sm4-riscv64-zvksed-zvkb.S

  1/* SPDX-License-Identifier: Apache-2.0 OR BSD-2-Clause */
  2//
  3// This file is dual-licensed, meaning that you can use it under your
  4// choice of either of the following two licenses:
  5//
  6// Copyright 2023 The OpenSSL Project Authors. All Rights Reserved.
  7//
  8// Licensed under the Apache License 2.0 (the "License"). You can obtain
  9// a copy in the file LICENSE in the source distribution or at
 10// https://www.openssl.org/source/license.html
 11//
 12// or
 13//
 14// Copyright (c) 2023, Christoph Müllner <christoph.muellner@vrull.eu>
 15// Copyright (c) 2023, Jerry Shih <jerry.shih@sifive.com>
 16// Copyright 2024 Google LLC
 17// All rights reserved.
 18//
 19// Redistribution and use in source and binary forms, with or without
 20// modification, are permitted provided that the following conditions
 21// are met:
 22// 1. Redistributions of source code must retain the above copyright
 23//    notice, this list of conditions and the following disclaimer.
 24// 2. Redistributions in binary form must reproduce the above copyright
 25//    notice, this list of conditions and the following disclaimer in the
 26//    documentation and/or other materials provided with the distribution.
 27//
 28// THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
 29// "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
 30// LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
 31// A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
 32// OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
 33// SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
 34// LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
 35// DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
 36// THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
 37// (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
 38// OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
 39
 40// The generated code of this file depends on the following RISC-V extensions:
 41// - RV64I
 42// - RISC-V Vector ('V') with VLEN >= 128
 43// - RISC-V Vector SM4 Block Cipher extension ('Zvksed')
 44// - RISC-V Vector Cryptography Bit-manipulation extension ('Zvkb')
 45
 46#include <linux/linkage.h>
 47
 48.text
 49.option arch, +zvksed, +zvkb
 50
 51// void sm4_expandkey_zksed_zvkb(const u8 user_key[16], u32 rkey_enc[32],
 52//				 u32 rkey_dec[32]);
 53SYM_FUNC_START(sm4_expandkey_zvksed_zvkb)
 54	vsetivli	zero, 4, e32, m1, ta, ma
 55
 56	// Load the user key.
 57	vle32.v		v1, (a0)
 58	vrev8.v		v1, v1
 59
 60	// XOR the user key with the family key.
 61	la		t0, FAMILY_KEY
 62	vle32.v		v2, (t0)
 63	vxor.vv		v1, v1, v2
 64
 65	// Compute the round keys.  Store them in forwards order in rkey_enc
 66	// and in reverse order in rkey_dec.
 67	addi		a2, a2, 31*4
 68	li		t0, -4
 69	.set		i, 0
 70.rept 8
 71	vsm4k.vi	v1, v1, i
 72	vse32.v		v1, (a1)	// Store to rkey_enc.
 73	vsse32.v	v1, (a2), t0	// Store to rkey_dec.
 74.if i < 7
 75	addi		a1, a1, 16
 76	addi		a2, a2, -16
 77.endif
 78	.set		i, i + 1
 79.endr
 80
 81	ret
 82SYM_FUNC_END(sm4_expandkey_zvksed_zvkb)
 83
 84// void sm4_crypt_zvksed_zvkb(const u32 rkey[32], const u8 in[16], u8 out[16]);
 85SYM_FUNC_START(sm4_crypt_zvksed_zvkb)
 86	vsetivli	zero, 4, e32, m1, ta, ma
 87
 88	// Load the input data.
 89	vle32.v		v1, (a1)
 90	vrev8.v		v1, v1
 91
 92	// Do the 32 rounds of SM4, 4 at a time.
 93	.set		i, 0
 94.rept 8
 95	vle32.v		v2, (a0)
 96	vsm4r.vs	v1, v2
 97.if i < 7
 98	addi		a0, a0, 16
 99.endif
100	.set		i, i + 1
101.endr
102
103	// Store the output data (in reverse element order).
104	vrev8.v		v1, v1
105	li		t0, -4
106	addi		a2, a2, 12
107	vsse32.v	v1, (a2), t0
108
109	ret
110SYM_FUNC_END(sm4_crypt_zvksed_zvkb)
111
112.section ".rodata"
113.p2align 2
114.type FAMILY_KEY, @object
115FAMILY_KEY:
116	.word 0xA3B1BAC6, 0x56AA3350, 0x677D9197, 0xB27022DC
117.size FAMILY_KEY, . - FAMILY_KEY