kris/pqcrypto
1
1
Fork 0
mirror of https://github.com/henrydcase/pqc.git synced 2024-11-23 07:59:01 +00:00
Code Issues 1 Releases Wiki Activity
3543b1718d
pqcrypto/crypto_kem/lightsaber/avx2/poly_mul.c
John M. Schanck 3543b1718d slightly faster avx2 schoolbook multiplications
2021-03-24 21:02:49 +00:00

1497 lines
50 KiB
C
Raw Blame History

#include "SABER_params.h"
#include "poly.h"
#define L (SABER_N / 64)
/* 16 word parallel multiply */
#define mul(a, b) _mm256_mullo_epi16((a), (b))
/* 16 word parallel multiply and accumulate */
#define mac(a, b, c) _mm256_add_epi16(_mm256_mullo_epi16((a), (b)), (c))
static void schoolbook16x16(__m256i *c, const __m256i *a, const __m256i *b) {
__m256i a0, a1, a2, a3;
__m256i b0, b1, b2, b3;
__m256i t0;
a0 = a[0];
a1 = a[1];
a2 = a[2];
a3 = a[3];
b0 = b[0];
b1 = b[1];
b2 = b[2];
b3 = b[3];
c[0] = mul(a0, b0);
t0 = mul(a0, b1);
c[1] = mac(a1, b0, t0);
t0 = mul(a0, b2);
t0 = mac(a1, b1, t0);
c[2] = mac(a2, b0, t0);
t0 = mul(a0, b3);
t0 = mac(a1, b2, t0);
t0 = mac(a2, b1, t0);
c[3] = mac(a3, b0, t0);
t0 = mul(a1, b3);
t0 = mac(a2, b2, t0);
c[4] = mac(a3, b1, t0);
t0 = mul(a2, b3);
c[5] = mac(a3, b2, t0);
c[6] = mul(a3, b3);
b0 = b[4];
b1 = b[5];
b2 = b[6];
b3 = b[7];
c[4] = mac(a0, b0, c[4]);
t0 = mac(a0, b1, c[5]);
c[5] = mac(a1, b0, t0);
t0 = mac(a0, b2, c[6]);
t0 = mac(a1, b1, t0);
c[6] = mac(a2, b0, t0);
t0 = mul(a0, b3);
t0 = mac(a1, b2, t0);
t0 = mac(a2, b1, t0);
c[7] = mac(a3, b0, t0);
t0 = mul(a1, b3);
t0 = mac(a2, b2, t0);
c[8] = mac(a3, b1, t0);
t0 = mul(a2, b3);
c[9] = mac(a3, b2, t0);
c[10] = mul(a3, b3);
b0 = b[8];
b1 = b[9];
b2 = b[10];
b3 = b[11];
c[8] = mac(a0, b0, c[8]);
t0 = mac(a0, b1, c[9]);
c[9] = mac(a1, b0, t0);
t0 = mac(a0, b2, c[10]);
t0 = mac(a1, b1, t0);
c[10] = mac(a2, b0, t0);
t0 = mul(a0, b3);
t0 = mac(a1, b2, t0);
t0 = mac(a2, b1, t0);
c[11] = mac(a3, b0, t0);
t0 = mul(a1, b3);
t0 = mac(a2, b2, t0);
c[12] = mac(a3, b1, t0);
t0 = mul(a2, b3);
c[13] = mac(a3, b2, t0);
c[14] = mul(a3, b3);
b0 = b[12];
b1 = b[13];
b2 = b[14];
b3 = b[15];
c[12] = mac(a0, b0, c[12]);
t0 = mac(a0, b1, c[13]);
c[13] = mac(a1, b0, t0);
t0 = mac(a0, b2, c[14]);
t0 = mac(a1, b1, t0);
c[14] = mac(a2, b0, t0);
t0 = mul(a0, b3);
t0 = mac(a1, b2, t0);
t0 = mac(a2, b1, t0);
c[15] = mac(a3, b0, t0);
t0 = mul(a1, b3);
t0 = mac(a2, b2, t0);
c[16] = mac(a3, b1, t0);
t0 = mul(a2, b3);
c[17] = mac(a3, b2, t0);
c[18] = mul(a3, b3);
a0 = a[4];
a1 = a[5];
a2 = a[6];
a3 = a[7];
c[16] = mac(a0, b0, c[16]);
t0 = mac(a0, b1, c[17]);
c[17] = mac(a1, b0, t0);
t0 = mac(a0, b2, c[18]);
t0 = mac(a1, b1, t0);
c[18] = mac(a2, b0, t0);
t0 = mul(a0, b3);
t0 = mac(a1, b2, t0);
t0 = mac(a2, b1, t0);
c[19] = mac(a3, b0, t0);
t0 = mul(a1, b3);
t0 = mac(a2, b2, t0);
c[20] = mac(a3, b1, t0);
t0 = mul(a2, b3);
c[21] = mac(a3, b2, t0);
c[22] = mul(a3, b3);
b0 = b[8];
b1 = b[9];
b2 = b[10];
b3 = b[11];
c[12] = mac(a0, b0, c[12]);
t0 = mac(a0, b1, c[13]);
c[13] = mac(a1, b0, t0);
t0 = mac(a0, b2, c[14]);
t0 = mac(a1, b1, t0);
c[14] = mac(a2, b0, t0);
t0 = mac(a0, b3, c[15]);
t0 = mac(a1, b2, t0);
t0 = mac(a2, b1, t0);
c[15] = mac(a3, b0, t0);
t0 = mac(a1, b3, c[16]);
t0 = mac(a2, b2, t0);
c[16] = mac(a3, b1, t0);
t0 = mac(a2, b3, c[17]);
c[17] = mac(a3, b2, t0);
c[18] = mac(a3, b3, c[18]);
b0 = b[4];
b1 = b[5];
b2 = b[6];
b3 = b[7];
c[8] = mac(a0, b0, c[8]);
t0 = mac(a0, b1, c[9]);
c[9] = mac(a1, b0, t0);
t0 = mac(a0, b2, c[10]);
t0 = mac(a1, b1, t0);
c[10] = mac(a2, b0, t0);
t0 = mac(a0, b3, c[11]);
t0 = mac(a1, b2, t0);
t0 = mac(a2, b1, t0);
c[11] = mac(a3, b0, t0);
t0 = mac(a1, b3, c[12]);
t0 = mac(a2, b2, t0);
c[12] = mac(a3, b1, t0);
t0 = mac(a2, b3, c[13]);
c[13] = mac(a3, b2, t0);
c[14] = mac(a3, b3, c[14]);
b0 = b[0];
b1 = b[1];
b2 = b[2];
b3 = b[3];
c[4] = mac(a0, b0, c[4]);
t0 = mac(a0, b1, c[5]);
c[5] = mac(a1, b0, t0);
t0 = mac(a0, b2, c[6]);
t0 = mac(a1, b1, t0);
c[6] = mac(a2, b0, t0);
t0 = mac(a0, b3, c[7]);
t0 = mac(a1, b2, t0);
t0 = mac(a2, b1, t0);
c[7] = mac(a3, b0, t0);
t0 = mac(a1, b3, c[8]);
t0 = mac(a2, b2, t0);
c[8] = mac(a3, b1, t0);
t0 = mac(a2, b3, c[9]);
c[9] = mac(a3, b2, t0);
c[10] = mac(a3, b3, c[10]);
a0 = a[8];
a1 = a[9];
a2 = a[10];
a3 = a[11];
c[8] = mac(a0, b0, c[8]);
t0 = mac(a0, b1, c[9]);
c[9] = mac(a1, b0, t0);
t0 = mac(a0, b2, c[10]);
t0 = mac(a1, b1, t0);
c[10] = mac(a2, b0, t0);
t0 = mac(a0, b3, c[11]);
t0 = mac(a1, b2, t0);
t0 = mac(a2, b1, t0);
c[11] = mac(a3, b0, t0);
t0 = mac(a1, b3, c[12]);
t0 = mac(a2, b2, t0);
c[12] = mac(a3, b1, t0);
t0 = mac(a2, b3, c[13]);
c[13] = mac(a3, b2, t0);
c[14] = mac(a3, b3, c[14]);
b0 = b[4];
b1 = b[5];
b2 = b[6];
b3 = b[7];
c[12] = mac(a0, b0, c[12]);
t0 = mac(a0, b1, c[13]);
c[13] = mac(a1, b0, t0);
t0 = mac(a0, b2, c[14]);
t0 = mac(a1, b1, t0);
c[14] = mac(a2, b0, t0);
t0 = mac(a0, b3, c[15]);
t0 = mac(a1, b2, t0);
t0 = mac(a2, b1, t0);
c[15] = mac(a3, b0, t0);
t0 = mac(a1, b3, c[16]);
t0 = mac(a2, b2, t0);
c[16] = mac(a3, b1, t0);
t0 = mac(a2, b3, c[17]);
c[17] = mac(a3, b2, t0);
c[18] = mac(a3, b3, c[18]);
b0 = b[8];
b1 = b[9];
b2 = b[10];
b3 = b[11];
c[16] = mac(a0, b0, c[16]);
t0 = mac(a0, b1, c[17]);
c[17] = mac(a1, b0, t0);
t0 = mac(a0, b2, c[18]);
t0 = mac(a1, b1, t0);
c[18] = mac(a2, b0, t0);
t0 = mac(a0, b3, c[19]);
t0 = mac(a1, b2, t0);
t0 = mac(a2, b1, t0);
c[19] = mac(a3, b0, t0);
t0 = mac(a1, b3, c[20]);
t0 = mac(a2, b2, t0);
c[20] = mac(a3, b1, t0);
t0 = mac(a2, b3, c[21]);
c[21] = mac(a3, b2, t0);
c[22] = mac(a3, b3, c[22]);
b0 = b[12];
b1 = b[13];
b2 = b[14];
b3 = b[15];
c[20] = mac(a0, b0, c[20]);
t0 = mac(a0, b1, c[21]);
c[21] = mac(a1, b0, t0);
t0 = mac(a0, b2, c[22]);
t0 = mac(a1, b1, t0);
c[22] = mac(a2, b0, t0);
t0 = mul(a0, b3);
t0 = mac(a1, b2, t0);
