1/* $OpenBSD: modes_local.h,v 1.2 2023/07/08 14:55:36 beck Exp $ */
2/* ====================================================================
3 * Copyright (c) 2010 The OpenSSL Project.  All rights reserved.
4 *
5 * Redistribution and use is governed by OpenSSL license.
6 * ====================================================================
7 */
8
9#include <endian.h>
10
11#include <openssl/opensslconf.h>
12
13#include <openssl/modes.h>
14
15__BEGIN_HIDDEN_DECLS
16
17#if defined(_LP64)
18typedef long i64;
19typedef unsigned long u64;
20#define U64(C) C##UL
21#else
22typedef long long i64;
23typedef unsigned long long u64;
24#define U64(C) C##ULL
25#endif
26
27typedef unsigned int u32;
28typedef unsigned char u8;
29
30#if !defined(OPENSSL_NO_ASM) && !defined(OPENSSL_NO_INLINE_ASM)
31#if defined(__GNUC__) && __GNUC__>=2
32# if defined(__x86_64) || defined(__x86_64__)
33#  define BSWAP8(x) ({	u64 ret=(x);					\
34			asm ("bswapq %0"				\
35			: "+r"(ret));	ret;		})
36#  define BSWAP4(x) ({	u32 ret=(x);					\
37			asm ("bswapl %0"				\
38			: "+r"(ret));	ret;		})
39# elif (defined(__i386) || defined(__i386__))
40#  define BSWAP8(x) ({	u32 lo=(u64)(x)>>32,hi=(x);			\
41			asm ("bswapl %0; bswapl %1"			\
42			: "+r"(hi),"+r"(lo));				\
43			(u64)hi<<32|lo;			})
44#  define BSWAP4(x) ({	u32 ret=(x);					\
45			asm ("bswapl %0"				\
46			: "+r"(ret));	ret;		})
47# elif (defined(__arm__) || defined(__arm)) && !defined(__STRICT_ALIGNMENT)
48#  define BSWAP8(x) ({	u32 lo=(u64)(x)>>32,hi=(x);			\
49			asm ("rev %0,%0; rev %1,%1"			\
50			: "+r"(hi),"+r"(lo));				\
51			(u64)hi<<32|lo;			})
52#  define BSWAP4(x) ({	u32 ret;					\
53			asm ("rev %0,%1"				\
54			: "=r"(ret) : "r"((u32)(x)));			\
55			ret;				})
56# endif
57#endif
58#endif
59
60#if defined(BSWAP4) && !defined(__STRICT_ALIGNMENT)
61#define GETU32(p)	BSWAP4(*(const u32 *)(p))
62#define PUTU32(p,v)	*(u32 *)(p) = BSWAP4(v)
63#else
64#define GETU32(p)	((u32)(p)[0]<<24|(u32)(p)[1]<<16|(u32)(p)[2]<<8|(u32)(p)[3])
65#define PUTU32(p,v)	((p)[0]=(u8)((v)>>24),(p)[1]=(u8)((v)>>16),(p)[2]=(u8)((v)>>8),(p)[3]=(u8)(v))
66#endif
67
68/* GCM definitions */
69
70typedef struct {
71	u64 hi, lo;
72} u128;
73
74#ifdef	TABLE_BITS
75#undef	TABLE_BITS
76#endif
77/*
78 * Even though permitted values for TABLE_BITS are 8, 4 and 1, it should
79 * never be set to 8 [or 1]. For further information see gcm128.c.
80 */
81#define	TABLE_BITS 4
82
83struct gcm128_context {
84	/* Following 6 names follow names in GCM specification */
85	union {
86		u64 u[2];
87		u32 d[4];
88		u8 c[16];
89		size_t t[16/sizeof(size_t)];
90	} Yi, EKi, EK0, len, Xi, H;
91	/* Relative position of Xi, H and pre-computed Htable is used
92	 * in some assembler modules, i.e. don't change the order! */
93#if TABLE_BITS==8
94	u128 Htable[256];
95#else
96	u128 Htable[16];
97	void (*gmult)(u64 Xi[2], const u128 Htable[16]);
98	void (*ghash)(u64 Xi[2], const u128 Htable[16], const u8 *inp,
99	    size_t len);
100#endif
101	unsigned int mres, ares;
102	block128_f block;
103	void *key;
104};
105
106struct xts128_context {
107	void      *key1, *key2;
108	block128_f block1, block2;
109};
110
111struct ccm128_context {
112	union {
113		u64 u[2];
114		u8 c[16];
115	} nonce, cmac;
116	u64 blocks;
117	block128_f block;
118	void *key;
119};
120
121__END_HIDDEN_DECLS
122