sleeping_kangaroo12 0.0.1

data/ext/xkcp/lib/low/Xoodoo/SSE2/Xoodyak-full-block-SIMD128.c

@@ -0,0 +1,355 @@
+/*
+The eXtended Keccak Code Package (XKCP)
+https://github.com/XKCP/XKCP
+
+The Xoodoo permutation, designed by Joan Daemen, Seth Hoffert, Gilles Van Assche and Ronny Van Keer.
+
+Implementation by Ronny Van Keer, hereby denoted as "the implementer".
+
+For more information, feedback or questions, please refer to the Keccak Team website:
+https://keccak.team/
+
+To the extent possible under law, the implementer has waived all copyright
+and related or neighboring rights to the source code in this file.
+http://creativecommons.org/publicdomain/zero/1.0/
+*/
+
+#define    VERBOSE    0
+
+#include <stdio.h>
+#include <stdlib.h>
+#include <string.h>
+#include <emmintrin.h>
+#include <pmmintrin.h>
+#include <smmintrin.h>
+#include <tmmintrin.h>
+#include "align.h"
+#include "Xoodoo.h"
+#include "Xoodyak-parameters.h"
+
+#include "brg_endian.h"
+#if (PLATFORM_BYTE_ORDER != IS_LITTLE_ENDIAN)
+#error Expecting a little-endian platform
+#endif
+
+#if (VERBOSE > 0)
+    #define    Dump(__t)    Vars2State; \
+                        printf(__t "\n"); \
+                        printf("a00 %08x, a01 %08x, a02 %08x, a03 %08x\n", state[0+0], state[0+1], state[0+2], state[0+3] ); \
+                        printf("a10 %08x, a11 %08x, a12 %08x, a13 %08x\n", state[4+0], state[4+1], state[4+2], state[4+3] ); \
+                        printf("a20 %08x, a21 %08x, a22 %08x, a23 %08x\n\n", state[8+0], state[8+1], state[8+2], state[8+3] );
+#else
+    #define    Dump(__t)
+#endif
+
+#if (VERBOSE >= 1)
+    #define    Dump1(__t)    Dump(__t)
+#else
+    #define    Dump1(__t)
+#endif
+
+#if (VERBOSE >= 2)
+    #define    Dump2(__t)    Dump(__t)
+#else
+    #define    Dump2(__t)
+#endif
+
+#if (VERBOSE >= 3)
+    #define    Dump3(__t)    Dump(__t)
+#else
+    #define    Dump3(__t)
+#endif
+
+
+typedef __m128i V128;
+
+ALIGN(16) static const uint8_t maskRhoEast2[16] = {
+    11,  8,  9, 10,
+    15, 12, 13, 14,
+     3,  0,  1,  2,
+     7,  4,  5,  6,
+};
+
+#define ANDnu128(a, b)          _mm_andnot_si128(a, b)
+#define CONST128(a)             _mm_load_si128((const V128 *)&(a))
+#define LOAD128(a)              _mm_load_si128((const V128 *)&(a))
+#define LOAD128u(a)             _mm_loadu_si128((const V128 *)&(a))
+#if defined(Waffel_useXOP)
+    #define ROL32in128(a, o)    _mm_roti_epi32(a, o)
+#else
+    #define ROL32in128(a, o)    _mm_or_si128(_mm_slli_epi32(a, o), _mm_srli_epi32(a, 32-(o)))
+#endif
+#define STORE128(a, b)          _mm_store_si128((V128 *)&(a), b)
+#define STORE128u(a, b)         _mm_storeu_si128((V128 *)&(a), b)
+#define STORE64L(a, b)          _mm_storel_epi64((V128 *)&(a), b)
+#define XOR128(a, b)            _mm_xor_si128(a, b)
+
+#define    DeclareVars          V128    a0, a1, a2, p, e; \
+                                V128    rhoEast2 = CONST128(maskRhoEast2)
+
+#define    State2Vars(state)    a0 = LOAD128(((uint32_t*)state)[0]), a1 = LOAD128(((uint32_t*)state)[4]), a2 = LOAD128(((uint32_t*)state)[8]);
+
+#define    Vars2State(state)    STORE128(((uint32_t*)state)[0], a0), STORE128(((uint32_t*)state)[4], a1), STORE128(((uint32_t*)state)[8], a2);
+
+/*
+** Theta: Column Parity Mixer
+*/
+#define    Theta()      p = XOR128( a0, a1 );               \
+                        p = XOR128(  p, a2 );               \
+                        p = _mm_shuffle_epi32( p, 0x93);    \
