Coverage Report

Created: 2023-02-22 06:14

/src/nettle-with-mini-gmp/gmp-glue.c
Line
Count
Source (jump to first uncovered line)
1
/* gmp-glue.c
2
3
   Copyright (C) 2013 Niels Möller
4
   Copyright (C) 2013 Red Hat
5
6
   This file is part of GNU Nettle.
7
8
   GNU Nettle is free software: you can redistribute it and/or
9
   modify it under the terms of either:
10
11
     * the GNU Lesser General Public License as published by the Free
12
       Software Foundation; either version 3 of the License, or (at your
13
       option) any later version.
14
15
   or
16
17
     * the GNU General Public License as published by the Free
18
       Software Foundation; either version 2 of the License, or (at your
19
       option) any later version.
20
21
   or both in parallel, as here.
22
23
   GNU Nettle is distributed in the hope that it will be useful,
24
   but WITHOUT ANY WARRANTY; without even the implied warranty of
25
   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
26
   General Public License for more details.
27
28
   You should have received copies of the GNU General Public License and
29
   the GNU Lesser General Public License along with this program.  If
30
   not, see http://www.gnu.org/licenses/.
31
*/
32
33
#if HAVE_CONFIG_H
34
# include "config.h"
35
#endif
36
37
#include <assert.h>
38
#include <stdlib.h>
39
40
#include "gmp-glue.h"
41
42
#if NETTLE_USE_MINI_GMP
43
mp_limb_t
44
mpn_cnd_add_n (mp_limb_t cnd, mp_limb_t *rp,
45
         const mp_limb_t *ap, const mp_limb_t *bp, mp_size_t n)
46
5.24M
{
47
5.24M
  mp_limb_t cy, mask;
48
5.24M
  mp_size_t  i;
49
50
5.24M
  mask = -(mp_limb_t) (cnd != 0);
51
52
38.5M
  for (i = 0, cy = 0; i < n; i++)
53
33.3M
    {
54
33.3M
      mp_limb_t rl = ap[i] + cy;
55
33.3M
      mp_limb_t bl = bp[i] & mask;
56
33.3M
      cy = (rl < cy);
57
33.3M
      rl += bl;
58
33.3M
      cy += (rl < bl);
59
33.3M
      rp[i] = rl;
60
33.3M
    }
61
5.24M
  return cy;
62
5.24M
}
63
64
mp_limb_t
65
mpn_cnd_sub_n (mp_limb_t cnd, mp_limb_t *rp,
66
         const mp_limb_t *ap, const mp_limb_t *bp, mp_size_t n)
67
6.69M
{
68
6.69M
  mp_limb_t cy, mask;
69
6.69M
  mp_size_t  i;
70
71
6.69M
  mask = -(mp_limb_t) (cnd != 0);
72
73
48.4M
  for (i = 0, cy = 0; i < n; i++)
74
41.7M
    {
75
41.7M
      mp_limb_t al = ap[i];
76
41.7M
      mp_limb_t bl = bp[i] & mask;
77
41.7M
      mp_limb_t sl;
78
41.7M
      sl = al - cy;
79
41.7M
      cy = (al < cy) + (sl < bl);
80
41.7M
      sl -= bl;
81
41.7M
      rp[i] = sl;
82
41.7M
    }
83
6.69M
  return cy;
84
6.69M
}
85
86
void
87
mpn_cnd_swap (mp_limb_t cnd, volatile mp_limb_t *ap, volatile mp_limb_t *bp, mp_size_t n)
88
941k
{
89
941k
  volatile mp_limb_t mask = - (mp_limb_t) (cnd != 0);
90
941k
  mp_size_t i;
91
7.14M
  for (i = 0; i < n; i++)
92
6.20M
    {
93
6.20M
      mp_limb_t a, b, t;
94
6.20M
