1 /* crypto/engine/hw_cluster_labs.c */
3 * Written by Jan Tschirschwitz (jan.tschirschwitz@cluster-labs.com for the
4 * OpenSSL project 2000.
6 /* ====================================================================
7 * Copyright (c) 1999 The OpenSSL Project. All rights reserved.
9 * Redistribution and use in source and binary forms, with or without
10 * modification, are permitted provided that the following conditions
13 * 1. Redistributions of source code must retain the above copyright
14 * notice, this list of conditions and the following disclaimer.
16 * 2. Redistributions in binary form must reproduce the above copyright
17 * notice, this list of conditions and the following disclaimer in
18 * the documentation and/or other materials provided with the
21 * 3. All advertising materials mentioning features or use of this
22 * software must display the following acknowledgment:
23 * "This product includes software developed by the OpenSSL Project
24 * for use in the OpenSSL Toolkit. (http://www.OpenSSL.org/)"
26 * 4. The names "OpenSSL Toolkit" and "OpenSSL Project" must not be used to
27 * endorse or promote products derived from this software without
28 * prior written permission. For written permission, please contact
29 * licensing@OpenSSL.org.
31 * 5. Products derived from this software may not be called "OpenSSL"
32 * nor may "OpenSSL" appear in their names without prior written
33 * permission of the OpenSSL Project.
35 * 6. Redistributions of any form whatsoever must retain the following
37 * "This product includes software developed by the OpenSSL Project
38 * for use in the OpenSSL Toolkit (http://www.OpenSSL.org/)"
40 * THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT ``AS IS'' AND ANY
41 * EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
42 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
43 * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE OpenSSL PROJECT OR
44 * ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
45 * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
46 * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
47 * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
48 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
49 * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
50 * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
51 * OF THE POSSIBILITY OF SUCH DAMAGE.
52 * ====================================================================
54 * This product includes cryptographic software written by Eric Young
55 * (eay@cryptsoft.com). This product includes software written by Tim
56 * Hudson (tjh@cryptsoft.com).
60 #define MSC_VER /* only used cryptic.h */
63 #include <openssl/crypto.h>
64 #include <openssl/dso.h>
65 #include <openssl/des.h>
66 #include <openssl/engine.h>
69 # ifndef NO_HW_CLUSTER_LABS
72 # include "cluster_labs.h"
74 # include "vendor_defns/cluster_labs.h"
77 # define CL_LIB_NAME "cluster_labs engine"
