target/riscv/vcrypto_helper.c

36     uint64_t result = 0;
37     for (int j = 63; j >= 0; j--) {
47     uint64_t result = 0;
103     val = ((val & 0x5555555555555555ull) << 1) |
104           ((val & 0xAAAAAAAAAAAAAAAAull) >> 1);
105     val = ((val & 0x3333333333333333ull) << 2) |
106           ((val & 0xCCCCCCCCCCCCCCCCull) >> 2);
107     val = ((val & 0x0F0F0F0F0F0F0F0Full) << 4) |
108           ((val & 0xF0F0F0F0F0F0F0F0ull) >> 4);
207     if (vl % egs != 0 || vstart % egs != 0) {
229             round_key.d[0] = *((uint64_t *)vs2 + H8(i * 2 + 0));          \
232             round_state.d[0] = *((uint64_t *)vd + H8(i * 2 + 0));         \
235             *((uint64_t *)vd + H8(i * 2 + 0)) = round_state.d[0];         \
238         env->vstart = 0;                                                  \
255             round_key.d[0] = *((uint64_t *)vs2 + H8(0));                  \
258             round_state.d[0] = *((uint64_t *)vd + H8(i * 2 + 0));         \
261             *((uint64_t *)vd + H8(i * 2 + 0)) = round_state.d[0];         \
264         env->vstart = 0;                                                  \
314     uimm &= 0b1111;
315     if (uimm > 10 || uimm == 0) {
316         uimm ^= 0b1000;
322             0x00000001, 0x00000002, 0x00000004, 0x00000008, 0x00000010,
323             0x00000020, 0x00000040, 0x00000080, 0x0000001B, 0x00000036,
326         rk[0] = vs2[i * 4 + H4(0)];
332         rk[4] = rk[0] ^ (((uint32_t)AES_sbox[(tmp >> 24) & 0xff] << 24) |
333                          ((uint32_t)AES_sbox[(tmp >> 16) & 0xff] << 16) |
334                          ((uint32_t)AES_sbox[(tmp >> 8) & 0xff] << 8) |
335                          ((uint32_t)AES_sbox[(tmp >> 0) & 0xff] << 0))
341         vd[i * 4 + H4(0)] = rk[4];
346     env->vstart = 0;
362     uimm &= 0b1111;
364         uimm ^= 0b1000;
370             0x00000001, 0x00000002, 0x00000004, 0x00000008, 0x00000010,
371             0x00000020, 0x00000040, 0x00000080, 0x0000001B, 0x00000036,
374         rk[0] = vd[i * 4 + H4(0)];
378         rk[4] = vs2[i * 4 + H4(0)];
383         if (uimm % 2 == 0) {
385             rk[8] = rk[0] ^ (((uint32_t)AES_sbox[(tmp >> 24) & 0xff] << 24) |
386                              ((uint32_t)AES_sbox[(tmp >> 16) & 0xff] << 16) |
387                              ((uint32_t)AES_sbox[(tmp >> 8) & 0xff] << 8) |
388                              ((uint32_t)AES_sbox[(tmp >> 0) & 0xff] << 0))
391             rk[8] = rk[0] ^ (((uint32_t)AES_sbox[(rk[7] >> 24) & 0xff] << 24) |
392                              ((uint32_t)AES_sbox[(rk[7] >> 16) & 0xff] << 16) |
393                              ((uint32_t)AES_sbox[(rk[7] >> 8) & 0xff] << 8) |
394                              ((uint32_t)AES_sbox[(rk[7] >> 0) & 0xff] << 0));
400         vd[i * 4 + H4(0)] = rk[8];
405     env->vstart = 0;
433     res[0] = sig1_sha256(vs1[H4(2)]) + vs2[H4(1)] + sig0_sha256(vd[H4(1)]) +
434              vd[H4(0)];
438         sig1_sha256(res[0]) + vs2[H4(3)] + sig0_sha256(vd[H4(3)]) + vd[H4(2)];
