diff options
Diffstat (limited to 'src/lib/libcrypto/sha/asm/sha1-586.pl')
-rw-r--r-- | src/lib/libcrypto/sha/asm/sha1-586.pl | 472 |
1 files changed, 339 insertions, 133 deletions
diff --git a/src/lib/libcrypto/sha/asm/sha1-586.pl b/src/lib/libcrypto/sha/asm/sha1-586.pl index 0b4dab2bd5..041acc0348 100644 --- a/src/lib/libcrypto/sha/asm/sha1-586.pl +++ b/src/lib/libcrypto/sha/asm/sha1-586.pl | |||
@@ -1,16 +1,4 @@ | |||
1 | #!/usr/bin/env perl | 1 | #!/usr/local/bin/perl |
2 | |||
3 | # ==================================================================== | ||
4 | # [Re]written by Andy Polyakov <appro@fy.chalmers.se> for the OpenSSL | ||
5 | # project. The module is, however, dual licensed under OpenSSL and | ||
6 | # CRYPTOGAMS licenses depending on where you obtain it. For further | ||
7 | # details see http://www.openssl.org/~appro/cryptogams/. | ||
8 | # ==================================================================== | ||
9 | |||
10 | # "[Re]written" was achieved in two major overhauls. In 2004 BODY_* | ||
11 | # functions were re-implemented to address P4 performance issue [see | ||
12 | # commentary below], and in 2006 the rest was rewritten in order to | ||
13 | # gain freedom to liberate licensing terms. | ||
14 | 2 | ||
15 | # It was noted that Intel IA-32 C compiler generates code which | 3 | # It was noted that Intel IA-32 C compiler generates code which |
16 | # performs ~30% *faster* on P4 CPU than original *hand-coded* | 4 | # performs ~30% *faster* on P4 CPU than original *hand-coded* |
@@ -21,7 +9,7 @@ | |||
21 | # | 9 | # |
22 | # compared with original compared with Intel cc | 10 | # compared with original compared with Intel cc |
23 | # assembler impl. generated code | 11 | # assembler impl. generated code |
24 | # Pentium -16% +48% | 12 | # Pentium -25% +37% |
25 | # PIII/AMD +8% +16% | 13 | # PIII/AMD +8% +16% |
26 | # P4 +85%(!) +45% | 14 | # P4 +85%(!) +45% |
27 | # | 15 | # |
@@ -29,115 +17,174 @@ | |||
29 | # improvement on P4 outweights the loss and incorporate this | 17 | # improvement on P4 outweights the loss and incorporate this |
30 | # re-tuned code to 0.9.7 and later. | 18 | # re-tuned code to 0.9.7 and later. |
31 | # ---------------------------------------------------------------- | 19 | # ---------------------------------------------------------------- |
20 | # Those who for any particular reason absolutely must score on | ||
21 | # Pentium can replace this module with one from 0.9.6 distribution. | ||
22 | # This "offer" shall be revoked the moment programming interface to | ||
23 | # this module is changed, in which case this paragraph should be | ||
24 | # removed. | ||
25 | # ---------------------------------------------------------------- | ||
32 | # <appro@fy.chalmers.se> | 26 | # <appro@fy.chalmers.se> |
33 | 27 | ||
34 | $0 =~ m/(.*[\/\\])[^\/\\]+$/; $dir=$1; | 28 | $normal=0; |
