first impression of BMW in assembler
This commit is contained in:
bg
parent
45ad29acaf
commit
3d99e4ba44
File diff suppressed because it is too large
Load Diff
|
|
@ -0,0 +1,239 @@
|
|||
/* bmw_small.c */
|
||||
/*
|
||||
This file is part of the AVR-Crypto-Lib.
|
||||
Copyright (C) 2009 Daniel Otte (daniel.otte@rub.de)
|
||||
|
||||
This program is free software: you can redistribute it and/or modify
|
||||
it under the terms of the GNU General Public License as published by
|
||||
the Free Software Foundation, either version 3 of the License, or
|
||||
(at your option) any later version.
|
||||
|
||||
This program is distributed in the hope that it will be useful,
|
||||
but WITHOUT ANY WARRANTY; without even the implied warranty of
|
||||
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
||||
GNU General Public License for more details.
|
||||
|
||||
You should have received a copy of the GNU General Public License
|
||||
along with this program. If not, see <http://www.gnu.org/licenses/>.
|
||||
*/
|
||||
/*
|
||||
* \file bmw_small.c
|
||||
* \author Daniel Otte
|
||||
* \email daniel.otte@rub.de
|
||||
* \date 2009-04-27
|
||||
* \license GPLv3 or later
|
||||
*
|
||||
*/
|
||||
|
||||
#include <stdint.h>
|
||||
#include <string.h>
|
||||
#include <avr/pgmspace.h>
|
||||
#include "bmw_small.h"
|
||||
|
||||
|
||||
#define SHL32(a,n) ((a)<<(n))
|
||||
#define SHR32(a,n) ((a)>>(n))
|
||||
#define ROTL32(a,n) (((a)<<(n))|((a)>>(32-(n))))
|
||||
#define ROTR32(a,n) (((a)>>(n))|((a)<<(32-(n))))
|
||||
|
||||
#define DEBUG 0
|
||||
|
||||
|
||||
#if DEBUG
|
||||
#include "cli.h"
|
||||
|
||||
void ctx_dump(const bmw_small_ctx_t* ctx){
|
||||
uint8_t i;
|
||||
cli_putstr_P(PSTR("\r\n==== ctx dump ===="));
|
||||
for(i=0; i<16;++i){
|
||||
cli_putstr_P(PSTR("\r\n h["));
|
||||
cli_hexdump(&i, 1);
|
||||
cli_putstr_P(PSTR("] = "));
|
||||
cli_hexdump_rev(&(ctx->h[i]), 4);
|
||||
}
|
||||
cli_putstr_P(PSTR("\r\n counter = "));
|
||||
cli_hexdump(&(ctx->counter), 4);
|
||||
}
|
||||
|
||||
void dump_x(const uint32_t* q, uint8_t elements, char x){
|
||||
uint8_t i;
|
||||
cli_putstr_P(PSTR("\r\n==== "));
|
||||
cli_putc(x);
|
||||
cli_putstr_P(PSTR(" dump ===="));
|
||||
for(i=0; i<elements;++i){
|
||||
cli_putstr_P(PSTR("\r\n "));
|
||||
cli_putc(x);
|
||||
cli_putstr_P(PSTR("["));
|
||||
cli_hexdump(&i, 1);
|
||||
cli_putstr_P(PSTR("] = "));
|
||||
cli_hexdump_rev(&(q[i]), 4);
|
||||
}
|
||||
}
|
||||
#else
|
||||
#define ctx_dump(x)
|
||||
#define dump_x(a,b,c)
|
||||
#endif
|
||||
|
||||
void bmw_small_f1(uint32_t* q, const void* m, const void* h);
|
||||
void bmw_small_f0(uint32_t* h, const void* m, uint32_t* q);
|
||||
void bmw_small_f2(uint32_t* h, uint32_t* q, const void* m);
|
||||
|
||||
/*
|
||||
static
|
||||
void bmw_small_f2(uint32_t* h, const uint32_t* q, const void* m){
|
||||
uint32_t xl=0, xh;
|
||||
uint8_t i;
|
||||
for(i=16;i<24;++i){
|
||||
xl ^= q[i];
|
||||
}
|
||||
xh = xl;
|
||||
for(i=24;i<32;++i){
|
||||
xh ^= q[i];
|
||||
}
|
||||
#if DEBUG
|
||||
cli_putstr_P(PSTR("\r\n XL = "));
|
||||
cli_hexdump_rev(&xl, 4);
|
||||
cli_putstr_P(PSTR("\r\n XH = "));
|
||||
cli_hexdump_rev(&xh, 4);
