aws-crt 0.1.9 → 0.2.0

Sign up to get free protection for your applications and to get access to all the features.
Files changed (581) hide show
  1. checksums.yaml +4 -4
  2. data/CHANGELOG.md +5 -0
  3. data/VERSION +1 -1
  4. data/aws-crt-ffi/crt/aws-c-auth/include/aws/auth/auth.h +1 -0
  5. data/aws-crt-ffi/crt/aws-c-auth/include/aws/auth/aws_imds_client.h +5 -0
  6. data/aws-crt-ffi/crt/aws-c-auth/include/aws/auth/credentials.h +5 -0
  7. data/aws-crt-ffi/crt/aws-c-auth/include/aws/auth/private/aws_signing.h +1 -0
  8. data/aws-crt-ffi/crt/aws-c-auth/include/aws/auth/private/credentials_utils.h +2 -0
  9. data/aws-crt-ffi/crt/aws-c-auth/include/aws/auth/signing_config.h +1 -0
  10. data/aws-crt-ffi/crt/aws-c-auth/source/auth.c +3 -1
  11. data/aws-crt-ffi/crt/aws-c-auth/source/aws_imds_client.c +146 -63
  12. data/aws-crt-ffi/crt/aws-c-auth/source/aws_signing.c +41 -19
  13. data/aws-crt-ffi/crt/aws-c-auth/source/credentials_provider_imds.c +1 -0
  14. data/aws-crt-ffi/crt/aws-c-auth/source/credentials_utils.c +1 -0
  15. data/aws-crt-ffi/crt/aws-c-auth/source/signable_http_request.c +2 -1
  16. data/aws-crt-ffi/crt/aws-c-auth/source/signing_config.c +25 -0
  17. data/aws-crt-ffi/crt/aws-c-auth/tests/CMakeLists.txt +3 -0
  18. data/aws-crt-ffi/crt/aws-c-auth/tests/aws_imds_client_test.c +197 -31
  19. data/aws-crt-ffi/crt/aws-c-auth/tests/credentials_provider_imds_tests.c +16 -18
  20. data/aws-crt-ffi/crt/aws-c-auth/tests/sigv4_signing_tests.c +3 -1
  21. data/aws-crt-ffi/crt/aws-c-cal/include/aws/cal/private/opensslcrypto_common.h +22 -0
  22. data/aws-crt-ffi/crt/aws-c-cal/source/darwin/commoncrypto_aes.c +46 -17
  23. data/aws-crt-ffi/crt/aws-c-cal/source/unix/openssl_aes.c +1 -0
  24. data/aws-crt-ffi/crt/aws-c-cal/source/unix/openssl_platform_init.c +7 -0
  25. data/aws-crt-ffi/crt/aws-c-cal/source/unix/openssl_rsa.c +59 -2
  26. data/aws-crt-ffi/crt/aws-c-cal/source/unix/opensslcrypto_ecc.c +1 -0
  27. data/aws-crt-ffi/crt/aws-c-common/CMakeLists.txt +13 -1
  28. data/aws-crt-ffi/crt/aws-c-common/THIRD-PARTY-LICENSES.txt +28 -7
  29. data/aws-crt-ffi/crt/aws-c-common/bin/system_info/CMakeLists.txt +18 -0
  30. data/aws-crt-ffi/crt/aws-c-common/bin/system_info/print_system_info.c +48 -0
  31. data/aws-crt-ffi/crt/aws-c-common/include/aws/common/allocator.h +23 -0
  32. data/aws-crt-ffi/crt/aws-c-common/include/aws/common/byte_buf.h +12 -0
  33. data/aws-crt-ffi/crt/aws-c-common/include/aws/common/cross_process_lock.h +35 -0
  34. data/aws-crt-ffi/crt/aws-c-common/include/aws/common/hash_table.h +1 -0
  35. data/aws-crt-ffi/crt/aws-c-common/include/aws/common/priority_queue.h +24 -0
  36. data/aws-crt-ffi/crt/aws-c-common/include/aws/common/private/system_info_priv.h +37 -0
  37. data/aws-crt-ffi/crt/aws-c-common/include/aws/common/system_info.h +47 -0
  38. data/aws-crt-ffi/crt/aws-c-common/include/aws/common/system_resource_util.h +30 -0
  39. data/aws-crt-ffi/crt/aws-c-common/include/aws/testing/aws_test_harness.h +3 -2
  40. data/aws-crt-ffi/crt/aws-c-common/source/allocator.c +64 -13
  41. data/aws-crt-ffi/crt/aws-c-common/source/android/logging.c +14 -0
  42. data/aws-crt-ffi/crt/aws-c-common/source/common.c +3 -3
  43. data/aws-crt-ffi/crt/aws-c-common/source/file.c +96 -35
  44. data/aws-crt-ffi/crt/aws-c-common/source/linux/system_info.c +24 -0
  45. data/aws-crt-ffi/crt/aws-c-common/source/memtrace.c +10 -3
  46. data/aws-crt-ffi/crt/aws-c-common/source/platform_fallback_stubs/system_info.c +21 -0
  47. data/aws-crt-ffi/crt/aws-c-common/source/posix/cross_process_lock.c +141 -0
  48. data/aws-crt-ffi/crt/aws-c-common/source/posix/system_info.c +1 -1
  49. data/aws-crt-ffi/crt/aws-c-common/source/posix/system_resource_utils.c +32 -0
  50. data/aws-crt-ffi/crt/aws-c-common/source/priority_queue.c +24 -0
  51. data/aws-crt-ffi/crt/aws-c-common/source/system_info.c +80 -0
  52. data/aws-crt-ffi/crt/aws-c-common/source/task_scheduler.c +2 -2
  53. data/aws-crt-ffi/crt/aws-c-common/source/windows/cross_process_lock.c +93 -0
  54. data/aws-crt-ffi/crt/aws-c-common/source/windows/system_resource_utils.c +31 -0
  55. data/aws-crt-ffi/crt/aws-c-common/tests/CMakeLists.txt +16 -0
  56. data/aws-crt-ffi/crt/aws-c-common/tests/alloc_test.c +83 -22
  57. data/aws-crt-ffi/crt/aws-c-common/tests/cross_process_lock_tests.c +116 -0
  58. data/aws-crt-ffi/crt/aws-c-common/tests/file_test.c +103 -0
  59. data/aws-crt-ffi/crt/aws-c-common/tests/priority_queue_test.c +36 -0
  60. data/aws-crt-ffi/crt/aws-c-common/tests/system_info_tests.c +19 -0
  61. data/aws-crt-ffi/crt/aws-c-common/tests/system_resource_util_test.c +37 -0
  62. data/aws-crt-ffi/crt/aws-c-http/include/aws/http/connection.h +9 -0
  63. data/aws-crt-ffi/crt/aws-c-http/include/aws/http/http.h +1 -0
  64. data/aws-crt-ffi/crt/aws-c-http/include/aws/http/private/connection_impl.h +5 -4
  65. data/aws-crt-ffi/crt/aws-c-http/include/aws/http/private/connection_manager_system_vtable.h +10 -18
  66. data/aws-crt-ffi/crt/aws-c-http/include/aws/http/private/proxy_impl.h +5 -1
  67. data/aws-crt-ffi/crt/aws-c-http/include/aws/http/private/request_response_impl.h +5 -0
  68. data/aws-crt-ffi/crt/aws-c-http/include/aws/http/request_response.h +10 -0
  69. data/aws-crt-ffi/crt/aws-c-http/source/connection.c +5 -2
  70. data/aws-crt-ffi/crt/aws-c-http/source/connection_manager.c +22 -21
  71. data/aws-crt-ffi/crt/aws-c-http/source/h1_connection.c +102 -17
  72. data/aws-crt-ffi/crt/aws-c-http/source/h1_stream.c +1 -0
  73. data/aws-crt-ffi/crt/aws-c-http/source/http.c +3 -0
  74. data/aws-crt-ffi/crt/aws-c-http/source/proxy_connection.c +2 -2
  75. data/aws-crt-ffi/crt/aws-c-http/tests/CMakeLists.txt +2 -0
  76. data/aws-crt-ffi/crt/aws-c-http/tests/test_connection_manager.c +18 -18
  77. data/aws-crt-ffi/crt/aws-c-http/tests/test_h1_client.c +111 -1
  78. data/aws-crt-ffi/crt/aws-c-http/tests/test_proxy.c +2 -2
  79. data/aws-crt-ffi/crt/aws-c-http/tests/test_stream_manager.c +2 -2
  80. data/aws-crt-ffi/crt/aws-c-io/include/aws/io/retry_strategy.h +1 -1
  81. data/aws-crt-ffi/crt/aws-c-io/source/exponential_backoff_retry_strategy.c +1 -1
  82. data/aws-crt-ffi/crt/aws-c-io/source/pkcs11_tls_op_handler.c +2 -4
  83. data/aws-crt-ffi/crt/aws-lc/CMakeLists.txt +16 -8
  84. data/aws-crt-ffi/crt/aws-lc/cmake/go.cmake +6 -0
  85. data/aws-crt-ffi/crt/aws-lc/crypto/CMakeLists.txt +6 -9
  86. data/aws-crt-ffi/crt/aws-lc/crypto/asn1/a_time.c +34 -1
  87. data/aws-crt-ffi/crt/aws-lc/crypto/asn1/a_utctm.c +4 -1
  88. data/aws-crt-ffi/crt/aws-lc/crypto/asn1/asn1_test.cc +41 -0
  89. data/aws-crt-ffi/crt/aws-lc/crypto/bio/bio_mem.c +6 -7
  90. data/aws-crt-ffi/crt/aws-lc/crypto/bio/bio_test.cc +152 -16
  91. data/aws-crt-ffi/crt/aws-lc/crypto/bio/connect.c +6 -12
  92. data/aws-crt-ffi/crt/aws-lc/crypto/bio/fd.c +2 -2
  93. data/aws-crt-ffi/crt/aws-lc/crypto/bio/file.c +20 -8
  94. data/aws-crt-ffi/crt/aws-lc/crypto/bio/socket.c +2 -2
  95. data/aws-crt-ffi/crt/aws-lc/crypto/bio/socket_helper.c +2 -2
  96. data/aws-crt-ffi/crt/aws-lc/crypto/blake2/blake2.c +11 -1
  97. data/aws-crt-ffi/crt/aws-lc/crypto/bytestring/cbb.c +13 -3
  98. data/aws-crt-ffi/crt/aws-lc/crypto/bytestring/cbs.c +9 -0
  99. data/aws-crt-ffi/crt/aws-lc/crypto/chacha/asm/chacha-armv8.pl +1 -1
  100. data/aws-crt-ffi/crt/aws-lc/crypto/chacha/chacha.c +49 -8
  101. data/aws-crt-ffi/crt/aws-lc/crypto/chacha/chacha_test.cc +110 -0
  102. data/aws-crt-ffi/crt/aws-lc/crypto/chacha/internal.h +8 -1
  103. data/aws-crt-ffi/crt/aws-lc/crypto/compiler_test.cc +4 -1
  104. data/aws-crt-ffi/crt/aws-lc/crypto/conf/conf_test.cc +1 -0
  105. data/aws-crt-ffi/crt/aws-lc/crypto/crypto_test.cc +9 -0
  106. data/aws-crt-ffi/crt/aws-lc/crypto/curve25519/curve25519.c +189 -108
  107. data/aws-crt-ffi/crt/aws-lc/crypto/curve25519/curve25519_nohw.c +78 -6
  108. data/aws-crt-ffi/crt/aws-lc/crypto/curve25519/ed25519_test.cc +9 -0
  109. data/aws-crt-ffi/crt/aws-lc/crypto/curve25519/internal.h +24 -10
  110. data/aws-crt-ffi/crt/aws-lc/crypto/curve25519/spake25519.c +4 -4
  111. data/aws-crt-ffi/crt/aws-lc/crypto/curve25519/x25519_test.cc +80 -11
  112. data/aws-crt-ffi/crt/aws-lc/crypto/decrepit/evp/evp_do_all.c +2 -0
  113. data/aws-crt-ffi/crt/aws-lc/crypto/digest_extra/digest_extra.c +8 -0
  114. data/aws-crt-ffi/crt/aws-lc/crypto/digest_extra/digest_test.cc +110 -45
  115. data/aws-crt-ffi/crt/aws-lc/crypto/dsa/dsa_test.cc +8 -2
  116. data/aws-crt-ffi/crt/aws-lc/crypto/dsa/internal.h +18 -0
  117. data/aws-crt-ffi/crt/aws-lc/crypto/dynamic_loading_test.c +8 -5
  118. data/aws-crt-ffi/crt/aws-lc/crypto/ec_extra/ec_derive.c +4 -3
  119. data/aws-crt-ffi/crt/aws-lc/crypto/ec_extra/hash_to_curve.c +6 -18
  120. data/aws-crt-ffi/crt/aws-lc/crypto/endian_test.cc +308 -0
  121. data/aws-crt-ffi/crt/aws-lc/crypto/err/ssl.errordata +2 -0
  122. data/aws-crt-ffi/crt/aws-lc/crypto/evp_extra/evp_extra_test.cc +2 -0
  123. data/aws-crt-ffi/crt/aws-lc/crypto/evp_extra/evp_test.cc +11 -1
  124. data/aws-crt-ffi/crt/aws-lc/crypto/evp_extra/evp_tests.txt +25 -0
  125. data/aws-crt-ffi/crt/aws-lc/crypto/evp_extra/p_ec_asn1.c +1 -1
  126. data/aws-crt-ffi/crt/aws-lc/crypto/evp_extra/p_kem.c +2 -2
  127. data/aws-crt-ffi/crt/aws-lc/crypto/evp_extra/p_rsa_asn1.c +1 -0
  128. data/aws-crt-ffi/crt/aws-lc/crypto/evp_extra/print.c +7 -6
  129. data/aws-crt-ffi/crt/aws-lc/crypto/evp_extra/scrypt.c +13 -1
  130. data/aws-crt-ffi/crt/aws-lc/crypto/fipsmodule/CMakeLists.txt +13 -4
  131. data/aws-crt-ffi/crt/aws-lc/crypto/fipsmodule/aes/aes_nohw.c +18 -6
  132. data/aws-crt-ffi/crt/aws-lc/crypto/fipsmodule/bcm.c +12 -4
  133. data/aws-crt-ffi/crt/aws-lc/crypto/fipsmodule/bn/bn_assert_test.cc +77 -0
  134. data/aws-crt-ffi/crt/aws-lc/crypto/fipsmodule/bn/bn_test.cc +30 -0
  135. data/aws-crt-ffi/crt/aws-lc/crypto/fipsmodule/bn/bytes.c +112 -22
  136. data/aws-crt-ffi/crt/aws-lc/crypto/fipsmodule/bn/div.c +12 -5
  137. data/aws-crt-ffi/crt/aws-lc/crypto/fipsmodule/bn/exponentiation.c +54 -1
  138. data/aws-crt-ffi/crt/aws-lc/crypto/fipsmodule/bn/gcd.c +5 -6
  139. data/aws-crt-ffi/crt/aws-lc/crypto/fipsmodule/bn/internal.h +37 -15
  140. data/aws-crt-ffi/crt/aws-lc/crypto/fipsmodule/bn/montgomery.c +4 -11
  141. data/aws-crt-ffi/crt/aws-lc/crypto/fipsmodule/bn/montgomery_inv.c +51 -15
  142. data/aws-crt-ffi/crt/aws-lc/crypto/fipsmodule/cipher/aead.c +2 -2
  143. data/aws-crt-ffi/crt/aws-lc/crypto/fipsmodule/digest/digest.c +29 -6
  144. data/aws-crt-ffi/crt/aws-lc/crypto/fipsmodule/digest/digests.c +89 -0
  145. data/aws-crt-ffi/crt/aws-lc/crypto/fipsmodule/digest/internal.h +4 -0
  146. data/aws-crt-ffi/crt/aws-lc/crypto/fipsmodule/ec/ec.c +19 -36
  147. data/aws-crt-ffi/crt/aws-lc/crypto/fipsmodule/ec/ec_key.c +3 -3
  148. data/aws-crt-ffi/crt/aws-lc/crypto/fipsmodule/ec/ec_montgomery.c +9 -7
  149. data/aws-crt-ffi/crt/aws-lc/crypto/fipsmodule/ec/ec_test.cc +33 -9
  150. data/aws-crt-ffi/crt/aws-lc/crypto/fipsmodule/ec/internal.h +17 -12
  151. data/aws-crt-ffi/crt/aws-lc/crypto/fipsmodule/ec/p224-64.c +5 -8
  152. data/aws-crt-ffi/crt/aws-lc/crypto/fipsmodule/ec/p256-nistz.c +8 -8
  153. data/aws-crt-ffi/crt/aws-lc/crypto/fipsmodule/ec/p256.c +9 -8
  154. data/aws-crt-ffi/crt/aws-lc/crypto/fipsmodule/ec/p384.c +33 -16
  155. data/aws-crt-ffi/crt/aws-lc/crypto/fipsmodule/ec/p521.c +14 -6
  156. data/aws-crt-ffi/crt/aws-lc/crypto/fipsmodule/ec/scalar.c +26 -24
  157. data/aws-crt-ffi/crt/aws-lc/crypto/fipsmodule/ec/simple_mul.c +8 -5
  158. data/aws-crt-ffi/crt/aws-lc/crypto/fipsmodule/ec/wnaf.c +3 -3
  159. data/aws-crt-ffi/crt/aws-lc/crypto/fipsmodule/ecdsa/ecdsa.c +9 -3
  160. data/aws-crt-ffi/crt/aws-lc/crypto/fipsmodule/evp/evp.c +43 -12
  161. data/aws-crt-ffi/crt/aws-lc/crypto/fipsmodule/evp/p_ec.c +4 -3
  162. data/aws-crt-ffi/crt/aws-lc/crypto/fipsmodule/hmac/hmac.c +3 -1
  163. data/aws-crt-ffi/crt/aws-lc/crypto/fipsmodule/modes/xts.c +26 -3
  164. data/aws-crt-ffi/crt/aws-lc/crypto/fipsmodule/rand/cpu_jitter_test.cc +1 -1
  165. data/aws-crt-ffi/crt/aws-lc/crypto/fipsmodule/rand/internal.h +20 -11
  166. data/aws-crt-ffi/crt/aws-lc/crypto/fipsmodule/rand/rand.c +10 -10
  167. data/aws-crt-ffi/crt/aws-lc/crypto/fipsmodule/rand/urandom.c +2 -2
  168. data/aws-crt-ffi/crt/aws-lc/crypto/fipsmodule/rsa/internal.h +59 -0
  169. data/aws-crt-ffi/crt/aws-lc/crypto/fipsmodule/rsa/padding.c +9 -3
  170. data/aws-crt-ffi/crt/aws-lc/crypto/fipsmodule/rsa/rsa.c +7 -0
  171. data/aws-crt-ffi/crt/aws-lc/crypto/fipsmodule/rsa/rsa_impl.c +51 -60
  172. data/aws-crt-ffi/crt/aws-lc/crypto/fipsmodule/service_indicator/service_indicator.c +5 -2
  173. data/aws-crt-ffi/crt/aws-lc/crypto/fipsmodule/service_indicator/service_indicator_test.cc +205 -5