35 | push(@INC,"${dir}","${dir}../../perlasm"); | 29 | |
30 | push(@INC,"perlasm","../../perlasm"); | ||
36 | require "x86asm.pl"; | 31 | require "x86asm.pl"; |
37 | 32 | ||
38 | &asm_init($ARGV[0],"sha1-586.pl",$ARGV[$#ARGV] eq "386"); | 33 | &asm_init($ARGV[0],"sha1-586.pl",$ARGV[$#ARGV] eq "386"); |
39 | 34 | ||
40 | $A="eax"; | 35 | $A="eax"; |
41 | $B="ebx"; | 36 | $B="ecx"; |
42 | $C="ecx"; | 37 | $C="ebx"; |
43 | $D="edx"; | 38 | $D="edx"; |
44 | $E="edi"; | 39 | $E="edi"; |
45 | $T="esi"; | 40 | $T="esi"; |
46 | $tmp1="ebp"; | 41 | $tmp1="ebp"; |
47 | 42 | ||
48 | @V=($A,$B,$C,$D,$E,$T); | 43 | $off=9*4; |
44 | |||
45 | @K=(0x5a827999,0x6ed9eba1,0x8f1bbcdc,0xca62c1d6); | ||
46 | |||
47 | &sha1_block_data("sha1_block_asm_data_order"); | ||
48 | |||
49 | &asm_finish(); | ||
50 | |||
51 | sub Nn | ||
52 | { | ||
53 | local($p)=@_; | ||
54 | local(%n)=($A,$T,$B,$A,$C,$B,$D,$C,$E,$D,$T,$E); | ||
55 | return($n{$p}); | ||
56 | } | ||
57 | |||
58 | sub Np | ||
59 | { | ||
60 | local($p)=@_; | ||
61 | local(%n)=($A,$T,$B,$A,$C,$B,$D,$C,$E,$D,$T,$E); | ||
62 | local(%n)=($A,$B,$B,$C,$C,$D,$D,$E,$E,$T,$T,$A); | ||
63 | return($n{$p}); | ||
64 | } | ||
65 | |||
66 | sub Na | ||
67 | { | ||
68 | local($n)=@_; | ||
69 | return( (($n )&0x0f), | ||
70 | (($n+ 2)&0x0f), | ||
71 | (($n+ 8)&0x0f), | ||
72 | (($n+13)&0x0f), | ||
73 | (($n+ 1)&0x0f)); | ||
74 | } | ||
75 | |||
76 | sub X_expand | ||
77 | { | ||
78 | local($in)=@_; | ||
79 | |||
80 | &comment("First, load the words onto the stack in network byte order"); | ||
81 | for ($i=0; $i<16; $i+=2) | ||
82 | { | ||
83 | &mov($A,&DWP(($i+0)*4,$in,"",0));# unless $i == 0; | ||
84 | &mov($B,&DWP(($i+1)*4,$in,"",0)); | ||
85 | &bswap($A); | ||
86 | &bswap($B); | ||
87 | &mov(&swtmp($i+0),$A); | ||
88 | &mov(&swtmp($i+1),$B); | ||
89 | } | ||
90 | |||
91 | &comment("We now have the X array on the stack"); | ||
92 | &comment("starting at sp-4"); | ||
93 | } | ||
94 | |||
95 | # Rules of engagement | ||
96 | # F is always trashable at the start, the running total. | ||
97 | # E becomes the next F so it can be trashed after it has been 'accumulated' | ||
98 | # F becomes A in the next round. We don't need to access it much. | ||
99 | # During the X update part, the result ends up in $X[$n0]. | ||
49 | 100 | ||
50 | sub BODY_00_15 | 101 | sub BODY_00_15 |
51 | { | 102 | { |
52 | local($n,$a,$b,$c,$d,$e,$f)=@_; | 103 | local($pos,$K,$X,$n,$a,$b,$c,$d,$e,$f)=@_; |
53 | 104 | ||
54 | &comment("00_15 $n"); | 105 | &comment("00_15 $n"); |
55 | 106 | ||
56 | &mov($f,$c); # f to hold F_00_19(b,c,d) | 107 | &mov($tmp1,$a); |
57 | if ($n==0) { &mov($tmp1,$a); } | 108 | &mov($f,$c); # f to hold F_00_19(b,c,d) |
58 | else { &mov($a,$tmp1); } | ||
59 | &rotl($tmp1,5); # tmp1=ROTATE(a,5) | 109 | &rotl($tmp1,5); # tmp1=ROTATE(a,5) |
