_ZN5Botan11ASN1_ObjectD2Ev: 114| 278k| virtual ~ASN1_Object() = default; _ZN5Botan10BER_ObjectC2Ev: 122| 303k| BER_Object() : m_type_tag(ASN1_Type::NoObject), m_class_tag(ASN1_Class::Universal) {} _ZNK5Botan10BER_Object6is_setEv: 132| 444k| bool is_set() const { return m_type_tag != ASN1_Type::NoObject; } _ZNK5Botan10BER_Object7taggingEv: 134| 226k| uint32_t tagging() const { return type_tag() | class_tag(); } _ZNK5Botan10BER_Object8type_tagEv: 136| 226k| ASN1_Type type_tag() const { return m_type_tag; } _ZNK5Botan10BER_Object9class_tagEv: 138| 226k| ASN1_Class class_tag() const { return m_class_tag; } _ZNK5Botan10BER_Object4typeEv: 140| 9.08k| ASN1_Type type() const { return m_type_tag; } _ZNK5Botan10BER_Object9get_classEv: 142| 98| ASN1_Class get_class() const { return m_class_tag; } _ZNK5Botan10BER_Object4bitsEv: 144| 2.89M| const uint8_t* bits() const { return m_value.data(); } _ZNK5Botan10BER_Object6lengthEv: 146| 6.11M| size_t length() const { return m_value.size(); } _ZN5Botan10BER_Object12mutable_bitsEm: 163| 198k| uint8_t* mutable_bits(size_t length) { 164| 198k| m_value.resize(length); 165| 198k| return m_value.data(); 166| 198k| } _ZN5Botan3OIDC2Ev: 212| 30.4k| explicit OID() {} _ZN5Botan3OIDC2ESt16initializer_listIjE: 223| 251| explicit OID(std::initializer_list init) : m_id(init) { 224| 251| BOTAN_ARG_CHECK(m_id.size() > 2 && m_id[0] <= 2 && (m_id[0] != 2 || m_id[1] <= 39), "Invalid OID"); ------------------ | | 30| 251| do { \ | | 31| 1.32k| if(!(expr)) \ | | ------------------ | | | Branch (31:12): [True: 251, False: 0] | | | Branch (31:12): [True: 251, False: 0] | | | Branch (31:12): [True: 178, False: 73] | | | Branch (31:12): [True: 73, False: 0] | | ------------------ | | 32| 251| Botan::throw_invalid_argument(msg, __func__, __FILE__); \ | | 33| 251| } while(0) | | ------------------ | | | Branch (33:12): [Folded - Ignored] | | ------------------ ------------------ 225| 251| } _ZNK5Botan3OID9has_valueEv: 265| 209| bool has_value() const { return (m_id.empty() == false); } _ZNK5Botan3OID14get_componentsEv: 271| 139k| const std::vector& get_components() const { return m_id; } _ZNK5Botan3OIDeqERKS0_: 303| 111k| bool operator==(const OID& other) const { return m_id == other.m_id; } _ZNK5Botan11ASN1_String5valueEv: 407| 542| const std::string& value() const { return m_utf8_str; } _ZNK5Botan11ASN1_String5emptyEv: 411| 944| bool empty() const { return m_utf8_str.empty(); } _ZNK5Botan19AlgorithmIdentifier3oidEv: 447| 10.0k| const OID& oid() const { return m_oid; } _ZNK5Botan19AlgorithmIdentifier10parametersEv: 449| 2.24k| const std::vector& parameters() const { return m_parameters; } _ZNK5Botan19AlgorithmIdentifier20parameters_are_emptyEv: 461| 4.82k| bool parameters_are_empty() const { return m_parameters.empty(); } _ZNK5Botan19AlgorithmIdentifier28parameters_are_null_or_emptyEv: 463| 4.82k| bool parameters_are_null_or_empty() const { return parameters_are_empty() || parameters_are_null(); } ------------------ | Branch (463:58): [True: 84, False: 4.73k] | Branch (463:84): [True: 4.70k, False: 28] ------------------ _ZN5BotanorENS_10ASN1_ClassES0_: 76| 105k|inline ASN1_Class operator|(ASN1_Class x, ASN1_Class y) { 77| 105k| return static_cast(static_cast(x) | static_cast(y)); 78| 105k|} _ZN5BotanorENS_9ASN1_TypeENS_10ASN1_ClassE: 80| 226k|inline uint32_t operator|(ASN1_Type x, ASN1_Class y) { return static_cast(x) | static_cast(y); } _ZN5BotanorENS_10ASN1_ClassENS_9ASN1_TypeE: 82| 27.4k|inline uint32_t operator|(ASN1_Class x, ASN1_Type y) { return static_cast(x) | static_cast(y); } _ZN5BotanneERKNS_3OIDES2_: 320| 5.65k|inline bool operator!=(const OID& a, const OID& b) { return !(a == b); } _ZN5Botan11ASN1_ObjectC2ERKS0_: 112| 55.4k| ASN1_Object(const ASN1_Object&) = default; _ZN5Botan9ASN1_TimeC2Ev: 354| 9.29k| ASN1_Time() = default; _ZN5Botan11ASN1_ObjectC2Ev: 111| 222k| ASN1_Object() = default; _ZN5Botan19AlgorithmIdentifierC2Ev: 439| 14.7k| AlgorithmIdentifier() = default; _ZN5Botan11ASN1_ObjectaSERKS0_: 113| 1.87k| ASN1_Object& operator=(const ASN1_Object&) = default; _ZN5Botan10BER_ObjectaSEOS0_: 130| 61.9k| BER_Object& operator=(BER_Object&& other) = default; _ZN5Botan10BER_ObjectC2EOS0_: 128| 90.8k| BER_Object(BER_Object&& other) = default; _ZN5Botan10BER_ObjectaSERKS0_: 126| 2.12k| BER_Object& operator=(const BER_Object& other) = default; _ZN5Botan12ignore_paramIRmEEvOT_: 111| 49.7k|void ignore_param(T&&) {} _ZN5Botan13ignore_paramsIJRhEEEvDpOT_: 114| 1.19k|void ignore_params(T&&... args) { 115| 1.19k| (ignore_param(args), ...); 116| 1.19k|} _ZN5Botan12ignore_paramIRhEEvOT_: 111| 1.19k|void ignore_param(T&&) {} _ZN5Botan13ignore_paramsIJRmEEEvDpOT_: 114| 49.7k|void ignore_params(T&&... args) { 115| 49.7k| (ignore_param(args), ...); 116| 49.7k|} _ZN5Botan13ignore_paramsIJRKmEEEvDpOT_: 114| 13.9k|void ignore_params(T&&... args) { 115| 13.9k| (ignore_param(args), ...); 116| 13.9k|} _ZN5Botan12ignore_paramIRKmEEvOT_: 111| 13.9k|void ignore_param(T&&) {} _ZN5Botan11BER_Decoder14start_sequenceEv: 112| 63.1k| BER_Decoder start_sequence() { return start_cons(ASN1_Type::Sequence, ASN1_Class::Universal); } _ZN5Botan11BER_Decoder22start_context_specificEj: 116| 4.58k| BER_Decoder start_context_specific(uint32_t tag) { 117| 4.58k| return start_cons(ASN1_Type(tag), ASN1_Class::ContextSpecific); 118| 4.58k| } _ZN5Botan11BER_Decoder21get_next_octet_stringEv: 185| 3.06k| std::vector get_next_octet_string() { 186| 3.06k| std::vector out_vec; 187| 3.06k| decode(out_vec, ASN1_Type::OctetString); 188| 3.06k| return out_vec; 189| 3.06k| } _ZN5Botan11BER_DecoderC2ERKNS_10BER_ObjectE: 51| 4.10k| BER_Decoder(const