Line | Count | Source (jump to first uncovered line) |
1 | | /* mpn_sec_div_qr, mpn_sec_div_r -- Compute Q = floor(U / V), U = U mod V. |
2 | | Side-channel silent under the assumption that the used instructions are |
3 | | side-channel silent. |
4 | | |
5 | | Contributed to the GNU project by Torbjörn Granlund. |
6 | | |
7 | | Copyright 2011-2015 Free Software Foundation, Inc. |
8 | | |
9 | | This file is part of the GNU MP Library. |
10 | | |
11 | | The GNU MP Library is free software; you can redistribute it and/or modify |
12 | | it under the terms of either: |
13 | | |
14 | | * the GNU Lesser General Public License as published by the Free |
15 | | Software Foundation; either version 3 of the License, or (at your |
16 | | option) any later version. |
17 | | |
18 | | or |
19 | | |
20 | | * the GNU General Public License as published by the Free Software |
21 | | Foundation; either version 2 of the License, or (at your option) any |
22 | | later version. |
23 | | |
24 | | or both in parallel, as here. |
25 | | |
26 | | The GNU MP Library is distributed in the hope that it will be useful, but |
27 | | WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY |
28 | | or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License |
29 | | for more details. |
30 | | |
31 | | You should have received copies of the GNU General Public License and the |
32 | | GNU Lesser General Public License along with the GNU MP Library. If not, |
33 | | see https://www.gnu.org/licenses/. */ |
34 | | |
35 | | #include "gmp-impl.h" |
36 | | #include "longlong.h" |
37 | | |
38 | | #if OPERATION_sec_div_qr |
39 | | #define FNAME mpn_sec_div_qr |
40 | | #define FNAME_itch mpn_sec_div_qr_itch |
41 | | #define Q(q) q, |
42 | | #define RETTYPE mp_limb_t |
43 | | #endif |
44 | | #if OPERATION_sec_div_r |
45 | | #define FNAME mpn_sec_div_r |
46 | | #define FNAME_itch mpn_sec_div_r_itch |
47 | | #define Q(q) |
48 | | #define RETTYPE void |
49 | | #endif |
50 | | |
51 | | mp_size_t |
52 | | FNAME_itch (mp_size_t nn, mp_size_t dn) |
53 | 0 | { |
54 | | #if OPERATION_sec_div_qr |
55 | | /* Needs (nn + dn + 1) + mpn_sec_pi1_div_qr's needs of (2nn' - dn + 1) for a |
56 | | total of 3nn + 4 limbs at tp. Note that mpn_sec_pi1_div_qr's nn is one |
57 | | greater than ours, therefore +4 and not just +2. */ |
58 | | return 3 * nn + 4; |
59 | | #endif |
60 | 0 | #if OPERATION_sec_div_r |
61 | | /* Needs (nn + dn + 1) + mpn_sec_pi1_div_r's needs of (dn + 1) for a total of |
62 | | nn + 2dn + 2 limbs at tp. */ |
63 | 0 | return nn + 2 * dn + 2; |
64 | 0 | #endif |
65 | 0 | } |
66 | | |
67 | | RETTYPE |
68 | | FNAME (Q(mp_ptr qp) |
69 | | mp_ptr np, mp_size_t nn, |
70 | | mp_srcptr dp, mp_size_t dn, |
71 | | mp_ptr tp) |
72 | 0 | { |
73 | 0 | mp_limb_t d1, d0; |
74 | 0 | unsigned int cnt; |
75 | 0 | mp_limb_t inv32; |
76 | |
|
77 | 0 | ASSERT (dn >= 1); |
78 | 0 | ASSERT (nn >= dn); |
79 | 0 | ASSERT (dp[dn - 1] != 0); |
80 | |
|
81 | 0 | d1 = dp[dn - 1]; |
82 | 0 | count_leading_zeros (cnt, d1); |
83 | |
|
84 | 0 | if (cnt != 0) |
85 | 0 | { |
86 | 0 | mp_limb_t qh, cy; |
87 | 0 | mp_ptr np2, dp2; |
88 | 0 | dp2 = tp; /* dn limbs */ |
89 | 0 | mpn_lshift (dp2, dp, dn, cnt); |
90 | |
|
91 | 0 | np2 = tp + dn; /* (nn + 1) limbs */ |
92 | 0 | cy = mpn_lshift (np2, np, nn, cnt); |
93 | 0 | np2[nn++] = cy; |
94 | |
|
95 | 0 | d0 = dp2[dn - 1]; |
96 | 0 | d0 += (~d0 != 0); |
97 | 0 | invert_limb (inv32, d0); |
98 | | |
99 | | /* We add nn + dn to tp here, not nn + 1 + dn, as expected. This is |
100 | | since nn here will have been incremented. */ |
101 | | #if OPERATION_sec_div_qr |
102 | | qh = mpn_sec_pi1_div_qr (np2 + dn, np2, nn, dp2, dn, inv32, tp + nn + dn); |
103 | | ASSERT (qh == 0); /* FIXME: this indicates inefficiency! */ |
104 | | MPN_COPY (qp, np2 + dn, nn - dn - 1); |
105 | | qh = np2[nn - 1]; |
106 | | #else |
107 | 0 | mpn_sec_pi1_div_r (np2, nn, dp2, dn, inv32, tp + nn + dn); |
108 | 0 | #endif |
109 | |
|
110 | 0 | mpn_rshift (np, np2, dn, cnt); |
111 | |
|
112 | | #if OPERATION_sec_div_qr |
113 | | return qh; |
114 | | #endif |
115 | 0 | } |
116 | 0 | else |
117 | 0 | { |
118 | | /* FIXME: Consider copying np => np2 here, adding a 0-limb at the top. |
119 | | That would simplify the underlying pi1 function, since then it could |
120 | | assume nn > dn. */ |
121 | 0 | d0 = dp[dn - 1]; |
122 | 0 | d0 += (~d0 != 0); |
123 | 0 | invert_limb (inv32, d0); |
124 | |
|
125 | | #if OPERATION_sec_div_qr |
126 | | return mpn_sec_pi1_div_qr (qp, np, nn, dp, dn, inv32, tp); |
127 | | #else |
128 | 0 | mpn_sec_pi1_div_r (np, nn, dp, dn, inv32, tp); |
129 | 0 | #endif |
130 | 0 | } |
131 | 0 | } |