      a = ap[i];
95
6.20M
      b = bp[i];
96
6.20M
      t = (a ^ b) & mask;
97
6.20M
      ap[i] = a ^ t;
98
6.20M
      bp[i] = b ^ t;
99
6.20M
    }
100
941k
}
101
102
/* Copy the k'th element of the table out tn elements, each of size
103
   rn. Always read complete table. Similar to gmp's mpn_tabselect. */
104
void
105
mpn_sec_tabselect (volatile mp_limb_t *rp, volatile const mp_limb_t *table,
106
       mp_size_t rn, unsigned tn, unsigned k)
107
169k
{
108
169k
  volatile const mp_limb_t *end = table + tn * rn;
109
169k
  volatile const mp_limb_t *p;
110
169k
  mp_size_t i;
111
112
169k
  assert (k < tn);
113
9.12M
  for (p = table; p < end; p += rn, k--)
114
8.95M
    {
115
8.95M
      mp_limb_t mask = - (mp_limb_t) (k == 0);
116
119M
      for (i = 0; i < rn; i++)
117
110M
  rp[i] = (~mask & rp[i]) | (mask & p[i]);
118
8.95M
    }
119
169k
}
120
121
122
#endif /* NETTLE_USE_MINI_GMP */
123
124
int
125
sec_zero_p (const mp_limb_t *ap, mp_size_t n)
126
1.09k
{
127
1.09k
  volatile mp_limb_t w;
128
1.09k
  mp_size_t i;
129
130
6.16k
  for (i = 0, w = 0; i < n; i++)
131
5.07k
    w |= ap[i];
132
133
1.09k
  return w == 0;
134
1.09k
}
135
136
/* Additional convenience functions. */
137
138
void
139
mpz_limbs_copy (mp_limb_t *xp, mpz_srcptr x, mp_size_t n)
140
3.30k
{
141
3.30k
  mp_size_t xn = mpz_size (x);
142
143
3.30k
  assert (xn <= n);
144
3.30k
  mpn_copyi (xp, mpz_limbs_read (x), xn);
145
3.30k
  if (xn < n)
146
637
    mpn_zero (xp + xn, n - xn);
147
3.30k
}
148
149
void
150
mpz_set_n (mpz_t r, const mp_limb_t *xp, mp_size_t xn)
151
2.50k
{
152
2.50k
  mpn_copyi (mpz_limbs_write (r, xn), xp, xn);
153
2.50k
  mpz_limbs_finish (r, xn);
154
2.50k
}
155
156
void
157
mpn_set_base256 (mp_limb_t *rp, mp_size_t rn,
158
     const uint8_t *xp, size_t xn)
159
2.15k
{
160
2.15k
  size_t xi;
161
2.15k
  mp_limb_t out;
162
2.15k
  unsigned bits;
163
59.2k
  for (xi = xn, out = bits = 0; xi > 0 && rn > 0; )
164
57.1k
    {
165
57.1k
      mp_limb_t in = xp[--xi];
166
57.1k
      out |= (in << bits) & GMP_NUMB_MASK;
167
57.1k
      bits += 8;
168
57.1k
      if (bits >= GMP_NUMB_BITS)
169
6.59k
  {
170
6.59k
    *rp++ = out;
171
6.59k
    rn--;
172
173
6.59k
    bits -= GMP_NUMB_BITS;
174
6.59k
    out = in >> (8 - bits);
175
6.59k
  }
176
57.1k
    }
177
2.15k
  if (rn > 0)
178
1.23k
    {
179
1.23k
      *rp++ = out;
180
1.23k
      if (--rn > 0)
181
840
  mpn_zero (rp, rn);
182
1.23k
    }
183
2.15k
}
184
185
void
186
mpn_set_base256_le (mp_limb_t *rp, mp_size_t rn,
187
        const uint8_t *xp, size_t xn)
188
176
{
189
176
  size_t xi;
190
176
  mp_limb_t out;
191
176
  unsigned bits;
192
6.62k
  for (xi = 0, out = bits = 0; xi < xn && rn > 0; )
193
6.44k
    {
194
6.44k
      mp_limb_t in = xp[xi++];
195
6.44k
      out |= (in << bits) & GMP_NUMB_MASK;
196
6.44k
      bits += 8;
197
6.44k