BER_Object& obj) : BER_Decoder(obj.bits(), obj.length()) {} _ZN5Botan11BER_Decoder6decodeINSt3__19allocatorIhEEEERS0_RNS2_6vectorIhT_EENS_9ASN1_TypeE: 195| 23.2k| BER_Decoder& decode(std::vector& out, ASN1_Type real_type) { 196| 23.2k| return decode(out, real_type, real_type, ASN1_Class::Universal); 197| 23.2k| } _ZN5Botan11BER_Decoder16decode_and_checkINS_3OIDEEERS0_RKT_NSt3__117basic_string_viewIcNS7_11char_traitsIcEEEE: 254| 3.25k| BER_Decoder& decode_and_check(const T& expected, std::string_view error_msg) { 255| 3.25k| T actual; 256| 3.25k| decode(actual); 257| | 258| 3.25k| if(actual != expected) ------------------ | Branch (258:13): [True: 83, False: 3.17k] ------------------ 259| 83| throw Decoding_Error(error_msg); 260| | 261| 3.17k| return (*this); 262| 3.25k| } _ZN5Botan11BER_Decoder9raw_bytesINSt3__19allocatorIhEEEERS0_RNS2_6vectorIhT_EE: 160| 23.7k| BER_Decoder& raw_bytes(std::vector& out) { 161| 23.7k| out.clear(); 162| 23.7k| uint8_t buf; 163| 2.36M| while(m_source->read_byte(buf)) ------------------ | Branch (163:16): [True: 2.33M, False: 23.7k] ------------------ 164| 2.33M| out.push_back(buf); 165| 23.7k| return (*this); 166| 23.7k| } _ZN5Botan11BER_Decoder15decode_optionalImEERS0_RT_NS_9ASN1_TypeENS_10ASN1_ClassERKS3_: 313| 4.89k|BER_Decoder& BER_Decoder::decode_optional(T& out, ASN1_Type type_tag, ASN1_Class class_tag, const T& default_value) { 314| 4.89k| BER_Object obj = get_next_object(); 315| | 316| 4.89k| if(obj.is_a(type_tag, class_tag)) { ------------------ | Branch (316:7): [True: 2.47k, False: 2.42k] ------------------ 317| 2.47k| if(class_tag == ASN1_Class::ExplicitContextSpecific) { ------------------ | Branch (317:10): [True: 2.43k, False: 36] ------------------ 318| 2.43k| BER_Decoder(std::move(obj)).decode(out).verify_end(); 319| 2.43k| } else { 320| 36| push_back(std::move(obj)); 321| 36| decode(out, type_tag, class_tag); 322| 36| } 323| 2.47k| } else { 324| 2.42k| out = default_value; 325| 2.42k| push_back(std::move(obj)); 326| 2.42k| } 327| | 328| 4.89k| return (*this); 329| 4.89k|} _ZN5Botan11BER_DecoderC2EONS_10BER_ObjectE: 56| 3.44k| BER_Decoder(BER_Object&& obj) : BER_Decoder(std::move(obj), nullptr) {} _ZN5Botan11BER_Decoder6decodeERm: 178| 2.56k| BER_Decoder& decode(size_t& out) { return decode(out, ASN1_Type::Integer, ASN1_Class::Universal); } _ZN5Botan11BER_Decoder15decode_optionalINS_7X509_DNEEERS0_RT_NS_9ASN1_TypeENS_10ASN1_ClassERKS4_: 313| 1.80k|BER_Decoder& BER_Decoder::decode_optional(T& out, ASN1_Type type_tag, ASN1_Class class_tag, const T& default_value) { 314| 1.80k| BER_Object obj = get_next_object(); 315| | 316| 1.80k| if(obj.is_a(type_tag, class_tag)) { ------------------ | Branch (316:7): [True: 164, False: 1.64k] ------------------ 317| 164| if(class_tag == ASN1_Class::ExplicitContextSpecific) { ------------------ | Branch (317:10): [True: 164, False: 0] ------------------ 318| 164| BER_Decoder(std::move(obj)).decode(out).verify_end(); 319| 164| } else { 320| 0| push_back(std::move(obj)); 321| 0| decode(out, type_tag, class_tag); 322| 0| } 323| 1.64k| } else { 324| 1.64k| out = default_value; 325| 1.64k| push_back(std::move(obj)); 326| 1.64k| } 327| | 328| 1.80k| return (*this); 329| 1.80k|} _ZN5Botan11BER_Decoder22decode_optional_stringINSt3__19allocatorIhEEEERS0_RNS2_6vectorIhT_EENS_9ASN1_TypeEjNS_10ASN1_ClassE: 271| 6.75k| ASN1_Class class_tag = ASN1_Class::ContextSpecific) { 272| 6.75k| BER_Object obj = get_next_object(); 273| | 274| 6.75k| ASN1_Type type_tag = static_cast(expected_tag); 275| | 276| 6.75k| if(obj.is_a(type_tag, class_tag)) { ------------------ | Branch (276:13): [True: 75, False: 6.67k] ------------------ 277| 75| if(class_tag == ASN1_Class::ExplicitContextSpecific) { ------------------ | Branch (277:16): [True: 62, False: 13] ------------------ 278| 62| BER_Decoder(std::move(obj)).decode(out, real_type).verify_end(); 279| 62| } else { 280| 13| push_back(std::move(obj)); 281| 13| decode(out, real_type, type_tag, class_tag); 282| 13| } 283| 6.67k| } else { 284| 6.67k| out.clear(); 285| 6.67k| push_back(std::move(obj)); 286| 6.67k| } 287| | 288| 6.75k| return (*this); 289| 6.75k| } _ZN5Botan11BER_Decoder11decode_listINS_4OCSP14SingleResponseEEERS0_RNSt3__16vectorIT_NS5_9allocatorIS7_EEEENS_9ASN1_TypeENS_10ASN1_ClassE: 360| 811|BER_Decoder& BER_Decoder::decode_list(std::vector& vec, ASN1_Type type_tag, ASN1_Class class_tag) { 361| 811| BER_Decoder list = start_cons(type_tag, class_tag); 362| | 363| 825| while(list.more_items()) { ------------------ | Branch (363:10): [True: 14, False: 811] ------------------ 364| 14| T value; 365| 14| list.decode(value); 366| 14| vec.push_back(std::move(value)); 367| 14| } 368| | 369| 811| list.end_cons(); 370| | 371| 811| return (*this); 372| 811|} _ZN5Botan11BER_Decoder15decode_optionalINS_10ExtensionsEEERS0_RT_NS_9ASN1_TypeENS_10ASN1_ClassERKS4_: 313| 803|BER_Decoder& BER_Decoder::decode_optional(T& out, ASN1_Type type_tag, ASN1_Class class_tag, const T& default_value) { 314| 803| BER_Object obj = get_next_object(); 315| | 316| 803| if(obj.is_a(type_tag, class_tag)) { ------------------ | Branch (316:7): [True: 785, False: 18] ------------------ 317| 785| if(class_tag == ASN1_Class::ExplicitContextSpecific) { ------------------ | Branch (317:10): [True: 785, False: 0] ------------------ 318| 785| BER_Decoder(std::move(obj)).decode(out).verify_end(); 319| 785| } else { 320| 0| push_back(std::move(obj)); 321| 0| decode(out, type_tag, class_tag); 322| 0| } 323| 785| } else { 324| 18| out = default_value; 325| 18| push_back(std::move(obj)); 326| 18| } 327| | 328| 803| return (*this); 329| 803|} _ZN5Botan11BER_DecoderC2ENSt3__14spanIKhLm18446744073709551615EEE: 31| 1.34k| BER_Decoder(std::span buf) : BER_Decoder(buf.data(), buf.size()) {} _ZN5Botan11BER_Decoder8get_nextERNS_10BER_ObjectE: 