  174. data/aws-crt-ffi/crt/aws-lc/crypto/fipsmodule/sha/asm/sha1-armv8.pl +1 -1
  175. data/aws-crt-ffi/crt/aws-lc/crypto/fipsmodule/sha/asm/sha512-armv8.pl +1 -1
  176. data/aws-crt-ffi/crt/aws-lc/crypto/fipsmodule/sha/internal.h +8 -0
  177. data/aws-crt-ffi/crt/aws-lc/crypto/fipsmodule/sha/sha3.c +37 -15
  178. data/aws-crt-ffi/crt/aws-lc/crypto/fipsmodule/sha/sha3_test.cc +115 -110
  179. data/aws-crt-ffi/crt/aws-lc/crypto/fipsmodule/sha/sha512.c +55 -1
  180. data/aws-crt-ffi/crt/aws-lc/crypto/fipsmodule/sshkdf/sshkdf.c +2 -2
  181. data/aws-crt-ffi/crt/aws-lc/crypto/hmac_extra/hmac_test.cc +12 -0
  182. data/aws-crt-ffi/crt/aws-lc/crypto/hmac_extra/hmac_tests.txt +10 -0
  183. data/aws-crt-ffi/crt/aws-lc/crypto/hrss/asm/poly_rq_mul.S +2 -6
  184. data/aws-crt-ffi/crt/aws-lc/crypto/impl_dispatch_test.cc +9 -1
  185. data/aws-crt-ffi/crt/aws-lc/crypto/internal.h +90 -8
  186. data/aws-crt-ffi/crt/aws-lc/crypto/kem/kem.c +28 -27
  187. data/aws-crt-ffi/crt/aws-lc/crypto/kyber/kem_kyber.h +14 -0
  188. data/aws-crt-ffi/crt/aws-lc/crypto/obj/obj_dat.h +52 -2
  189. data/aws-crt-ffi/crt/aws-lc/crypto/obj/obj_mac.num +5 -0
  190. data/aws-crt-ffi/crt/aws-lc/crypto/obj/objects.txt +7 -0
  191. data/aws-crt-ffi/crt/aws-lc/crypto/perlasm/arm-xlate.pl +3 -14
  192. data/aws-crt-ffi/crt/aws-lc/crypto/perlasm/ppc-xlate.pl +1 -5
  193. data/aws-crt-ffi/crt/aws-lc/crypto/perlasm/x86_64-xlate.pl +4 -15
  194. data/aws-crt-ffi/crt/aws-lc/crypto/perlasm/x86asm.pl +4 -13
  195. data/aws-crt-ffi/crt/aws-lc/crypto/poly1305/poly1305_arm_asm.S +3 -13
  196. data/aws-crt-ffi/crt/aws-lc/crypto/rand_extra/deterministic.c +4 -3
  197. data/aws-crt-ffi/crt/aws-lc/crypto/rand_extra/fuchsia.c +4 -4
  198. data/aws-crt-ffi/crt/aws-lc/crypto/rand_extra/rand_test.cc +0 -63
  199. data/aws-crt-ffi/crt/aws-lc/crypto/rand_extra/windows.c +41 -19
  200. data/aws-crt-ffi/crt/aws-lc/crypto/rsa_extra/rsa_test.cc +3 -3
  201. data/aws-crt-ffi/crt/aws-lc/crypto/siphash/siphash.c +12 -5
  202. data/aws-crt-ffi/crt/aws-lc/crypto/siphash/siphash_test.cc +5 -5
  203. data/aws-crt-ffi/crt/aws-lc/crypto/stack/stack.c +68 -46
  204. data/aws-crt-ffi/crt/aws-lc/crypto/trust_token/pmbtoken.c +4 -4
  205. data/aws-crt-ffi/crt/aws-lc/crypto/trust_token/voprf.c +2 -2
  206. data/aws-crt-ffi/crt/aws-lc/crypto/x509/by_dir.c +0 -6
  207. data/aws-crt-ffi/crt/aws-lc/crypto/x509/internal.h +4 -1
  208. data/aws-crt-ffi/crt/aws-lc/crypto/x509/x509_lu.c +33 -9
  209. data/aws-crt-ffi/crt/aws-lc/crypto/x509/x509_test.cc +87 -0
  210. data/aws-crt-ffi/crt/aws-lc/crypto/x509/x509_trs.c +1 -1
  211. data/aws-crt-ffi/crt/aws-lc/crypto/x509/x509_vfy.c +35 -13
  212. data/aws-crt-ffi/crt/aws-lc/crypto/x509v3/v3_lib.c +2 -0
  213. data/aws-crt-ffi/crt/aws-lc/crypto/x509v3/v3_purp.c +4 -6
  214. data/aws-crt-ffi/crt/aws-lc/generated-src/crypto_test_data.cc +179 -151
  215. data/aws-crt-ffi/crt/aws-lc/generated-src/err_data.c +353 -349
  216. data/aws-crt-ffi/crt/aws-lc/generated-src/ios-aarch64/crypto/chacha/chacha-armv8.S +4 -14
  217. data/aws-crt-ffi/crt/aws-lc/generated-src/ios-aarch64/crypto/cipher_extra/chacha20_poly1305_armv8.S +4 -14
  218. data/aws-crt-ffi/crt/aws-lc/generated-src/ios-aarch64/crypto/fipsmodule/aesv8-armx.S +3 -13
  219. data/aws-crt-ffi/crt/aws-lc/generated-src/ios-aarch64/crypto/fipsmodule/aesv8-gcm-armv8-unroll8.S +3 -13
  220. data/aws-crt-ffi/crt/aws-lc/generated-src/ios-aarch64/crypto/fipsmodule/aesv8-gcm-armv8.S +3 -13
  221. data/aws-crt-ffi/crt/aws-lc/generated-src/ios-aarch64/crypto/fipsmodule/armv8-mont.S +4 -14
  222. data/aws-crt-ffi/crt/aws-lc/generated-src/ios-aarch64/crypto/fipsmodule/bn-armv8.S +4 -14
  223. data/aws-crt-ffi/crt/aws-lc/generated-src/ios-aarch64/crypto/fipsmodule/ghash-neon-armv8.S +4 -14
  224. data/aws-crt-ffi/crt/aws-lc/generated-src/ios-aarch64/crypto/fipsmodule/ghashv8-armx.S +3 -13
  225. data/aws-crt-ffi/crt/aws-lc/generated-src/ios-aarch64/crypto/fipsmodule/keccak1600-armv8.S +3 -13
  226. data/aws-crt-ffi/crt/aws-lc/generated-src/ios-aarch64/crypto/fipsmodule/md5-armv8.S +3 -13
  227. data/aws-crt-ffi/crt/aws-lc/generated-src/ios-aarch64/crypto/fipsmodule/p256-armv8-asm.S +4 -14
  228. data/aws-crt-ffi/crt/aws-lc/generated-src/ios-aarch64/crypto/fipsmodule/p256_beeu-armv8-asm.S +4 -14
  229. data/aws-crt-ffi/crt/aws-lc/generated-src/ios-aarch64/crypto/fipsmodule/sha1-armv8.S +4 -14
  230. data/aws-crt-ffi/crt/aws-lc/generated-src/ios-aarch64/crypto/fipsmodule/sha256-armv8.S +4 -14
  231. data/aws-crt-ffi/crt/aws-lc/generated-src/ios-aarch64/crypto/fipsmodule/sha512-armv8.S +4 -14
  232. data/aws-crt-ffi/crt/aws-lc/generated-src/ios-aarch64/crypto/fipsmodule/vpaes-armv8.S +3 -13
  233. data/aws-crt-ffi/crt/aws-lc/generated-src/ios-aarch64/crypto/test/trampoline-armv8.S +4 -14
  234. data/aws-crt-ffi/crt/aws-lc/generated-src/ios-arm/crypto/chacha/chacha-armv4.S +3 -13
  235. data/aws-crt-ffi/crt/aws-lc/generated-src/ios-arm/crypto/fipsmodule/aesv8-armx.S +3 -13
  236. data/aws-crt-ffi/crt/aws-lc/generated-src/ios-arm/crypto/fipsmodule/armv4-mont.S +3 -13
  237. data/aws-crt-ffi/crt/aws-lc/generated-src/ios-arm/crypto/fipsmodule/bsaes-armv7.S +3 -13
  238. data/aws-crt-ffi/crt/aws-lc/generated-src/ios-arm/crypto/fipsmodule/ghash-armv4.S +3 -13
  239. data/aws-crt-ffi/crt/aws-lc/generated-src/ios-arm/crypto/fipsmodule/ghashv8-armx.S +3 -13
  240. data/aws-crt-ffi/crt/aws-lc/generated-src/ios-arm/crypto/fipsmodule/sha1-armv4-large.S +3 -13
  241. data/aws-crt-ffi/crt/aws-lc/generated-src/ios-arm/crypto/fipsmodule/sha256-armv4.S +3 -13
  242. data/aws-crt-ffi/crt/aws-lc/generated-src/ios-arm/crypto/fipsmodule/sha512-armv4.S +3 -13
  243. data/aws-crt-ffi/crt/aws-lc/generated-src/ios-arm/crypto/fipsmodule/vpaes-armv7.S +3 -13
  244. data/aws-crt-ffi/crt/aws-lc/generated-src/ios-arm/crypto/test/trampoline-armv4.S +3 -13
  245. data/aws-crt-ffi/crt/aws-lc/generated-src/linux-aarch64/crypto/chacha/chacha-armv8.S +4 -14
  246. data/aws-crt-ffi/crt/aws-lc/generated-src/linux-aarch64/crypto/cipher_extra/chacha20_poly1305_armv8.S +4 -14
  247. data/aws-crt-ffi/crt/aws-lc/generated-src/linux-aarch64/crypto/fipsmodule/aesv8-armx.S +3 -13
  248. data/aws-crt-ffi/crt/aws-lc/generated-src/linux-aarch64/crypto/fipsmodule/aesv8-gcm-armv8-unroll8.S +3 -13
  249. data/aws-crt-ffi/crt/aws-lc/generated-src/linux-aarch64/crypto/fipsmodule/aesv8-gcm-armv8.S +3 -13
  250. data/aws-crt-ffi/crt/aws-lc/generated-src/linux-aarch64/crypto/fipsmodule/armv8-mont.S +4 -14
  251. data/aws-crt-ffi/crt/aws-lc/generated-src/linux-aarch64/crypto/fipsmodule/bn-armv8.S +3 -13
  252. data/aws-crt-ffi/crt/aws-lc/generated-src/linux-aarch64/crypto/fipsmodule/ghash-neon-armv8.S +3 -13
  253. data/aws-crt-ffi/crt/aws-lc/generated-src/linux-aarch64/crypto/fipsmodule/ghashv8-armx.S +3 -13
  254. data/aws-crt-ffi/crt/aws-lc/generated-src/linux-aarch64/crypto/fipsmodule/keccak1600-armv8.S +3 -13
  255. data/aws-crt-ffi/crt/aws-lc/generated-src/linux-aarch64/crypto/fipsmodule/md5-armv8.S +3 -13
  256. data/aws-crt-ffi/crt/aws-lc/generated-src/linux-aarch64/crypto/fipsmodule/p256-armv8-asm.S +4 -14
  257. data/aws-crt-ffi/crt/aws-lc/generated-src/linux-aarch64/crypto/fipsmodule/p256_beeu-armv8-asm.S +4 -14
  258. data/aws-crt-ffi/crt/aws-lc/generated-src/linux-aarch64/crypto/fipsmodule/sha1-armv8.S +4 -14
  259. data/aws-crt-ffi/crt/aws-lc/generated-src/linux-aarch64/crypto/fipsmodule/sha256-armv8.S +4 -14
  260. data/aws-crt-ffi/crt/aws-lc/generated-src/linux-aarch64/crypto/fipsmodule/sha512-armv8.S +4 -14
  261. data/aws-crt-ffi/crt/aws-lc/generated-src/linux-aarch64/crypto/fipsmodule/vpaes-armv8.S +3 -13
  262. data/aws-crt-ffi/crt/aws-lc/generated-src/linux-aarch64/crypto/test/trampoline-armv8.S +3 -13
  263. data/aws-crt-ffi/crt/aws-lc/generated-src/linux-arm/crypto/chacha/chacha-armv4.S +3 -13
  264. data/aws-crt-ffi/crt/aws-lc/generated-src/linux-arm/crypto/fipsmodule/aesv8-armx.S +3 -13
  265. data/aws-crt-ffi/crt/aws-lc/generated-src/linux-arm/crypto/fipsmodule/armv4-mont.S +3 -13
  266. data/aws-crt-ffi/crt/aws-lc/generated-src/linux-arm/crypto/fipsmodule/bsaes-armv7.S +3 -13
  267. data/aws-crt-ffi/crt/aws-lc/generated-src/linux-arm/crypto/fipsmodule/ghash-armv4.S +3 -13
  268. data/aws-crt-ffi/crt/aws-lc/generated-src/linux-arm/crypto/fipsmodule/ghashv8-armx.S +3 -13
  269. data/aws-crt-ffi/crt/aws-lc/generated-src/linux-arm/crypto/fipsmodule/sha1-armv4-large.S +3 -13
  270. data/aws-crt-ffi/crt/aws-lc/generated-src/linux-arm/crypto/fipsmodule/sha256-armv4.S +3 -13
  271. data/aws-crt-ffi/crt/aws-lc/generated-src/linux-arm/crypto/fipsmodule/sha512-armv4.S +3 -13
  272. data/aws-crt-ffi/crt/aws-lc/generated-src/linux-arm/crypto/fipsmodule/vpaes-armv7.S +3 -13
  273. data/aws-crt-ffi/crt/aws-lc/generated-src/linux-arm/crypto/test/trampoline-armv4.S +3 -13
  274. data/aws-crt-ffi/crt/aws-lc/generated-src/linux-ppc64le/crypto/fipsmodule/aesp8-ppc.S +1 -5
  275. data/aws-crt-ffi/crt/aws-lc/generated-src/linux-ppc64le/crypto/fipsmodule/ghashp8-ppc.S +1 -5
  276. data/aws-crt-ffi/crt/aws-lc/generated-src/linux-ppc64le/crypto/test/trampoline-ppc.S +1 -5
  277. data/aws-crt-ffi/crt/aws-lc/generated-src/linux-x86/crypto/chacha/chacha-x86.S +3 -12
  278. data/aws-crt-ffi/crt/aws-lc/generated-src/linux-x86/crypto/fipsmodule/aesni-x86.S +3 -12
  279. data/aws-crt-ffi/crt/aws-lc/generated-src/linux-x86/crypto/fipsmodule/bn-586.S +4 -13
  280. data/aws-crt-ffi/crt/aws-lc/generated-src/linux-x86/crypto/fipsmodule/co-586.S +4 -13
  281. data/aws-crt-ffi/crt/aws-lc/generated-src/linux-x86/crypto/fipsmodule/ghash-ssse3-x86.S +3 -12
  282. data/aws-crt-ffi/crt/aws-lc/generated-src/linux-x86/crypto/fipsmodule/ghash-x86.S +3 -12
  283. data/aws-crt-ffi/crt/aws-lc/generated-src/linux-x86/crypto/fipsmodule/md5-586.S +4 -13
  284. data/aws-crt-ffi/crt/aws-lc/generated-src/linux-x86/crypto/fipsmodule/sha1-586.S +4 -13
  285. data/aws-crt-ffi/crt/aws-lc/generated-src/linux-x86/crypto/fipsmodule/sha256-586.S +3 -12
  286. data/aws-crt-ffi/crt/aws-lc/generated-src/linux-x86/crypto/fipsmodule/sha512-586.S +3 -12
  287. data/aws-crt-ffi/crt/aws-lc/generated-src/linux-x86/crypto/fipsmodule/vpaes-x86.S +3 -12
  288. data/aws-crt-ffi/crt/aws-lc/generated-src/linux-x86/crypto/fipsmodule/x86-mont.S +3 -12
  289. data/aws-crt-ffi/crt/aws-lc/generated-src/linux-x86/crypto/test/trampoline-x86.S +3 -12
  290. data/aws-crt-ffi/crt/aws-lc/generated-src/linux-x86_64/crypto/chacha/chacha-x86_64.S +2 -11
  291. data/aws-crt-ffi/crt/aws-lc/generated-src/linux-x86_64/crypto/cipher_extra/aes128gcmsiv-x86_64.S +2 -11
  292. data/aws-crt-ffi/crt/aws-lc/generated-src/linux-x86_64/crypto/cipher_extra/aesni-sha1-x86_64.S +2 -11
  293. data/aws-crt-ffi/crt/aws-lc/generated-src/linux-x86_64/crypto/cipher_extra/aesni-sha256-x86_64.S +2 -11
  294. data/aws-crt-ffi/crt/aws-lc/generated-src/linux-x86_64/crypto/cipher_extra/chacha20_poly1305_x86_64.S +2 -11
  295. data/aws-crt-ffi/crt/aws-lc/generated-src/linux-x86_64/crypto/fipsmodule/aesni-gcm-avx512.S +2 -11
  296. data/aws-crt-ffi/crt/aws-lc/generated-src/linux-x86_64/crypto/fipsmodule/aesni-gcm-x86_64.S +2 -11
  297. data/aws-crt-ffi/crt/aws-lc/generated-src/linux-x86_64/crypto/fipsmodule/aesni-x86_64.S +2 -11
  298. data/aws-crt-ffi/crt/aws-lc/generated-src/linux-x86_64/crypto/fipsmodule/aesni-xts-avx512.S +2 -11
  299. data/aws-crt-ffi/crt/aws-lc/generated-src/linux-x86_64/crypto/fipsmodule/ghash-ssse3-x86_64.S +2 -11
  300. data/aws-crt-ffi/crt/aws-lc/generated-src/linux-x86_64/crypto/fipsmodule/ghash-x86_64.S +2 -11
  301. data/aws-crt-ffi/crt/aws-lc/generated-src/linux-x86_64/crypto/fipsmodule/md5-x86_64.S +2 -11
  302. data/aws-crt-ffi/crt/aws-lc/generated-src/linux-x86_64/crypto/fipsmodule/p256-x86_64-asm.S +2 -11
  303. data/aws-crt-ffi/crt/aws-lc/generated-src/linux-x86_64/crypto/fipsmodule/p256_beeu-x86_64-asm.S +2 -11
  304. data/aws-crt-ffi/crt/aws-lc/generated-src/linux-x86_64/crypto/fipsmodule/rdrand-x86_64.S +2 -11
  305. data/aws-crt-ffi/crt/aws-lc/generated-src/linux-x86_64/crypto/fipsmodule/rsaz-avx2.S +2 -11
  306. data/aws-crt-ffi/crt/aws-lc/generated-src/linux-x86_64/crypto/fipsmodule/sha1-x86_64.S +2 -11
  307. data/aws-crt-ffi/crt/aws-lc/generated-src/linux-x86_64/crypto/fipsmodule/sha256-x86_64.S +2 -11
  308. data/aws-crt-ffi/crt/aws-lc/generated-src/linux-x86_64/crypto/fipsmodule/sha512-x86_64.S +2 -11
  309. data/aws-crt-ffi/crt/aws-lc/generated-src/linux-x86_64/crypto/fipsmodule/vpaes-x86_64.S +2 -11
  310. data/aws-crt-ffi/crt/aws-lc/generated-src/linux-x86_64/crypto/fipsmodule/x86_64-mont.S +2 -11
  311. data/aws-crt-ffi/crt/aws-lc/generated-src/linux-x86_64/crypto/fipsmodule/x86_64-mont5.S +2 -11
