Home | History | Annotate | Line # | Download | only in x86
      1 /*	$NetBSD: aes_sse2_impl.c,v 1.5 2020/07/25 22:29:56 riastradh Exp $	*/
      2 
      3 /*-
      4  * Copyright (c) 2020 The NetBSD Foundation, Inc.
      5  * All rights reserved.
      6  *
      7  * Redistribution and use in source and binary forms, with or without
      8  * modification, are permitted provided that the following conditions
      9  * are met:
     10  * 1. Redistributions of source code must retain the above copyright
     11  *    notice, this list of conditions and the following disclaimer.
     12  * 2. Redistributions in binary form must reproduce the above copyright
     13  *    notice, this list of conditions and the following disclaimer in the
     14  *    documentation and/or other materials provided with the distribution.
     15  *
     16  * THIS SOFTWARE IS PROVIDED BY THE NETBSD FOUNDATION, INC. AND CONTRIBUTORS
     17  * ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED
     18  * TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
     19  * PURPOSE ARE DISCLAIMED.  IN NO EVENT SHALL THE FOUNDATION OR CONTRIBUTORS
     20  * BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
     21  * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
     22  * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
     23  * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
     24  * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
     25  * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
     26  * POSSIBILITY OF SUCH DAMAGE.
     27  */
     28 
     29 #include <sys/cdefs.h>
     30 __KERNEL_RCSID(1, "$NetBSD: aes_sse2_impl.c,v 1.5 2020/07/25 22:29:56 riastradh Exp $");
     31 
     32 #include <sys/types.h>
     33 #include <sys/endian.h>
     34 
     35 #include <crypto/aes/aes.h>
     36 #include <crypto/aes/aes_impl.h>
     37 #include <crypto/aes/arch/x86/aes_sse2.h>
     38 
     39 #ifdef _KERNEL
     40 #include <x86/cpu.h>
     41 #include <x86/cpuvar.h>
     42 #include <x86/fpu.h>
     43 #include <x86/specialreg.h>
     44 #else
     45 #include <cpuid.h>
     46 #define	fpu_kern_enter()	((void)0)
     47 #define	fpu_kern_leave()	((void)0)
     48 #endif
     49 
     50 static void
     51 aes_sse2_setenckey_impl(struct aesenc *enc, const uint8_t *key,
     52     uint32_t nrounds)
     53 {
     54 
     55 	fpu_kern_enter();
     56 	aes_sse2_setkey(enc->aese_aes.aes_rk64, key, nrounds);
     57 	fpu_kern_leave();
     58 }
     59 
     60 static void
     61 aes_sse2_setdeckey_impl(struct aesdec *dec, const uint8_t *key,
     62     uint32_t nrounds)
     63 {
     64 
     65 	fpu_kern_enter();
     66 	/*
     67 	 * BearSSL computes InvMixColumns on the fly -- no need for
     68 	 * distinct decryption round keys.
     69 	 */
     70 	aes_sse2_setkey(dec->aesd_aes.aes_rk64, key, nrounds);
     71 	fpu_kern_leave();
     72 }
     73 
     74 static void
     75 aes_sse2_enc_impl(const struct aesenc *enc, const uint8_t in[static 16],
     76     uint8_t out[static 16], uint32_t nrounds)
     77 {
     78 
     79 	fpu_kern_enter();
     80 	aes_sse2_enc(enc, in, out, nrounds);
     81 	fpu_kern_leave();
     82 }
     83 
     84 static void
     85 aes_sse2_dec_impl(const struct aesdec *dec, const uint8_t in[static 16],
     86     uint8_t out[static 16], uint32_t nrounds)
     87 {
     88 
     89 	fpu_kern_enter();
     90 	aes_sse2_dec(dec, in, out, nrounds);
     91 	fpu_kern_leave();
     92 }
     93 
     94 static void
     95 aes_sse2_cbc_enc_impl(const struct aesenc *enc, const uint8_t in[static 16],
     96     uint8_t out[static 16], size_t nbytes, uint8_t iv[static 16],
     97     uint32_t nrounds)
     98 {
     99 
    100 	if (nbytes == 0)
    101 		return;
