2bee229103
The last instruction did not unwind correctly. Also add .type and .size annotations so that errors show up properly. Change-Id: Id18e12b4ed51bdabb90bd5ac66631fd989649eec Reviewed-on: https://boringssl-review.googlesource.com/c/34190 Reviewed-by: Adam Langley <agl@google.com> Commit-Queue: Adam Langley <agl@google.com>
63 lines
2.2 KiB
C
63 lines
2.2 KiB
C
/* Copyright (c) 2018, Google Inc.
|
|
*
|
|
* Permission to use, copy, modify, and/or distribute this software for any
|
|
* purpose with or without fee is hereby granted, provided that the above
|
|
* copyright notice and this permission notice appear in all copies.
|
|
*
|
|
* THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
|
|
* WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
|
|
* MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY
|
|
* SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
|
|
* WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION
|
|
* OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN
|
|
* CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. */
|
|
|
|
#ifndef OPENSSL_HEADER_HRSS_INTERNAL_H
|
|
#define OPENSSL_HEADER_HRSS_INTERNAL_H
|
|
|
|
#include <openssl/base.h>
|
|
#include "../internal.h"
|
|
|
|
#if defined(__cplusplus)
|
|
extern "C" {
|
|
#endif
|
|
|
|
|
|
#define N 701
|
|
#define BITS_PER_WORD (sizeof(crypto_word_t) * 8)
|
|
#define WORDS_PER_POLY ((N + BITS_PER_WORD - 1) / BITS_PER_WORD)
|
|
#define BITS_IN_LAST_WORD (N % BITS_PER_WORD)
|
|
|
|
struct poly2 {
|
|
crypto_word_t v[WORDS_PER_POLY];
|
|
};
|
|
|
|
struct poly3 {
|
|
struct poly2 s, a;
|
|
};
|
|
|
|
OPENSSL_EXPORT void HRSS_poly2_rotr_consttime(struct poly2 *p, size_t bits);
|
|
OPENSSL_EXPORT void HRSS_poly3_mul(struct poly3 *out, const struct poly3 *x,
|
|
const struct poly3 *y);
|
|
OPENSSL_EXPORT void HRSS_poly3_invert(struct poly3 *out,
|
|
const struct poly3 *in);
|
|
|
|
// On x86-64, we can use the AVX2 code from [HRSS]. (The authors have given
|
|
// explicit permission for this and signed a CLA.) However it's 57KB of object
|
|
// code, so it's not used if |OPENSSL_SMALL| is defined.
|
|
#if !defined(OPENSSL_NO_ASM) && !defined(OPENSSL_SMALL) && \
|
|
defined(OPENSSL_X86_64) && defined(OPENSSL_LINUX)
|
|
#define POLY_RQ_MUL_ASM
|
|
// poly_Rq_mul is defined in assembly. Inputs and outputs must be 16-byte-
|
|
// aligned.
|
|
extern void poly_Rq_mul(uint16_t r[N + 3], const uint16_t a[N + 3],
|
|
const uint16_t b[N + 3]);
|
|
#endif
|
|
|
|
|
|
#if defined(__cplusplus)
|
|
} // extern "C"
|
|
#endif
|
|
|
|
#endif // !OPENSSL_HEADER_HRSS_INTERNAL_H
|