  312. data/aws-crt-ffi/crt/aws-lc/generated-src/linux-x86_64/crypto/test/trampoline-x86_64.S +2 -11
  313. data/aws-crt-ffi/crt/aws-lc/generated-src/mac-x86/crypto/chacha/chacha-x86.S +3 -12
  314. data/aws-crt-ffi/crt/aws-lc/generated-src/mac-x86/crypto/fipsmodule/aesni-x86.S +3 -12
  315. data/aws-crt-ffi/crt/aws-lc/generated-src/mac-x86/crypto/fipsmodule/bn-586.S +3 -12
  316. data/aws-crt-ffi/crt/aws-lc/generated-src/mac-x86/crypto/fipsmodule/co-586.S +3 -12
  317. data/aws-crt-ffi/crt/aws-lc/generated-src/mac-x86/crypto/fipsmodule/ghash-ssse3-x86.S +3 -12
  318. data/aws-crt-ffi/crt/aws-lc/generated-src/mac-x86/crypto/fipsmodule/ghash-x86.S +3 -12
  319. data/aws-crt-ffi/crt/aws-lc/generated-src/mac-x86/crypto/fipsmodule/md5-586.S +3 -12
  320. data/aws-crt-ffi/crt/aws-lc/generated-src/mac-x86/crypto/fipsmodule/sha1-586.S +3 -12
  321. data/aws-crt-ffi/crt/aws-lc/generated-src/mac-x86/crypto/fipsmodule/sha256-586.S +3 -12
  322. data/aws-crt-ffi/crt/aws-lc/generated-src/mac-x86/crypto/fipsmodule/sha512-586.S +3 -12
  323. data/aws-crt-ffi/crt/aws-lc/generated-src/mac-x86/crypto/fipsmodule/vpaes-x86.S +3 -12
  324. data/aws-crt-ffi/crt/aws-lc/generated-src/mac-x86/crypto/fipsmodule/x86-mont.S +3 -12
  325. data/aws-crt-ffi/crt/aws-lc/generated-src/mac-x86/crypto/test/trampoline-x86.S +3 -12
  326. data/aws-crt-ffi/crt/aws-lc/generated-src/mac-x86_64/crypto/chacha/chacha-x86_64.S +2 -11
  327. data/aws-crt-ffi/crt/aws-lc/generated-src/mac-x86_64/crypto/cipher_extra/aes128gcmsiv-x86_64.S +2 -11
  328. data/aws-crt-ffi/crt/aws-lc/generated-src/mac-x86_64/crypto/cipher_extra/aesni-sha1-x86_64.S +2 -11
  329. data/aws-crt-ffi/crt/aws-lc/generated-src/mac-x86_64/crypto/cipher_extra/aesni-sha256-x86_64.S +2 -11
  330. data/aws-crt-ffi/crt/aws-lc/generated-src/mac-x86_64/crypto/cipher_extra/chacha20_poly1305_x86_64.S +2 -11
  331. data/aws-crt-ffi/crt/aws-lc/generated-src/mac-x86_64/crypto/fipsmodule/aesni-gcm-avx512.S +2 -11
  332. data/aws-crt-ffi/crt/aws-lc/generated-src/mac-x86_64/crypto/fipsmodule/aesni-gcm-x86_64.S +2 -11
  333. data/aws-crt-ffi/crt/aws-lc/generated-src/mac-x86_64/crypto/fipsmodule/aesni-x86_64.S +2 -11
  334. data/aws-crt-ffi/crt/aws-lc/generated-src/mac-x86_64/crypto/fipsmodule/aesni-xts-avx512.S +2 -11
  335. data/aws-crt-ffi/crt/aws-lc/generated-src/mac-x86_64/crypto/fipsmodule/ghash-ssse3-x86_64.S +2 -11
  336. data/aws-crt-ffi/crt/aws-lc/generated-src/mac-x86_64/crypto/fipsmodule/ghash-x86_64.S +2 -11
  337. data/aws-crt-ffi/crt/aws-lc/generated-src/mac-x86_64/crypto/fipsmodule/md5-x86_64.S +2 -11
  338. data/aws-crt-ffi/crt/aws-lc/generated-src/mac-x86_64/crypto/fipsmodule/p256-x86_64-asm.S +2 -11
  339. data/aws-crt-ffi/crt/aws-lc/generated-src/mac-x86_64/crypto/fipsmodule/p256_beeu-x86_64-asm.S +2 -11
  340. data/aws-crt-ffi/crt/aws-lc/generated-src/mac-x86_64/crypto/fipsmodule/rdrand-x86_64.S +2 -11
  341. data/aws-crt-ffi/crt/aws-lc/generated-src/mac-x86_64/crypto/fipsmodule/rsaz-avx2.S +2 -11
  342. data/aws-crt-ffi/crt/aws-lc/generated-src/mac-x86_64/crypto/fipsmodule/sha1-x86_64.S +2 -11
  343. data/aws-crt-ffi/crt/aws-lc/generated-src/mac-x86_64/crypto/fipsmodule/sha256-x86_64.S +2 -11
  344. data/aws-crt-ffi/crt/aws-lc/generated-src/mac-x86_64/crypto/fipsmodule/sha512-x86_64.S +2 -11
  345. data/aws-crt-ffi/crt/aws-lc/generated-src/mac-x86_64/crypto/fipsmodule/vpaes-x86_64.S +2 -11
  346. data/aws-crt-ffi/crt/aws-lc/generated-src/mac-x86_64/crypto/fipsmodule/x86_64-mont.S +2 -11
  347. data/aws-crt-ffi/crt/aws-lc/generated-src/mac-x86_64/crypto/fipsmodule/x86_64-mont5.S +2 -11
  348. data/aws-crt-ffi/crt/aws-lc/generated-src/mac-x86_64/crypto/test/trampoline-x86_64.S +2 -11
  349. data/aws-crt-ffi/crt/aws-lc/generated-src/win-aarch64/crypto/chacha/chacha-armv8.S +4 -14
  350. data/aws-crt-ffi/crt/aws-lc/generated-src/win-aarch64/crypto/cipher_extra/chacha20_poly1305_armv8.S +4 -14
  351. data/aws-crt-ffi/crt/aws-lc/generated-src/win-aarch64/crypto/fipsmodule/aesv8-armx.S +3 -13
  352. data/aws-crt-ffi/crt/aws-lc/generated-src/win-aarch64/crypto/fipsmodule/aesv8-gcm-armv8-unroll8.S +3 -13
  353. data/aws-crt-ffi/crt/aws-lc/generated-src/win-aarch64/crypto/fipsmodule/aesv8-gcm-armv8.S +3 -13
  354. data/aws-crt-ffi/crt/aws-lc/generated-src/win-aarch64/crypto/fipsmodule/armv8-mont.S +4 -14
  355. data/aws-crt-ffi/crt/aws-lc/generated-src/win-aarch64/crypto/fipsmodule/bn-armv8.S +4 -14
  356. data/aws-crt-ffi/crt/aws-lc/generated-src/win-aarch64/crypto/fipsmodule/ghash-neon-armv8.S +4 -14
  357. data/aws-crt-ffi/crt/aws-lc/generated-src/win-aarch64/crypto/fipsmodule/ghashv8-armx.S +3 -13
  358. data/aws-crt-ffi/crt/aws-lc/generated-src/win-aarch64/crypto/fipsmodule/keccak1600-armv8.S +3 -13
  359. data/aws-crt-ffi/crt/aws-lc/generated-src/win-aarch64/crypto/fipsmodule/md5-armv8.S +3 -13
  360. data/aws-crt-ffi/crt/aws-lc/generated-src/win-aarch64/crypto/fipsmodule/p256-armv8-asm.S +4 -14
  361. data/aws-crt-ffi/crt/aws-lc/generated-src/win-aarch64/crypto/fipsmodule/p256_beeu-armv8-asm.S +4 -14
  362. data/aws-crt-ffi/crt/aws-lc/generated-src/win-aarch64/crypto/fipsmodule/sha1-armv8.S +4 -14
  363. data/aws-crt-ffi/crt/aws-lc/generated-src/win-aarch64/crypto/fipsmodule/sha256-armv8.S +4 -14
  364. data/aws-crt-ffi/crt/aws-lc/generated-src/win-aarch64/crypto/fipsmodule/sha512-armv8.S +4 -14
  365. data/aws-crt-ffi/crt/aws-lc/generated-src/win-aarch64/crypto/fipsmodule/vpaes-armv8.S +3 -13
  366. data/aws-crt-ffi/crt/aws-lc/generated-src/win-aarch64/crypto/test/trampoline-armv8.S +4 -14
  367. data/aws-crt-ffi/crt/aws-lc/go.mod +4 -4
  368. data/aws-crt-ffi/crt/aws-lc/go.sum +8 -10
  369. data/aws-crt-ffi/crt/aws-lc/include/openssl/aead.h +2 -2
  370. data/aws-crt-ffi/crt/aws-lc/include/openssl/arm_arch.h +4 -119
  371. data/aws-crt-ffi/crt/aws-lc/include/openssl/asm_base.h +185 -0
  372. data/aws-crt-ffi/crt/aws-lc/include/openssl/asn1.h +5 -0
  373. data/aws-crt-ffi/crt/aws-lc/include/openssl/base.h +31 -134
  374. data/aws-crt-ffi/crt/aws-lc/include/openssl/bio.h +30 -18
  375. data/aws-crt-ffi/crt/aws-lc/include/openssl/bn.h +0 -2
  376. data/aws-crt-ffi/crt/aws-lc/include/openssl/chacha.h +6 -0
  377. data/aws-crt-ffi/crt/aws-lc/include/openssl/cipher.h +2 -2
  378. data/aws-crt-ffi/crt/aws-lc/include/openssl/digest.h +9 -6
  379. data/aws-crt-ffi/crt/aws-lc/include/openssl/dsa.h +0 -21
  380. data/aws-crt-ffi/crt/aws-lc/include/openssl/ec.h +1 -1
  381. data/aws-crt-ffi/crt/aws-lc/include/openssl/err.h +1 -1
  382. data/aws-crt-ffi/crt/aws-lc/include/openssl/evp.h +8 -5
  383. data/aws-crt-ffi/crt/aws-lc/include/openssl/nid.h +21 -0
  384. data/aws-crt-ffi/crt/aws-lc/include/openssl/rsa.h +1 -65
  385. data/aws-crt-ffi/crt/aws-lc/include/openssl/sha.h +22 -1
  386. data/aws-crt-ffi/crt/aws-lc/include/openssl/ssl.h +121 -13
  387. data/aws-crt-ffi/crt/aws-lc/include/openssl/stack.h +229 -208
  388. data/aws-crt-ffi/crt/aws-lc/include/openssl/target.h +166 -0
  389. data/aws-crt-ffi/crt/aws-lc/include/openssl/x509.h +30 -10
  390. data/aws-crt-ffi/crt/aws-lc/include/openssl/x509v3.h +6 -4
  391. data/aws-crt-ffi/crt/aws-lc/sources.cmake +2 -0
  392. data/aws-crt-ffi/crt/aws-lc/ssl/extensions.cc +12 -7
  393. data/aws-crt-ffi/crt/aws-lc/ssl/handshake_server.cc +28 -18
  394. data/aws-crt-ffi/crt/aws-lc/ssl/internal.h +41 -6
  395. data/aws-crt-ffi/crt/aws-lc/ssl/s3_both.cc +9 -17
  396. data/aws-crt-ffi/crt/aws-lc/ssl/ssl_cipher.cc +13 -5
  397. data/aws-crt-ffi/crt/aws-lc/ssl/ssl_key_share.cc +542 -2
  398. data/aws-crt-ffi/crt/aws-lc/ssl/ssl_lib.cc +35 -0
  399. data/aws-crt-ffi/crt/aws-lc/ssl/ssl_test.cc +1847 -14
  400. data/aws-crt-ffi/crt/aws-lc/ssl/ssl_x509.cc +128 -0
  401. data/aws-crt-ffi/crt/aws-lc/ssl/test/PORTING.md +10 -7
  402. data/aws-crt-ffi/crt/aws-lc/ssl/test/bssl_shim.cc +133 -77
  403. data/aws-crt-ffi/crt/aws-lc/ssl/test/handshake_util.cc +3 -3
  404. data/aws-crt-ffi/crt/aws-lc/ssl/test/handshaker.cc +4 -0
  405. data/aws-crt-ffi/crt/aws-lc/ssl/test/runner/handshake_client.go +6 -2
  406. data/aws-crt-ffi/crt/aws-lc/ssl/test/runner/handshake_messages.go +894 -1042
  407. data/aws-crt-ffi/crt/aws-lc/ssl/test/runner/handshake_server.go +24 -23
  408. data/aws-crt-ffi/crt/aws-lc/ssl/test/runner/prf.go +6 -5
  409. data/aws-crt-ffi/crt/aws-lc/ssl/test/runner/runner.go +56 -55
  410. data/aws-crt-ffi/crt/aws-lc/ssl/test/runner/shim_dispatcher.go +188 -0
  411. data/aws-crt-ffi/crt/aws-lc/ssl/test/runner/ticket.go +37 -39
  412. data/aws-crt-ffi/crt/aws-lc/ssl/test/test_config.cc +59 -24
  413. data/aws-crt-ffi/crt/aws-lc/ssl/test/test_config.h +3 -2
  414. data/aws-crt-ffi/crt/aws-lc/ssl/tls13_server.cc +10 -11
  415. data/aws-crt-ffi/crt/aws-lc/tests/ci/cdk/app.py +4 -4
  416. data/aws-crt-ffi/crt/aws-lc/tests/ci/cdk/cdk/{aws_lc_mac_arm_ci_stack.py → aws_lc_ec2_test_framework_ci_stack.py} +13 -29
  417. data/aws-crt-ffi/crt/aws-lc/tests/ci/cdk/cdk/ssm/general_test_run_ssm_document.yaml +43 -0
  418. data/aws-crt-ffi/crt/aws-lc/tests/ci/common_posix_setup.sh +10 -0
  419. data/aws-crt-ffi/crt/aws-lc/tests/ci/docker_images/linux-aarch/amazonlinux-2023_base/Dockerfile +5 -1
  420. data/aws-crt-ffi/crt/aws-lc/tests/ci/docker_images/linux-aarch/ubuntu-22.04_base/Dockerfile +19 -3
  421. data/aws-crt-ffi/crt/aws-lc/tests/ci/docker_images/linux-x86/amazonlinux-2_gcc-7x-intel-sde/Dockerfile +5 -4
  422. data/aws-crt-ffi/crt/aws-lc/tests/ci/docker_images/linux-x86/build_images.sh +1 -0
  423. data/aws-crt-ffi/crt/aws-lc/tests/ci/docker_images/linux-x86/push_images.sh +2 -1
  424. data/aws-crt-ffi/crt/aws-lc/tests/ci/docker_images/linux-x86/ubuntu-20.04_clang-10x_formal-verification/create_image.sh +1 -1
  425. data/aws-crt-ffi/crt/aws-lc/tests/ci/docker_images/linux-x86/ubuntu-22.04_base/Dockerfile +1 -0
  426. data/aws-crt-ffi/crt/aws-lc/tests/ci/docker_images/linux-x86/ubuntu-22.04_clang-14x-sde/Dockerfile +42 -0
  427. data/aws-crt-ffi/crt/aws-lc/tests/ci/docker_images/windows/vs2017/Dockerfile +14 -0
  428. data/aws-crt-ffi/crt/aws-lc/tests/ci/docker_images/windows/windows_base/Dockerfile +3 -0
  429. data/aws-crt-ffi/crt/aws-lc/tests/ci/integration/README.md +12 -0
  430. data/aws-crt-ffi/crt/aws-lc/tests/ci/integration/nginx_patch/aws-lc-nginx.patch +68 -23
  431. data/aws-crt-ffi/crt/aws-lc/tests/ci/integration/run_crt_integration.sh +27 -0
  432. data/aws-crt-ffi/crt/aws-lc/tests/ci/integration/run_monit_integration.sh +56 -0
  433. data/aws-crt-ffi/crt/aws-lc/tests/ci/integration/sslproxy_patch/aws-lc-sslproxy.patch +2 -2
  434. data/aws-crt-ffi/crt/aws-lc/tests/ci/run_ec2_test_framework.sh +135 -0
  435. data/aws-crt-ffi/crt/aws-lc/tests/ci/run_fips_tests.sh +14 -2
  436. data/aws-crt-ffi/crt/aws-lc/tests/ci/run_tests_with_sde.sh +4 -1
  437. data/aws-crt-ffi/crt/aws-lc/tests/ci/run_tests_with_sde_asan.sh +14 -0
  438. data/aws-crt-ffi/crt/aws-lc/tests/ci/run_windows_tests.bat +39 -3
  439. data/aws-crt-ffi/crt/aws-lc/third_party/fiat/README.md +21 -6
  440. data/aws-crt-ffi/crt/aws-lc/third_party/s2n-bignum/arm/curve25519/bignum_madd_n25519.S +284 -0
  441. data/aws-crt-ffi/crt/aws-lc/third_party/s2n-bignum/arm/curve25519/bignum_madd_n25519_alt.S +210 -0
  442. data/aws-crt-ffi/crt/aws-lc/third_party/s2n-bignum/arm/curve25519/bignum_mod_n25519.S +186 -0
  443. data/aws-crt-ffi/crt/aws-lc/third_party/s2n-bignum/arm/curve25519/bignum_neg_p25519.S +65 -0
  444. data/aws-crt-ffi/crt/aws-lc/third_party/s2n-bignum/arm/curve25519/curve25519_x25519.S +1043 -352
  445. data/aws-crt-ffi/crt/aws-lc/third_party/s2n-bignum/arm/curve25519/curve25519_x25519_alt.S +1043 -352
  446. data/aws-crt-ffi/crt/aws-lc/third_party/s2n-bignum/arm/curve25519/curve25519_x25519_byte.S +1043 -352
  447. data/aws-crt-ffi/crt/aws-lc/third_party/s2n-bignum/arm/curve25519/curve25519_x25519_byte_alt.S +1043 -352
  448. data/aws-crt-ffi/crt/aws-lc/third_party/s2n-bignum/arm/curve25519/curve25519_x25519base.S +1042 -352
  449. data/aws-crt-ffi/crt/aws-lc/third_party/s2n-bignum/arm/curve25519/curve25519_x25519base_alt.S +1042 -352
  450. data/aws-crt-ffi/crt/aws-lc/third_party/s2n-bignum/arm/curve25519/curve25519_x25519base_byte.S +1042 -352
  451. data/aws-crt-ffi/crt/aws-lc/third_party/s2n-bignum/arm/curve25519/curve25519_x25519base_byte_alt.S +1043 -354
  452. data/aws-crt-ffi/crt/aws-lc/third_party/s2n-bignum/arm/curve25519/edwards25519_decode.S +700 -0
  453. data/aws-crt-ffi/crt/aws-lc/third_party/s2n-bignum/arm/curve25519/edwards25519_decode_alt.S +563 -0
  454. data/aws-crt-ffi/crt/aws-lc/third_party/s2n-bignum/arm/curve25519/edwards25519_encode.S +131 -0
  455. data/aws-crt-ffi/crt/aws-lc/third_party/s2n-bignum/arm/curve25519/edwards25519_scalarmulbase.S +9626 -0
  456. data/aws-crt-ffi/crt/aws-lc/third_party/s2n-bignum/arm/curve25519/edwards25519_scalarmulbase_alt.S +9468 -0