60 | &xor($f,$d); | 110 | &xor($f,$d); |
111 | &and($f,$b); | ||
112 | &rotr($b,2); # b=ROTATE(b,30) | ||
61 | &add($tmp1,$e); # tmp1+=e; | 113 | &add($tmp1,$e); # tmp1+=e; |
62 | &and($f,$b); | 114 | &mov($e,&swtmp($n)); # e becomes volatile and |
63 | &mov($e,&swtmp($n%16)); # e becomes volatile and is loaded | 115 | # is loaded with xi |
64 | # with xi, also note that e becomes | 116 | &xor($f,$d); # f holds F_00_19(b,c,d) |
65 | # f in next round... | 117 | &lea($tmp1,&DWP($K,$tmp1,$e,1));# tmp1+=K_00_19+xi |
66 | &xor($f,$d); # f holds F_00_19(b,c,d) | 118 | |
67 | &rotr($b,2); # b=ROTATE(b,30) | 119 | &add($f,$tmp1); # f+=tmp1 |
68 | &lea($tmp1,&DWP(0x5a827999,$tmp1,$e)); # tmp1+=K_00_19+xi | ||
69 | |||
70 | if ($n==15) { &add($f,$tmp1); } # f+=tmp1 | ||
71 | else { &add($tmp1,$f); } # f becomes a in next round | ||
72 | } | 120 | } |
73 | 121 | ||
74 | sub BODY_16_19 | 122 | sub BODY_16_19 |
75 | { | 123 | { |
76 | local($n,$a,$b,$c,$d,$e,$f)=@_; | 124 | local($pos,$K,$X,$n,$a,$b,$c,$d,$e,$f)=@_; |
125 | local($n0,$n1,$n2,$n3,$np)=&Na($n); | ||
77 | 126 | ||
78 | &comment("16_19 $n"); | 127 | &comment("16_19 $n"); |
79 | 128 | ||
80 | &mov($f,&swtmp($n%16)); # f to hold Xupdate(xi,xa,xb,xc,xd) | 129 | &mov($f,&swtmp($n1)); # f to hold Xupdate(xi,xa,xb,xc,xd) |
81 | &mov($tmp1,$c); # tmp1 to hold F_00_19(b,c,d) | 130 | &mov($tmp1,$c); # tmp1 to hold F_00_19(b,c,d) |
82 | &xor($f,&swtmp(($n+2)%16)); | 131 | &xor($f,&swtmp($n0)); |
83 | &xor($tmp1,$d); | 132 | &xor($tmp1,$d); |
84 | &xor($f,&swtmp(($n+8)%16)); | 133 | &xor($f,&swtmp($n2)); |
85 | &and($tmp1,$b); # tmp1 holds F_00_19(b,c,d) | 134 | &and($tmp1,$b); # tmp1 holds F_00_19(b,c,d) |
86 | &rotr($b,2); # b=ROTATE(b,30) | 135 | &xor($f,&swtmp($n3)); # f holds xa^xb^xc^xd |
87 | &xor($f,&swtmp(($n+13)%16)); # f holds xa^xb^xc^xd | 136 | &rotr($b,2); # b=ROTATE(b,30) |
88 | &rotl($f,1); # f=ROTATE(f,1) | 137 | &xor($tmp1,$d); # tmp1=F_00_19(b,c,d) |
89 | &xor($tmp1,$d); # tmp1=F_00_19(b,c,d) | 138 | &rotl($f,1); # f=ROATE(f,1) |
90 | &mov(&swtmp($n%16),$f); # xi=f | 139 | &mov(&swtmp($n0),$f); # xi=f |
91 | &lea($f,&DWP(0x5a827999,$f,$e));# f+=K_00_19+e | 140 | &lea($f,&DWP($K,$f,$e,1)); # f+=K_00_19+e |
92 | &mov($e,$a); # e becomes volatile | 141 | &mov($e,$a); # e becomes volatile |
93 | &rotl($e,5); # e=ROTATE(a,5) | 142 | &add($f,$tmp1); # f+=F_00_19(b,c,d) |
94 | &add($f,$tmp1); # f+=F_00_19(b,c,d) | 143 | &rotl($e,5); # e=ROTATE(a,5) |
95 | &add($f,$e); # f+=ROTATE(a,5) | 144 | &add($f,$e); # f+=ROTATE(a,5) |
96 | } | 145 | } |
97 | 146 | ||
98 | sub BODY_20_39 | 147 | sub BODY_20_39 |
99 | { | 148 | { |
100 | local($n,$a,$b,$c,$d,$e,$f)=@_; | 149 | local($pos,$K,$X,$n,$a,$b,$c,$d,$e,$f)=@_; |
101 | local $K=($n<40)?0x6ed9eba1:0xca62c1d6; | ||
102 | 150 | ||
103 | &comment("20_39 $n"); | 151 | &comment("20_39 $n"); |
152 | local($n0,$n1,$n2,$n3,$np)=&Na($n); | ||