t0 = mac(a2, b1, t0);
c[23] = mac(a3, b0, t0);
t0 = mul(a1, b3);
t0 = mac(a2, b2, t0);
c[24] = mac(a3, b1, t0);
t0 = mul(a2, b3);
c[25] = mac(a3, b2, t0);
c[26] = mul(a3, b3);
a0 = a[12];
a1 = a[13];
a2 = a[14];
a3 = a[15];
c[24] = mac(a0, b0, c[24]);
t0 = mac(a0, b1, c[25]);
c[25] = mac(a1, b0, t0);
t0 = mac(a0, b2, c[26]);
t0 = mac(a1, b1, t0);
c[26] = mac(a2, b0, t0);
t0 = mul(a0, b3);
t0 = mac(a1, b2, t0);
t0 = mac(a2, b1, t0);
c[27] = mac(a3, b0, t0);
t0 = mul(a1, b3);
t0 = mac(a2, b2, t0);
c[28] = mac(a3, b1, t0);
t0 = mul(a2, b3);
c[29] = mac(a3, b2, t0);
c[30] = mul(a3, b3);
b0 = b[8];
b1 = b[9];
b2 = b[10];
b3 = b[11];
c[20] = mac(a0, b0, c[20]);
t0 = mac(a0, b1, c[21]);
c[21] = mac(a1, b0, t0);
t0 = mac(a0, b2, c[22]);
t0 = mac(a1, b1, t0);
c[22] = mac(a2, b0, t0);
t0 = mac(a0, b3, c[23]);
t0 = mac(a1, b2, t0);
t0 = mac(a2, b1, t0);
c[23] = mac(a3, b0, t0);
t0 = mac(a1, b3, c[24]);
t0 = mac(a2, b2, t0);
c[24] = mac(a3, b1, t0);
t0 = mac(a2, b3, c[25]);
c[25] = mac(a3, b2, t0);
c[26] = mac(a3, b3, c[26]);
b0 = b[4];
b1 = b[5];
b2 = b[6];
b3 = b[7];
c[16] = mac(a0, b0, c[16]);
t0 = mac(a0, b1, c[17]);
c[17] = mac(a1, b0, t0);
t0 = mac(a0, b2, c[18]);
t0 = mac(a1, b1, t0);
c[18] = mac(a2, b0, t0);
t0 = mac(a0, b3, c[19]);
t0 = mac(a1, b2, t0);
t0 = mac(a2, b1, t0);
c[19] = mac(a3, b0, t0);
t0 = mac(a1, b3, c[20]);
t0 = mac(a2, b2, t0);
c[20] = mac(a3, b1, t0);
t0 = mac(a2, b3, c[21]);
c[21] = mac(a3, b2, t0);
c[22] = mac(a3, b3, c[22]);
b0 = b[0];
b1 = b[1];
b2 = b[2];
b3 = b[3];
c[12] = mac(a0, b0, c[12]);
t0 = mac(a0, b1, c[13]);
c[13] = mac(a1, b0, t0);
t0 = mac(a0, b2, c[14]);
t0 = mac(a1, b1, t0);
c[14] = mac(a2, b0, t0);
t0 = mac(a0, b3, c[15]);
t0 = mac(a1, b2, t0);
t0 = mac(a2, b1, t0);
c[15] = mac(a3, b0, t0);
t0 = mac(a1, b3, c[16]);
t0 = mac(a2, b2, t0);
c[16] = mac(a3, b1, t0);
t0 = mac(a2, b3, c[17]);
c[17] = mac(a3, b2, t0);
c[18] = mac(a3, b3, c[18]);
c[31] = _mm256_setzero_si256();
}
static void schoolbook16x16_acc(__m256i *c, const __m256i *a, const __m256i *b) {
__m256i a0, a1, a2, a3;
__m256i b0, b1, b2, b3;
__m256i t0;
a0 = a[0];
a1 = a[1];
a2 = a[2];
a3 = a[3];
b0 = b[0];
b1 = b[1];
b2 = b[2];
b3 = b[3];
c[0] = mac(a0, b0, c[0]);
t0 = mac(a0, b1, c[1]);
c[1] = mac(a1, b0, t0);
t0 = mac(a0, b2, c[2]);
t0 = mac(a1, b1, t0);
c[2] = mac(a2, b0, t0);
t0 = mac(a0, b3, c[3]);
t0 = mac(a1, b2, t0);
t0 = mac(a2, b1, t0);
c[3] = mac(a3, b0, t0);
t0 = mac(a1, b3, c[4]);
t0 = mac(a2, b2, t0);
c[4] = mac(a3, b1, t0);
t0 = mac(a2, b3, c[5]);
c[5] = mac(a3, b2, t0);
c[6] = mac(a3, b3, c[6]);
b0 = b[4];
b1 = b[5];
b2 = b[6];
b3 = b[7];
c[4] = mac(a0, b0, c[4]);
t0 = mac(a0, b1, c[5]);
c[5] = mac(a1, b0, t0);
t0 = mac(a0, b2, c[6]);
t0 = mac(a1, b1, t0);
c[6] = mac(a2, b0, t0);
t0 = mac(a0, b3, c[7]);
t0 = mac(a1, b2, t0);
t0 = mac(a2, b1, t0);
c[7] = mac(a3, b0, t0);
t0 = mac(a1, b3, c[8]);
t0 = mac(a2, b2, t0);
c[8] = mac(a3, b1, t0);
t0 = mac(a2, b3, c[9]);
c[9] = mac(a3, b2, t0);
c[10] = mac(a3, b3, c[10]);
b0 = b[8];
b1 = b[9];
b2 = b[10];
b3 = b[11];
c[8] = mac(a0, b0, c[8]);
t0 = mac(a0, b1, c[9]);
c[9] = mac(a1, b0, t0);
t0 = mac(a0, b2, c[10]);
t0 = mac(a1, b1, t0);
c[10] = mac(a2, b0, t0);
t0 = mac(a0, b3, c[11]);
t0 = mac(a1, b2, t0);
t0 = mac(a2, b1, t0);
c[11] = mac(a3, b0, t0);
t0 = mac(a1, b3, c[12]);
t0 = mac(a2, b2, t0);
c[12] = mac(a3, b1, t0);
t0 = mac(a2, b3, c[13]);
c[13] = mac(a3, b2, t0);
c[14] = mac(a3, b3, c[14]);
b0 = b[12];
b1 = b[13];
b2 = b[14];
b3 = b[15];
c[12] = mac(a0, b0, c[12]);
t0 = mac(a0, b1, c[13]);
c[13] = mac(a1, b0, t0);
t0 = mac(a0, b2, c[14]);
t0 = mac(a1, b1, t0);
c[14] = mac(a2, b0, t0);
t0 = mac(a0, b3, c[15]);
t0 = mac(a1, b2, t0);
t0 = mac(a2, b1, t0);
c[15] = mac(a3, b0, t0);
t0 = mac(a1, b3, c[16]);
t0 = mac(a2, b2, t0);
c[16] = mac(a3, b1, t0);
t0 = mac(a2, b3, c[17]);
c[17] = mac(a3, b2, t0);
c[18] = mac(a3, b3, c[18]);
a0 = a[4];
a1 = a[5];
a2 = a[6];
a3 = a[7];
c[16] = mac(a0, b0, c[16]);
t0 = mac(a0, b1, c[17]);
c[17] = mac(a1, b0, t0);
t0 = mac(a0, b2, c[18]);
t0 = mac(a1, b1, t0);
c[18] = mac(a2, b0, t0);
t0 = mac(a0, b3, c[19]);
t0 = mac(a1, b2, t0);
t0 = mac(a2, b1, t0);
c[19] = mac(a3, b0, t0);
t0 = mac(a1, b3, c[20]);
t0 = mac(a2, b2, t0);
c[20] = mac(a3, b1, t0);
t0 = mac(a2, b3, c[21]);
c[21] = mac(a3, b2, t0);
c[22] = mac(a3, b3, c[22]);
b0 = b[8];
b1 = b[9];
b2 = b[10];
b3 = b[11];
c[12] = mac(a0, b0, c[12]);
t0 = mac(a0, b1, c[13]);
c[13] = mac(a1, b0, t0);
t0 = mac(a0, b2, c[14]);
t0 = mac(a1, b1, t0);
c[14] = mac(a2, b0, t0);
t0 = mac(a0, b3, c[15]);
t0 = mac(a1, b2, t0);
t0 = mac(a2, b1, t0);
c[15] = mac(a3, b0, t0);
t0 = mac(a1, b3, c[16]);
t0 = mac(a2, b2, t0);
c[16] = mac(a3, b1, t0);
t0 = mac(a2, b3, c[17]);
c[17] = mac(a3, b2, t0);
c[18] = mac(a3, b3, c[18]);
b0 = b[4];
b1 = b[5];
b2 = b[6];
b3 = b[7];
c[8] = mac(a0, b0, c[8]);
t0 = mac(a0, b1, c[9]);
c[9] = mac(a1, b0, t0);
t0 = mac(a0, b2, c[10]);
t0 = mac(a1, b1, t0);
c[10] = mac(a2, b0, t0);
t0 = mac(a0, b3, c[11]);
t0 = mac(a1, b2, t0);
t0 = mac(a2, b1, t0);
c[11] = mac(a3, b0, t0);
t0 = mac(a1, b3, c[12]);
t0 = mac(a2, b2, t0);
c[12] = mac(a3, b1, t0);
t0 = mac(a2, b3, c[13]);
c[13] = mac(a3, b2, t0);
c[14] = mac(a3, b3, c[14]);
b0 = b[0];
b1 = b[1];
b2 = b[2];
b3 = b[3];
c[4] = mac(a0, b0, c[4]);
t0 = mac(a0, b1, c[5]);
c[5] = mac(a1, b0, t0);
t0 = mac(a0, b2, c[6]);
t0 = mac(a1, b1, t0);
c[6] = mac(a2, b0, t0);
t0 = mac(a0, b3, c[7]);
t0 = mac(a1, b2, t0);
t0 = mac(a2, b1, t0);
c[7] = mac(a3, b0, t0);
t0 = mac(a1, b3, c[8]);
t0 = mac(a2, b2, t0);
c[8] = mac(a3, b1, t0);
t0 = mac(a2, b3, c[9]);
c[9] = mac(a3, b2, t0);
c[10] = mac(a3, b3, c[10]);
a0 = a[8];
a1 = a[9];
a2 = a[10];
a3 = a[11];
c[8] = mac(a0, b0, c[8]);