+                        e = ROL32in128( p, 5 );             \
+                        p = ROL32in128( p, 14 );            \
+                        e =  XOR128( e, p );                \
+                        a0 = XOR128( a0, e );               \
+                        a1 = XOR128( a1, e );               \
+                        a2 = XOR128( a2, e );
+
+/*
+** Rho-west: Plane shift
+*/
+#define    Rho_west()   a1 = _mm_shuffle_epi32( a1, 0x93);  \
+                        a2 = ROL32in128(a2, 11);
+
+/*
+** Iota: round constants
+*/
+#define    Iota(__rc)   a0 = XOR128(a0, _mm_set_epi32(0, 0, 0, (__rc)));
+
+/*
+** Chi: non linear step, on colums
+*/
+#define    Chi()        a0 = XOR128(a0, ANDnu128(a1, a2)); \
+                        a1 = XOR128(a1, ANDnu128(a2, a0)); \
+                        a2 = XOR128(a2, ANDnu128(a0, a1));
+
+/*
+** Rho-east: Plane shift#include "Xoodoo.h"
+
+*/
+#define    Rho_east()   a1 = ROL32in128(a1, 1); \
+                        a2 = _mm_shuffle_epi8( a2, rhoEast2);
+
+
+#define    Round(__rc)                          \
+                        Theta();                \
+                        Dump3("Theta");         \
+                        Rho_west();             \
+                        Dump3("Rho-west");      \
+                        Iota(__rc);             \
+                        Dump3("Iota");          \
+                        Chi();                  \
+                        Dump3("Chi");           \
+                        Rho_east();             \
+                        Dump3("Rho-east")
+
+static const uint32_t    RC[MAXROUNDS] = {
+    _rc12,
+    _rc11,
+    _rc10,
+    _rc9,
+    _rc8,
+    _rc7,
+    _rc6,
+    _rc5,
+    _rc4,
+    _rc3,
+    _rc2,
+    _rc1
+};
+
+size_t Xoodyak_AbsorbKeyedFullBlocks(void *state, const uint8_t *X, size_t XLen)
+{
+    size_t  initialLength = XLen;
+    DeclareVars;
+
+    State2Vars(state);
+    do {
+        Round(_rc12);                      /* Xoodyak_Up(instance, NULL, 0, 0); */
+        Round(_rc11);
+        Round(_rc10);
+        Round(_rc9);
+        Round(_rc8);
+        Round(_rc7);
+        Round(_rc6);
+        Round(_rc5);
+        Round(_rc4);
+        Round(_rc3);
+        Round(_rc2);
+        Round(_rc1);
+        a0 = XOR128(a0, LOAD128u(X[0]));  /* Xoodyak_Down(instance, X, Xoodyak_Rkin, 0); */
+        a1 = XOR128(a1, LOAD128u(X[16])); 
+        a2 = XOR128(a2, _mm_set_epi32(1, *(uint32_t*)(&X[40]), *(uint32_t*)(&X[36]), *(uint32_t*)(&X[32])));
+        X       += Xoodyak_Rkin;
+        XLen    -= Xoodyak_Rkin;
+    } while (XLen >= Xoodyak_Rkin);
+    Vars2State(state);
+
+    return initialLength - XLen;
+}
+
+size_t Xoodyak_AbsorbHashFullBlocks(void *state, const uint8_t *X, size_t XLen)
+{
+    size_t  initialLength = XLen;
+    V128    one = _mm_set_epi32(0, 0, 0, 1); 
+    DeclareVars;
+
+    State2Vars(state);
+    do {
+        Round(_rc12);               /* Xoodyak_Up(instance, NULL, 0, 0); */
+        Round(_rc11);
+        Round(_rc10);
+        Round(_rc9);
+        Round(_rc8);
+        Round(_rc7);
+        Round(_rc6);
+        Round(_rc5);
+        Round(_rc4);
+        Round(_rc3);
+        Round(_rc2);
+        Round(_rc1);
+        a0 = XOR128(a0, LOAD128u(X[0]));  /* Xoodyak_Down(instance, X, Xoodyak_Rhash, 0); */
+        a1 = XOR128(a1, one); 
+        X       += Xoodyak_Rhash;
+        XLen    -= Xoodyak_Rhash;