104 | 153 | ||
105 | &mov($tmp1,$b); # tmp1 to hold F_20_39(b,c,d) | 154 | &mov($f,&swtmp($n0)); # f to hold Xupdate(xi,xa,xb,xc,xd) |
106 | &mov($f,&swtmp($n%16)); # f to hold Xupdate(xi,xa,xb,xc,xd) | 155 | &mov($tmp1,$b); # tmp1 to hold F_20_39(b,c,d) |
107 | &rotr($b,2); # b=ROTATE(b,30) | 156 | &xor($f,&swtmp($n1)); |
108 | &xor($f,&swtmp(($n+2)%16)); | 157 | &rotr($b,2); # b=ROTATE(b,30) |
109 | &xor($tmp1,$c); | 158 | &xor($f,&swtmp($n2)); |
110 | &xor($f,&swtmp(($n+8)%16)); | 159 | &xor($tmp1,$c); |
111 | &xor($tmp1,$d); # tmp1 holds F_20_39(b,c,d) | 160 | &xor($f,&swtmp($n3)); # f holds xa^xb^xc^xd |
112 | &xor($f,&swtmp(($n+13)%16)); # f holds xa^xb^xc^xd | 161 | &xor($tmp1,$d); # tmp1 holds F_20_39(b,c,d) |
113 | &rotl($f,1); # f=ROTATE(f,1) | 162 | &rotl($f,1); # f=ROTATE(f,1) |
114 | &add($tmp1,$e); | 163 | &mov(&swtmp($n0),$f); # xi=f |
115 | &mov(&swtmp($n%16),$f); # xi=f | 164 | &lea($f,&DWP($K,$f,$e,1)); # f+=K_20_39+e |
116 | &mov($e,$a); # e becomes volatile | 165 | &mov($e,$a); # e becomes volatile |
117 | &rotl($e,5); # e=ROTATE(a,5) | 166 | &rotl($e,5); # e=ROTATE(a,5) |
118 | &lea($f,&DWP($K,$f,$tmp1)); # f+=K_20_39+e | 167 | &add($f,$tmp1); # f+=F_20_39(b,c,d) |
119 | &add($f,$e); # f+=ROTATE(a,5) | 168 | &add($f,$e); # f+=ROTATE(a,5) |
120 | } | 169 | } |
121 | 170 | ||
122 | sub BODY_40_59 | 171 | sub BODY_40_59 |
123 | { | 172 | { |
124 | local($n,$a,$b,$c,$d,$e,$f)=@_; | 173 | local($pos,$K,$X,$n,$a,$b,$c,$d,$e,$f)=@_; |
125 | 174 | ||
126 | &comment("40_59 $n"); | 175 | &comment("40_59 $n"); |
176 | local($n0,$n1,$n2,$n3,$np)=&Na($n); | ||
127 | 177 | ||
128 | &mov($f,&swtmp($n%16)); # f to hold Xupdate(xi,xa,xb,xc,xd) | 178 | &mov($f,&swtmp($n0)); # f to hold Xupdate(xi,xa,xb,xc,xd) |
129 | &mov($tmp1,&swtmp(($n+2)%16)); | ||
130 | &xor($f,$tmp1); | ||
131 | &mov($tmp1,&swtmp(($n+8)%16)); | ||
132 | &xor($f,$tmp1); | ||
133 | &mov($tmp1,&swtmp(($n+13)%16)); | ||
134 | &xor($f,$tmp1); # f holds xa^xb^xc^xd | ||
135 | &mov($tmp1,$b); # tmp1 to hold F_40_59(b,c,d) | 179 | &mov($tmp1,$b); # tmp1 to hold F_40_59(b,c,d) |
136 | &rotl($f,1); # f=ROTATE(f,1) | 180 | &xor($f,&swtmp($n1)); |
137 | &or($tmp1,$c); | 181 | &or($tmp1,$c); |
138 | &mov(&swtmp($n%16),$f); # xi=f | 182 | &xor($f,&swtmp($n2)); |
139 | &and($tmp1,$d); | 183 | &and($tmp1,$d); |
140 | &lea($f,&DWP(0x8f1bbcdc,$f,$e));# f+=K_40_59+e | 184 | &xor($f,&swtmp($n3)); # f holds xa^xb^xc^xd |
185 | &rotl($f,1); # f=ROTATE(f,1) | ||
186 | &mov(&swtmp($n0),$f); # xi=f | ||
187 | &lea($f,&DWP($K,$f,$e,1)); # f+=K_40_59+e | ||
141 | &mov($e,$b); # e becomes volatile and is used | 188 | &mov($e,$b); # e becomes volatile and is used |
142 | # to calculate F_40_59(b,c,d) | 189 | # to calculate F_40_59(b,c,d) |
143 | &rotr($b,2); # b=ROTATE(b,30) | 190 | &rotr($b,2); # b=ROTATE(b,30) |
