442 lines
15 KiB
C
442 lines
15 KiB
C
#include <immintrin.h>
|
|
|
|
#include "params.h"
|
|
#include "rejsample.h"
|
|
|
|
static const uint8_t idx[256][8] = {
|
|
{ 0, 0, 0, 0, 0, 0, 0, 0},
|
|
{ 0, 0, 0, 0, 0, 0, 0, 0},
|
|
{ 1, 0, 0, 0, 0, 0, 0, 0},
|
|
{ 0, 1, 0, 0, 0, 0, 0, 0},
|
|
{ 2, 0, 0, 0, 0, 0, 0, 0},
|
|
{ 0, 2, 0, 0, 0, 0, 0, 0},
|
|
{ 1, 2, 0, 0, 0, 0, 0, 0},
|
|
{ 0, 1, 2, 0, 0, 0, 0, 0},
|
|
{ 3, 0, 0, 0, 0, 0, 0, 0},
|
|
{ 0, 3, 0, 0, 0, 0, 0, 0},
|
|
{ 1, 3, 0, 0, 0, 0, 0, 0},
|
|
{ 0, 1, 3, 0, 0, 0, 0, 0},
|
|
{ 2, 3, 0, 0, 0, 0, 0, 0},
|
|
{ 0, 2, 3, 0, 0, 0, 0, 0},
|
|
{ 1, 2, 3, 0, 0, 0, 0, 0},
|
|
{ 0, 1, 2, 3, 0, 0, 0, 0},
|
|
{ 4, 0, 0, 0, 0, 0, 0, 0},
|
|
{ 0, 4, 0, 0, 0, 0, 0, 0},
|
|
{ 1, 4, 0, 0, 0, 0, 0, 0},
|
|
{ 0, 1, 4, 0, 0, 0, 0, 0},
|
|
{ 2, 4, 0, 0, 0, 0, 0, 0},
|
|
{ 0, 2, 4, 0, 0, 0, 0, 0},
|
|
{ 1, 2, 4, 0, 0, 0, 0, 0},
|
|
{ 0, 1, 2, 4, 0, 0, 0, 0},
|
|
{ 3, 4, 0, 0, 0, 0, 0, 0},
|
|
{ 0, 3, 4, 0, 0, 0, 0, 0},
|
|
{ 1, 3, 4, 0, 0, 0, 0, 0},
|
|
{ 0, 1, 3, 4, 0, 0, 0, 0},
|
|
{ 2, 3, 4, 0, 0, 0, 0, 0},
|
|
{ 0, 2, 3, 4, 0, 0, 0, 0},
|
|
{ 1, 2, 3, 4, 0, 0, 0, 0},
|
|
{ 0, 1, 2, 3, 4, 0, 0, 0},
|
|
{ 5, 0, 0, 0, 0, 0, 0, 0},
|
|
{ 0, 5, 0, 0, 0, 0, 0, 0},
|
|
{ 1, 5, 0, 0, 0, 0, 0, 0},
|
|
{ 0, 1, 5, 0, 0, 0, 0, 0},
|
|
{ 2, 5, 0, 0, 0, 0, 0, 0},
|
|
{ 0, 2, 5, 0, 0, 0, 0, 0},
|
|
{ 1, 2, 5, 0, 0, 0, 0, 0},
|
|
{ 0, 1, 2, 5, 0, 0, 0, 0},
|
|
{ 3, 5, 0, 0, 0, 0, 0, 0},
|
|
{ 0, 3, 5, 0, 0, 0, 0, 0},
|
|
{ 1, 3, 5, 0, 0, 0, 0, 0},
|
|
{ 0, 1, 3, 5, 0, 0, 0, 0},
|
|
{ 2, 3, 5, 0, 0, 0, 0, 0},
|
|
{ 0, 2, 3, 5, 0, 0, 0, 0},
|
|
{ 1, 2, 3, 5, 0, 0, 0, 0},
|
|
{ 0, 1, 2, 3, 5, 0, 0, 0},
|
|
{ 4, 5, 0, 0, 0, 0, 0, 0},
|
|
{ 0, 4, 5, 0, 0, 0, 0, 0},
|
|
{ 1, 4, 5, 0, 0, 0, 0, 0},
|
|
{ 0, 1, 4, 5, 0, 0, 0, 0},
|
|
{ 2, 4, 5, 0, 0, 0, 0, 0},
|
|
{ 0, 2, 4, 5, 0, 0, 0, 0},
|
|
{ 1, 2, 4, 5, 0, 0, 0, 0},
|
|
{ 0, 1, 2, 4, 5, 0, 0, 0},
