aes-c64xplus.pl@ 69881

Last change on this file since 69881 was 69881, checked in by vboxsync, 7 years ago
Update OpenSSL to 1.1.0g. bugref:8070: src/libs maintenance
Property svn:eol-style set to `LF` Property svn:executable set to ``*
File size: 43.2 KB

Line
1	#! /usr/bin/env perl
2	# Copyright 2012-2016 The OpenSSL Project Authors. All Rights Reserved.
3	#
4	# Licensed under the OpenSSL license (the "License"). You may not use
5	# this file except in compliance with the License. You can obtain a copy
6	# in the file LICENSE in the source distribution or at
7	# https://www.openssl.org/source/license.html
8
9	#
10	# ====================================================================
11	# Written by Andy Polyakov <[email protected]> for the OpenSSL
12	# project. The module is, however, dual licensed under OpenSSL and
13	# CRYPTOGAMS licenses depending on where you obtain it. For further
14	# details see http://www.openssl.org/~appro/cryptogams/.
15	# ====================================================================
16	#
17	# [Endian-neutral] AES for C64x+.
18	#
19	# Even though SPLOOPs are scheduled for 13 cycles, and thus expected
20	# performance is ~8.5 cycles per byte processed with 128-bit key,
21	# measured performance turned to be ~10 cycles per byte. Discrepancy
22	# must be caused by limitations of L1D memory banking(*), see SPRU871
23	# TI publication for further details. If any consolation it's still
24	# ~20% faster than TI's linear assembly module anyway... Compared to
25	# aes_core.c compiled with cl6x 6.0 with -mv6400+ -o2 options this
26	# code is 3.75x faster and almost 3x smaller (tables included).
27	#
28	# (*) This means that there might be subtle correlation between data
29	# and timing and one can wonder if it can be ... attacked:-(
30	# On the other hand this also means that if one chooses to
31	# implement 4 T-tables variant [instead of 1 T-table as in
32	# this implementation, or in addition to], then one ought to
33	# interleave them. Even though it complicates addressing,
34	# references to interleaved tables would be guaranteed not to
35	# clash. I reckon that it should be possible to break 8 cycles
36	# per byte "barrier," i.e. improve by ~20%, naturally at the
37	# cost of 8x increased pressure on L1D. 8x because you'd have
38	# to interleave both Te and Td tables...
39
40	while (($output=shift) && ($output!~/\w[\w\-]*\.\w+$/)) {}
41	open STDOUT,">$output";
42
43	($TEA,$TEB)=("A5","B5");
44	($KPA,$KPB)=("A3","B1");
45	@K=("A6","B6","A7","B7");
46	@s=("A8","B8","A9","B9");
47	@Te0=@Td0=("A16","B16","A17","B17");
48	@Te1=@Td1=("A18","B18","A19","B19");
49	@Te2=@Td2=("A20","B20","A21","B21");
50	@Te3=@Td3=("A22","B22","A23","B23");
51
52	$code=<<___;
53	.text
54
55	.if .ASSEMBLER_VERSION<7000000
56	.asg 0,__TI_EABI__
57	.endif
58	.if __TI_EABI__
59	.nocmp
60	.asg AES_encrypt,_AES_encrypt
61	.asg AES_decrypt,_AES_decrypt
62	.asg AES_set_encrypt_key,_AES_set_encrypt_key
63	.asg AES_set_decrypt_key,_AES_set_decrypt_key
64	.asg AES_ctr32_encrypt,_AES_ctr32_encrypt
65	.endif
66
67	.asg B3,RA
68	.asg A4,INP
69	.asg B4,OUT
70	.asg A6,KEY
71	.asg A4,RET
72	.asg B15,SP
73
74	.eval 24,EXT0
75	.eval 16,EXT1
76	.eval 8,EXT2
77	.eval 0,EXT3
78	.eval 8,TBL1
79	.eval 16,TBL2
80	.eval 24,TBL3
81
82	.if .BIG_ENDIAN
83	.eval 24-EXT0,EXT0
84	.eval 24-EXT1,EXT1
85	.eval 24-EXT2,EXT2
86	.eval 24-EXT3,EXT3
87	.eval 32-TBL1,TBL1
88	.eval 32-TBL2,TBL2
89	.eval 32-TBL3,TBL3
90	.endif
91
92	.global _AES_encrypt
93	_AES_encrypt:
94	.asmfunc
95	MVK 1,B2
96	__encrypt:
97	.if __TI_EABI__
98	[B2] LDNDW *INP++,A9:A8 ; load input
99	\|\| MVKL \$PCR_OFFSET(AES_Te,__encrypt),$TEA
100	\|\| ADDKPC __encrypt,B0
101	[B2] LDNDW *INP++,B9:B8
102	\|\| MVKH \$PCR_OFFSET(AES_Te,__encrypt),$TEA
103	\|\| ADD 0,KEY,$KPA
104	\|\| ADD 4,KEY,$KPB
105	.else
106	[B2] LDNDW *INP++,A9:A8 ; load input
107	\|\| MVKL (AES_Te-__encrypt),$TEA
108	\|\| ADDKPC __encrypt,B0
109	[B2] LDNDW *INP++,B9:B8
110	\|\| MVKH (AES_Te-__encrypt),$TEA
111	\|\| ADD 0,KEY,$KPA
112	\|\| ADD 4,KEY,$KPB
113	.endif
114	LDW *$KPA++[2],$Te0[0] ; zero round key
115	\|\| LDW *$KPB++[2],$Te0[1]
116	\|\| MVK 60,A0
117	\|\| ADD B0,$TEA,$TEA ; AES_Te
118	LDW *KEY[A0],B0 ; rounds
119	\|\| MVK 1024,A0 ; sizeof(AES_Te)
120	LDW *$KPA++[2],$Te0[2]
121	\|\| LDW *$KPB++[2],$Te0[3]
122	\|\| MV $TEA,$TEB
123	NOP
124	.if .BIG_ENDIAN
125	MV A9,$s[0]
126	\|\| MV A8,$s[1]
127	\|\| MV B9,$s[2]
128	\|\| MV B8,$s[3]
129	.else
130	MV A8,$s[0]
131	\|\| MV A9,$s[1]
132	\|\| MV B8,$s[2]
133	\|\| MV B9,$s[3]
134	.endif
135	XOR $Te0[0],$s[0],$s[0]
136	\|\| XOR $Te0[1],$s[1],$s[1]
137	\|\| LDW *$KPA++[2],$K[0] ; 1st round key
138	\|\| LDW *$KPB++[2],$K[1]
139	SUB B0,2,B0
140
141	SPLOOPD 13
142	\|\| MVC B0,ILC
143	\|\| LDW *$KPA++[2],$K[2]
144	\|\| LDW *$KPB++[2],$K[3]
145	;;====================================================================
146	EXTU $s[1],EXT1,24,$Te1[1]
147	\|\| EXTU $s[0],EXT3,24,$Te3[0]
148	LDW *${TEB}[$Te1[1]],$Te1[1] ; Te1[s1>>8], t0
149	\|\| LDW *${TEA}[$Te3[0]],$Te3[0] ; Te3[s0>>24], t1
150	\|\| XOR $s[2],$Te0[2],$s[2] ; modulo-scheduled
151	\|\| XOR $s[3],$Te0[3],$s[3] ; modulo-scheduled
152	\|\| EXTU $s[1],EXT3,24,$Te3[1]
153	\|\| EXTU $s[0],EXT1,24,$Te1[0]
154	LDW *${TEB}[$Te3[1]],$Te3[1] ; Te3[s1>>24], t2
155	\|\| LDW *${TEA}[$Te1[0]],$Te1[0] ; Te1[s0>>8], t3
156	\|\| EXTU $s[2],EXT2,24,$Te2[2]
157	\|\| EXTU $s[3],EXT2,24,$Te2[3]
158	LDW *${TEA}[$Te2[2]],$Te2[2] ; Te2[s2>>16], t0
159	\|\| LDW *${TEB}[$Te2[3]],$Te2[3] ; Te2[s3>>16], t1
160	\|\| EXTU $s[3],EXT3,24,$Te3[3]
161	\|\| EXTU $s[2],EXT1,24,$Te1[2]
162	LDW *${TEB}[$Te3[3]],$Te3[3] ; Te3[s3>>24], t0
163	\|\| LDW *${TEA}[$Te1[2]],$Te1[2] ; Te1[s2>>8], t1
164	\|\| EXTU $s[0],EXT2,24,$Te2[0]
165	\|\| EXTU $s[1],EXT2,24,$Te2[1]
166	LDW *${TEA}[$Te2[0]],$Te2[0] ; Te2[s0>>16], t2
167	\|\| LDW *${TEB}[$Te2[1]],$Te2[1] ; Te2[s1>>16], t3
168	\|\| EXTU $s[3],EXT1,24,$Te1[3]
169	\|\| EXTU $s[2],EXT3,24,$Te3[2]
170	LDW *${TEB}[$Te1[3]],$Te1[3] ; Te1[s3>>8], t2
171	\|\| LDW *${TEA}[$Te3[2]],$Te3[2] ; Te3[s2>>24], t3
172	\|\| ROTL $Te1[1],TBL1,$Te3[0] ; t0
173	\|\| ROTL $Te3[0],TBL3,$Te1[1] ; t1
174	\|\| EXTU $s[0],EXT0,24,$Te0[0]
175	\|\| EXTU $s[1],EXT0,24,$Te0[1]
176	LDW *${TEA}[$Te0[0]],$Te0[0] ; Te0[s0], t0
177	\|\| LDW *${TEB}[$Te0[1]],$Te0[1] ; Te0[s1], t1
178	\|\| ROTL $Te3[1],TBL3,$Te1[0] ; t2