@@ -145,75 +192,234 @@ sub BODY_40_59 | |||
145 | &or($tmp1,$e); # tmp1 holds F_40_59(b,c,d) | 192 | &or($tmp1,$e); # tmp1 holds F_40_59(b,c,d) |
146 | &mov($e,$a); | 193 | &mov($e,$a); |
147 | &rotl($e,5); # e=ROTATE(a,5) | 194 | &rotl($e,5); # e=ROTATE(a,5) |
148 | &add($f,$tmp1); # f+=tmp1; | 195 | &add($tmp1,$e); # tmp1+=ROTATE(a,5) |
149 | &add($f,$e); # f+=ROTATE(a,5) | 196 | &add($f,$tmp1); # f+=tmp1; |
150 | } | 197 | } |
151 | 198 | ||
152 | &function_begin("sha1_block_data_order",16); | 199 | sub BODY_60_79 |
153 | &mov($tmp1,&wparam(0)); # SHA_CTX *c | 200 | { |
154 | &mov($T,&wparam(1)); # const void *input | 201 | &BODY_20_39(@_); |
155 | &mov($A,&wparam(2)); # size_t num | 202 | } |
156 | &stack_push(16); # allocate X[16] | 203 | |
157 | &shl($A,6); | 204 | sub sha1_block_host |
158 | &add($A,$T); | 205 | { |
159 | &mov(&wparam(2),$A); # pointer beyond the end of input | 206 | local($name, $sclabel)=@_; |
160 | &mov($E,&DWP(16,$tmp1));# pre-load E | ||
161 | 207 | ||
162 | &set_label("loop",16); | 208 | &function_begin_B($name,""); |
163 | 209 | ||
164 | # copy input chunk to X, but reversing byte order! | 210 | # parameter 1 is the MD5_CTX structure. |
165 | for ($i=0; $i<16; $i+=4) | 211 | # A 0 |
212 | # B 4 | ||
213 | # C 8 | ||
214 | # D 12 | ||
215 | # E 16 | ||
216 | |||
217 | &mov("ecx", &wparam(2)); | ||
218 | &push("esi"); | ||
219 | &shl("ecx",6); | ||
220 | &mov("esi", &wparam(1)); | ||
221 | &push("ebp"); | ||
222 | &add("ecx","esi"); # offset to leave on | ||
223 | &push("ebx"); | ||
224 | &mov("ebp", &wparam(0)); | ||
225 | &push("edi"); | ||
226 | &mov($D, &DWP(12,"ebp","",0)); | ||
227 | &stack_push(18+9); | ||
228 | &mov($E, &DWP(16,"ebp","",0)); | ||
229 | &mov($C, &DWP( 8,"ebp","",0)); | ||
230 | &mov(&swtmp(17),"ecx"); | ||
231 | |||
232 | &comment("First we need to setup the X array"); | ||
233 | |||
234 | for ($i=0; $i<16; $i+=2) | ||
166 | { | 235 | { |
167 | &mov($A,&DWP(4*($i+0),$T)); | 236 | &mov($A,&DWP(($i+0)*4,"esi","",0));# unless $i == 0; |
168 | &mov($B,&DWP(4*($i+1),$T)); | 237 | &mov($B,&DWP(($i+1)*4,"esi","",0)); |
169 | &mov($C,&DWP(4*($i+2),$T)); | ||
170 | &mov($D,&DWP(4*($i+3),$T)); | ||
171 | &bswap($A); | ||
172 | &bswap($B); | ||
173 | &bswap($C); | ||
174 | &bswap($D); | ||
175 | &mov(&swtmp($i+0),$A); | 238 | &mov(&swtmp($i+0),$A); |
176 | &mov(&swtmp($i+1),$B); | 239 | &mov(&swtmp($i+1),$B); |
177 | &mov(&swtmp($i+2),$C); | ||
178 | &mov(&swtmp($i+3),$D); | ||
179 | } | 240 | } |
180 | &mov(&wparam(1),$T); # redundant in 1st spin | 241 | &jmp($sclabel); |
181 | 242 | &function_end_B($name); | |
182 | &mov($A,&DWP(0,$tmp1)); # load SHA_CTX | 243 | } |
183 | &mov($B,&DWP(4,$tmp1)); | 244 | |
184 | &mov($C,&DWP(8,$tmp1)); | 245 | |
185 | &mov($D,&DWP(12,$tmp1)); | 246 | sub sha1_block_data |
186 | # E is pre-loaded | 247 | { |
187 | 248 | local($name)=@_; | |
