| /******************************************************************************* |
| * Copyright 2010-2018 Intel Corporation |
| * All Rights Reserved. |
| * |
| * If this software was obtained under the Intel Simplified Software License, |
| * the following terms apply: |
| * |
| * The source code, information and material ("Material") contained herein is |
| * owned by Intel Corporation or its suppliers or licensors, and title to such |
| * Material remains with Intel Corporation or its suppliers or licensors. The |
| * Material contains proprietary information of Intel or its suppliers and |
| * licensors. The Material is protected by worldwide copyright laws and treaty |
| * provisions. No part of the Material may be used, copied, reproduced, |
| * modified, published, uploaded, posted, transmitted, distributed or disclosed |
| * in any way without Intel's prior express written permission. No license under |
| * any patent, copyright or other intellectual property rights in the Material |
| * is granted to or conferred upon you, either expressly, by implication, |
| * inducement, estoppel or otherwise. Any license under such intellectual |
| * property rights must be express and approved by Intel in writing. |
| * |
| * Unless otherwise agreed by Intel in writing, you may not remove or alter this |
| * notice or any other notice embedded in Materials by Intel or Intel's |
| * suppliers or licensors in any way. |
| * |
| * |
| * If this software was obtained under the Apache License, Version 2.0 (the |
| * "License"), the following terms apply: |
| * |
| * You may not use this file except in compliance with the License. You may |
| * obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0 |
| * |
| * |
| * Unless required by applicable law or agreed to in writing, software |
| * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT |
| * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
| * |
| * See the License for the specific language governing permissions and |
| * limitations under the License. |
| *******************************************************************************/ |
| |
| /* |
| // |
| // Purpose: |
| // Intel(R) Integrated Performance Primitives. Cryptography Primitives. |
| // Internal EC over GF(p^m) basic Definitions & Function Prototypes |
| // |
| // Context: |
| // gfec_point_prod() |
| // |
| */ |
| |
| #include "owndefs.h" |
| #include "owncp.h" |
| #include "pcpgfpecstuff.h" |
| #include "gsscramble.h" |
| #include "pcpmask_ct.h" |
| |
| |
| void gfec_point_prod(BNU_CHUNK_T* pointR, |
| const BNU_CHUNK_T* pointA, const Ipp8u* scalarA, |
| const BNU_CHUNK_T* pointB, const Ipp8u* scalarB, |
| int scalarBitSize, |
| IppsGFpECState* pEC, Ipp8u* pScratchBuffer) |
| { |
| int pointLen = ECP_POINTLEN(pEC); |
| |
| /* optimal size of window */ |
| const int window_size = 5; |
| /* number of table entries */ |
| const int tableLen = 1<<(window_size-1); |
| |
| /* aligned pre-computed tables */ |
| BNU_CHUNK_T* pTableA = (BNU_CHUNK_T*)IPP_ALIGNED_PTR(pScratchBuffer, CACHE_LINE_SIZE); |
| BNU_CHUNK_T* pTableB = pTableA+pointLen*tableLen; |
| |
| setupTable(pTableA, pointA, pEC); |
| setupTable(pTableB, pointB, pEC); |
| |
| { |
| IppsGFpState* pGF = ECP_GFP(pEC); |