68| 4.89k| BER_Decoder& get_next(BER_Object& ber) { 69| 4.89k| ber = get_next_object(); 70| 4.89k| return (*this); 71| 4.89k| } _ZN5Botan11BER_Decoder9start_setEv: 114| 1.31k| BER_Decoder start_set() { return start_cons(ASN1_Type::Set, ASN1_Class::Universal); } _ZN5Botan11BER_Decoder6decodeERNS_6BigIntE: 183| 5.06k| BER_Decoder& decode(BigInt& out) { return decode(out, ASN1_Type::Integer, ASN1_Class::Universal); } _ZN5Botan11BER_Decoder15decode_optionalINS_9ASN1_TimeEEERS0_RT_NS_9ASN1_TypeENS_10ASN1_ClassERKS4_: 313| 9|BER_Decoder& BER_Decoder::decode_optional(T& out, ASN1_Type type_tag, ASN1_Class class_tag, const T& default_value) { 314| 9| BER_Object obj = get_next_object(); 315| | 316| 9| if(obj.is_a(type_tag, class_tag)) { ------------------ | Branch (316:7): [True: 2, False: 7] ------------------ 317| 2| if(class_tag == ASN1_Class::ExplicitContextSpecific) { ------------------ | Branch (317:10): [True: 2, False: 0] ------------------ 318| 2| BER_Decoder(std::move(obj)).decode(out).verify_end(); 319| 2| } else { 320| 0| push_back(std::move(obj)); 321| 0| decode(out, type_tag, class_tag); 322| 0| } 323| 7| } else { 324| 7| out = default_value; 325| 7| push_back(std::move(obj)); 326| 7| } 327| | 328| 9| return (*this); 329| 9|} _ZN5Botan11BER_Decoder15decode_optionalIbEERS0_RT_NS_9ASN1_TypeENS_10ASN1_ClassERKS3_: 313| 10.1k|BER_Decoder& BER_Decoder::decode_optional(T& out, ASN1_Type type_tag, ASN1_Class class_tag, const T& default_value) { 314| 10.1k| BER_Object obj = get_next_object(); 315| | 316| 10.1k| if(obj.is_a(type_tag, class_tag)) { ------------------ | Branch (316:7): [True: 528, False: 9.64k] ------------------ 317| 528| if(class_tag == ASN1_Class::ExplicitContextSpecific) { ------------------ | Branch (317:10): [True: 0, False: 528] ------------------ 318| 0| BER_Decoder(std::move(obj)).decode(out).verify_end(); 319| 528| } else { 320| 528| push_back(std::move(obj)); 321| 528| decode(out, type_tag, class_tag); 322| 528| } 323| 9.64k| } else { 324| 9.64k| out = default_value; 325| 9.64k| push_back(std::move(obj)); 326| 9.64k| } 327| | 328| 10.1k| return (*this); 329| 10.1k|} _ZN5Botan11BER_Decoder11decode_listINS_3OIDEEERS0_RNSt3__16vectorIT_NS4_9allocatorIS6_EEEENS_9ASN1_TypeENS_10ASN1_ClassE: 360| 77|BER_Decoder& BER_Decoder::decode_list(std::vector& vec, ASN1_Type type_tag, ASN1_Class class_tag) { 361| 77| BER_Decoder list = start_cons(type_tag, class_tag); 362| | 363| 227| while(list.more_items()) { ------------------ | Branch (363:10): [True: 150, False: 77] ------------------ 364| 150| T value; 365| 150| list.decode(value); 366| 150| vec.push_back(std::move(value)); 367| 150| } 368| | 369| 77| list.end_cons(); 370| | 371| 77| return (*this); 372| 77|} _ZN5Botan11BER_Decoder11decode_listINS_14GeneralSubtreeEEERS0_RNSt3__16vectorIT_NS4_9allocatorIS6_EEEENS_9ASN1_TypeENS_10ASN1_ClassE: 360| 479|BER_Decoder& BER_Decoder::decode_list(std::vector& vec, ASN1_Type type_tag, ASN1_Class class_tag) { 361| 479| BER_Decoder list = start_cons(type_tag, class_tag); 362| | 363| 1.22k| while(list.more_items()) { ------------------ | Branch (363:10): [True: 750, False: 479] ------------------ 364| 750| T value; 365| 750| list.decode(value); 366| 750| vec.push_back(std::move(value)); 367| 750| } 368| | 369| 479| list.end_cons(); 370| | 371| 479| return (*this); 372| 479|} x509_ext.cpp:_ZN5Botan11BER_Decoder11decode_listINS_14Cert_Extension12_GLOBAL__N_118Policy_InformationEEERS0_RNSt3__16vectorIT_NS6_9allocatorIS8_EEEENS_9ASN1_TypeENS_10ASN1_ClassE: 360| 184|BER_Decoder& BER_Decoder::decode_list(std::vector& vec, ASN1_Type type_tag, ASN1_Class class_tag) { 361| 184| BER_Decoder list = start_cons(type_tag, class_tag); 362| | 363| 278| while(list.more_items()) { ------------------ | Branch (363:10): [True: 94, False: 184] ------------------ 364| 94| T value; 365| 94| list.decode(value); 366| 94| vec.push_back(std::move(value)); 367| 94| } 368| | 369| 184| list.end_cons(); 370| | 371| 184| return (*this); 372| 184|} _ZN5Botan11BER_Decoder11decode_listINS_14Cert_Extension23CRL_Distribution_Points18Distribution_PointEEERS0_RNSt3__16vectorIT_NS6_9allocatorIS8_EEEENS_9ASN1_TypeENS_10ASN1_ClassE: 360| 2.48k|BER_Decoder& BER_Decoder::decode_list(std::vector& vec, ASN1_Type type_tag, ASN1_Class class_tag) { 361| 2.48k| BER_Decoder list = start_cons(type_tag, class_tag); 362| | 363| 4.56k| while(list.more_items()) { ------------------ | Branch (363:10): [True: 2.08k, False: 2.48k] ------------------ 364| 2.08k| T value; 365| 2.08k| list.decode(value); 366| 2.08k| vec.push_back(std::move(value)); 367| 2.08k| } 368| | 369| 2.48k| list.end_cons(); 370| | 371| 2.48k| return (*this); 372| 2.48k|} _ZN5Botan11BER_Decoder24decode_optional_implicitINS_15AlternativeNameEEERS0_RT_NS_9ASN1_TypeENS_10ASN1_ClassES6_S7_RKS4_: 340| 1.13k| const T& default_value) { 341| 1.13k| BER_Object obj = get_next_object(); 342| | 343| 1.13k| if(obj.is_a(type_tag, class_tag)) { ------------------ | Branch (343:7): [True: 934, False: 196] ------------------ 344| 934| obj.set_tagging(real_type, real_class); 345| 934| push_back(std::move(obj)); 346| 934| decode(out, real_type, real_class); 347| 934| } else { 348| | // Not what we wanted, push it back on the stream 349| 196| out = default_value; 350| 196| push_back(std::move(obj)); 351| 196| } 352| | 353| 1.13k| return (*this); 354| 1.13k|} _ZN5Botan6BigIntD2Ev: 147| 50.6k| ~BigInt() { const_time_unpoison(); } _ZNK5Botan6BigInt19const_time_unpoisonEv: 710| 51.7k| void const_time_unpoison() const {} _ZN5Botan6BigIntC2EOS0_: 145| 2.16k| BigInt(BigInt&& other) { this->swap(other); } _ZN5Botan6BigIntaSEOS0_: 152| 13.6k| BigInt& operator=(BigInt&& other) { 