t0 = mac(a0, b1, c[9]);
c[9] = mac(a1, b0, t0);
t0 = mac(a0, b2, c[10]);
t0 = mac(a1, b1, t0);
c[10] = mac(a2, b0, t0);
t0 = mac(a0, b3, c[11]);
t0 = mac(a1, b2, t0);
t0 = mac(a2, b1, t0);
c[11] = mac(a3, b0, t0);
t0 = mac(a1, b3, c[12]);
t0 = mac(a2, b2, t0);
c[12] = mac(a3, b1, t0);
t0 = mac(a2, b3, c[13]);
c[13] = mac(a3, b2, t0);
c[14] = mac(a3, b3, c[14]);
b0 = b[4];
b1 = b[5];
b2 = b[6];
b3 = b[7];
c[12] = mac(a0, b0, c[12]);
t0 = mac(a0, b1, c[13]);
c[13] = mac(a1, b0, t0);
t0 = mac(a0, b2, c[14]);
t0 = mac(a1, b1, t0);
c[14] = mac(a2, b0, t0);
t0 = mac(a0, b3, c[15]);
t0 = mac(a1, b2, t0);
t0 = mac(a2, b1, t0);
c[15] = mac(a3, b0, t0);
t0 = mac(a1, b3, c[16]);
t0 = mac(a2, b2, t0);
c[16] = mac(a3, b1, t0);
t0 = mac(a2, b3, c[17]);
c[17] = mac(a3, b2, t0);
c[18] = mac(a3, b3, c[18]);
b0 = b[8];
b1 = b[9];
b2 = b[10];
b3 = b[11];
c[16] = mac(a0, b0, c[16]);
t0 = mac(a0, b1, c[17]);
c[17] = mac(a1, b0, t0);
t0 = mac(a0, b2, c[18]);
t0 = mac(a1, b1, t0);
c[18] = mac(a2, b0, t0);
t0 = mac(a0, b3, c[19]);
t0 = mac(a1, b2, t0);
t0 = mac(a2, b1, t0);
c[19] = mac(a3, b0, t0);
t0 = mac(a1, b3, c[20]);
t0 = mac(a2, b2, t0);
c[20] = mac(a3, b1, t0);
t0 = mac(a2, b3, c[21]);
c[21] = mac(a3, b2, t0);
c[22] = mac(a3, b3, c[22]);
b0 = b[12];
b1 = b[13];
b2 = b[14];
b3 = b[15];
c[20] = mac(a0, b0, c[20]);
t0 = mac(a0, b1, c[21]);
c[21] = mac(a1, b0, t0);
t0 = mac(a0, b2, c[22]);
t0 = mac(a1, b1, t0);
c[22] = mac(a2, b0, t0);
t0 = mac(a0, b3, c[23]);
t0 = mac(a1, b2, t0);
t0 = mac(a2, b1, t0);
c[23] = mac(a3, b0, t0);
t0 = mac(a1, b3, c[24]);
t0 = mac(a2, b2, t0);
c[24] = mac(a3, b1, t0);
t0 = mac(a2, b3, c[25]);
c[25] = mac(a3, b2, t0);
c[26] = mac(a3, b3, c[26]);
a0 = a[12];
a1 = a[13];
a2 = a[14];
a3 = a[15];
c[24] = mac(a0, b0, c[24]);
t0 = mac(a0, b1, c[25]);
c[25] = mac(a1, b0, t0);
t0 = mac(a0, b2, c[26]);
t0 = mac(a1, b1, t0);
c[26] = mac(a2, b0, t0);
t0 = mac(a0, b3, c[27]);
t0 = mac(a1, b2, t0);
t0 = mac(a2, b1, t0);
c[27] = mac(a3, b0, t0);
t0 = mac(a1, b3, c[28]);
t0 = mac(a2, b2, t0);
c[28] = mac(a3, b1, t0);
t0 = mac(a2, b3, c[29]);
c[29] = mac(a3, b2, t0);
c[30] = mac(a3, b3, c[30]);
b0 = b[8];
b1 = b[9];
b2 = b[10];
b3 = b[11];
c[20] = mac(a0, b0, c[20]);
t0 = mac(a0, b1, c[21]);
c[21] = mac(a1, b0, t0);
t0 = mac(a0, b2, c[22]);
t0 = mac(a1, b1, t0);
c[22] = mac(a2, b0, t0);
t0 = mac(a0, b3, c[23]);
t0 = mac(a1, b2, t0);
t0 = mac(a2, b1, t0);
c[23] = mac(a3, b0, t0);
t0 = mac(a1, b3, c[24]);
t0 = mac(a2, b2, t0);
c[24] = mac(a3, b1, t0);
t0 = mac(a2, b3, c[25]);
c[25] = mac(a3, b2, t0);
c[26] = mac(a3, b3, c[26]);
b0 = b[4];
b1 = b[5];
b2 = b[6];
b3 = b[7];
c[16] = mac(a0, b0, c[16]);
t0 = mac(a0, b1, c[17]);
c[17] = mac(a1, b0, t0);
t0 = mac(a0, b2, c[18]);
t0 = mac(a1, b1, t0);
c[18] = mac(a2, b0, t0);
t0 = mac(a0, b3, c[19]);
t0 = mac(a1, b2, t0);
t0 = mac(a2, b1, t0);
c[19] = mac(a3, b0, t0);
t0 = mac(a1, b3, c[20]);
t0 = mac(a2, b2, t0);
c[20] = mac(a3, b1, t0);
t0 = mac(a2, b3, c[21]);
c[21] = mac(a3, b2, t0);
c[22] = mac(a3, b3, c[22]);
b0 = b[0];
b1 = b[1];
b2 = b[2];
b3 = b[3];
c[12] = mac(a0, b0, c[12]);
t0 = mac(a0, b1, c[13]);
c[13] = mac(a1, b0, t0);
t0 = mac(a0, b2, c[14]);
t0 = mac(a1, b1, t0);
c[14] = mac(a2, b0, t0);
t0 = mac(a0, b3, c[15]);
t0 = mac(a1, b2, t0);
t0 = mac(a2, b1, t0);
c[15] = mac(a3, b0, t0);
t0 = mac(a1, b3, c[16]);
t0 = mac(a2, b2, t0);
c[16] = mac(a3, b1, t0);
t0 = mac(a2, b3, c[17]);
c[17] = mac(a3, b2, t0);
c[18] = mac(a3, b3, c[18]);
}
static void transpose(__m256i *M) {
__m256i r0, r1, r2, r3, r4, r5, r6, r7, r8, r9, r10, r11;
__m256i temp, temp0, temp1, temp2;
r0 = _mm256_unpacklo_epi16(M[0], M[1]);
r1 = _mm256_unpacklo_epi16(M[2], M[3]);
r2 = _mm256_unpacklo_epi16(M[4], M[5]);
r3 = _mm256_unpacklo_epi16(M[6], M[7]);
r4 = _mm256_unpacklo_epi16(M[8], M[9]);
r5 = _mm256_unpacklo_epi16(M[10], M[11]);
r6 = _mm256_unpacklo_epi16(M[12], M[13]);
r7 = _mm256_unpacklo_epi16(M[14], M[15]);
temp = _mm256_unpacklo_epi32(r0, r1);
temp0 = _mm256_unpacklo_epi32(r2, r3);
temp1 = _mm256_unpacklo_epi32(r4, r5);
temp2 = _mm256_unpacklo_epi32(r6, r7);
r8 = _mm256_unpackhi_epi32(r0, r1);
r9 = _mm256_unpackhi_epi32(r2, r3);
r10 = _mm256_unpackhi_epi32(r4, r5);
r11 = _mm256_unpackhi_epi32(r6, r7);
r0 = _mm256_unpacklo_epi64(temp, temp0);
r2 = _mm256_unpackhi_epi64(temp, temp0);
r1 = _mm256_unpacklo_epi64(temp1, temp2);
r3 = _mm256_unpackhi_epi64(temp1, temp2);
temp = _mm256_unpackhi_epi16(M[0], M[1]);
temp0 = _mm256_unpackhi_epi16(M[2], M[3]);
temp1 = _mm256_unpackhi_epi16(M[4], M[5]);
temp2 = _mm256_unpackhi_epi16(M[6], M[7]);
r4 = _mm256_unpackhi_epi16(M[8], M[9]);
M[0] = _mm256_permute2f128_si256(r0, r1, 0x20);
M[8] = _mm256_permute2f128_si256(r0, r1, 0x31);
M[1] = _mm256_permute2f128_si256(r2, r3, 0x20);
M[9] = _mm256_permute2f128_si256(r2, r3, 0x31);
r5 = _mm256_unpackhi_epi16(M[10], M[11]);
r6 = _mm256_unpackhi_epi16(M[12], M[13]);
r7 = _mm256_unpackhi_epi16(M[14], M[15]);
r0 = _mm256_unpacklo_epi64(r8, r9);
r1 = _mm256_unpacklo_epi64(r10, r11);
r2 = _mm256_unpackhi_epi64(r8, r9);
r3 = _mm256_unpackhi_epi64(r10, r11);
M[3] = _mm256_permute2f128_si256(r2, r3, 0x20);
M[11] = _mm256_permute2f128_si256(r2, r3, 0x31);
M[2] = _mm256_permute2f128_si256(r0, r1, 0x20);
M[10] = _mm256_permute2f128_si256(r0, r1, 0x31);
r0 = _mm256_unpacklo_epi32(temp, temp0);
r1 = _mm256_unpacklo_epi32(temp1, temp2);
r2 = _mm256_unpacklo_epi32(r4, r5);
r3 = _mm256_unpacklo_epi32(r6, r7);
r8 = _mm256_unpacklo_epi64(r0, r1);
r10 = _mm256_unpackhi_epi64(r0, r1);
r9 = _mm256_unpacklo_epi64(r2, r3);
r11 = _mm256_unpackhi_epi64(r2, r3);
M[4] = _mm256_permute2f128_si256(r8, r9, 0x20);
M[12] = _mm256_permute2f128_si256(r8, r9, 0x31);
M[5] = _mm256_permute2f128_si256(r10, r11, 0x20);