179	\|\| ROTL $Te1[0],TBL1,$Te3[1] ; t3
180	\|\| EXTU $s[2],EXT0,24,$Te0[2]
181	\|\| EXTU $s[3],EXT0,24,$Te0[3]
182	LDW *${TEA}[$Te0[2]],$Te0[2] ; Te0[s2], t2
183	\|\| LDW *${TEB}[$Te0[3]],$Te0[3] ; Te0[s3], t3
184	\|\| ROTL $Te2[2],TBL2,$Te2[2] ; t0
185	\|\| ROTL $Te2[3],TBL2,$Te2[3] ; t1
186	\|\| XOR $K[0],$Te3[0],$s[0]
187	\|\| XOR $K[1],$Te1[1],$s[1]
188	ROTL $Te3[3],TBL3,$Te1[2] ; t0
189	\|\| ROTL $Te1[2],TBL1,$Te3[3] ; t1
190	\|\| XOR $K[2],$Te1[0],$s[2]
191	\|\| XOR $K[3],$Te3[1],$s[3]
192	\|\| LDW *$KPA++[2],$K[0] ; next round key
193	\|\| LDW *$KPB++[2],$K[1]
194	ROTL $Te2[0],TBL2,$Te2[0] ; t2
195	\|\| ROTL $Te2[1],TBL2,$Te2[1] ; t3
196	\|\| XOR $s[0],$Te2[2],$s[0]
197	\|\| XOR $s[1],$Te2[3],$s[1]
198	\|\| LDW *$KPA++[2],$K[2]
199	\|\| LDW *$KPB++[2],$K[3]
200	ROTL $Te1[3],TBL1,$Te3[2] ; t2
201	\|\| ROTL $Te3[2],TBL3,$Te1[3] ; t3
202	\|\| XOR $s[0],$Te1[2],$s[0]
203	\|\| XOR $s[1],$Te3[3],$s[1]
204	XOR $s[2],$Te2[0],$s[2]
205	\|\| XOR $s[3],$Te2[1],$s[3]
206	\|\| XOR $s[0],$Te0[0],$s[0]
207	\|\| XOR $s[1],$Te0[1],$s[1]
208	SPKERNEL
209	\|\| XOR.L $s[2],$Te3[2],$s[2]
210	\|\| XOR.L $s[3],$Te1[3],$s[3]
211	;;====================================================================
212	ADD.D ${TEA},A0,${TEA} ; point to Te4
213	\|\| ADD.D ${TEB},A0,${TEB}
214	\|\| EXTU $s[1],EXT1,24,$Te1[1]
215	\|\| EXTU $s[0],EXT3,24,$Te3[0]
216	LDBU *${TEB}[$Te1[1]],$Te1[1] ; Te1[s1>>8], t0
217	\|\| LDBU *${TEA}[$Te3[0]],$Te3[0] ; Te3[s0>>24], t1
218	\|\| XOR $s[2],$Te0[2],$s[2] ; modulo-scheduled
219	\|\| XOR $s[3],$Te0[3],$s[3] ; modulo-scheduled
220	\|\| EXTU $s[0],EXT0,24,$Te0[0]
221	\|\| EXTU $s[1],EXT0,24,$Te0[1]
222	LDBU *${TEA}[$Te0[0]],$Te0[0] ; Te0[s0], t0
223	\|\| LDBU *${TEB}[$Te0[1]],$Te0[1] ; Te0[s1], t1
224	\|\| EXTU $s[3],EXT3,24,$Te3[3]
225	\|\| EXTU $s[2],EXT1,24,$Te1[2]
226	LDBU *${TEB}[$Te3[3]],$Te3[3] ; Te3[s3>>24], t0
227	\|\| LDBU *${TEA}[$Te1[2]],$Te1[2] ; Te1[s2>>8], t1
228	\|\| EXTU $s[2],EXT2,24,$Te2[2]
229	\|\| EXTU $s[3],EXT2,24,$Te2[3]
230	LDBU *${TEA}[$Te2[2]],$Te2[2] ; Te2[s2>>16], t0
231	\|\| LDBU *${TEB}[$Te2[3]],$Te2[3] ; Te2[s3>>16], t1
232	\|\| EXTU $s[1],EXT3,24,$Te3[1]
233	\|\| EXTU $s[0],EXT1,24,$Te1[0]
234	LDBU *${TEB}[$Te3[1]],$Te3[1] ; Te3[s1>>24], t2
235	\|\| LDBU *${TEA}[$Te1[0]],$Te1[0] ; Te1[s0>>8], t3
236	\|\| EXTU $s[3],EXT1,24,$Te1[3]
237	\|\| EXTU $s[2],EXT3,24,$Te3[2]
238	LDBU *${TEB}[$Te1[3]],$Te1[3] ; Te1[s3>>8], t2
239	\|\| LDBU *${TEA}[$Te3[2]],$Te3[2] ; Te3[s2>>24], t3
240	\|\| EXTU $s[2],EXT0,24,$Te0[2]
241	\|\| EXTU $s[3],EXT0,24,$Te0[3]
242	LDBU *${TEA}[$Te0[2]],$Te0[2] ; Te0[s2], t2
243	\|\| LDBU *${TEB}[$Te0[3]],$Te0[3] ; Te0[s3], t3
244	\|\| EXTU $s[0],EXT2,24,$Te2[0]
245	\|\| EXTU $s[1],EXT2,24,$Te2[1]
246	LDBU *${TEA}[$Te2[0]],$Te2[0] ; Te2[s0>>16], t2
247	\|\| LDBU *${TEB}[$Te2[1]],$Te2[1] ; Te2[s1>>16], t3
248
249	.if .BIG_ENDIAN
250	PACK2 $Te0[0],$Te1[1],$Te0[0]
251	\|\| PACK2 $Te0[1],$Te1[2],$Te0[1]
252	PACK2 $Te2[2],$Te3[3],$Te2[2]
253	\|\| PACK2 $Te2[3],$Te3[0],$Te2[3]
254	PACKL4 $Te0[0],$Te2[2],$Te0[0]
255	\|\| PACKL4 $Te0[1],$Te2[3],$Te0[1]
256	XOR $K[0],$Te0[0],$Te0[0] ; s[0]
257	\|\| XOR $K[1],$Te0[1],$Te0[1] ; s[1]
258
259	PACK2 $Te0[2],$Te1[3],$Te0[2]
260	\|\| PACK2 $Te0[3],$Te1[0],$Te0[3]
261	PACK2 $Te2[0],$Te3[1],$Te2[0]
262	\|\| PACK2 $Te2[1],$Te3[2],$Te2[1]
263	\|\| BNOP RA
264	PACKL4 $Te0[2],$Te2[0],$Te0[2]
265	\|\| PACKL4 $Te0[3],$Te2[1],$Te0[3]
266	XOR $K[2],$Te0[2],$Te0[2] ; s[2]
267	\|\| XOR $K[3],$Te0[3],$Te0[3] ; s[3]
268
269	MV $Te0[0],A9
270	\|\| MV $Te0[1],A8
271	MV $Te0[2],B9
272	\|\| MV $Te0[3],B8
273	\|\| [B2] STNDW A9:A8,*OUT++
274	[B2] STNDW B9:B8,*OUT++
275	.else
276	PACK2 $Te1[1],$Te0[0],$Te1[1]
277	\|\| PACK2 $Te1[2],$Te0[1],$Te1[2]
278	PACK2 $Te3[3],$Te2[2],$Te3[3]
279	\|\| PACK2 $Te3[0],$Te2[3],$Te3[0]
280	PACKL4 $Te3[3],$Te1[1],$Te1[1]
281	\|\| PACKL4 $Te3[0],$Te1[2],$Te1[2]
282	XOR $K[0],$Te1[1],$Te1[1] ; s[0]
283	\|\| XOR $K[1],$Te1[2],$Te1[2] ; s[1]
284
285	PACK2 $Te1[3],$Te0[2],$Te1[3]
286	\|\| PACK2 $Te1[0],$Te0[3],$Te1[0]
287	PACK2 $Te3[1],$Te2[0],$Te3[1]
288	\|\| PACK2 $Te3[2],$Te2[1],$Te3[2]
289	\|\| BNOP RA
290	PACKL4 $Te3[1],$Te1[3],$Te1[3]
291	\|\| PACKL4 $Te3[2],$Te1[0],$Te1[0]
292	XOR $K[2],$Te1[3],$Te1[3] ; s[2]
293	\|\| XOR $K[3],$Te1[0],$Te1[0] ; s[3]
294
295	MV $Te1[1],A8
296	\|\| MV $Te1[2],A9
297	MV $Te1[3],B8
298	\|\| MV $Te1[0],B9
299	\|\| [B2] STNDW A9:A8,*OUT++
300	[B2] STNDW B9:B8,*OUT++
301	.endif
302	.endasmfunc
303
304	.global _AES_decrypt
305	_AES_decrypt:
306	.asmfunc
307	MVK 1,B2
308	__decrypt:
309	.if __TI_EABI__
310	[B2] LDNDW *INP++,A9:A8 ; load input
311	\|\| MVKL \$PCR_OFFSET(AES_Td,__decrypt),$TEA
312	\|\| ADDKPC __decrypt,B0
313	[B2] LDNDW *INP++,B9:B8
314	\|\| MVKH \$PCR_OFFSET(AES_Td,__decrypt),$TEA
315	\|\| ADD 0,KEY,$KPA
316	\|\| ADD 4,KEY,$KPB
317	.else
318	[B2] LDNDW *INP++,A9:A8 ; load input
319	\|\| MVKL (AES_Td-__decrypt),$TEA
320	\|\| ADDKPC __decrypt,B0
321	[B2] LDNDW *INP++,B9:B8
322	\|\| MVKH (AES_Td-__decrypt),$TEA
323	\|\| ADD 0,KEY,$KPA
324	\|\| ADD 4,KEY,$KPB
325	.endif
326	LDW *$KPA++[2],$Td0[0] ; zero round key
327	\|\| LDW *$KPB++[2],$Td0[1]
328	\|\| MVK 60,A0
329	\|\| ADD B0,$TEA,$TEA ; AES_Td
330	LDW *KEY[A0],B0 ; rounds
331	\|\| MVK 1024,A0 ; sizeof(AES_Td)
332	LDW *$KPA++[2],$Td0[2]
333	\|\| LDW *$KPB++[2],$Td0[3]
334	\|\| MV $TEA,$TEB
335	NOP
336	.if .BIG_ENDIAN
337	MV A9,$s[0]
338	\|\| MV A8,$s[1]
339	\|\| MV B9,$s[2]
340	\|\| MV B8,$s[3]
341	.else
342	MV A8,$s[0]
343	\|\| MV A9,$s[1]
344	\|\| MV B8,$s[2]
345	\|\| MV B9,$s[3]
346	.endif
347	XOR $Td0[0],$s[0],$s[0]
348	\|\| XOR $Td0[1],$s[1],$s[1]
349	\|\| LDW *$KPA++[2],$K[0] ; 1st round key
350	\|\| LDW *$KPB++[2],$K[1]
351	SUB B0,2,B0
352
353	SPLOOPD 13
354	\|\| MVC B0,ILC
355	\|\| LDW *$KPA++[2],$K[2]
356	\|\| LDW *$KPB++[2],$K[3]
357	;;====================================================================
358	EXTU $s[1],EXT3,24,$Td3[1]
359	\|\| EXTU $s[0],EXT1,24,$Td1[0]
360	LDW *${TEB}[$Td3[1]],$Td3[1] ; Td3[s1>>24], t0
361	\|\| LDW *${TEA}[$Td1[0]],$Td1[0] ; Td1[s0>>8], t1
362	\|\| XOR $s[2],$Td0[2],$s[2] ; modulo-scheduled
363	\|\| XOR $s[3],$Td0[3],$s[3] ; modulo-scheduled
364	\|\| EXTU $s[1],EXT1,24,$Td1[1]
365	\|\| EXTU $s[0],EXT3,24,$Td3[0]
366	LDW *${TEB}[$Td1[1]],$Td1[1] ; Td1[s1>>8], t2
367	\|\| LDW *${TEA}[$Td3[0]],$Td3[0] ; Td3[s0>>24], t3
368	\|\| EXTU $s[2],EXT2,24,$Td2[2]