153| 13.6k| if(this != &other) ------------------ | Branch (153:13): [True: 13.6k, False: 0] ------------------ 154| 13.6k| this->swap(other); 155| | 156| 13.6k| return (*this); 157| 13.6k| } _ZN5Botan6BigInt4swapERS0_: 168| 15.8k| void swap(BigInt& other) { 169| 15.8k| m_data.swap(other.m_data); 170| 15.8k| std::swap(m_signedness, other.m_signedness); 171| 15.8k| } _ZN5Botan6BigInt8swap_regERNSt3__16vectorImNS_16secure_allocatorImEEEE: 173| 9.80k| void swap_reg(secure_vector& reg) { 174| 9.80k| m_data.swap(reg); 175| | // sign left unchanged 176| 9.80k| } _ZN5Botan6BigInt5clearEv: 366| 12.8k| void clear() { 367| 12.8k| m_data.set_to_zero(); 368| 12.8k| m_signedness = Positive; 369| 12.8k| } _ZNK5Botan6BigInt7is_evenEv: 406| 3.60k| bool is_even() const { return (get_bit(0) == 0); } _ZNK5Botan6BigInt10is_nonzeroEv: 418| 3.55k| bool is_nonzero() const { return (!is_zero()); } _ZNK5Botan6BigInt7is_zeroEv: 424| 6.81k| bool is_zero() const { return (sig_words() == 0); } _ZN5Botan6BigInt7set_bitEm: 430| 2.37k| void set_bit(size_t n) { conditionally_set_bit(n, true); } _ZN5Botan6BigInt21conditionally_set_bitEmb: 440| 7.28M| void conditionally_set_bit(size_t n, bool set_it) { 441| 7.28M| const size_t which = n / BOTAN_MP_WORD_BITS; ------------------ | | 50| 7.28M|#define BOTAN_MP_WORD_BITS 64 ------------------ 442| 7.28M| const word mask = static_cast(set_it) << (n % BOTAN_MP_WORD_BITS); ------------------ | | 50| 7.28M|#define BOTAN_MP_WORD_BITS 64 ------------------ 443| 7.28M| m_data.set_word_at(which, word_at(which) | mask); 444| 7.28M| } _ZN5Botan6BigInt9mask_bitsEm: 456| 3.55k| void mask_bits(size_t n) { m_data.mask_bits(n); } _ZNK5Botan6BigInt7get_bitEm: 463| 3.64M| bool get_bit(size_t n) const { return ((word_at(n / BOTAN_MP_WORD_BITS) >> (n % BOTAN_MP_WORD_BITS)) & 1); } ------------------ | | 50| 3.64M|#define BOTAN_MP_WORD_BITS 64 ------------------ bool get_bit(size_t n) const { return ((word_at(n / BOTAN_MP_WORD_BITS) >> (n % BOTAN_MP_WORD_BITS)) & 1); } ------------------ | | 50| 3.64M|#define BOTAN_MP_WORD_BITS 64 ------------------ _ZNK5Botan6BigInt7word_atEm: 514| 11.1M| word word_at(size_t n) const { return m_data.get_word_at(n); } _ZN5Botan6BigInt11set_word_atEmm: 516| 3.64M| void set_word_at(size_t i, word w) { m_data.set_word_at(i, w); } _ZNK5Botan6BigInt11is_negativeEv: 524| 46.8k| bool is_negative() const { return (sign() == Negative); } _ZNK5Botan6BigInt11is_positiveEv: 530| 3.24k| bool is_positive() const { return (sign() == Positive); } _ZNK5Botan6BigInt4signEv: 536| 91.2k| Sign sign() const { return (m_signedness); } _ZNK5Botan6BigInt12reverse_signEv: 541| 1.97k| Sign reverse_sign() const { 542| 1.97k| if(sign() == Positive) ------------------ | Branch (542:13): [True: 1.97k, False: 0] ------------------ 543| 1.97k| return Negative; 544| 0| return Positive; 545| 1.97k| } _ZN5Botan6BigInt9flip_signEv: 550| 1.97k| void flip_sign() { set_sign(reverse_sign()); } _ZN5Botan6BigInt8set_signENS0_4SignE: 556| 23.9k| void set_sign(Sign sign) { 557| 23.9k| if(sign == Negative && is_zero()) ------------------ | Branch (557:13): [True: 2.07k, False: 21.8k] | Branch (557:33): [True: 0, False: 2.07k] ------------------ 558| 0| sign = Positive; 559| | 560| 23.9k| m_signedness = sign; 561| 23.9k| } _ZNK5Botan6BigInt4sizeEv: 572| 18.7M| size_t size() const { return m_data.size(); } _ZNK5Botan6BigInt9sig_wordsEv: 578| 89.8k| size_t sig_words() const { return m_data.sig_words(); } _ZN5Botan6BigInt12mutable_dataEv: 603| 14.7M| word* mutable_data() { return m_data.mutable_data(); } _ZNK5Botan6BigInt4dataEv: 609| 7.67M| const word* data() const { return m_data.const_data(); } _ZNK5Botan6BigInt7grow_toEm: 625| 7.30M| void grow_to(size_t n) const { m_data.grow_to(n); } _ZN5Botan6BigInt10power_of_2Em: 726| 1.18k| static BigInt power_of_2(size_t n) { 727| 1.18k| BigInt b; 728| 1.18k| b.set_bit(n); 729| 1.18k| return b; 730| 1.18k| } _ZN5Botan6BigInt6encodeERKS0_: 737| 3.47k| static std::vector encode(const BigInt& n) { 738| 3.47k| std::vector output(n.bytes()); 739| 3.47k| n.binary_encode(output.data()); 740| 3.47k| return output; 741| 3.47k| } _ZN5Botan6BigInt4Data12mutable_dataEv: 816| 14.7M| word* mutable_data() { 817| 14.7M| invalidate_sig_words(); 818| 14.7M| return m_reg.data(); 819| 14.7M| } _ZNK5Botan6BigInt4Data10const_dataEv: 821| 7.67M| const word* const_data() const { return m_reg.data(); } _ZNK5Botan6BigInt4Data11get_word_atEm: 830| 11.1M| word get_word_at(size_t n) const { 831| 11.1M| if(n < m_reg.size()) ------------------ | Branch (831:19): [True: 11.0M, False: 15.5k] ------------------ 832| 11.0M| return m_reg[n]; 833| 15.5k| return 0; 834| 11.1M| } _ZN5Botan6BigInt4Data11set_word_atEmm: 836| 10.9M| void set_word_at(size_t i, word w) { 837| 10.9M| invalidate_sig_words(); 838| 10.9M| if(i >= m_reg.size()) { ------------------ | Branch (838:19): [True: 3.64M, False: 7.28M] ------------------ 839| 3.64M| if(w == 0) ------------------ | Branch (839:22): [True: 3.64M, False: 2.37k] ------------------ 840| 3.64M| return; 841| 2.37k| grow_to(i + 1); 842| 2.37k| } 843| 7.28M| m_reg[i] = w; 844| 7.28M| } _ZN5Botan6BigInt4Data11set_to_zeroEv: 851| 12.8k| void set_to_zero() { 852| 12.8k| m_reg.resize(m_reg.capacity()); 853| 12.8k| clear_mem(m_reg.data(), m_reg.size()); 854| 12.8k| m_sig_words = 0; 855| 12.8k| } _ZN5Botan6BigInt4Data9mask_bitsEm: 863| 3.55k| void mask_bits(size_t n) { 864| 3.55k| if(n == 0) { ------------------ | Branch (864:19): [True: 0, False: 3.55k] ------------------ 865| 0| return set_to_zero(); 866| 0| } 867| | 868| 3.55k| const size_t top_word = n / BOTAN_MP_WORD_BITS; ------------------ | | 50| 3.55k|#define BOTAN_MP_WORD_BITS 64 ------------------ 869| | 870| | // if(top_word < sig_words()) ? 