Arduino Cryptography Library
Ascon128AVR.cpp
1 /*
2  * Copyright (C) 2018 Southern Storm Software, Pty Ltd.
3  *
4  * Permission is hereby granted, free of charge, to any person obtaining a
5  * copy of this software and associated documentation files (the "Software"),
6  * to deal in the Software without restriction, including without limitation
7  * the rights to use, copy, modify, merge, publish, distribute, sublicense,
8  * and/or sell copies of the Software, and to permit persons to whom the
9  * Software is furnished to do so, subject to the following conditions:
10  *
11  * The above copyright notice and this permission notice shall be included
12  * in all copies or substantial portions of the Software.
13  *
14  * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS
15  * OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
16  * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
17  * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
18  * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
19  * FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER
20  * DEALINGS IN THE SOFTWARE.
21  */
22 
23 #include "Ascon128.h"
24 
25 #if defined(__AVR__)
26 
27 void Ascon128::permute(uint8_t first)
28 {
29  // AVR version generated by the genascon tool.
30  __asm__ __volatile__ (
31  "1:\n"
32  "ldd r15,Z+16\n"
33  "eor r15,%1\n"
34  "ld r14,Z\n"
35  "ldd r13,Z+8\n"
36  "ldd r12,Z+24\n"
37  "ldd r11,Z+32\n"
38  "eor r14,r11\n"
39  "eor r11,r12\n"
40  "eor r15,r13\n"
41  "mov r10,r14\n"
42  "com r10\n"
43  "and r10,r13\n"
44  "mov r9,r13\n"
45  "com r9\n"
46  "and r9,r15\n"
47  "mov r8,r15\n"
48  "com r8\n"
49  "and r8,r12\n"
50  "mov r7,r12\n"
51  "com r7\n"
52  "and r7,r11\n"
53  "mov r23,r11\n"
54  "com r23\n"
55  "and r23,r14\n"
56  "eor r14,r9\n"
57  "eor r13,r8\n"
58  "eor r15,r7\n"
59  "eor r12,r23\n"
60  "eor r11,r10\n"
61  "eor r13,r14\n"
62  "eor r14,r11\n"
63  "eor r12,r15\n"
64  "com r15\n"
65  "st Z,r14\n"
66  "std Z+8,r13\n"
67  "std Z+16,r15\n"
68  "std Z+24,r12\n"
69  "std Z+32,r11\n"
70  "ldd r15,Z+1\n"
71  "ldd r14,Z+9\n"
72  "ldd r13,Z+17\n"
73  "ldd r12,Z+25\n"
74  "ldd r11,Z+33\n"
75  "eor r15,r11\n"
76  "eor r11,r12\n"
77  "eor r13,r14\n"
78  "mov r10,r15\n"
79  "com r10\n"
80  "and r10,r14\n"
81  "mov r9,r14\n"
82  "com r9\n"
83  "and r9,r13\n"
84  "mov r8,r13\n"
85  "com r8\n"
86  "and r8,r12\n"
87  "mov r7,r12\n"
88  "com r7\n"
89  "and r7,r11\n"
90  "mov r23,r11\n"
91  "com r23\n"
92  "and r23,r15\n"
93  "eor r15,r9\n"