|
|
{ 3, 4, 5, 0, 0, 0, 0, 0},
|
|
{ 0, 3, 4, 5, 0, 0, 0, 0},
|
|
{ 1, 3, 4, 5, 0, 0, 0, 0},
|
|
{ 0, 1, 3, 4, 5, 0, 0, 0},
|
|
{ 2, 3, 4, 5, 0, 0, 0, 0},
|
|
{ 0, 2, 3, 4, 5, 0, 0, 0},
|
|
{ 1, 2, 3, 4, 5, 0, 0, 0},
|
|
{ 0, 1, 2, 3, 4, 5, 0, 0},
|
|
{ 6, 0, 0, 0, 0, 0, 0, 0},
|
|
{ 0, 6, 0, 0, 0, 0, 0, 0},
|
|
{ 1, 6, 0, 0, 0, 0, 0, 0},
|
|
{ 0, 1, 6, 0, 0, 0, 0, 0},
|
|
{ 2, 6, 0, 0, 0, 0, 0, 0},
|
|
{ 0, 2, 6, 0, 0, 0, 0, 0},
|
|
{ 1, 2, 6, 0, 0, 0, 0, 0},
|
|
{ 0, 1, 2, 6, 0, 0, 0, 0},
|
|
{ 3, 6, 0, 0, 0, 0, 0, 0},
|
|
{ 0, 3, 6, 0, 0, 0, 0, 0},
|
|
{ 1, 3, 6, 0, 0, 0, 0, 0},
|
|
{ 0, 1, 3, 6, 0, 0, 0, 0},
|
|
{ 2, 3, 6, 0, 0, 0, 0, 0},
|
|
{ 0, 2, 3, 6, 0, 0, 0, 0},
|
|
{ 1, 2, 3, 6, 0, 0, 0, 0},
|
|
{ 0, 1, 2, 3, 6, 0, 0, 0},
|
|
{ 4, 6, 0, 0, 0, 0, 0, 0},
|
|
{ 0, 4, 6, 0, 0, 0, 0, 0},
|
|
{ 1, 4, 6, 0, 0, 0, 0, 0},
|
|
{ 0, 1, 4, 6, 0, 0, 0, 0},
|
|
{ 2, 4, 6, 0, 0, 0, 0, 0},
|
|
{ 0, 2, 4, 6, 0, 0, 0, 0},
|
|
{ 1, 2, 4, 6, 0, 0, 0, 0},
|
|
{ 0, 1, 2, 4, 6, 0, 0, 0},
|
|
{ 3, 4, 6, 0, 0, 0, 0, 0},
|
|
{ 0, 3, 4, 6, 0, 0, 0, 0},
|
|
{ 1, 3, 4, 6, 0, 0, 0, 0},
|
|
{ 0, 1, 3, 4, 6, 0, 0, 0},
|
|
{ 2, 3, 4, 6, 0, 0, 0, 0},
|
|
{ 0, 2, 3, 4, 6, 0, 0, 0},
|
|
{ 1, 2, 3, 4, 6, 0, 0, 0},
|
|
{ 0, 1, 2, 3, 4, 6, 0, 0},
|
|
{ 5, 6, 0, 0, 0, 0, 0, 0},
|
|
{ 0, 5, 6, 0, 0, 0, 0, 0},
|
|
{ 1, 5, 6, 0, 0, 0, 0, 0},
|
|
{ 0, 1, 5, 6, 0, 0, 0, 0},
|
|
{ 2, 5, 6, 0, 0, 0, 0, 0},
|
|
{ 0, 2, 5, 6, 0, 0, 0, 0},
|
|
{ 1, 2, 5, 6, 0, 0, 0, 0},
|
|
{ 0, 1, 2, 5, 6, 0, 0, 0},
|
|
{ 3, 5, 6, 0, 0, 0, 0, 0},
|
|
{ 0, 3, 5, 6, 0, 0, 0, 0},
|
|
{ 1, 3, 5, 6, 0, 0, 0, 0},
|
|
{ 0, 1, 3, 5, 6, 0, 0, 0},
|
|
{ 2, 3, 5, 6, 0, 0, 0, 0},
|
|
{ 0, 2, 3, 5, 6, 0, 0, 0},
|
|
{ 1, 2, 3, 5, 6, 0, 0, 0},
|
|
{ 0, 1, 2, 3, 5, 6, 0, 0},
|
|
{ 4, 5, 6, 0, 0, 0, 0, 0},
|
|
{ 0, 4, 5, 6, 0, 0, 0, 0},
|
|
{ 1, 4, 5, 6, 0, 0, 0, 0},
|
|
{ 0, 1, 4, 5, 6, 0, 0, 0},
|
|
{ 2, 4, 5, 6, 0, 0, 0, 0},