78 # include "hw_cluster_labs_err.c"
80 static int cluster_labs_destroy(ENGINE *e);
81 static int cluster_labs_init(ENGINE *e);
82 static int cluster_labs_finish(ENGINE *e);
83 static int cluster_labs_ctrl(ENGINE *e, int cmd, long i, void *p,
87 /* This function is aliased to mod_exp (with the mont stuff dropped). */
88 static int cluster_labs_mod_exp_mont(BIGNUM *r, const BIGNUM *a,
89 const BIGNUM *p, const BIGNUM *m,
90 BN_CTX *ctx, BN_MONT_CTX *m_ctx);
93 # ifndef OPENSSL_NO_RSA
94 static int cluster_labs_rsa_pub_enc(int flen, const unsigned char *from,
95 unsigned char *to, RSA *rsa, int padding);
96 static int cluster_labs_rsa_pub_dec(int flen, const unsigned char *from,
97 unsigned char *to, RSA *rsa, int padding);
98 static int cluster_labs_rsa_priv_enc(int flen, const unsigned char *from,
99 unsigned char *to, RSA *rsa,
101 static int cluster_labs_rsa_priv_dec(int flen, const unsigned char *from,
102 unsigned char *to, RSA *rsa,
104 static int cluster_labs_rsa_mod_exp(BIGNUM *r0, const BIGNUM *I, RSA *rsa);
108 # ifndef OPENSSL_NO_DSA
109 static DSA_SIG *cluster_labs_dsa_sign(const unsigned char *dgst, int dlen,
111 static int cluster_labs_dsa_verify(const unsigned char *dgst, int dgst_len,
112 DSA_SIG *sig, DSA *dsa);
113 static int cluster_labs_dsa_mod_exp(DSA *dsa, BIGNUM *rr, BIGNUM *a1,
114 BIGNUM *p1, BIGNUM *a2, BIGNUM *p2,
115 BIGNUM *m, BN_CTX *ctx,
116 BN_MONT_CTX *in_mont);
117 static int cluster_labs_mod_exp_dsa(DSA *dsa, BIGNUM *r, BIGNUM *a,
118 const BIGNUM *p, const BIGNUM *m,
119 BN_CTX *ctx, BN_MONT_CTX *m_ctx);
123 # ifndef OPENSSL_NO_DH
124 /* This function is alised to mod_exp (with the DH and mont dropped). */
125 static int cluster_labs_mod_exp_dh(const DH *dh, BIGNUM *r, const BIGNUM *a,
126 const BIGNUM *p, const BIGNUM *m,
127 BN_CTX *ctx, BN_MONT_CTX *m_ctx);
131 static int cluster_labs_rand_bytes(unsigned char *buf, int num);
133 /* The definitions for control commands specific to this engine */
134 # define CLUSTER_LABS_CMD_SO_PATH ENGINE_CMD_BASE
135 static const ENGINE_CMD_DEFN cluster_labs_cmd_defns[] = {
136 {CLUSTER_LABS_CMD_SO_PATH,
138 "Specifies the path to the 'cluster labs' shared library",
139 ENGINE_CMD_FLAG_STRING},
143 /* Our internal RSA_METHOD that we provide pointers to */
144 # ifndef OPENSSL_NO_RSA
145 static RSA_METHOD cluster_labs_rsa = {
146 "Cluster Labs RSA method",
147 cluster_labs_rsa_pub_enc, /* rsa_pub_enc */
148 cluster_labs_rsa_pub_dec, /* rsa_pub_dec */
149 cluster_labs_rsa_priv_enc, /* rsa_priv_enc */
150 cluster_labs_rsa_priv_dec, /* rsa_priv_dec */
151 cluster_labs_rsa_mod_exp, /* rsa_mod_exp */
152 cluster_labs_mod_exp_mont, /* bn_mod_exp */
156 NULL, /* apps_data */
158 NULL /* rsa_verify */
162 /* Our internal DSA_METHOD that we provide pointers to */
163 # ifndef OPENSSL_NO_DSA
164 static DSA_METHOD cluster_labs_dsa = {
165 "Cluster Labs DSA method",
166 cluster_labs_dsa_sign, /* dsa_do_sign */