94  "eor r14,r8\n"
95  "eor r13,r7\n"
96  "eor r12,r23\n"
97  "eor r11,r10\n"
98  "eor r14,r15\n"
99  "eor r15,r11\n"
100  "eor r12,r13\n"
101  "com r13\n"
102  "std Z+1,r15\n"
103  "std Z+9,r14\n"
104  "std Z+17,r13\n"
105  "std Z+25,r12\n"
106  "std Z+33,r11\n"
107  "ldd r15,Z+2\n"
108  "ldd r14,Z+10\n"
109  "ldd r13,Z+18\n"
110  "ldd r12,Z+26\n"
111  "ldd r11,Z+34\n"
112  "eor r15,r11\n"
113  "eor r11,r12\n"
114  "eor r13,r14\n"
115  "mov r10,r15\n"
116  "com r10\n"
117  "and r10,r14\n"
118  "mov r9,r14\n"
119  "com r9\n"
120  "and r9,r13\n"
121  "mov r8,r13\n"
122  "com r8\n"
123  "and r8,r12\n"
124  "mov r7,r12\n"
125  "com r7\n"
126  "and r7,r11\n"
127  "mov r23,r11\n"
128  "com r23\n"
129  "and r23,r15\n"
130  "eor r15,r9\n"
131  "eor r14,r8\n"
132  "eor r13,r7\n"
133  "eor r12,r23\n"
134  "eor r11,r10\n"
135  "eor r14,r15\n"
136  "eor r15,r11\n"
137  "eor r12,r13\n"
138  "com r13\n"
139  "std Z+2,r15\n"
140  "std Z+10,r14\n"
141  "std Z+18,r13\n"
142  "std Z+26,r12\n"
143  "std Z+34,r11\n"
144  "ldd r15,Z+3\n"
145  "ldd r14,Z+11\n"
146  "ldd r13,Z+19\n"
147  "ldd r12,Z+27\n"
148  "ldd r11,Z+35\n"
149  "eor r15,r11\n"
150  "eor r11,r12\n"
151  "eor r13,r14\n"
152  "mov r10,r15\n"
153  "com r10\n"
154  "and r10,r14\n"
155  "mov r9,r14\n"
156  "com r9\n"
157  "and r9,r13\n"
158  "mov r8,r13\n"
159  "com r8\n"
160  "and r8,r12\n"
161  "mov r7,r12\n"
162  "com r7\n"
163  "and r7,r11\n"
164  "mov r23,r11\n"
165  "com r23\n"
166  "and r23,r15\n"
167  "eor r15,r9\n"
168  "eor r14,r8\n"
169  "eor r13,r7\n"
170  "eor r12,r23\n"
171  "eor r11,r10\n"
172  "eor r14,r15\n"
173  "eor r15,r11\n"
174  "eor r12,r13\n"
175  "com r13\n"
176  "std Z+3,r15\n"
177  "std Z+11,r14\n"
178  "std Z+19,r13\n"
179  "std Z+27,r12\n"
180  "std Z+35,r11\n"
181  "ldd r15,Z+4\n"
182  "ldd r14,Z+12\n"
183  "ldd r13,Z+20\n"
184  "ldd r12,Z+28\n"
185  "ldd r11,Z+36\n"
186  "eor r15,r11\n"
187  "eor r11,r12\n"
188  "eor r13,r14\n"
189  "mov r10,r15\n"
190  "com r10\n"
191  "and r10,r14\n"
192  "mov r9,r14\n"
193  "com r9\n"
194  "and r9,r13\n"
195  "mov r8,r13\n"
196  "com r8\n"
197  "and r8,r12\n"
198  "mov r7,r12\n"
199  "com r7\n"
200  "and r7,r11\n"
201  "mov r23,r11\n"
202  "com r23\n"
203  "and r23,r15\n"
204  "eor r15,r9\n"
205  "eor r14,r8\n"
206  "eor r13,r7\n"
207  "eor r12,r23\n"
208  "eor r11,r10\n"
209  "eor r14,r15\n"
210  "eor r15,r11\n"
211  "eor r12,r13\n"
212  "com r13\n"
213  "std Z+4,r15\n"
214  "std Z+12,r14\n"
215  "std Z+20,r13\n"
216  "std Z+28,r12\n"