  457. data/aws-crt-ffi/crt/aws-lc/third_party/s2n-bignum/arm/curve25519/edwards25519_scalarmuldouble.S +3157 -0
  458. data/aws-crt-ffi/crt/aws-lc/third_party/s2n-bignum/arm/curve25519/edwards25519_scalarmuldouble_alt.S +2941 -0
  459. data/aws-crt-ffi/crt/aws-lc/third_party/s2n-bignum/arm/p384/Makefile +1 -1
  460. data/aws-crt-ffi/crt/aws-lc/third_party/s2n-bignum/arm/p521/Makefile +1 -1
  461. data/aws-crt-ffi/crt/aws-lc/third_party/s2n-bignum/include/s2n-bignum_aws-lc.h +34 -0
  462. data/aws-crt-ffi/crt/aws-lc/third_party/s2n-bignum/x86_att/curve25519/bignum_madd_n25519.S +219 -0
  463. data/aws-crt-ffi/crt/aws-lc/third_party/s2n-bignum/x86_att/curve25519/bignum_madd_n25519_alt.S +245 -0
  464. data/aws-crt-ffi/crt/aws-lc/third_party/s2n-bignum/x86_att/curve25519/bignum_mod_n25519.S +228 -0
  465. data/aws-crt-ffi/crt/aws-lc/third_party/s2n-bignum/x86_att/curve25519/bignum_neg_p25519.S +86 -0
  466. data/aws-crt-ffi/crt/aws-lc/third_party/s2n-bignum/x86_att/curve25519/curve25519_x25519.S +1350 -407
  467. data/aws-crt-ffi/crt/aws-lc/third_party/s2n-bignum/x86_att/curve25519/curve25519_x25519_alt.S +1350 -407
  468. data/aws-crt-ffi/crt/aws-lc/third_party/s2n-bignum/x86_att/curve25519/curve25519_x25519base.S +1344 -400
  469. data/aws-crt-ffi/crt/aws-lc/third_party/s2n-bignum/x86_att/curve25519/curve25519_x25519base_alt.S +1348 -402
  470. data/aws-crt-ffi/crt/aws-lc/third_party/s2n-bignum/x86_att/curve25519/edwards25519_decode.S +670 -0
  471. data/aws-crt-ffi/crt/aws-lc/third_party/s2n-bignum/x86_att/curve25519/edwards25519_decode_alt.S +751 -0
  472. data/aws-crt-ffi/crt/aws-lc/third_party/s2n-bignum/x86_att/curve25519/edwards25519_encode.S +81 -0
  473. data/aws-crt-ffi/crt/aws-lc/third_party/s2n-bignum/x86_att/curve25519/edwards25519_scalarmulbase.S +9910 -0
  474. data/aws-crt-ffi/crt/aws-lc/third_party/s2n-bignum/x86_att/curve25519/edwards25519_scalarmulbase_alt.S +9986 -0
  475. data/aws-crt-ffi/crt/aws-lc/third_party/s2n-bignum/x86_att/curve25519/edwards25519_scalarmuldouble.S +3619 -0
  476. data/aws-crt-ffi/crt/aws-lc/third_party/s2n-bignum/x86_att/curve25519/edwards25519_scalarmuldouble_alt.S +3736 -0
  477. data/aws-crt-ffi/crt/aws-lc/third_party/wycheproof_testvectors/hmac_sha512_224_test.json +1978 -0
  478. data/aws-crt-ffi/crt/aws-lc/third_party/wycheproof_testvectors/hmac_sha512_224_test.txt +1403 -0
  479. data/aws-crt-ffi/crt/aws-lc/third_party/wycheproof_testvectors/hmac_sha512_256_test.json +1993 -0
  480. data/aws-crt-ffi/crt/aws-lc/third_party/wycheproof_testvectors/hmac_sha512_256_test.txt +1416 -0
  481. data/aws-crt-ffi/crt/aws-lc/tool/digest.cc +4 -0
  482. data/aws-crt-ffi/crt/aws-lc/tool/internal.h +1 -0
  483. data/aws-crt-ffi/crt/aws-lc/tool/speed.cc +53 -6
  484. data/aws-crt-ffi/crt/aws-lc/util/all_tests.go +43 -12
  485. data/aws-crt-ffi/crt/aws-lc/util/all_tests.json +13 -5
  486. data/aws-crt-ffi/crt/aws-lc/util/bot/DEPS +4 -4
  487. data/aws-crt-ffi/crt/aws-lc/util/bot/update_clang.py +8 -2
  488. data/aws-crt-ffi/crt/aws-lc/util/codecov-ci.sh +82 -0
  489. data/aws-crt-ffi/crt/aws-lc/util/convert_wycheproof/convert_wycheproof.go +7 -5
  490. data/aws-crt-ffi/crt/aws-lc/util/fipstools/acvp/ACVP.md +7 -0
  491. data/aws-crt-ffi/crt/aws-lc/util/fipstools/acvp/acvptool/subprocess/hash.go +24 -9
  492. data/aws-crt-ffi/crt/aws-lc/util/fipstools/acvp/acvptool/subprocess/rsa.go +3 -4
  493. data/aws-crt-ffi/crt/aws-lc/util/fipstools/acvp/acvptool/subprocess/subprocess.go +15 -10
  494. data/aws-crt-ffi/crt/aws-lc/util/fipstools/acvp/acvptool/test/expected/HMAC-SHA2-512-224.bz2 +0 -0
  495. data/aws-crt-ffi/crt/aws-lc/util/fipstools/acvp/acvptool/test/expected/SHA2-512-224.bz2 +0 -0
  496. data/aws-crt-ffi/crt/aws-lc/util/fipstools/acvp/acvptool/test/expected/SHAKE-128.bz2 +0 -0
  497. data/aws-crt-ffi/crt/aws-lc/util/fipstools/acvp/acvptool/test/expected/SHAKE-256.bz2 +0 -0
  498. data/aws-crt-ffi/crt/aws-lc/util/fipstools/acvp/acvptool/test/sha-tests/sha512-224-tests.json +1 -0
  499. data/aws-crt-ffi/crt/aws-lc/util/fipstools/acvp/acvptool/test/sha-tests/shake-128-tests.json +1 -0
  500. data/aws-crt-ffi/crt/aws-lc/util/fipstools/acvp/acvptool/test/sha-tests/shake-256-tests.json +1 -0
  501. data/aws-crt-ffi/crt/aws-lc/util/fipstools/acvp/acvptool/test/tests.json +1 -0
  502. data/aws-crt-ffi/crt/aws-lc/util/fipstools/acvp/acvptool/test/vectors/HMAC-SHA2-512-224.bz2 +0 -0
  503. data/aws-crt-ffi/crt/aws-lc/util/fipstools/acvp/acvptool/test/vectors/SHA2-512-224.bz2 +0 -0
  504. data/aws-crt-ffi/crt/aws-lc/util/fipstools/acvp/acvptool/test/vectors/SHAKE-128.bz2 +0 -0
  505. data/aws-crt-ffi/crt/aws-lc/util/fipstools/acvp/acvptool/test/vectors/SHAKE-256.bz2 +0 -0
  506. data/aws-crt-ffi/crt/aws-lc/util/fipstools/acvp/modulewrapper/main.cc +4 -0
  507. data/aws-crt-ffi/crt/aws-lc/util/fipstools/acvp/modulewrapper/modulewrapper.cc +144 -1
  508. data/aws-crt-ffi/crt/aws-lc/util/fipstools/delocate/delocate.go +9 -3
  509. data/aws-crt-ffi/crt/aws-lc/util/fipstools/delocate/testdata/aarch64-Basic/in.s +4 -0
  510. data/aws-crt-ffi/crt/aws-lc/util/fipstools/delocate/testdata/aarch64-Basic/out.s +11 -0
  511. data/aws-crt-ffi/crt/aws-lc/util/fipstools/inject_hash/inject_hash.go +13 -4
  512. data/aws-crt-ffi/crt/aws-lc/util/fipstools/test-break-kat.sh +2 -0
  513. data/aws-crt-ffi/crt/aws-lc/util/testconfig/testconfig.go +2 -1
  514. data/aws-crt-ffi/crt/s2n/api/s2n.h +9 -5
  515. data/aws-crt-ffi/crt/s2n/bindings/rust/bench/benches/handshake.rs +9 -6
  516. data/aws-crt-ffi/crt/s2n/bindings/rust/bench/benches/resumption.rs +14 -14
  517. data/aws-crt-ffi/crt/s2n/bindings/rust/bench/benches/throughput.rs +9 -6
  518. data/aws-crt-ffi/crt/s2n/bindings/rust/bench/src/harness.rs +106 -102
  519. data/aws-crt-ffi/crt/s2n/bindings/rust/bench/src/openssl.rs +24 -20
  520. data/aws-crt-ffi/crt/s2n/bindings/rust/bench/src/rustls.rs +28 -24
  521. data/aws-crt-ffi/crt/s2n/bindings/rust/bench/src/s2n_tls.rs +52 -50
  522. data/aws-crt-ffi/crt/s2n/bindings/rust/generate/Cargo.toml +1 -0
  523. data/aws-crt-ffi/crt/s2n/bindings/rust/integration/Cargo.toml +3 -0
  524. data/aws-crt-ffi/crt/s2n/bindings/rust/s2n-tls/Cargo.toml +2 -2
  525. data/aws-crt-ffi/crt/s2n/bindings/rust/s2n-tls/src/connection.rs +9 -0
  526. data/aws-crt-ffi/crt/s2n/bindings/rust/s2n-tls-sys/templates/Cargo.template +2 -1
  527. data/aws-crt-ffi/crt/s2n/bindings/rust/s2n-tls-tokio/Cargo.toml +2 -2
  528. data/aws-crt-ffi/crt/s2n/tests/cbmc/sources/make_common_datastructures.c +9 -2
  529. data/aws-crt-ffi/crt/s2n/tests/fuzz/s2n_client_cert_verify_recv_test.c +1 -1
  530. data/aws-crt-ffi/crt/s2n/tests/fuzz/s2n_hybrid_ecdhe_kyber_r3_fuzz_test.c +1 -1
  531. data/aws-crt-ffi/crt/s2n/tests/fuzz/s2n_tls13_cert_verify_recv_test.c +1 -1
  532. data/aws-crt-ffi/crt/s2n/tests/integrationv2/test_version_negotiation.py +4 -4
  533. data/aws-crt-ffi/crt/s2n/tests/unit/s2n_auth_selection_test.c +19 -9
  534. data/aws-crt-ffi/crt/s2n/tests/unit/s2n_client_auth_handshake_test.c +3 -3
  535. data/aws-crt-ffi/crt/s2n/tests/unit/s2n_client_cert_verify_test.c +1 -1
  536. data/aws-crt-ffi/crt/s2n/tests/unit/s2n_client_hello_recv_test.c +1 -1
  537. data/aws-crt-ffi/crt/s2n/tests/unit/s2n_client_hello_test.c +4 -4
  538. data/aws-crt-ffi/crt/s2n/tests/unit/s2n_client_signature_algorithms_extension_test.c +4 -5
  539. data/aws-crt-ffi/crt/s2n/tests/unit/s2n_connection_protocol_versions_test.c +390 -0
  540. data/aws-crt-ffi/crt/s2n/tests/unit/s2n_connection_test.c +8 -4
  541. data/aws-crt-ffi/crt/s2n/tests/unit/s2n_handshake_test.c +2 -1
  542. data/aws-crt-ffi/crt/s2n/tests/unit/s2n_quic_support_io_test.c +106 -0
  543. data/aws-crt-ffi/crt/s2n/tests/unit/s2n_security_policies_test.c +6 -2
  544. data/aws-crt-ffi/crt/s2n/tests/unit/s2n_self_talk_offload_signing_test.c +3 -3
  545. data/aws-crt-ffi/crt/s2n/tests/unit/s2n_self_talk_session_resumption_test.c +135 -0
  546. data/aws-crt-ffi/crt/s2n/tests/unit/s2n_server_new_session_ticket_test.c +32 -0
  547. data/aws-crt-ffi/crt/s2n/tests/unit/s2n_server_signature_algorithms_extension_test.c +1 -1
  548. data/aws-crt-ffi/crt/s2n/tests/unit/s2n_signature_algorithms_test.c +307 -283
  549. data/aws-crt-ffi/crt/s2n/tests/unit/s2n_tls13_cert_request_test.c +1 -1
  550. data/aws-crt-ffi/crt/s2n/tests/unit/s2n_tls13_cert_verify_test.c +18 -17
  551. data/aws-crt-ffi/crt/s2n/tests/unit/s2n_x509_validator_test.c +125 -0
  552. data/aws-crt-ffi/crt/s2n/tls/extensions/s2n_client_signature_algorithms.c +8 -1
  553. data/aws-crt-ffi/crt/s2n/tls/extensions/s2n_client_supported_versions.c +43 -11
  554. data/aws-crt-ffi/crt/s2n/tls/extensions/s2n_client_supported_versions.h +3 -0
  555. data/aws-crt-ffi/crt/s2n/tls/extensions/s2n_server_signature_algorithms.c +8 -1
  556. data/aws-crt-ffi/crt/s2n/tls/s2n_auth_selection.c +4 -2
  557. data/aws-crt-ffi/crt/s2n/tls/s2n_client_cert_verify.c +7 -10
  558. data/aws-crt-ffi/crt/s2n/tls/s2n_client_hello.c +2 -2
  559. data/aws-crt-ffi/crt/s2n/tls/s2n_connection.c +75 -14
  560. data/aws-crt-ffi/crt/s2n/tls/s2n_handshake.h +2 -2
  561. data/aws-crt-ffi/crt/s2n/tls/s2n_post_handshake.c +1 -1
  562. data/aws-crt-ffi/crt/s2n/tls/s2n_post_handshake.h +1 -0
  563. data/aws-crt-ffi/crt/s2n/tls/s2n_quic_support.c +29 -0
  564. data/aws-crt-ffi/crt/s2n/tls/s2n_quic_support.h +5 -0
  565. data/aws-crt-ffi/crt/s2n/tls/s2n_security_policies.c +40 -0
  566. data/aws-crt-ffi/crt/s2n/tls/s2n_security_policies.h +4 -0
  567. data/aws-crt-ffi/crt/s2n/tls/s2n_server_cert_request.c +1 -1
  568. data/aws-crt-ffi/crt/s2n/tls/s2n_server_hello.c +0 -3
  569. data/aws-crt-ffi/crt/s2n/tls/s2n_server_key_exchange.c +8 -9
  570. data/aws-crt-ffi/crt/s2n/tls/s2n_server_new_session_ticket.c +8 -0
  571. data/aws-crt-ffi/crt/s2n/tls/s2n_signature_algorithms.c +111 -72
  572. data/aws-crt-ffi/crt/s2n/tls/s2n_signature_algorithms.h +11 -9
  573. data/aws-crt-ffi/crt/s2n/tls/s2n_signature_scheme.c +9 -0
  574. data/aws-crt-ffi/crt/s2n/tls/s2n_signature_scheme.h +2 -0
  575. data/aws-crt-ffi/crt/s2n/tls/s2n_tls13_certificate_verify.c +12 -18
  576. data/aws-crt-ffi/crt/s2n/tls/s2n_x509_validator.c +7 -7
  577. data/aws-crt-ffi/src/api.h +1 -0
  578. data/lib/aws-crt/native.rb +1 -1
  579. metadata +68 -5
  580. data/aws-crt-ffi/crt/aws-lc/tests/ci/cdk/cdk/ssm/m1_tests_ssm_document.yaml +0 -34
  581. data/aws-crt-ffi/crt/aws-lc/tests/ci/run_m1_ec2_instance.sh +0 -96
data/aws-crt-ffi/crt/aws-lc/third_party/s2n-bignum/x86_att/curve25519/curve25519_x25519_alt.S CHANGED
@@ -20,7 +20,8 @@
20
20
  // this returns the X coordinate of n * P = (X, Y), or 0 when n * P is the
21
21
  // point at infinity. Both n and X inputs are first slightly modified/mangled
22
22
  // as specified in the relevant RFC (https://www.rfc-editor.org/rfc/rfc7748);
23
- // in particular the lower three bits of n are set to zero.
23
+ // in particular the lower three bits of n are set to zero. Does not implement
24
+ // the zero-check specified in Section 6.1.
24
25
  //
25
26
  // Standard x86-64 ABI: RDI = res, RSI = scalar, RDX = point
26
27
  // Microsoft x64 ABI: RCX = res, RDX = scalar, R8 = point
@@ -65,12 +66,12 @@
65
66
 
66
67
  #define sn (4*NUMSIZE)(%rsp)
67
68
 
68
- #define zn (5*NUMSIZE)(%rsp)
69
69
  #define dn (5*NUMSIZE)(%rsp)
70
70
  #define e (5*NUMSIZE)(%rsp)
71
71
 
72
72
  #define dmsn (6*NUMSIZE)(%rsp)
73
73
  #define p (6*NUMSIZE)(%rsp)
74
+ #define zn (7*NUMSIZE)(%rsp)
74
75
 
75
76
  #define xm (8*NUMSIZE)(%rsp)
76
77
  #define dnsm (8*NUMSIZE)(%rsp)
@@ -951,430 +952,1372 @@ curve25519_x25519_alt_scalarloop:
951
952
  mul_p25519(zn,p,e)
952
953
 
953
954
  // The projective result of the scalar multiplication is now (xn,zn).
954
- // First set up the constant sn = 2^255 - 19 for the modular inverse.
955
-
956
- movq $-19, %rax
957
- movq $-1, %rcx
958
- movq $0x7fffffffffffffff, %rdx
959
- movq %rax, 128(%rsp)
960
- movq %rcx, 136(%rsp)
961
- movq %rcx, 144(%rsp)
962
- movq %rdx, 152(%rsp)
963
-
964
- // Prepare to call the modular inverse function to get zm = 1/zn
965
-
966
- movq $4, %rdi
967
- leaq 96(%rsp), %rsi
968
- leaq 160(%rsp), %rdx
969
- leaq 128(%rsp), %rcx
970
- leaq 192(%rsp), %r8
971
-
972
- // Inline copy of bignum_modinv, identical except for stripping out the
973
- // prologue and epilogue saving and restoring registers and the initial
974
- // test for k = 0 (which is trivially false here since k = 4). For more
975
- // details and explanations see "x86/generic/bignum_modinv.S". Note
976
- // that the stack it uses for its own temporaries is 80 bytes so it
977
- // only overwrites pointx, scalar and dm, which are no longer needed.