871| 3.55k| if(top_word < size()) { ------------------ | Branch (871:19): [True: 3.39k, False: 159] ------------------ 872| 3.39k| const word mask = (static_cast(1) << (n % BOTAN_MP_WORD_BITS)) - 1; ------------------ | | 50| 3.39k|#define BOTAN_MP_WORD_BITS 64 ------------------ 873| 3.39k| const size_t len = size() - (top_word + 1); 874| 3.39k| if(len > 0) { ------------------ | Branch (874:22): [True: 3.39k, False: 0] ------------------ 875| 3.39k| clear_mem(&m_reg[top_word + 1], len); 876| 3.39k| } 877| 3.39k| m_reg[top_word] &= mask; 878| 3.39k| invalidate_sig_words(); 879| 3.39k| } 880| 3.55k| } _ZNK5Botan6BigInt4Data7grow_toEm: 882| 7.31M| void grow_to(size_t n) const { 883| 7.31M| if(n > size()) { ------------------ | Branch (883:19): [True: 14.9k, False: 7.29M] ------------------ 884| 14.9k| if(n <= m_reg.capacity()) ------------------ | Branch (884:22): [True: 4.62k, False: 10.3k] ------------------ 885| 4.62k| m_reg.resize(n); 886| 10.3k| else 887| 10.3k| m_reg.resize(n + (8 - (n % 8))); 888| 14.9k| } 889| 7.31M| } _ZNK5Botan6BigInt4Data4sizeEv: 891| 26.0M| size_t size() const { return m_reg.size(); } _ZN5Botan6BigInt4Data4swapERS1_: 900| 15.8k| void swap(Data& other) { 901| 15.8k| m_reg.swap(other.m_reg); 902| 15.8k| std::swap(m_sig_words, other.m_sig_words); 903| 15.8k| } _ZN5Botan6BigInt4Data4swapERNSt3__16vectorImNS_16secure_allocatorImEEEE: 905| 18.7k| void swap(secure_vector& reg) { 906| 18.7k| m_reg.swap(reg); 907| 18.7k| invalidate_sig_words(); 908| 18.7k| } _ZNK5Botan6BigInt4Data20invalidate_sig_wordsEv: 910| 25.7M| void invalidate_sig_words() const { m_sig_words = sig_words_npos; } _ZNK5Botan6BigInt4Data9sig_wordsEv: 912| 89.8k| size_t sig_words() const { 913| 89.8k| if(m_sig_words == sig_words_npos) { ------------------ | Branch (913:19): [True: 39.0k, False: 50.8k] ------------------ 914| 39.0k| m_sig_words = calc_sig_words(); 915| 50.8k| } else { 916| 50.8k| BOTAN_DEBUG_ASSERT(m_sig_words == calc_sig_words()); ------------------ | | 99| 50.8k| do { \ | | 100| 50.8k| } while(0) | | ------------------ | | | Branch (100:15): [Folded - Ignored] | | ------------------ ------------------ 917| 50.8k| } 918| 89.8k| return m_sig_words; 919| 89.8k| } _ZN5BotangeERKNS_6BigIntES2_: 970| 1.09k|inline bool operator>=(const BigInt& a, const BigInt& b) { return (a.cmp(b) >= 0); } _ZN5BotanltERKNS_6BigIntES2_: 972| 2.15k|inline bool operator<(const BigInt& a, const BigInt& b) { return a.is_less_than(b); } _ZN5BotanltERKNS_6BigIntEm: 984| 2.37k|inline bool operator<(const BigInt& a, word b) { return (a.cmp_word(b) < 0); } _ZN5BotangtERKNS_6BigIntEm: 986| 1.18k|inline bool operator>(const BigInt& a, word b) { return (a.cmp_word(b) > 0); } _ZN5Botan6BigIntC2Ev: 39| 33.8k| BigInt() = default; _ZN5Botan6BigIntC2ERKS0_: 79| 5.71k| BigInt(const BigInt& other) = default; _ZN5Botan6BigIntaSERKS0_: 162| 9.37k| BigInt& operator=(const BigInt&) = default; _ZN5Botan20Buffered_Computation6updateEPKhm: 34| 5.55k| void update(const uint8_t in[], size_t length) { add_data(in, length); } _ZN5Botan20Buffered_Computation6updateENSt3__14spanIKhLm18446744073709551615EEE: 40| 6.56k| void update(std::span in) { add_data(in.data(), in.size()); } _ZN5Botan20Buffered_Computation12final_stdvecEv: 83| 7.74k| std::vector final_stdvec() { return final>(); } _ZN5Botan20Buffered_Computation5finalINSt3__16vectorIhNS2_9allocatorIhEEEEEET_v: 77| 7.74k| T final() { 78| 7.74k| T output(output_length()); 79| 7.74k| final_result(output.data()); 80| 7.74k| return output; 81| 7.74k| } _ZN5Botan20Buffered_Computation5finalINSt3__16vectorIhNS_16secure_allocatorIhEEEEEET_v: 77| 4.37k| T final() { 78| 4.37k| T output(output_length()); 79| 4.37k| final_result(output.data()); 80| 4.37k| return output; 81| 4.37k| } _ZN5Botan20Buffered_ComputationD2Ev: 133| 9.93k| virtual ~Buffered_Computation() = default; _ZN5Botan20Buffered_Computation7processINSt3__16vectorIhNS_16secure_allocatorIhEEEEEET_PKhm: 104| 4.37k| T process(const uint8_t in[], size_t length) { 105| 4.37k| update(in, length); 106| 4.37k| return final(); 107| 4.37k| } _ZN5Botan17DataSource_MemoryC2EPKhm: 118| 34.0k| DataSource_Memory(const uint8_t in[], size_t length) : m_source(in, in + length), m_offset(0) {} _ZN5Botan17DataSource_MemoryC2ENSt3__16vectorIhNS_16secure_allocatorIhEEEE: 124| 79.0k| explicit DataSource_Memory(secure_vector in) : m_source(std::move(in)), m_offset(0) {} _ZN5Botan17DataSource_MemoryC2ERKNSt3__16vectorIhNS1_9allocatorIhEEEE: 136| 2.09k| explicit DataSource_Memory(const std::vector& in) : m_source(in.begin(), in.end()), m_offset(0) {} _ZN5Botan10DataSourceC2Ev: 91| 188k| DataSource() = default; _ZN5Botan10DataSourceD2Ev: 92| 188k| virtual ~DataSource() = default; _ZN5Botan11DER_Encoder14start_sequenceEv: 65| 14.9k| DER_Encoder& start_sequence() { return start_cons(ASN1_Type::Sequence, ASN1_Class::Universal); } _ZN5Botan11DER_Encoder10add_objectENS_9ASN1_TypeENS_10ASN1_ClassERKNSt3__16vectorIhNS3_9allocatorIhEEEE: 159| 2.18k| DER_Encoder& add_object(ASN1_Type type_tag, ASN1_Class class_tag, const std::vector& rep) { 160| 2.18k| return add_object(type_tag, class_tag, rep.data(), rep.size()); 161| 2.18k| } _ZN5Botan11DER_Encoder10add_objectENS_9ASN1_TypeENS_10ASN1_ClassERKNSt3__16vectorIhNS_16secure_allocatorIhEEEE: 163| 2.18k| DER_Encoder& add_object(ASN1_Type type_tag, ASN1_Class class_tag, const secure_vector& rep) { 164| 2.18k| return add_object(type_tag, class_tag, rep.data(), rep.size()); 165| 2.18k| } _ZN5Botan11DER_Encoder12DER_SequenceC2EOS1_: 188| 29.9k| m_set_contents(std::move(seq.m_set_contents)) {} _ZN5Botan11DER_Encoder6encodeINSt3__19allocatorIhEEEERS0_RKNS2_6vectorIhT_EENS_9ASN1_TypeE: 