digest-kangarootwelve 0.2.0 → 0.4.2

data/ext/digest/kangarootwelve/XKCP/lib/low/KeccakP-200/ARM/KeccakP-200-armv7m-le-gcc.s

@@ -0,0 +1,427 @@
+@
+@ The eXtended Keccak Code Package (XKCP)
+@ https://github.com/XKCP/XKCP
+@
+@ The Keccak-p permutations, designed by Guido Bertoni, Joan Daemen, Michaël Peeters and Gilles Van Assche.
+@
+@ Implementation by Ronny Van Keer, hereby denoted as "the implementer".
+@
+@ For more information, feedback or questions, please refer to the Keccak Team website:
+@ https://keccak.team/
+@
+@ To the extent possible under law, the implementer has waived all copyright
+@ and related or neighboring rights to the source code in this file.
+@ http://creativecommons.org/publicdomain/zero/1.0/
+@
+@ ---
+@
+@ This file implements Keccak-p[200] in a SnP-compatible way.
+@ Please refer to SnP-documentation.h for more details.
+@
+@ This implementation comes with KeccakP-200-SnP.h in the same folder.
+@ Please refer to LowLevel.build for the exact list of other files it must be combined with.
+@
+
+@ WARNING: This implementation assumes a little endian CPU with ARMv7M architecture (e.g., Cortex-M3) and the GCC compiler.
+
+
+    .thumb
+    .syntax unified
+.text
+
+.equ _ba, 0
+.equ _be, 1
+.equ _bi, 2
+.equ _bo, 3
+.equ _bu, 4
+.equ _ga, 5
+.equ _ge, 6
+.equ _gi, 7
+.equ _go, 8
+.equ _gu, 9
+.equ _ka, 10
+.equ _ke, 11
+.equ _ki, 12
+.equ _ko, 13
+.equ _ku, 14
+.equ _ma, 15
+.equ _me, 16
+.equ _mi, 17
+.equ _mo, 18
+.equ _mu, 19
+.equ _sa, 20
+.equ _se, 21
+.equ _si, 22
+.equ _so, 23
+.equ _su, 24
+
+
+.equ _a, 0
+.equ _e, 8
+.equ _i, 16
+.equ _o, 24
+
+.equ _B, 0
+.equ _G, 8
+.equ _K, 16
+.equ _M, 24
+
+.macro  RhoPi   rot, rOut, oOut, rIn, oIn
+    .if \rot != 0
+    .if \oIn ==0
+        ubfx        r2, \rIn, #8-\rot, #\rot
+        bfi         r2, \rIn, #\rot, #8-\rot
+        bfi         \rOut, r2, #\oOut, #8
+    .else
+        uxtb        r1, \rIn, ROR #\oIn
+        ubfx        r2, r1, #8-\rot, #\rot
+        bfi         r2, r1, #\rot, #8-\rot
+        bfi         \rOut, r2, #\oOut, #8
+    .endif
+    .else
+    .if \oIn !=0
+        lsr         r1, \rIn, #\oIn
+        bfi         \rOut, r1, #\oOut, #8
+    .else
+        bfi         \rOut, \rOut, #\oOut, #8
+    .endif
+    .endif
+    .endm
+
+.macro  Chi         rXaeio, rXu, offU
+    .if \offU == 0
+    lsls        r2, \rXu, #24
+    .else
+    .if \offU == 24
+    and         r2, \rXu, #0xFF000000
+    .else
+    ubfx        r2, \rXu, #\offU, #8                @r2 = Beiou
+    lsls        r2, r2, #24
+    .endif
+    .endif
+    orr         r2, r2, \rXaeio, LSR #8
+    lsl         r1, \rXaeio, #24                    @r1 = Bioua
+    orr         r1, r1, r2, LSR #8
+    bics        r1, r1, r2                      @r1 = Bioua & ~ Beiou
+    bic         r2, r2, \rXaeio                 @r2 = Be & ~Ba
+    eor         \rXaeio, \rXaeio, r1                @Baeio ^= r1
+    .if \offU !=0
+    eor         r2, r2, \rXu, LSR #\offU            @r2 ^= Bu
+    .else
+    eors        r2, r2, \rXu                        @r2 ^= Bu