    102 	fpu_kern_enter();
    103 	aes_sse2_cbc_enc(enc, in, out, nbytes, iv, nrounds);
    104 	fpu_kern_leave();
    105 }
    106 
    107 static void
    108 aes_sse2_cbc_dec_impl(const struct aesdec *dec, const uint8_t in[static 16],
    109     uint8_t out[static 16], size_t nbytes, uint8_t iv[static 16],
    110     uint32_t nrounds)
    111 {
    112 
    113 	if (nbytes == 0)
    114 		return;
    115 	fpu_kern_enter();
    116 	aes_sse2_cbc_dec(dec, in, out, nbytes, iv, nrounds);
    117 	fpu_kern_leave();
    118 }
    119 
    120 static void
    121 aes_sse2_xts_enc_impl(const struct aesenc *enc, const uint8_t in[static 16],
    122     uint8_t out[static 16], size_t nbytes, uint8_t tweak[static 16],
    123     uint32_t nrounds)
    124 {
    125 
    126 	if (nbytes == 0)
    127 		return;
    128 	fpu_kern_enter();
    129 	aes_sse2_xts_enc(enc, in, out, nbytes, tweak, nrounds);
    130 	fpu_kern_leave();
    131 }
    132 
    133 static void
    134 aes_sse2_xts_dec_impl(const struct aesdec *dec, const uint8_t in[static 16],
    135     uint8_t out[static 16], size_t nbytes, uint8_t tweak[static 16],
    136     uint32_t nrounds)
    137 {
    138 
    139 	if (nbytes == 0)
    140 		return;
    141 	fpu_kern_enter();
    142 	aes_sse2_xts_dec(dec, in, out, nbytes, tweak, nrounds);
    143 	fpu_kern_leave();
    144 }
    145 
    146 static void
    147 aes_sse2_cbcmac_update1_impl(const struct aesenc *enc,
    148     const uint8_t in[static 16], size_t nbytes, uint8_t auth[static 16],
    149     uint32_t nrounds)
    150 {
    151 
    152 	fpu_kern_enter();
    153 	aes_sse2_cbcmac_update1(enc, in, nbytes, auth, nrounds);
    154 	fpu_kern_leave();
    155 }
    156 
    157 static void
    158 aes_sse2_ccm_enc1_impl(const struct aesenc *enc, const uint8_t in[static 16],
    159     uint8_t out[static 16], size_t nbytes, uint8_t authctr[static 32],
    160     uint32_t nrounds)
    161 {
    162 
    163 	fpu_kern_enter();
    164 	aes_sse2_ccm_enc1(enc, in, out, nbytes, authctr, nrounds);
    165 	fpu_kern_leave();
    166 }
    167 
    168 static void
    169 aes_sse2_ccm_dec1_impl(const struct aesenc *enc, const uint8_t in[static 16],
    170     uint8_t out[static 16], size_t nbytes, uint8_t authctr[static 32],
    171     uint32_t nrounds)
    172 {
    173 
    174 	fpu_kern_enter();
    175 	aes_sse2_ccm_dec1(enc, in, out, nbytes, authctr, nrounds);
    176 	fpu_kern_leave();
    177 }
    178 
    179 static int
    180 aes_sse2_probe(void)
    181 {
    182 	int result = 0;
    183 
    184 	/* Verify that the CPU supports SSE and SSE2.  */
    185 #ifdef _KERNEL
    186 	if (!i386_has_sse)
    187 		return -1;
    188 	if (!i386_has_sse2)
    189 		return -1;
    190 #else
    191 	unsigned eax, ebx, ecx, edx;
    192 	if (!__get_cpuid(1, &eax, &ebx, &ecx, &edx))
    193 		return -1;
    194 	if ((edx & bit_SSE) == 0)
    195 		return -1;
    196 	if ((edx & bit_SSE2) == 0)
    197 		return -1;
    198 #endif
    199 
    200 	fpu_kern_enter();
    201 	result = aes_sse2_selftest();
    202 	fpu_kern_leave();
    203 
    204 	return result;
    205 }
    206 
    207 struct aes_impl aes_sse2_impl = {
    208 	.ai_name = "Intel SSE2 bitsliced",
    209 	.ai_probe = aes_sse2_probe,
    210 	.ai_setenckey = aes_sse2_setenckey_impl,
    211 	.ai_setdeckey = aes_sse2_setdeckey_impl,
    212 	.ai_enc = aes_sse2_enc_impl,
    213 	.ai_dec = aes_sse2_dec_impl,
    214 	.ai_cbc_enc = aes_sse2_cbc_enc_impl,
    215 	.ai_cbc_dec = aes_sse2_cbc_dec_impl,
    216 	.ai_xts_enc = aes_sse2_xts_enc_impl,
    217 	.ai_xts_dec = aes_sse2_xts_dec_impl,
    218 	.ai_cbcmac_update1 = aes_sse2_cbcmac_update1_impl,
    219 	.ai_ccm_enc1 = aes_sse2_ccm_enc1_impl,
    220 	.ai_ccm_dec1 = aes_sse2_ccm_dec1_impl,
    221 };
    222