978
-
979
- movq %rsi, 0x40(%rsp)
980
- movq %r8, 0x38(%rsp)
981
- movq %rcx, 0x48(%rsp)
982
- leaq (%r8,%rdi,8), %r10
983
- movq %r10, 0x30(%rsp)
984
- leaq (%r10,%rdi,8), %r15
985
- xorq %r11, %r11
986
- xorq %r9, %r9
987
- curve25519_x25519_alt_copyloop:
988
- movq (%rdx,%r9,8), %rax
989
- movq (%rcx,%r9,8), %rbx
990
- movq %rax, (%r10,%r9,8)
991
- movq %rbx, (%r15,%r9,8)
992
- movq %rbx, (%r8,%r9,8)
993
- movq %r11, (%rsi,%r9,8)
994
- incq %r9
995
- cmpq %rdi, %r9
996
- jb curve25519_x25519_alt_copyloop
997
- movq (%r8), %rax
998
- movq %rax, %rbx
999
- decq %rbx
1000
- movq %rbx, (%r8)
1001
- movq %rax, %rbp
1002
- movq %rax, %r12
1003
- shlq $0x2, %rbp
1004
- subq %rbp, %r12
1005
- xorq $0x2, %r12
1006
- movq %r12, %rbp
1007
- imulq %rax, %rbp
1008
- movl $0x2, %eax
1009
- addq %rbp, %rax
1010
- addq $0x1, %rbp
1011
- imulq %rax, %r12
1012
- imulq %rbp, %rbp
1013
- movl $0x1, %eax
1014
- addq %rbp, %rax
1015
- imulq %rax, %r12
1016
- imulq %rbp, %rbp
1017
- movl $0x1, %eax
1018
- addq %rbp, %rax
1019
- imulq %rax, %r12
1020
- imulq %rbp, %rbp
955
+ // Prepare to call the modular inverse function to get xm = 1/zn
956
+
957
+ leaq 256(%rsp), %rdi
958
+ leaq 224(%rsp), %rsi
959
+
960
+ // Inline copy of bignum_inv_p25519, identical except for stripping out
961
+ // the prologue and epilogue saving and restoring registers and making
962
+ // and reclaiming room on the stack. For more details and explanations see
963
+ // "x86/curve25519/bignum_inv_p25519.S". Note that the stack it uses for
964
+ // its own temporaries is 208 bytes, so it has no effect on variables
965
+ // that are needed in the rest of our computation here: res, xm and zn.
966
+
967
+ movq %rdi, 0xc0(%rsp)
968
+ xorl %eax, %eax
969
+ leaq -0x13(%rax), %rcx
970
+ notq %rax
971
+ movq %rcx, (%rsp)
972
+ movq %rax, 0x8(%rsp)
973
+ movq %rax, 0x10(%rsp)
974
+ btr $0x3f, %rax
975
+ movq %rax, 0x18(%rsp)
976
+ movq (%rsi), %rdx
977
+ movq 0x8(%rsi), %rcx
978
+ movq 0x10(%rsi), %r8
979
+ movq 0x18(%rsi), %r9
1021
980
  movl $0x1, %eax
1022
- addq %rbp, %rax
1023
- imulq %rax, %r12
1024
- movq %r12, 0x28(%rsp)
1025
- movq %rdi, %rax
1026
- shlq $0x7, %rax
1027
- movq %rax, 0x20(%rsp)
1028
- curve25519_x25519_alt_outerloop:
1029
- movq 0x20(%rsp), %r13
1030
- addq $0x3f, %r13
1031
- shrq $0x6, %r13
1032
- cmpq %rdi, %r13
1033
- cmovaeq %rdi, %r13
1034
- xorq %r12, %r12
1035
- xorq %r14, %r14
1036
- xorq %rbp, %rbp
1037
- xorq %rsi, %rsi
1038
- xorq %r11, %r11
1039
- movq 0x30(%rsp), %r8
1040
- leaq (%r8,%rdi,8), %r15
1041
- xorq %r9, %r9
1042
- curve25519_x25519_alt_toploop:
1043
- movq (%r8,%r9,8), %rbx
1044
- movq (%r15,%r9,8), %rcx
1045
- movq %r11, %r10
1046
- andq %r12, %r10
1047
- andq %rbp, %r11
1048
- movq %rbx, %rax
1049
- orq %rcx, %rax
1050
- negq %rax
1051
- cmovbq %r10, %r14
1052
- cmovbq %r11, %rsi
1053
- cmovbq %rbx, %r12
1054
- cmovbq %rcx, %rbp
1055
- sbbq %r11, %r11
1056
- incq %r9
1057
- cmpq %r13, %r9
1058
- jb curve25519_x25519_alt_toploop
1059
- movq %r12, %rax
1060
- orq %rbp, %rax
1061
- bsrq %rax, %rcx
1062
- xorq $0x3f, %rcx
1063
- shldq %cl, %r14, %r12
1064
- shldq %cl, %rsi, %rbp
1065
- movq (%r8), %rax
1066
- movq %rax, %r14
1067
- movq (%r15), %rax
1068
- movq %rax, %rsi
1069
- movl $0x1, %r10d
1070
- movl $0x0, %r11d
1071
- movl $0x0, %ecx
1072
- movl $0x1, %edx
1073
- movl $0x3a, %r9d
1074
- movq %rdi, 0x8(%rsp)
1075
- movq %r13, 0x10(%rsp)
1076
- movq %r8, (%rsp)
1077
- movq %r15, 0x18(%rsp)
1078
- curve25519_x25519_alt_innerloop:
981
+ xorl %r10d, %r10d
982
+ bts $0x3f, %r9
983
+ adcq %r10, %rax
984
+ imulq $0x13, %rax, %rax
985
+ addq %rax, %rdx
986
+ adcq %r10, %rcx
987
+ adcq %r10, %r8
988
+ adcq %r10, %r9
989
+ movl $0x13, %eax
990
+ cmovbq %r10, %rax
991
+ subq %rax, %rdx
992
+ sbbq %r10, %rcx
993
+ sbbq %r10, %r8
994
+ sbbq %r10, %r9
995
+ btr $0x3f, %r9
996
+ movq %rdx, 0x20(%rsp)
997
+ movq %rcx, 0x28(%rsp)
998
+ movq %r8, 0x30(%rsp)
999
+ movq %r9, 0x38(%rsp)
1079
1000
  xorl %eax, %eax
1001
+ movq %rax, 0x40(%rsp)
1002
+ movq %rax, 0x48(%rsp)
1003
+ movq %rax, 0x50(%rsp)
1004
+ movq %rax, 0x58(%rsp)
1005
+ movabsq $0xa0f99e2375022099, %rax
1006
+ movq %rax, 0x60(%rsp)
1007
+ movabsq $0xa8c68f3f1d132595, %rax
1008
+ movq %rax, 0x68(%rsp)
1009
+ movabsq $0x6c6c893805ac5242, %rax
1010
+ movq %rax, 0x70(%rsp)
1011
+ movabsq $0x276508b241770615, %rax
1012
+ movq %rax, 0x78(%rsp)
1013
+ movq $0xa, 0x90(%rsp)
1014
+ movq $0x1, 0x98(%rsp)
1015
+ jmp curve25519_x25519_alt_midloop
1016
+ curve25519_x25519_alt_inverseloop:
1017
+ movq %r8, %r9
1018
+ sarq $0x3f, %r9
1019
+ xorq %r9, %r8
1020
+ subq %r9, %r8
1021
+ movq %r10, %r11
1022
+ sarq $0x3f, %r11
1023
+ xorq %r11, %r10
1024
+ subq %r11, %r10
1025
+ movq %r12, %r13
1026
+ sarq $0x3f, %r13
1027
+ xorq %r13, %r12
1028
+ subq %r13, %r12
1029
+ movq %r14, %r15
1030
+ sarq $0x3f, %r15
1031
+ xorq %r15, %r14
1032
+ subq %r15, %r14
1033
+ movq %r8, %rax
1034
+ andq %r9, %rax
1035
+ movq %r10, %rdi
1036
+ andq %r11, %rdi
1037
+ addq %rax, %rdi
1038
+ movq %rdi, 0x80(%rsp)
1039
+ movq %r12, %rax
1040
+ andq %r13, %rax
1041
+ movq %r14, %rsi
1042
+ andq %r15, %rsi
1043
+ addq %rax, %rsi
1044
+ movq %rsi, 0x88(%rsp)
1080
1045
  xorl %ebx, %ebx
1081
- xorq %r8, %r8
1082
- xorq %r15, %r15
1083
- btq $0x0, %r14
1084
- cmovbq %rbp, %rax
1085
- cmovbq %rsi, %rbx
1086
- cmovbq %rcx, %r8
1087
- cmovbq %rdx, %r15
1088
- movq %r14, %r13
1089
- subq %rbx, %r14
1090
- subq %r13, %rbx
1091
- movq %r12, %rdi
1092
- subq %rax, %rdi
1093
- cmovbq %r12, %rbp
1094
- leaq -0x1(%rdi), %r12
1095
- cmovbq %rbx, %r14
1096
- cmovbq %r13, %rsi
1097
- notq %r12
1098
- cmovbq %r10, %rcx
1099
- cmovbq %r11, %rdx
1100
- cmovaeq %rdi, %r12
1101
- shrq $1, %r14
1102
- addq %r8, %r10
1103
- addq %r15, %r11
1104
- shrq $1, %r12
1105
- addq %rcx, %rcx
1106
- addq %rdx, %rdx
1107
- decq %r9
1108
- jne curve25519_x25519_alt_innerloop
1109
- movq 0x8(%rsp), %rdi
1110
- movq 0x10(%rsp), %r13
1111
- movq (%rsp), %r8
1112
- movq 0x18(%rsp), %r15
1113
- movq %r10, (%rsp)
1114
- movq %r11, 0x8(%rsp)
1115
- movq %rcx, 0x10(%rsp)
1116
- movq %rdx, 0x18(%rsp)
1117
- movq 0x38(%rsp), %r8
1118
- movq 0x40(%rsp), %r15
1119
- xorq %r14, %r14
1120
- xorq %rsi, %rsi
1121
- xorq %r10, %r10
1122
- xorq %r11, %r11
1123
- xorq %r9, %r9
1124
- curve25519_x25519_alt_congloop:
1125
- movq (%r8,%r9,8), %rcx
1126
1046
  movq (%rsp), %rax
1127
- mulq %rcx
1128
- addq %rax, %r14
1129
- adcq $0x0, %rdx
1130
- movq %rdx, %r12
1131
- movq 0x10(%rsp), %rax
1132
- mulq %rcx
1047
+ xorq %r9, %rax
1048
+ mulq %r8
1049
+ addq %rax, %rdi
1050
+ adcq %rdx, %rbx
1051
+ movq 0x20(%rsp), %rax
1052
+ xorq %r11, %rax
1053
+ mulq %r10
1054
+ addq %rax, %rdi
1055
+ adcq %rdx, %rbx
1056
+ xorl %ebp, %ebp
1057
+ movq (%rsp), %rax
1058
+ xorq %r13, %rax
1059
+ mulq %r12
1133
1060
  addq %rax, %rsi
1134
- adcq $0x0, %rdx
1135
- movq %rdx, %rbp
1136
- movq (%r15,%r9,8), %rcx
1061
+ adcq %rdx, %rbp
1062
+ movq 0x20(%rsp), %rax
1063
+ xorq %r15, %rax
1064
+ mulq %r14
1065
+ addq %rax, %rsi
1066
+ adcq %rdx, %rbp
1067
+ xorl %ecx, %ecx
1137
1068
  movq 0x8(%rsp), %rax
1138
- mulq %rcx
1139
- addq %rax, %r14
1140
- adcq %rdx, %r12
1141
- shrdq $0x3a, %r14, %r10
1142
- movq %r10, (%r8,%r9,8)
1143
- movq %r14, %r10
1144
- movq %r12, %r14
1069
+ xorq %r9, %rax
1070
+ mulq %r8
1071
+ addq %rax, %rbx
1072
+ adcq %rdx, %rcx
1073
+ movq 0x28(%rsp), %rax
1074
+ xorq %r11, %rax
1075
+ mulq %r10
1076
+ addq %rax, %rbx
1077
+ adcq %rdx, %rcx
1078
+ shrdq $0x3b, %rbx, %rdi
1079
+ movq %rdi, (%rsp)
1080
+ xorl %edi, %edi
1081
+ movq 0x8(%rsp), %rax
1082
+ xorq %r13, %rax
1083
+ mulq %r12
1084
+ addq %rax, %rbp
1085
+ adcq %rdx, %rdi
1086
+ movq 0x28(%rsp), %rax
1087
+ xorq %r15, %rax
1088
+ mulq %r14
1089
+ addq %rax, %rbp
1090
+ adcq %rdx, %rdi
1091
+ shrdq $0x3b, %rbp, %rsi
1092
+ movq %rsi, 0x20(%rsp)
1093
+ xorl %esi, %esi
1094
+ movq 0x10(%rsp), %rax
1095
+ xorq %r9, %rax
1096
+ mulq %r8
1097
+ addq %rax, %rcx
1098
+ adcq %rdx, %rsi
1099
+ movq 0x30(%rsp), %rax
1100
+ xorq %r11, %rax
1101
+ mulq %r10
1102
+ addq %rax, %rcx
1103
+ adcq %rdx, %rsi
1104
+ shrdq $0x3b, %rcx, %rbx
1105
+ movq %rbx, 0x8(%rsp)
1106
+ xorl %ebx, %ebx
1107
+ movq 0x10(%rsp), %rax
1108
+ xorq %r13, %rax
1109
+ mulq %r12
1110
+ addq %rax, %rdi
1111
+ adcq %rdx, %rbx
1112
+ movq 0x30(%rsp), %rax
1113
+ xorq %r15, %rax
1114
+ mulq %r14
1115
+ addq %rax, %rdi
1116
+ adcq %rdx, %rbx
1117
+ shrdq $0x3b, %rdi, %rbp
1118
+ movq %rbp, 0x28(%rsp)
1145
1119
  movq 0x18(%rsp), %rax
1146
- mulq %rcx
1120
+ xorq %r9, %rax
1121
+ movq %rax, %rbp
1122
+ sarq $0x3f, %rbp
1123
+ andq %r8, %rbp
1124
+ negq %rbp
1125
+ mulq %r8
1147
1126
  addq %rax, %rsi
1148
1127
  adcq %rdx, %rbp
1149
- shrdq $0x3a, %rsi, %r11
1150
- movq %r11, (%r15,%r9,8)
1151
- movq %rsi, %r11
1152
- movq %rbp, %rsi
1153
- incq %r9
1154
- cmpq %rdi, %r9
1155
- jb curve25519_x25519_alt_congloop
1156
- shldq $0x6, %r10, %r14
1157
- shldq $0x6, %r11, %rsi
1158
- movq 0x48(%rsp), %r15
1159
- movq (%r8), %rbx
1160
- movq 0x28(%rsp), %r12
1161
- imulq %rbx, %r12
1162
- movq (%r15), %rax
1128
+ movq 0x38(%rsp), %rax
1129
+ xorq %r11, %rax
1130
+ movq %rax, %rdx
1131
+ sarq $0x3f, %rdx
1132
+ andq %r10, %rdx
1133
+ subq %rdx, %rbp
1134
+ mulq %r10
1135
+ addq %rax, %rsi
1136
+ adcq %rdx, %rbp
1137
+ shrdq $0x3b, %rsi, %rcx
1138
+ movq %rcx, 0x10(%rsp)
1139
+ shrdq $0x3b, %rbp, %rsi
1140
+ movq 0x18(%rsp), %rax
1141
+ movq %rsi, 0x18(%rsp)
1142
+ xorq %r13, %rax
1143
+ movq %rax, %rsi
1144
+ sarq $0x3f, %rsi
1145
+ andq %r12, %rsi
1146
+ negq %rsi
1163
1147
  mulq %r12
1164
- addq %rbx, %rax
1165
- movq %rdx, %r10
1166
- movl $0x1, %r9d
1167
- movq %rdi, %rcx
1168
- decq %rcx
1169
- je curve25519_x25519_alt_wmontend
1170
- curve25519_x25519_alt_wmontloop:
1171
- adcq (%r8,%r9,8), %r10
1172
- sbbq %rbx, %rbx
1173
- movq (%r15,%r9,8), %rax
1148
+ addq %rax, %rbx
1149
+ adcq %rdx, %rsi
1150
+ movq 0x38(%rsp), %rax
1151
+ xorq %r15, %rax
1152
+ movq %rax, %rdx
1153
+ sarq $0x3f, %rdx
1154
+ andq %r14, %rdx
1155
+ subq %rdx, %rsi
1156
+ mulq %r14
1157
+ addq %rax, %rbx
1158
+ adcq %rdx, %rsi
1159
+ shrdq $0x3b, %rbx, %rdi
1160
+ movq %rdi, 0x30(%rsp)
1161
+ shrdq $0x3b, %rsi, %rbx
1162
+ movq %rbx, 0x38(%rsp)
1163
+ movq 0x80(%rsp), %rbx
1164
+ movq 0x88(%rsp), %rbp
1165
+ xorl %ecx, %ecx
1166
+ movq 0x40(%rsp), %rax
1167
+ xorq %r9, %rax
1168
+ mulq %r8
1169
+ addq %rax, %rbx
1170
+ adcq %rdx, %rcx
1171
+ movq 0x60(%rsp), %rax
1172
+ xorq %r11, %rax
1173
+ mulq %r10
1174
+ addq %rax, %rbx
1175
+ adcq %rdx, %rcx
1176
+ xorl %esi, %esi
1177
+ movq 0x40(%rsp), %rax
1178
+ xorq %r13, %rax
1174
1179
  mulq %r12
1175
- subq %rbx, %rdx
1176
- addq %r10, %rax
1177
- movq %rax, -0x8(%r8,%r9,8)
1178
- movq %rdx, %r10
1179
- incq %r9
1180
- decq %rcx
1181
- jne curve25519_x25519_alt_wmontloop
1182
- curve25519_x25519_alt_wmontend:
1183
- adcq %r14, %r10
1184
- movq %r10, -0x8(%r8,%rdi,8)
1185
- sbbq %r10, %r10