369	\|\| EXTU $s[3],EXT2,24,$Td2[3]
370	LDW *${TEA}[$Td2[2]],$Td2[2] ; Td2[s2>>16], t0
371	\|\| LDW *${TEB}[$Td2[3]],$Td2[3] ; Td2[s3>>16], t1
372	\|\| EXTU $s[3],EXT1,24,$Td1[3]
373	\|\| EXTU $s[2],EXT3,24,$Td3[2]
374	LDW *${TEB}[$Td1[3]],$Td1[3] ; Td1[s3>>8], t0
375	\|\| LDW *${TEA}[$Td3[2]],$Td3[2] ; Td3[s2>>24], t1
376	\|\| EXTU $s[0],EXT2,24,$Td2[0]
377	\|\| EXTU $s[1],EXT2,24,$Td2[1]
378	LDW *${TEA}[$Td2[0]],$Td2[0] ; Td2[s0>>16], t2
379	\|\| LDW *${TEB}[$Td2[1]],$Td2[1] ; Td2[s1>>16], t3
380	\|\| EXTU $s[3],EXT3,24,$Td3[3]
381	\|\| EXTU $s[2],EXT1,24,$Td1[2]
382	LDW *${TEB}[$Td3[3]],$Td3[3] ; Td3[s3>>24], t2
383	\|\| LDW *${TEA}[$Td1[2]],$Td1[2] ; Td1[s2>>8], t3
384	\|\| ROTL $Td3[1],TBL3,$Td1[0] ; t0
385	\|\| ROTL $Td1[0],TBL1,$Td3[1] ; t1
386	\|\| EXTU $s[0],EXT0,24,$Td0[0]
387	\|\| EXTU $s[1],EXT0,24,$Td0[1]
388	LDW *${TEA}[$Td0[0]],$Td0[0] ; Td0[s0], t0
389	\|\| LDW *${TEB}[$Td0[1]],$Td0[1] ; Td0[s1], t1
390	\|\| ROTL $Td1[1],TBL1,$Td3[0] ; t2
391	\|\| ROTL $Td3[0],TBL3,$Td1[1] ; t3
392	\|\| EXTU $s[2],EXT0,24,$Td0[2]
393	\|\| EXTU $s[3],EXT0,24,$Td0[3]
394	LDW *${TEA}[$Td0[2]],$Td0[2] ; Td0[s2], t2
395	\|\| LDW *${TEB}[$Td0[3]],$Td0[3] ; Td0[s3], t3
396	\|\| ROTL $Td2[2],TBL2,$Td2[2] ; t0
397	\|\| ROTL $Td2[3],TBL2,$Td2[3] ; t1
398	\|\| XOR $K[0],$Td1[0],$s[0]
399	\|\| XOR $K[1],$Td3[1],$s[1]
400	ROTL $Td1[3],TBL1,$Td3[2] ; t0
401	\|\| ROTL $Td3[2],TBL3,$Td1[3] ; t1
402	\|\| XOR $K[2],$Td3[0],$s[2]
403	\|\| XOR $K[3],$Td1[1],$s[3]
404	\|\| LDW *$KPA++[2],$K[0] ; next round key
405	\|\| LDW *$KPB++[2],$K[1]
406	ROTL $Td2[0],TBL2,$Td2[0] ; t2
407	\|\| ROTL $Td2[1],TBL2,$Td2[1] ; t3
408	\|\| XOR $s[0],$Td2[2],$s[0]
409	\|\| XOR $s[1],$Td2[3],$s[1]
410	\|\| LDW *$KPA++[2],$K[2]
411	\|\| LDW *$KPB++[2],$K[3]
412	ROTL $Td3[3],TBL3,$Td1[2] ; t2
413	\|\| ROTL $Td1[2],TBL1,$Td3[3] ; t3
414	\|\| XOR $s[0],$Td3[2],$s[0]
415	\|\| XOR $s[1],$Td1[3],$s[1]
416	XOR $s[2],$Td2[0],$s[2]
417	\|\| XOR $s[3],$Td2[1],$s[3]
418	\|\| XOR $s[0],$Td0[0],$s[0]
419	\|\| XOR $s[1],$Td0[1],$s[1]
420	SPKERNEL
421	\|\| XOR.L $s[2],$Td1[2],$s[2]
422	\|\| XOR.L $s[3],$Td3[3],$s[3]
423	;;====================================================================
424	ADD.D ${TEA},A0,${TEA} ; point to Td4
425	\|\| ADD.D ${TEB},A0,${TEB}
426	\|\| EXTU $s[1],EXT3,24,$Td3[1]
427	\|\| EXTU $s[0],EXT1,24,$Td1[0]
428	LDBU *${TEB}[$Td3[1]],$Td3[1] ; Td3[s1>>24], t0
429	\|\| LDBU *${TEA}[$Td1[0]],$Td1[0] ; Td1[s0>>8], t1
430	\|\| XOR $s[2],$Td0[2],$s[2] ; modulo-scheduled
431	\|\| XOR $s[3],$Td0[3],$s[3] ; modulo-scheduled
432	\|\| EXTU $s[0],EXT0,24,$Td0[0]
433	\|\| EXTU $s[1],EXT0,24,$Td0[1]
434	LDBU *${TEA}[$Td0[0]],$Td0[0] ; Td0[s0], t0
435	\|\| LDBU *${TEB}[$Td0[1]],$Td0[1] ; Td0[s1], t1
436	\|\| EXTU $s[2],EXT2,24,$Td2[2]
437	\|\| EXTU $s[3],EXT2,24,$Td2[3]
438	LDBU *${TEA}[$Td2[2]],$Td2[2] ; Td2[s2>>16], t0
439	\|\| LDBU *${TEB}[$Td2[3]],$Td2[3] ; Td2[s3>>16], t1
440	\|\| EXTU $s[3],EXT1,24,$Td1[3]
441	\|\| EXTU $s[2],EXT3,24,$Td3[2]
442	LDBU *${TEB}[$Td1[3]],$Td1[3] ; Td1[s3>>8], t0
443	\|\| LDBU *${TEA}[$Td3[2]],$Td3[2] ; Td3[s2>>24], t1
444	\|\| EXTU $s[1],EXT1,24,$Td1[1]
445	\|\| EXTU $s[0],EXT3,24,$Td3[0]
446	LDBU *${TEB}[$Td1[1]],$Td1[1] ; Td1[s1>>8], t2
447	\|\| LDBU *${TEA}[$Td3[0]],$Td3[0] ; Td3[s0>>24], t3
448	\|\| EXTU $s[0],EXT2,24,$Td2[0]
449	\|\| EXTU $s[1],EXT2,24,$Td2[1]
450	LDBU *${TEA}[$Td2[0]],$Td2[0] ; Td2[s0>>16], t2
451	\|\| LDBU *${TEB}[$Td2[1]],$Td2[1] ; Td2[s1>>16], t3
452	\|\| EXTU $s[3],EXT3,24,$Td3[3]
453	\|\| EXTU $s[2],EXT1,24,$Td1[2]
454	LDBU *${TEB}[$Td3[3]],$Td3[3] ; Td3[s3>>24], t2
455	\|\| LDBU *${TEA}[$Td1[2]],$Td1[2] ; Td1[s2>>8], t3
456	\|\| EXTU $s[2],EXT0,24,$Td0[2]
457	\|\| EXTU $s[3],EXT0,24,$Td0[3]
458	LDBU *${TEA}[$Td0[2]],$Td0[2] ; Td0[s2], t2
459	\|\| LDBU *${TEB}[$Td0[3]],$Td0[3] ; Td0[s3], t3
460
461	.if .BIG_ENDIAN
462	PACK2 $Td0[0],$Td1[3],$Td0[0]
463	\|\| PACK2 $Td0[1],$Td1[0],$Td0[1]
464	PACK2 $Td2[2],$Td3[1],$Td2[2]
465	\|\| PACK2 $Td2[3],$Td3[2],$Td2[3]
466	PACKL4 $Td0[0],$Td2[2],$Td0[0]
467	\|\| PACKL4 $Td0[1],$Td2[3],$Td0[1]
468	XOR $K[0],$Td0[0],$Td0[0] ; s[0]
469	\|\| XOR $K[1],$Td0[1],$Td0[1] ; s[1]
470
471	PACK2 $Td0[2],$Td1[1],$Td0[2]
472	\|\| PACK2 $Td0[3],$Td1[2],$Td0[3]
473	PACK2 $Td2[0],$Td3[3],$Td2[0]
474	\|\| PACK2 $Td2[1],$Td3[0],$Td2[1]
475	\|\| BNOP RA
476	PACKL4 $Td0[2],$Td2[0],$Td0[2]
477	\|\| PACKL4 $Td0[3],$Td2[1],$Td0[3]
478	XOR $K[2],$Td0[2],$Td0[2] ; s[2]
479	\|\| XOR $K[3],$Td0[3],$Td0[3] ; s[3]
480
481	MV $Td0[0],A9
482	\|\| MV $Td0[1],A8
483	MV $Td0[2],B9
484	\|\| MV $Td0[3],B8
485	\|\| [B2] STNDW A9:A8,*OUT++
486	[B2] STNDW B9:B8,*OUT++
487	.else
488	PACK2 $Td1[3],$Td0[0],$Td1[3]
489	\|\| PACK2 $Td1[0],$Td0[1],$Td1[0]
490	PACK2 $Td3[1],$Td2[2],$Td3[1]
491	\|\| PACK2 $Td3[2],$Td2[3],$Td3[2]
492	PACKL4 $Td3[1],$Td1[3],$Td1[3]
493	\|\| PACKL4 $Td3[2],$Td1[0],$Td1[0]
494	XOR $K[0],$Td1[3],$Td1[3] ; s[0]
495	\|\| XOR $K[1],$Td1[0],$Td1[0] ; s[1]
496
497	PACK2 $Td1[1],$Td0[2],$Td1[1]
498	\|\| PACK2 $Td1[2],$Td0[3],$Td1[2]
499	PACK2 $Td3[3],$Td2[0],$Td3[3]
500	\|\| PACK2 $Td3[0],$Td2[1],$Td3[0]
501	\|\| BNOP RA
502	PACKL4 $Td3[3],$Td1[1],$Td1[1]
503	\|\| PACKL4 $Td3[0],$Td1[2],$Td1[2]
504	XOR $K[2],$Td1[1],$Td1[1] ; s[2]
505	\|\| XOR $K[3],$Td1[2],$Td1[2] ; s[3]
506
507	MV $Td1[3],A8
508	\|\| MV $Td1[0],A9
509	MV $Td1[1],B8
510	\|\| MV $Td1[2],B9
511	\|\| [B2] STNDW A9:A8,*OUT++
512	[B2] STNDW B9:B8,*OUT++
513	.endif
514	.endasmfunc
515	___
516	{
517	my @K=(@K,@s); # extended key
518	my @Te4=map("B$_",(16..19));
519
520	my @Kx9=@Te0; # used in AES_set_decrypt_key
521	my @KxB=@Te1;
522	my @KxD=@Te2;
523	my @KxE=@Te3;
524
525	$code.=<<___;
526	.asg OUT,BITS
527
528	.global _AES_set_encrypt_key
529	_AES_set_encrypt_key:
530	__set_encrypt_key:
531	.asmfunc
532	MV INP,A0
533	\|\| SHRU BITS,5,BITS ; 128-192-256 -> 4-6-8
534	\|\| MV KEY,A1
535	[!A0] B RA
536	\|\|[!A0] MVK -1,RET
537	\|\|[!A0] MVK 1,A1 ; only one B RA
538	[!A1] B RA
539	\|\|[!A1] MVK -1,RET
540	\|\|[!A1] MVK 0,A0
541	\|\| MVK 0,B0
542	\|\| MVK 0,A1
543	[A0] LDNDW *INP++,A9:A8
544	\|\| [A0] CMPEQ 4,BITS,B0
545	\|\| [A0] CMPLT 3,BITS,A1
546	[B0] B key128?
547	\|\| [A1] LDNDW *INP++,B9:B8
548	\|\| [A0] CMPEQ 6,BITS,B0
549	\|\| [A0] CMPLT 5,BITS,A1
550	[B0] B key192?
551	\|\| [A1] LDNDW *INP++,B17:B16
552	\|\| [A0] CMPEQ 8,BITS,B0
553	\|\| [A0] CMPLT 7,BITS,A1
554	[B0] B key256?