188 | for($i=0;$i<16;$i++) { &BODY_00_15($i,@V); unshift(@V,pop(@V)); } | 249 | |
189 | for(;$i<20;$i++) { &BODY_16_19($i,@V); unshift(@V,pop(@V)); } | 250 | &function_begin_B($name,""); |
190 | for(;$i<40;$i++) { &BODY_20_39($i,@V); unshift(@V,pop(@V)); } | 251 | |
191 | for(;$i<60;$i++) { &BODY_40_59($i,@V); unshift(@V,pop(@V)); } | 252 | # parameter 1 is the MD5_CTX structure. |
192 | for(;$i<80;$i++) { &BODY_20_39($i,@V); unshift(@V,pop(@V)); } | 253 | # A 0 |
193 | 254 | # B 4 | |
194 | (($V[5] eq $D) and ($V[0] eq $E)) or die; # double-check | 255 | # C 8 |
195 | 256 | # D 12 | |
196 | &mov($tmp1,&wparam(0)); # re-load SHA_CTX* | 257 | # E 16 |
197 | &mov($D,&wparam(1)); # D is last "T" and is discarded | 258 | |
198 | 259 | &mov("ecx", &wparam(2)); | |
199 | &add($E,&DWP(0,$tmp1)); # E is last "A"... | 260 | &push("esi"); |
200 | &add($T,&DWP(4,$tmp1)); | 261 | &shl("ecx",6); |
201 | &add($A,&DWP(8,$tmp1)); | 262 | &mov("esi", &wparam(1)); |
202 | &add($B,&DWP(12,$tmp1)); | 263 | &push("ebp"); |
203 | &add($C,&DWP(16,$tmp1)); | 264 | &add("ecx","esi"); # offset to leave on |
204 | 265 | &push("ebx"); | |
205 | &mov(&DWP(0,$tmp1),$E); # update SHA_CTX | 266 | &mov("ebp", &wparam(0)); |
206 | &add($D,64); # advance input pointer | 267 | &push("edi"); |
207 | &mov(&DWP(4,$tmp1),$T); | 268 | &mov($D, &DWP(12,"ebp","",0)); |
208 | &cmp($D,&wparam(2)); # have we reached the end yet? | 269 | &stack_push(18+9); |
209 | &mov(&DWP(8,$tmp1),$A); | 270 | &mov($E, &DWP(16,"ebp","",0)); |
210 | &mov($E,$C); # C is last "E" which needs to be "pre-loaded" | 271 | &mov($C, &DWP( 8,"ebp","",0)); |
211 | &mov(&DWP(12,$tmp1),$B); | 272 | &mov(&swtmp(17),"ecx"); |
212 | &mov($T,$D); # input pointer | 273 | |
213 | &mov(&DWP(16,$tmp1),$C); | 274 | &comment("First we need to setup the X array"); |
214 | &jb(&label("loop")); | 275 | |
215 | 276 | &set_label("start") unless $normal; | |
216 | &stack_pop(16); | 277 | |
217 | &function_end("sha1_block_data_order"); | 278 | &X_expand("esi"); |
279 | &mov(&wparam(1),"esi"); | ||
280 | |||
281 | &set_label("shortcut", 0, 1); | ||
282 | &comment(""); | ||
283 | &comment("Start processing"); | ||
284 | |||
285 | # odd start | ||
286 | &mov($A, &DWP( 0,"ebp","",0)); | ||
287 | &mov($B, &DWP( 4,"ebp","",0)); | ||
288 | $X="esp"; | ||
289 | &BODY_00_15(-2,$K[0],$X, 0,$A,$B,$C,$D,$E,$T); | ||
290 | &BODY_00_15( 0,$K[0],$X, 1,$T,$A,$B,$C,$D,$E); | ||
291 | &BODY_00_15( 0,$K[0],$X, 2,$E,$T,$A,$B,$C,$D); | ||
292 | &BODY_00_15( 0,$K[0],$X, 3,$D,$E,$T,$A,$B,$C); | ||
293 | &BODY_00_15( 0,$K[0],$X, 4,$C,$D,$E,$T,$A,$B); | ||
294 | &BODY_00_15( 0,$K[0],$X, 5,$B,$C,$D,$E,$T,$A); | ||
295 | &BODY_00_15( 0,$K[0],$X, 6,$A,$B,$C,$D,$E,$T); | ||
296 | &BODY_00_15( 0,$K[0],$X, 7,$T,$A,$B,$C,$D,$E); | ||
297 | &BODY_00_15( 0,$K[0],$X, 8,$E,$T,$A,$B,$C,$D); | ||