1186
- negq %r10
1187
- movq %rdi, %rcx
1188
- xorq %r9, %r9
1189
- curve25519_x25519_alt_wcmploop:
1190
- movq (%r8,%r9,8), %rax
1191
- sbbq (%r15,%r9,8), %rax
1192
- incq %r9
1193
- decq %rcx
1194
- jne curve25519_x25519_alt_wcmploop
1195
- sbbq $0x0, %r10
1196
- sbbq %r10, %r10
1197
- notq %r10
1198
- xorq %rcx, %rcx
1199
- xorq %r9, %r9
1200
- curve25519_x25519_alt_wcorrloop:
1201
- movq (%r8,%r9,8), %rax
1202
- movq (%r15,%r9,8), %rbx
1203
- andq %r10, %rbx
1204
- negq %rcx
1205
- sbbq %rbx, %rax
1206
- sbbq %rcx, %rcx
1207
- movq %rax, (%r8,%r9,8)
1208
- incq %r9
1209
- cmpq %rdi, %r9
1210
- jb curve25519_x25519_alt_wcorrloop
1180
+ movq %rbx, 0x40(%rsp)
1181
+ addq %rax, %rbp
1182
+ adcq %rdx, %rsi
1183
+ movq 0x60(%rsp), %rax
1184
+ xorq %r15, %rax
1185
+ mulq %r14
1186
+ addq %rax, %rbp
1187
+ adcq %rdx, %rsi
1188
+ movq %rbp, 0x60(%rsp)
1189
+ xorl %ebx, %ebx
1190
+ movq 0x48(%rsp), %rax
1191
+ xorq %r9, %rax
1192
+ mulq %r8
1193
+ addq %rax, %rcx
1194
+ adcq %rdx, %rbx
1195
+ movq 0x68(%rsp), %rax
1196
+ xorq %r11, %rax
1197
+ mulq %r10
1198
+ addq %rax, %rcx
1199
+ adcq %rdx, %rbx
1200
+ xorl %ebp, %ebp
1201
+ movq 0x48(%rsp), %rax
1202
+ xorq %r13, %rax
1203
+ mulq %r12
1204
+ movq %rcx, 0x48(%rsp)
1205
+ addq %rax, %rsi
1206
+ adcq %rdx, %rbp
1207
+ movq 0x68(%rsp), %rax
1208
+ xorq %r15, %rax
1209
+ mulq %r14
1210
+ addq %rax, %rsi
1211
+ adcq %rdx, %rbp
1212
+ movq %rsi, 0x68(%rsp)
1213
+ xorl %ecx, %ecx
1214
+ movq 0x50(%rsp), %rax
1215
+ xorq %r9, %rax
1216
+ mulq %r8
1217
+ addq %rax, %rbx
1218
+ adcq %rdx, %rcx
1219
+ movq 0x70(%rsp), %rax
1220
+ xorq %r11, %rax
1221
+ mulq %r10
1222
+ addq %rax, %rbx
1223
+ adcq %rdx, %rcx
1224
+ xorl %esi, %esi
1225
+ movq 0x50(%rsp), %rax
1226
+ xorq %r13, %rax
1227
+ mulq %r12
1228
+ movq %rbx, 0x50(%rsp)
1229
+ addq %rax, %rbp
1230
+ adcq %rdx, %rsi
1231
+ movq 0x70(%rsp), %rax
1232
+ xorq %r15, %rax
1233
+ mulq %r14
1234
+ addq %rax, %rbp
1235
+ adcq %rdx, %rsi
1236
+ movq %rbp, 0x70(%rsp)
1237
+ movq 0x58(%rsp), %rax
1238
+ xorq %r9, %rax
1239
+ movq %r9, %rbx
1240
+ andq %r8, %rbx
1241
+ negq %rbx
1242
+ mulq %r8
1243
+ addq %rax, %rcx
1244
+ adcq %rdx, %rbx
1245
+ movq 0x78(%rsp), %rax
1246
+ xorq %r11, %rax
1247
+ movq %r11, %rdx
1248
+ andq %r10, %rdx
1249
+ subq %rdx, %rbx
1250
+ mulq %r10
1251
+ addq %rax, %rcx
1252
+ adcq %rbx, %rdx
1253
+ movq %rdx, %rbx
1254
+ shldq $0x1, %rcx, %rdx
1255
+ sarq $0x3f, %rbx
1256
+ addq %rbx, %rdx
1257
+ movl $0x13, %eax
1258
+ imulq %rdx
1211
1259
  movq 0x40(%rsp), %r8
1212
- movq (%r8), %rbx
1213
- movq 0x28(%rsp), %rbp
1214
- imulq %rbx, %rbp
1215
- movq (%r15), %rax
1216
- mulq %rbp
1217
- addq %rbx, %rax
1218
- movq %rdx, %r11
1219
- movl $0x1, %r9d
1220
- movq %rdi, %rcx
1221
- decq %rcx
1222
- je curve25519_x25519_alt_zmontend
1223
- curve25519_x25519_alt_zmontloop:
1224
- adcq (%r8,%r9,8), %r11
1225
- sbbq %rbx, %rbx
1226
- movq (%r15,%r9,8), %rax
1227
- mulq %rbp
1228
- subq %rbx, %rdx
1229
- addq %r11, %rax
1230
- movq %rax, -0x8(%r8,%r9,8)
1231
- movq %rdx, %r11
1232
- incq %r9
1233
- decq %rcx
1234
- jne curve25519_x25519_alt_zmontloop
1235
- curve25519_x25519_alt_zmontend:
1236
- adcq %rsi, %r11
1237
- movq %r11, -0x8(%r8,%rdi,8)
1238
- sbbq %r11, %r11
1239
- negq %r11
1240
- movq %rdi, %rcx
1241
- xorq %r9, %r9
1242
- curve25519_x25519_alt_zcmploop:
1243
- movq (%r8,%r9,8), %rax
1244
- sbbq (%r15,%r9,8), %rax
1245
- incq %r9
1246
- decq %rcx
1247
- jne curve25519_x25519_alt_zcmploop
1248
- sbbq $0x0, %r11
1249
- sbbq %r11, %r11
1250
- notq %r11
1251
- xorq %rcx, %rcx
1252
- xorq %r9, %r9
1253
- curve25519_x25519_alt_zcorrloop:
1254
- movq (%r8,%r9,8), %rax
1255
- movq (%r15,%r9,8), %rbx
1256
- andq %r11, %rbx
1260
+ addq %rax, %r8
1261
+ movq %r8, 0x40(%rsp)
1262
+ movq 0x48(%rsp), %r8
1263
+ adcq %rdx, %r8
1264
+ movq %r8, 0x48(%rsp)
1265
+ movq 0x50(%rsp), %r8
1266
+ adcq %rbx, %r8
1267
+ movq %r8, 0x50(%rsp)
1268
+ adcq %rbx, %rcx
1269
+ shlq $0x3f, %rax
1270
+ addq %rax, %rcx
1271
+ movq 0x58(%rsp), %rax
1272
+ movq %rcx, 0x58(%rsp)
1273
+ xorq %r13, %rax
1274
+ movq %r13, %rcx
1275
+ andq %r12, %rcx
1257
1276
  negq %rcx
1258
- sbbq %rbx, %rax
1259
- sbbq %rcx, %rcx
1260
- movq %rax, (%r8,%r9,8)
1261
- incq %r9
1262
- cmpq %rdi, %r9
1263
- jb curve25519_x25519_alt_zcorrloop
1264
- movq 0x30(%rsp), %r8
1265
- leaq (%r8,%rdi,8), %r15
1266
- xorq %r9, %r9
1267
- xorq %r12, %r12
1268
- xorq %r14, %r14
1269
- xorq %rbp, %rbp
1270
- xorq %rsi, %rsi
1271
- curve25519_x25519_alt_crossloop:
1272
- movq (%r8,%r9,8), %rcx
1273
- movq (%rsp), %rax
1274
- mulq %rcx
1275
- addq %rax, %r14
1276
- adcq $0x0, %rdx
1277
- movq %rdx, %r10
1278
- movq 0x10(%rsp), %rax
1279
- mulq %rcx
1277
+ mulq %r12
1280
1278
  addq %rax, %rsi
1281
- adcq $0x0, %rdx
1282
- movq %rdx, %r11
1283
- movq (%r15,%r9,8), %rcx
1284
- movq 0x8(%rsp), %rax
1285
- mulq %rcx
1286
- subq %r12, %rdx
1287
- subq %rax, %r14
1288
- sbbq %rdx, %r10
1289
- sbbq %r12, %r12
1290
- movq %r14, (%r8,%r9,8)
1291
- movq %r10, %r14
1292
- movq 0x18(%rsp), %rax
1293
- mulq %rcx
1294
- subq %rbp, %rdx
1279
+ adcq %rdx, %rcx
1280
+ movq 0x78(%rsp), %rax
1281
+ xorq %r15, %rax
1282
+ movq %r15, %rdx
1283
+ andq %r14, %rdx
1284
+ subq %rdx, %rcx
1285
+ mulq %r14
1286
+ addq %rax, %rsi
1287
+ adcq %rcx, %rdx
1288
+ movq %rdx, %rcx
1289
+ shldq $0x1, %rsi, %rdx
1290
+ sarq $0x3f, %rcx
1291
+ movl $0x13, %eax
1292
+ addq %rcx, %rdx
1293
+ imulq %rdx
1294
+ movq 0x60(%rsp), %r8
1295
+ addq %rax, %r8
1296
+ movq %r8, 0x60(%rsp)
1297
+ movq 0x68(%rsp), %r8
1298
+ adcq %rdx, %r8
1299
+ movq %r8, 0x68(%rsp)
1300
+ movq 0x70(%rsp), %r8
1301
+ adcq %rcx, %r8
1302
+ movq %r8, 0x70(%rsp)
1303
+ adcq %rcx, %rsi
1304
+ shlq $0x3f, %rax
1305
+ addq %rax, %rsi
1306
+ movq %rsi, 0x78(%rsp)
1307
+ curve25519_x25519_alt_midloop:
1308
+ movq 0x98(%rsp), %rsi
1309
+ movq (%rsp), %rdx
1310
+ movq 0x20(%rsp), %rcx
1311
+ movq %rdx, %rbx
1312
+ andq $0xfffff, %rbx
1313
+ movabsq $0xfffffe0000000000, %rax
1314
+ orq %rax, %rbx
1315
+ andq $0xfffff, %rcx
1316
+ movabsq $0xc000000000000000, %rax
1317
+ orq %rax, %rcx
1318
+ movq $0xfffffffffffffffe, %rax
1319
+ xorl %ebp, %ebp
1320
+ movl $0x2, %edx
1321
+ movq %rbx, %rdi
1322
+ movq %rax, %r8
1323
+ testq %rsi, %rsi
1324
+ cmovs %rbp, %r8
1325
+ testq $0x1, %rcx
1326
+ cmoveq %rbp, %r8
1327
+ cmoveq %rbp, %rdi
1328
+ xorq %r8, %rdi
1329
+ xorq %r8, %rsi
1330
+ btq $0x3f, %r8
1331
+ cmovbq %rcx, %rbx
1332
+ movq %rax, %r8
1295
1333
  subq %rax, %rsi
1296
- sbbq %rdx, %r11
1297
- sbbq %rbp, %rbp
1298
- movq %rsi, (%r15,%r9,8)
1299
- movq %r11, %rsi
1300
- incq %r9
1301
- cmpq %r13, %r9
1302
- jb curve25519_x25519_alt_crossloop
1303
- xorq %r9, %r9
1304
- movq %r12, %r10
1305
- movq %rbp, %r11
1306
- xorq %r12, %r14
1307
- xorq %rbp, %rsi
1308
- curve25519_x25519_alt_optnegloop:
1309
- movq (%r8,%r9,8), %rax
1310
- xorq %r12, %rax
1311
- negq %r10
1312
- adcq $0x0, %rax
1313
- sbbq %r10, %r10
1314
- movq %rax, (%r8,%r9,8)
1315
- movq (%r15,%r9,8), %rax
1316
- xorq %rbp, %rax
1317
- negq %r11
1318
- adcq $0x0, %rax
1319
- sbbq %r11, %r11
1320
- movq %rax, (%r15,%r9,8)
1321
- incq %r9
1322
- cmpq %r13, %r9
1323
- jb curve25519_x25519_alt_optnegloop
1324
- subq %r10, %r14
1325
- subq %r11, %rsi
1326
- movq %r13, %r9
1327
- curve25519_x25519_alt_shiftloop:
1328
- movq -0x8(%r8,%r9,8), %rax
1329
- movq %rax, %r10
1330
- shrdq $0x3a, %r14, %rax
1331
- movq %rax, -0x8(%r8,%r9,8)
1332
- movq %r10, %r14
1333
- movq -0x8(%r15,%r9,8), %rax
1334
- movq %rax, %r11
1335
- shrdq $0x3a, %rsi, %rax
1336
- movq %rax, -0x8(%r15,%r9,8)
1337
- movq %r11, %rsi
1338
- decq %r9
1339
- jne curve25519_x25519_alt_shiftloop
1340
- notq %rbp
1341
- movq 0x48(%rsp), %rcx
1342
- movq 0x38(%rsp), %r8
1343
- movq 0x40(%rsp), %r15
1344
- movq %r12, %r10
1345
- movq %rbp, %r11
1346
- xorq %r9, %r9
1347
- curve25519_x25519_alt_fliploop:
1348
- movq %rbp, %rdx
1349
- movq (%rcx,%r9,8), %rax
1350
- andq %rax, %rdx
1351
- andq %r12, %rax
1352
- movq (%r8,%r9,8), %rbx
1353
- xorq %r12, %rbx
1354
- negq %r10
1355
- adcq %rbx, %rax
1356
- sbbq %r10, %r10
1357
- movq %rax, (%r8,%r9,8)
1358
- movq (%r15,%r9,8), %rbx
1359
- xorq %rbp, %rbx
1360
- negq %r11
1361
- adcq %rbx, %rdx
1362
- sbbq %r11, %r11
1363
- movq %rdx, (%r15,%r9,8)
1364
- incq %r9
1365
- cmpq %rdi, %r9
1366
- jb curve25519_x25519_alt_fliploop
1367
- subq $0x3a, 0x20(%rsp)
1368
- ja curve25519_x25519_alt_outerloop
1334
+ leaq (%rcx,%rdi), %rcx
1335
+ cmovs %rbp, %r8
1336
+ movq %rbx, %rdi
1337
+ testq %rdx, %rcx
1338
+ cmoveq %rbp, %r8
1339
+ cmoveq %rbp, %rdi
1340
+ sarq $1, %rcx
1341
+ xorq %r8, %rdi
1342
+ xorq %r8, %rsi
1343
+ btq $0x3f, %r8
1344
+ cmovbq %rcx, %rbx
1345
+ movq %rax, %r8
1346
+ subq %rax, %rsi
1347
+ leaq (%rcx,%rdi), %rcx
1348
+ cmovs %rbp, %r8
1349
+ movq %rbx, %rdi
1350
+ testq %rdx, %rcx
1351
+ cmoveq %rbp, %r8
1352
+ cmoveq %rbp, %rdi
1353
+ sarq $1, %rcx
1354
+ xorq %r8, %rdi
1355
+ xorq %r8, %rsi
1356
+ btq $0x3f, %r8
1357
+ cmovbq %rcx, %rbx
1358
+ movq %rax, %r8
1359
+ subq %rax, %rsi
1360
+ leaq (%rcx,%rdi), %rcx
1361
+ cmovs %rbp, %r8
1362
+ movq %rbx, %rdi
1363
+ testq %rdx, %rcx
1364
+ cmoveq %rbp, %r8
1365
+ cmoveq %rbp, %rdi
1366
+ sarq $1, %rcx
1367
+ xorq %r8, %rdi
1368
+ xorq %r8, %rsi
1369
+ btq $0x3f, %r8
1370
+ cmovbq %rcx, %rbx
1371
+ movq %rax, %r8
1372
+ subq %rax, %rsi
1373
+ leaq (%rcx,%rdi), %rcx
1374
+ cmovs %rbp, %r8
1375
+ movq %rbx, %rdi
1376
+ testq %rdx, %rcx
1377
+ cmoveq %rbp, %r8
1378
+ cmoveq %rbp, %rdi
1379
+ sarq $1, %rcx
1380
+ xorq %r8, %rdi
1381
+ xorq %r8, %rsi
1382
+ btq $0x3f, %r8
1383
+ cmovbq %rcx, %rbx
1384
+ movq %rax, %r8
1385
+ subq %rax, %rsi
1386
+ leaq (%rcx,%rdi), %rcx
1387
+ cmovs %rbp, %r8
1388
+ movq %rbx, %rdi
1389
+ testq %rdx, %rcx
1390
+ cmoveq %rbp, %r8
1391
+ cmoveq %rbp, %rdi
1392
+ sarq $1, %rcx
1393
+ xorq %r8, %rdi
1394
+ xorq %r8, %rsi
1395
+ btq $0x3f, %r8
1396
+ cmovbq %rcx, %rbx
1397
+ movq %rax, %r8
1398
+ subq %rax, %rsi
1399
+ leaq (%rcx,%rdi), %rcx
1400
+ cmovs %rbp, %r8
1401
+ movq %rbx, %rdi
1402
+ testq %rdx, %rcx
1403
+ cmoveq %rbp, %r8
1404
+ cmoveq %rbp, %rdi
1405
+ sarq $1, %rcx
1406
+ xorq %r8, %rdi
1407
+ xorq %r8, %rsi
1408
+ btq $0x3f, %r8
1409
+ cmovbq %rcx, %rbx
1410
+ movq %rax, %r8
1411
+ subq %rax, %rsi
1412
+ leaq (%rcx,%rdi), %rcx
1413
+ cmovs %rbp, %r8
1414
+ movq %rbx, %rdi
1415
+ testq %rdx, %rcx
1416
+ cmoveq %rbp, %r8
1417
+ cmoveq %rbp, %rdi
1418
+ sarq $1, %rcx
1419
+ xorq %r8, %rdi
1420
+ xorq %r8, %rsi
1421
+ btq $0x3f, %r8
1422
+ cmovbq %rcx, %rbx
1423
+ movq %rax, %r8
1424
+ subq %rax, %rsi
1425
+ leaq (%rcx,%rdi), %rcx
1426
+ cmovs %rbp, %r8
1427
+ movq %rbx, %rdi
1428
+ testq %rdx, %rcx
1429
+ cmoveq %rbp, %r8
1430
+ cmoveq %rbp, %rdi
1431
+ sarq $1, %rcx
1432
+ xorq %r8, %rdi
1433
+ xorq %r8, %rsi
1434
+ btq $0x3f, %r8
1435
+ cmovbq %rcx, %rbx
1436
+ movq %rax, %r8
1437
+ subq %rax, %rsi
1438
+ leaq (%rcx,%rdi), %rcx
1439
+ cmovs %rbp, %r8