|
|
{ 0, 2, 4, 5, 6, 0, 0, 0},
|
|
{ 1, 2, 4, 5, 6, 0, 0, 0},
|
|
{ 0, 1, 2, 4, 5, 6, 0, 0},
|
|
{ 3, 4, 5, 6, 0, 0, 0, 0},
|
|
{ 0, 3, 4, 5, 6, 0, 0, 0},
|
|
{ 1, 3, 4, 5, 6, 0, 0, 0},
|
|
{ 0, 1, 3, 4, 5, 6, 0, 0},
|
|
{ 2, 3, 4, 5, 6, 0, 0, 0},
|
|
{ 0, 2, 3, 4, 5, 6, 0, 0},
|
|
{ 1, 2, 3, 4, 5, 6, 0, 0},
|
|
{ 0, 1, 2, 3, 4, 5, 6, 0},
|
|
{ 7, 0, 0, 0, 0, 0, 0, 0},
|
|
{ 0, 7, 0, 0, 0, 0, 0, 0},
|
|
{ 1, 7, 0, 0, 0, 0, 0, 0},
|
|
{ 0, 1, 7, 0, 0, 0, 0, 0},
|
|
{ 2, 7, 0, 0, 0, 0, 0, 0},
|
|
{ 0, 2, 7, 0, 0, 0, 0, 0},
|
|
{ 1, 2, 7, 0, 0, 0, 0, 0},
|
|
{ 0, 1, 2, 7, 0, 0, 0, 0},
|
|
{ 3, 7, 0, 0, 0, 0, 0, 0},
|
|
{ 0, 3, 7, 0, 0, 0, 0, 0},
|
|
{ 1, 3, 7, 0, 0, 0, 0, 0},
|
|
{ 0, 1, 3, 7, 0, 0, 0, 0},
|
|
{ 2, 3, 7, 0, 0, 0, 0, 0},
|
|
{ 0, 2, 3, 7, 0, 0, 0, 0},
|
|
{ 1, 2, 3, 7, 0, 0, 0, 0},
|
|
{ 0, 1, 2, 3, 7, 0, 0, 0},
|
|
{ 4, 7, 0, 0, 0, 0, 0, 0},
|
|
{ 0, 4, 7, 0, 0, 0, 0, 0},
|
|
{ 1, 4, 7, 0, 0, 0, 0, 0},
|
|
{ 0, 1, 4, 7, 0, 0, 0, 0},
|
|
{ 2, 4, 7, 0, 0, 0, 0, 0},
|
|
{ 0, 2, 4, 7, 0, 0, 0, 0},
|
|
{ 1, 2, 4, 7, 0, 0, 0, 0},
|
|
{ 0, 1, 2, 4, 7, 0, 0, 0},
|
|
{ 3, 4, 7, 0, 0, 0, 0, 0},
|
|
{ 0, 3, 4, 7, 0, 0, 0, 0},
|
|
{ 1, 3, 4, 7, 0, 0, 0, 0},
|
|
{ 0, 1, 3, 4, 7, 0, 0, 0},
|
|
{ 2, 3, 4, 7, 0, 0, 0, 0},
|
|
{ 0, 2, 3, 4, 7, 0, 0, 0},
|
|
{ 1, 2, 3, 4, 7, 0, 0, 0},
|
|
{ 0, 1, 2, 3, 4, 7, 0, 0},
|
|
{ 5, 7, 0, 0, 0, 0, 0, 0},
|
|
{ 0, 5, 7, 0, 0, 0, 0, 0},
|
|
{ 1, 5, 7, 0, 0, 0, 0, 0},
|
|
{ 0, 1, 5, 7, 0, 0, 0, 0},
|
|
{ 2, 5, 7, 0, 0, 0, 0, 0},
|
|
{ 0, 2, 5, 7, 0, 0, 0, 0},
|
|
{ 1, 2, 5, 7, 0, 0, 0, 0},
|
|
{ 0, 1, 2, 5, 7, 0, 0, 0},
|
|
{ 3, 5, 7, 0, 0, 0, 0, 0},
|
|
{ 0, 3, 5, 7, 0, 0, 0, 0},
|
|
{ 1, 3, 5, 7, 0, 0, 0, 0},
|
|
{ 0, 1, 3, 5, 7, 0, 0, 0},
|
|
{ 2, 3, 5, 7, 0, 0, 0, 0},
|
|
{ 0, 2, 3, 5, 7, 0, 0, 0},
|
|
{ 1, 2, 3, 5, 7, 0, 0, 0},
|
|
{ 0, 1, 2, 3, 5, 7, 0, 0},
|
|
{ 4, 5, 7, 0, 0, 0, 0, 0},
|
|
{ 0, 4, 5, 7, 0, 0, 0, 0},