167 NULL, /* dsa_sign_setup */
168 cluster_labs_dsa_verify, /* dsa_do_verify */
169 cluster_labs_dsa_mod_exp, /* dsa_mod_exp */
170 cluster_labs_mod_exp_dsa, /* bn_mod_exp */
178 /* Our internal DH_METHOD that we provide pointers to */
179 # ifndef OPENSSL_NO_DH
180 static DH_METHOD cluster_labs_dh = {
181 "Cluster Labs DH method",
182 NULL, /* generate key */
183 NULL, /* compute key */
184 cluster_labs_mod_exp_dh, /* bn_mod_exp */
192 static RAND_METHOD cluster_labs_rand = {
193 /* "Cluster Labs RAND method", */
195 cluster_labs_rand_bytes, /* bytes */
198 cluster_labs_rand_bytes, /* pseudorand */
202 static const char *engine_cluster_labs_id = "cluster_labs";
203 static const char *engine_cluster_labs_name =
204 "Cluster Labs hardware engine support";
206 /* engine implementation */
207 /* ---------------------*/
208 static int bind_helper(ENGINE *e)
211 if (!ENGINE_set_id(e, engine_cluster_labs_id) ||
212 !ENGINE_set_name(e, engine_cluster_labs_name) ||
213 # ifndef OPENSSL_NO_RSA
214 !ENGINE_set_RSA(e, &cluster_labs_rsa) ||
216 # ifndef OPENSSL_NO_DSA
217 !ENGINE_set_DSA(e, &cluster_labs_dsa) ||
219 # ifndef OPENSSL_NO_DH
220 !ENGINE_set_DH(e, &cluster_labs_dh) ||
222 !ENGINE_set_RAND(e, &cluster_labs_rand) ||
223 !ENGINE_set_destroy_function(e, cluster_labs_destroy) ||
224 !ENGINE_set_init_function(e, cluster_labs_init) ||
225 !ENGINE_set_finish_function(e, cluster_labs_finish) ||
226 !ENGINE_set_ctrl_function(e, cluster_labs_ctrl) ||
227 !ENGINE_set_cmd_defns(e, cluster_labs_cmd_defns))
229 /* Ensure the error handling is set up */
230 ERR_load_CL_strings();
234 # ifndef ENGINE_DYNAMIC_SUPPORT
235 static ENGINE *engine_cluster_labs(void)
237 ENGINE *ret = ENGINE_new();
241 if (!bind_helper(ret)) {
248 # ifdef ENGINE_DYNAMIC_SUPPORT
251 void ENGINE_load_cluster_labs(void)
254 ENGINE *cluster_labs = engine_cluster_labs();
258 ENGINE_add(cluster_labs);
259 ENGINE_free(cluster_labs);
262 # endif /* !ENGINE_DYNAMIC_SUPPORT */
264 static int cluster_labs_destroy(ENGINE *e)
267 ERR_unload_CL_strings();
272 * This is a process-global DSO handle used for loading and unloading the
273 * Cluster Labs library. NB: This is only set (or unset) during an init() or
274 * finish() call (reference counts permitting) and they're operating with
275 * global locks, so this should be thread-safe implicitly.
277 static DSO *cluster_labs_dso = NULL;
280 * These are the function pointers that are (un)set when the library has
281 * successfully (un)loaded.
283 static cl_engine_init *p_cl_engine_init = NULL;
284 static cl_mod_exp *p_cl_mod_exp = NULL;
285 static cl_mod_exp_crt *p_cl_mod_exp_crt = NULL;
286 static cl_rsa_mod_exp *p_cl_rsa_mod_exp = NULL;
287 static cl_rsa_priv_enc *p_cl_rsa_priv_enc = NULL;
288 static cl_rsa_priv_dec *p_cl_rsa_priv_dec = NULL;
289 static cl_rsa_pub_enc *p_cl_rsa_pub_enc = NULL;
290 static cl_rsa_pub_dec *p_cl_rsa_pub_dec = NULL;
291 static cl_rand_bytes *p_cl_rand_bytes = NULL;