217  "std Z+36,r11\n"
218  "ldd r15,Z+5\n"
219  "ldd r14,Z+13\n"
220  "ldd r13,Z+21\n"
221  "ldd r12,Z+29\n"
222  "ldd r11,Z+37\n"
223  "eor r15,r11\n"
224  "eor r11,r12\n"
225  "eor r13,r14\n"
226  "mov r10,r15\n"
227  "com r10\n"
228  "and r10,r14\n"
229  "mov r9,r14\n"
230  "com r9\n"
231  "and r9,r13\n"
232  "mov r8,r13\n"
233  "com r8\n"
234  "and r8,r12\n"
235  "mov r7,r12\n"
236  "com r7\n"
237  "and r7,r11\n"
238  "mov r23,r11\n"
239  "com r23\n"
240  "and r23,r15\n"
241  "eor r15,r9\n"
242  "eor r14,r8\n"
243  "eor r13,r7\n"
244  "eor r12,r23\n"
245  "eor r11,r10\n"
246  "eor r14,r15\n"
247  "eor r15,r11\n"
248  "eor r12,r13\n"
249  "com r13\n"
250  "std Z+5,r15\n"
251  "std Z+13,r14\n"
252  "std Z+21,r13\n"
253  "std Z+29,r12\n"
254  "std Z+37,r11\n"
255  "ldd r15,Z+6\n"
256  "ldd r14,Z+14\n"
257  "ldd r13,Z+22\n"
258  "ldd r12,Z+30\n"
259  "ldd r11,Z+38\n"
260  "eor r15,r11\n"
261  "eor r11,r12\n"
262  "eor r13,r14\n"
263  "mov r10,r15\n"
264  "com r10\n"
265  "and r10,r14\n"
266  "mov r9,r14\n"
267  "com r9\n"
268  "and r9,r13\n"
269  "mov r8,r13\n"
270  "com r8\n"
271  "and r8,r12\n"
272  "mov r7,r12\n"
273  "com r7\n"
274  "and r7,r11\n"
275  "mov r23,r11\n"
276  "com r23\n"
277  "and r23,r15\n"
278  "eor r15,r9\n"
279  "eor r14,r8\n"
280  "eor r13,r7\n"
281  "eor r12,r23\n"
282  "eor r11,r10\n"
283  "eor r14,r15\n"
284  "eor r15,r11\n"
285  "eor r12,r13\n"
286  "com r13\n"
287  "std Z+6,r15\n"
288  "std Z+14,r14\n"
289  "std Z+22,r13\n"
290  "std Z+30,r12\n"
291  "std Z+38,r11\n"
292  "ldd r15,Z+7\n"
293  "ldd r14,Z+15\n"
294  "ldd r13,Z+23\n"
295  "ldd r12,Z+31\n"
296  "ldd r11,Z+39\n"
297  "eor r15,r11\n"
298  "eor r11,r12\n"
299  "eor r13,r14\n"
300  "mov r10,r15\n"
301  "com r10\n"
302  "and r10,r14\n"
303  "mov r9,r14\n"
304  "com r9\n"
305  "and r9,r13\n"
306  "mov r8,r13\n"
307  "com r8\n"
308  "and r8,r12\n"
309  "mov r7,r12\n"
310  "com r7\n"
311  "and r7,r11\n"
312  "mov r23,r11\n"
313  "com r23\n"
314  "and r23,r15\n"
315  "eor r15,r9\n"
316  "eor r14,r8\n"
317  "eor r13,r7\n"
318  "eor r12,r23\n"
319  "eor r11,r10\n"
320  "eor r14,r15\n"
321  "eor r15,r11\n"
322  "eor r12,r13\n"
323  "com r13\n"
324  "std Z+7,r15\n"
325  "std Z+15,r14\n"
326  "std Z+23,r13\n"
327  "std Z+31,r12\n"
328  "std Z+39,r11\n"
329  "ld r15,Z\n"
330  "ldd r14,Z+1\n"
331  "ldd r13,Z+2\n"
332  "ldd r12,Z+3\n"
333  "ldd r11,Z+4\n"
334  "ldd r10,Z+5\n"
335  "ldd r9,Z+6\n"
336  "ldd r8,Z+7\n"
337  "mov r7,r15\n"
338  "mov r23,r14\n"
339  "mov r22,r13\n"
