocks(out, x0, x1, x2, x3, t0, t1, t2) \
599 transpose_4x4(x0, x1, x2, x3, t0, t1, t2) \
600 \
601 movdqu x0, (0*4*4)(out); \
602 movdqu x1, (1*4*4)(out); \
603 movdqu x2, (2*4*4)(out); \
604 movdqu x3, (3*4*4)(out);
606 #define xor_blocks(out, x0, x1, x2, x3, t0, t1, t2) \
607 transpose_4x4(x0, x1, x2, x3, t0, t1, t2) \
608 \
609 movdqu (0*4*4)(out), t0; \
610 pxor t0, x0; \
611 movdqu x0, (0*4*4)(out); \
612 movdqu (1*4*4)(out), t0; \
613 pxor t0, x1; \
614 movdqu x1, (1*4*4)(out); \
615 movdqu (2*4*4)(out), t0; \
616 pxor t0, x2; \
617 movdqu x2, (2*4*4)(out); \
618 movdqu (3*4*4)(out), t0; \
619 pxor t0, x3; \
620 movdqu x3, (3*4*4)(out);
622 SYM_FUNC_START(__serpent_enc_blk_8way)
623 /* input:
624 * %rdi: ctx, CTX
625 * %rsi: dst
626 * %rdx: src
627 * %rcx: bool, if true: xor output
628 */
630 pcmpeqd RNOT, RNOT;
632 leaq (4*4*4)(%rdx), %rax;
633 read_blocks(%rdx, RA1, RB1, RC1, RD1, RK0, RK1, RK2);
634 read_blocks(%rax, RA2, RB2, RC2, RD2, RK0, RK1, RK2);
636 K2(RA, RB, RC, RD, RE, 0);
637 S(S0, RA, RB, RC, RD, RE); LK2(RC, RB, RD, RA, RE, 1);
638 S(S1, RC, RB, RD, RA, RE); LK2(RE, RD, RA, RC, RB, 2);
639 S(S2, RE, RD, RA, RC, RB); LK2(RB, RD, RE, RC, RA, 3);
640 S(S3, RB, RD, RE, RC, RA); LK2(RC, RA, RD, RB, RE, 4);
641 S(S4, RC, RA, RD, RB, RE); LK2(RA, RD, RB, RE, RC, 5);
642 S(S5, RA, RD, RB, RE, RC); LK2(RC, RA, RD, RE, RB, 6);
643 S(S6, RC, RA, RD, RE, RB); LK2(RD, RB, RA, RE, RC, 7);
644 S(S7, RD, RB, RA, RE, RC); LK2(RC, RA, RE, RD, RB, 8);
645 S(S0, RC, RA, RE, RD, RB); LK2(RE, RA, RD, RC, RB, 9);
646 S(S1, RE, RA, RD, RC, RB); LK2(RB, RD, RC, RE, RA, 10);
647 S(S2, RB, RD, RC, RE, RA); LK2(RA, RD, RB, RE, RC, 11);
648 S(S3, RA, RD, RB, RE, RC); LK2(RE, RC, RD, RA, RB, 12);
649 S(S4, RE, RC, RD, RA, RB); LK2(RC, RD, RA, RB, RE, 13);
650 S(S5, RC, RD, RA, RB, RE); LK2(RE, RC, RD, RB, RA, 14);
651 S(S6, RE, RC, RD, RB, RA); LK2(RD, RA, RC, RB, RE, 15);
652 S(S7, RD, RA, RC, RB, RE); LK2(RE, RC, RB, RD, RA, 16);
653 S(S0, RE, RC, RB, RD, RA); LK2(RB, RC, RD, RE, RA, 17);
654 S(S1, RB, RC, RD, RE, RA); LK2(RA, RD, RE, RB, RC, 18);
655 S(S2, RA, RD, RE, RB, RC); LK2(RC, RD, RA, RB, RE, 19);
656 S(S3, RC, RD, RA, RB, RE); LK2(RB, RE, RD, RC, RA, 20);
657 S(S4, RB, RE, RD, RC, RA); LK2(RE, RD, RC, RA, RB, 21);
658 S(S5, RE, RD, RC, RA, RB); LK2(RB, RE, RD, RA, RC, 22);
659 S(S6, RB, RE, RD, RA, RC); LK2(RD, RC, RE, RA, RB, 23);
660 S(S7, RD, RC, RE, RA, RB); LK2(RB, RE, RA, RD, RC, 24);
661 S(S0, RB, RE, RA, RD, RC); LK2(RA, RE, RD, RB, RC, 25);
662 S(S1, RA, RE, RD, RB, RC); LK2(RC, RD, RB, RA, RE, 26);
663 S(S2, RC, RD, RB, RA, RE); LK2(RE, RD, RC, RA, RB, 27);
664 S(S3, RE, RD, RC, RA, RB); LK2(RA, RB, RD, RE, RC, 28);
665 S(S4, RA, RB, RD, RE, RC); LK2(RB, RD, RE, RC, RA, 29);
666 S(S5, RB, RD, RE, RC, RA); LK2(RA, RB, RD, RC, RE, 30);
667 S(S6, RA, RB, RD, RC, RE); LK2(RD, RE, RB, RC, RA, 31);
668 S(S7, RD, RE, RB, RC, RA); K2(RA, RB, RC, RD, RE, 32);
670 leaq (4*4*4)(%rsi), %rax;