99| 2.18k| DER_Encoder& encode(const std::vector& vec, ASN1_Type real_type) { 100| 2.18k| return encode(vec.data(), vec.size(), real_type); 101| 2.18k| } _ZN5Botan11DER_Encoder9raw_bytesINSt3__19allocatorIhEEEERS0_RKNS2_6vectorIhT_EE: 88| 4.38k| DER_Encoder& raw_bytes(const std::vector& val) { 89| 4.38k| return raw_bytes(val.data(), val.size()); 90| 4.38k| } _ZN5Botan11DER_Encoder12DER_SequenceC2ERKS1_: 198| 2.19k| DER_Sequence(const DER_Sequence& seq) = default; _ZNK5Botan9Exception4whatEv: 93| 1.62k| const char* what() const noexcept override { return m_msg.c_str(); } _ZN5Botan10hex_encodeENSt3__14spanIKhLm18446744073709551615EEEb: 43| 4.37k|inline std::string hex_encode(std::span input, bool uppercase = true) { 44| 4.37k| return hex_encode(input.data(), input.size(), uppercase); 45| 4.37k|} _ZN5Botan10ct_is_zeroIhEET_S1_: 35| 86.3k|{ 36| 86.3k| return expand_top_bit(~x & (x - 1)); 37| 86.3k|} _ZN5Botan14expand_top_bitIhEET_S1_: 25| 416k|{ 26| 416k| return static_cast(0) - (a >> (sizeof(T) * 8 - 1)); 27| 416k|} _ZN5Botan10ct_is_zeroIjEET_S1_: 35| 54.9k|{ 36| 54.9k| return expand_top_bit(~x & (x - 1)); 37| 54.9k|} _ZN5Botan14expand_top_bitIjEET_S1_: 25| 54.9k|{ 26| 54.9k| return static_cast(0) - (a >> (sizeof(T) * 8 - 1)); 27| 54.9k|} _ZN5Botan8high_bitIjEEmT_: 60| 10.9k|{ 61| 10.9k| size_t hb = 0; 62| | 63| 65.8k| for(size_t s = 8 * sizeof(T) / 2; s > 0; s /= 2) { ------------------ | Branch (63:38): [True: 54.9k, False: 10.9k] ------------------ 64| 54.9k| const size_t z = s * ((~ct_is_zero(n >> s)) & 1); 65| 54.9k| hb += z; 66| 54.9k| n >>= z; 67| 54.9k| } 68| | 69| 10.9k| hb += n; 70| | 71| 10.9k| return hb; 72| 10.9k|} _ZN5Botan17significant_bytesImEEmT_: 82| 8.96k|{ 83| 8.96k| size_t b = 0; 84| | 85| 35.8k| for(size_t s = 8 * sizeof(n) / 2; s >= 8; s /= 2) { ------------------ | Branch (85:38): [True: 26.8k, False: 8.96k] ------------------ 86| 26.8k| const size_t z = s * (~ct_is_zero(n >> s) & 1); 87| 26.8k| b += z / 8; 88| 26.8k| n >>= z; 89| 26.8k| } 90| | 91| 8.96k| b += (n != 0); 92| | 93| 8.96k| return b; 94| 8.96k|} _ZN5Botan10ct_is_zeroImEET_S1_: 35| 5.49M|{ 36| 5.49M| return expand_top_bit(~x & (x - 1)); 37| 5.49M|} _ZN5Botan14expand_top_bitImEET_S1_: 25| 5.67M|{ 26| 5.67M| return static_cast(0) - (a >> (sizeof(T) * 8 - 1)); 27| 5.67M|} _ZN5Botan6chooseIhEET_S1_S1_S1_: 168| 416k|inline constexpr T choose(T mask, T a, T b) { 169| | //return (mask & a) | (~mask & b); 170| 416k| return (b ^ (mask & (a ^ b))); 171| 416k|} _ZN5Botan6chooseIjEET_S1_S1_S1_: 168| 7.53M|inline constexpr T choose(T mask, T a, T b) { 169| | //return (mask & a) | (~mask & b); 170| 7.53M| return (b ^ (mask & (a ^ b))); 171| 7.53M|} _ZN5Botan9ceil_log2ImEEhT_: 124| 9.93k|{ 125| 9.93k| if(x >> (sizeof(T) * 8 - 1)) ------------------ | Branch (125:7): [True: 0, False: 9.93k] ------------------ 126| 0| return sizeof(T) * 8; 127| | 128| 9.93k| uint8_t result = 0; 129| 9.93k| T compare = 1; 130| | 131| 69.6k| while(compare < x) { ------------------ | Branch (131:10): [True: 59.7k, False: 9.93k] ------------------ 132| 59.7k| compare <<= 1; 133| 59.7k| result++; 134| 59.7k| } 135| | 136| 9.93k| return result; 137| 9.93k|} _ZN5Botan13is_power_of_2ImEEbT_: 47| 9.93k|{ 48| 9.93k| return (arg != 0) && (arg != 1) && ((arg & static_cast(arg - 1)) == 0); ------------------ | Branch (48:11): [True: 9.93k, False: 0] | Branch (48:25): [True: 9.93k, False: 0] | Branch (48:39): [True: 9.93k, False: 0] ------------------ 49| 9.93k|} _ZN5Botan8majorityIjEET_S1_S1_S1_: 174| 3.56M|inline constexpr T majority(T a, T b, T c) { 175| | /* 176| | Considering each bit of a, b, c individually 177| | 178| | If a xor b is set, then c is the deciding vote. 179| | 180| | If a xor b is not set then either a and b are both set or both unset. 181| | In either case the value of c doesn't matter, and examining b (or a) 182| | allows us to determine which case we are in. 183| | */ 184| 3.56M| return choose(a ^ b, c, b); 185| 3.56M|} _ZN5Botan6chooseImEET_S1_S1_S1_: 168| 257M|inline constexpr T choose(T mask, T a, T b) { 169| | //return (mask & a) | (~mask & b); 170| 257M| return (b ^ (mask & (a ^ b))); 171| 257M|} _ZN5Botan8majorityImEET_S1_S1_S1_: 174| 52.4k|inline constexpr T majority(T a, T b, T c) { 175| | /* 176| | Considering each bit of a, b, c individually 177| | 178| | If a xor b is set, then c is the deciding vote. 179| | 180| | If a xor b is not set then either a and b are both set or both unset. 181| | In either case the value of c doesn't matter, and examining b (or a) 182| | allows us to determine which case we are in. 183| | */ 184| 52.4k| return choose(a ^ b, c, b); 185| 52.4k|} _ZN5Botan8high_bitImEEmT_: 60| 13.9k|{ 61| 13.9k| size_t hb = 0; 62| | 63| 97.7k| for(size_t s = 8 * sizeof(T) / 2; s > 0; s /= 2) { ------------------ | Branch (63:38): [True: 83.7k, False: 13.9k] ------------------ 64| 83.7k| const size_t z = s * ((~ct_is_zero(n >> s)) & 1); 65| 83.7k| hb += z; 66| 83.7k| n >>= z; 67| 83.7k| } 68| | 69| 13.9k| hb += n; 70| | 71| 13.9k| return hb; 72| 13.9k|} _ZN5Botan13reverse_bytesEt: 19| 645|inline constexpr uint16_t reverse_bytes(uint16_t x) { 20| 645|#if BOTAN_COMPILER_HAS_BUILTIN(__builtin_bswap16) 21| 645| return __builtin_bswap16(x); 22| |#else 23| | return static_cast((x << 8) | (x >> 8)); 24| |#endif 25| 645|} _ZN5Botan13reverse_bytesEj: 33| 744k|inline constexpr uint32_t reverse_bytes(uint32_t x) { 34| 744k|#if BOTAN_COMPILER_HAS_BUILTIN(__builtin_bswap32) 35| 744k| return __builtin_bswap32(x); 36| |#else 37| | // MSVC at least recognizes this as a bswap 38| | return ((x & 0x000000FF) << 24) | ((x & 0x0000FF00) << 8) | ((x & 0x00FF0000) >> 8) | ((x & 0xFF000000) >> 24); 39| |#endif 40| 