+    .endif
+    bfi         \rXu, r2, #\offU, #8
+    .endm
+
+@----------------------------------------------------------------------------
+@
+@ void KeccakP200_StaticInitialize( void )
+@
+.align 8
+.global   KeccakP200_StaticInitialize
+.type	KeccakP200_StaticInitialize, %function;
+KeccakP200_StaticInitialize:
+    bx      lr
+
+
+@----------------------------------------------------------------------------
+@
+@ void KeccakP200_Initialize(void *state)
+@
+.align 8
+.global   KeccakP200_Initialize
+.type	KeccakP200_Initialize, %function;
+KeccakP200_Initialize:
+    movs    r1, #0
+    movs    r2, #0
+    movs    r3, #0
+    stmia   r0!, { r1 - r3 }
+    stmia   r0!, { r1 - r3 }
+    strb    r1, [r0]
+    bx      lr
+
+
+@ ----------------------------------------------------------------------------
+@
+@  void KeccakP200_AddByte(void *state, unsigned char byte, unsigned int offset)
+@
+.align 8
+.global   KeccakP200_AddByte
+.type	KeccakP200_AddByte, %function;
+KeccakP200_AddByte:
+    ldrb    r3, [r0, r2]
+    eors    r3, r3, r1
+    strb    r3, [r0, r2]
+    bx      lr
+
+
+@----------------------------------------------------------------------------
+@
+@ void KeccakP200_AddBytes(void *state, const unsigned char *data, unsigned int offset, unsigned int length)
+@
+.align 8
+.global   KeccakP200_AddBytes
+.type	KeccakP200_AddBytes, %function;
+KeccakP200_AddBytes:
+    subs    r3, r3, #1
+    bcc     KeccakP200_AddBytes_Exit
+    adds    r0, r0, r2
+    push    {r4,lr}
+KeccakP200_AddBytes_Loop:
+    ldrb    r2, [r1, r3]
+    ldrb    r4, [r0, r3]
+    eors    r2, r2, r4
+    strb    r2, [r0, r3]
+    subs    r3, r3, #1
+    bcs     KeccakP200_AddBytes_Loop
+    pop     {r4,pc}
+KeccakP200_AddBytes_Exit:
+    bx      lr
+
+
+@ ----------------------------------------------------------------------------
+@
+@  void KeccakP200_OverwriteBytes(void *state, const unsigned char *data, unsigned int offset, unsigned int length)
+@
+.align 8
+.global   KeccakP200_OverwriteBytes
+.type	KeccakP200_OverwriteBytes, %function;
+KeccakP200_OverwriteBytes:
+    subs    r3, r3, #1
+    bcc     KeccakP200_OverwriteBytes_Exit
+    adds    r0, r0, r2
+KeccakP200_OverwriteBytes_Loop:
+    ldrb    r2, [r1, r3]
+    strb    r2, [r0, r3]
+    subs    r3, r3, #1
+    bcs     KeccakP200_OverwriteBytes_Loop
+KeccakP200_OverwriteBytes_Exit:
+    bx      lr
+
+
+@----------------------------------------------------------------------------
+@
+@ void KeccakP200_OverwriteWithZeroes(void *state, unsigned int byteCount)
+@
+.align 8
+.global   KeccakP200_OverwriteWithZeroes
+.type	KeccakP200_OverwriteWithZeroes, %function;
+KeccakP200_OverwriteWithZeroes:
+    movs    r3, #0
+    lsrs    r2, r1, #2
+    beq     KeccakP200_OverwriteWithZeroes_Bytes
+KeccakP200_OverwriteWithZeroes_Loop4Lanes:
+    str     r3, [r0], #4
+    subs    r2, r2, #1
+    bne     KeccakP200_OverwriteWithZeroes_Loop4Lanes
+KeccakP200_OverwriteWithZeroes_Bytes:
+    ands    r1, #3
+    beq     KeccakP200_OverwriteWithZeroes_Exit
