| Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 1 | /* | 
|  | 2 | *  VIA PadLock support functions | 
|  | 3 | * | 
| Bence Szépkúti | 1e14827 | 2020-08-07 13:07:28 +0200 | [diff] [blame] | 4 | *  Copyright The Mbed TLS Contributors | 
| Manuel Pégourié-Gonnard | 37ff140 | 2015-09-04 14:21:07 +0200 | [diff] [blame] | 5 | *  SPDX-License-Identifier: Apache-2.0 | 
|  | 6 | * | 
|  | 7 | *  Licensed under the Apache License, Version 2.0 (the "License"); you may | 
|  | 8 | *  not use this file except in compliance with the License. | 
|  | 9 | *  You may obtain a copy of the License at | 
|  | 10 | * | 
|  | 11 | *  http://www.apache.org/licenses/LICENSE-2.0 | 
|  | 12 | * | 
|  | 13 | *  Unless required by applicable law or agreed to in writing, software | 
|  | 14 | *  distributed under the License is distributed on an "AS IS" BASIS, WITHOUT | 
|  | 15 | *  WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. | 
|  | 16 | *  See the License for the specific language governing permissions and | 
|  | 17 | *  limitations under the License. | 
| Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 18 | */ | 
|  | 19 | /* | 
|  | 20 | *  This implementation is based on the VIA PadLock Programming Guide: | 
|  | 21 | * | 
|  | 22 | *  http://www.via.com.tw/en/downloads/whitepapers/initiatives/padlock/ | 
|  | 23 | *  programming_guide.pdf | 
|  | 24 | */ | 
|  | 25 |  | 
| Gilles Peskine | db09ef6 | 2020-06-03 01:43:33 +0200 | [diff] [blame] | 26 | #include "common.h" | 
| Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 27 |  | 
| Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 28 | #if defined(MBEDTLS_PADLOCK_C) | 
| Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 29 |  | 
| Chris Jones | 16dbaeb | 2021-03-09 17:47:55 +0000 | [diff] [blame] | 30 | #include "padlock.h" | 
| Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 31 |  | 
| Manuel Pégourié-Gonnard | 45ec8da | 2015-02-10 13:50:47 +0000 | [diff] [blame] | 32 | #include <string.h> | 
|  | 33 |  | 
| Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 34 | #if defined(MBEDTLS_HAVE_X86) | 
| Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 35 |  | 
| Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 36 | /* | 
|  | 37 | * PadLock detection routine | 
|  | 38 | */ | 
| Gilles Peskine | 449bd83 | 2023-01-11 14:50:10 +0100 | [diff] [blame] | 39 | int mbedtls_padlock_has_support(int feature) | 
| Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 40 | { | 
|  | 41 | static int flags = -1; | 
| Paul Bakker | 53e1513 | 2013-12-30 20:43:40 +0100 | [diff] [blame] | 42 | int ebx = 0, edx = 0; | 
| Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 43 |  | 
| Gilles Peskine | 449bd83 | 2023-01-11 14:50:10 +0100 | [diff] [blame] | 44 | if (flags == -1) { | 
|  | 45 | asm ("movl  %%ebx, %0           \n\t" | 
| Manuel Pégourié-Gonnard | 87a8ffe | 2014-06-23 12:40:01 +0200 | [diff] [blame] | 46 | "movl  $0xC0000000, %%eax  \n\t" | 
|  | 47 | "cpuid                     \n\t" | 
|  | 48 | "cmpl  $0xC0000001, %%eax  \n\t" | 
|  | 49 | "movl  $0, %%edx           \n\t" | 
| okhowang(王沛文) | 0c4bbda | 2020-06-24 16:02:10 +0800 | [diff] [blame] | 50 | "jb    1f                  \n\t" | 
| Manuel Pégourié-Gonnard | 87a8ffe | 2014-06-23 12:40:01 +0200 | [diff] [blame] | 51 | "movl  $0xC0000001, %%eax  \n\t" | 
|  | 52 | "cpuid                     \n\t" | 
| okhowang(王沛文) | 0c4bbda | 2020-06-24 16:02:10 +0800 | [diff] [blame] | 53 | "1:                        \n\t" | 
| Manuel Pégourié-Gonnard | 87a8ffe | 2014-06-23 12:40:01 +0200 | [diff] [blame] | 54 | "movl  %%edx, %1           \n\t" | 