298 | &BODY_00_15( 0,$K[0],$X, 9,$D,$E,$T,$A,$B,$C); | ||
299 | &BODY_00_15( 0,$K[0],$X,10,$C,$D,$E,$T,$A,$B); | ||
300 | &BODY_00_15( 0,$K[0],$X,11,$B,$C,$D,$E,$T,$A); | ||
301 | &BODY_00_15( 0,$K[0],$X,12,$A,$B,$C,$D,$E,$T); | ||
302 | &BODY_00_15( 0,$K[0],$X,13,$T,$A,$B,$C,$D,$E); | ||
303 | &BODY_00_15( 0,$K[0],$X,14,$E,$T,$A,$B,$C,$D); | ||
304 | &BODY_00_15( 1,$K[0],$X,15,$D,$E,$T,$A,$B,$C); | ||
305 | &BODY_16_19(-1,$K[0],$X,16,$C,$D,$E,$T,$A,$B); | ||
306 | &BODY_16_19( 0,$K[0],$X,17,$B,$C,$D,$E,$T,$A); | ||
307 | &BODY_16_19( 0,$K[0],$X,18,$A,$B,$C,$D,$E,$T); | ||
308 | &BODY_16_19( 1,$K[0],$X,19,$T,$A,$B,$C,$D,$E); | ||
309 | |||
310 | &BODY_20_39(-1,$K[1],$X,20,$E,$T,$A,$B,$C,$D); | ||
311 | &BODY_20_39( 0,$K[1],$X,21,$D,$E,$T,$A,$B,$C); | ||
312 | &BODY_20_39( 0,$K[1],$X,22,$C,$D,$E,$T,$A,$B); | ||
313 | &BODY_20_39( 0,$K[1],$X,23,$B,$C,$D,$E,$T,$A); | ||
314 | &BODY_20_39( 0,$K[1],$X,24,$A,$B,$C,$D,$E,$T); | ||
315 | &BODY_20_39( 0,$K[1],$X,25,$T,$A,$B,$C,$D,$E); | ||
316 | &BODY_20_39( 0,$K[1],$X,26,$E,$T,$A,$B,$C,$D); | ||
317 | &BODY_20_39( 0,$K[1],$X,27,$D,$E,$T,$A,$B,$C); | ||
318 | &BODY_20_39( 0,$K[1],$X,28,$C,$D,$E,$T,$A,$B); | ||
319 | &BODY_20_39( 0,$K[1],$X,29,$B,$C,$D,$E,$T,$A); | ||
320 | &BODY_20_39( 0,$K[1],$X,30,$A,$B,$C,$D,$E,$T); | ||
321 | &BODY_20_39( 0,$K[1],$X,31,$T,$A,$B,$C,$D,$E); | ||
322 | &BODY_20_39( 0,$K[1],$X,32,$E,$T,$A,$B,$C,$D); | ||
323 | &BODY_20_39( 0,$K[1],$X,33,$D,$E,$T,$A,$B,$C); | ||
324 | &BODY_20_39( 0,$K[1],$X,34,$C,$D,$E,$T,$A,$B); | ||
325 | &BODY_20_39( 0,$K[1],$X,35,$B,$C,$D,$E,$T,$A); | ||
326 | &BODY_20_39( 0,$K[1],$X,36,$A,$B,$C,$D,$E,$T); | ||
327 | &BODY_20_39( 0,$K[1],$X,37,$T,$A,$B,$C,$D,$E); | ||
328 | &BODY_20_39( 0,$K[1],$X,38,$E,$T,$A,$B,$C,$D); | ||
329 | &BODY_20_39( 1,$K[1],$X,39,$D,$E,$T,$A,$B,$C); | ||
330 | |||
331 | &BODY_40_59(-1,$K[2],$X,40,$C,$D,$E,$T,$A,$B); | ||
332 | &BODY_40_59( 0,$K[2],$X,41,$B,$C,$D,$E,$T,$A); | ||
333 | &BODY_40_59( 0,$K[2],$X,42,$A,$B,$C,$D,$E,$T); | ||
334 | &BODY_40_59( 0,$K[2],$X,43,$T,$A,$B,$C,$D,$E); | ||
335 | &BODY_40_59( 0,$K[2],$X,44,$E,$T,$A,$B,$C,$D); | ||
336 | &BODY_40_59( 0,$K[2],$X,45,$D,$E,$T,$A,$B,$C); | ||
337 | &BODY_40_59( 0,$K[2],$X,46,$C,$D,$E,$T,$A,$B); | ||
338 | &BODY_40_59( 0,$K[2],$X,47,$B,$C,$D,$E,$T,$A); | ||
339 | &BODY_40_59( 0,$K[2],$X,48,$A,$B,$C,$D,$E,$T); | ||
340 | &BODY_40_59( 0,$K[2],$X,49,$T,$A,$B,$C,$D,$E); | ||
341 | &BODY_40_59( 0,$K[2],$X,50,$E,$T,$A,$B,$C,$D); | ||
342 | &BODY_40_59( 0,$K[2],$X,51,$D,$E,$T,$A,$B,$C); | ||
343 | &BODY_40_59( 0,$K[2],$X,52,$C,$D,$E,$T,$A,$B); | ||
344 | &BODY_40_59( 0,$K[2],$X,53,$B,$C,$D,$E,$T,$A); | ||
345 | &BODY_40_59( 0,$K[2],$X,54,$A,$B,$C,$D,$E,$T); | ||
346 | &BODY_40_59( 0,$K[2],$X,55,$T,$A,$B,$C,$D,$E); | ||
347 | &BODY_40_59( 0,$K[2],$X,56,$E,$T,$A,$B,$C,$D); | ||
348 | &BODY_40_59( 0,$K[2],$X,57,$D,$E,$T,$A,$B,$C); | ||