M[13] = _mm256_permute2f128_si256(r10, r11, 0x31);
r0 = _mm256_unpackhi_epi32(temp, temp0);
r1 = _mm256_unpackhi_epi32(temp1, temp2);
r2 = _mm256_unpackhi_epi32(r4, r5);
r3 = _mm256_unpackhi_epi32(r6, r7);
r4 = _mm256_unpacklo_epi64(r0, r1);
r6 = _mm256_unpackhi_epi64(r0, r1);
r5 = _mm256_unpacklo_epi64(r2, r3);
r7 = _mm256_unpackhi_epi64(r2, r3);
M[6] = _mm256_permute2f128_si256(r4, r5, 0x20);
M[14] = _mm256_permute2f128_si256(r4, r5, 0x31);
M[7] = _mm256_permute2f128_si256(r6, r7, 0x20);
M[15] = _mm256_permute2f128_si256(r6, r7, 0x31);
}
static void batch_64coefficient_multiplications(toom4_points_product *c_eval, const __m256i *a, const toom4_points *b_eval, int accumulate) {
toom4_points a_eval;// Holds evaluation (a & b) for 7 Karatsuba at a time
__m256i r0_avx, r1_avx, r2_avx, r3_avx;
__m256i *va = (__m256i *)a_eval.coeffs;
__m256i *vb = (__m256i *)b_eval->coeffs;
__m256i *vc = (__m256i *)c_eval->coeffs;
//------------------AVX evaluation for 1st poly-----------------------
r0_avx = a[0 * L + 0];
r1_avx = a[0 * L + 1];
r2_avx = a[0 * L + 2];
r3_avx = a[0 * L + 3];
va[0] = r0_avx;
va[1] = r1_avx;
va[2] = r2_avx;
va[3] = r3_avx;
va[4] = _mm256_add_epi16(r0_avx, r1_avx);
va[5] = _mm256_add_epi16(r2_avx, r3_avx);
va[6] = _mm256_add_epi16(r0_avx, r2_avx);
va[7] = _mm256_add_epi16(r1_avx, r3_avx);
va[8] = _mm256_add_epi16(va[6], va[7]);
//------------------AVX evaluation for 1st poly ends------------------
//------------------AVX evaluation for 2nd poly-----------------------
r0_avx = a[1 * L + 0];
r1_avx = a[1 * L + 1];
r2_avx = a[1 * L + 2];
r3_avx = a[1 * L + 3];
va[0 + 9] = r0_avx;
va[1 + 9] = r1_avx;
va[2 + 9] = r2_avx;
va[3 + 9] = r3_avx;
va[4 + 9] = _mm256_add_epi16(r0_avx, r1_avx);
va[5 + 9] = _mm256_add_epi16(r2_avx, r3_avx);
va[6 + 9] = _mm256_add_epi16(r0_avx, r2_avx);
va[7 + 9] = _mm256_add_epi16(r1_avx, r3_avx);
va[8 + 9] = _mm256_add_epi16(va[6 + 9], va[7 + 9]);
//------------------AVX evaluation for 2nd poly ends------------------
//------------------AVX evaluation for 3rd poly-----------------------
r0_avx = a[2 * L + 0];
r1_avx = a[2 * L + 1];
r2_avx = a[2 * L + 2];
r3_avx = a[2 * L + 3];
va[0 + 18] = r0_avx;
va[1 + 18] = r1_avx;
va[2 + 18] = r2_avx;
va[3 + 18] = r3_avx;
va[4 + 18] = _mm256_add_epi16(r0_avx, r1_avx);
va[5 + 18] = _mm256_add_epi16(r2_avx, r3_avx);
va[6 + 18] = _mm256_add_epi16(r0_avx, r2_avx);
va[7 + 18] = _mm256_add_epi16(r1_avx, r3_avx);
va[8 + 18] = _mm256_add_epi16(va[6 + 18], va[7 + 18]);
//------------------AVX evaluation for 3rd poly ends------------------
//------------------AVX evaluation for 4th poly-----------------------
r0_avx = a[3 * L + 0];
r1_avx = a[3 * L + 1];
r2_avx = a[3 * L + 2];
r3_avx = a[3 * L + 3];
va[0 + 27] = r0_avx;
va[1 + 27] = r1_avx;
va[2 + 27] = r2_avx;
va[3 + 27] = r3_avx;
va[4 + 27] = _mm256_add_epi16(r0_avx, r1_avx);
va[5 + 27] = _mm256_add_epi16(r2_avx, r3_avx);
va[6 + 27] = _mm256_add_epi16(r0_avx, r2_avx);
va[7 + 27] = _mm256_add_epi16(r1_avx, r3_avx);
va[8 + 27] = _mm256_add_epi16(va[6 + 27], va[7 + 27]);
//------------------AVX evaluation for 4th poly ends------------------
//------------------AVX evaluation for 5th poly-----------------------
r0_avx = a[4 * L + 0];
r1_avx = a[4 * L + 1];
r2_avx = a[4 * L + 2];
r3_avx = a[4 * L + 3];
va[0 + 36] = r0_avx;
va[1 + 36] = r1_avx;
va[2 + 36] = r2_avx;
va[3 + 36] = r3_avx;
va[4 + 36] = _mm256_add_epi16(r0_avx, r1_avx);
va[5 + 36] = _mm256_add_epi16(r2_avx, r3_avx);
va[6 + 36] = _mm256_add_epi16(r0_avx, r2_avx);
va[7 + 36] = _mm256_add_epi16(r1_avx, r3_avx);
va[8 + 36] = _mm256_add_epi16(va[6 + 36], va[7 + 36]);
//------------------AVX evaluation for 5th poly ends------------------
//------------------AVX evaluation for 6th poly-----------------------
r0_avx = a[5 * L + 0];
r1_avx = a[5 * L + 1];
r2_avx = a[5 * L + 2];
r3_avx = a[5 * L + 3];
va[0 + 45] = r0_avx;
va[1 + 45] = r1_avx;
va[2 + 45] = r2_avx;
va[3 + 45] = r3_avx;
va[4 + 45] = _mm256_add_epi16(r0_avx, r1_avx);
va[5 + 45] = _mm256_add_epi16(r2_avx, r3_avx);
va[6 + 45] = _mm256_add_epi16(r0_avx, r2_avx);
va[7 + 45] = _mm256_add_epi16(r1_avx, r3_avx);
va[8 + 45] = _mm256_add_epi16(va[6 + 45], va[7 + 45]);
//------------------AVX evaluation for 6th poly ends------------------
//------------------AVX evaluation for 7th poly-----------------------
r0_avx = a[6 * L + 0];
r1_avx = a[6 * L + 1];
r2_avx = a[6 * L + 2];
r3_avx = a[6 * L + 3];
va[0 + 54] = r0_avx;
va[1 + 54] = r1_avx;
va[2 + 54] = r2_avx;
va[3 + 54] = r3_avx;
va[4 + 54] = _mm256_add_epi16(r0_avx, r1_avx);
va[5 + 54] = _mm256_add_epi16(r2_avx, r3_avx);
va[6 + 54] = _mm256_add_epi16(r0_avx, r2_avx);
va[7 + 54] = _mm256_add_epi16(r1_avx, r3_avx);
va[8 + 54] = _mm256_add_epi16(va[6 + 54], va[7 + 54]);
//------------------AVX evaluation for 7th poly ends------------------
//-----------------Forward transposes--------------------------------------
transpose(va);
transpose(va + 16);
transpose(va + 32);
transpose(va + 48);
//-----------------Forward transposes ends---------------------------------
if (accumulate == 0) {
schoolbook16x16(vc, va, vb);
schoolbook16x16(vc + 32, va + 16, vb + 16);
schoolbook16x16(vc + 64, va + 32, vb + 32);
schoolbook16x16(vc + 96, va + 48, vb + 48);
} else {
schoolbook16x16_acc(vc, va, vb);
schoolbook16x16_acc(vc + 32, va + 16, vb + 16);
schoolbook16x16_acc(vc + 64, va + 32, vb + 32);
schoolbook16x16_acc(vc + 96, va + 48, vb + 48);
}
}
static void karatsuba_eval(__m256i *b_eval, const __m256i *b) {
__m256i r0_avx, r1_avx, r2_avx, r3_avx;
//-------1st poly----------------------------------------------------
r0_avx = b[0 * L + 0];
r1_avx = b[0 * L + 1];
r2_avx = b[0 * L + 2];
r3_avx = b[0 * L + 3];