+KeccakP200_OverwriteWithZeroes_LoopBytes:
+    strb    r3, [r0], #1
+    subs    r1, r1, #1
+    bne     KeccakP200_OverwriteWithZeroes_LoopBytes
+KeccakP200_OverwriteWithZeroes_Exit:
+    bx      lr
+
+
+@ ----------------------------------------------------------------------------
+@
+@  void KeccakP200_ExtractBytes(void *state, const unsigned char *data, unsigned int offset, unsigned int length)
+@
+.align 8
+.global   KeccakP200_ExtractBytes
+.type	KeccakP200_ExtractBytes, %function;
+KeccakP200_ExtractBytes:
+    subs    r3, r3, #1
+    bcc     KeccakP200_ExtractBytes_Exit
+    adds    r0, r0, r2
+KeccakP200_ExtractBytes_Loop:
+    ldrb    r2, [r0, r3]
+    strb    r2, [r1, r3]
+    subs    r3, r3, #1
+    bcs     KeccakP200_ExtractBytes_Loop
+KeccakP200_ExtractBytes_Exit:
+    bx      lr
+
+
+@ ----------------------------------------------------------------------------
+@
+@  void KeccakP200_ExtractAndAddBytes(void *state, const unsigned char *input, unsigned char *output, unsigned int offset, unsigned int length)
+@
+.align 8
+.global   KeccakP200_ExtractAndAddBytes
+.type	KeccakP200_ExtractAndAddBytes, %function;
+KeccakP200_ExtractAndAddBytes:
+    push    {r4,r5}
+    adds    r0, r0, r3                              @ state += offset (offset register no longer needed, reuse for length)
+    ldr     r3, [sp, #8]                            @ get length argument from stack
+    subs    r3, r3, #1                              @ .if length != 0
+    bcc     KeccakP200_ExtractAndAddBytes_Exit
+KeccakP200_ExtractAndAddBytes_Loop:
+    ldrb    r5, [r0, r3]
+    ldrb    r4, [r1, r3]
+    eors    r5, r5, r4
+    strb    r5, [r2, r3]
+    subs    r3, r3, #1
+    bcs     KeccakP200_ExtractAndAddBytes_Loop
+KeccakP200_ExtractAndAddBytes_Exit:
+    pop     {r4,r5}
+    bx      lr
+
+
+@----------------------------------------------------------------------------
+@
+@ void KeccakP200_Permute_Nrounds( void *state, unsigned int nr )
+@
+.align 8
+.global   KeccakP200_Permute_Nrounds
+.type	KeccakP200_Permute_Nrounds, %function;
+KeccakP200_Permute_Nrounds:
+    push        {r4-r12,lr}
+    adr         lr, KeccakP200_Permute_RoundConstants18+18
+    sub         lr, lr, r1
+    b           KeccakP200_Permute
+
+
+@----------------------------------------------------------------------------
+@
+@ void KeccakP200_Permute_18rounds( void *state )
+@
+.align 8
+.global   KeccakP200_Permute_18rounds
+.type	KeccakP200_Permute_18rounds, %function;
+KeccakP200_Permute_18rounds:
+    push        {r4-r12,lr}
+    adr         lr, KeccakP200_Permute_RoundConstants18
+KeccakP200_Permute:
+    @   Load state into registers
+    ldr         r8, [r0, #_ba]      @ B-aeio
+    ldr         r9, [r0, #_ga]      @ G-aeio
+    ldr         r10, [r0, #_ka]     @ K-aeio
+    ldr         r11, [r0, #_ma]     @ M-aeio
+    ldr         r12, [r0, #_sa]     @ S-aeio
+    ldrb        r6, [r0, #_bu]      @ BGKM-u
+    ldrb        r1, [r0, #_gu]
+    orr         r6, r6, r1, LSL #8
+    ldrb        r1, [r0, #_ku]
+    orr         r6, r6, r1, LSL #16