349 | &BODY_40_59( 0,$K[2],$X,58,$C,$D,$E,$T,$A,$B); | ||
350 | &BODY_40_59( 1,$K[2],$X,59,$B,$C,$D,$E,$T,$A); | ||
351 | |||
352 | &BODY_60_79(-1,$K[3],$X,60,$A,$B,$C,$D,$E,$T); | ||
353 | &BODY_60_79( 0,$K[3],$X,61,$T,$A,$B,$C,$D,$E); | ||
354 | &BODY_60_79( 0,$K[3],$X,62,$E,$T,$A,$B,$C,$D); | ||
355 | &BODY_60_79( 0,$K[3],$X,63,$D,$E,$T,$A,$B,$C); | ||
356 | &BODY_60_79( 0,$K[3],$X,64,$C,$D,$E,$T,$A,$B); | ||
357 | &BODY_60_79( 0,$K[3],$X,65,$B,$C,$D,$E,$T,$A); | ||
358 | &BODY_60_79( 0,$K[3],$X,66,$A,$B,$C,$D,$E,$T); | ||
359 | &BODY_60_79( 0,$K[3],$X,67,$T,$A,$B,$C,$D,$E); | ||
360 | &BODY_60_79( 0,$K[3],$X,68,$E,$T,$A,$B,$C,$D); | ||
361 | &BODY_60_79( 0,$K[3],$X,69,$D,$E,$T,$A,$B,$C); | ||
362 | &BODY_60_79( 0,$K[3],$X,70,$C,$D,$E,$T,$A,$B); | ||
363 | &BODY_60_79( 0,$K[3],$X,71,$B,$C,$D,$E,$T,$A); | ||
364 | &BODY_60_79( 0,$K[3],$X,72,$A,$B,$C,$D,$E,$T); | ||
365 | &BODY_60_79( 0,$K[3],$X,73,$T,$A,$B,$C,$D,$E); | ||
366 | &BODY_60_79( 0,$K[3],$X,74,$E,$T,$A,$B,$C,$D); | ||
367 | &BODY_60_79( 0,$K[3],$X,75,$D,$E,$T,$A,$B,$C); | ||
368 | &BODY_60_79( 0,$K[3],$X,76,$C,$D,$E,$T,$A,$B); | ||
369 | &BODY_60_79( 0,$K[3],$X,77,$B,$C,$D,$E,$T,$A); | ||
370 | &BODY_60_79( 0,$K[3],$X,78,$A,$B,$C,$D,$E,$T); | ||
371 | &BODY_60_79( 2,$K[3],$X,79,$T,$A,$B,$C,$D,$E); | ||
372 | |||
373 | &comment("End processing"); | ||
374 | &comment(""); | ||
375 | # D is the tmp value | ||
376 | |||
377 | # E -> A | ||
378 | # T -> B | ||
379 | # A -> C | ||
380 | # B -> D | ||
381 | # C -> E | ||
382 | # D -> T | ||
383 | |||
384 | &mov($tmp1,&wparam(0)); | ||
385 | |||
386 | &mov($D, &DWP(12,$tmp1,"",0)); | ||
387 | &add($D,$B); | ||
388 | &mov($B, &DWP( 4,$tmp1,"",0)); | ||
389 | &add($B,$T); | ||
390 | &mov($T, $A); | ||
391 | &mov($A, &DWP( 0,$tmp1,"",0)); | ||
392 | &mov(&DWP(12,$tmp1,"",0),$D); | ||
393 | |||
394 | &add($A,$E); | ||
395 | &mov($E, &DWP(16,$tmp1,"",0)); | ||
396 | &add($E,$C); | ||
397 | &mov($C, &DWP( 8,$tmp1,"",0)); | ||
398 | &add($C,$T); | ||
399 | |||
400 | &mov(&DWP( 0,$tmp1,"",0),$A); | ||
401 | &mov("esi",&wparam(1)); | ||
402 | &mov(&DWP( 8,$tmp1,"",0),$C); | ||
403 | &add("esi",64); | ||
404 | &mov("eax",&swtmp(17)); | ||
405 | &mov(&DWP(16,$tmp1,"",0),$E); | ||
406 | &cmp("esi","eax"); | ||
407 | &mov(&DWP( 4,$tmp1,"",0),$B); | ||
408 | &jb(&label("start")); | ||
409 | |||
410 | &stack_pop(18+9); | ||
411 | &pop("edi"); | ||
412 | &pop("ebx"); | ||
413 | &pop("ebp"); | ||
414 | &pop("esi"); | ||
415 | &ret(); | ||
416 | |||
417 | # keep a note of shortcut label so it can be used outside | ||
418 | # block. | ||
419 | my $sclabel = &label("shortcut"); | ||
420 | |||
421 | &function_end_B($name); | ||
422 | # Putting this here avoids problems with MASM in debugging mode | ||
423 | &sha1_block_host("sha1_block_asm_host_order", $sclabel); | ||
424 | } | ||
218 | 425 | ||
219 | &asm_finish(); | ||