+    } while (XLen >= Xoodyak_Rhash);
+    Vars2State(state);
+
+    return initialLength - XLen;
+}
+
+
+size_t Xoodyak_SqueezeKeyedFullBlocks(void *state, uint8_t *Y, size_t YLen)
+{
+    size_t  initialLength = YLen;
+    V128    one = _mm_set_epi32(0, 0, 0, 1); 
+    DeclareVars;
+
+    State2Vars(state);
+    do {
+        a0 = XOR128(a0, one);   /* Xoodyak_Down(instance, NULL, 0, 0); */
+        Round(_rc12);           /* Xoodyak_Up(instance, Y, Xoodyak_Rkout, 0); */
+        Round(_rc11);
+        Round(_rc10);
+        Round(_rc9);
+        Round(_rc8);
+        Round(_rc7);
+        Round(_rc6);
+        Round(_rc5);
+        Round(_rc4);
+        Round(_rc3);
+        Round(_rc2);
+        Round(_rc1);
+        STORE128u(Y[0], a0);
+        STORE64L(Y[16], a1); 
+        Y       += Xoodyak_Rkout;
+        YLen    -= Xoodyak_Rkout;
+    } while (YLen >= Xoodyak_Rkout);
+    Vars2State(state);
+
+    return initialLength - YLen;
+}
+
+size_t Xoodyak_SqueezeHashFullBlocks(void *state, uint8_t *Y, size_t YLen)
+{
+    size_t  initialLength = YLen;
+    V128    one = _mm_set_epi32(0, 0, 0, 1); 
+    DeclareVars;
+
+    State2Vars(state);
+    do {
+        a0 = XOR128(a0, one);   /* Xoodyak_Down(instance, NULL, 0, 0); */
+        Round(_rc12);           /* Xoodyak_Up(instance, Y, Xoodyak_Rhash, 0); */
+        Round(_rc11);
+        Round(_rc10);
+        Round(_rc9);
+        Round(_rc8);
+        Round(_rc7);
+        Round(_rc6);
+        Round(_rc5);
+        Round(_rc4);
+        Round(_rc3);
+        Round(_rc2);
+        Round(_rc1);
+        STORE128u(Y[0], a0);
+        Y       += Xoodyak_Rhash;
+        YLen    -= Xoodyak_Rhash;
+    } while (YLen >= Xoodyak_Rhash);
+    Vars2State(state);
+
+    return initialLength - YLen;
+}
+
+size_t Xoodyak_EncryptFullBlocks(void *state, const uint8_t *I, uint8_t *O, size_t IOLen)
+{
+    size_t  initialLength = IOLen;
+    DeclareVars;
+
+    State2Vars(state);
+    do {
+        Round(_rc12);
+        Round(_rc11);
+        Round(_rc10);
+        Round(_rc9);
+        Round(_rc8);
+        Round(_rc7);
+        Round(_rc6);
+        Round(_rc5);
+        Round(_rc4);
+        Round(_rc3);
+        Round(_rc2);
+        Round(_rc1);
+        a0 = XOR128(a0, LOAD128u(I[0]));
+        a1 = XOR128(a1, _mm_set_epi32(0, 1, *(uint32_t*)(&I[20]), *(uint32_t*)(&I[16])));
+        STORE128u(O[0], a0);
+        STORE64L(O[16], a1); 
+        I       += Xoodyak_Rkout;
+        O       += Xoodyak_Rkout;
+        IOLen   -= Xoodyak_Rkout;
+    } while (IOLen >= Xoodyak_Rkout);
+    Vars2State(state);
+
+    return initialLength - IOLen;
+}
+
+size_t Xoodyak_DecryptFullBlocks(void *state, const uint8_t *I, uint8_t *O, size_t IOLen)
+{
+    size_t  initialLength = IOLen;
+    V128    o0;
+    V128    one = _mm_set_epi32(0, 1, 0, 0); 
+    DeclareVars;
+
+    State2Vars(state);
+    do {
+        Round(_rc12);
+        Round(_rc11);
+        Round(_rc10);
+        Round(_rc9);
+        Round(_rc8);
+        Round(_rc7);
+        Round(_rc6);
+        Round(_rc5);
+        Round(_rc4);
+        Round(_rc3);
+        Round(_rc2);
+        Round(_rc1);
+        o0 = XOR128(a0, LOAD128u(I[0]));
+#if defined(__i386__) || defined(_M_IX86)
+        *((uint32_t*)(O+16)) = *((uint32_t*)(I+16)) ^ _mm_extract_epi32(a1, 0);
+        *((uint32_t*)(O+20)) = *((uint32_t*)(I+20)) ^ _mm_extract_epi32(a1, 1);
+        a1 = _mm_insert_epi32(a1, *((uint32_t*)(I+16)), 0);