|
|
{ 1, 4, 5, 7, 0, 0, 0, 0},
|
|
{ 0, 1, 4, 5, 7, 0, 0, 0},
|
|
{ 2, 4, 5, 7, 0, 0, 0, 0},
|
|
{ 0, 2, 4, 5, 7, 0, 0, 0},
|
|
{ 1, 2, 4, 5, 7, 0, 0, 0},
|
|
{ 0, 1, 2, 4, 5, 7, 0, 0},
|
|
{ 3, 4, 5, 7, 0, 0, 0, 0},
|
|
{ 0, 3, 4, 5, 7, 0, 0, 0},
|
|
{ 1, 3, 4, 5, 7, 0, 0, 0},
|
|
{ 0, 1, 3, 4, 5, 7, 0, 0},
|
|
{ 2, 3, 4, 5, 7, 0, 0, 0},
|
|
{ 0, 2, 3, 4, 5, 7, 0, 0},
|
|
{ 1, 2, 3, 4, 5, 7, 0, 0},
|
|
{ 0, 1, 2, 3, 4, 5, 7, 0},
|
|
{ 6, 7, 0, 0, 0, 0, 0, 0},
|
|
{ 0, 6, 7, 0, 0, 0, 0, 0},
|
|
{ 1, 6, 7, 0, 0, 0, 0, 0},
|
|
{ 0, 1, 6, 7, 0, 0, 0, 0},
|
|
{ 2, 6, 7, 0, 0, 0, 0, 0},
|
|
{ 0, 2, 6, 7, 0, 0, 0, 0},
|
|
{ 1, 2, 6, 7, 0, 0, 0, 0},
|
|
{ 0, 1, 2, 6, 7, 0, 0, 0},
|
|
{ 3, 6, 7, 0, 0, 0, 0, 0},
|
|
{ 0, 3, 6, 7, 0, 0, 0, 0},
|
|
{ 1, 3, 6, 7, 0, 0, 0, 0},
|
|
{ 0, 1, 3, 6, 7, 0, 0, 0},
|
|
{ 2, 3, 6, 7, 0, 0, 0, 0},
|
|
{ 0, 2, 3, 6, 7, 0, 0, 0},
|
|
{ 1, 2, 3, 6, 7, 0, 0, 0},
|
|
{ 0, 1, 2, 3, 6, 7, 0, 0},
|
|
{ 4, 6, 7, 0, 0, 0, 0, 0},
|
|
{ 0, 4, 6, 7, 0, 0, 0, 0},
|
|
{ 1, 4, 6, 7, 0, 0, 0, 0},
|
|
{ 0, 1, 4, 6, 7, 0, 0, 0},
|
|
{ 2, 4, 6, 7, 0, 0, 0, 0},
|
|
{ 0, 2, 4, 6, 7, 0, 0, 0},
|
|
{ 1, 2, 4, 6, 7, 0, 0, 0},
|
|
{ 0, 1, 2, 4, 6, 7, 0, 0},
|
|
{ 3, 4, 6, 7, 0, 0, 0, 0},
|
|
{ 0, 3, 4, 6, 7, 0, 0, 0},
|
|
{ 1, 3, 4, 6, 7, 0, 0, 0},
|
|
{ 0, 1, 3, 4, 6, 7, 0, 0},
|
|
{ 2, 3, 4, 6, 7, 0, 0, 0},
|
|
{ 0, 2, 3, 4, 6, 7, 0, 0},
|
|
{ 1, 2, 3, 4, 6, 7, 0, 0},
|
|
{ 0, 1, 2, 3, 4, 6, 7, 0},
|
|
{ 5, 6, 7, 0, 0, 0, 0, 0},
|
|
{ 0, 5, 6, 7, 0, 0, 0, 0},
|
|
{ 1, 5, 6, 7, 0, 0, 0, 0},
|
|
{ 0, 1, 5, 6, 7, 0, 0, 0},
|
|
{ 2, 5, 6, 7, 0, 0, 0, 0},
|
|
{ 0, 2, 5, 6, 7, 0, 0, 0},
|
|
{ 1, 2, 5, 6, 7, 0, 0, 0},
|
|
{ 0, 1, 2, 5, 6, 7, 0, 0},
|
|
{ 3, 5, 6, 7, 0, 0, 0, 0},
|
|
{ 0, 3, 5, 6, 7, 0, 0, 0},
|
|
{ 1, 3, 5, 6, 7, 0, 0, 0},
|
|
{ 0, 1, 3, 5, 6, 7, 0, 0},
|
|
{ 2, 3, 5, 6, 7, 0, 0, 0},
|
|
{ 0, 2, 3, 5, 6, 7, 0, 0},
|
|
{ 1, 2, 3, 5, 6, 7, 0, 0},