292 static cl_dsa_sign *p_cl_dsa_sign = NULL;
293 static cl_dsa_verify *p_cl_dsa_verify = NULL;
295 int cluster_labs_init(ENGINE *e)
310 /* engine already loaded */
311 if (cluster_labs_dso != NULL) {
312 CLerr(CL_F_CLUSTER_LABS_INIT, CL_R_ALREADY_LOADED);
315 /* try to load engine */
316 cluster_labs_dso = DSO_load(NULL, CLUSTER_LABS_LIB_NAME, NULL, 0);
317 if (cluster_labs_dso == NULL) {
318 CLerr(CL_F_CLUSTER_LABS_INIT, CL_R_DSO_FAILURE);
322 #define BINDIT(t, name) (t *)DSO_bind_func(cluster_labs_dso, name)
323 if ((p1 = (cl_engine_init, CLUSTER_LABS_F1)) == NULL
324 || (p2 = BINDIT(cl_mod_exp, CLUSTER_LABS_F2)) == NULL
325 || (p3 = BINDIT(cl_mod_exp_crt, CLUSTER_LABS_F3)) == NULL
326 || (p4 = BINDIT(cl_rsa_mod_exp, CLUSTER_LABS_F4)) == NULL
327 || (p5 = BINDIT(cl_rsa_priv_enc, CLUSTER_LABS_F5)) == NULL
328 || (p6 = BINDIT(cl_rsa_priv_dec, CLUSTER_LABS_F6)) == NULL
329 || (p7 = BINDIT(cl_rsa_pub_enc, CLUSTER_LABS_F7)) == NULL
330 || (p8 = BINDIT(cl_rsa_pub_dec, CLUSTER_LABS_F8)) == NULL
331 || (p20 = BINDIT(cl_rand_bytes, CLUSTER_LABS_F20)) == NULL
332 || (p30 = BINDIT(cl_dsa_sign, CLUSTER_LABS_F30)) == NULL
333 || (p31 = BINDIT(cl_dsa_verify, CLUSTER_LABS_F31)) == NULL) {
334 CLerr(CL_F_CLUSTER_LABS_INIT, CL_R_DSO_FAILURE);
338 /* copy function pointers */
339 p_cl_engine_init = p1;
341 p_cl_mod_exp_crt = p3;
342 p_cl_rsa_mod_exp = p4;
343 p_cl_rsa_priv_enc = p5;
344 p_cl_rsa_priv_dec = p6;
345 p_cl_rsa_pub_enc = p7;
346 p_cl_rsa_pub_dec = p8;
347 p_cl_rand_bytes = p20;
349 p_cl_dsa_verify = p31;
351 /* cluster labs engine init */
352 if (p_cl_engine_init() == 0) {
353 CLerr(CL_F_CLUSTER_LABS_INIT, CL_R_INIT_FAILED);
360 /* reset all pointers */
361 DSO_free(cluster_labs_dso);
362 cluster_labs_dso = NULL;
363 p_cl_engine_init = NULL;
365 p_cl_mod_exp_crt = NULL;
366 p_cl_rsa_mod_exp = NULL;
367 p_cl_rsa_priv_enc = NULL;
368 p_cl_rsa_priv_dec = NULL;
369 p_cl_rsa_pub_enc = NULL;
370 p_cl_rsa_pub_dec = NULL;
371 p_cl_rand_bytes = NULL;
372 p_cl_dsa_sign = NULL;
373 p_cl_dsa_verify = NULL;
378 static int cluster_labs_finish(ENGINE *e)
381 if (cluster_labs_dso == NULL) {
382 CLerr(CL_F_CLUSTER_LABS_FINISH, CL_R_NOT_LOADED);
385 if (!DSO_free(cluster_labs_dso)) {
386 CLerr(CL_F_CLUSTER_LABS_FINISH, CL_R_DSO_FAILURE);
390 cluster_labs_dso = NULL;
391 p_cl_engine_init = NULL;
393 p_cl_rsa_mod_exp = NULL;
394 p_cl_mod_exp_crt = NULL;
395 p_cl_rsa_priv_enc = NULL;
396 p_cl_rsa_priv_dec = NULL;
397 p_cl_rsa_pub_enc = NULL;
398 p_cl_rsa_pub_dec = NULL;
399 p_cl_rand_bytes = NULL;
400 p_cl_dsa_sign = NULL;
401 p_cl_dsa_verify = NULL;
407 static int cluster_labs_ctrl(ENGINE *e, int cmd, long i, void *p,
410 int initialised = ((cluster_labs_dso == NULL) ? 0 : 1);
413 case CLUSTER_LABS_CMD_SO_PATH:
415 CLerr(CL_F_CLUSTER_LABS_CTRL, ERR_R_PASSED_NULL_PARAMETER);
419 CLerr(CL_F_CLUSTER_LABS_CTRL, CL_R_ALREADY_LOADED);
422 CLUSTER_LABS_LIB_NAME = (const char *)p;