|
||||
#endif
|
||||
memcpy(h, m, 16*4);
|
||||
h[0] ^= SHL32(xh, 5) ^ SHR32(q[16], 5);
|
||||
h[5] ^= SHL32(xh, 6) ^ SHR32(q[21], 6);
|
||||
h[3] ^= SHR32(xh, 1) ^ SHL32(q[19], 5);
|
||||
h[4] ^= SHR32(xh, 3) ^ q[20];
|
||||
h[6] ^= SHR32(xh, 4) ^ SHL32(q[22], 6);
|
||||
h[2] ^= SHR32(xh, 5) ^ SHL32(q[18], 5);
|
||||
h[1] ^= SHR32(xh, 7) ^ SHL32(q[17], 8);
|
||||
h[7] ^= SHR32(xh,11) ^ SHL32(q[23], 2);
|
||||
for(i=0; i<8; ++i){
|
||||
h[i] += xl ^ q[24+i] ^ q[i];
|
||||
}
|
||||
for(i=0; i<8; ++i){
|
||||
h[8+i] ^= xh ^ q[24+i];
|
||||
h[8+i] += ROTL32(h[(4+i)%8],i+9);
|
||||
}
|
||||
h[11] += SHL32(xl, 4) ^ q[18] ^ q[11];
|
||||
h[10] += SHL32(xl, 6) ^ q[17] ^ q[10];
|
||||
h[ 8] += SHL32(xl, 8) ^ q[23] ^ q[ 8];
|
||||
h[15] += SHR32(xl, 2) ^ q[22] ^ q[15];
|
||||
h[12] += SHR32(xl, 3) ^ q[19] ^ q[12];
|
||||
h[13] += SHR32(xl, 4) ^ q[20] ^ q[13];
|
||||
h[ 9] += SHR32(xl, 6) ^ q[16] ^ q[ 9];
|
||||
h[14] += SHR32(xl, 7) ^ q[21] ^ q[14];
|
||||
}
|
||||
*/
|
||||
void bmw_small_nextBlock(bmw_small_ctx_t* ctx, const void* block){
|
||||
uint32_t q[32];
|
||||
dump_x(block, 16, 'M');
|
||||
bmw_small_f0(ctx->h, block, q);
|
||||
dump_x(q, 16, 'Q');
|
||||
bmw_small_f1(q, block, ctx->h);
|
||||
dump_x(q, 32, 'Q');
|
||||
bmw_small_f2(ctx->h, q, block);
|
||||
ctx->counter += 1;
|
||||
ctx_dump(ctx);
|
||||
}
|
||||
|
||||
void bmw_small_lastBlock(bmw_small_ctx_t* ctx, const void* block, uint16_t length_b){
|
||||
uint8_t buffer[64];
|
||||
while(length_b >= BMW_SMALL_BLOCKSIZE){
|
||||
bmw_small_nextBlock(ctx, block);
|
||||
length_b -= BMW_SMALL_BLOCKSIZE;
|
||||
block = (uint8_t*)block + BMW_SMALL_BLOCKSIZE_B;
|
||||
}
|
||||
memset(buffer, 0, 64);
|
||||
memcpy(buffer, block, (length_b+7)/8);
|
||||
buffer[length_b>>3] |= 0x80 >> (length_b&0x07);
|
||||
if(length_b+1>64*8-64){
|
||||
bmw_small_nextBlock(ctx, buffer);
|
||||
memset(buffer, 0, 64-8);
|
||||
ctx->counter -= 1;
|
||||
}
|
||||
*((uint64_t*)&(buffer[64-8])) = (uint64_t)(ctx->counter*512LL)+(uint64_t)length_b;
|
||||
bmw_small_nextBlock(ctx, buffer);
|
||||
uint8_t i;
|
||||
uint32_t q[32];
|
||||
memset(buffer, 0xaa, 64);
|
||||
for(i=0; i<16;++i){
|
||||
buffer[i*4] = i+0xa0;
|
||||
}
|
||||
// dump_x(buffer, 16, 'A');
|
||||
dump_x(ctx->h, 16, 'M');
|
||||
bmw_small_f0((uint32_t*)buffer, ctx->h, q);
|
||||
dump_x(buffer, 16, 'a');
|
||||
dump_x(q, 16, 'Q');
|
||||
bmw_small_f1(q, ctx->h, (uint32_t*)buffer);
|
||||
dump_x(q, 32, 'Q');
|
||||
bmw_small_f2((uint32_t*)buffer, q, ctx->h);
|
||||
memcpy(ctx->h, buffer, 64);
|
||||
}
|
||||
|
||||
void bmw224_init(bmw224_ctx_t* ctx){
|
||||
uint8_t i;
|
||||
ctx->h[0] = 0x00010203;
|
||||
for(i=1; i<16; ++i){
|
||||
ctx->h[i] = ctx->h[i-1]+ 0x04040404;
|
||||
}
|
||||
ctx->counter=0;
|
||||
// ctx_dump(ctx);
|
||||
}
|
||||
|
||||
void bmw256_init(bmw256_ctx_t* ctx){
|
||||
uint8_t i;
|
||||
ctx->h[0] = 0x40414243;
|
||||
for(i=1; i<16; ++i){
|
||||
ctx->h[i] = ctx->h[i-1]+ 0x04040404;
|
||||
}
|
||||
ctx->counter=0;
|
||||
// ctx_dump(ctx);
|
||||
}
|
||||
|
||||
void bmw224_nextBlock(bmw224_ctx_t* ctx, const void* block){
|
||||
bmw_small_nextBlock(ctx, block);
|
||||
}
|
||||