+    ldrb        r1, [r0, #_mu]
+    orr         r6, r6, r1, LSL #24
+    ldrb        r7, [r0, #_su]          @ S-u
+KeccakP200_Permute_RoundLoop:
+    @ Prepare Theta
+    eors        r4, r8, r9
+    eors        r4, r4, r10
+    eors        r4, r4, r11
+    eors        r4, r4, r12
+
+    eor         r1, r6, r6, LSL #16
+    eor         r1, r1, r1, LSL #8
+    eor         r5, r7, r1, LSR #24
+
+    bic         r1, r4, #0x80808080     @ r1 = rol(Caeio)
+    lsl         r1, r1, #1
+    and         r2, r4, #0x80808080
+    orr         r1, r1, r2, LSR #7
+
+    @ Apply Theta u
+    eors        r2, r1, r4, LSR #24     @ rt2(=Du) = Co ^ rol(Ca)
+    uxtb        r2, r2
+    eor         r7, r7, r2
+    orr         r2, r2, r2, LSL #8
+    orr         r2, r2, r2, LSL #16
+    eor         r6, r6, r2
+
+    lsl         r2, r5, #1                  @ r2 = rol(Cu)
+    orrs        r2, r2, r5, LSR #7
+
+    lsr         r1, r1, #8
+    orr         r1, r1, r2, LSL #24         @ r1 = rol(Ceiou)
+    orr         r2, r5, r4, LSL #8      @ r2 = Cuaei
+    eors        r2, r2, r1                  @ r2 ^= r1
+
+    @ Apply Theta aeio
+    eor         r8, r8, r2
+    eor         r9, r9, r2
+    eor         r10, r10, r2
+    eor         r11, r11, r2
+    eor         r12, r12, r2
+
+    @ Rho Pi
+    lsr     r3, r8, #_e             @ save _be
+    RhoPi   4, r8, _e, r9, _e       @ _be, _ge   1 <  6
+    RhoPi   4, r9, _e, r6, _G       @ _ge, _gu   6 <  9
+    RhoPi   5, r6, _G, r12, _i      @ _gu, _si   9 < 22
+    RhoPi   7, r12, _i, r6, _K      @ _si, _ku  22 < 14
+    RhoPi   2, r6, _K, r12, _a      @ _ku, _sa  14 < 20
+    RhoPi   6, r12, _a, r8, _i      @ _sa, _bi  20 <  2
+    RhoPi   3, r8, _i, r10, _i      @ _bi, _ki   2 < 12
+    RhoPi   1, r10, _i, r10, _o     @ _ki, _ko  12 < 13
+    RhoPi   0, r10, _o, r6, _M      @ _ko, _mu  13 < 19
+    RhoPi   0, r6, _M, r12, _o      @ _mu, _so  19 < 23
+    RhoPi   1, r12, _o, r11, _a     @ _so, _ma  23 < 15
+    RhoPi   3, r11, _a, r6, _B      @ _ma, _bu  15 <  4
+    RhoPi   6, r6, _B, r7,     0        @ _bu, _su   4 < 24
+    RhoPi   2, r7,     0, r12, _e       @ _su, _se  24 < 21
+    RhoPi   7, r12, _e, r9, _o      @ _se, _go  21 <  8
+    RhoPi   5, r9, _o, r11, _e      @ _go, _me   8 < 16
+    RhoPi   4, r11, _e, r9, _a      @ _me, _ga  16 <  5
+    RhoPi   4, r9, _a, r8, _o       @ _ga, _bo   5 <  3
+    RhoPi   5, r8, _o, r11, _o      @ _bo, _mo   3 < 18
+    RhoPi   7, r11, _o, r11, _i     @ _mo, _mi  18 < 17
+    RhoPi   2, r11, _i, r10, _e     @ _mi, _ke  17 < 11
+    RhoPi   6, r10, _e, r9, _i      @ _ke, _gi  11 <  7
+    RhoPi   3, r9, _i, r10, _a      @ _gi, _ka   7 < 10
+    RhoPi   1, r10, _a, r3,      0      @ _ka, _be  10 < 1
+
+    @ Chi
+    Chi     r8, r6, _B
+    Chi     r9, r6, _G
+    Chi     r10, r6, _K
+    Chi     r11, r6, _M
+    Chi     r12, r7,     0
+
+    @ Iota
+    ldrb        r1, [lr], #1
+    eor         r8, r8, r1
+    cmp         r1, #0x80
+    bne         KeccakP200_Permute_RoundLoop
+
+    @ Save registers into RAM state
+    str         r8, [r0, #_ba]      @ B-aeio
