mirror of
https://github.com/emmansun/gmsm.git
synced 2025-10-14 07:10:45 +08:00
99 lines
2.4 KiB
ArmAsm
99 lines
2.4 KiB
ArmAsm
|
// Copyright 2024 The Go Authors. All rights reserved.
|
||
|
|
// Use of this source code is governed by a BSD-style
|
||
|
|
// license that can be found in the LICENSE file.
|
||
|
|
|
||
|
|
// derived from crypto/internal/fips140/bigmod/nat_riscv64.s
|
||
|
|
|
||
|
|
//go:build !purego
|
||
|
|
|
||
|
|
#include "textflag.h"
|
||
|
|
|
||
|
|
// func addMulVVW256(z, x *uint, y uint) (c uint)
|
||
|
|
TEXT ·addMulVVW256(SB),$0-32
|
||
|
|
MOVV $4, R8
|
||
|
|
JMP addMulVVWy(SB)
|
||
|
|
|
||
|
|
// func addMulVVW1024(z, x *uint, y uint) (c uint)
|
||
|
|
TEXT ·addMulVVW1024(SB),$0-32
|
||
|
|
MOVV $16, R8
|
||
|
|
JMP addMulVVWy(SB)
|
||
|
|
|
||
|
|
// func addMulVVW1536(z, x *uint, y uint) (c uint)
|
||
|
|
TEXT ·addMulVVW1536(SB),$0-32
|
||
|
|
MOVV $24, R8
|
||
|
|
JMP addMulVVWy(SB)
|
||
|
|
|
||
|
|
// func addMulVVW2048(z, x *uint, y uint) (c uint)
|
||
|
|
TEXT ·addMulVVW2048(SB),$0-32
|
||
|
|
MOVV $32, R8
|
||
|
|
JMP addMulVVWy(SB)
|
||
|
|
|
||
|
|
TEXT addMulVVWy(SB),NOFRAME|NOSPLIT,$0
|
||
|
|
MOVV z+0(FP), R4
|
||
|
|
MOVV x+8(FP), R6
|
||
|
|
MOVV y+16(FP), R5
|
||
|
|
MOVV $0, R7
|
||
|
|
|
||
|
|
BEQ R8, R0, done
|
||
|
|
loop:
|
||
|
|
MOVV 0*8(R4), R9 // z[0]
|
||
|
|
MOVV 1*8(R4), R10 // z[1]
|
||
|
|
MOVV 2*8(R4), R11 // z[2]
|
||
|
|
MOVV 3*8(R4), R12 // z[3]
|
||
|
|
|
||
|
|
MOVV 0*8(R6), R13 // x[0]
|
||
|
|
MOVV 1*8(R6), R14 // x[1]
|
||
|
|
MOVV 2*8(R6), R15 // x[2]
|
||
|
|
MOVV 3*8(R6), R16 // x[3]
|
||
|
|
|
||
|
|
MULHVU R13, R5, R17 // z_hi[0] = x[0] * y
|
||
|
|
MULV R13, R5, R13 // z_lo[0] = x[0] * y
|
||
|
|
ADDV R13, R9, R18 // z_lo[0] = x[0] * y + z[0]
|
||
|
|
SGTU R13, R18, R19
|
||
|
|
ADDV R17, R19, R17 // z_hi[0] = x[0] * y + z[0]
|
||
|
|
ADDV R18, R7, R9 // z_lo[0] = x[0] * y + z[0] + c
|
||
|
|
SGTU R18, R9, R19
|
||
|
|
ADDV R17, R19, R7 // next c
|
||
|
|
|
||
|
|
MULHVU R14, R5, R24 // z_hi[1] = x[1] * y
|
||
|
|
MULV R14, R5, R14 // z_lo[1] = x[1] * y
|
||
|
|
ADDV R14, R10, R18 // z_lo[1] = x[1] * y + z[1]
|
||
|
|
SGTU R14, R18, R19
|
||
|
|
ADDV R24, R19, R24 // z_hi[1] = x[1] * y + z[1]
|
||
|
|
ADDV R18, R7, R10 // z_lo[1] = x[1] * y + z[1] + c
|
||
|
|
SGTU R18, R10, R19
|
||
|
|
ADDV R24, R19, R7 // next c
|
||
|
|
|
||
|
|
MULHVU R15, R5, R25 // z_hi[2] = x[2] * y
|
||
|
|
MULV R15, R5, R15 // z_lo[2] = x[2] * y
|
||
|
|
ADDV R15, R11, R18 // z_lo[2] = x[2] * y + z[2]
|
||
|
|
SGTU R15, R18, R19
|
||
|
|
ADDV R25, R19, R25 // z_hi[2] = x[2] * y + z[2]
|
||
|
|
ADDV R18, R7, R11 // z_lo[2] = x[2] * y + z[2] + c
|
||
|
|
SGTU R18, R11, R19
|
||
|
|
ADDV R25, R19, R7 // next c
|
||
|
|
|
||
|
|
MULHVU R16, R5, R26 // z_hi[3] = x[3] * y
|
||
|
|
MULV R16, R5, R16 // z_lo[3] = x[3] * y
|
||
|
|
ADDV R16, R12, R18 // z_lo[3] = x[3] * y + z[3]
|
||
|
|
SGTU R16, R18, R19
|
||
|
|
ADDV R26, R19, R26 // z_hi[3] = x[3] * y + z[3]
|
||
|
|
ADDV R18, R7, R12 // z_lo[3] = x[3] * y + z[3] + c
|
||
|
|
SGTU R18, R12, R19
|
||
|
|
ADDV R26, R19, R7 // next c
|
||
|
|
|
||
|
|
MOVV R9, 0*8(R4) // z[0]
|
||
|
|
MOVV R10, 1*8(R4) // z[1]
|
||
|
|
MOVV R11, 2*8(R4) // z[2]
|
||
|
|
MOVV R12, 3*8(R4) // z[3]
|
||
|
|
|
||
|
|
ADDV $32, R4
|
||
|
|
ADDV $32, R6
|
||
|
|
|
||
|
|
SUBV $4, R8
|
||
|
|
BNE R8, R0, loop
|
||
|
|
|
||
|
|
done:
|
||
|
|
MOVV R7, c+24(FP)
|
||
|
|
RET
|