|  | 55 | "movl  %2, %%ebx           \n\t" | 
| Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 56 | : "=m" (ebx), "=m" (edx) | 
|  | 57 | :  "m" (ebx) | 
| Gilles Peskine | 449bd83 | 2023-01-11 14:50:10 +0100 | [diff] [blame] | 58 | : "eax", "ecx", "edx"); | 
| Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 59 |  | 
|  | 60 | flags = edx; | 
|  | 61 | } | 
|  | 62 |  | 
| Gilles Peskine | 449bd83 | 2023-01-11 14:50:10 +0100 | [diff] [blame] | 63 | return flags & feature; | 
| Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 64 | } | 
|  | 65 |  | 
|  | 66 | /* | 
|  | 67 | * PadLock AES-ECB block en(de)cryption | 
|  | 68 | */ | 
| Gilles Peskine | 449bd83 | 2023-01-11 14:50:10 +0100 | [diff] [blame] | 69 | int mbedtls_padlock_xcryptecb(mbedtls_aes_context *ctx, | 
|  | 70 | int mode, | 
|  | 71 | const unsigned char input[16], | 
|  | 72 | unsigned char output[16]) | 
| Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 73 | { | 
| Paul Bakker | 53e1513 | 2013-12-30 20:43:40 +0100 | [diff] [blame] | 74 | int ebx = 0; | 
| Paul Bakker | 5c2364c | 2012-10-01 14:41:15 +0000 | [diff] [blame] | 75 | uint32_t *rk; | 
|  | 76 | uint32_t *blk; | 
|  | 77 | uint32_t *ctrl; | 
| Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 78 | unsigned char buf[256]; | 
|  | 79 |  | 
| Werner Lewis | c1999d5 | 2022-07-05 11:55:15 +0100 | [diff] [blame] | 80 | rk = ctx->buf + ctx->rk_offset; | 
|  | 81 |  | 
| Gilles Peskine | 449bd83 | 2023-01-11 14:50:10 +0100 | [diff] [blame] | 82 | if (((long) rk & 15) != 0) { | 
|  | 83 | return MBEDTLS_ERR_PADLOCK_DATA_MISALIGNED; | 
|  | 84 | } | 
| Werner Lewis | c1999d5 | 2022-07-05 11:55:15 +0100 | [diff] [blame] | 85 |  | 
| Gilles Peskine | 449bd83 | 2023-01-11 14:50:10 +0100 | [diff] [blame] | 86 | blk = MBEDTLS_PADLOCK_ALIGN16(buf); | 
|  | 87 | memcpy(blk, input, 16); | 
| Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 88 |  | 
| Gilles Peskine | 449bd83 | 2023-01-11 14:50:10 +0100 | [diff] [blame] | 89 | ctrl = blk + 4; | 
|  | 90 | *ctrl = 0x80 | ctx->nr | ((ctx->nr + (mode^1) - 10) << 9); | 
| Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 91 |  | 
| Gilles Peskine | 449bd83 | 2023-01-11 14:50:10 +0100 | [diff] [blame] | 92 | asm ("pushfl                        \n\t" | 
| Manuel Pégourié-Gonnard | 87a8ffe | 2014-06-23 12:40:01 +0200 | [diff] [blame] | 93 | "popfl                         \n\t" | 
|  | 94 | "movl    %%ebx, %0             \n\t" | 
|  | 95 | "movl    $1, %%ecx             \n\t" | 
|  | 96 | "movl    %2, %%edx             \n\t" | 
|  | 97 | "movl    %3, %%ebx             \n\t" | 
|  | 98 | "movl    %4, %%esi             \n\t" | 
|  | 99 | "movl    %4, %%edi             \n\t" | 
|  | 100 | ".byte  0xf3,0x0f,0xa7,0xc8    \n\t" | 
|  | 101 | "movl    %1, %%ebx             \n\t" | 
| Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 102 | : "=m" (ebx) | 
|  | 103 | :  "m" (ebx), "m" (ctrl), "m" (rk), "m" (blk) | 
| Gilles Peskine | 449bd83 | 2023-01-11 14:50:10 +0100 | [diff] [blame] | 104 | : "memory", "ecx", "edx", "esi", "edi"); | 
| Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 105 |  | 
| Gilles Peskine | 449bd83 | 2023-01-11 14:50:10 +0100 | [diff] [blame] | 106 | memcpy(output, blk, 16); | 
| Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 107 |  | 
| Gilles Peskine | 449bd83 | 2023-01-11 14:50:10 +0100 | [diff] [blame] | 108 | return 0; | 
| Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 109 | } | 
|  | 110 |  | 
|  | 111 | /* | 
|  | 112 | * PadLock AES-CBC buffer en(de)cryption | 
|  | 113 | */ | 