555	\|\| [A1] LDNDW *INP++,B19:B18
556
557	.if __TI_EABI__
558	[A0] ADD 0,KEY,$KPA
559	\|\| [A0] ADD 4,KEY,$KPB
560	\|\| [A0] MVKL \$PCR_OFFSET(AES_Te4,__set_encrypt_key),$TEA
561	\|\| [A0] ADDKPC __set_encrypt_key,B6
562	[A0] MVKH \$PCR_OFFSET(AES_Te4,__set_encrypt_key),$TEA
563	[A0] ADD B6,$TEA,$TEA ; AES_Te4
564	.else
565	[A0] ADD 0,KEY,$KPA
566	\|\| [A0] ADD 4,KEY,$KPB
567	\|\| [A0] MVKL (AES_Te4-__set_encrypt_key),$TEA
568	\|\| [A0] ADDKPC __set_encrypt_key,B6
569	[A0] MVKH (AES_Te4-__set_encrypt_key),$TEA
570	[A0] ADD B6,$TEA,$TEA ; AES_Te4
571	.endif
572	NOP
573	NOP
574
575	BNOP RA,5
576	\|\| MVK -2,RET ; unknown bit length
577	\|\| MVK 0,B0 ; redundant
578	;;====================================================================
579	;;====================================================================
580	key128?:
581	.if .BIG_ENDIAN
582	MV A9,$K[0]
583	\|\| MV A8,$K[1]
584	\|\| MV B9,$Te4[2]
585	\|\| MV B8,$K[3]
586	.else
587	MV A8,$K[0]
588	\|\| MV A9,$K[1]
589	\|\| MV B8,$Te4[2]
590	\|\| MV B9,$K[3]
591	.endif
592
593	MVK 256,A0
594	\|\| MVK 9,B0
595
596	SPLOOPD 14
597	\|\| MVC B0,ILC
598	\|\| MV $TEA,$TEB
599	\|\| ADD $TEA,A0,A30 ; rcon
600	;;====================================================================
601	LDW *A30++[1],A31 ; rcon[i]
602	\|\| MV $Te4[2],$K[2]
603	\|\| EXTU $K[3],EXT1,24,$Te4[0]
604	LDBU *${TEB}[$Te4[0]],$Te4[0]
605	\|\| MV $K[3],A0
606	\|\| EXTU $K[3],EXT2,24,$Te4[1]
607	LDBU *${TEB}[$Te4[1]],$Te4[1]
608	\|\| EXTU A0,EXT3,24,A0
609	\|\| EXTU $K[3],EXT0,24,$Te4[3]
610	.if .BIG_ENDIAN
611	LDBU *${TEA}[A0],$Te4[3]
612	\|\| LDBU *${TEB}[$Te4[3]],A0
613	.else
614	LDBU *${TEA}[A0],A0
615	\|\| LDBU *${TEB}[$Te4[3]],$Te4[3]
616	.endif
617
618	STW $K[0],*$KPA++[2]
619	\|\| STW $K[1],*$KPB++[2]
620	STW $K[2],*$KPA++[2]
621	\|\| STW $K[3],*$KPB++[2]
622
623	XOR A31,$K[0],$K[0] ; ^=rcon[i]
624	.if .BIG_ENDIAN
625	PACK2 $Te4[0],$Te4[1],$Te4[1]
626	PACK2 $Te4[3],A0,$Te4[3]
627	PACKL4 $Te4[1],$Te4[3],$Te4[3]
628	.else
629	PACK2 $Te4[1],$Te4[0],$Te4[1]
630	PACK2 $Te4[3],A0,$Te4[3]
631	PACKL4 $Te4[3],$Te4[1],$Te4[3]
632	.endif
633	XOR $Te4[3],$K[0],$Te4[0] ; K[0]
634	XOR $Te4[0],$K[1],$K[1] ; K[1]
635	MV $Te4[0],$K[0]
636	\|\| XOR $K[1],$K[2],$Te4[2] ; K[2]
637	XOR $Te4[2],$K[3],$K[3] ; K[3]
638	SPKERNEL
639	;;====================================================================
640	BNOP RA
641	MV $Te4[2],$K[2]
642	\|\| STW $K[0],*$KPA++[2]
643	\|\| STW $K[1],*$KPB++[2]
644	STW $K[2],*$KPA++[2]
645	\|\| STW $K[3],*$KPB++[2]
646	MVK 10,B0 ; rounds
647	STW B0,*++${KPB}[15]
648	MVK 0,RET
649	;;====================================================================
650	;;====================================================================
651	key192?:
652	.if .BIG_ENDIAN
653	MV A9,$K[0]
654	\|\| MV A8,$K[1]
655	\|\| MV B9,$K[2]
656	\|\| MV B8,$K[3]
657	MV B17,$Te4[2]
658	\|\| MV B16,$K[5]
659	.else
660	MV A8,$K[0]
661	\|\| MV A9,$K[1]
662	\|\| MV B8,$K[2]
663	\|\| MV B9,$K[3]
664	MV B16,$Te4[2]
665	\|\| MV B17,$K[5]
666	.endif
667
668	MVK 256,A0
669	\|\| MVK 6,B0
670	MV $TEA,$TEB
671	\|\| ADD $TEA,A0,A30 ; rcon
672	;;====================================================================
673	loop192?:
674	LDW *A30++[1],A31 ; rcon[i]
675	\|\| MV $Te4[2],$K[4]
676	\|\| EXTU $K[5],EXT1,24,$Te4[0]
677	LDBU *${TEB}[$Te4[0]],$Te4[0]
678	\|\| MV $K[5],A0
679	\|\| EXTU $K[5],EXT2,24,$Te4[1]
680	LDBU *${TEB}[$Te4[1]],$Te4[1]
681	\|\| EXTU A0,EXT3,24,A0
682	\|\| EXTU $K[5],EXT0,24,$Te4[3]
683	.if .BIG_ENDIAN
684	LDBU *${TEA}[A0],$Te4[3]
685	\|\| LDBU *${TEB}[$Te4[3]],A0
686	.else
687	LDBU *${TEA}[A0],A0
688	\|\| LDBU *${TEB}[$Te4[3]],$Te4[3]
689	.endif
690
691	STW $K[0],*$KPA++[2]
692	\|\| STW $K[1],*$KPB++[2]
693	STW $K[2],*$KPA++[2]
694	\|\| STW $K[3],*$KPB++[2]
695	STW $K[4],*$KPA++[2]
696	\|\| STW $K[5],*$KPB++[2]
697
698	XOR A31,$K[0],$K[0] ; ^=rcon[i]
699	.if .BIG_ENDIAN
700	PACK2 $Te4[0],$Te4[1],$Te4[1]
701	\|\| PACK2 $Te4[3],A0,$Te4[3]
702	PACKL4 $Te4[1],$Te4[3],$Te4[3]
703	.else
704	PACK2 $Te4[1],$Te4[0],$Te4[1]
705	\|\| PACK2 $Te4[3],A0,$Te4[3]
706	PACKL4 $Te4[3],$Te4[1],$Te4[3]
707	.endif
708	BDEC loop192?,B0
709	\|\| XOR $Te4[3],$K[0],$Te4[0] ; K[0]
710	XOR $Te4[0],$K[1],$K[1] ; K[1]
711	MV $Te4[0],$K[0]
712	\|\| XOR $K[1],$K[2],$Te4[2] ; K[2]
713	XOR $Te4[2],$K[3],$K[3] ; K[3]
714	MV $Te4[2],$K[2]
715	\|\| XOR $K[3],$K[4],$Te4[2] ; K[4]
716	XOR $Te4[2],$K[5],$K[5] ; K[5]
717	;;====================================================================
718	BNOP RA
719	STW $K[0],*$KPA++[2]
720	\|\| STW $K[1],*$KPB++[2]
721	STW $K[2],*$KPA++[2]
722	\|\| STW $K[3],*$KPB++[2]
723	MVK 12,B0 ; rounds
724	STW B0,*++${KPB}[7]
725	MVK 0,RET
726	;;====================================================================
727	;;====================================================================
728	key256?:
729	.if .BIG_ENDIAN
730	MV A9,$K[0]
731	\|\| MV A8,$K[1]
732	\|\| MV B9,$K[2]
733	\|\| MV B8,$K[3]
734	MV B17,$K[4]
735	\|\| MV B16,$K[5]
736	\|\| MV B19,$Te4[2]
737	\|\| MV B18,$K[7]
738	.else
739	MV A8,$K[0]
740	\|\| MV A9,$K[1]
741	\|\| MV B8,$K[2]
742	\|\| MV B9,$K[3]
743	MV B16,$K[4]
744	\|\| MV B17,$K[5]
745	\|\| MV B18,$Te4[2]
746	\|\| MV B19,$K[7]
747	.endif
748
749	MVK 256,A0
750	\|\| MVK 6,B0
751	MV $TEA,$TEB
752	\|\| ADD $TEA,A0,A30 ; rcon
753	;;====================================================================
754	loop256?:
755	LDW *A30++[1],A31 ; rcon[i]
756	\|\| MV $Te4[2],$K[6]
757	\|\| EXTU $K[7],EXT1,24,$Te4[0]
758	LDBU *${TEB}[$Te4[0]],$Te4[0]
759	\|\| MV $K[7],A0
760	\|\| EXTU $K[7],EXT2,24,$Te4[1]
761	LDBU *${TEB}[$Te4[1]],$Te4[1]
762	\|\| EXTU A0,EXT3,24,A0
763	\|\| EXTU $K[7],EXT0,24,$Te4[3]
764	.if .BIG_ENDIAN
765	LDBU *${TEA}[A0],$Te4[3]
766	\|\| LDBU *${TEB}[$Te4[3]],A0
767	.else
768	LDBU *${TEA}[A0],A0
769	\|\| LDBU *${TEB}[$Te4[3]],$Te4[3]
770	.endif
771
772	STW $K[0],*$KPA++[2]
773	\|\| STW $K[1],*$KPB++[2]
774	STW $K[2],*$KPA++[2]
775	\|\| STW $K[3],*$KPB++[2]
776	STW $K[4],*$KPA++[2]
777	\|\| STW $K[5],*$KPB++[2]
778	STW $K[6],*$KPA++[2]
779	\|\| STW $K[7],*$KPB++[2]
780	\|\| XOR A31,$K[0],$K[0] ; ^=rcon[i]
781	.if .BIG_ENDIAN
782	PACK2 $Te4[0],$Te4[1],$Te4[1]
783	\|\| PACK2 $Te4[3],A0,$Te4[3]
784	PACKL4 $Te4[1],$Te4[3],$Te4[3]
785	\|\|[!B0] B done256?
786	.else
787	PACK2 $Te4[1],$Te4[0],$Te4[1]
788	\|\| PACK2 $Te4[3],A0,$Te4[3]
789	PACKL4 $Te4[3],$Te4[1],$Te4[3]
790	\|\|[!B0] B done256?
791	.endif
792	XOR $Te4[3],$K[0],$Te4[0] ; K[0]
793	XOR $Te4[0],$K[1],$K[1] ; K[1]
794	MV $Te4[0],$K[0]
795	\|\| XOR $K[1],$K[2],$Te4[2] ; K[2]
796	XOR $Te4[2],$K[3],$K[3] ; K[3]
797
798	MV $Te4[2],$K[2]
799	\|\| [B0] EXTU $K[3],EXT0,24,$Te4[0]
800	\|\| [B0] SUB B0,1,B0
801	LDBU *${TEB}[$Te4[0]],$Te4[0]
802	\|\| MV $K[3],A0
803	\|\| EXTU $K[3],EXT1,24,$Te4[1]
804	LDBU *${TEB}[$Te4[1]],$Te4[1]
805	\|\| EXTU A0,EXT2,24,A0
806	\|\| EXTU $K[3],EXT3,24,$Te4[3]
807
808	.if .BIG_ENDIAN
809	LDBU *${TEA}[A0],$Te4[3]
810	\|\| LDBU *${TEB}[$Te4[3]],A0
811	NOP 3
812	PACK2 $Te4[0],$Te4[1],$Te4[1]
813	PACK2 $Te4[3],A0,$Te4[3]
814	\|\| B loop256?
815	PACKL4 $Te4[1],$Te4[3],$Te4[3]
816	.else
817	LDBU *${TEA}[A0],A0
818	\|\| LDBU *${TEB}[$Te4[3]],$Te4[3]
819	NOP 3
820	PACK2 $Te4[1],$Te4[0],$Te4[1]
821	PACK2 $Te4[3],A0,$Te4[3]
822	\|\| B loop256?