340  "mov r21,r12\n"
341  "mov r20,r11\n"
342  "mov r19,r10\n"
343  "mov r18,r9\n"
344  "mov r17,r8\n"
345  "bst r22,0\n"
346  "ror r23\n"
347  "ror r7\n"
348  "ror r17\n"
349  "ror r18\n"
350  "ror r19\n"
351  "ror r20\n"
352  "ror r21\n"
353  "ror r22\n"
354  "bld r23,7\n"
355  "bst r22,0\n"
356  "ror r23\n"
357  "ror r7\n"
358  "ror r17\n"
359  "ror r18\n"
360  "ror r19\n"
361  "ror r20\n"
362  "ror r21\n"
363  "ror r22\n"
364  "bld r23,7\n"
365  "bst r22,0\n"
366  "ror r23\n"
367  "ror r7\n"
368  "ror r17\n"
369  "ror r18\n"
370  "ror r19\n"
371  "ror r20\n"
372  "ror r21\n"
373  "ror r22\n"
374  "bld r23,7\n"
375  "eor r22,r15\n"
376  "eor r21,r14\n"
377  "eor r20,r13\n"
378  "eor r19,r12\n"
379  "eor r18,r11\n"
380  "eor r17,r10\n"
381  "eor r7,r9\n"
382  "eor r23,r8\n"
383  "lsl r11\n"
384  "rol r10\n"
385  "rol r9\n"
386  "rol r8\n"
387  "rol r15\n"
388  "rol r14\n"
389  "rol r13\n"
390  "rol r12\n"
391  "adc r11,__zero_reg__\n"
392  "lsl r11\n"
393  "rol r10\n"
394  "rol r9\n"
395  "rol r8\n"
396  "rol r15\n"
397  "rol r14\n"
398  "rol r13\n"
399  "rol r12\n"
400  "adc r11,__zero_reg__\n"
401  "lsl r11\n"
402  "rol r10\n"
403  "rol r9\n"
404  "rol r8\n"
405  "rol r15\n"
406  "rol r14\n"
407  "rol r13\n"
408  "rol r12\n"
409  "adc r11,__zero_reg__\n"
410  "lsl r11\n"
411  "rol r10\n"
412  "rol r9\n"
413  "rol r8\n"
414  "rol r15\n"
415  "rol r14\n"
416  "rol r13\n"
417  "rol r12\n"
418  "adc r11,__zero_reg__\n"
419  "eor r11,r22\n"
420  "eor r10,r21\n"
421  "eor r9,r20\n"
422  "eor r8,r19\n"
423  "eor r15,r18\n"
424  "eor r14,r17\n"
425  "eor r13,r7\n"
426  "eor r12,r23\n"
427  "st Z,r11\n"
428  "std Z+1,r10\n"
429  "std Z+2,r9\n"
430  "std Z+3,r8\n"
431  "std Z+4,r15\n"
432  "std Z+5,r14\n"
433  "std Z+6,r13\n"
434  "std Z+7,r12\n"
435  "ldd r15,Z+8\n"
436  "ldd r14,Z+9\n"
437  "ldd r13,Z+10\n"
438  "ldd r12,Z+11\n"
439  "ldd r11,Z+12\n"
440  "ldd r10,Z+13\n"
441  "ldd r9,Z+14\n"
442  "ldd r8,Z+15\n"
443  "mov r7,r15\n"
444  "mov r23,r14\n"
445  "mov r22,r13\n"
446  "mov r21,r12\n"
447  "mov r20,r11\n"
448  "mov r19,r10\n"
449  "mov r18,r9\n"
450  "mov r17,r8\n"
451  "lsl r7\n"
452  "rol r23\n"
453  "rol r22\n"
454  "rol r21\n"
455  "rol r20\n"
456  "rol r19\n"
457  "rol r18\n"
458  "rol r17\n"
459  "adc r7,__zero_reg__\n"
460  "lsl r7\n"
461  "rol r23\n"
462  "rol r22\n"
463  "rol r21\n"
464  "rol r20\n"
465  "rol r19\n"
466  "rol r18\n"
467  "rol r17\n"
468  "adc r7,__zero_reg__\n"
469  "lsl r7\n"
470  "rol r23\n"
471  "rol r22\n"
472  "rol r21\n"
473  "rol r20\n"
474  "rol r19\n"
475  "rol r18\n"
476  "rol r17\n"
477  "adc r7,__zero_reg__\n"
478  "eor r7,r15\n"
479  "eor r23,r14\n"
480  "eor r22,r13\n"
481  "eor r21,r12\n"
482  "eor r20,r11\n"
483  "eor r19,r10\n"
484  "eor r18,r9\n"
485  "eor r17,r8\n"
486  "lsl r10\n"
487  "rol r9\n"
488  "rol r8\n"
489  "rol r15\n"
490  "rol r14\n"
491  "rol r13\n"
492  "rol r12\n"
493  "rol r11\n"
494  "adc r10,__zero_reg__\n"
495  "eor r10,r7\n"
496  "eor r9,r23\n"
497  "eor r8,r22\n"
498  "eor r15,r21\n"
499  "eor r14,r20\n"
500  "eor r13,r19\n"
501  "eor r12,r18\n"
502  "eor r11,r17\n"
503  "std Z+8,r10\n"
504  "std Z+9,r9\n"
505  "std Z+10,r8\n"
506  "std Z+11,r15\n"
507  "std Z+12,r14\n"
508  "std Z+13,r13\n"
509  "std Z+14,r12\n"
510  "std Z+15,r11\n"
511  "ldd r15,Z+16\n"
512  "ldd r14,Z+17\n"
513  "ldd r13,Z+18\n"
514  "ldd r12,Z+19\n"
515  "ldd r11,Z+20\n"
516  "ldd r10,Z+21\n"
517  "ldd r9,Z+22\n"
518  "ldd r8,Z+23\n"
519  "mov r7,r15\n"
520  "mov r23,r14\n"
521  "mov r22,r13\n"
522  "mov r21,r12\n"
523  "mov r20,r11\n"
524  "mov r19,r10\n"
525  "mov r18,r9\n"
526  "mov r17,r8\n"
527  "bst r7,0\n"
528  "ror r17\n"
529  "ror r18\n"
530  "ror r19\n"
531  "ror r20\n"
532  "ror r21\n"
533  "ror r22\n"
534  "ror r23\n"
535  "ror r7\n"
536  "bld r17,7\n"
537  "eor r7,r15\n"
538  "eor r23,r14\n"
539  "eor r22,r13\n"
540  "eor r21,r12\n"
541  "eor r20,r11\n"
542  "eor r19,r10\n"
543  "eor r18,r9\n"
544  "eor r17,r8\n"
545  "lsl r14\n"
546  "rol r13\n"
547  "rol r12\n"
548  "rol r11\n"
549  "rol r10\n"
550  "rol r9\n"
551  "rol r8\n"
552  "rol r15\n"
553  "adc r14,__zero_reg__\n"
554  "lsl r14\n"
555  "rol r13\n"
556  "rol r12\n"
557  "rol r11\n"
558  "rol r10\n"
559  "rol r9\n"
560  "rol r8\n"
561  "rol r15\n"
562  "adc r14,__zero_reg__\n"
563  "eor r14,r7\n"
564  "eor r13,r23\n"
565  "eor r12,r22\n"
566  "eor r11,r21\n"
567  "eor r10,r20\n"
568  "eor r9,r19\n"
569  "eor r8,r18\n"
570  "eor r15,r17\n"
571  "std Z+16,r14\n"
572  "std Z+17,r13\n"
573  "std Z+18,r12\n"
574  "std Z+19,r11\n"
575  "std Z+20,r10\n"
576  "std Z+21,r9\n"
577  "std Z+22,r8\n"
578  "std Z+23,r15\n"
579  "ldd r15,Z+24\n"
580  "ldd r14,Z+25\n"
581  "ldd r13,Z+26\n"
582  "ldd r12,Z+27\n"
583  "ldd r11,Z+28\n"
584  "ldd r10,Z+29\n"
585  "ldd r9,Z+30\n"
586  "ldd r8,Z+31\n"
587  "mov r7,r15\n"
588  "mov r23,r14\n"
589  "mov r22,r13\n"
590  "mov r21,r12\n"
591  "mov r20,r11\n"
592  "mov r19,r10\n"
593  "mov r18,r9\n"
594  "mov r17,r8\n"
595  "bst r23,0\n"
596  "ror r7\n"