|
||||
void bmw256_nextBlock(bmw256_ctx_t* ctx, const void* block){
|
||||
bmw_small_nextBlock(ctx, block);
|
||||
}
|
||||
|
||||
void bmw224_lastBlock(bmw224_ctx_t* ctx, const void* block, uint16_t length_b){
|
||||
bmw_small_lastBlock(ctx, block, length_b);
|
||||
}
|
||||
|
||||
void bmw256_lastBlock(bmw256_ctx_t* ctx, const void* block, uint16_t length_b){
|
||||
bmw_small_lastBlock(ctx, block, length_b);
|
||||
}
|
||||
|
||||
void bmw224_ctx2hash(void* dest, const bmw224_ctx_t* ctx){
|
||||
memcpy(dest, &(ctx->h[9]), 224/8);
|
||||
}
|
||||
|
||||
void bmw256_ctx2hash(void* dest, const bmw256_ctx_t* ctx){
|
||||
memcpy(dest, &(ctx->h[8]), 256/8);
|
||||
}
|
||||
|
||||
void bmw224(void* dest, const void* msg, uint32_t length_b){
|
||||
bmw_small_ctx_t ctx;
|
||||
bmw224_init(&ctx);
|
||||
while(length_b>=BMW_SMALL_BLOCKSIZE){
|
||||
bmw_small_nextBlock(&ctx, msg);
|
||||
length_b -= BMW_SMALL_BLOCKSIZE;
|
||||
msg = (uint8_t*)msg + BMW_SMALL_BLOCKSIZE_B;
|
||||
}
|
||||
bmw_small_lastBlock(&ctx, msg, length_b);
|
||||
bmw224_ctx2hash(dest, &ctx);
|
||||
}
|
||||
|
||||
void bmw256(void* dest, const void* msg, uint32_t length_b){
|
||||
bmw_small_ctx_t ctx;
|
||||
bmw256_init(&ctx);
|
||||
while(length_b>=BMW_SMALL_BLOCKSIZE){
|
||||
bmw_small_nextBlock(&ctx, msg);
|
||||
length_b -= BMW_SMALL_BLOCKSIZE;
|
||||
msg = (uint8_t*)msg + BMW_SMALL_BLOCKSIZE_B;
|
||||
}
|
||||
bmw_small_lastBlock(&ctx, msg, length_b);
|
||||
bmw256_ctx2hash(dest, &ctx);
|
||||
}
|
||||
|
||||
|
||||
|
|
@ -28,6 +28,7 @@
|
|||
#include <stdint.h>
|
||||
#include <string.h>
|
||||
#include <avr/pgmspace.h>
|
||||
#include "memxor.h"
|
||||
#include "bmw_small.h"
|
||||
|
||||
|
||||
|
|
@ -430,7 +431,7 @@ void bmw_small_f1(uint32_t* q, const void* m, const void* h){
|
|||
}
|
||||
|
||||
static
|
||||
void bmw_small_f2(uint32_t* h, const uint32_t* q, const void* m){
|
||||
void bmw_small_f2(uint32_t* h, uint32_t* q, const void* m){
|
||||
uint32_t xl=0, xh;
|
||||
uint8_t i;
|
||||
for(i=16;i<24;++i){
|
||||
|
|
@ -462,6 +463,7 @@ void bmw_small_f2(uint32_t* h, const uint32_t* q, const void* m){
|
|||
h[8+i] ^= xh ^ q[24+i];
|
||||
h[8+i] += ROTL32(h[(4+i)%8],i+9);
|
||||
}
|
||||
/*
|
||||
h[ 8] += SHL32(xl, 8) ^ q[23] ^ q[ 8];
|
||||
h[ 9] += SHR32(xl, 6) ^ q[16] ^ q[ 9];
|
||||
h[10] += SHL32(xl, 6) ^ q[17] ^ q[10];
|
||||
|
|
@ -470,6 +472,18 @@ void bmw_small_f2(uint32_t* h, const uint32_t* q, const void* m){
|
|||
h[13] += SHR32(xl, 4) ^ q[20] ^ q[13];
|
||||
h[14] += SHR32(xl, 7) ^ q[21] ^ q[14];
|
||||
h[15] += SHR32(xl, 2) ^ q[22] ^ q[15];
|
||||
*/
|
||||
memxor(q+9, q+16, 7*4);
|
||||
q[8] ^= q[23];
|
||||
h[ 8] += SHL32(xl, 8) ^ q[ 8];
|
||||
h[ 9] += SHR32(xl, 6) ^ q[ 9];
|
||||
h[10] += SHL32(xl, 6) ^ q[10];
|
||||
h[11] += SHL32(xl, 4) ^ q[11];
|
||||
h[12] += SHR32(xl, 3) ^ q[12];
|
||||
h[13] += SHR32(xl, 4) ^ q[13];
|
||||
h[14] += SHR32(xl, 7) ^ q[14];
|
||||
h[15] += SHR32(xl, 2) ^ q[15];
|
||||
|
||||
}
|
||||
|
||||
void bmw_small_nextBlock(bmw_small_ctx_t* ctx, const void* block){
|
||||
|
|
|
|||
|
|
@ -0,0 +1,66 @@
|
|||
/* memxor.S */
|
||||
/*
|
||||
This file is part of the AVR-Crypto-Lib.