744k|} _ZN5Botan13reverse_bytesEm: 48| 107k|inline constexpr uint64_t reverse_bytes(uint64_t x) { 49| 107k|#if BOTAN_COMPILER_HAS_BUILTIN(__builtin_bswap64) 50| 107k| return __builtin_bswap64(x); 51| |#else 52| | uint32_t hi = static_cast(x >> 32); 53| | uint32_t lo = static_cast(x); 54| | 55| | hi = reverse_bytes(hi); 56| | lo = reverse_bytes(lo); 57| | 58| | return (static_cast(lo) << 32) | hi; 59| |#endif 60| 107k|} base64.cpp:_ZN5Botan11base_decodeIRNS_12_GLOBAL__N_16Base64EEEmOT_PhPKcmRmbb: 118| 95| bool ignore_ws = true) { 119| 95| const size_t decoding_bytes_in = base.decoding_bytes_in(); 120| 95| const size_t decoding_bytes_out = base.decoding_bytes_out(); 121| | 122| 95| uint8_t* out_ptr = output; 123| 95| std::vector decode_buf(decoding_bytes_in, 0); 124| 95| size_t decode_buf_pos = 0; 125| 95| size_t final_truncate = 0; 126| | 127| 95| clear_mem(output, base.decode_max_output(input_length)); 128| | 129| 25.4k| for(size_t i = 0; i != input_length; ++i) { ------------------ | Branch (129:22): [True: 25.3k, False: 95] ------------------ 130| 25.3k| const uint8_t bin = base.lookup_binary_value(input[i]); 131| | 132| 25.3k| if(base.check_bad_char(bin, input[i], ignore_ws)) // May throw Invalid_Argument ------------------ | Branch (132:10): [True: 3.89k, False: 21.4k] ------------------ 133| 3.89k| { 134| 3.89k| decode_buf[decode_buf_pos] = bin; 135| 3.89k| ++decode_buf_pos; 136| 3.89k| } 137| | 138| | /* 139| | * If we're at the end of the input, pad with 0s and truncate 140| | */ 141| 25.3k| if(final_inputs && (i == input_length - 1)) { ------------------ | Branch (141:10): [True: 25.3k, False: 36] | Branch (141:26): [True: 56, False: 25.2k] ------------------ 142| 56| if(decode_buf_pos) { ------------------ | Branch (142:13): [True: 30, False: 26] ------------------ 143| 91| for(size_t j = decode_buf_pos; j < decoding_bytes_in; ++j) { ------------------ | Branch (143:44): [True: 61, False: 30] ------------------ 144| 61| decode_buf[j] = 0; 145| 61| } 146| | 147| 30| final_truncate = decoding_bytes_in - decode_buf_pos; 148| 30| decode_buf_pos = decoding_bytes_in; 149| 30| } 150| 56| } 151| | 152| 25.3k| if(decode_buf_pos == decoding_bytes_in) { ------------------ | Branch (152:10): [True: 980, False: 24.3k] ------------------ 153| 980| base.decode(out_ptr, decode_buf.data()); 154| | 155| 980| out_ptr += decoding_bytes_out; 156| 980| decode_buf_pos = 0; 157| 980| input_consumed = i + 1; 158| 980| } 159| 25.3k| } 160| | 161| 344| while(input_consumed < input_length && base.lookup_binary_value(input[input_consumed]) == 0x80) { ------------------ | Branch (161:10): [True: 265, False: 79] | Branch (161:43): [True: 249, False: 16] ------------------ 162| 249| ++input_consumed; 163| 249| } 164| | 165| 95| size_t written = (out_ptr - output) - base.bytes_to_remove(final_truncate); 166| | 167| 95| return written; 168| 95|} base64.cpp:_ZN5Botan18base_decode_to_vecINSt3__16vectorIhNS_16secure_allocatorIhEEEENS_12_GLOBAL__N_16Base64EEET_OT0_PKcmb: 183| 95|Vector base_decode_to_vec(Base&& base, const char input[], size_t input_length, bool ignore_ws) { 184| 95| const size_t output_length = base.decode_max_output(input_length); 185| 95| Vector bin(output_length); 186| | 187| 95| const size_t written = base_decode_full(base, bin.data(), input, input_length, ignore_ws); 188| | 189| 95| bin.resize(written); 190| 95| return bin; 191| 95|} base64.cpp:_ZN5Botan16base_decode_fullIRNS_12_GLOBAL__N_16Base64EEEmOT_PhPKcmb: 171| 95|size_t base_decode_full(Base&& base, uint8_t output[], const char input[], size_t input_length, bool ignore_ws) { 172| 95| size_t consumed = 0; 173| 95| const size_t written = base_decode(base, output, input, input_length, consumed, true, ignore_ws); 174| | 175| 95| if(consumed != input_length) { ------------------ | Branch (175:7): [True: 16, False: 79] ------------------ 176| 16| throw Invalid_Argument(base.name() + " decoding failed, input did not have full bytes"); 177| 16| } 178| | 179| 79| return written; 180| 95|} _ZN5Botan5CPUID13has_cpuid_bitENS0_10CPUID_bitsE: 333| 54.9k| static bool has_cpuid_bit(CPUID_bits elem) { 334| 54.9k| const uint32_t elem32 = static_cast(elem); 335| 54.9k| return state().has_bit(elem32); 336| 54.9k| } _ZN5Botan5CPUID5stateEv: 362| 54.9k| static CPUID_Data& state() { 363| 54.9k| static CPUID::CPUID_Data g_cpuid; 364| 54.9k| return g_cpuid; 365| 54.9k| } _ZNK5Botan5CPUID10CPUID_Data7has_bitEj: 350| 54.9k| bool has_bit(uint32_t bit) const { return (m_processor_features & bit) == bit; } _ZN5Botan5CPUID8has_sse2Ev: 208| 27.1k| static bool has_sse2() { return has_cpuid_bit(CPUID_SSE2_BIT); } _ZN5Botan5CPUID8has_bmi2Ev: 240| 9.57k| static bool has_bmi2() { return has_cpuid_bit(CPUID_BMI_BIT); } _ZN5Botan5CPUID13has_intel_shaEv: 255| 18.2k| static bool has_intel_sha() { return has_sse2() && has_cpuid_bit(CPUID_SHA_BIT); } ------------------ | Branch (255:44): [True: 18.2k, False: 0] | Branch (255:58): [True: 0, False: 18.2k] ------------------ _ZN5Botan2CT4MaskIhE7is_zeroEh: 123| 86.3k| static Mask is_zero(T x) { return Mask(ct_is_zero(x)); } _ZN5Botan2CT4MaskIhEC2Eh: 279| 503k| Mask(T m) : m_mask(m) {} _ZNK5Botan2CT4MaskIhE5valueEv: 276| 503k| T value() const { return m_mask; } _ZN5Botan2CT4MaskIhE3setEv: 99| 1.19k| static Mask set() { return Mask(static_cast(~0)); } _ZN5Botan2CT4MaskIhE15is_within_rangeEhhh: 150| 76.8k| static Mask is_within_range(T v, T l, T u) { 151| | //return Mask::is_gte(v, l) & Mask::is_lte(v, u); 152| | 153| 76.8k| const T v_lt_l = v ^ ((v ^ l) | ((v - l) ^ v)); 154| 76.8k| const T v_gt_u = u ^ ((u ^ v) | ((u - v) ^ u)); 155| 76.8k| const T either = v_lt_l | v_gt_u; 156| 76.8k| return ~Mask(expand_top_bit(either)); 157| 