823	PACKL4 $Te4[3],$Te4[1],$Te4[3]
824	.endif
825
826	XOR $Te4[3],$K[4],$Te4[0] ; K[4]
827	XOR $Te4[0],$K[5],$K[5] ; K[5]
828	MV $Te4[0],$K[4]
829	\|\| XOR $K[5],$K[6],$Te4[2] ; K[6]
830	XOR $Te4[2],$K[7],$K[7] ; K[7]
831	;;====================================================================
832	done256?:
833	BNOP RA
834	STW $K[0],*$KPA++[2]
835	\|\| STW $K[1],*$KPB++[2]
836	STW $K[2],*$KPA++[2]
837	\|\| STW $K[3],*$KPB++[2]
838	MVK 14,B0 ; rounds
839	STW B0,*--${KPB}[1]
840	MVK 0,RET
841	.endasmfunc
842
843	.global _AES_set_decrypt_key
844	_AES_set_decrypt_key:
845	.asmfunc
846	B __set_encrypt_key ; guarantee local call
847	MV KEY,B30 ; B30 is not modified
848	MV RA, B31 ; B31 is not modified
849	ADDKPC ret?,RA,2
850	ret?: ; B0 holds rounds or zero
851	[!B0] BNOP B31 ; return if zero
852	[B0] SHL B0,4,A0 ; offset to last round key
853	[B0] SHRU B0,1,B1
854	[B0] SUB B1,1,B1
855	[B0] MVK 0x0000001B,B3 ; AES polynomial
856	[B0] MVKH 0x07000000,B3
857
858	SPLOOPD 9 ; flip round keys
859	\|\| MVC B1,ILC
860	\|\| MV B30,$KPA
861	\|\| ADD B30,A0,$KPB
862	\|\| MVK 16,A0 ; sizeof(round key)
863	;;====================================================================
864	LDW *${KPA}[0],A16
865	\|\| LDW *${KPB}[0],B16
866	LDW *${KPA}[1],A17
867	\|\| LDW *${KPB}[1],B17
868	LDW *${KPA}[2],A18
869	\|\| LDW *${KPB}[2],B18
870	LDW *${KPA}[3],A19
871	\|\| ADD $KPA,A0,$KPA
872	\|\| LDW *${KPB}[3],B19
873	\|\| SUB $KPB,A0,$KPB
874	NOP
875	STW B16,*${KPA}[-4]
876	\|\| STW A16,*${KPB}[4]
877	STW B17,*${KPA}[-3]
878	\|\| STW A17,*${KPB}[5]
879	STW B18,*${KPA}[-2]
880	\|\| STW A18,*${KPB}[6]
881	STW B19,*${KPA}[-1]
882	\|\| STW A19,*${KPB}[7]
883	SPKERNEL
884	;;====================================================================
885	SUB B0,1,B0 ; skip last round
886	\|\| ADD B30,A0,$KPA ; skip first round
887	\|\| ADD B30,A0,$KPB
888	\|\| MVC GFPGFR,B30 ; save GFPGFR
889	LDW *${KPA}[0],$K[0]
890	\|\| LDW *${KPB}[1],$K[1]
891	\|\| MVC B3,GFPGFR
892	LDW *${KPA}[2],$K[2]
893	\|\| LDW *${KPB}[3],$K[3]
894	MVK 0x00000909,A24
895	\|\| MVK 0x00000B0B,B24
896	MVKH 0x09090000,A24
897	\|\| MVKH 0x0B0B0000,B24
898	MVC B0,ILC
899	\|\| SUB B0,1,B0
900
901	GMPY4 $K[0],A24,$Kx9[0] ; ·0x09
902	\|\| GMPY4 $K[1],A24,$Kx9[1]
903	\|\| MVK 0x00000D0D,A25
904	\|\| MVK 0x00000E0E,B25
905	GMPY4 $K[2],A24,$Kx9[2]
906	\|\| GMPY4 $K[3],A24,$Kx9[3]
907	\|\| MVKH 0x0D0D0000,A25
908	\|\| MVKH 0x0E0E0000,B25
909
910	GMPY4 $K[0],B24,$KxB[0] ; ·0x0B
911	\|\| GMPY4 $K[1],B24,$KxB[1]
912	GMPY4 $K[2],B24,$KxB[2]
913	\|\| GMPY4 $K[3],B24,$KxB[3]
914
915	SPLOOP 11 ; InvMixColumns
916	;;====================================================================
917	GMPY4 $K[0],A25,$KxD[0] ; ·0x0D
918	\|\| GMPY4 $K[1],A25,$KxD[1]
919	\|\| SWAP2 $Kx9[0],$Kx9[0] ; rotate by 16
920	\|\| SWAP2 $Kx9[1],$Kx9[1]
921	\|\| MV $K[0],$s[0] ; this or DINT
922	\|\| MV $K[1],$s[1]
923	\|\| [B0] LDW *${KPA}[4],$K[0]
924	\|\| [B0] LDW *${KPB}[5],$K[1]
925	GMPY4 $K[2],A25,$KxD[2]
926	\|\| GMPY4 $K[3],A25,$KxD[3]
927	\|\| SWAP2 $Kx9[2],$Kx9[2]
928	\|\| SWAP2 $Kx9[3],$Kx9[3]
929	\|\| MV $K[2],$s[2]
930	\|\| MV $K[3],$s[3]
931	\|\| [B0] LDW *${KPA}[6],$K[2]
932	\|\| [B0] LDW *${KPB}[7],$K[3]
933
934	GMPY4 $s[0],B25,$KxE[0] ; ·0x0E
935	\|\| GMPY4 $s[1],B25,$KxE[1]
936	\|\| XOR $Kx9[0],$KxB[0],$KxB[0]
937	\|\| XOR $Kx9[1],$KxB[1],$KxB[1]
938	GMPY4 $s[2],B25,$KxE[2]
939	\|\| GMPY4 $s[3],B25,$KxE[3]
940	\|\| XOR $Kx9[2],$KxB[2],$KxB[2]
941	\|\| XOR $Kx9[3],$KxB[3],$KxB[3]
942
943	ROTL $KxB[0],TBL3,$KxB[0]
944	\|\| ROTL $KxB[1],TBL3,$KxB[1]
945	\|\| SWAP2 $KxD[0],$KxD[0] ; rotate by 16
946	\|\| SWAP2 $KxD[1],$KxD[1]
947	ROTL $KxB[2],TBL3,$KxB[2]
948	\|\| ROTL $KxB[3],TBL3,$KxB[3]
949	\|\| SWAP2 $KxD[2],$KxD[2]
950	\|\| SWAP2 $KxD[3],$KxD[3]
951
952	XOR $KxE[0],$KxD[0],$KxE[0]
953	\|\| XOR $KxE[1],$KxD[1],$KxE[1]
954	\|\| [B0] GMPY4 $K[0],A24,$Kx9[0] ; ·0x09
955	\|\| [B0] GMPY4 $K[1],A24,$Kx9[1]
956	\|\| ADDAW $KPA,4,$KPA
957	XOR $KxE[2],$KxD[2],$KxE[2]
958	\|\| XOR $KxE[3],$KxD[3],$KxE[3]
959	\|\| [B0] GMPY4 $K[2],A24,$Kx9[2]
960	\|\| [B0] GMPY4 $K[3],A24,$Kx9[3]
961	\|\| ADDAW $KPB,4,$KPB
962
963	XOR $KxB[0],$KxE[0],$KxE[0]
964	\|\| XOR $KxB[1],$KxE[1],$KxE[1]
965	\|\| [B0] GMPY4 $K[0],B24,$KxB[0] ; ·0x0B
966	\|\| [B0] GMPY4 $K[1],B24,$KxB[1]
967	XOR $KxB[2],$KxE[2],$KxE[2]
968	\|\| XOR $KxB[3],$KxE[3],$KxE[3]
969	\|\| [B0] GMPY4 $K[2],B24,$KxB[2]
970	\|\| [B0] GMPY4 $K[3],B24,$KxB[3]
971	\|\| STW $KxE[0],*${KPA}[-4]
972	\|\| STW $KxE[1],*${KPB}[-3]
973	STW $KxE[2],*${KPA}[-2]
974	\|\| STW $KxE[3],*${KPB}[-1]
975	\|\| [B0] SUB B0,1,B0
976	SPKERNEL
977	;;====================================================================
978	BNOP B31,3
979	MVC B30,GFPGFR ; restore GFPGFR(*)
980	MVK 0,RET
981	.endasmfunc
982	___
983	# (*) Even though ABI doesn't specify GFPGFR as non-volatile, there
984	# are code samples out there that assume its default value.
985	}
986	{
987	my ($inp,$out,$blocks,$key,$ivp)=("A4","B4","A6","B6","A8");
988	$code.=<<___;
989	.global _AES_ctr32_encrypt
990	_AES_ctr32_encrypt:
991	.asmfunc
992	LDNDW *${ivp}[0],A31:A30 ; load counter value
993	\|\| MV $blocks,A2 ; reassign $blocks
994	\|\| DMV RA,$key,B27:B26 ; reassign RA and $key
995	LDNDW *${ivp}[1],B31:B30
996	\|\| MVK 0,B2 ; don't let __encrypt load input
997	\|\| MVK 0,A1 ; and postpone writing output
998	.if .BIG_ENDIAN
999	NOP
1000	.else
1001	NOP 4
1002	SWAP2 B31,B31 ; keep least significant 32 bits
1003	SWAP4 B31,B31 ; in host byte order
1004	.endif
1005	ctr32_loop?:
1006	[A2] BNOP __encrypt
1007	\|\| [A1] XOR A29,A9,A9 ; input^Ek(counter)
1008	\|\| [A1] XOR A28,A8,A8
1009	\|\| [A2] LDNDW *INP++,A29:A28 ; load input
1010	[!A2] BNOP B27 ; return
1011	\|\| [A1] XOR B29,B9,B9
1012	\|\| [A1] XOR B28,B8,B8
1013	\|\| [A2] LDNDW *INP++,B29:B28
1014	.if .BIG_ENDIAN
1015	[A1] STNDW A9:A8,*OUT++ ; save output
1016	\|\| [A2] DMV A31,A30,A9:A8 ; pass counter value to __encrypt
1017	[A1] STNDW B9:B8,*OUT++
1018	\|\| [A2] DMV B31,B30,B9:B8
1019	\|\| [A2] ADD B30,1,B30 ; counter++
1020	.else
1021	[A1] STNDW A9:A8,*OUT++ ; save output
1022	\|\| [A2] DMV A31,A30,A9:A8
1023	\|\| [A2] SWAP2 B31,B0
1024	\|\| [A2] ADD B31,1,B31 ; counter++
1025	[A1] STNDW B9:B8,*OUT++
1026	\|\| [A2] MV B30,B8
1027	\|\| [A2] SWAP4 B0,B9
1028	.endif
1029	[A2] ADDKPC ctr32_loop?,RA ; return to ctr32_loop?