b_eval[0] = r0_avx;
b_eval[1] = r1_avx;
b_eval[2] = r2_avx;
b_eval[3] = r3_avx;
b_eval[4] = _mm256_add_epi16(r0_avx, r1_avx);
b_eval[5] = _mm256_add_epi16(r2_avx, r3_avx);
b_eval[6] = _mm256_add_epi16(r0_avx, r2_avx);
b_eval[7] = _mm256_add_epi16(r1_avx, r3_avx);
b_eval[8] = _mm256_add_epi16(b_eval[6], b_eval[7]);
//-------2nd poly----------------------------------------------------
r0_avx = b[1 * L + 0];
r1_avx = b[1 * L + 1];
r2_avx = b[1 * L + 2];
r3_avx = b[1 * L + 3];
b_eval[0 + 9] = r0_avx;
b_eval[1 + 9] = r1_avx;
b_eval[2 + 9] = r2_avx;
b_eval[3 + 9] = r3_avx;
b_eval[4 + 9] = _mm256_add_epi16(r0_avx, r1_avx);
b_eval[5 + 9] = _mm256_add_epi16(r2_avx, r3_avx);
b_eval[6 + 9] = _mm256_add_epi16(r0_avx, r2_avx);
b_eval[7 + 9] = _mm256_add_epi16(r1_avx, r3_avx);
b_eval[8 + 9] = _mm256_add_epi16(b_eval[6 + 9], b_eval[7 + 9]);
//-------3rd poly----------------------------------------------------
r0_avx = b[2 * L + 0];
r1_avx = b[2 * L + 1];
r2_avx = b[2 * L + 2];
r3_avx = b[2 * L + 3];
b_eval[0 + 18] = r0_avx;
b_eval[1 + 18] = r1_avx;
b_eval[2 + 18] = r2_avx;
b_eval[3 + 18] = r3_avx;
b_eval[4 + 18] = _mm256_add_epi16(r0_avx, r1_avx);
b_eval[5 + 18] = _mm256_add_epi16(r2_avx, r3_avx);
b_eval[6 + 18] = _mm256_add_epi16(r0_avx, r2_avx);
b_eval[7 + 18] = _mm256_add_epi16(r1_avx, r3_avx);
b_eval[8 + 18] = _mm256_add_epi16(b_eval[6 + 18], b_eval[7 + 18]);
//-------4th poly----------------------------------------------------
r0_avx = b[3 * L + 0];
r1_avx = b[3 * L + 1];
r2_avx = b[3 * L + 2];
r3_avx = b[3 * L + 3];
b_eval[0 + 27] = r0_avx;
b_eval[1 + 27] = r1_avx;
b_eval[2 + 27] = r2_avx;
b_eval[3 + 27] = r3_avx;
b_eval[4 + 27] = _mm256_add_epi16(r0_avx, r1_avx);
b_eval[5 + 27] = _mm256_add_epi16(r2_avx, r3_avx);
b_eval[6 + 27] = _mm256_add_epi16(r0_avx, r2_avx);
b_eval[7 + 27] = _mm256_add_epi16(r1_avx, r3_avx);
b_eval[8 + 27] = _mm256_add_epi16(b_eval[6 + 27], b_eval[7 + 27]);
//-------5th poly----------------------------------------------------
r0_avx = b[4 * L + 0];
r1_avx = b[4 * L + 1];
r2_avx = b[4 * L + 2];
r3_avx = b[4 * L + 3];
b_eval[0 + 36] = r0_avx;
b_eval[1 + 36] = r1_avx;
b_eval[2 + 36] = r2_avx;
b_eval[3 + 36] = r3_avx;
b_eval[4 + 36] = _mm256_add_epi16(r0_avx, r1_avx);
b_eval[5 + 36] = _mm256_add_epi16(r2_avx, r3_avx);
b_eval[6 + 36] = _mm256_add_epi16(r0_avx, r2_avx);
b_eval[7 + 36] = _mm256_add_epi16(r1_avx, r3_avx);
b_eval[8 + 36] = _mm256_add_epi16(b_eval[6 + 36], b_eval[7 + 36]);
//-------6th poly----------------------------------------------------
r0_avx = b[5 * L + 0];
r1_avx = b[5 * L + 1];
r2_avx = b[5 * L + 2];
r3_avx = b[5 * L + 3];
b_eval[0 + 45] = r0_avx;
b_eval[1 + 45] = r1_avx;
b_eval[2 + 45] = r2_avx;
b_eval[3 + 45] = r3_avx;
b_eval[4 + 45] = _mm256_add_epi16(r0_avx, r1_avx);
b_eval[5 + 45] = _mm256_add_epi16(r2_avx, r3_avx);
b_eval[6 + 45] = _mm256_add_epi16(r0_avx, r2_avx);
b_eval[7 + 45] = _mm256_add_epi16(r1_avx, r3_avx);
b_eval[8 + 45] = _mm256_add_epi16(b_eval[6 + 45], b_eval[7 + 45]);
//-------7th poly----------------------------------------------------
r0_avx = b[6 * L + 0];
r1_avx = b[6 * L + 1];
r2_avx = b[6 * L + 2];
r3_avx = b[6 * L + 3];
b_eval[0 + 54] = r0_avx;
b_eval[1 + 54] = r1_avx;
b_eval[2 + 54] = r2_avx;
b_eval[3 + 54] = r3_avx;
b_eval[4 + 54] = _mm256_add_epi16(r0_avx, r1_avx);
b_eval[5 + 54] = _mm256_add_epi16(r2_avx, r3_avx);
b_eval[6 + 54] = _mm256_add_epi16(r0_avx, r2_avx);
b_eval[7 + 54] = _mm256_add_epi16(r1_avx, r3_avx);
b_eval[8 + 54] = _mm256_add_epi16(b_eval[6 + 54], b_eval[7 + 54]);
//--------------Evaluating B poly ends-------------------------------
transpose(b_eval);
transpose(b_eval + 16);
transpose(b_eval + 32);
transpose(b_eval + 48);
}
static void karatsuba_interp(__m256i *result_final0, __m256i *result_final1, __m256i *result_final2, __m256i *result_final3, __m256i *result_final4, __m256i *result_final5, __m256i *result_final6, const __m256i *c_eval) {
__m256i res_avx0, res_avx1, res_avx2, res_avx3, res_avx4, res_avx5, res_avx6, res_avx7; // to hold each 64X64 poly mul results
__m256i temp, c6_avx, c7_avx, c8_avx, c20_avx, c21_avx, c22_avx, c23_avx, c24_avx;
//------------------------AVX interpolation for 1st poly external-------------------
res_avx0 = c_eval[0];
res_avx2 = c_eval[1];
res_avx4 = c_eval[2];
res_avx6 = c_eval[3];
c6_avx = c_eval[6];
c7_avx = c_eval[7];
c8_avx = _mm256_sub_epi16(_mm256_sub_epi16(c_eval[8], c6_avx), c7_avx);
res_avx1 = c_eval[16];
res_avx3 = c_eval[17];
res_avx5 = c_eval[18];
res_avx7 = c_eval[19];
c22_avx = c_eval[22];
c23_avx = c_eval[23];
c21_avx = _mm256_sub_epi16(_mm256_sub_epi16(c_eval[21], res_avx5), res_avx7);
c24_avx = _mm256_sub_epi16(_mm256_sub_epi16(c_eval[24], c22_avx), c23_avx);
c20_avx = _mm256_sub_epi16(_mm256_sub_epi16(c_eval[20], res_avx1), res_avx3);
temp = _mm256_sub_epi16(_mm256_sub_epi16(c_eval[5], res_avx4), res_avx6);
res_avx5 = _mm256_add_epi16(res_avx5, temp);
temp = _mm256_sub_epi16(_mm256_sub_epi16(c_eval[4], res_avx0), res_avx2);
res_avx1 = _mm256_add_epi16(res_avx1, temp);
c22_avx = _mm256_add_epi16(c22_avx, c8_avx);
res_avx6 = _mm256_add_epi16(res_avx6, c21_avx);
res_avx2 = _mm256_add_epi16(res_avx2, c20_avx);
c7_avx = _mm256_add_epi16(c7_avx, c24_avx);
c6_avx = _mm256_sub_epi16(_mm256_sub_epi16(c6_avx, res_avx0), res_avx4);
c22_avx = _mm256_sub_epi16(_mm256_sub_epi16(c22_avx, res_avx1), res_avx5);
c7_avx = _mm256_sub_epi16(_mm256_sub_epi16(c7_avx, res_avx2), res_avx6);
c23_avx = _mm256_sub_epi16(_mm256_sub_epi16(c23_avx, res_avx3), res_avx7);
result_final0[0] = res_avx0;
result_final0[1] = res_avx1;
result_final0[2] = _mm256_add_epi16(res_avx2, c6_avx);
result_final0[3] = _mm256_add_epi16(res_avx3, c22_avx);
