2 # Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
4 # Licensed under the Apache License 2.0 (the "License"). You may not use
5 # this file except in compliance with the License. You can obtain a copy
6 # in the file LICENSE in the source distribution or at
7 # https://www.openssl.org/source/license.html
10 $0 =~ m/(.*[\/\\])[^\/\\]+$/; $dir=$1;
11 push(@INC,"${dir}","${dir}../../perlasm");
14 $output = pop and open STDOUT,">$output";
19 for (@ARGV) { $sse2=1 if (/-DOPENSSL_IA32_SSE2/); }
21 &external_label("OPENSSL_ia32cap_P") if ($sse2);
23 &bn_mul_add_words("bn_mul_add_words");
24 &bn_mul_words("bn_mul_words");
25 &bn_sqr_words("bn_sqr_words");
26 &bn_div_words("bn_div_words");
27 &bn_add_words("bn_add_words");
28 &bn_sub_words("bn_sub_words");
29 &bn_sub_part_words("bn_sub_part_words");
33 close STDOUT or die "error closing STDOUT: $!";
39 &function_begin_B($name,$sse2?"EXTRN\t_OPENSSL_ia32cap_P:DWORD":"");
46 &picmeup("eax","OPENSSL_ia32cap_P");
47 &bt(&DWP(0,"eax"),26);
48 &jnc(&label("maw_non_sse2"));
53 &movd("mm0",&wparam(3)); # mm0 = w
54 &pxor("mm1","mm1"); # mm1 = carry_in
55 &jmp(&label("maw_sse2_entry"));
57 &set_label("maw_sse2_unrolled",16);
58 &movd("mm3",&DWP(0,$r,"",0)); # mm3 = r[0]
59 &paddq("mm1","mm3"); # mm1 = carry_in + r[0]
60 &movd("mm2",&DWP(0,$a,"",0)); # mm2 = a[0]
61 &pmuludq("mm2","mm0"); # mm2 = w*a[0]
62 &movd("mm4",&DWP(4,$a,"",0)); # mm4 = a[1]
63 &pmuludq("mm4","mm0"); # mm4 = w*a[1]
64 &movd("mm6",&DWP(8,$a,"",0)); # mm6 = a[2]
65 &pmuludq("mm6","mm0"); # mm6 = w*a[2]
66 &movd("mm7",&DWP(12,$a,"",0)); # mm7 = a[3]
67 &pmuludq("mm7","mm0"); # mm7 = w*a[3]
68 &paddq("mm1","mm2"); # mm1 = carry_in + r[0] + w*a[0]
69 &movd("mm3",&DWP(4,$r,"",0)); # mm3 = r[1]
70 &paddq("mm3","mm4"); # mm3 = r[1] + w*a[1]
71 &movd("mm5",&DWP(8,$r,"",0)); # mm5 = r[2]
72 &paddq("mm5","mm6"); # mm5 = r[2] + w*a[2]
73 &movd("mm4",&DWP(12,$r,"",0)); # mm4 = r[3]
74 &paddq("mm7","mm4"); # mm7 = r[3] + w*a[3]
75 &movd(&DWP(0,$r,"",0),"mm1");
76 &movd("mm2",&DWP(16,$a,"",0)); # mm2 = a[4]
77 &pmuludq("mm2","mm0"); # mm2 = w*a[4]
78 &psrlq("mm1",32); # mm1 = carry0
79 &movd("mm4",&DWP(20,$a,"",0)); # mm4 = a[5]
80 &pmuludq("mm4","mm0"); # mm4 = w*a[5]
81 &paddq("mm1","mm3"); # mm1 = carry0 + r[1] + w*a[1]
82 &movd("mm6",&DWP(24,$a,"",0)); # mm6 = a[6]
83 &pmuludq("mm6","mm0"); # mm6 = w*a[6]
84 &movd(&DWP(4,$r,"",0),"mm1");
85 &psrlq("mm1",32); # mm1 = carry1
86 &movd("mm3",&DWP(28,$a,"",0)); # mm3 = a[7]
88 &pmuludq("mm3","mm0"); # mm3 = w*a[7]
89 &paddq("mm1","mm5"); # mm1 = carry1 + r[2] + w*a[2]
90 &movd("mm5",&DWP(16,$r,"",0)); # mm5 = r[4]
91 &paddq("mm2","mm5"); # mm2 = r[4] + w*a[4]
92 &movd(&DWP(8,$r,"",0),"mm1");
93 &psrlq("mm1",32); # mm1 = carry2