| gsModEngine* pGFE = GFP_PMA(pGF); |
| int elemLen = GFP_FELEN(pGFE); |
| |
| mod_neg negF = GFP_METHOD(pGFE)->neg; |
| |
| BNU_CHUNK_T* pHy = cpGFpGetPool(1, pGFE); |
| |
| BNU_CHUNK_T* pTdata = cpEcGFpGetPool(1, pEC); /* points from the pool */ |
| BNU_CHUNK_T* pHdata = cpEcGFpGetPool(1, pEC); |
| |
| int wvalue; |
| Ipp8u digit, sign; |
| int mask = (1<<(window_size+1)) -1; |
| int bit = scalarBitSize-(scalarBitSize%window_size); |
| |
| /* first window */ |
| if(bit) { |
| wvalue = *((Ipp16u*)&scalarA[(bit-1)/8]); |
| wvalue = (wvalue>> ((bit-1)%8)) & mask; |
| } |
| else |
| wvalue = 0; |
| booth_recode(&sign, &digit, (Ipp8u)wvalue, window_size); |
| gsScrambleGet_sscm(pTdata, pointLen, pTableA, digit-1, 5-1); |
| |
| if(bit) { |
| wvalue = *((Ipp16u*)&scalarB[(bit-1)/8]); |
| wvalue = (wvalue>> ((bit-1)%8)) & mask; |
| } |
| else |
| wvalue = 0; |
| booth_recode(&sign, &digit, (Ipp8u)wvalue, window_size); |
| gsScrambleGet_sscm(pHdata, pointLen, pTableB, digit-1, 5-1); |
| |
| gfec_point_add(pTdata, pTdata, pHdata, pEC); |
| |
| for(bit-=window_size; bit>=window_size; bit-=window_size) { |
| gfec_point_double(pTdata, pTdata, pEC); |
| gfec_point_double(pTdata, pTdata, pEC); |
| gfec_point_double(pTdata, pTdata, pEC); |
| gfec_point_double(pTdata, pTdata, pEC); |
| gfec_point_double(pTdata, pTdata, pEC); |
| |
| wvalue = *((Ipp16u*)&scalarA[(bit-1)/8]); |
| wvalue = (wvalue>> ((bit-1)%8)) & mask; |
| booth_recode(&sign, &digit, (Ipp8u)wvalue, window_size); |
| gsScrambleGet_sscm(pHdata, pointLen, pTableA, digit-1, 5-1); |
| |
| negF(pHy, pHdata+elemLen, pGFE); |
| cpMaskedReplace_ct(pHdata+elemLen, pHy, elemLen, ~cpIsZero_ct(sign)); |
| gfec_point_add(pTdata, pTdata, pHdata, pEC); |
| |
| wvalue = *((Ipp16u*)&scalarB[(bit-1)/8]); |
| wvalue = (wvalue>> ((bit-1)%8)) & mask; |
| booth_recode(&sign, &digit, (Ipp8u)wvalue, window_size); |
| gsScrambleGet_sscm(pHdata, pointLen, pTableB, digit-1, 5-1); |
| |
| negF(pHy, pHdata+elemLen, pGFE); |
| cpMaskedReplace_ct(pHdata+elemLen, pHy, elemLen, ~cpIsZero_ct(sign)); |
| gfec_point_add(pTdata, pTdata, pHdata, pEC); |
| } |
| /* last window */ |
| gfec_point_double(pTdata, pTdata, pEC); |
| gfec_point_double(pTdata, pTdata, pEC); |
| gfec_point_double(pTdata, pTdata, pEC); |
| gfec_point_double(pTdata, pTdata, pEC); |
| gfec_point_double(pTdata, pTdata, pEC); |
| |
| wvalue = *((Ipp16u*)&scalarA[0]); |
| wvalue = (wvalue << 1) & mask; |
| booth_recode(&sign, &digit, (Ipp8u)wvalue, window_size); |
| gsScrambleGet_sscm(pHdata, pointLen, pTableA, digit-1, 5-1); |
| |
| negF(pHy, pHdata+elemLen, pGFE); |
| cpMaskedReplace_ct(pHdata+elemLen, pHy, elemLen, ~cpIsZero_ct(sign)); |
| gfec_point_add(pTdata, pTdata, pHdata, pEC); |
| |
| wvalue = *((Ipp16u*)&scalarB[0]); |
| wvalue = (wvalue << 1) & mask; |
| booth_recode(&sign, &digit, (Ipp8u)wvalue, window_size); |
| gsScrambleGet_sscm(pHdata, pointLen, pTableB, digit-1, 5-1); |
| |
| negF(pHy, pHdata+elemLen, pGFE); |
| cpMaskedReplace_ct(pHdata+elemLen, pHy, elemLen, ~cpIsZero_ct(sign)); |
| gfec_point_add(pTdata, pTdata, pHdata, pEC); |
| |
| cpGFpElementCopy(pointR, pTdata, pointLen); |
| |
| cpEcGFpReleasePool(2, pEC); |
| cpGFpReleasePool(1, pGFE); |
| } |
| } |