result_final0[4] = _mm256_add_epi16(res_avx4, c7_avx);
result_final0[5] = _mm256_add_epi16(res_avx5, c23_avx);
result_final0[6] = res_avx6;
result_final0[7] = res_avx7;
//------------------------AVX interpolation for 1st poly ends--------------
//------------------------AVX interpolation for 2nd poly external-------------------
res_avx0 = c_eval[9]; //c_eval0
res_avx2 = c_eval[10]; //c_eval1
res_avx4 = c_eval[11]; //c_eval2
res_avx6 = c_eval[12]; //c_eval3
c6_avx = c_eval[15]; //c_eval6
c7_avx = c_eval[32]; //c_eval7
c8_avx = _mm256_sub_epi16(_mm256_sub_epi16(c_eval[33], c6_avx), c7_avx);
res_avx1 = c_eval[25]; //c_eval0
res_avx3 = c_eval[26]; //c_eval1
res_avx5 = c_eval[27]; //c_eval2
res_avx7 = c_eval[28]; //c_eval3
c22_avx = c_eval[31];
c23_avx = c_eval[48];
c21_avx = _mm256_sub_epi16(_mm256_sub_epi16(c_eval[30], res_avx5), res_avx7);
c24_avx = _mm256_sub_epi16(_mm256_sub_epi16(c_eval[49], c22_avx), c23_avx);
c20_avx = _mm256_sub_epi16(_mm256_sub_epi16(c_eval[29], res_avx1), res_avx3);
temp = _mm256_sub_epi16(_mm256_sub_epi16(c_eval[14], res_avx4), res_avx6);
res_avx5 = _mm256_add_epi16(res_avx5, temp);
temp = _mm256_sub_epi16(_mm256_sub_epi16(c_eval[13], res_avx0), res_avx2);
res_avx1 = _mm256_add_epi16(res_avx1, temp);
c22_avx = _mm256_add_epi16(c22_avx, c8_avx);
res_avx6 = _mm256_add_epi16(res_avx6, c21_avx);
res_avx2 = _mm256_add_epi16(res_avx2, c20_avx);
c7_avx = _mm256_add_epi16(c7_avx, c24_avx);
c6_avx = _mm256_sub_epi16(_mm256_sub_epi16(c6_avx, res_avx0), res_avx4);
c22_avx = _mm256_sub_epi16(_mm256_sub_epi16(c22_avx, res_avx1), res_avx5);
c7_avx = _mm256_sub_epi16(_mm256_sub_epi16(c7_avx, res_avx2), res_avx6);
c23_avx = _mm256_sub_epi16(_mm256_sub_epi16(c23_avx, res_avx3), res_avx7);
result_final1[0] = res_avx0;
result_final1[1] = res_avx1;
result_final1[2] = _mm256_add_epi16(res_avx2, c6_avx);
result_final1[3] = _mm256_add_epi16(res_avx3, c22_avx);
result_final1[4] = _mm256_add_epi16(res_avx4, c7_avx);
result_final1[5] = _mm256_add_epi16(res_avx5, c23_avx);
result_final1[6] = res_avx6;
result_final1[7] = res_avx7;
//------------------------AVX interpolation for 2nd poly ends--------------
//------------------------AVX interpolation for 3rd poly external-------------------
res_avx0 = c_eval[34]; //c_eval0
res_avx2 = c_eval[35]; //c_eval1
res_avx4 = c_eval[36];
res_avx6 = c_eval[37];
c6_avx = c_eval[40];
c7_avx = c_eval[41];
c8_avx = _mm256_sub_epi16(_mm256_sub_epi16(c_eval[42], c6_avx), c7_avx);
res_avx1 = c_eval[50]; //c_eval0
res_avx3 = c_eval[51]; //c_eval1
res_avx5 = c_eval[52];
res_avx7 = c_eval[53];
c22_avx = c_eval[56];
c23_avx = c_eval[57];
c21_avx = _mm256_sub_epi16(_mm256_sub_epi16(c_eval[55], res_avx5), res_avx7);
c24_avx = _mm256_sub_epi16(_mm256_sub_epi16(c_eval[58], c22_avx), c23_avx);
c20_avx = _mm256_sub_epi16(_mm256_sub_epi16(c_eval[54], res_avx1), res_avx3);
temp = _mm256_sub_epi16(_mm256_sub_epi16(c_eval[39], res_avx4), res_avx6);
res_avx5 = _mm256_add_epi16(res_avx5, temp);
temp = _mm256_sub_epi16(_mm256_sub_epi16(c_eval[38], res_avx0), res_avx2);
res_avx1 = _mm256_add_epi16(res_avx1, temp);
c22_avx = _mm256_add_epi16(c22_avx, c8_avx);
res_avx6 = _mm256_add_epi16(res_avx6, c21_avx);
res_avx2 = _mm256_add_epi16(res_avx2, c20_avx);
c7_avx = _mm256_add_epi16(c7_avx, c24_avx);
c6_avx = _mm256_sub_epi16(_mm256_sub_epi16(c6_avx, res_avx0), res_avx4);
c22_avx = _mm256_sub_epi16(_mm256_sub_epi16(c22_avx, res_avx1), res_avx5);
c7_avx = _mm256_sub_epi16(_mm256_sub_epi16(c7_avx, res_avx2), res_avx6);
c23_avx = _mm256_sub_epi16(_mm256_sub_epi16(c23_avx, res_avx3), res_avx7);
result_final2[0] = res_avx0;
result_final2[1] = res_avx1;
result_final2[2] = _mm256_add_epi16(res_avx2, c6_avx);
result_final2[3] = _mm256_add_epi16(res_avx3, c22_avx);
result_final2[4] = _mm256_add_epi16(res_avx4, c7_avx);
result_final2[5] = _mm256_add_epi16(res_avx5, c23_avx);
result_final2[6] = res_avx6;
result_final2[7] = res_avx7;
//------------------------AVX interpolation for 3rd poly ends--------------
//------------------------AVX interpolation for 4th poly external-------------------
res_avx0 = c_eval[43];
res_avx2 = c_eval[44];
res_avx4 = c_eval[45];
res_avx6 = c_eval[46];
c6_avx = c_eval[65];
c7_avx = c_eval[66];
c8_avx = _mm256_sub_epi16(_mm256_sub_epi16(c_eval[67], c6_avx), c7_avx);
res_avx1 = c_eval[59];
res_avx3 = c_eval[60];
res_avx5 = c_eval[61];
res_avx7 = c_eval[62];
c22_avx = c_eval[81];
c23_avx = c_eval[82];
c21_avx = _mm256_sub_epi16(_mm256_sub_epi16(c_eval[80], res_avx5), res_avx7);
c24_avx = _mm256_sub_epi16(_mm256_sub_epi16(c_eval[83], c22_avx), c23_avx);
c20_avx = _mm256_sub_epi16(_mm256_sub_epi16(c_eval[63], res_avx1), res_avx3);
temp = _mm256_sub_epi16(_mm256_sub_epi16(c_eval[64], res_avx4), res_avx6);
res_avx5 = _mm256_add_epi16(res_avx5, temp);
temp = _mm256_sub_epi16(_mm256_sub_epi16(c_eval[47], res_avx0), res_avx2);
res_avx1 = _mm256_add_epi16(res_avx1, temp);
c22_avx = _mm256_add_epi16(c22_avx, c8_avx);
res_avx6 = _mm256_add_epi16(res_avx6, c21_avx);
res_avx2 = _mm256_add_epi16(res_avx2, c20_avx);
c7_avx = _mm256_add_epi16(c7_avx, c24_avx);
c6_avx = _mm256_sub_epi16(_mm256_sub_epi16(c6_avx, res_avx0), res_avx4);
c22_avx = _mm256_sub_epi16(_mm256_sub_epi16(c22_avx, res_avx1), res_avx5);
c7_avx = _mm256_sub_epi16(_mm256_sub_epi16(c7_avx, res_avx2), res_avx6);
c23_avx = _mm256_sub_epi16(_mm256_sub_epi16(c23_avx, res_avx3), res_avx7);
result_final3[0] = res_avx0;
result_final3[1] = res_avx1;
result_final3[2] = _mm256_add_epi16(res_avx2, c6_avx);
result_final3[3] = _mm256_add_epi16(res_avx3, c22_avx);
result_final3[4] = _mm256_add_epi16(res_avx4, c7_avx);
result_final3[5] = _mm256_add_epi16(res_avx5, c23_avx);
result_final3[6] = res_avx6;