+        a1 = _mm_insert_epi32(a1, *((uint32_t*)(I+20)), 1);
+#else
+        *((uint64_t*)(O+16)) = *((uint64_t*)(I+16)) ^ _mm_extract_epi64(a1, 0);
+        a1 = _mm_insert_epi64(a1, *((uint64_t*)(I+16)), 0);
+#endif
+        STORE128u(O[0], o0);
+        a0 = XOR128(a0, o0); 
+        a1 = XOR128(a1, one); 
+        I       += Xoodyak_Rkout;
+        O       += Xoodyak_Rkout;
+        IOLen   -= Xoodyak_Rkout;
+    } while (IOLen >= Xoodyak_Rkout);
+    Vars2State(state);
+
+    return initialLength - IOLen;
+}

data/ext/xkcp/lib/low/Xoodoo/Xoodoo.h

@@ -0,0 +1,79 @@
+/*
+The eXtended Keccak Code Package (XKCP)
+https://github.com/XKCP/XKCP
+
+The Xoodoo permutation, designed by Joan Daemen, Seth Hoffert, Gilles Van Assche and Ronny Van Keer.
+
+Implementation by Ronny Van Keer, hereby denoted as "the implementer".
+
+For more information, feedback or questions, please refer to the Keccak Team website:
+https://keccak.team/
+
+To the extent possible under law, the implementer has waived all copyright
+and related or neighboring rights to the source code in this file.
+http://creativecommons.org/publicdomain/zero/1.0/
+*/
+
+#ifndef _Xoodoo_h_
+#define _Xoodoo_h_
+
+#include <stdint.h>
+#include <stdlib.h>
+
+#define MAXROUNDS   12
+#define NROWS       3
+#define NCOLUMS     4
+#define NLANES      (NCOLUMS*NROWS)
+
+/*    Round constants    */
+#define _rc12   0x00000058
+#define _rc11   0x00000038
+#define _rc10   0x000003C0
+#define _rc9    0x000000D0
+#define _rc8    0x00000120
+#define _rc7    0x00000014
+#define _rc6    0x00000060
+#define _rc5    0x0000002C
+#define _rc4    0x00000380
+#define _rc3    0x000000F0
+#define _rc2    0x000001A0
+#define _rc1    0x00000012
+
+
+#if !defined(ROTL32)
+    #if defined (__arm__) && !defined(__GNUC__)
+        #define ROTL32(a, offset)                       __ror(a, (32-(offset))%32)
+    #elif defined(_MSC_VER)
+        #define ROTL32(a, offset)                       _rotl(a, (offset)%32)
+    #else
+        #define ROTL32(a, offset)                       ((((uint32_t)a) << ((offset)%32)) ^ (((uint32_t)a) >> ((32-(offset))%32)))
+    #endif
+#endif
+
+#if !defined(READ32_UNALIGNED)
+    #if defined (__arm__) && !defined(__GNUC__)
+        #define READ32_UNALIGNED(argAddress)            (*((const __packed uint32_t*)(argAddress)))
+    #elif defined(_MSC_VER)
+        #define READ32_UNALIGNED(argAddress)            (*((const uint32_t*)(argAddress)))
+    #else
+        #define READ32_UNALIGNED(argAddress)            (*((const uint32_t*)(argAddress)))
+    #endif
+#endif
+
+#if !defined(WRITE32_UNALIGNED)
+    #if defined (__arm__) && !defined(__GNUC__)
+        #define WRITE32_UNALIGNED(argAddress, argData)  (*((__packed uint32_t*)(argAddress)) = (argData))
+    #elif defined(_MSC_VER)
+        #define WRITE32_UNALIGNED(argAddress, argData)  (*((uint32_t*)(argAddress)) = (argData))
+    #else
+        #define WRITE32_UNALIGNED(argAddress, argData)  (*((uint32_t*)(argAddress)) = (argData))
+    #endif
+#endif
+
+#if !defined(index)
+    #define    index(__x,__y)    ((((__y) % NROWS) * NCOLUMS) + ((__x) % NCOLUMS))
+#endif
+
+typedef    uint32_t tXoodooLane;
+
+#endif

data/ext/xkcp/lib/low/Xoodoo/plain/Xoodoo-SnP.h

@@ -0,0 +1,56 @@
+/*
+The eXtended Keccak Code Package (XKCP)
+https://github.com/XKCP/XKCP
+
+The Xoodoo permutation, designed by Joan Daemen, Seth Hoffert, Gilles Van Assche and Ronny Van Keer.