|
||||
Copyright (C) 2008 Daniel Otte (daniel.otte@rub.de)
|
||||
|
||||
This program is free software: you can redistribute it and/or modify
|
||||
it under the terms of the GNU General Public License as published by
|
||||
the Free Software Foundation, either version 3 of the License, or
|
||||
(at your option) any later version.
|
||||
|
||||
This program is distributed in the hope that it will be useful,
|
||||
but WITHOUT ANY WARRANTY; without even the implied warranty of
|
||||
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
||||
GNU General Public License for more details.
|
||||
|
||||
You should have received a copy of the GNU General Public License
|
||||
along with this program. If not, see <http://www.gnu.org/licenses/>.
|
||||
*/
|
||||
|
||||
/*
|
||||
* File: memxor.S
|
||||
* Author: Daniel Otte
|
||||
* Date: 2008-08-07
|
||||
* License: GPLv3 or later
|
||||
* Description: memxor, XORing one block into another
|
||||
*
|
||||
*/
|
||||
|
||||
/*
|
||||
* void memxor(void* dest, const void* src, uint16_t n);
|
||||
*/
|
||||
/*
|
||||
* param dest is passed in r24:r25
|
||||
* param src is passed in r22:r23
|
||||
* param n is passed in r20:r21
|
||||
*/
|
||||
.global memxor
|
||||
memxor:
|
||||
movw r30, r24
|
||||
movw r26, r22
|
||||
movw r24, r20
|
||||
adiw r24, 0
|
||||
breq 2f
|
||||
1:
|
||||
ld r20, X+
|
||||
ld r21, Z
|
||||
eor r20, r21
|
||||
st Z+, r20
|
||||
sbiw r24, 1
|
||||
brne 1b
|
||||
2:
|
||||
ret
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
|
@ -0,0 +1,7 @@
|
|||
#ifndef MEMXOR_H_
|
||||
#define MEMXOR_H_
|
||||
#include <stdint.h>
|
||||
|
||||
void memxor(void* dest, const void* src, uint16_t n);
|
||||
|
||||
#endif
|
||||
|
|
@ -0,0 +1,12 @@
|
|||
# Makefile for BlueMidnightWish
|
||||
ALGO_NAME := BMW
|
||||
|
||||
# comment out the following line for removement of BlueMidnightWish from the build process
|
||||
HASHES += $(ALGO_NAME)
|
||||
|
||||
$(ALGO_NAME)_DIR := bmw/
|
||||
$(ALGO_NAME)_OBJ := bmw_small-asm.o bmw_small-cstub.o bmw_large.o
|
||||
$(ALGO_NAME)_TEST_BIN := main-bmw-test.o hfal_bmw_small.o hfal_bmw_large.o $(CLI_STD) $(HFAL_STD)
|
||||
$(ALGO_NAME)_NESSIE_TEST := test nessie
|
||||
$(ALGO_NAME)_PERFORMANCE_TEST := performance
|
||||
|
||||
|
|
@ -5,7 +5,7 @@ ALGO_NAME := BMW_C
|
|||
HASHES += $(ALGO_NAME)
|
||||
|
||||
$(ALGO_NAME)_DIR := bmw/
|
||||
$(ALGO_NAME)_OBJ := bmw_small.o bmw_large.o
|
||||
$(ALGO_NAME)_OBJ := bmw_small.o bmw_large.o memxor.o
|
||||
$(ALGO_NAME)_TEST_BIN := main-bmw-test.o hfal_bmw_small.o hfal_bmw_large.o $(CLI_STD) $(HFAL_STD)
|
||||
$(ALGO_NAME)_NESSIE_TEST := test nessie
|
||||
$(ALGO_NAME)_PERFORMANCE_TEST := performance
|
||||
|
|
|
|||
Loading…
Reference in New Issue