94 &paddq("mm1","mm7"); # mm1 = carry2 + r[3] + w*a[3]
95 &movd("mm5",&DWP(20,$r,"",0)); # mm5 = r[5]
96 &paddq("mm4","mm5"); # mm4 = r[5] + w*a[5]
97 &movd(&DWP(12,$r,"",0),"mm1");
98 &psrlq("mm1",32); # mm1 = carry3
99 &paddq("mm1","mm2"); # mm1 = carry3 + r[4] + w*a[4]
100 &movd("mm5",&DWP(24,$r,"",0)); # mm5 = r[6]
101 &paddq("mm6","mm5"); # mm6 = r[6] + w*a[6]
102 &movd(&DWP(16,$r,"",0),"mm1");
103 &psrlq("mm1",32); # mm1 = carry4
104 &paddq("mm1","mm4"); # mm1 = carry4 + r[5] + w*a[5]
105 &movd("mm5",&DWP(28,$r,"",0)); # mm5 = r[7]
106 &paddq("mm3","mm5"); # mm3 = r[7] + w*a[7]
107 &movd(&DWP(20,$r,"",0),"mm1");
108 &psrlq("mm1",32); # mm1 = carry5
109 &paddq("mm1","mm6"); # mm1 = carry5 + r[6] + w*a[6]
110 &movd(&DWP(24,$r,"",0),"mm1");
111 &psrlq("mm1",32); # mm1 = carry6
112 &paddq("mm1","mm3"); # mm1 = carry6 + r[7] + w*a[7]
113 &movd(&DWP(28,$r,"",0),"mm1");
114 &lea($r,&DWP(32,$r));
115 &psrlq("mm1",32); # mm1 = carry_out
118 &jz(&label("maw_sse2_exit"));
119 &set_label("maw_sse2_entry");
120 &test($c,0xfffffff8);
121 &jnz(&label("maw_sse2_unrolled"));
123 &set_label("maw_sse2_loop",4);
124 &movd("mm2",&DWP(0,$a)); # mm2 = a[i]
125 &movd("mm3",&DWP(0,$r)); # mm3 = r[i]
126 &pmuludq("mm2","mm0"); # a[i] *= w
128 &paddq("mm1","mm3"); # carry += r[i]
129 &paddq("mm1","mm2"); # carry += a[i]*w
130 &movd(&DWP(0,$r),"mm1"); # r[i] = carry_low
132 &psrlq("mm1",32); # carry = carry_high
134 &jnz(&label("maw_sse2_loop"));
135 &set_label("maw_sse2_exit");
136 &movd("eax","mm1"); # c = carry_out
140 &set_label("maw_non_sse2",16);
143 # function_begin prologue
157 &xor($c,$c); # clear carry
158 &mov($r,&wparam(0)); #
160 &mov("ecx",&wparam(2)); #
161 &mov($a,&wparam(1)); #
163 &and("ecx",0xfffffff8); # num / 8
164 &mov($w,&wparam(3)); #
166 &push("ecx"); # Up the stack for a tmp variable
168 &jz(&label("maw_finish"));
170 &set_label("maw_loop",16);
172 for ($i=0; $i<32; $i+=4)
174 &comment("Round $i");
176 &mov("eax",&DWP($i,$a)); # *a
178 &add("eax",$c); # L(t)+= c
179 &adc("edx",0); # H(t)+=carry
180 &add("eax",&DWP($i,$r)); # L(t)+= *r
181 &adc("edx",0); # H(t)+=carry
182 &mov(&DWP($i,$r),"eax"); # *r= L(t);
183 &mov($c,"edx"); # c= H(t);
188 &lea($a,&DWP(32,$a));
189 &lea($r,&DWP(32,$r));
190 &jnz(&label("maw_loop"));
192 &set_label("maw_finish",0);
193 &mov("ecx",&wparam(2)); # get num
195 &jnz(&label("maw_finish2")); # helps branch prediction
196 &jmp(&label("maw_end"));
198 &set_label("maw_finish2",1);
199 for ($i=0; $i<7; $i++)
201 &comment("Tail Round $i");
202 &mov("eax",&DWP($i*4,$a)); # *a
204 &add("eax",$c); # L(t)+=c
205 &adc("edx",0); # H(t)+=carry
206 &add("eax",&DWP($i*4,$r)); # L(t)+= *r
207 &adc("edx",0); # H(t)+=carry
208 &dec("ecx") if ($i != 7-1);