1440
+ movq %rbx, %rdi
1441
+ testq %rdx, %rcx
1442
+ cmoveq %rbp, %r8
1443
+ cmoveq %rbp, %rdi
1444
+ sarq $1, %rcx
1445
+ xorq %r8, %rdi
1446
+ xorq %r8, %rsi
1447
+ btq $0x3f, %r8
1448
+ cmovbq %rcx, %rbx
1449
+ movq %rax, %r8
1450
+ subq %rax, %rsi
1451
+ leaq (%rcx,%rdi), %rcx
1452
+ cmovs %rbp, %r8
1453
+ movq %rbx, %rdi
1454
+ testq %rdx, %rcx
1455
+ cmoveq %rbp, %r8
1456
+ cmoveq %rbp, %rdi
1457
+ sarq $1, %rcx
1458
+ xorq %r8, %rdi
1459
+ xorq %r8, %rsi
1460
+ btq $0x3f, %r8
1461
+ cmovbq %rcx, %rbx
1462
+ movq %rax, %r8
1463
+ subq %rax, %rsi
1464
+ leaq (%rcx,%rdi), %rcx
1465
+ cmovs %rbp, %r8
1466
+ movq %rbx, %rdi
1467
+ testq %rdx, %rcx
1468
+ cmoveq %rbp, %r8
1469
+ cmoveq %rbp, %rdi
1470
+ sarq $1, %rcx
1471
+ xorq %r8, %rdi
1472
+ xorq %r8, %rsi
1473
+ btq $0x3f, %r8
1474
+ cmovbq %rcx, %rbx
1475
+ movq %rax, %r8
1476
+ subq %rax, %rsi
1477
+ leaq (%rcx,%rdi), %rcx
1478
+ cmovs %rbp, %r8
1479
+ movq %rbx, %rdi
1480
+ testq %rdx, %rcx
1481
+ cmoveq %rbp, %r8
1482
+ cmoveq %rbp, %rdi
1483
+ sarq $1, %rcx
1484
+ xorq %r8, %rdi
1485
+ xorq %r8, %rsi
1486
+ btq $0x3f, %r8
1487
+ cmovbq %rcx, %rbx
1488
+ movq %rax, %r8
1489
+ subq %rax, %rsi
1490
+ leaq (%rcx,%rdi), %rcx
1491
+ cmovs %rbp, %r8
1492
+ movq %rbx, %rdi
1493
+ testq %rdx, %rcx
1494
+ cmoveq %rbp, %r8
1495
+ cmoveq %rbp, %rdi
1496
+ sarq $1, %rcx
1497
+ xorq %r8, %rdi
1498
+ xorq %r8, %rsi
1499
+ btq $0x3f, %r8
1500
+ cmovbq %rcx, %rbx
1501
+ movq %rax, %r8
1502
+ subq %rax, %rsi
1503
+ leaq (%rcx,%rdi), %rcx
1504
+ cmovs %rbp, %r8
1505
+ movq %rbx, %rdi
1506
+ testq %rdx, %rcx
1507
+ cmoveq %rbp, %r8
1508
+ cmoveq %rbp, %rdi
1509
+ sarq $1, %rcx
1510
+ xorq %r8, %rdi
1511
+ xorq %r8, %rsi
1512
+ btq $0x3f, %r8
1513
+ cmovbq %rcx, %rbx
1514
+ movq %rax, %r8
1515
+ subq %rax, %rsi
1516
+ leaq (%rcx,%rdi), %rcx
1517
+ cmovs %rbp, %r8
1518
+ movq %rbx, %rdi
1519
+ testq %rdx, %rcx
1520
+ cmoveq %rbp, %r8
1521
+ cmoveq %rbp, %rdi
1522
+ sarq $1, %rcx
1523
+ xorq %r8, %rdi
1524
+ xorq %r8, %rsi
1525
+ btq $0x3f, %r8
1526
+ cmovbq %rcx, %rbx
1527
+ movq %rax, %r8
1528
+ subq %rax, %rsi
1529
+ leaq (%rcx,%rdi), %rcx
1530
+ cmovs %rbp, %r8
1531
+ movq %rbx, %rdi
1532
+ testq %rdx, %rcx
1533
+ cmoveq %rbp, %r8
1534
+ cmoveq %rbp, %rdi
1535
+ sarq $1, %rcx
1536
+ xorq %r8, %rdi
1537
+ xorq %r8, %rsi
1538
+ btq $0x3f, %r8
1539
+ cmovbq %rcx, %rbx
1540
+ movq %rax, %r8
1541
+ subq %rax, %rsi
1542
+ leaq (%rcx,%rdi), %rcx
1543
+ cmovs %rbp, %r8
1544
+ movq %rbx, %rdi
1545
+ testq %rdx, %rcx
1546
+ cmoveq %rbp, %r8
1547
+ cmoveq %rbp, %rdi
1548
+ sarq $1, %rcx
1549
+ xorq %r8, %rdi
1550
+ xorq %r8, %rsi
1551
+ btq $0x3f, %r8
1552
+ cmovbq %rcx, %rbx
1553
+ movq %rax, %r8
1554
+ subq %rax, %rsi
1555
+ leaq (%rcx,%rdi), %rcx
1556
+ cmovs %rbp, %r8
1557
+ movq %rbx, %rdi
1558
+ testq %rdx, %rcx
1559
+ cmoveq %rbp, %r8
1560
+ cmoveq %rbp, %rdi
1561
+ sarq $1, %rcx
1562
+ xorq %r8, %rdi
1563
+ xorq %r8, %rsi
1564
+ btq $0x3f, %r8
1565
+ cmovbq %rcx, %rbx
1566
+ movq %rax, %r8
1567
+ subq %rax, %rsi
1568
+ leaq (%rcx,%rdi), %rcx
1569
+ cmovs %rbp, %r8
1570
+ movq %rbx, %rdi
1571
+ testq %rdx, %rcx
1572
+ cmoveq %rbp, %r8
1573
+ cmoveq %rbp, %rdi
1574
+ sarq $1, %rcx
1575
+ xorq %r8, %rdi
1576
+ xorq %r8, %rsi
1577
+ btq $0x3f, %r8
1578
+ cmovbq %rcx, %rbx
1579
+ movq %rax, %r8
1580
+ subq %rax, %rsi
1581
+ leaq (%rcx,%rdi), %rcx
1582
+ sarq $1, %rcx
1583
+ movl $0x100000, %eax
1584
+ leaq (%rbx,%rax), %rdx
1585
+ leaq (%rcx,%rax), %rdi
1586
+ shlq $0x16, %rdx
1587
+ shlq $0x16, %rdi
1588
+ sarq $0x2b, %rdx
1589
+ sarq $0x2b, %rdi
1590
+ movabsq $0x20000100000, %rax
1591
+ leaq (%rbx,%rax), %rbx
1592
+ leaq (%rcx,%rax), %rcx
1593
+ sarq $0x2a, %rbx
1594
+ sarq $0x2a, %rcx
1595
+ movq %rdx, 0xa0(%rsp)
1596
+ movq %rbx, 0xa8(%rsp)
1597
+ movq %rdi, 0xb0(%rsp)
1598
+ movq %rcx, 0xb8(%rsp)
1599
+ movq (%rsp), %r12
1600
+ imulq %r12, %rdi
1601
+ imulq %rdx, %r12
1602
+ movq 0x20(%rsp), %r13
1603
+ imulq %r13, %rbx
1604
+ imulq %rcx, %r13
1605
+ addq %rbx, %r12
1606
+ addq %rdi, %r13
1607
+ sarq $0x14, %r12
1608
+ sarq $0x14, %r13
1609
+ movq %r12, %rbx
1610
+ andq $0xfffff, %rbx
1611
+ movabsq $0xfffffe0000000000, %rax
1612
+ orq %rax, %rbx
1613
+ movq %r13, %rcx
1614
+ andq $0xfffff, %rcx
1615
+ movabsq $0xc000000000000000, %rax
1616
+ orq %rax, %rcx
1617
+ movq $0xfffffffffffffffe, %rax
1618
+ movl $0x2, %edx
1619
+ movq %rbx, %rdi
1620
+ movq %rax, %r8
1621
+ testq %rsi, %rsi
1622
+ cmovs %rbp, %r8
1623
+ testq $0x1, %rcx
1624
+ cmoveq %rbp, %r8
1625
+ cmoveq %rbp, %rdi
1626
+ xorq %r8, %rdi
1627
+ xorq %r8, %rsi
1628
+ btq $0x3f, %r8
1629
+ cmovbq %rcx, %rbx
1630
+ movq %rax, %r8
1631
+ subq %rax, %rsi
1632
+ leaq (%rcx,%rdi), %rcx
1633
+ cmovs %rbp, %r8
1634
+ movq %rbx, %rdi
1635
+ testq %rdx, %rcx
1636
+ cmoveq %rbp, %r8
1637
+ cmoveq %rbp, %rdi
1638
+ sarq $1, %rcx
1639
+ xorq %r8, %rdi
1640
+ xorq %r8, %rsi
1641
+ btq $0x3f, %r8
1642
+ cmovbq %rcx, %rbx
1643
+ movq %rax, %r8
1644
+ subq %rax, %rsi
1645
+ leaq (%rcx,%rdi), %rcx
1646
+ cmovs %rbp, %r8
1647
+ movq %rbx, %rdi
1648
+ testq %rdx, %rcx
1649
+ cmoveq %rbp, %r8
1650
+ cmoveq %rbp, %rdi
1651
+ sarq $1, %rcx
1652
+ xorq %r8, %rdi
1653
+ xorq %r8, %rsi
1654
+ btq $0x3f, %r8
1655
+ cmovbq %rcx, %rbx
1656
+ movq %rax, %r8
1657
+ subq %rax, %rsi
1658
+ leaq (%rcx,%rdi), %rcx
1659
+ cmovs %rbp, %r8
1660
+ movq %rbx, %rdi
1661
+ testq %rdx, %rcx
1662
+ cmoveq %rbp, %r8
1663
+ cmoveq %rbp, %rdi
1664
+ sarq $1, %rcx
1665
+ xorq %r8, %rdi
1666
+ xorq %r8, %rsi
1667
+ btq $0x3f, %r8
1668
+ cmovbq %rcx, %rbx
1669
+ movq %rax, %r8
1670
+ subq %rax, %rsi
1671
+ leaq (%rcx,%rdi), %rcx
1672
+ cmovs %rbp, %r8
1673
+ movq %rbx, %rdi
1674
+ testq %rdx, %rcx
1675
+ cmoveq %rbp, %r8
1676
+ cmoveq %rbp, %rdi
1677
+ sarq $1, %rcx
1678
+ xorq %r8, %rdi
1679
+ xorq %r8, %rsi
1680
+ btq $0x3f, %r8
1681
+ cmovbq %rcx, %rbx
1682
+ movq %rax, %r8
1683
+ subq %rax, %rsi
1684
+ leaq (%rcx,%rdi), %rcx
1685
+ cmovs %rbp, %r8
1686
+ movq %rbx, %rdi
1687
+ testq %rdx, %rcx
1688
+ cmoveq %rbp, %r8
1689
+ cmoveq %rbp, %rdi
1690
+ sarq $1, %rcx
1691
+ xorq %r8, %rdi
1692
+ xorq %r8, %rsi
1693
+ btq $0x3f, %r8
1694
+ cmovbq %rcx, %rbx
1695
+ movq %rax, %r8
1696
+ subq %rax, %rsi
1697
+ leaq (%rcx,%rdi), %rcx
1698
+ cmovs %rbp, %r8
1699
+ movq %rbx, %rdi
1700
+ testq %rdx, %rcx
1701
+ cmoveq %rbp, %r8
1702
+ cmoveq %rbp, %rdi
1703
+ sarq $1, %rcx
1704
+ xorq %r8, %rdi
1705
+ xorq %r8, %rsi
1706
+ btq $0x3f, %r8
1707
+ cmovbq %rcx, %rbx
1708
+ movq %rax, %r8
1709
+ subq %rax, %rsi
1710
+ leaq (%rcx,%rdi), %rcx
1711
+ cmovs %rbp, %r8
1712
+ movq %rbx, %rdi
1713
+ testq %rdx, %rcx
1714
+ cmoveq %rbp, %r8
1715
+ cmoveq %rbp, %rdi
1716
+ sarq $1, %rcx
1717
+ xorq %r8, %rdi
1718
+ xorq %r8, %rsi
1719
+ btq $0x3f, %r8
1720
+ cmovbq %rcx, %rbx
1721
+ movq %rax, %r8
1722
+ subq %rax, %rsi
1723
+ leaq (%rcx,%rdi), %rcx
1724
+ cmovs %rbp, %r8
1725
+ movq %rbx, %rdi
1726
+ testq %rdx, %rcx
1727
+ cmoveq %rbp, %r8
1728
+ cmoveq %rbp, %rdi
1729
+ sarq $1, %rcx
1730
+ xorq %r8, %rdi
1731
+ xorq %r8, %rsi
1732
+ btq $0x3f, %r8
1733
+ cmovbq %rcx, %rbx
1734
+ movq %rax, %r8
1735
+ subq %rax, %rsi
1736
+ leaq (%rcx,%rdi), %rcx
1737
+ cmovs %rbp, %r8
1738
+ movq %rbx, %rdi
1739
+ testq %rdx, %rcx
1740
+ cmoveq %rbp, %r8
1741
+ cmoveq %rbp, %rdi
1742
+ sarq $1, %rcx
1743
+ xorq %r8, %rdi
1744
+ xorq %r8, %rsi
1745
+ btq $0x3f, %r8
1746
+ cmovbq %rcx, %rbx
1747
+ movq %rax, %r8
1748
+ subq %rax, %rsi
1749
+ leaq (%rcx,%rdi), %rcx
1750
+ cmovs %rbp, %r8
1751
+ movq %rbx, %rdi
1752
+ testq %rdx, %rcx
1753
+ cmoveq %rbp, %r8
1754
+ cmoveq %rbp, %rdi
1755
+ sarq $1, %rcx
1756
+ xorq %r8, %rdi
1757
+ xorq %r8, %rsi
1758
+ btq $0x3f, %r8
1759
+ cmovbq %rcx, %rbx
1760
+ movq %rax, %r8
1761
+ subq %rax, %rsi
1762
+ leaq (%rcx,%rdi), %rcx
1763
+ cmovs %rbp, %r8
1764
+ movq %rbx, %rdi
1765
+ testq %rdx, %rcx
1766
+ cmoveq %rbp, %r8
1767
+ cmoveq %rbp, %rdi
1768
+ sarq $1, %rcx
1769
+ xorq %r8, %rdi
1770
+ xorq %r8, %rsi
1771
+ btq $0x3f, %r8
1772
+ cmovbq %rcx, %rbx
1773
+ movq %rax, %r8
1774
+ subq %rax, %rsi
1775
+ leaq (%rcx,%rdi), %rcx
1776
+ cmovs %rbp, %r8
1777
+ movq %rbx, %rdi
1778
+ testq %rdx, %rcx
1779
+ cmoveq %rbp, %r8
1780
+ cmoveq %rbp, %rdi
1781
+ sarq $1, %rcx
1782
+ xorq %r8, %rdi
1783
+ xorq %r8, %rsi
1784
+ btq $0x3f, %r8
1785
+ cmovbq %rcx, %rbx
1786
+ movq %rax, %r8
1787
+ subq %rax, %rsi
1788
+ leaq (%rcx,%rdi), %rcx
1789
+ cmovs %rbp, %r8
1790
+ movq %rbx, %rdi
1791
+ testq %rdx, %rcx
1792
+ cmoveq %rbp, %r8
1793
+ cmoveq %rbp, %rdi
1794
+ sarq $1, %rcx
1795
+ xorq %r8, %rdi
1796
+ xorq %r8, %rsi
1797
+ btq $0x3f, %r8
1798
+ cmovbq %rcx, %rbx
1799
+ movq %rax, %r8
1800
+ subq %rax, %rsi
1801
+ leaq (%rcx,%rdi), %rcx
1802
+ cmovs %rbp, %r8
1803
+ movq %rbx, %rdi
1804
+ testq %rdx, %rcx
1805
+ cmoveq %rbp, %r8
1806
+ cmoveq %rbp, %rdi
1807
+ sarq $1, %rcx
1808
+ xorq %r8, %rdi
1809
+ xorq %r8, %rsi
1810
+ btq $0x3f, %r8
1811
+ cmovbq %rcx, %rbx
1812
+ movq %rax, %r8
1813
+ subq %rax, %rsi
1814
+ leaq (%rcx,%rdi), %rcx
1815
+ cmovs %rbp, %r8
1816
+ movq %rbx, %rdi
1817
+ testq %rdx, %rcx
1818
+ cmoveq %rbp, %r8
1819
+ cmoveq %rbp, %rdi
1820
+ sarq $1, %rcx
1821
+ xorq %r8, %rdi
1822
+ xorq %r8, %rsi
1823
+ btq $0x3f, %r8
1824
+ cmovbq %rcx, %rbx
1825
+ movq %rax, %r8
1826
+ subq %rax, %rsi
1827
+ leaq (%rcx,%rdi), %rcx
1828
+ cmovs %rbp, %r8
1829
+ movq %rbx, %rdi
1830
+ testq %rdx, %rcx
1831
+ cmoveq %rbp, %r8
1832
+ cmoveq %rbp, %rdi
1833
+ sarq $1, %rcx
1834
+ xorq %r8, %rdi
1835
+ xorq %r8, %rsi
1836
+ btq $0x3f, %r8
1837
+ cmovbq %rcx, %rbx
1838
+ movq %rax, %r8
1839
+ subq %rax, %rsi
1840
+ leaq (%rcx,%rdi), %rcx
1841
+ cmovs %rbp, %r8
1842
+ movq %rbx, %rdi
1843
+ testq %rdx, %rcx
1844
+ cmoveq %rbp, %r8
1845
+ cmoveq %rbp, %rdi
1846
+ sarq $1, %rcx
1847
+ xorq %r8, %rdi
1848
+ xorq %r8, %rsi
1849
+ btq $0x3f, %r8
1850
+ cmovbq %rcx, %rbx
1851
+ movq %rax, %r8
1852
+ subq %rax, %rsi
1853
+ leaq (%rcx,%rdi), %rcx
1854
+ cmovs %rbp, %r8
1855
+ movq %rbx, %rdi
1856
+ testq %rdx, %rcx
1857
+ cmoveq %rbp, %r8
1858
+ cmoveq %rbp, %rdi
1859
+ sarq $1, %rcx
1860
+ xorq %r8, %rdi
1861
+ xorq %r8, %rsi
1862
+ btq $0x3f, %r8
1863
+ cmovbq %rcx, %rbx
1864
+ movq %rax, %r8
1865
+ subq %rax, %rsi
1866
+ leaq (%rcx,%rdi), %rcx
1867
+ cmovs %rbp, %r8
1868
+ movq %rbx, %rdi
1869
+ testq %rdx, %rcx
1870
+ cmoveq %rbp, %r8
1871
+ cmoveq %rbp, %rdi
1872
+ sarq $1, %rcx
1873
+ xorq %r8, %rdi
1874
+ xorq %r8, %rsi
1875
+ btq $0x3f, %r8
1876
+ cmovbq %rcx, %rbx
1877
+ movq %rax, %r8
1878
+ subq %rax, %rsi
1879
+ leaq (%rcx,%rdi), %rcx
1880
+ sarq $1, %rcx
1881
+ movl $0x100000, %eax
1882
+ leaq (%rbx,%rax), %r8
1883
+ leaq (%rcx,%rax), %r10
1884
+ shlq $0x16, %r8
1885
+ shlq $0x16, %r10
1886
+ sarq $0x2b, %r8
1887
+ sarq $0x2b, %r10
1888
+ movabsq $0x20000100000, %rax
1889
+ leaq (%rbx,%rax), %r15
1890
+ leaq (%rcx,%rax), %r11
1891
+ sarq $0x2a, %r15
1892
+ sarq $0x2a, %r11
1893
+ movq %r13, %rbx
1894