427 CLerr(CL_F_CLUSTER_LABS_CTRL, CL_R_COMMAND_NOT_IMPLEMENTED);
431 static int cluster_labs_mod_exp(BIGNUM *r, const BIGNUM *a, const BIGNUM *p,
432 const BIGNUM *m, BN_CTX *ctx)
435 if (cluster_labs_dso == NULL) {
436 CLerr(CL_F_CLUSTER_LABS_MOD_EXP, CL_R_NOT_LOADED);
439 if (p_cl_mod_exp == NULL) {
440 CLerr(CL_F_CLUSTER_LABS_MOD_EXP, CL_R_FUNCTION_NOT_BINDED);
444 return p_cl_mod_exp(r, a, p, m, ctx);
448 static int cluster_labs_mod_exp_crt(BIGNUM *r, BIGNUM *a, const BIGNUM *p,
449 const BIGNUM *q, const BIGNUM *dmp1,
450 const BIGNUM *dmq1, const BIGNUM *iqmp,
454 if (cluster_labs_dso == NULL) {
455 CLerr(CL_F_CLUSTER_LABS_MOD_EXP_CRT, CL_R_NOT_LOADED);
458 if (p_cl_mod_exp_crt == NULL) {
459 CLerr(CL_F_CLUSTER_LABS_MOD_EXP_CRT, CL_R_FUNCTION_NOT_BINDED);
463 return p_cl_mod_exp_crt(r, a, p, q, dmp1, dmq1, iqmp, ctx);
467 static int cluster_labs_rsa_mod_exp(BIGNUM *r0, const BIGNUM *I, RSA *rsa)
470 if (cluster_labs_dso == NULL) {
471 CLerr(CL_F_CLUSTER_LABS_RSA_MOD_EXP, CL_R_NOT_LOADED);
474 if (p_cl_rsa_mod_exp == NULL) {
475 CLerr(CL_F_CLUSTER_LABS_RSA_MOD_EXP, CL_R_FUNCTION_NOT_BINDED);
479 return p_cl_rsa_mod_exp(r0, I, rsa);
483 static DSA_SIG *cluster_labs_dsa_sign(const unsigned char *dgst, int dlen,
487 if (cluster_labs_dso == NULL) {
488 CLerr(CL_F_CLUSTER_LABS_DSA_SIGN, CL_R_NOT_LOADED);
491 if (p_cl_dsa_sign == NULL) {
492 CLerr(CL_F_CLUSTER_LABS_DSA_SIGN, CL_R_FUNCTION_NOT_BINDED);
496 return p_cl_dsa_sign(dgst, dlen, dsa);
500 static int cluster_labs_dsa_verify(const unsigned char *dgst, int dgst_len,
501 DSA_SIG *sig, DSA *dsa)
504 if (cluster_labs_dso == NULL) {
505 CLerr(CL_F_CLUSTER_LABS_DSA_VERIFY, CL_R_NOT_LOADED);
509 if (p_cl_dsa_verify == NULL) {
510 CLerr(CL_F_CLUSTER_LABS_DSA_VERIFY, CL_R_FUNCTION_NOT_BINDED);
514 return p_cl_dsa_verify(dgst, dgst_len, sig, dsa);
518 static int cluster_labs_dsa_mod_exp(DSA *dsa, BIGNUM *rr, BIGNUM *a1,
519 BIGNUM *p1, BIGNUM *a2, BIGNUM *p2,
520 BIGNUM *m, BN_CTX *ctx,
521 BN_MONT_CTX *in_mont)
527 /* let rr = a1 ^ p1 mod m */
528 if (!cluster_labs_mod_exp(rr, a1, p1, m, ctx))
530 /* let t = a2 ^ p2 mod m */
531 if (!cluster_labs_mod_exp(&t, a2, p2, m, ctx))
533 /* let rr = rr * t mod m */
534 if (!BN_mod_mul(rr, rr, &t, m, ctx))
544 static int cluster_labs_mod_exp_dsa(DSA *dsa, BIGNUM *r, BIGNUM *a,
545 const BIGNUM *p, const BIGNUM *m,
546 BN_CTX *ctx, BN_MONT_CTX *m_ctx)
548 return cluster_labs_mod_exp(r, a, p, m, ctx);
551 /* This function is aliased to mod_exp (with the mont stuff dropped). */
552 static int cluster_labs_mod_exp_mont(BIGNUM *r, const BIGNUM *a,
553 const BIGNUM *p, const BIGNUM *m,
554 BN_CTX *ctx, BN_MONT_CTX *m_ctx)
556 return cluster_labs_mod_exp(r, a, p, m, ctx);
559 /* This function is aliased to mod_exp (with the dh and mont dropped). */
560 static int cluster_labs_mod_exp_dh(const DH *dh, BIGNUM *r, const BIGNUM *a,
561 const BIGNUM *p, const BIGNUM *m,
562 BN_CTX *ctx, BN_MONT_CTX *m_ctx)