440         sig1_sha256(res[1]) + vs1[H4(0)] + sig0_sha256(vs2[H4(0)]) + vd[H4(3)];
444     vd[H4(0)] = res[0];
450     res[0] = sig1_sha512(vs1[2]) + vs2[1] + sig0_sha512(vd[1]) + vd[0];
452     res[2] = sig1_sha512(res[0]) + vs2[3] + sig0_sha512(vd[3]) + vd[2];
453     res[3] = sig1_sha512(res[1]) + vs1[0] + sig0_sha512(vs2[0]) + vd[3];
457     vd[0] = res[0];
483     env->vstart = 0;
512     uint64_t a = vs2[3], b = vs2[2], e = vs2[1], f = vs2[0];
513     uint64_t c = vd[3], d = vd[2], g = vd[1], h = vd[0];
514     uint64_t W0 = vs1[0], W1 = vs1[1];
538     vd[0] = f;
546     uint32_t a = vs2[H4(3)], b = vs2[H4(2)], e = vs2[H4(1)], f = vs2[H4(0)];
547     uint32_t c = vd[H4(3)], d = vd[H4(2)], g = vd[H4(1)], h = vd[H4(0)];
548     uint32_t W0 = vs1[H4(0)], W1 = vs1[H4(1)];
572     vd[H4(0)] = f;
595     env->vstart = 0;
615     env->vstart = 0;
635     env->vstart = 0;
655     env->vstart = 0;
683         for (int j = 0; j < 8; j++) {
687         for (int j = 0; j < 8; j++) {
691         for (int j = 0; j < 8; j++) {
696     env->vstart = 0;
731     return (j <= 15) ? 0x79cc4519 : 0x7a879d8a;
744     x0 = vs2[0] ^ vs2[4];
747     ss1 = rol32(rol32(vs1[0], 12) + vs1[4] + rol32(t_j(j), j % 32), 7);
748     ss2 = ss1 ^ rol32(vs1[0], 12);
749     tt1 = ff_j(vs1[0], vs1[1], vs1[2], j) + vs1[3] + ss2 + x0;
750     tt2 = gg_j(vs1[4], vs1[5], vs1[6], j) + vs1[7] + ss1 + vs2[0];
753     vs1[1] = vs1[0];
765     vd[0] = tt1;
783         for (int k = 0; k < 8; k++) {
788         for (int k = 0; k < 8; k++) {
793     env->vstart = 0;
808         uint64_t Y[2] = {vd[i * 2 + 0], vd[i * 2 + 1]};
809         uint64_t H[2] = {brev8(vs2[i * 2 + 0]), brev8(vs2[i * 2 + 1])};
810         uint64_t X[2] = {vs1[i * 2 + 0], vs1[i * 2 + 1]};
811         uint64_t Z[2] = {0, 0};
813         uint64_t S[2] = {brev8(Y[0] ^ X[0]), brev8(Y[1] ^ X[1])};
815         for (int j = 0; j < 128; j++) {
817                 Z[0] ^= H[0];
821             H[1] = H[1] << 1 | H[0] >> 63;
822             H[0] = H[0] << 1;
824                 H[0] ^= 0x87;
828         vd[i * 2 + 0] = brev8(Z[0]);
833     env->vstart = 0;
847         uint64_t Y[2] = {brev8(vd[i * 2 + 0]), brev8(vd[i * 2 + 1])};
848         uint64_t H[2] = {brev8(vs2[i * 2 + 0]), brev8(vs2[i * 2 + 1])};
849         uint64_t Z[2] = {0, 0};
851         for (int j = 0; j < 128; j++) {
853                 Z[0] ^= H[0];
857             H[1] = H[1] << 1 | H[0] >> 63;
858             H[0] = H[0] << 1;
860                 H[0] ^= 0x87;
864         vd[i * 2 + 0] = brev8(Z[0]);
869     env->vstart = 0;
876     uint32_t rnd = uimm5 & 0x7;
887         uint32_t rk[4] = {0};
888         uint32_t tmp[8] = {0};
894         for (uint32_t j = 0; j < egs; ++j) {
898         for (uint32_t j = 0; j < egs; ++j) {
912     env->vstart = 0;
945         uint32_t rk[4] = {0};
946         uint32_t tmp[8] = {0};
963     env->vstart = 0;
981         uint32_t rk[4] = {0};
982         uint32_t tmp[8] = {0};
984         for (uint32_t j = 0; j < egs; ++j) {
999     env->vstart = 0;