209 &mov(&DWP($i*4,$r),"eax"); # *r= L(t);
210 &mov($c,"edx"); # c= H(t);
211 &jz(&label("maw_end")) if ($i != 7-1);
213 &set_label("maw_end",0);
216 &pop("ecx"); # clear variable from
218 &function_end($name);
225 &function_begin_B($name,$sse2?"EXTRN\t_OPENSSL_ia32cap_P:DWORD":"");
232 &picmeup("eax","OPENSSL_ia32cap_P");
233 &bt(&DWP(0,"eax"),26);
234 &jnc(&label("mw_non_sse2"));
239 &movd("mm0",&wparam(3)); # mm0 = w
240 &pxor("mm1","mm1"); # mm1 = carry = 0
242 &set_label("mw_sse2_loop",16);
243 &movd("mm2",&DWP(0,$a)); # mm2 = a[i]
244 &pmuludq("mm2","mm0"); # a[i] *= w
246 &paddq("mm1","mm2"); # carry += a[i]*w
247 &movd(&DWP(0,$r),"mm1"); # r[i] = carry_low
249 &psrlq("mm1",32); # carry = carry_high
251 &jnz(&label("mw_sse2_loop"));
253 &movd("eax","mm1"); # return carry
256 &set_label("mw_non_sse2",16);
259 # function_begin prologue
274 &xor($c,$c); # clear carry
275 &mov($r,&wparam(0)); #
276 &mov($a,&wparam(1)); #
277 &mov($num,&wparam(2)); #
278 &mov($w,&wparam(3)); #
280 &and($num,0xfffffff8); # num / 8
281 &jz(&label("mw_finish"));
283 &set_label("mw_loop",0);
284 for ($i=0; $i<32; $i+=4)
286 &comment("Round $i");
288 &mov("eax",&DWP($i,$a,"",0)); # *a
290 &add("eax",$c); # L(t)+=c
293 &adc("edx",0); # H(t)+=carry
294 &mov(&DWP($i,$r,"",0),"eax"); # *r= L(t);
296 &mov($c,"edx"); # c= H(t);
303 &jz(&label("mw_finish"));
304 &jmp(&label("mw_loop"));
306 &set_label("mw_finish",0);
307 &mov($num,&wparam(2)); # get num
309 &jnz(&label("mw_finish2"));
310 &jmp(&label("mw_end"));
312 &set_label("mw_finish2",1);
313 for ($i=0; $i<7; $i++)
315 &comment("Tail Round $i");
316 &mov("eax",&DWP($i*4,$a,"",0));# *a
318 &add("eax",$c); # L(t)+=c
320 &adc("edx",0); # H(t)+=carry
321 &mov(&DWP($i*4,$r,"",0),"eax");# *r= L(t);
322 &mov($c,"edx"); # c= H(t);
323 &dec($num) if ($i != 7-1);
324 &jz(&label("mw_end")) if ($i != 7-1);
326 &set_label("mw_end",0);
329 &function_end($name);
336 &function_begin_B($name,$sse2?"EXTRN\t_OPENSSL_ia32cap_P:DWORD":"");
343 &picmeup("eax","OPENSSL_ia32cap_P");
344 &bt(&DWP(0,"eax"),26);
345 &jnc(&label("sqr_non_sse2"));
351 &set_label("sqr_sse2_loop",16);
352 &movd("mm0",&DWP(0,$a)); # mm0 = a[i]
353 &pmuludq("mm0","mm0"); # a[i] *= a[i]
354 &lea($a,&DWP(4,$a)); # a++
355 &movq(&QWP(0,$r),"mm0"); # r[i] = a[i]*a[i]
357 &lea($r,&DWP(8,$r)); # r += 2
358 &jnz(&label("sqr_sse2_loop"));
362 &set_label("sqr_non_sse2",16);
365 # function_begin prologue
376 &mov($r,&wparam(0)); #
377 &mov($a,&wparam(1)); #
378 &mov($num,&wparam(2)); #
380 &and($num,0xfffffff8); # num / 8
381 &jz(&label("sw_finish"));
383 &set_label("sw_loop",0);
384 for ($i=0; $i<32; $i+=4)
386 &comment("Round $i");
387 &mov("eax",&DWP($i,$a,"",0)); # *a
389 &mul("eax"); # *a * *a
390 &mov(&DWP($i*2,$r,"",0),"eax"); #
