bill_ofarrell
4eb8c2c8d8
SIMD implementation based the on the algorithm outlined in: NEON crypto, Daniel J. Bernstein and Peter Schwabe https://cryptojedi.org/papers/neoncrypto-20120320.pdf and as modified for VMSL as described in Accelerating Poly1305 Cryptographic Message Authentication on the z14 O'Farrell, Gadriwala, et al, CASCON 2017, p48-55 https://ibm.ent.box.com/s/jf9gedj0e9d2vjctfyh186shaztavnht name old new delta 64 485MB/s 1315 MB/s +171.58% 1K 607MB/s 4352 MB/s +616.97% 64Unaligned 485MB/s 1373 MB/s +183.09% 1KUnaligned 606MB/s 4286 MB/s +607.26% 2M 607MB/s 5529 MB/s +810.87% Change-Id: I31ccc25ced09180d99ea5c9233f0dcdc8666fc98 Reviewed-on: https://go-review.googlesource.com/110297 Run-TryBot: Michael Munday <mike.munday@ibm.com> TryBot-Result: Gobot Gobot <gobot@golang.org> Reviewed-by: Michael Munday <mike.munday@ibm.com>
50 lines
1.5 KiB
Go
50 lines
1.5 KiB
Go
// Copyright 2018 The Go Authors. All rights reserved.
|
|
// Use of this source code is governed by a BSD-style
|
|
// license that can be found in the LICENSE file.
|
|
|
|
// +build s390x,go1.11,!gccgo,!appengine
|
|
|
|
package poly1305
|
|
|
|
// hasVectorFacility reports whether the machine supports
|
|
// the vector facility (vx).
|
|
func hasVectorFacility() bool
|
|
|
|
// hasVMSLFacility reports whether the machine supports
|
|
// Vector Multiply Sum Logical (VMSL).
|
|
func hasVMSLFacility() bool
|
|
|
|
var hasVX = hasVectorFacility()
|
|
var hasVMSL = hasVMSLFacility()
|
|
|
|
// poly1305vx is an assembly implementation of Poly1305 that uses vector
|
|
// instructions. It must only be called if the vector facility (vx) is
|
|
// available.
|
|
//go:noescape
|
|
func poly1305vx(out *[16]byte, m *byte, mlen uint64, key *[32]byte)
|
|
|
|
// poly1305vmsl is an assembly implementation of Poly1305 that uses vector
|
|
// instructions, including VMSL. It must only be called if the vector facility (vx) is
|
|
// available and if VMSL is supported.
|
|
//go:noescape
|
|
func poly1305vmsl(out *[16]byte, m *byte, mlen uint64, key *[32]byte)
|
|
|
|
// Sum generates an authenticator for m using a one-time key and puts the
|
|
// 16-byte result into out. Authenticating two different messages with the same
|
|
// key allows an attacker to forge messages at will.
|
|
func Sum(out *[16]byte, m []byte, key *[32]byte) {
|
|
if hasVX {
|
|
var mPtr *byte
|
|
if len(m) > 0 {
|
|
mPtr = &m[0]
|
|
}
|
|
if hasVMSL && len(m) > 256 {
|
|
poly1305vmsl(out, mPtr, uint64(len(m)), key)
|
|
} else {
|
|
poly1305vx(out, mPtr, uint64(len(m)), key)
|
|
}
|
|
} else {
|
|
sumGeneric(out, m, key)
|
|
}
|
|
}
|