      if (bits >= GMP_NUMB_BITS)
198
806
  {
199
806
    *rp++ = out;
200
806
    rn--;
201
202
806
    bits -= GMP_NUMB_BITS;
203
806
    out = in >> (8 - bits);
204
806
  }
205
6.44k
    }
206
176
  if (rn > 0)
207
0
    {
208
0
      *rp++ = out;
209
0
      if (--rn > 0)
210
0
  mpn_zero (rp, rn);
211
0
    }
212
176
}
213
214
void
215
mpn_get_base256 (uint8_t *rp, size_t rn,
216
     const mp_limb_t *xp, mp_size_t xn)
217
0
{
218
0
  unsigned bits;
219
0
  mp_limb_t in;
220
0
  for (bits = in = 0; xn > 0 && rn > 0; )
221
0
    {
222
0
      if (bits >= 8)
223
0
  {
224
0
    rp[--rn] = in;
225
0
    in >>= 8;
226
0
    bits -= 8;
227
0
  }
228
0
      else
229
0
  {
230
0
    uint8_t old = in;
231
0
    in = *xp++;
232
0
    xn--;
233
0
    rp[--rn] = old | (in << bits);
234
0
    in >>= (8 - bits);
235
0
    bits += GMP_NUMB_BITS - 8;
236
0
  }
237
0
    }
238
0
  while (rn > 0)
239
0
    {
240
0
      rp[--rn] = in;
241
0
      in >>= 8;
242
0
    }
243
0
}
244
245
void
246
mpn_get_base256_le (uint8_t *rp, size_t rn,
247
        const mp_limb_t *xp, mp_size_t xn)
248
176
{
249
176
  unsigned bits;
250
176
  mp_limb_t in;
251
5.39k
  for (bits = in = 0; xn > 0 && rn > 0; )
252
5.21k
    {
253
5.21k
      if (bits >= 8)
254
4.41k
  {
255
4.41k
    *rp++ = in;
256
4.41k
    rn--;
257
4.41k
    in >>= 8;
258
4.41k
    bits -= 8;
259
4.41k
  }
260
806
      else
261
806
  {
262
806
    uint8_t old = in;
263
806
    in = *xp++;
264
806
    xn--;
265
806
    *rp++ = old | (in << bits);
266
806
    rn--;
267
806
    in >>= (8 - bits);
268
806
    bits += GMP_NUMB_BITS - 8;
269
806
  }
270
5.21k
    }
271
1.40k
  while (rn > 0)
272
1.23k
    {
273
1.23k
      *rp++ = in;
274
1.23k
      rn--;
275
1.23k
      in >>= 8;
276
1.23k
    }
277
176
}
278
279
mp_limb_t *
280
gmp_alloc_limbs (mp_size_t n)
281
5.84k
{
282
283
5.84k
  void *(*alloc_func)(size_t);
284
285
5.84k
  assert (n > 0);
286
287
5.84k
  mp_get_memory_functions (&alloc_func, NULL, NULL);
288
5.84k
  return (mp_limb_t *) alloc_func ( (size_t) n * sizeof(mp_limb_t));
289
5.84k
}
290
291
void
292
gmp_free_limbs (mp_limb_t *p, mp_size_t n)
293
5.84k
{
294
5.84k
  void (*free_func)(void *, size_t);
295
5.84k
  assert (n > 0);
296
5.84k
  assert (p != 0);
297
5.84k
  mp_get_memory_functions (NULL, NULL, &free_func);
298
299
5.84k
  free_func (p, (size_t) n * sizeof(mp_limb_t));
300
5.84k
}
301
302
void *
303
gmp_alloc(size_t n)
304
0
{
305
0
  void *(*alloc_func)(size_t);
306
0
  assert (n > 0);
307
308
0
  mp_get_memory_functions(&alloc_func, NULL, NULL);
309
310
0
  return alloc_func (n);
311
0
}
312
313
void
314
gmp_free(void *p, size_t n)
315
0
{
316
0
  void (*free_func)(void *, size_t);
317
0
  assert (n > 0);
318
0
  assert (p != 0);
319
0
  mp_get_memory_functions (NULL, NULL, &free_func);
320
321
0
  free_func (p, (size_t) n);
322
0
}