+
+Implementation by Ronny Van Keer, hereby denoted as "the implementer".
+
+For more information, feedback or questions, please refer to the Keccak Team website:
+https://keccak.team/
+
+To the extent possible under law, the implementer has waived all copyright
+and related or neighboring rights to the source code in this file.
+http://creativecommons.org/publicdomain/zero/1.0/
+*/
+
+#ifndef _Xoodoo_SnP_h_
+#define _Xoodoo_SnP_h_
+
+#include <stddef.h>
+#include <stdint.h>
+
+/** For the documentation, see SnP-documentation.h.
+ */
+
+#define Xoodoo_implementation      "32-bit optimized implementation"
+#define Xoodoo_stateSizeInBytes    (3*4*4)
+#define Xoodoo_stateAlignment      4
+#define Xoodoo_HasNround
+
+#define Xoodoo_StaticInitialize()
+void Xoodoo_Initialize(void *state);
+#define Xoodoo_AddByte(argS, argData, argOffset)    ((uint8_t*)argS)[argOffset] ^= (argData)
+void Xoodoo_AddBytes(void *state, const uint8_t *data, unsigned int offset, unsigned int length);
+void Xoodoo_OverwriteBytes(void *state, const uint8_t *data, unsigned int offset, unsigned int length);
+void Xoodoo_OverwriteWithZeroes(void *state, unsigned int byteCount);
+void Xoodoo_Permute_Nrounds(void *state, unsigned int nrounds);
+void Xoodoo_Permute_6rounds(void *state);
+void Xoodoo_Permute_12rounds(void *state);
+void Xoodoo_ExtractBytes(const void *state, uint8_t *data, unsigned int offset, unsigned int length);
+void Xoodoo_ExtractAndAddBytes(const void *state, const uint8_t *input, uint8_t *output, unsigned int offset, unsigned int length);
+
+//#define Xoodoo_FastXoofff_supported
+//void Xoofff_AddIs( uint8_t *output, const uint8_t *input, size_t bitLen);
+//size_t Xoofff_CompressFastLoop(uint8_t *k, uint8_t *xAccu, const uint8_t *input, size_t length);
+//size_t Xoofff_ExpandFastLoop(uint8_t *yAccu, const uint8_t *kRoll, uint8_t *output, size_t length);
+
+#define CyclistFullBlocks_supported
+size_t Xoodyak_AbsorbKeyedFullBlocks(void *state, const uint8_t *X, size_t XLen);
+size_t Xoodyak_AbsorbHashFullBlocks(void *state, const uint8_t *X, size_t XLen);
+size_t Xoodyak_SqueezeHashFullBlocks(void *state, uint8_t *Y, size_t YLen);
+size_t Xoodyak_SqueezeKeyedFullBlocks(void *state, uint8_t *Y, size_t YLen);
+size_t Xoodyak_EncryptFullBlocks(void *state, const uint8_t *I, uint8_t *O, size_t IOLen);
+size_t Xoodyak_DecryptFullBlocks(void *state, const uint8_t *I, uint8_t *O, size_t IOLen);
+
+#endif