1030	\|\| [A2] MV B26,KEY ; pass $key
1031	\|\| [A2] SUB A2,1,A2 ; $blocks--
1032	\|\|[!A1] MVK 1,A1
1033	NOP
1034	NOP
1035	.endasmfunc
1036	___
1037	}
1038	# Tables are kept in endian-neutral manner
1039	$code.=<<___;
1040	.if __TI_EABI__
1041	.sect ".text:aes_asm.const"
1042	.else
1043	.sect ".const:aes_asm"
1044	.endif
1045	.align 128
1046	AES_Te:
1047	.byte 0xc6,0x63,0x63,0xa5, 0xf8,0x7c,0x7c,0x84
1048	.byte 0xee,0x77,0x77,0x99, 0xf6,0x7b,0x7b,0x8d
1049	.byte 0xff,0xf2,0xf2,0x0d, 0xd6,0x6b,0x6b,0xbd
1050	.byte 0xde,0x6f,0x6f,0xb1, 0x91,0xc5,0xc5,0x54
1051	.byte 0x60,0x30,0x30,0x50, 0x02,0x01,0x01,0x03
1052	.byte 0xce,0x67,0x67,0xa9, 0x56,0x2b,0x2b,0x7d
1053	.byte 0xe7,0xfe,0xfe,0x19, 0xb5,0xd7,0xd7,0x62
1054	.byte 0x4d,0xab,0xab,0xe6, 0xec,0x76,0x76,0x9a
1055	.byte 0x8f,0xca,0xca,0x45, 0x1f,0x82,0x82,0x9d
1056	.byte 0x89,0xc9,0xc9,0x40, 0xfa,0x7d,0x7d,0x87
1057	.byte 0xef,0xfa,0xfa,0x15, 0xb2,0x59,0x59,0xeb
1058	.byte 0x8e,0x47,0x47,0xc9, 0xfb,0xf0,0xf0,0x0b
1059	.byte 0x41,0xad,0xad,0xec, 0xb3,0xd4,0xd4,0x67
1060	.byte 0x5f,0xa2,0xa2,0xfd, 0x45,0xaf,0xaf,0xea
1061	.byte 0x23,0x9c,0x9c,0xbf, 0x53,0xa4,0xa4,0xf7
1062	.byte 0xe4,0x72,0x72,0x96, 0x9b,0xc0,0xc0,0x5b
1063	.byte 0x75,0xb7,0xb7,0xc2, 0xe1,0xfd,0xfd,0x1c
1064	.byte 0x3d,0x93,0x93,0xae, 0x4c,0x26,0x26,0x6a
1065	.byte 0x6c,0x36,0x36,0x5a, 0x7e,0x3f,0x3f,0x41
1066	.byte 0xf5,0xf7,0xf7,0x02, 0x83,0xcc,0xcc,0x4f
1067	.byte 0x68,0x34,0x34,0x5c, 0x51,0xa5,0xa5,0xf4
1068	.byte 0xd1,0xe5,0xe5,0x34, 0xf9,0xf1,0xf1,0x08
1069	.byte 0xe2,0x71,0x71,0x93, 0xab,0xd8,0xd8,0x73
1070	.byte 0x62,0x31,0x31,0x53, 0x2a,0x15,0x15,0x3f
1071	.byte 0x08,0x04,0x04,0x0c, 0x95,0xc7,0xc7,0x52
1072	.byte 0x46,0x23,0x23,0x65, 0x9d,0xc3,0xc3,0x5e
1073	.byte 0x30,0x18,0x18,0x28, 0x37,0x96,0x96,0xa1
1074	.byte 0x0a,0x05,0x05,0x0f, 0x2f,0x9a,0x9a,0xb5
1075	.byte 0x0e,0x07,0x07,0x09, 0x24,0x12,0x12,0x36
1076	.byte 0x1b,0x80,0x80,0x9b, 0xdf,0xe2,0xe2,0x3d
1077	.byte 0xcd,0xeb,0xeb,0x26, 0x4e,0x27,0x27,0x69
1078	.byte 0x7f,0xb2,0xb2,0xcd, 0xea,0x75,0x75,0x9f
1079	.byte 0x12,0x09,0x09,0x1b, 0x1d,0x83,0x83,0x9e
1080	.byte 0x58,0x2c,0x2c,0x74, 0x34,0x1a,0x1a,0x2e
1081	.byte 0x36,0x1b,0x1b,0x2d, 0xdc,0x6e,0x6e,0xb2
1082	.byte 0xb4,0x5a,0x5a,0xee, 0x5b,0xa0,0xa0,0xfb
1083	.byte 0xa4,0x52,0x52,0xf6, 0x76,0x3b,0x3b,0x4d
1084	.byte 0xb7,0xd6,0xd6,0x61, 0x7d,0xb3,0xb3,0xce
1085	.byte 0x52,0x29,0x29,0x7b, 0xdd,0xe3,0xe3,0x3e
1086	.byte 0x5e,0x2f,0x2f,0x71, 0x13,0x84,0x84,0x97
1087	.byte 0xa6,0x53,0x53,0xf5, 0xb9,0xd1,0xd1,0x68
1088	.byte 0x00,0x00,0x00,0x00, 0xc1,0xed,0xed,0x2c
1089	.byte 0x40,0x20,0x20,0x60, 0xe3,0xfc,0xfc,0x1f
1090	.byte 0x79,0xb1,0xb1,0xc8, 0xb6,0x5b,0x5b,0xed
1091	.byte 0xd4,0x6a,0x6a,0xbe, 0x8d,0xcb,0xcb,0x46
1092	.byte 0x67,0xbe,0xbe,0xd9, 0x72,0x39,0x39,0x4b
1093	.byte 0x94,0x4a,0x4a,0xde, 0x98,0x4c,0x4c,0xd4
1094	.byte 0xb0,0x58,0x58,0xe8, 0x85,0xcf,0xcf,0x4a
1095	.byte 0xbb,0xd0,0xd0,0x6b, 0xc5,0xef,0xef,0x2a
1096	.byte 0x4f,0xaa,0xaa,0xe5, 0xed,0xfb,0xfb,0x16
1097	.byte 0x86,0x43,0x43,0xc5, 0x9a,0x4d,0x4d,0xd7
1098	.byte 0x66,0x33,0x33,0x55, 0x11,0x85,0x85,0x94
1099	.byte 0x8a,0x45,0x45,0xcf, 0xe9,0xf9,0xf9,0x10
1100	.byte 0x04,0x02,0x02,0x06, 0xfe,0x7f,0x7f,0x81
1101	.byte 0xa0,0x50,0x50,0xf0, 0x78,0x3c,0x3c,0x44
1102	.byte 0x25,0x9f,0x9f,0xba, 0x4b,0xa8,0xa8,0xe3
1103	.byte 0xa2,0x51,0x51,0xf3, 0x5d,0xa3,0xa3,0xfe
1104	.byte 0x80,0x40,0x40,0xc0, 0x05,0x8f,0x8f,0x8a
1105	.byte 0x3f,0x92,0x92,0xad, 0x21,0x9d,0x9d,0xbc
1106	.byte 0x70,0x38,0x38,0x48, 0xf1,0xf5,0xf5,0x04
1107	.byte 0x63,0xbc,0xbc,0xdf, 0x77,0xb6,0xb6,0xc1
1108	.byte 0xaf,0xda,0xda,0x75, 0x42,0x21,0x21,0x63
1109	.byte 0x20,0x10,0x10,0x30, 0xe5,0xff,0xff,0x1a
1110	.byte 0xfd,0xf3,0xf3,0x0e, 0xbf,0xd2,0xd2,0x6d
1111	.byte 0x81,0xcd,0xcd,0x4c, 0x18,0x0c,0x0c,0x14
1112	.byte 0x26,0x13,0x13,0x35, 0xc3,0xec,0xec,0x2f
1113	.byte 0xbe,0x5f,0x5f,0xe1, 0x35,0x97,0x97,0xa2
1114	.byte 0x88,0x44,0x44,0xcc, 0x2e,0x17,0x17,0x39
1115	.byte 0x93,0xc4,0xc4,0x57, 0x55,0xa7,0xa7,0xf2
1116	.byte 0xfc,0x7e,0x7e,0x82, 0x7a,0x3d,0x3d,0x47
1117	.byte 0xc8,0x64,0x64,0xac, 0xba,0x5d,0x5d,0xe7
1118	.byte 0x32,0x19,0x19,0x2b, 0xe6,0x73,0x73,0x95
1119	.byte 0xc0,0x60,0x60,0xa0, 0x19,0x81,0x81,0x98
1120	.byte 0x9e,0x4f,0x4f,0xd1, 0xa3,0xdc,0xdc,0x7f
1121	.byte 0x44,0x22,0x22,0x66, 0x54,0x2a,0x2a,0x7e
1122	.byte 0x3b,0x90,0x90,0xab, 0x0b,0x88,0x88,0x83
1123	.byte 0x8c,0x46,0x46,0xca, 0xc7,0xee,0xee,0x29
1124	.byte 0x6b,0xb8,0xb8,0xd3, 0x28,0x14,0x14,0x3c
1125	.byte 0xa7,0xde,0xde,0x79, 0xbc,0x5e,0x5e,0xe2
1126	.byte 0x16,0x0b,0x0b,0x1d, 0xad,0xdb,0xdb,0x76
1127	.byte 0xdb,0xe0,0xe0,0x3b, 0x64,0x32,0x32,0x56
1128	.byte 0x74,0x3a,0x3a,0x4e, 0x14,0x0a,0x0a,0x1e
1129	.byte 0x92,0x49,0x49,0xdb, 0x0c,0x06,0x06,0x0a
1130	.byte 0x48,0x24,0x24,0x6c, 0xb8,0x5c,0x5c,0xe4
1131	.byte 0x9f,0xc2,0xc2,0x5d, 0xbd,0xd3,0xd3,0x6e
1132	.byte 0x43,0xac,0xac,0xef, 0xc4,0x62,0x62,0xa6
1133	.byte 0x39,0x91,0x91,0xa8, 0x31,0x95,0x95,0xa4
1134	.byte 0xd3,0xe4,0xe4,0x37, 0xf2,0x79,0x79,0x8b
1135	.byte 0xd5,0xe7,0xe7,0x32, 0x8b,0xc8,0xc8,0x43
1136	.byte 0x6e,0x37,0x37,0x59, 0xda,0x6d,0x6d,0xb7
1137	.byte 0x01,0x8d,0x8d,0x8c, 0xb1,0xd5,0xd5,0x64
1138	.byte 0x9c,0x4e,0x4e,0xd2, 0x49,0xa9,0xa9,0xe0
1139	.byte 0xd8,0x6c,0x6c,0xb4, 0xac,0x56,0x56,0xfa
1140	.byte 0xf3,0xf4,0xf4,0x07, 0xcf,0xea,0xea,0x25
1141	.byte 0xca,0x65,0x65,0xaf, 0xf4,0x7a,0x7a,0x8e
1142	.byte 0x47,0xae,0xae,0xe9, 0x10,0x08,0x08,0x18
1143	.byte 0x6f,0xba,0xba,0xd5, 0xf0,0x78,0x78,0x88
1144	.byte 0x4a,0x25,0x25,0x6f, 0x5c,0x2e,0x2e,0x72
1145	.byte 0x38,0x1c,0x1c,0x24, 0x57,0xa6,0xa6,0xf1
1146	.byte 0x73,0xb4,0xb4,0xc7, 0x97,0xc6,0xc6,0x51
1147	.byte 0xcb,0xe8,0xe8,0x23, 0xa1,0xdd,0xdd,0x7c
1148	.byte 0xe8,0x74,0x74,0x9c, 0x3e,0x1f,0x1f,0x21
1149	.byte 0x96,0x4b,0x4b,0xdd, 0x61,0xbd,0xbd,0xdc
1150	.byte 0x0d,0x8b,0x8b,0x86, 0x0f,0x8a,0x8a,0x85
1151	.byte 0xe0,0x70,0x70,0x90, 0x7c,0x3e,0x3e,0x42
1152	.byte 0x71,0xb5,0xb5,0xc4, 0xcc,0x66,0x66,0xaa
1153	.byte 0x90,0x48,0x48,0xd8, 0x06,0x03,0x03,0x05
1154	.byte 0xf7,0xf6,0xf6,0x01, 0x1c,0x0e,0x0e,0x12
1155	.byte 0xc2,0x61,0x61,0xa3, 0x6a,0x35,0x35,0x5f
