crypto.hh revision 13168 
1/*
2 * Copyright (c) 2018 ARM Limited
3 * All rights reserved
4 *
5 * The license below extends only to copyright in the software and shall
6 * not be construed as granting a license to any other intellectual
7 * property including but not limited to intellectual property relating
8 * to a hardware implementation of the functionality of the software
9 * licensed hereunder.  You may use the software subject to the license
10 * terms below provided that you ensure that this notice is replicated
11 * unmodified and in its entirety in all distributions of the software,
12 * modified or unmodified, in source code or in binary form.
13 *
14 * Redistribution and use in source and binary forms, with or without
15 * modification, are permitted provided that the following conditions are
16 * met: redistributions of source code must retain the above copyright
17 * notice, this list of conditions and the following disclaimer;
18 * redistributions in binary form must reproduce the above copyright
19 * notice, this list of conditions and the following disclaimer in the
20 * documentation and/or other materials provided with the distribution;
21 * neither the name of the copyright holders nor the names of its
22 * contributors may be used to endorse or promote products derived from
23 * this software without specific prior written permission.
24 *
25 * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
26 * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
27 * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
28 * A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
29 * OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
30 * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
31 * LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
32 * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
33 * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
34 * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
35 * OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
36 *
37 * Authors: Matt Horsnell
38 *          Prakash Ramrakhyani
39 */
40
41#ifndef __ARCH_ARM_INSTS_CRYPTO_HH__
42#define __ARCH_ARM_INSTS_CRYPTO_HH__
43
44namespace ArmISA {
45
46class Crypto
47{
48    enum SHAOp : uint8_t
49    {
50        CHOOSE = 0,
51        PARITY,
52        MAJORITY
53    };
54
55    uint32_t ror(uint32_t x, uint8_t shift)
56    {
57        return (x >> shift) | (x << (32 - shift));
58    }
59
60    uint32_t choose(uint32_t X, uint32_t Y, uint32_t Z)
61    {
62        return (((Y ^ Z) & X) ^ Z);
63    }
64
65    uint32_t parity(uint32_t X, uint32_t Y, uint32_t Z)
66    {
67        return (X ^ Y ^ Z);
68    }
69
70    uint32_t majority(uint32_t X, uint32_t Y, uint32_t Z)
71    {
72        return ((X & Y) | ((X | Y) & Z));
73    }
74
75    uint32_t sigma0(uint32_t X)
76    {
77        return ror(X,2) ^ ror(X,13) ^ ror(X,22);
78    }
79
80    uint32_t sigma1(uint32_t X)
81    {
82        return ror(X,6) ^ ror(X,11) ^ ror(X,25);
83    }
84
85    void sha256Op(uint32_t *X, uint32_t *Y, uint32_t *Z);
86    void sha1Op(uint8_t *output, uint8_t *input, uint8_t *input2, SHAOp op);
87    void _sha1Op(uint32_t *X, uint32_t *Y, uint32_t *Z, SHAOp op);
88
89    void load2Reg(uint32_t *X, uint32_t *Y, uint8_t *output, uint8_t *input);
90    void load3Reg(uint32_t *X, uint32_t *Y, uint32_t *Z,
91                  uint8_t *output, uint8_t *input, uint8_t *input2);
92    void store1Reg(uint8_t *output, uint32_t *X);
93
94  public:
95    void sha256H(uint8_t *output, uint8_t *input, uint8_t *input2);
96    void sha256H2(uint8_t *output, uint8_t *input, uint8_t *input2);
97    void sha256Su0(uint8_t *output, uint8_t *input);
98    void sha256Su1(uint8_t *output, uint8_t *input, uint8_t *input2);
99
100    void sha1C(uint8_t *output, uint8_t *input, uint8_t *input2);
101    void sha1P(uint8_t *output, uint8_t *input, uint8_t *input2);
102    void sha1M(uint8_t *output, uint8_t *input, uint8_t *input2);
103    void sha1H(uint8_t *output, uint8_t *input);
104    void sha1Su0(uint8_t *output, uint8_t *input, uint8_t *input2);
105    void sha1Su1(uint8_t *output, uint8_t *input);
106};
107
108} // namespace ArmISA
109
110#endif //__ARCH_ARM_INSTS_CRYPTO_HH__
111