|
|
{ 0, 1, 2, 3, 5, 6, 7, 0},
|
|
{ 4, 5, 6, 7, 0, 0, 0, 0},
|
|
{ 0, 4, 5, 6, 7, 0, 0, 0},
|
|
{ 1, 4, 5, 6, 7, 0, 0, 0},
|
|
{ 0, 1, 4, 5, 6, 7, 0, 0},
|
|
{ 2, 4, 5, 6, 7, 0, 0, 0},
|
|
{ 0, 2, 4, 5, 6, 7, 0, 0},
|
|
{ 1, 2, 4, 5, 6, 7, 0, 0},
|
|
{ 0, 1, 2, 4, 5, 6, 7, 0},
|
|
{ 3, 4, 5, 6, 7, 0, 0, 0},
|
|
{ 0, 3, 4, 5, 6, 7, 0, 0},
|
|
{ 1, 3, 4, 5, 6, 7, 0, 0},
|
|
{ 0, 1, 3, 4, 5, 6, 7, 0},
|
|
{ 2, 3, 4, 5, 6, 7, 0, 0},
|
|
{ 0, 2, 3, 4, 5, 6, 7, 0},
|
|
{ 1, 2, 3, 4, 5, 6, 7, 0},
|
|
{ 0, 1, 2, 3, 4, 5, 6, 7}
|
|
};
|
|
|
|
uint32_t PQCLEAN_DILITHIUM2_AVX2_rej_uniform(
|
|
uint32_t *r,
|
|
size_t len,
|
|
const uint8_t *buf,
|
|
size_t buflen) {
|
|
uint32_t ctr, pos, vec[8];
|
|
__m256i d, tmp;
|
|
uint32_t good;
|
|
const __m256i bound = _mm256_set1_epi32(Q);
|
|
|
|
ctr = pos = 0;
|
|
while (ctr + 8 <= len && pos + 24 <= buflen) {
|
|
for (size_t i = 0; i < 8; i++) {
|
|
vec[i] = buf[pos++];
|
|
vec[i] |= (uint32_t)buf[pos++] << 8;
|
|
vec[i] |= (uint32_t)buf[pos++] << 16;
|
|
vec[i] &= 0x7FFFFF;
|
|
}
|
|
|
|
d = _mm256_loadu_si256((__m256i_u *)vec);
|
|
tmp = _mm256_cmpgt_epi32(bound, d);
|
|
good = _mm256_movemask_ps((__m256)tmp);
|
|
|
|
__m128i rid = _mm_loadl_epi64((__m128i_u *)&idx[good]);
|
|
tmp = _mm256_cvtepu8_epi32(rid);
|
|
d = _mm256_permutevar8x32_epi32(d, tmp);
|
|
_mm256_storeu_si256((__m256i_u *)&r[ctr], d);
|
|
ctr += __builtin_popcount(good);
|
|
}
|
|
|
|
while (ctr < len && pos + 3 <= buflen) {
|
|
vec[0] = buf[pos++];
|
|
vec[0] |= (uint32_t)buf[pos++] << 8;
|
|
vec[0] |= (uint32_t)buf[pos++] << 16;
|
|
vec[0] &= 0x7FFFFF;
|
|
|
|
if (vec[0] < Q) {
|
|
r[ctr++] = vec[0];
|
|
}
|
|
}
|
|
|
|
return ctr;
|
|
}
|
|
|
|
uint32_t PQCLEAN_DILITHIUM2_AVX2_rej_eta(
|
|
uint32_t *r,
|
|
size_t len,
|
|
const uint8_t *buf,
|
|
size_t buflen) {
|
|
uint32_t ctr, pos;
|
|
uint8_t vec[32];
|
|
__m256i tmp0, tmp1;
|
|
__m128i d0, d1, rid;
|