+    str         r9, [r0, #_ga]      @ G-aeio
+    str         r10, [r0, #_ka]     @ K-aeio
+    str         r11, [r0, #_ma]     @ M-aeio
+    str         r12, [r0, #_sa]     @ S-aeio
+    strb        r6, [r0, #_bu]      @ BGKM-u
+    lsrs        r6, #8
+    strb        r6, [r0, #_gu]
+    lsrs        r6, #8
+    strb        r6, [r0, #_ku]
+    lsrs        r6, #8
+    strb        r6, [r0, #_mu]
+    strb        r7, [r0, #_su]          @ S-u
+    pop         {r4-r12,pc}
+
+KeccakP200_Permute_RoundConstants18:
+        .byte           0x01
+        .byte           0x82
+        .byte           0x8a
+        .byte           0x00
+        .byte           0x8b
+        .byte           0x01
+        .byte           0x81
+        .byte           0x09
+        .byte           0x8a
+        .byte           0x88
+        .byte           0x09
+        .byte           0x0a
+        .byte           0x8b
+        .byte           0x8b
+        .byte           0x89
+        .byte           0x03
+        .byte           0x02
+        .byte           0x80
+
+

data/ext/digest/kangarootwelve/XKCP/lib/low/KeccakP-200/AVR8/KeccakP-200-SnP.h

@@ -0,0 +1,41 @@
+/*
+The eXtended Keccak Code Package (XKCP)
+https://github.com/XKCP/XKCP
+
+The Keccak-p permutations, designed by Guido Bertoni, Joan Daemen, Michaël Peeters and Gilles Van Assche.
+
+Implementation by Ronny Van Keer, hereby denoted as "the implementer".
+
+For more information, feedback or questions, please refer to the Keccak Team website:
+https://keccak.team/
+
+To the extent possible under law, the implementer has waived all copyright
+and related or neighboring rights to the source code in this file.
+http://creativecommons.org/publicdomain/zero/1.0/
+
+---
+
+Please refer to SnP-documentation.h for more details.
+*/
+
+#ifndef _KeccakP_200_SnP_h_
+#define _KeccakP_200_SnP_h_
+
+#define KeccakP200_implementation      "8-bit optimized AVR assembler implementation"
+#define KeccakP200_stateSizeInBytes    25
+#define KeccakP200_stateAlignment      8
+
+void KeccakP200_StaticInitialize( void );
+/* #define   KeccakP200_StaticInitialize() */
+void KeccakP200_Initialize(void *state);
+void KeccakP200_AddByte(void *state, unsigned char data, unsigned int offset);
+/* #define   KeccakP200_AddByte(argS, argData, argOffset)    ((unsigned char*)argS)[argOffset] ^= (argData) */
+void KeccakP200_AddBytes(void *state, const unsigned char *data, unsigned int offset, unsigned int length);
+void KeccakP200_OverwriteBytes(void *state, const unsigned char *data, unsigned int offset, unsigned int length);
+void KeccakP200_OverwriteWithZeroes(void *state, unsigned int byteCount);
+void KeccakP200_Permute_Nrounds(void *state, unsigned int nrounds);
+void KeccakP200_Permute_18rounds(void *state);
+void KeccakP200_ExtractBytes(const void *state, unsigned char *data, unsigned int offset, unsigned int length);
+void KeccakP200_ExtractAndAddBytes(const void *state, const unsigned char *input, unsigned char *output, unsigned int offset, unsigned int length);
+
+#endif