391 &mov(&DWP($i*2+4,$r,"",0),"edx");#
398 &jnz(&label("sw_loop"));
400 &set_label("sw_finish",0);
401 &mov($num,&wparam(2)); # get num
403 &jz(&label("sw_end"));
405 for ($i=0; $i<7; $i++)
407 &comment("Tail Round $i");
408 &mov("eax",&DWP($i*4,$a,"",0)); # *a
410 &mul("eax"); # *a * *a
411 &mov(&DWP($i*8,$r,"",0),"eax"); #
412 &dec($num) if ($i != 7-1);
413 &mov(&DWP($i*8+4,$r,"",0),"edx");
414 &jz(&label("sw_end")) if ($i != 7-1);
416 &set_label("sw_end",0);
418 &function_end($name);
425 &function_begin_B($name,"");
426 &mov("edx",&wparam(0)); #
427 &mov("eax",&wparam(1)); #
428 &mov("ecx",&wparam(2)); #
431 &function_end_B($name);
438 &function_begin($name,"");
449 &mov($r,&wparam(0)); # get r
450 &mov($a,&wparam(1)); # get a
451 &mov($b,&wparam(2)); # get b
452 &mov($num,&wparam(3)); # get num
453 &xor($c,$c); # clear carry
454 &and($num,0xfffffff8); # num / 8
456 &jz(&label("aw_finish"));
458 &set_label("aw_loop",0);
459 for ($i=0; $i<8; $i++)
461 &comment("Round $i");
463 &mov($tmp1,&DWP($i*4,$a,"",0)); # *a
464 &mov($tmp2,&DWP($i*4,$b,"",0)); # *b
470 &mov(&DWP($i*4,$r,"",0),$tmp1); # *r
478 &jnz(&label("aw_loop"));
480 &set_label("aw_finish",0);
481 &mov($num,&wparam(3)); # get num
483 &jz(&label("aw_end"));
485 for ($i=0; $i<7; $i++)
487 &comment("Tail Round $i");
488 &mov($tmp1,&DWP($i*4,$a,"",0)); # *a
489 &mov($tmp2,&DWP($i*4,$b,"",0));# *b
495 &dec($num) if ($i != 6);
496 &mov(&DWP($i*4,$r,"",0),$tmp1); # *r
497 &jz(&label("aw_end")) if ($i != 6);
499 &set_label("aw_end",0);
501 # &mov("eax",$c); # $c is "eax"
503 &function_end($name);
510 &function_begin($name,"");
521 &mov($r,&wparam(0)); # get r
522 &mov($a,&wparam(1)); # get a
523 &mov($b,&wparam(2)); # get b
524 &mov($num,&wparam(3)); # get num
525 &xor($c,$c); # clear carry
526 &and($num,0xfffffff8); # num / 8
528 &jz(&label("aw_finish"));
530 &set_label("aw_loop",0);
531 for ($i=0; $i<8; $i++)
533 &comment("Round $i");
535 &mov($tmp1,&DWP($i*4,$a,"",0)); # *a
536 &mov($tmp2,&DWP($i*4,$b,"",0)); # *b
542 &mov(&DWP($i*4,$r,"",0),$tmp1); # *r
550 &jnz(&label("aw_loop"));
552 &set_label("aw_finish",0);
553 &mov($num,&wparam(3)); # get num
555 &jz(&label("aw_end"));
557 for ($i=0; $i<7; $i++)
559 &comment("Tail Round $i");
560 &mov($tmp1,&DWP($i*4,$a,"",0)); # *a
561 &mov($tmp2,&DWP($i*4,$b,"",0));# *b
567 &dec($num) if ($i != 6);
568 &mov(&DWP($i*4,$r,"",0),$tmp1); # *r
569 &jz(&label("aw_end")) if ($i != 6);
571 &set_label("aw_end",0);
573 # &mov("eax",$c); # $c is "eax"
575 &function_end($name);
578 sub bn_sub_part_words
582 &function_begin($name,"");
593 &mov($r,&wparam(0)); # get r
594 &mov($a,&wparam(1)); # get a
595 &mov($b,&wparam(2)); # get b
596 &mov($num,&wparam(3)); # get num
597 &xor($c,$c); # clear carry