672 testb %cl, %cl;
673 jnz .L__enc_xor8;
675 write_blocks(%rsi, RA1, RB1, RC1, RD1, RK0, RK1, RK2);
676 write_blocks(%rax, RA2, RB2, RC2, RD2, RK0, RK1, RK2);
678 ret;
680 .L__enc_xor8:
681 xor_blocks(%rsi, RA1, RB1, RC1, RD1, RK0, RK1, RK2);
682 xor_blocks(%rax, RA2, RB2, RC2, RD2, RK0, RK1, RK2);
684 ret;
685 SYM_FUNC_END(__serpent_enc_blk_8way)
687 SYM_FUNC_START(serpent_dec_blk_8way)
688 /* input:
689 * %rdi: ctx, CTX
690 * %rsi: dst
691 * %rdx: src
692 */
694 pcmpeqd RNOT, RNOT;
696 leaq (4*4*4)(%rdx), %rax;
697 read_blocks(%rdx, RA1, RB1, RC1, RD1, RK0, RK1, RK2);
698 read_blocks(%rax, RA2, RB2, RC2, RD2, RK0, RK1, RK2);
700 K2(RA, RB, RC, RD, RE, 32);
701 SP(SI7, RA, RB, RC, RD, RE, 31); KL2(RB, RD, RA, RE, RC, 31);
702 SP(SI6, RB, RD, RA, RE, RC, 30); KL2(RA, RC, RE, RB, RD, 30);
703 SP(SI5, RA, RC, RE, RB, RD, 29); KL2(RC, RD, RA, RE, RB, 29);
704 SP(SI4, RC, RD, RA, RE, RB, 28); KL2(RC, RA, RB, RE, RD, 28);
705 SP(SI3, RC, RA, RB, RE, RD, 27); KL2(RB, RC, RD, RE, RA, 27);
706 SP(SI2, RB, RC, RD, RE, RA, 26); KL2(RC, RA, RE, RD, RB, 26);
707 SP(SI1, RC, RA, RE, RD, RB, 25); KL2(RB, RA, RE, RD, RC, 25);
708 SP(SI0, RB, RA, RE, RD, RC, 24); KL2(RE, RC, RA, RB, RD, 24);
709 SP(SI7, RE, RC, RA, RB, RD, 23); KL2(RC, RB, RE, RD, RA, 23);
710 SP(SI6, RC, RB, RE, RD, RA, 22); KL2(RE, RA, RD, RC, RB, 22);
711 SP(SI5, RE, RA, RD, RC, RB, 21); KL2(RA, RB, RE, RD, RC, 21);
712 SP(SI4, RA, RB, RE, RD, RC, 20); KL2(RA, RE, RC, RD, RB, 20);
713 SP(SI3, RA, RE, RC, RD, RB, 19); KL2(RC, RA, RB, RD, RE, 19);
714 SP(SI2, RC, RA, RB, RD, RE, 18); KL2(RA, RE, RD, RB, RC, 18);
715 SP(SI1, RA, RE, RD, RB, RC, 17); KL2(RC, RE, RD, RB, RA, 17);
716 SP(SI0, RC, RE, RD, RB, RA, 16); KL2(RD, RA, RE, RC, RB, 16);
717 SP(SI7, RD, RA, RE, RC, RB, 15); KL2(RA, RC, RD, RB, RE, 15);
718 SP(SI6, RA, RC, RD, RB, RE, 14); KL2(RD, RE, RB, RA, RC, 14);
719 SP(SI5, RD, RE, RB, RA, RC, 13); KL2(RE, RC, RD, RB, RA, 13);
720 SP(SI4, RE, RC, RD, RB, RA, 12); KL2(RE, RD, RA, RB, RC, 12);
721 SP(SI3, RE, RD, RA, RB, RC, 11); KL2(RA, RE, RC, RB, RD, 11);
722 SP(SI2, RA, RE, RC, RB, RD, 10); KL2(RE, RD, RB, RC, RA, 10);
723 SP(SI1, RE, RD, RB, RC, RA, 9); KL2(RA, RD, RB, RC, RE, 9);
724 SP(SI0, RA, RD, RB, RC, RE, 8); KL2(RB, RE, RD, RA, RC, 8);
725 SP(SI7, RB, RE, RD, RA, RC, 7); KL2(RE, RA, RB, RC, RD, 7);
726 SP(SI6, RE, RA, RB, RC, RD, 6); KL2(RB, RD, RC, RE, RA, 6);
727 SP(SI5, RB, RD, RC, RE, RA, 5); KL2(RD, RA, RB, RC, RE, 5);
728 SP(SI4, RD, RA, RB, RC, RE, 4); KL2(RD, RB, RE, RC, RA, 4);
729 SP(SI3, RD, RB, RE, RC, RA, 3); KL2(RE, RD, RA, RC, RB, 3);
730 SP(SI2, RE, RD, RA, RC, RB, 2); KL2(RD, RB, RC, RA, RE, 2);
731 SP(SI1, RD, RB, RC, RA, RE, 1); KL2(RE, RB, RC, RA, RD, 1);
732 S(SI0, RE, RB, RC, RA, RD); K2(RC, RD, RB, RE, RA, 0);
734 leaq (4*4*4)(%rsi), %rax;
735 write_blocks(%rsi, RC1, RD1, RB1, RE1, RK0, RK1, RK2);
736 write_blocks(%rax, RC2, RD2, RB2, RE2, RK0, RK1, RK2);
738 ret;
739 SYM_FUNC_END(serpent_dec_blk_8way)