1156	.byte 0xae,0x57,0x57,0xf9, 0x69,0xb9,0xb9,0xd0
1157	.byte 0x17,0x86,0x86,0x91, 0x99,0xc1,0xc1,0x58
1158	.byte 0x3a,0x1d,0x1d,0x27, 0x27,0x9e,0x9e,0xb9
1159	.byte 0xd9,0xe1,0xe1,0x38, 0xeb,0xf8,0xf8,0x13
1160	.byte 0x2b,0x98,0x98,0xb3, 0x22,0x11,0x11,0x33
1161	.byte 0xd2,0x69,0x69,0xbb, 0xa9,0xd9,0xd9,0x70
1162	.byte 0x07,0x8e,0x8e,0x89, 0x33,0x94,0x94,0xa7
1163	.byte 0x2d,0x9b,0x9b,0xb6, 0x3c,0x1e,0x1e,0x22
1164	.byte 0x15,0x87,0x87,0x92, 0xc9,0xe9,0xe9,0x20
1165	.byte 0x87,0xce,0xce,0x49, 0xaa,0x55,0x55,0xff
1166	.byte 0x50,0x28,0x28,0x78, 0xa5,0xdf,0xdf,0x7a
1167	.byte 0x03,0x8c,0x8c,0x8f, 0x59,0xa1,0xa1,0xf8
1168	.byte 0x09,0x89,0x89,0x80, 0x1a,0x0d,0x0d,0x17
1169	.byte 0x65,0xbf,0xbf,0xda, 0xd7,0xe6,0xe6,0x31
1170	.byte 0x84,0x42,0x42,0xc6, 0xd0,0x68,0x68,0xb8
1171	.byte 0x82,0x41,0x41,0xc3, 0x29,0x99,0x99,0xb0
1172	.byte 0x5a,0x2d,0x2d,0x77, 0x1e,0x0f,0x0f,0x11
1173	.byte 0x7b,0xb0,0xb0,0xcb, 0xa8,0x54,0x54,0xfc
1174	.byte 0x6d,0xbb,0xbb,0xd6, 0x2c,0x16,0x16,0x3a
1175	AES_Te4:
1176	.byte 0x63, 0x7c, 0x77, 0x7b, 0xf2, 0x6b, 0x6f, 0xc5
1177	.byte 0x30, 0x01, 0x67, 0x2b, 0xfe, 0xd7, 0xab, 0x76
1178	.byte 0xca, 0x82, 0xc9, 0x7d, 0xfa, 0x59, 0x47, 0xf0
1179	.byte 0xad, 0xd4, 0xa2, 0xaf, 0x9c, 0xa4, 0x72, 0xc0
1180	.byte 0xb7, 0xfd, 0x93, 0x26, 0x36, 0x3f, 0xf7, 0xcc
1181	.byte 0x34, 0xa5, 0xe5, 0xf1, 0x71, 0xd8, 0x31, 0x15
1182	.byte 0x04, 0xc7, 0x23, 0xc3, 0x18, 0x96, 0x05, 0x9a
1183	.byte 0x07, 0x12, 0x80, 0xe2, 0xeb, 0x27, 0xb2, 0x75
1184	.byte 0x09, 0x83, 0x2c, 0x1a, 0x1b, 0x6e, 0x5a, 0xa0
1185	.byte 0x52, 0x3b, 0xd6, 0xb3, 0x29, 0xe3, 0x2f, 0x84
1186	.byte 0x53, 0xd1, 0x00, 0xed, 0x20, 0xfc, 0xb1, 0x5b
1187	.byte 0x6a, 0xcb, 0xbe, 0x39, 0x4a, 0x4c, 0x58, 0xcf
1188	.byte 0xd0, 0xef, 0xaa, 0xfb, 0x43, 0x4d, 0x33, 0x85
1189	.byte 0x45, 0xf9, 0x02, 0x7f, 0x50, 0x3c, 0x9f, 0xa8
1190	.byte 0x51, 0xa3, 0x40, 0x8f, 0x92, 0x9d, 0x38, 0xf5
1191	.byte 0xbc, 0xb6, 0xda, 0x21, 0x10, 0xff, 0xf3, 0xd2
1192	.byte 0xcd, 0x0c, 0x13, 0xec, 0x5f, 0x97, 0x44, 0x17
1193	.byte 0xc4, 0xa7, 0x7e, 0x3d, 0x64, 0x5d, 0x19, 0x73
1194	.byte 0x60, 0x81, 0x4f, 0xdc, 0x22, 0x2a, 0x90, 0x88
1195	.byte 0x46, 0xee, 0xb8, 0x14, 0xde, 0x5e, 0x0b, 0xdb
1196	.byte 0xe0, 0x32, 0x3a, 0x0a, 0x49, 0x06, 0x24, 0x5c
1197	.byte 0xc2, 0xd3, 0xac, 0x62, 0x91, 0x95, 0xe4, 0x79
1198	.byte 0xe7, 0xc8, 0x37, 0x6d, 0x8d, 0xd5, 0x4e, 0xa9
1199	.byte 0x6c, 0x56, 0xf4, 0xea, 0x65, 0x7a, 0xae, 0x08
1200	.byte 0xba, 0x78, 0x25, 0x2e, 0x1c, 0xa6, 0xb4, 0xc6
1201	.byte 0xe8, 0xdd, 0x74, 0x1f, 0x4b, 0xbd, 0x8b, 0x8a
1202	.byte 0x70, 0x3e, 0xb5, 0x66, 0x48, 0x03, 0xf6, 0x0e
1203	.byte 0x61, 0x35, 0x57, 0xb9, 0x86, 0xc1, 0x1d, 0x9e
1204	.byte 0xe1, 0xf8, 0x98, 0x11, 0x69, 0xd9, 0x8e, 0x94
1205	.byte 0x9b, 0x1e, 0x87, 0xe9, 0xce, 0x55, 0x28, 0xdf
1206	.byte 0x8c, 0xa1, 0x89, 0x0d, 0xbf, 0xe6, 0x42, 0x68
1207	.byte 0x41, 0x99, 0x2d, 0x0f, 0xb0, 0x54, 0xbb, 0x16
1208	rcon:
1209	.byte 0x01,0x00,0x00,0x00, 0x02,0x00,0x00,0x00
1210	.byte 0x04,0x00,0x00,0x00, 0x08,0x00,0x00,0x00
1211	.byte 0x10,0x00,0x00,0x00, 0x20,0x00,0x00,0x00
1212	.byte 0x40,0x00,0x00,0x00, 0x80,0x00,0x00,0x00
1213	.byte 0x1B,0x00,0x00,0x00, 0x36,0x00,0x00,0x00
1214	.align 128
1215	AES_Td:
1216	.byte 0x51,0xf4,0xa7,0x50, 0x7e,0x41,0x65,0x53
1217	.byte 0x1a,0x17,0xa4,0xc3, 0x3a,0x27,0x5e,0x96
1218	.byte 0x3b,0xab,0x6b,0xcb, 0x1f,0x9d,0x45,0xf1
1219	.byte 0xac,0xfa,0x58,0xab, 0x4b,0xe3,0x03,0x93
1220	.byte 0x20,0x30,0xfa,0x55, 0xad,0x76,0x6d,0xf6
1221	.byte 0x88,0xcc,0x76,0x91, 0xf5,0x02,0x4c,0x25
1222	.byte 0x4f,0xe5,0xd7,0xfc, 0xc5,0x2a,0xcb,0xd7
1223	.byte 0x26,0x35,0x44,0x80, 0xb5,0x62,0xa3,0x8f
1224	.byte 0xde,0xb1,0x5a,0x49, 0x25,0xba,0x1b,0x67
1225	.byte 0x45,0xea,0x0e,0x98, 0x5d,0xfe,0xc0,0xe1
1226	.byte 0xc3,0x2f,0x75,0x02, 0x81,0x4c,0xf0,0x12
1227	.byte 0x8d,0x46,0x97,0xa3, 0x6b,0xd3,0xf9,0xc6
1228	.byte 0x03,0x8f,0x5f,0xe7, 0x15,0x92,0x9c,0x95
1229	.byte 0xbf,0x6d,0x7a,0xeb, 0x95,0x52,0x59,0xda
1230	.byte 0xd4,0xbe,0x83,0x2d, 0x58,0x74,0x21,0xd3
1231	.byte 0x49,0xe0,0x69,0x29, 0x8e,0xc9,0xc8,0x44
1232	.byte 0x75,0xc2,0x89,0x6a, 0xf4,0x8e,0x79,0x78
1233	.byte 0x99,0x58,0x3e,0x6b, 0x27,0xb9,0x71,0xdd
1234	.byte 0xbe,0xe1,0x4f,0xb6, 0xf0,0x88,0xad,0x17
1235	.byte 0xc9,0x20,0xac,0x66, 0x7d,0xce,0x3a,0xb4
1236	.byte 0x63,0xdf,0x4a,0x18, 0xe5,0x1a,0x31,0x82
1237	.byte 0x97,0x51,0x33,0x60, 0x62,0x53,0x7f,0x45
1238	.byte 0xb1,0x64,0x77,0xe0, 0xbb,0x6b,0xae,0x84
1239	.byte 0xfe,0x81,0xa0,0x1c, 0xf9,0x08,0x2b,0x94
1240	.byte 0x70,0x48,0x68,0x58, 0x8f,0x45,0xfd,0x19
1241	.byte 0x94,0xde,0x6c,0x87, 0x52,0x7b,0xf8,0xb7
1242	.byte 0xab,0x73,0xd3,0x23, 0x72,0x4b,0x02,0xe2
1243	.byte 0xe3,0x1f,0x8f,0x57, 0x66,0x55,0xab,0x2a
1244	.byte 0xb2,0xeb,0x28,0x07, 0x2f,0xb5,0xc2,0x03
1245	.byte 0x86,0xc5,0x7b,0x9a, 0xd3,0x37,0x08,0xa5
1246	.byte 0x30,0x28,0x87,0xf2, 0x23,0xbf,0xa5,0xb2
1247	.byte 0x02,0x03,0x6a,0xba, 0xed,0x16,0x82,0x5c
1248	.byte 0x8a,0xcf,0x1c,0x2b, 0xa7,0x79,0xb4,0x92
1249	.byte 0xf3,0x07,0xf2,0xf0, 0x4e,0x69,0xe2,0xa1
1250	.byte 0x65,0xda,0xf4,0xcd, 0x06,0x05,0xbe,0xd5
1251	.byte 0xd1,0x34,0x62,0x1f, 0xc4,0xa6,0xfe,0x8a
1252	.byte 0x34,0x2e,0x53,0x9d, 0xa2,0xf3,0x55,0xa0
1253	.byte 0x05,0x8a,0xe1,0x32, 0xa4,0xf6,0xeb,0x75
1254	.byte 0x0b,0x83,0xec,0x39, 0x40,0x60,0xef,0xaa
1255	.byte 0x5e,0x71,0x9f,0x06, 0xbd,0x6e,0x10,0x51
1256	.byte 0x3e,0x21,0x8a,0xf9, 0x96,0xdd,0x06,0x3d
1257	.byte 0xdd,0x3e,0x05,0xae, 0x4d,0xe6,0xbd,0x46
1258	.byte 0x91,0x54,0x8d,0xb5, 0x71,0xc4,0x5d,0x05
1259	.byte 0x04,0x06,0xd4,0x6f, 0x60,0x50,0x15,0xff
1260	.byte 0x19,0x98,0xfb,0x24, 0xd6,0xbd,0xe9,0x97
1261	.byte 0x89,0x40,0x43,0xcc, 0x67,0xd9,0x9e,0x77
1262	.byte 0xb0,0xe8,0x42,0xbd, 0x07,0x89,0x8b,0x88
1263	.byte 0xe7,0x19,0x5b,0x38, 0x79,0xc8,0xee,0xdb
1264	.byte 0xa1,0x7c,0x0a,0x47, 0x7c,0x42,0x0f,0xe9
1265	.byte 0xf8,0x84,0x1e,0xc9, 0x00,0x00,0x00,0x00
1266	.byte 0x09,0x80,0x86,0x83, 0x32,0x2b,0xed,0x48
1267	.byte 0x1e,0x11,0x70,0xac, 0x6c,0x5a,0x72,0x4e
1268	.byte 0xfd,0x0e,0xff,0xfb, 0x0f,0x85,0x38,0x56
1269	.byte 0x3d,0xae,0xd5,0x1e, 0x36,0x2d,0x39,0x27