|
uint32_t good;
|
|
const __m256i bound = _mm256_set1_epi8(2 * ETA + 1);
|
|
const __m256i off = _mm256_set1_epi32(Q + ETA);
|
|
|
|
ctr = pos = 0;
|
|
while (ctr + 32 <= len && pos + 16 <= buflen) {
|
|
for (size_t i = 0; i < 16; i++) {
|
|
vec[2 * i + 0] = buf[pos] & 0x0F;
|
|
vec[2 * i + 1] = buf[pos++] >> 4;
|
|
}
|
|
|
|
tmp0 = _mm256_loadu_si256((__m256i_u *)vec);
|
|
tmp1 = _mm256_cmpgt_epi8(bound, tmp0);
|
|
good = _mm256_movemask_epi8(tmp1);
|
|
|
|
d0 = _mm256_castsi256_si128(tmp0);
|
|
rid = _mm_loadl_epi64((__m128i_u *)&idx[good & 0xFF]);
|
|
d1 = _mm_shuffle_epi8(d0, rid);
|
|
tmp1 = _mm256_cvtepu8_epi32(d1);
|
|
tmp1 = _mm256_sub_epi32(off, tmp1);
|
|
_mm256_storeu_si256((__m256i_u *)&r[ctr], tmp1);
|
|
ctr += __builtin_popcount(good & 0xFF);
|
|
|
|
d0 = _mm_bsrli_si128(d0, 8);
|
|
rid = _mm_loadl_epi64((__m128i_u *)&idx[(good >> 8) & 0xFF]);
|
|
d1 = _mm_shuffle_epi8(d0, rid);
|
|
tmp1 = _mm256_cvtepu8_epi32(d1);
|
|
tmp1 = _mm256_sub_epi32(off, tmp1);
|
|
_mm256_storeu_si256((__m256i_u *)&r[ctr], tmp1);
|
|
ctr += __builtin_popcount((good >> 8) & 0xFF);
|
|
|
|
d0 = _mm256_extracti128_si256(tmp0, 1);
|
|
rid = _mm_loadl_epi64((__m128i_u *)&idx[(good >> 16) & 0xFF]);
|
|
d1 = _mm_shuffle_epi8(d0, rid);
|
|
tmp1 = _mm256_cvtepu8_epi32(d1);
|
|
tmp1 = _mm256_sub_epi32(off, tmp1);
|
|
_mm256_storeu_si256((__m256i_u *)&r[ctr], tmp1);
|
|
ctr += __builtin_popcount((good >> 16) & 0xFF);
|
|
|
|
d0 = _mm_bsrli_si128(d0, 8);
|
|
rid = _mm_loadl_epi64((__m128i_u *)&idx[(good >> 24) & 0xFF]);
|
|
d1 = _mm_shuffle_epi8(d0, rid);
|
|
tmp1 = _mm256_cvtepu8_epi32(d1);
|
|
tmp1 = _mm256_sub_epi32(off, tmp1);
|
|
_mm256_storeu_si256((__m256i_u *)&r[ctr], tmp1);
|
|
ctr += __builtin_popcount((good >> 24) & 0xFF);
|
|
}
|
|
|
|
while (ctr < len && pos < buflen) {
|
|
vec[0] = buf[pos] & 0x0F;
|
|
vec[1] = buf[pos++] >> 4;
|
|
|
|
if (vec[0] <= 2 * ETA) {
