blob: a1287759e6387cfb48c651cb627b715205070ae6 [file] [log] [blame]
Paul Bakker5121ce52009-01-03 21:22:43 +00001/*
2 * VIA PadLock support functions
3 *
Bence Szépkúti1e148272020-08-07 13:07:28 +02004 * Copyright The Mbed TLS Contributors
Manuel Pégourié-Gonnard37ff1402015-09-04 14:21:07 +02005 * SPDX-License-Identifier: Apache-2.0
6 *
7 * Licensed under the Apache License, Version 2.0 (the "License"); you may
8 * not use this file except in compliance with the License.
9 * You may obtain a copy of the License at
10 *
11 * http://www.apache.org/licenses/LICENSE-2.0
12 *
13 * Unless required by applicable law or agreed to in writing, software
14 * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
15 * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
16 * See the License for the specific language governing permissions and
17 * limitations under the License.
Paul Bakker5121ce52009-01-03 21:22:43 +000018 */
19/*
20 * This implementation is based on the VIA PadLock Programming Guide:
21 *
22 * http://www.via.com.tw/en/downloads/whitepapers/initiatives/padlock/
23 * programming_guide.pdf
24 */
25
Gilles Peskinedb09ef62020-06-03 01:43:33 +020026#include "common.h"
Paul Bakker5121ce52009-01-03 21:22:43 +000027
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020028#if defined(MBEDTLS_PADLOCK_C)
Paul Bakker5121ce52009-01-03 21:22:43 +000029
Chris Jones16dbaeb2021-03-09 17:47:55 +000030#include "padlock.h"
Paul Bakker5121ce52009-01-03 21:22:43 +000031
Manuel Pégourié-Gonnard45ec8da2015-02-10 13:50:47 +000032#include <string.h>
33
Manuel Pégourié-Gonnardba194322015-05-29 09:47:57 +020034#ifndef asm
35#define asm __asm
36#endif
37
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020038#if defined(MBEDTLS_HAVE_X86)
Paul Bakker5121ce52009-01-03 21:22:43 +000039
Paul Bakker5121ce52009-01-03 21:22:43 +000040/*
41 * PadLock detection routine
42 */
Manuel Pégourié-Gonnardc730ed32015-06-02 10:38:50 +010043int mbedtls_padlock_has_support( int feature )
Paul Bakker5121ce52009-01-03 21:22:43 +000044{
45 static int flags = -1;
Paul Bakker53e15132013-12-30 20:43:40 +010046 int ebx = 0, edx = 0;
Paul Bakker5121ce52009-01-03 21:22:43 +000047
48 if( flags == -1 )
49 {
Manuel Pégourié-Gonnard87a8ffe2014-06-23 12:40:01 +020050 asm( "movl %%ebx, %0 \n\t"
51 "movl $0xC0000000, %%eax \n\t"
52 "cpuid \n\t"
53 "cmpl $0xC0000001, %%eax \n\t"
54 "movl $0, %%edx \n\t"
okhowang(王沛文)0c4bbda2020-06-24 16:02:10 +080055 "jb 1f \n\t"
Manuel Pégourié-Gonnard87a8ffe2014-06-23 12:40:01 +020056 "movl $0xC0000001, %%eax \n\t"
57 "cpuid \n\t"
okhowang(王沛文)0c4bbda2020-06-24 16:02:10 +080058 "1: \n\t"
Manuel Pégourié-Gonnard87a8ffe2014-06-23 12:40:01 +020059 "movl %%edx, %1 \n\t"
60 "movl %2, %%ebx \n\t"
Paul Bakker5121ce52009-01-03 21:22:43 +000061 : "=m" (ebx), "=m" (edx)
62 : "m" (ebx)
63 : "eax", "ecx", "edx" );
64
65 flags = edx;
66 }
67
68 return( flags & feature );
69}
70
71/*
72 * PadLock AES-ECB block en(de)cryption
73 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020074int mbedtls_padlock_xcryptecb( mbedtls_aes_context *ctx,
Paul Bakker5121ce52009-01-03 21:22:43 +000075 int mode,
Paul Bakkerff60ee62010-03-16 21:09:09 +000076 const unsigned char input[16],
Paul Bakker5121ce52009-01-03 21:22:43 +000077 unsigned char output[16] )
78{
Paul Bakker53e15132013-12-30 20:43:40 +010079 int ebx = 0;
Paul Bakker5c2364c2012-10-01 14:41:15 +000080 uint32_t *rk;
81 uint32_t *blk;
82 uint32_t *ctrl;
Paul Bakker5121ce52009-01-03 21:22:43 +000083 unsigned char buf[256];
84
Werner Lewisc1999d52022-07-05 11:55:15 +010085 rk = ctx->buf + ctx->rk_offset;
86