1270	.byte 0x0a,0x0f,0xd9,0x64, 0x68,0x5c,0xa6,0x21
1271	.byte 0x9b,0x5b,0x54,0xd1, 0x24,0x36,0x2e,0x3a
1272	.byte 0x0c,0x0a,0x67,0xb1, 0x93,0x57,0xe7,0x0f
1273	.byte 0xb4,0xee,0x96,0xd2, 0x1b,0x9b,0x91,0x9e
1274	.byte 0x80,0xc0,0xc5,0x4f, 0x61,0xdc,0x20,0xa2
1275	.byte 0x5a,0x77,0x4b,0x69, 0x1c,0x12,0x1a,0x16
1276	.byte 0xe2,0x93,0xba,0x0a, 0xc0,0xa0,0x2a,0xe5
1277	.byte 0x3c,0x22,0xe0,0x43, 0x12,0x1b,0x17,0x1d
1278	.byte 0x0e,0x09,0x0d,0x0b, 0xf2,0x8b,0xc7,0xad
1279	.byte 0x2d,0xb6,0xa8,0xb9, 0x14,0x1e,0xa9,0xc8
1280	.byte 0x57,0xf1,0x19,0x85, 0xaf,0x75,0x07,0x4c
1281	.byte 0xee,0x99,0xdd,0xbb, 0xa3,0x7f,0x60,0xfd
1282	.byte 0xf7,0x01,0x26,0x9f, 0x5c,0x72,0xf5,0xbc
1283	.byte 0x44,0x66,0x3b,0xc5, 0x5b,0xfb,0x7e,0x34
1284	.byte 0x8b,0x43,0x29,0x76, 0xcb,0x23,0xc6,0xdc
1285	.byte 0xb6,0xed,0xfc,0x68, 0xb8,0xe4,0xf1,0x63
1286	.byte 0xd7,0x31,0xdc,0xca, 0x42,0x63,0x85,0x10
1287	.byte 0x13,0x97,0x22,0x40, 0x84,0xc6,0x11,0x20
1288	.byte 0x85,0x4a,0x24,0x7d, 0xd2,0xbb,0x3d,0xf8
1289	.byte 0xae,0xf9,0x32,0x11, 0xc7,0x29,0xa1,0x6d
1290	.byte 0x1d,0x9e,0x2f,0x4b, 0xdc,0xb2,0x30,0xf3
1291	.byte 0x0d,0x86,0x52,0xec, 0x77,0xc1,0xe3,0xd0
1292	.byte 0x2b,0xb3,0x16,0x6c, 0xa9,0x70,0xb9,0x99
1293	.byte 0x11,0x94,0x48,0xfa, 0x47,0xe9,0x64,0x22
1294	.byte 0xa8,0xfc,0x8c,0xc4, 0xa0,0xf0,0x3f,0x1a
1295	.byte 0x56,0x7d,0x2c,0xd8, 0x22,0x33,0x90,0xef
1296	.byte 0x87,0x49,0x4e,0xc7, 0xd9,0x38,0xd1,0xc1
1297	.byte 0x8c,0xca,0xa2,0xfe, 0x98,0xd4,0x0b,0x36
1298	.byte 0xa6,0xf5,0x81,0xcf, 0xa5,0x7a,0xde,0x28
1299	.byte 0xda,0xb7,0x8e,0x26, 0x3f,0xad,0xbf,0xa4
1300	.byte 0x2c,0x3a,0x9d,0xe4, 0x50,0x78,0x92,0x0d
1301	.byte 0x6a,0x5f,0xcc,0x9b, 0x54,0x7e,0x46,0x62
1302	.byte 0xf6,0x8d,0x13,0xc2, 0x90,0xd8,0xb8,0xe8
1303	.byte 0x2e,0x39,0xf7,0x5e, 0x82,0xc3,0xaf,0xf5
1304	.byte 0x9f,0x5d,0x80,0xbe, 0x69,0xd0,0x93,0x7c
1305	.byte 0x6f,0xd5,0x2d,0xa9, 0xcf,0x25,0x12,0xb3
1306	.byte 0xc8,0xac,0x99,0x3b, 0x10,0x18,0x7d,0xa7
1307	.byte 0xe8,0x9c,0x63,0x6e, 0xdb,0x3b,0xbb,0x7b
1308	.byte 0xcd,0x26,0x78,0x09, 0x6e,0x59,0x18,0xf4
1309	.byte 0xec,0x9a,0xb7,0x01, 0x83,0x4f,0x9a,0xa8
1310	.byte 0xe6,0x95,0x6e,0x65, 0xaa,0xff,0xe6,0x7e
1311	.byte 0x21,0xbc,0xcf,0x08, 0xef,0x15,0xe8,0xe6
1312	.byte 0xba,0xe7,0x9b,0xd9, 0x4a,0x6f,0x36,0xce
1313	.byte 0xea,0x9f,0x09,0xd4, 0x29,0xb0,0x7c,0xd6
1314	.byte 0x31,0xa4,0xb2,0xaf, 0x2a,0x3f,0x23,0x31
1315	.byte 0xc6,0xa5,0x94,0x30, 0x35,0xa2,0x66,0xc0
1316	.byte 0x74,0x4e,0xbc,0x37, 0xfc,0x82,0xca,0xa6
1317	.byte 0xe0,0x90,0xd0,0xb0, 0x33,0xa7,0xd8,0x15
1318	.byte 0xf1,0x04,0x98,0x4a, 0x41,0xec,0xda,0xf7
1319	.byte 0x7f,0xcd,0x50,0x0e, 0x17,0x91,0xf6,0x2f
1320	.byte 0x76,0x4d,0xd6,0x8d, 0x43,0xef,0xb0,0x4d
1321	.byte 0xcc,0xaa,0x4d,0x54, 0xe4,0x96,0x04,0xdf
1322	.byte 0x9e,0xd1,0xb5,0xe3, 0x4c,0x6a,0x88,0x1b
1323	.byte 0xc1,0x2c,0x1f,0xb8, 0x46,0x65,0x51,0x7f
1324	.byte 0x9d,0x5e,0xea,0x04, 0x01,0x8c,0x35,0x5d
1325	.byte 0xfa,0x87,0x74,0x73, 0xfb,0x0b,0x41,0x2e
1326	.byte 0xb3,0x67,0x1d,0x5a, 0x92,0xdb,0xd2,0x52
1327	.byte 0xe9,0x10,0x56,0x33, 0x6d,0xd6,0x47,0x13
1328	.byte 0x9a,0xd7,0x61,0x8c, 0x37,0xa1,0x0c,0x7a
1329	.byte 0x59,0xf8,0x14,0x8e, 0xeb,0x13,0x3c,0x89
1330	.byte 0xce,0xa9,0x27,0xee, 0xb7,0x61,0xc9,0x35
1331	.byte 0xe1,0x1c,0xe5,0xed, 0x7a,0x47,0xb1,0x3c
1332	.byte 0x9c,0xd2,0xdf,0x59, 0x55,0xf2,0x73,0x3f
1333	.byte 0x18,0x14,0xce,0x79, 0x73,0xc7,0x37,0xbf
1334	.byte 0x53,0xf7,0xcd,0xea, 0x5f,0xfd,0xaa,0x5b
1335	.byte 0xdf,0x3d,0x6f,0x14, 0x78,0x44,0xdb,0x86
1336	.byte 0xca,0xaf,0xf3,0x81, 0xb9,0x68,0xc4,0x3e
1337	.byte 0x38,0x24,0x34,0x2c, 0xc2,0xa3,0x40,0x5f
1338	.byte 0x16,0x1d,0xc3,0x72, 0xbc,0xe2,0x25,0x0c
1339	.byte 0x28,0x3c,0x49,0x8b, 0xff,0x0d,0x95,0x41
1340	.byte 0x39,0xa8,0x01,0x71, 0x08,0x0c,0xb3,0xde
1341	.byte 0xd8,0xb4,0xe4,0x9c, 0x64,0x56,0xc1,0x90
1342	.byte 0x7b,0xcb,0x84,0x61, 0xd5,0x32,0xb6,0x70
1343	.byte 0x48,0x6c,0x5c,0x74, 0xd0,0xb8,0x57,0x42
1344	AES_Td4:
1345	.byte 0x52, 0x09, 0x6a, 0xd5, 0x30, 0x36, 0xa5, 0x38
1346	.byte 0xbf, 0x40, 0xa3, 0x9e, 0x81, 0xf3, 0xd7, 0xfb
1347	.byte 0x7c, 0xe3, 0x39, 0x82, 0x9b, 0x2f, 0xff, 0x87
1348	.byte 0x34, 0x8e, 0x43, 0x44, 0xc4, 0xde, 0xe9, 0xcb
1349	.byte 0x54, 0x7b, 0x94, 0x32, 0xa6, 0xc2, 0x23, 0x3d
1350	.byte 0xee, 0x4c, 0x95, 0x0b, 0x42, 0xfa, 0xc3, 0x4e
1351	.byte 0x08, 0x2e, 0xa1, 0x66, 0x28, 0xd9, 0x24, 0xb2
1352	.byte 0x76, 0x5b, 0xa2, 0x49, 0x6d, 0x8b, 0xd1, 0x25
1353	.byte 0x72, 0xf8, 0xf6, 0x64, 0x86, 0x68, 0x98, 0x16
1354	.byte 0xd4, 0xa4, 0x5c, 0xcc, 0x5d, 0x65, 0xb6, 0x92
1355	.byte 0x6c, 0x70, 0x48, 0x50, 0xfd, 0xed, 0xb9, 0xda
1356	.byte 0x5e, 0x15, 0x46, 0x57, 0xa7, 0x8d, 0x9d, 0x84
1357	.byte 0x90, 0xd8, 0xab, 0x00, 0x8c, 0xbc, 0xd3, 0x0a
1358	.byte 0xf7, 0xe4, 0x58, 0x05, 0xb8, 0xb3, 0x45, 0x06
1359	.byte 0xd0, 0x2c, 0x1e, 0x8f, 0xca, 0x3f, 0x0f, 0x02
1360	.byte 0xc1, 0xaf, 0xbd, 0x03, 0x01, 0x13, 0x8a, 0x6b
1361	.byte 0x3a, 0x91, 0x11, 0x41, 0x4f, 0x67, 0xdc, 0xea
1362	.byte 0x97, 0xf2, 0xcf, 0xce, 0xf0, 0xb4, 0xe6, 0x73
1363	.byte 0x96, 0xac, 0x74, 0x22, 0xe7, 0xad, 0x35, 0x85
1364	.byte 0xe2, 0xf9, 0x37, 0xe8, 0x1c, 0x75, 0xdf, 0x6e
1365	.byte 0x47, 0xf1, 0x1a, 0x71, 0x1d, 0x29, 0xc5, 0x89
1366	.byte 0x6f, 0xb7, 0x62, 0x0e, 0xaa, 0x18, 0xbe, 0x1b
1367	.byte 0xfc, 0x56, 0x3e, 0x4b, 0xc6, 0xd2, 0x79, 0x20
1368	.byte 0x9a, 0xdb, 0xc0, 0xfe, 0x78, 0xcd, 0x5a, 0xf4
1369	.byte 0x1f, 0xdd, 0xa8, 0x33, 0x88, 0x07, 0xc7, 0x31
1370	.byte 0xb1, 0x12, 0x10, 0x59, 0x27, 0x80, 0xec, 0x5f
1371	.byte 0x60, 0x51, 0x7f, 0xa9, 0x19, 0xb5, 0x4a, 0x0d
1372	.byte 0x2d, 0xe5, 0x7a, 0x9f, 0x93, 0xc9, 0x9c, 0xef
1373	.byte 0xa0, 0xe0, 0x3b, 0x4d, 0xae, 0x2a, 0xf5, 0xb0
1374	.byte 0xc8, 0xeb, 0xbb, 0x3c, 0x83, 0x53, 0x99, 0x61
1375	.byte 0x17, 0x2b, 0x04, 0x7e, 0xba, 0x77, 0xd6, 0x26
1376	.byte 0xe1, 0x69, 0x14, 0x63, 0x55, 0x21, 0x0c, 0x7d
1377	.cstring "AES for C64x+, CRYPTOGAMS by <appro\@openssl.org>"
1378	.align 4
1379	___
1380
1381	print $code;
1382	close STDOUT;

Note: See TracBrowser for help on using the repository browser.

source: vbox/trunk/src/libs/openssl-1.1.0g/crypto/aes/asm/aes-c64xplus.pl@ 69881

Download in other formats: