/*******************************************************************************
* Copyright 2010-2018 Intel Corporation
* All Rights Reserved.
*
* If this software was obtained under the Intel Simplified Software License,
* the following terms apply:
*
* The source code, information and material ("Material") contained herein is
* owned by Intel Corporation or its suppliers or licensors, and title to such
* Material remains with Intel Corporation or its suppliers or licensors. The
* Material contains proprietary information of Intel or its suppliers and
* licensors. The Material is protected by worldwide copyright laws and treaty
* provisions. No part of the Material may be used, copied, reproduced,
* modified, published, uploaded, posted, transmitted, distributed or disclosed
* in any way without Intel's prior express written permission. No license under
* any patent, copyright or other intellectual property rights in the Material
* is granted to or conferred upon you, either expressly, by implication,
* inducement, estoppel or otherwise. Any license under such intellectual
* property rights must be express and approved by Intel in writing.
*
* Unless otherwise agreed by Intel in writing, you may not remove or alter this
* notice or any other notice embedded in Materials by Intel or Intel's
* suppliers or licensors in any way.
*
*
* If this software was obtained under the Apache License, Version 2.0 (the
* "License"), the following terms apply:
*
* You may not use this file except in compliance with the License. You may
* obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0
*
*
* Unless required by applicable law or agreed to in writing, software
* distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
* WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
*
* See the License for the specific language governing permissions and
* limitations under the License.
*******************************************************************************/
/*
//
// Purpose:
// Intel(R) Integrated Performance Primitives. Cryptography Primitives.
// Internal EC over GF(p^m) basic Definitions & Function Prototypes
//
// Context:
// gfec_point_prod()
//
*/
#include "owndefs.h"
#include "owncp.h"
#include "pcpgfpecstuff.h"
#include "gsscramble.h"
#include "pcpmask_ct.h"
void gfec_point_prod(BNU_CHUNK_T* pointR,
const BNU_CHUNK_T* pointA, const Ipp8u* scalarA,
const BNU_CHUNK_T* pointB, const Ipp8u* scalarB,
int scalarBitSize,
IppsGFpECState* pEC, Ipp8u* pScratchBuffer)
{
int pointLen = ECP_POINTLEN(pEC);
/* optimal size of window */
const int window_size = 5;
/* number of table entries */
const int tableLen = 1<<(window_size-1);
/* aligned pre-computed tables */
BNU_CHUNK_T* pTableA = (BNU_CHUNK_T*)IPP_ALIGNED_PTR(pScratchBuffer, CACHE_LINE_SIZE);
BNU_CHUNK_T* pTableB = pTableA+pointLen*tableLen;
setupTable(pTableA, pointA, pEC);
setupTable(pTableB, pointB, pEC);
{
IppsGFpState* pGF = ECP_GFP(pEC);
gsModEngine* pGFE = GFP_PMA(pGF);
int elemLen = GFP_FELEN(pGFE);
mod_neg negF = GFP_METHOD(pGFE)->neg;
BNU_CHUNK_T* pHy = cpGFpGetPool(1, pGFE);
BNU_CHUNK_T* pTdata = cpEcGFpGetPool(1, pEC); /* points from the pool */
BNU_CHUNK_T* pHdata = cpEcGFpGetPool(1, pEC);
int wvalue;
Ipp8u digit, sign;
int mask = (1<<(window_size+1)) -1;
int bit = scalarBitSize-(scalarBitSize%window_size);
/* first window */
if(bit) {
wvalue = *((Ipp16u*)&scalarA[(bit-1)/8]);
wvalue = (wvalue>> ((bit-1)%8)) & mask;
}
else
wvalue = 0;
booth_recode(&sign, &digit, (Ipp8u)wvalue, window_size);
gsScrambleGet_sscm(pTdata, pointLen, pTableA, digit-1, 5-1);
if(bit) {
wvalue = *((Ipp16u*)&scalarB[(bit-1)/8]);
wvalue = (wvalue>> ((bit-1)%8)) & mask;
}
else
wvalue = 0;
booth_recode(&sign, &digit, (Ipp8u)wvalue, window_size);
gsScrambleGet_sscm(pHdata, pointLen, pTableB, digit-1, 5-1);
gfec_point_add(pTdata, pTdata, pHdata, pEC);
for(bit-=window_size; bit>=window_size; bit-=window_size) {
gfec_point_double(pTdata, pTdata, pEC);
gfec_point_double(pTdata, pTdata, pEC);
gfec_point_double(pTdata, pTdata, pEC);
gfec_point_double(pTdata, pTdata, pEC);
gfec_point_double(pTdata, pTdata, pEC);
wvalue = *((Ipp16u*)&scalarA[(bit-1)/8]);
wvalue = (wvalue>> ((bit-1)%8)) & mask;
booth_recode(&sign, &digit, (Ipp8u)wvalue, window_size);
gsScrambleGet_sscm(pHdata, pointLen, pTableA, digit-1, 5-1);
negF(pHy, pHdata+elemLen, pGFE);
cpMaskedReplace_ct(pHdata+elemLen, pHy, elemLen, ~cpIsZero_ct(sign));
gfec_point_add(pTdata, pTdata, pHdata, pEC);
wvalue = *((Ipp16u*)&scalarB[(bit-1)/8]);
wvalue = (wvalue>> ((bit-1)%8)) & mask;
booth_recode(&sign, &digit, (Ipp8u)wvalue, window_size);
gsScrambleGet_sscm(pHdata, pointLen, pTableB, digit-1, 5-1);
negF(pHy, pHdata+elemLen, pGFE);
cpMaskedReplace_ct(pHdata+elemLen, pHy, elemLen, ~cpIsZero_ct(sign));
gfec_point_add(pTdata, pTdata, pHdata, pEC);
}
/* last window */
gfec_point_double(pTdata, pTdata, pEC);
gfec_point_double(pTdata, pTdata, pEC);
gfec_point_double(pTdata, pTdata, pEC);
gfec_point_double(pTdata, pTdata, pEC);
gfec_point_double(pTdata, pTdata, pEC);
wvalue = *((Ipp16u*)&scalarA[0]);
wvalue = (wvalue << 1) & mask;
booth_recode(&sign, &digit, (Ipp8u)wvalue, window_size);
gsScrambleGet_sscm(pHdata, pointLen, pTableA, digit-1, 5-1);
negF(pHy, pHdata+elemLen, pGFE);
cpMaskedReplace_ct(pHdata+elemLen, pHy, elemLen, ~cpIsZero_ct(sign));
gfec_point_add(pTdata, pTdata, pHdata, pEC);
wvalue = *((Ipp16u*)&scalarB[0]);
wvalue = (wvalue << 1) & mask;
booth_recode(&sign, &digit, (Ipp8u)wvalue, window_size);
gsScrambleGet_sscm(pHdata, pointLen, pTableB, digit-1, 5-1);
negF(pHy, pHdata+elemLen, pGFE);
cpMaskedReplace_ct(pHdata+elemLen, pHy, elemLen, ~cpIsZero_ct(sign));
gfec_point_add(pTdata, pTdata, pHdata, pEC);
cpGFpElementCopy(pointR, pTdata, pointLen);
cpEcGFpReleasePool(2, pEC);
cpGFpReleasePool(1, pGFE);
}
}