result_final3[7] = res_avx7;
//------------------------AVX interpolation for 4th poly ends--------------
//------------------------AVX interpolation for 5th poly external-------------------
res_avx0 = c_eval[68];
res_avx2 = c_eval[69];
res_avx4 = c_eval[70];
res_avx6 = c_eval[71];
c6_avx = c_eval[74];
c7_avx = c_eval[75];
c8_avx = _mm256_sub_epi16(_mm256_sub_epi16(c_eval[76], c6_avx), c7_avx);
res_avx1 = c_eval[84];
res_avx3 = c_eval[85];
res_avx5 = c_eval[86];
res_avx7 = c_eval[87];
c22_avx = c_eval[90];
c23_avx = c_eval[91];
c21_avx = _mm256_sub_epi16(_mm256_sub_epi16(c_eval[89], res_avx5), res_avx7);
c24_avx = _mm256_sub_epi16(_mm256_sub_epi16(c_eval[92], c22_avx), c23_avx);
c20_avx = _mm256_sub_epi16(_mm256_sub_epi16(c_eval[88], res_avx1), res_avx3);
temp = _mm256_sub_epi16(_mm256_sub_epi16(c_eval[73], res_avx4), res_avx6);
res_avx5 = _mm256_add_epi16(res_avx5, temp);
temp = _mm256_sub_epi16(_mm256_sub_epi16(c_eval[72], res_avx0), res_avx2);
res_avx1 = _mm256_add_epi16(res_avx1, temp);
c22_avx = _mm256_add_epi16(c22_avx, c8_avx);
res_avx6 = _mm256_add_epi16(res_avx6, c21_avx);
res_avx2 = _mm256_add_epi16(res_avx2, c20_avx);
c7_avx = _mm256_add_epi16(c7_avx, c24_avx);
c6_avx = _mm256_sub_epi16(_mm256_sub_epi16(c6_avx, res_avx0), res_avx4);
c22_avx = _mm256_sub_epi16(_mm256_sub_epi16(c22_avx, res_avx1), res_avx5);
c7_avx = _mm256_sub_epi16(_mm256_sub_epi16(c7_avx, res_avx2), res_avx6);
c23_avx = _mm256_sub_epi16(_mm256_sub_epi16(c23_avx, res_avx3), res_avx7);
result_final4[0] = res_avx0;
result_final4[1] = res_avx1;
result_final4[2] = _mm256_add_epi16(res_avx2, c6_avx);
result_final4[3] = _mm256_add_epi16(res_avx3, c22_avx);
result_final4[4] = _mm256_add_epi16(res_avx4, c7_avx);
result_final4[5] = _mm256_add_epi16(res_avx5, c23_avx);
result_final4[6] = res_avx6;
result_final4[7] = res_avx7;
//------------------------AVX interpolation for 5th poly ends--------------
//------------------------AVX interpolation for 6th poly external-------------------
res_avx0 = c_eval[77];
res_avx2 = c_eval[78];
res_avx4 = c_eval[79];
res_avx6 = c_eval[96];
c6_avx = c_eval[99];
c7_avx = c_eval[100];
c8_avx = _mm256_sub_epi16(_mm256_sub_epi16(c_eval[101], c6_avx), c7_avx);
res_avx1 = c_eval[93];
res_avx3 = c_eval[94];
res_avx5 = c_eval[95];
res_avx7 = c_eval[112];
c22_avx = c_eval[115];
c23_avx = c_eval[116];
c21_avx = _mm256_sub_epi16(_mm256_sub_epi16(c_eval[114], res_avx5), res_avx7);
c24_avx = _mm256_sub_epi16(_mm256_sub_epi16(c_eval[117], c22_avx), c23_avx);
c20_avx = _mm256_sub_epi16(_mm256_sub_epi16(c_eval[113], res_avx1), res_avx3);
temp = _mm256_sub_epi16(_mm256_sub_epi16(c_eval[98], res_avx4), res_avx6);
res_avx5 = _mm256_add_epi16(res_avx5, temp);
temp = _mm256_sub_epi16(_mm256_sub_epi16(c_eval[97], res_avx0), res_avx2);
res_avx1 = _mm256_add_epi16(res_avx1, temp);
c22_avx = _mm256_add_epi16(c22_avx, c8_avx);
res_avx6 = _mm256_add_epi16(res_avx6, c21_avx);
res_avx2 = _mm256_add_epi16(res_avx2, c20_avx);
c7_avx = _mm256_add_epi16(c7_avx, c24_avx);
c6_avx = _mm256_sub_epi16(_mm256_sub_epi16(c6_avx, res_avx0), res_avx4);
c22_avx = _mm256_sub_epi16(_mm256_sub_epi16(c22_avx, res_avx1), res_avx5);
c7_avx = _mm256_sub_epi16(_mm256_sub_epi16(c7_avx, res_avx2), res_avx6);
c23_avx = _mm256_sub_epi16(_mm256_sub_epi16(c23_avx, res_avx3), res_avx7);
result_final5[0] = res_avx0;
result_final5[1] = res_avx1;
result_final5[2] = _mm256_add_epi16(res_avx2, c6_avx);
result_final5[3] = _mm256_add_epi16(res_avx3, c22_avx);
result_final5[4] = _mm256_add_epi16(res_avx4, c7_avx);
result_final5[5] = _mm256_add_epi16(res_avx5, c23_avx);
result_final5[6] = res_avx6;
result_final5[7] = res_avx7;
//------------------------AVX interpolation for 6th poly ends--------------
//------------------------AVX interpolation for 7th poly external-------------------
res_avx0 = c_eval[102];
res_avx2 = c_eval[103];
res_avx4 = c_eval[104];
res_avx6 = c_eval[105];
c6_avx = c_eval[108];
c7_avx = c_eval[109];
c8_avx = _mm256_sub_epi16(_mm256_sub_epi16(c_eval[110], c6_avx), c7_avx);
res_avx1 = c_eval[118];
res_avx3 = c_eval[119];
res_avx5 = c_eval[120];
res_avx7 = c_eval[121];
c22_avx = c_eval[124];
c23_avx = c_eval[125];
c21_avx = _mm256_sub_epi16(_mm256_sub_epi16(c_eval[123], res_avx5), res_avx7);
c24_avx = _mm256_sub_epi16(_mm256_sub_epi16(c_eval[126], c22_avx), c23_avx);
c20_avx = _mm256_sub_epi16(_mm256_sub_epi16(c_eval[122], res_avx1), res_avx3);
temp = _mm256_sub_epi16(_mm256_sub_epi16(c_eval[107], res_avx4), res_avx6);
res_avx5 = _mm256_add_epi16(res_avx5, temp);
temp = _mm256_sub_epi16(_mm256_sub_epi16(c_eval[106], res_avx0), res_avx2);
res_avx1 = _mm256_add_epi16(res_avx1, temp);
c22_avx = _mm256_add_epi16(c22_avx, c8_avx);
res_avx6 = _mm256_add_epi16(res_avx6, c21_avx);
res_avx2 = _mm256_add_epi16(res_avx2, c20_avx);
c7_avx = _mm256_add_epi16(c7_avx, c24_avx);
c6_avx = _mm256_sub_epi16(_mm256_sub_epi16(c6_avx, res_avx0), res_avx4);
c22_avx = _mm256_sub_epi16(_mm256_sub_epi16(c22_avx, res_avx1), res_avx5);
c7_avx = _mm256_sub_epi16(_mm256_sub_epi16(c7_avx, res_avx2), res_avx6);
c23_avx = _mm256_sub_epi16(_mm256_sub_epi16(c23_avx, res_avx3), res_avx7);
result_final6[0] = res_avx0;
result_final6[1] = res_avx1;
result_final6[2] = _mm256_add_epi16(res_avx2, c6_avx);
result_final6[3] = _mm256_add_epi16(res_avx3, c22_avx);
result_final6[4] = _mm256_add_epi16(res_avx4, c7_avx);
result_final6[5] = _mm256_add_epi16(res_avx5, c23_avx);
result_final6[6] = res_avx6;
result_final6[7] = res_avx7;
//------------------------AVX interpolation for 7th poly ends--------------
}
void PQCLEAN_LIGHTSABER_AVX2_toom4_mul_A_by_B_eval(toom4_points_product *c_eval, const poly *a, const toom4_points *b_eval, int accumulate) {
size_t i;