| Gilles Peskine | 449bd83 | 2023-01-11 14:50:10 +0100 | [diff] [blame] | 114 | int mbedtls_padlock_xcryptcbc(mbedtls_aes_context *ctx, | 
|  | 115 | int mode, | 
|  | 116 | size_t length, | 
|  | 117 | unsigned char iv[16], | 
|  | 118 | const unsigned char *input, | 
|  | 119 | unsigned char *output) | 
| Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 120 | { | 
| Paul Bakker | 53e1513 | 2013-12-30 20:43:40 +0100 | [diff] [blame] | 121 | int ebx = 0; | 
| Paul Bakker | 23986e5 | 2011-04-24 08:57:21 +0000 | [diff] [blame] | 122 | size_t count; | 
| Paul Bakker | 5c2364c | 2012-10-01 14:41:15 +0000 | [diff] [blame] | 123 | uint32_t *rk; | 
|  | 124 | uint32_t *iw; | 
|  | 125 | uint32_t *ctrl; | 
| Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 126 | unsigned char buf[256]; | 
|  | 127 |  | 
| Werner Lewis | c1999d5 | 2022-07-05 11:55:15 +0100 | [diff] [blame] | 128 | rk = ctx->buf + ctx->rk_offset; | 
|  | 129 |  | 
| Gilles Peskine | 449bd83 | 2023-01-11 14:50:10 +0100 | [diff] [blame] | 130 | if (((long) input  & 15) != 0 || | 
|  | 131 | ((long) output & 15) != 0 || | 
|  | 132 | ((long) rk & 15) != 0) { | 
|  | 133 | return MBEDTLS_ERR_PADLOCK_DATA_MISALIGNED; | 
|  | 134 | } | 
| Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 135 |  | 
| Gilles Peskine | 449bd83 | 2023-01-11 14:50:10 +0100 | [diff] [blame] | 136 | iw = MBEDTLS_PADLOCK_ALIGN16(buf); | 
|  | 137 | memcpy(iw, iv, 16); | 
| Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 138 |  | 
| Gilles Peskine | 449bd83 | 2023-01-11 14:50:10 +0100 | [diff] [blame] | 139 | ctrl = iw + 4; | 
|  | 140 | *ctrl = 0x80 | ctx->nr | ((ctx->nr + (mode ^ 1) - 10) << 9); | 
| Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 141 |  | 
| Gilles Peskine | 449bd83 | 2023-01-11 14:50:10 +0100 | [diff] [blame] | 142 | count = (length + 15) >> 4; | 
| Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 143 |  | 
| Gilles Peskine | 449bd83 | 2023-01-11 14:50:10 +0100 | [diff] [blame] | 144 | asm ("pushfl                        \n\t" | 
| Manuel Pégourié-Gonnard | 87a8ffe | 2014-06-23 12:40:01 +0200 | [diff] [blame] | 145 | "popfl                         \n\t" | 
|  | 146 | "movl    %%ebx, %0             \n\t" | 
|  | 147 | "movl    %2, %%ecx             \n\t" | 
|  | 148 | "movl    %3, %%edx             \n\t" | 
|  | 149 | "movl    %4, %%ebx             \n\t" | 
|  | 150 | "movl    %5, %%esi             \n\t" | 
|  | 151 | "movl    %6, %%edi             \n\t" | 
|  | 152 | "movl    %7, %%eax             \n\t" | 
|  | 153 | ".byte  0xf3,0x0f,0xa7,0xd0    \n\t" | 
|  | 154 | "movl    %1, %%ebx             \n\t" | 
| Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 155 | : "=m" (ebx) | 
|  | 156 | :  "m" (ebx), "m" (count), "m" (ctrl), | 
| Gilles Peskine | 449bd83 | 2023-01-11 14:50:10 +0100 | [diff] [blame] | 157 | "m"  (rk), "m" (input), "m" (output), "m" (iw) | 
|  | 158 | : "memory", "eax", "ecx", "edx", "esi", "edi"); | 
| Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 159 |  | 
| Gilles Peskine | 449bd83 | 2023-01-11 14:50:10 +0100 | [diff] [blame] | 160 | memcpy(iv, iw, 16); | 
| Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 161 |  | 
| Gilles Peskine | 449bd83 | 2023-01-11 14:50:10 +0100 | [diff] [blame] | 162 | return 0; | 
| Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 163 | } | 
|  | 164 |  | 
| Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 165 | #endif /* MBEDTLS_HAVE_X86 */ | 
| Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 166 |  | 
| Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 167 | #endif /* MBEDTLS_PADLOCK_C */ |