598 &and($num,0xfffffff8); # num / 8
600 &jz(&label("aw_finish"));
602 &set_label("aw_loop",0);
603 for ($i=0; $i<8; $i++)
605 &comment("Round $i");
607 &mov($tmp1,&DWP($i*4,$a,"",0)); # *a
608 &mov($tmp2,&DWP($i*4,$b,"",0)); # *b
614 &mov(&DWP($i*4,$r,"",0),$tmp1); # *r
622 &jnz(&label("aw_loop"));
624 &set_label("aw_finish",0);
625 &mov($num,&wparam(3)); # get num
627 &jz(&label("aw_end"));
629 for ($i=0; $i<7; $i++)
631 &comment("Tail Round $i");
632 &mov($tmp1,&DWP(0,$a,"",0)); # *a
633 &mov($tmp2,&DWP(0,$b,"",0));# *b
639 &mov(&DWP(0,$r,"",0),$tmp1); # *r
643 &dec($num) if ($i != 6);
644 &jz(&label("aw_end")) if ($i != 6);
646 &set_label("aw_end",0);
649 &je(&label("pw_end"));
651 &mov($num,&wparam(4)); # get dl
653 &je(&label("pw_end"));
654 &jge(&label("pw_pos"));
660 &and($num,0xfffffff8); # num / 8
661 &jz(&label("pw_neg_finish"));
663 &set_label("pw_neg_loop",0);
664 for ($i=0; $i<8; $i++)
666 &comment("dl<0 Round $i");
669 &mov($tmp2,&DWP($i*4,$b,"",0)); # *b
675 &mov(&DWP($i*4,$r,"",0),$tmp1); # *r
682 &jnz(&label("pw_neg_loop"));
684 &set_label("pw_neg_finish",0);
685 &mov($tmp2,&wparam(4)); # get dl
689 &jz(&label("pw_end"));
691 for ($i=0; $i<7; $i++)
693 &comment("dl<0 Tail Round $i");
695 &mov($tmp2,&DWP($i*4,$b,"",0));# *b
701 &dec($num) if ($i != 6);
702 &mov(&DWP($i*4,$r,"",0),$tmp1); # *r
703 &jz(&label("pw_end")) if ($i != 6);
706 &jmp(&label("pw_end"));
708 &set_label("pw_pos",0);
710 &and($num,0xfffffff8); # num / 8
711 &jz(&label("pw_pos_finish"));
713 &set_label("pw_pos_loop",0);
715 for ($i=0; $i<8; $i++)
717 &comment("dl>0 Round $i");
719 &mov($tmp1,&DWP($i*4,$a,"",0)); # *a
721 &mov(&DWP($i*4,$r,"",0),$tmp1); # *r
722 &jnc(&label("pw_nc".$i));
729 &jnz(&label("pw_pos_loop"));
731 &set_label("pw_pos_finish",0);
732 &mov($num,&wparam(4)); # get dl
734 &jz(&label("pw_end"));
736 for ($i=0; $i<7; $i++)
738 &comment("dl>0 Tail Round $i");
739 &mov($tmp1,&DWP($i*4,$a,"",0)); # *a
741 &mov(&DWP($i*4,$r,"",0),$tmp1); # *r
742 &jnc(&label("pw_tail_nc".$i));
743 &dec($num) if ($i != 6);
744 &jz(&label("pw_end")) if ($i != 6);
747 &jmp(&label("pw_end"));
749 &set_label("pw_nc_loop",0);
750 for ($i=0; $i<8; $i++)
752 &mov($tmp1,&DWP($i*4,$a,"",0)); # *a
753 &mov(&DWP($i*4,$r,"",0),$tmp1); # *r
754 &set_label("pw_nc".$i,0);
761 &jnz(&label("pw_nc_loop"));
763 &mov($num,&wparam(4)); # get dl
765 &jz(&label("pw_nc_end"));
767 for ($i=0; $i<7; $i++)
769 &mov($tmp1,&DWP($i*4,$a,"",0)); # *a
770 &mov(&DWP($i*4,$r,"",0),$tmp1); # *r
771 &set_label("pw_tail_nc".$i,0);
772 &dec($num) if ($i != 6);
773 &jz(&label("pw_nc_end")) if ($i != 6);
776 &set_label("pw_nc_end",0);
779 &set_label("pw_end",0);
781 # &mov("eax",$c); # $c is "eax"
783 &function_end($name);