597  "ror r17\n"
598  "ror r18\n"
599  "ror r19\n"
600  "ror r20\n"
601  "ror r21\n"
602  "ror r22\n"
603  "ror r23\n"
604  "bld r7,7\n"
605  "bst r23,0\n"
606  "ror r7\n"
607  "ror r17\n"
608  "ror r18\n"
609  "ror r19\n"
610  "ror r20\n"
611  "ror r21\n"
612  "ror r22\n"
613  "ror r23\n"
614  "bld r7,7\n"
615  "eor r23,r15\n"
616  "eor r22,r14\n"
617  "eor r21,r13\n"
618  "eor r20,r12\n"
619  "eor r19,r11\n"
620  "eor r18,r10\n"
621  "eor r17,r9\n"
622  "eor r7,r8\n"
623  "bst r13,0\n"
624  "ror r14\n"
625  "ror r15\n"
626  "ror r8\n"
627  "ror r9\n"
628  "ror r10\n"
629  "ror r11\n"
630  "ror r12\n"
631  "ror r13\n"
632  "bld r14,7\n"
633  "eor r13,r23\n"
634  "eor r12,r22\n"
635  "eor r11,r21\n"
636  "eor r10,r20\n"
637  "eor r9,r19\n"
638  "eor r8,r18\n"
639  "eor r15,r17\n"
640  "eor r14,r7\n"
641  "std Z+24,r13\n"
642  "std Z+25,r12\n"
643  "std Z+26,r11\n"
644  "std Z+27,r10\n"
645  "std Z+28,r9\n"
646  "std Z+29,r8\n"
647  "std Z+30,r15\n"
648  "std Z+31,r14\n"
649  "ldd r15,Z+32\n"
650  "ldd r14,Z+33\n"
651  "ldd r13,Z+34\n"
652  "ldd r12,Z+35\n"
653  "ldd r11,Z+36\n"
654  "ldd r10,Z+37\n"
655  "ldd r9,Z+38\n"
656  "ldd r8,Z+39\n"
657  "mov r7,r15\n"
658  "mov r23,r14\n"
659  "mov r22,r13\n"
660  "mov r21,r12\n"
661  "mov r20,r11\n"
662  "mov r19,r10\n"
663  "mov r18,r9\n"
664  "mov r17,r8\n"
665  "lsl r23\n"
666  "rol r22\n"
667  "rol r21\n"
668  "rol r20\n"
669  "rol r19\n"
670  "rol r18\n"
671  "rol r17\n"
672  "rol r7\n"
673  "adc r23,__zero_reg__\n"
674  "eor r23,r15\n"
675  "eor r22,r14\n"
676  "eor r21,r13\n"
677  "eor r20,r12\n"
678  "eor r19,r11\n"
679  "eor r18,r10\n"
680  "eor r17,r9\n"
681  "eor r7,r8\n"
682  "bst r10,0\n"
683  "ror r11\n"
684  "ror r12\n"
685  "ror r13\n"
686  "ror r14\n"
687  "ror r15\n"
688  "ror r8\n"
689  "ror r9\n"
690  "ror r10\n"
691  "bld r11,7\n"
692  "eor r10,r23\n"
693  "eor r9,r22\n"
694  "eor r8,r21\n"
695  "eor r15,r20\n"
696  "eor r14,r19\n"
697  "eor r13,r18\n"
698  "eor r12,r17\n"
699  "eor r11,r7\n"
700  "std Z+32,r10\n"
701  "std Z+33,r9\n"
702  "std Z+34,r8\n"
703  "std Z+35,r15\n"
704  "std Z+36,r14\n"
705  "std Z+37,r13\n"
706  "std Z+38,r12\n"
707  "std Z+39,r11\n"
708  "subi %1,0x0F\n"
709  "cpi %1,0x3C\n"
710  "breq 2f\n"
711  "rjmp 1b\n"
712  "2:\n"
713  :: "z"(state.S), "d"((uint8_t)(0xF0 - (first << 4) + first))
714  : "r17", "r18", "r19", "r20", "r21", "r22", "r23", "r7", "r8", "r9", "r10", "r11", "r12", "r13", "r14", "r15", "memory"
715  );
716 }
717 
718 #endif // __AVR__