564 return cluster_labs_mod_exp(r, a, p, m, ctx);
567 static int cluster_labs_rsa_pub_enc(int flen, const unsigned char *from,
568 unsigned char *to, RSA *rsa, int padding)
571 if (cluster_labs_dso == NULL) {
572 CLerr(CL_F_CLUSTER_LABS_RSA_PUB_ENC, CL_R_NOT_LOADED);
575 if (p_cl_rsa_priv_enc == NULL) {
576 CLerr(CL_F_CLUSTER_LABS_RSA_PUB_ENC, CL_R_FUNCTION_NOT_BINDED);
580 return p_cl_rsa_pub_enc(flen, from, to, rsa, padding);
584 static int cluster_labs_rsa_pub_dec(int flen, const unsigned char *from,
585 unsigned char *to, RSA *rsa, int padding)
588 if (cluster_labs_dso == NULL) {
589 CLerr(CL_F_CLUSTER_LABS_RSA_PUB_DEC, CL_R_NOT_LOADED);
592 if (p_cl_rsa_priv_enc == NULL) {
593 CLerr(CL_F_CLUSTER_LABS_RSA_PUB_DEC, CL_R_FUNCTION_NOT_BINDED);
597 return p_cl_rsa_pub_dec(flen, from, to, rsa, padding);
601 static int cluster_labs_rsa_priv_enc(int flen, const unsigned char *from,
602 unsigned char *to, RSA *rsa, int padding)
605 if (cluster_labs_dso == NULL) {
606 CLerr(CL_F_CLUSTER_LABS_RSA_PRIV_ENC, CL_R_NOT_LOADED);
610 if (p_cl_rsa_priv_enc == NULL) {
611 CLerr(CL_F_CLUSTER_LABS_RSA_PRIV_ENC, CL_R_FUNCTION_NOT_BINDED);
615 return p_cl_rsa_priv_enc(flen, from, to, rsa, padding);
619 static int cluster_labs_rsa_priv_dec(int flen, const unsigned char *from,
620 unsigned char *to, RSA *rsa, int padding)
623 if (cluster_labs_dso == NULL) {
624 CLerr(CL_F_CLUSTER_LABS_RSA_PRIV_DEC, CL_R_NOT_LOADED);
627 if (p_cl_rsa_priv_dec == NULL) {
628 CLerr(CL_F_CLUSTER_LABS_RSA_PRIV_DEC, CL_R_FUNCTION_NOT_BINDED);
632 return p_cl_rsa_priv_dec(flen, from, to, rsa, padding);
636 /************************************************************************************
637 * Symmetric algorithms
638 ************************************************************************************/
639 /* this will be come soon! */
641 /************************************************************************************
643 ************************************************************************************/
645 static int cluster_labs_rand_bytes(unsigned char *buf, int num)
648 if (cluster_labs_dso == NULL) {
649 CLerr(CL_F_CLUSTER_LABS_RAND_BYTES, CL_R_NOT_LOADED);
652 if (p_cl_mod_exp_crt == NULL) {
653 CLerr(CL_F_CLUSTER_LABS_RAND_BYTES, CL_R_FUNCTION_NOT_BINDED);
657 return p_cl_rand_bytes(buf, num);
662 * This stuff is needed if this ENGINE is being compiled into a
663 * self-contained shared-library.
665 # ifdef ENGINE_DYNAMIC_SUPPORT
666 static int bind_fn(ENGINE *e, const char *id)
668 fprintf(stderr, "bind_fn CLUSTER_LABS\n");
669 if (id && (strcmp(id, engine_cluster_labs_id) != 0)) {
670 fprintf(stderr, "bind_fn return(0) first\n");
673 if (!bind_helper(e)) {
674 fprintf(stderr, "bind_fn return(1) first\n");
677 fprintf(stderr, "bind_fn return(1)\n");
681 IMPLEMENT_DYNAMIC_CHECK_FN()
682 IMPLEMENT_DYNAMIC_BIND_FN(bind_fn)
683 # endif /* ENGINE_DYNAMIC_SUPPORT */
684 # endif /* !NO_HW_CLUSTER_LABS */