__m256i r0_avx, r1_avx, r2_avx, r3_avx, r4_avx, r5_avx, r6_avx;
__m256i aw_avx[7 * L];
__m256i *va = (__m256i *)a->coeffs;
for (i = 0; i < L; i++) {
r0_avx = va[0 * L + i];
r1_avx = va[1 * L + i];
r2_avx = va[2 * L + i];
r3_avx = va[3 * L + i];
r4_avx = _mm256_add_epi16(r0_avx, r2_avx);
r5_avx = _mm256_add_epi16(r1_avx, r3_avx);
aw_avx[2 * L + i] = _mm256_add_epi16(r4_avx, r5_avx);
aw_avx[3 * L + i] = _mm256_sub_epi16(r4_avx, r5_avx);
r4_avx = _mm256_slli_epi16(r0_avx, 2);
r4_avx = _mm256_add_epi16(r4_avx, r2_avx);
r4_avx = _mm256_slli_epi16(r4_avx, 1);
r5_avx = _mm256_slli_epi16(r1_avx, 2);
r5_avx = _mm256_add_epi16(r5_avx, r3_avx);
aw_avx[4 * L + i] = _mm256_add_epi16(r4_avx, r5_avx);
aw_avx[5 * L + i] = _mm256_sub_epi16(r4_avx, r5_avx);
r4_avx = _mm256_slli_epi16(r3_avx, 3);
r6_avx = _mm256_slli_epi16(r2_avx, 2);
r4_avx = _mm256_add_epi16(r4_avx, r6_avx);
r6_avx = _mm256_slli_epi16(r1_avx, 1);
r4_avx = _mm256_add_epi16(r4_avx, r6_avx);
aw_avx[1 * L + i] = _mm256_add_epi16(r4_avx, r0_avx);
aw_avx[6 * L + i] = r0_avx;
aw_avx[0 * L + i] = r3_avx;
}
batch_64coefficient_multiplications(c_eval, aw_avx, b_eval, accumulate);
}
void PQCLEAN_LIGHTSABER_AVX2_toom4_eval(toom4_points *b_eval, const poly *b) {
size_t i;
__m256i bw_avx[7 * L];
__m256i r0_avx, r1_avx, r2_avx, r3_avx, r4_avx, r5_avx, r6_avx;
__m256i *vb = (__m256i *)b->coeffs;
__m256i *vb_eval = (__m256i *)b_eval->coeffs;
for (i = 0; i < L; i++) {
r0_avx = vb[0 * L + i];
r1_avx = vb[1 * L + i];
r2_avx = vb[2 * L + i];
r3_avx = vb[3 * L + i];
r4_avx = _mm256_add_epi16(r0_avx, r2_avx);
r5_avx = _mm256_add_epi16(r1_avx, r3_avx);
bw_avx[2 * L + i] = _mm256_add_epi16(r4_avx, r5_avx);
bw_avx[3 * L + i] = _mm256_sub_epi16(r4_avx, r5_avx);
r4_avx = _mm256_slli_epi16(r0_avx, 2);
r4_avx = _mm256_add_epi16(r4_avx, r2_avx);
r4_avx = _mm256_slli_epi16(r4_avx, 1);
r5_avx = _mm256_slli_epi16(r1_avx, 2);
r5_avx = _mm256_add_epi16(r5_avx, r3_avx);
bw_avx[4 * L + i] = _mm256_add_epi16(r4_avx, r5_avx);
bw_avx[5 * L + i] = _mm256_sub_epi16(r4_avx, r5_avx);
r4_avx = _mm256_slli_epi16(r3_avx, 3);
r6_avx = _mm256_slli_epi16(r2_avx, 2);
r4_avx = _mm256_add_epi16(r4_avx, r6_avx);
r6_avx = _mm256_slli_epi16(r1_avx, 1);
r4_avx = _mm256_add_epi16(r4_avx, r6_avx);
bw_avx[1 * L + i] = _mm256_add_epi16(r4_avx, r0_avx);
bw_avx[6 * L + i] = r0_avx;
bw_avx[0 * L + i] = r3_avx;
}
karatsuba_eval(vb_eval, bw_avx);
}
void PQCLEAN_LIGHTSABER_AVX2_toom4_interp(poly *res, const toom4_points_product *c_eval) {
size_t i;
__m256i r0_avx, r1_avx, r2_avx, r3_avx, r4_avx, r5_avx, r6_avx, temp_avx;
__m256i w1_avx[2 * L], w2_avx[2 * L], w3_avx[2 * L], w4_avx[2 * L], w5_avx[2 * L], w6_avx[2 * L], w7_avx[2 * L];
__m256i res_full[32];
__m256i *vc = (__m256i *)c_eval->coeffs;
__m256i *vres = (__m256i *)res->coeffs;
transpose(vc);
transpose(vc + 16);
transpose(vc + 32);
transpose(vc + 48);
transpose(vc + 64);
transpose(vc + 80);
transpose(vc + 96);
transpose(vc + 112);
karatsuba_interp(w1_avx, w2_avx, w3_avx, w4_avx, w5_avx, w6_avx, w7_avx, vc);
for (i = 0; i < 2 * L; i++) {
r0_avx = w1_avx[i];
r1_avx = w2_avx[i];
r2_avx = w3_avx[i];
r3_avx = w4_avx[i];
r4_avx = w5_avx[i];
r5_avx = w6_avx[i];
r6_avx = w7_avx[i];
r1_avx = _mm256_add_epi16(r1_avx, r4_avx);
r5_avx = _mm256_sub_epi16(r5_avx, r4_avx);
r3_avx = _mm256_sub_epi16(r3_avx, r2_avx);
r3_avx = _mm256_srli_epi16(r3_avx, 1);
r4_avx = _mm256_sub_epi16(r4_avx, r0_avx);
temp_avx = _mm256_slli_epi16(r6_avx, 6);
r4_avx = _mm256_sub_epi16(r4_avx, temp_avx);
r4_avx = _mm256_slli_epi16(r4_avx, 1);
r4_avx = _mm256_add_epi16(r4_avx, r5_avx);
r2_avx = _mm256_add_epi16(r2_avx, r3_avx);
temp_avx = _mm256_slli_epi16(r2_avx, 6);
r1_avx = _mm256_sub_epi16(r1_avx, temp_avx);
r1_avx = _mm256_sub_epi16(r1_avx, r2_avx);
r2_avx = _mm256_sub_epi16(r2_avx, r6_avx);
r2_avx = _mm256_sub_epi16(r2_avx, r0_avx);
temp_avx = _mm256_mullo_epi16(r2_avx, _mm256_set1_epi16(45));
r1_avx = _mm256_add_epi16(r1_avx, temp_avx);
temp_avx = _mm256_slli_epi16(r2_avx, 3);
r4_avx = _mm256_sub_epi16(r4_avx, temp_avx);
r4_avx = _mm256_mullo_epi16(r4_avx, _mm256_set1_epi16(-21845)); // -21845 = 1/3 (mod 2^16)
r4_avx = _mm256_srli_epi16(r4_avx, 3);
r5_avx = _mm256_add_epi16(r5_avx, r1_avx);
temp_avx = _mm256_slli_epi16(r3_avx, 4);
r1_avx = _mm256_add_epi16(r1_avx, temp_avx);
r1_avx = _mm256_mullo_epi16(r1_avx, _mm256_set1_epi16(-29127)); // -29127 = 1/9 (mod 2^16)
r1_avx = _mm256_srli_epi16(r1_avx, 1);
r3_avx = _mm256_add_epi16(r1_avx, r3_avx);
r3_avx = _mm256_sub_epi16(_mm256_set1_epi16(0), r3_avx);
temp_avx = _mm256_mullo_epi16(r1_avx, _mm256_set1_epi16(30));
temp_avx = _mm256_sub_epi16(temp_avx, r5_avx);
temp_avx = _mm256_mullo_epi16(temp_avx, _mm256_set1_epi16(-4369)); // -4369 = 1/15 (mod 2^16)
r5_avx = _mm256_srli_epi16(temp_avx, 2);
r2_avx = _mm256_sub_epi16(r2_avx, r4_avx);
r1_avx = _mm256_sub_epi16(r1_avx, r5_avx);
if (i < L) {
res_full[0 * L + i] = r6_avx;
res_full[1 * L + i] = r5_avx;
res_full[2 * L + i] = r4_avx;
res_full[3 * L + i] = r3_avx;
res_full[4 * L + i] = r2_avx;
res_full[5 * L + i] = r1_avx;
res_full[6 * L + i] = r0_avx;
} else {
res_full[0 * L + i] = _mm256_add_epi16(res_full[0 * L + i], r6_avx);
res_full[1 * L + i] = _mm256_add_epi16(res_full[1 * L + i], r5_avx);
res_full[2 * L + i] = _mm256_add_epi16(res_full[2 * L + i], r4_avx);
res_full[3 * L + i] = _mm256_add_epi16(res_full[3 * L + i], r3_avx);
res_full[4 * L + i] = _mm256_add_epi16(res_full[4 * L + i], r2_avx);
res_full[5 * L + i] = _mm256_add_epi16(res_full[5 * L + i], r1_avx);
res_full[6 * L + i] = r0_avx;
}
}
// Reduction by X^256 + 1
for (i = 0; i < 16; i++) {
vres[i] = _mm256_sub_epi16(res_full[i], res_full[i + 16]);
}
}
Reference in New Issue View Git Blame Copy Permalink