|
|
r[ctr++] = Q + ETA - vec[0];
|
|
}
|
|
if (vec[1] <= 2 * ETA && ctr < len) {
|
|
r[ctr++] = Q + ETA - vec[1];
|
|
}
|
|
}
|
|
|
|
return ctr;
|
|
}
|
|
|
|
uint32_t PQCLEAN_DILITHIUM2_AVX2_rej_gamma1m1(
|
|
uint32_t *r,
|
|
size_t len,
|
|
const uint8_t *buf,
|
|
size_t buflen) {
|
|
uint32_t ctr, pos;
|
|
uint32_t vec[8];
|
|
__m256i d, tmp;
|
|
uint32_t good;
|
|
const __m256i bound = _mm256_set1_epi32(2 * GAMMA1 - 1);
|
|
const __m256i off = _mm256_set1_epi32(Q + GAMMA1 - 1);
|
|
|
|
ctr = pos = 0;
|
|
while (ctr + 8 <= len && pos + 20 <= buflen) {
|
|
for (size_t i = 0; i < 4; i++) {
|
|
vec[2 * i + 0] = buf[pos + 0];
|
|
vec[2 * i + 0] |= (uint32_t)buf[pos + 1] << 8;
|
|
vec[2 * i + 0] |= (uint32_t)buf[pos + 2] << 16;
|
|
vec[2 * i + 0] &= 0xFFFFF;
|
|
|
|
vec[2 * i + 1] = buf[pos + 2] >> 4;
|
|
vec[2 * i + 1] |= (uint32_t)buf[pos + 3] << 4;
|
|
vec[2 * i + 1] |= (uint32_t)buf[pos + 4] << 12;
|
|
|
|
pos += 5;
|
|
}
|
|
|
|
d = _mm256_loadu_si256((__m256i_u *)vec);
|
|
tmp = _mm256_cmpgt_epi32(bound, d);
|
|
good = _mm256_movemask_ps((__m256)tmp);
|
|
d = _mm256_sub_epi32(off, d);
|
|
|
|
__m128i rid = _mm_loadl_epi64((__m128i_u *)&idx[good]);
|
|
tmp = _mm256_cvtepu8_epi32(rid);
|
|
d = _mm256_permutevar8x32_epi32(d, tmp);
|
|
_mm256_storeu_si256((__m256i_u *)&r[ctr], d);
|
|
ctr += __builtin_popcount(good);
|
|
}
|
|
|
|
while (ctr < len && pos + 5 <= buflen) {
|
|
vec[0] = buf[pos + 0];
|
|
vec[0] |= (uint32_t)buf[pos + 1] << 8;
|
|
vec[0] |= (uint32_t)buf[pos + 2] << 16;
|
|
vec[0] &= 0xFFFFF;
|
|
|
|
vec[1] = buf[pos + 2] >> 4;
|
|
vec[1] |= (uint32_t)buf[pos + 3] << 4;
|
|
vec[1] |= (uint32_t)buf[pos + 4] << 12;
|
|
|
|
pos += 5;
|
|
|
|
if (vec[0] <= 2 * GAMMA1 - 2) {
|
|
r[ctr++] = Q + GAMMA1 - 1 - vec[0];
|
|
}
|
|
if (vec[1] <= 2 * GAMMA1 - 2 && ctr < len) {
|
|
r[ctr++] = Q + GAMMA1 - 1 - vec[1];
|
|
}
|
|
}
|
|
|
|
return ctr;
|
|
}
|