+ movq %r12, %rcx
1895
+ imulq %r8, %r12
1896
+ imulq %r15, %rbx
1897
+ addq %rbx, %r12
1898
+ imulq %r11, %r13
1899
+ imulq %r10, %rcx
1900
+ addq %rcx, %r13
1901
+ sarq $0x14, %r12
1902
+ sarq $0x14, %r13
1903
+ movq %r12, %rbx
1904
+ andq $0xfffff, %rbx
1905
+ movabsq $0xfffffe0000000000, %rax
1906
+ orq %rax, %rbx
1907
+ movq %r13, %rcx
1908
+ andq $0xfffff, %rcx
1909
+ movabsq $0xc000000000000000, %rax
1910
+ orq %rax, %rcx
1911
+ movq 0xa0(%rsp), %rax
1912
+ imulq %r8, %rax
1913
+ movq 0xb0(%rsp), %rdx
1914
+ imulq %r15, %rdx
1915
+ imulq 0xa8(%rsp), %r8
1916
+ imulq 0xb8(%rsp), %r15
1917
+ addq %r8, %r15
1918
+ leaq (%rax,%rdx), %r9
1919
+ movq 0xa0(%rsp), %rax
1920
+ imulq %r10, %rax
1921
+ movq 0xb0(%rsp), %rdx
1922
+ imulq %r11, %rdx
1923
+ imulq 0xa8(%rsp), %r10
1924
+ imulq 0xb8(%rsp), %r11
1925
+ addq %r10, %r11
1926
+ leaq (%rax,%rdx), %r13
1927
+ movq $0xfffffffffffffffe, %rax
1928
+ movl $0x2, %edx
1929
+ movq %rbx, %rdi
1930
+ movq %rax, %r8
1931
+ testq %rsi, %rsi
1932
+ cmovs %rbp, %r8
1933
+ testq $0x1, %rcx
1934
+ cmoveq %rbp, %r8
1935
+ cmoveq %rbp, %rdi
1936
+ xorq %r8, %rdi
1937
+ xorq %r8, %rsi
1938
+ btq $0x3f, %r8
1939
+ cmovbq %rcx, %rbx
1940
+ movq %rax, %r8
1941
+ subq %rax, %rsi
1942
+ leaq (%rcx,%rdi), %rcx
1943
+ cmovs %rbp, %r8
1944
+ movq %rbx, %rdi
1945
+ testq %rdx, %rcx
1946
+ cmoveq %rbp, %r8
1947
+ cmoveq %rbp, %rdi
1948
+ sarq $1, %rcx
1949
+ xorq %r8, %rdi
1950
+ xorq %r8, %rsi
1951
+ btq $0x3f, %r8
1952
+ cmovbq %rcx, %rbx
1953
+ movq %rax, %r8
1954
+ subq %rax, %rsi
1955
+ leaq (%rcx,%rdi), %rcx
1956
+ cmovs %rbp, %r8
1957
+ movq %rbx, %rdi
1958
+ testq %rdx, %rcx
1959
+ cmoveq %rbp, %r8
1960
+ cmoveq %rbp, %rdi
1961
+ sarq $1, %rcx
1962
+ xorq %r8, %rdi
1963
+ xorq %r8, %rsi
1964
+ btq $0x3f, %r8
1965
+ cmovbq %rcx, %rbx
1966
+ movq %rax, %r8
1967
+ subq %rax, %rsi
1968
+ leaq (%rcx,%rdi), %rcx
1969
+ cmovs %rbp, %r8
1970
+ movq %rbx, %rdi
1971
+ testq %rdx, %rcx
1972
+ cmoveq %rbp, %r8
1973
+ cmoveq %rbp, %rdi
1974
+ sarq $1, %rcx
1975
+ xorq %r8, %rdi
1976
+ xorq %r8, %rsi
1977
+ btq $0x3f, %r8
1978
+ cmovbq %rcx, %rbx
1979
+ movq %rax, %r8
1980
+ subq %rax, %rsi
1981
+ leaq (%rcx,%rdi), %rcx
1982
+ cmovs %rbp, %r8
1983
+ movq %rbx, %rdi
1984
+ testq %rdx, %rcx
1985
+ cmoveq %rbp, %r8
1986
+ cmoveq %rbp, %rdi
1987
+ sarq $1, %rcx
1988
+ xorq %r8, %rdi
1989
+ xorq %r8, %rsi
1990
+ btq $0x3f, %r8
1991
+ cmovbq %rcx, %rbx
1992
+ movq %rax, %r8
1993
+ subq %rax, %rsi
1994
+ leaq (%rcx,%rdi), %rcx
1995
+ cmovs %rbp, %r8
1996
+ movq %rbx, %rdi
1997
+ testq %rdx, %rcx
1998
+ cmoveq %rbp, %r8
1999
+ cmoveq %rbp, %rdi
2000
+ sarq $1, %rcx
2001
+ xorq %r8, %rdi
2002
+ xorq %r8, %rsi
2003
+ btq $0x3f, %r8
2004
+ cmovbq %rcx, %rbx
2005
+ movq %rax, %r8
2006
+ subq %rax, %rsi
2007
+ leaq (%rcx,%rdi), %rcx
2008
+ cmovs %rbp, %r8
2009
+ movq %rbx, %rdi
2010
+ testq %rdx, %rcx
2011
+ cmoveq %rbp, %r8
2012
+ cmoveq %rbp, %rdi
2013
+ sarq $1, %rcx
2014
+ xorq %r8, %rdi
2015
+ xorq %r8, %rsi
2016
+ btq $0x3f, %r8
2017
+ cmovbq %rcx, %rbx
2018
+ movq %rax, %r8
2019
+ subq %rax, %rsi
2020
+ leaq (%rcx,%rdi), %rcx
2021
+ cmovs %rbp, %r8
2022
+ movq %rbx, %rdi
2023
+ testq %rdx, %rcx
2024
+ cmoveq %rbp, %r8
2025
+ cmoveq %rbp, %rdi
2026
+ sarq $1, %rcx
2027
+ xorq %r8, %rdi
2028
+ xorq %r8, %rsi
2029
+ btq $0x3f, %r8
2030
+ cmovbq %rcx, %rbx
2031
+ movq %rax, %r8
2032
+ subq %rax, %rsi
2033
+ leaq (%rcx,%rdi), %rcx
2034
+ cmovs %rbp, %r8
2035
+ movq %rbx, %rdi
2036
+ testq %rdx, %rcx
2037
+ cmoveq %rbp, %r8
2038
+ cmoveq %rbp, %rdi
2039
+ sarq $1, %rcx
2040
+ xorq %r8, %rdi
2041
+ xorq %r8, %rsi
2042
+ btq $0x3f, %r8
2043
+ cmovbq %rcx, %rbx
2044
+ movq %rax, %r8
2045
+ subq %rax, %rsi
2046
+ leaq (%rcx,%rdi), %rcx
2047
+ cmovs %rbp, %r8
2048
+ movq %rbx, %rdi
2049
+ testq %rdx, %rcx
2050
+ cmoveq %rbp, %r8
2051
+ cmoveq %rbp, %rdi
2052
+ sarq $1, %rcx
2053
+ xorq %r8, %rdi
2054
+ xorq %r8, %rsi
2055
+ btq $0x3f, %r8
2056
+ cmovbq %rcx, %rbx
2057
+ movq %rax, %r8
2058
+ subq %rax, %rsi
2059
+ leaq (%rcx,%rdi), %rcx
2060
+ cmovs %rbp, %r8
2061
+ movq %rbx, %rdi
2062
+ testq %rdx, %rcx
2063
+ cmoveq %rbp, %r8
2064
+ cmoveq %rbp, %rdi
2065
+ sarq $1, %rcx
2066
+ xorq %r8, %rdi
2067
+ xorq %r8, %rsi
2068
+ btq $0x3f, %r8
2069
+ cmovbq %rcx, %rbx
2070
+ movq %rax, %r8
2071
+ subq %rax, %rsi
2072
+ leaq (%rcx,%rdi), %rcx
2073
+ cmovs %rbp, %r8
2074
+ movq %rbx, %rdi
2075
+ testq %rdx, %rcx
2076
+ cmoveq %rbp, %r8
2077
+ cmoveq %rbp, %rdi
2078
+ sarq $1, %rcx
2079
+ xorq %r8, %rdi
2080
+ xorq %r8, %rsi
2081
+ btq $0x3f, %r8
2082
+ cmovbq %rcx, %rbx
2083
+ movq %rax, %r8
2084
+ subq %rax, %rsi
2085
+ leaq (%rcx,%rdi), %rcx
2086
+ cmovs %rbp, %r8
2087
+ movq %rbx, %rdi
2088
+ testq %rdx, %rcx
2089
+ cmoveq %rbp, %r8
2090
+ cmoveq %rbp, %rdi
2091
+ sarq $1, %rcx
2092
+ xorq %r8, %rdi
2093
+ xorq %r8, %rsi
2094
+ btq $0x3f, %r8
2095
+ cmovbq %rcx, %rbx
2096
+ movq %rax, %r8
2097
+ subq %rax, %rsi
2098
+ leaq (%rcx,%rdi), %rcx
2099
+ cmovs %rbp, %r8
2100
+ movq %rbx, %rdi
2101
+ testq %rdx, %rcx
2102
+ cmoveq %rbp, %r8
2103
+ cmoveq %rbp, %rdi
2104
+ sarq $1, %rcx
2105
+ xorq %r8, %rdi
2106
+ xorq %r8, %rsi
2107
+ btq $0x3f, %r8
2108
+ cmovbq %rcx, %rbx
2109
+ movq %rax, %r8
2110
+ subq %rax, %rsi
2111
+ leaq (%rcx,%rdi), %rcx
2112
+ cmovs %rbp, %r8
2113
+ movq %rbx, %rdi
2114
+ testq %rdx, %rcx
2115
+ cmoveq %rbp, %r8
2116
+ cmoveq %rbp, %rdi
2117
+ sarq $1, %rcx
2118
+ xorq %r8, %rdi
2119
+ xorq %r8, %rsi
2120
+ btq $0x3f, %r8
2121
+ cmovbq %rcx, %rbx
2122
+ movq %rax, %r8
2123
+ subq %rax, %rsi
2124
+ leaq (%rcx,%rdi), %rcx
2125
+ cmovs %rbp, %r8
2126
+ movq %rbx, %rdi
2127
+ testq %rdx, %rcx
2128
+ cmoveq %rbp, %r8
2129
+ cmoveq %rbp, %rdi
2130
+ sarq $1, %rcx
2131
+ xorq %r8, %rdi
2132
+ xorq %r8, %rsi
2133
+ btq $0x3f, %r8
2134
+ cmovbq %rcx, %rbx
2135
+ movq %rax, %r8
2136
+ subq %rax, %rsi
2137
+ leaq (%rcx,%rdi), %rcx
2138
+ cmovs %rbp, %r8
2139
+ movq %rbx, %rdi
2140
+ testq %rdx, %rcx
2141
+ cmoveq %rbp, %r8
2142
+ cmoveq %rbp, %rdi
2143
+ sarq $1, %rcx
2144
+ xorq %r8, %rdi
2145
+ xorq %r8, %rsi
2146
+ btq $0x3f, %r8
2147
+ cmovbq %rcx, %rbx
2148
+ movq %rax, %r8
2149
+ subq %rax, %rsi
2150
+ leaq (%rcx,%rdi), %rcx
2151
+ cmovs %rbp, %r8
2152
+ movq %rbx, %rdi
2153
+ testq %rdx, %rcx
2154
+ cmoveq %rbp, %r8
2155
+ cmoveq %rbp, %rdi
2156
+ sarq $1, %rcx
2157
+ xorq %r8, %rdi
2158
+ xorq %r8, %rsi
2159
+ btq $0x3f, %r8
2160
+ cmovbq %rcx, %rbx
2161
+ movq %rax, %r8
2162
+ subq %rax, %rsi
2163
+ leaq (%rcx,%rdi), %rcx
2164
+ cmovs %rbp, %r8
2165
+ movq %rbx, %rdi
2166
+ testq %rdx, %rcx
2167
+ cmoveq %rbp, %r8
2168
+ cmoveq %rbp, %rdi
2169
+ sarq $1, %rcx
2170
+ xorq %r8, %rdi
2171
+ xorq %r8, %rsi
2172
+ btq $0x3f, %r8
2173
+ cmovbq %rcx, %rbx
2174
+ movq %rax, %r8
2175
+ subq %rax, %rsi
2176
+ leaq (%rcx,%rdi), %rcx
2177
+ sarq $1, %rcx
2178
+ movl $0x100000, %eax
2179
+ leaq (%rbx,%rax), %r8
2180
+ leaq (%rcx,%rax), %r12
2181
+ shlq $0x15, %r8
2182
+ shlq $0x15, %r12
2183
+ sarq $0x2b, %r8
2184
+ sarq $0x2b, %r12
2185
+ movabsq $0x20000100000, %rax
2186
+ leaq (%rbx,%rax), %r10
2187
+ leaq (%rcx,%rax), %r14
2188
+ sarq $0x2b, %r10
2189
+ sarq $0x2b, %r14
2190
+ movq %r9, %rax
2191
+ imulq %r8, %rax
2192
+ movq %r13, %rdx
2193
+ imulq %r10, %rdx
2194
+ imulq %r15, %r8
2195
+ imulq %r11, %r10
2196
+ addq %r8, %r10
2197
+ leaq (%rax,%rdx), %r8
2198
+ movq %r9, %rax
2199
+ imulq %r12, %rax
2200
+ movq %r13, %rdx
2201
+ imulq %r14, %rdx
2202
+ imulq %r15, %r12
2203
+ imulq %r11, %r14
2204
+ addq %r12, %r14
2205
+ leaq (%rax,%rdx), %r12
2206
+ movq %rsi, 0x98(%rsp)
2207
+ decq 0x90(%rsp)
2208
+ jne curve25519_x25519_alt_inverseloop
2209
+ movq (%rsp), %rax
2210
+ movq 0x20(%rsp), %rcx
2211
+ imulq %r8, %rax
2212
+ imulq %r10, %rcx
2213
+ addq %rcx, %rax
2214
+ sarq $0x3f, %rax
2215
+ movq %r8, %r9
2216
+ sarq $0x3f, %r9
2217
+ xorq %r9, %r8
2218
+ subq %r9, %r8
2219
+ xorq %rax, %r9
2220
+ movq %r10, %r11
2221
+ sarq $0x3f, %r11
2222
+ xorq %r11, %r10
2223
+ subq %r11, %r10
2224
+ xorq %rax, %r11
2225
+ movq %r12, %r13
2226
+ sarq $0x3f, %r13
2227
+ xorq %r13, %r12
2228
+ subq %r13, %r12
2229
+ xorq %rax, %r13
2230
+ movq %r14, %r15
2231
+ sarq $0x3f, %r15
2232
+ xorq %r15, %r14
2233
+ subq %r15, %r14
2234
+ xorq %rax, %r15
2235
+ movq %r8, %rax
2236
+ andq %r9, %rax
2237
+ movq %r10, %r12
2238
+ andq %r11, %r12
2239
+ addq %rax, %r12
2240
+ xorl %r13d, %r13d
2241
+ movq 0x40(%rsp), %rax
2242
+ xorq %r9, %rax
2243
+ mulq %r8
2244
+ addq %rax, %r12
2245
+ adcq %rdx, %r13
2246
+ movq 0x60(%rsp), %rax
2247
+ xorq %r11, %rax
2248
+ mulq %r10
2249
+ addq %rax, %r12
2250
+ adcq %rdx, %r13
2251
+ xorl %r14d, %r14d
2252
+ movq 0x48(%rsp), %rax
2253
+ xorq %r9, %rax
2254
+ mulq %r8
2255
+ addq %rax, %r13
2256
+ adcq %rdx, %r14
2257
+ movq 0x68(%rsp), %rax
2258
+ xorq %r11, %rax
2259
+ mulq %r10
2260
+ addq %rax, %r13
2261
+ adcq %rdx, %r14
2262
+ xorl %r15d, %r15d
2263
+ movq 0x50(%rsp), %rax
2264
+ xorq %r9, %rax
2265
+ mulq %r8
2266
+ addq %rax, %r14
2267
+ adcq %rdx, %r15
2268
+ movq 0x70(%rsp), %rax
2269
+ xorq %r11, %rax
2270
+ mulq %r10
2271
+ addq %rax, %r14
2272
+ adcq %rdx, %r15
2273
+ movq 0x58(%rsp), %rax
2274
+ xorq %r9, %rax
2275
+ andq %r8, %r9
2276
+ negq %r9
2277
+ mulq %r8
2278
+ addq %rax, %r15
2279
+ adcq %rdx, %r9
2280
+ movq 0x78(%rsp), %rax
2281
+ xorq %r11, %rax
2282
+ movq %r11, %rdx
2283
+ andq %r10, %rdx
2284
+ subq %rdx, %r9
2285
+ mulq %r10
2286
+ addq %rax, %r15
2287
+ adcq %rdx, %r9
2288
+ movq %r9, %rax
2289
+ shldq $0x1, %r15, %rax
2290
+ sarq $0x3f, %r9
2291
+ movl $0x13, %ebx
2292
+ leaq 0x1(%rax,%r9,1), %rax
2293
+ imulq %rbx
2294
+ xorl %ebp, %ebp
2295
+ addq %rax, %r12
2296
+ adcq %rdx, %r13
2297
+ adcq %r9, %r14
2298
+ adcq %r9, %r15
2299
+ shlq $0x3f, %rax
2300
+ addq %rax, %r15
2301
+ cmovns %rbp, %rbx
2302
+ subq %rbx, %r12
2303
+ sbbq %rbp, %r13
2304
+ sbbq %rbp, %r14
2305
+ sbbq %rbp, %r15
2306
+ btr $0x3f, %r15
2307
+ movq 0xc0(%rsp), %rdi
2308
+ movq %r12, (%rdi)
2309
+ movq %r13, 0x8(%rdi)
2310
+ movq %r14, 0x10(%rdi)
2311
+ movq %r15, 0x18(%rdi)
1369
2312
 
1370
2313
  // Since we eventually want to return 0 when the result is the point at
1371
2314
  // infinity, we force xn = 0 whenever zn = 0. This avoids building in a
1372
2315
  // dependency on the behavior of modular inverse in out-of-scope cases.
1373
2316
 
1374
- movq 160(%rsp), %rax
1375
- orq 168(%rsp), %rax
1376
- orq 176(%rsp), %rax
1377
- orq 184(%rsp), %rax
2317
+ movq 224(%rsp), %rax
2318
+ orq 232(%rsp), %rax
2319
+ orq 240(%rsp), %rax
2320
+ orq 248(%rsp), %rax
1378
2321
  movq 320(%rsp), %rcx
1379
2322
  cmovzq %rax, %rcx
1380
2323
  movq %rcx, 320(%rsp)
@@ -1391,7 +2334,7 @@ curve25519_x25519_alt_fliploop:
1391
2334
  // Now the result is xn * (1/zn), fully reduced modulo p.
1392
2335
 
1393
2336
  movq res, %rbp
1394
- mul_p25519(resx,xn,zm)
2337
+ mul_p25519(resx,xn,xm)
1395
2338
 
1396
2339
  // Restore stack and registers
1397
2340