87 if( ( (long) rk & 15 ) != 0 )
88 return( MBEDTLS_ERR_PADLOCK_DATA_MISALIGNED );
89
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020090 blk = MBEDTLS_PADLOCK_ALIGN16( buf );
Paul Bakker5121ce52009-01-03 21:22:43 +000091 memcpy( blk, input, 16 );
92
93 ctrl = blk + 4;
94 *ctrl = 0x80 | ctx->nr | ( ( ctx->nr + ( mode^1 ) - 10 ) << 9 );
95
Manuel Pégourié-Gonnard87a8ffe2014-06-23 12:40:01 +020096 asm( "pushfl \n\t"
97 "popfl \n\t"
98 "movl %%ebx, %0 \n\t"
99 "movl $1, %%ecx \n\t"
100 "movl %2, %%edx \n\t"
101 "movl %3, %%ebx \n\t"
102 "movl %4, %%esi \n\t"
103 "movl %4, %%edi \n\t"
104 ".byte 0xf3,0x0f,0xa7,0xc8 \n\t"
105 "movl %1, %%ebx \n\t"
Paul Bakker5121ce52009-01-03 21:22:43 +0000106 : "=m" (ebx)
107 : "m" (ebx), "m" (ctrl), "m" (rk), "m" (blk)
Manuel Pégourié-Gonnardcf201202015-04-02 10:46:55 +0100108 : "memory", "ecx", "edx", "esi", "edi" );
Paul Bakker5121ce52009-01-03 21:22:43 +0000109
110 memcpy( output, blk, 16 );
111
112 return( 0 );
113}
114
115/*
116 * PadLock AES-CBC buffer en(de)cryption
117 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200118int mbedtls_padlock_xcryptcbc( mbedtls_aes_context *ctx,
Paul Bakker5121ce52009-01-03 21:22:43 +0000119 int mode,
Paul Bakker23986e52011-04-24 08:57:21 +0000120 size_t length,
Paul Bakker5121ce52009-01-03 21:22:43 +0000121 unsigned char iv[16],
Paul Bakkerff60ee62010-03-16 21:09:09 +0000122 const unsigned char *input,
Paul Bakker5121ce52009-01-03 21:22:43 +0000123 unsigned char *output )
124{
Paul Bakker53e15132013-12-30 20:43:40 +0100125 int ebx = 0;
Paul Bakker23986e52011-04-24 08:57:21 +0000126 size_t count;
Paul Bakker5c2364c2012-10-01 14:41:15 +0000127 uint32_t *rk;
128 uint32_t *iw;
129 uint32_t *ctrl;
Paul Bakker5121ce52009-01-03 21:22:43 +0000130 unsigned char buf[256];
131
Werner Lewisc1999d52022-07-05 11:55:15 +0100132 rk = ctx->buf + ctx->rk_offset;
133
Paul Bakker5121ce52009-01-03 21:22:43 +0000134 if( ( (long) input & 15 ) != 0 ||
Werner Lewisc1999d52022-07-05 11:55:15 +0100135 ( (long) output & 15 ) != 0 ||
136 ( (long) rk & 15 ) != 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200137 return( MBEDTLS_ERR_PADLOCK_DATA_MISALIGNED );
Paul Bakker5121ce52009-01-03 21:22:43 +0000138
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200139 iw = MBEDTLS_PADLOCK_ALIGN16( buf );
Paul Bakker5121ce52009-01-03 21:22:43 +0000140 memcpy( iw, iv, 16 );
141
142 ctrl = iw + 4;
Paul Bakker66d5d072014-06-17 16:39:18 +0200143 *ctrl = 0x80 | ctx->nr | ( ( ctx->nr + ( mode ^ 1 ) - 10 ) << 9 );
Paul Bakker5121ce52009-01-03 21:22:43 +0000144
Paul Bakker66d5d072014-06-17 16:39:18 +0200145 count = ( length + 15 ) >> 4;
Paul Bakker5121ce52009-01-03 21:22:43 +0000146
Manuel Pégourié-Gonnard87a8ffe2014-06-23 12:40:01 +0200147 asm( "pushfl \n\t"
148 "popfl \n\t"
149 "movl %%ebx, %0 \n\t"
150 "movl %2, %%ecx \n\t"
151 "movl %3, %%edx \n\t"
152 "movl %4, %%ebx \n\t"
153 "movl %5, %%esi \n\t"
154 "movl %6, %%edi \n\t"
155 "movl %7, %%eax \n\t"
156 ".byte 0xf3,0x0f,0xa7,0xd0 \n\t"
157 "movl %1, %%ebx \n\t"
Paul Bakker5121ce52009-01-03 21:22:43 +0000158 : "=m" (ebx)
159 : "m" (ebx), "m" (count), "m" (ctrl),
160 "m" (rk), "m" (input), "m" (output), "m" (iw)
Manuel Pégourié-Gonnardcf201202015-04-02 10:46:55 +0100161 : "memory", "eax", "ecx", "edx", "esi", "edi" );
Paul Bakker5121ce52009-01-03 21:22:43 +0000162
163 memcpy( iv, iw, 16 );
164
165 return( 0 );
166}
167
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200168#endif /* MBEDTLS_HAVE_X86 */
Paul Bakker5121ce52009-01-03 21:22:43 +0000169
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200170#endif /* MBEDTLS_PADLOCK_C */