76.8k| } _ZNK5Botan2CT4MaskIhEcoEv: 213| 86.3k| Mask operator~() const { return Mask(~value()); } _ZN5Botan2CT4MaskIhE9is_any_ofEhSt16initializer_listIhE: 159| 25.6k| static Mask is_any_of(T v, std::initializer_list accepted) { 160| 25.6k| T accept = 0; 161| | 162| 102k| for(auto a : accepted) { ------------------ | Branch (162:21): [True: 102k, False: 25.6k] ------------------ 163| 102k| const T diff = a ^ v; 164| 102k| const T eq_zero = ~diff & (diff - 1); 165| 102k| accept |= eq_zero; 166| 102k| } 167| | 168| 25.6k| return Mask(expand_top_bit(accept)); 169| 25.6k| } _ZNK5Botan2CT4MaskIhE6is_setEv: 271| 1.19k| bool is_set() const { return unpoisoned_value() != 0; } _ZNK5Botan2CT4MaskIhE16unpoisoned_valueEv: 262| 1.19k| T unpoisoned_value() const { 263| 1.19k| T r = value(); 264| 1.19k| CT::unpoison(r); 265| 1.19k| return r; 266| 1.19k| } _ZN5Botan2CT8unpoisonIhEEvRT_: 66| 1.19k|inline void unpoison(T& p) { 67| |#if defined(BOTAN_HAS_VALGRIND) 68| | VALGRIND_MAKE_MEM_DEFINED(&p, sizeof(T)); 69| |#else 70| 1.19k| BOTAN_UNUSED(p); ------------------ | | 118| 1.19k|#define BOTAN_UNUSED Botan::ignore_params ------------------ 71| 1.19k|#endif 72| 1.19k|} _ZN5Botan2CT4MaskIhE5is_ltEhh: 133| 227k| static Mask is_lt(T x, T y) { return Mask(expand_top_bit(x ^ ((x ^ y) | ((x - y) ^ x)))); } _ZN5Botan2CT4MaskIhE8is_equalEhh: 128| 76.8k| static Mask is_equal(T x, T y) { return Mask::is_zero(static_cast(x ^ y)); } _ZNK5Botan2CT4MaskIhE6selectEhh: 228| 416k| T select(T x, T y) const { return choose(value(), x, y); } _ZN5Botan2CT4MaskImE8is_equalEmm: 128| 176k| static Mask is_equal(T x, T y) { return Mask::is_zero(static_cast(x ^ y)); } _ZN5Botan2CT4MaskImE5is_ltEmm: 133| 176k| static Mask is_lt(T x, T y) { return Mask(expand_top_bit(x ^ ((x ^ y) | ((x - y) ^ x)))); } _ZN5Botan2CT4MaskImEC2Em: 279| 8.04M| Mask(T m) : m_mask(m) {} _ZNK5Botan2CT4MaskImE11select_maskES2_S2_: 239| 5.14k| Mask select_mask(Mask x, Mask y) const { return Mask(select(x.value(), y.value())); } _ZNK5Botan2CT4MaskImE5valueEv: 276| 260M| T value() const { return m_mask; } _ZN5Botan2CT4MaskImEoRES2_: 190| 2.09k| Mask& operator|=(Mask o) { 191| 2.09k| m_mask |= o.value(); 192| 2.09k| return (*this); 193| 2.09k| } _ZNK5Botan2CT4MaskImE13if_set_returnEm: 218| 172k| T if_set_return(T x) const { return m_mask & x; } _ZN5Botan2CT4MaskImE6expandEm: 109| 3.83M| static Mask expand(T v) { return ~Mask::is_zero(v); } _ZNK5Botan2CT4MaskImEcoEv: 213| 3.83M| Mask operator~() const { return Mask(~value()); } _ZNK5Botan2CT4MaskImE6selectEmm: 228| 256M| T select(T x, T y) const { return choose(value(), x, y); } _ZNK5Botan2CT4MaskImE8select_nEPmPKmS5_m: 245| 166k| void select_n(T output[], const T x[], const T y[], size_t len) const { 246| 2.72M| for(size_t i = 0; i != len; ++i) ------------------ | Branch (246:28): [True: 2.55M, False: 166k] ------------------ 247| 2.55M| output[i] = this->select(x[i], y[i]); 248| 166k| } _ZN5Botan2CT4MaskImE7is_zeroEm: 123| 4.02M| static Mask is_zero(T x) { return Mask(ct_is_zero(x)); } _ZN5Botan2CT8unpoisonImEEvRT_: 66| 49.7k|inline void unpoison(T& p) { 67| |#if defined(BOTAN_HAS_VALGRIND) 68| | VALGRIND_MAKE_MEM_DEFINED(&p, sizeof(T)); 69| |#else 70| 49.7k| BOTAN_UNUSED(p); ------------------ | | 118| 49.7k|#define BOTAN_UNUSED Botan::ignore_params ------------------ 71| 49.7k|#endif 72| 49.7k|} _ZNK5Botan2CT4MaskImE6is_setEv: 271| 2.15k| bool is_set() const { return unpoisoned_value() != 0; } _ZNK5Botan2CT4MaskImE16unpoisoned_valueEv: 262| 2.15k| T unpoisoned_value() const { 263| 2.15k| T r = value(); 264| 2.15k| CT::unpoison(r); 265| 2.15k| return r; 266| 2.15k| } _ZN5Botan2CT8unpoisonIKmEEvRT_: 66| 13.9k|inline void unpoison(T& p) { 67| |#if defined(BOTAN_HAS_VALGRIND) 68| | VALGRIND_MAKE_MEM_DEFINED(&p, sizeof(T)); 69| |#else 70| 13.9k| BOTAN_UNUSED(p); ------------------ | | 118| 13.9k|#define BOTAN_UNUSED Botan::ignore_params ------------------ 71| 13.9k|#endif 72| 13.9k|} _ZN5Botan2CT4MaskIhE6expandEh: 109| 9.48k| static Mask expand(T v) { return ~Mask::is_zero(v); } _ZN5Botan2CT20conditional_copy_memImEENS0_4MaskIT_EES3_PS3_PKS3_S7_m: 285| 11.6k|inline Mask conditional_copy_mem(T cnd, T* to, const T* from0, const T* from1, size_t elems) { 286| 11.6k| const auto mask = CT::Mask::expand(cnd); 287| 11.6k| mask.select_n(to, from0, from1, elems); 288| 11.6k| return mask; 289| 11.6k|} _ZN5Botan2CT20conditional_swap_ptrIPKmEEvbRT_S5_: 309| 7.11k|inline void conditional_swap_ptr(bool cnd, T& x, T& y) { 310| 7.11k| uintptr_t xp = reinterpret_cast(x); 311| 7.11k| uintptr_t yp = reinterpret_cast(y); 312| | 313| 7.11k| conditional_swap(cnd, xp, yp); 314| | 315| 7.11k| x = reinterpret_cast(xp); 316| 7.11k| y = reinterpret_cast(yp); 317| 7.11k|} _ZN5Botan2CT16conditional_swapImEEvbRT_S3_: 299| 14.2k|inline void conditional_swap(bool cnd, T& x, T& y) { 300| 14.2k| const auto swap = CT::Mask::expand(cnd); 301| | 302| 14.2k| T t0 = swap.select(y, x); 303| 14.2k| T t1 = swap.select(x, y); 304| 14.2k| x = t0; 305| 14.2k| y = t1; 306| 14.2k|} _ZN5Botan2CTeoENS0_4MaskImEES2_: 203| 3.34k| friend Mask operator^(Mask x, Mask y) { return Mask(x.value() ^ y.value()); } _ZN5Botan2CT22conditional_assign_memImEENS0_4MaskIT_EES3_PS3_PKS3_m: 292| 147k|inline Mask conditional_assign_mem(T cnd, T* sink, const T* src, size_t elems) { 293| 147k| const auto mask = CT::Mask::expand(cnd); 294| 147k| mask.select_n(sink, src, sink, elems); 295| 147k| return mask; 296| 147k|} _ZN5Botan9ct_divideERKNS_6BigIntES2_: 49| 1.18k|inline BigInt ct_divide(const BigInt& x, const BigInt& y) { 50| 1.18k| BigInt q, r; 51| 1.18k| ct_divide(x, y, q, r); 52| 1.18k| return q; 53| 1.18k|} _ZN5Botan8FE_25519C2ESt16initializer_listIiE: 36| 1.53k| FE_25519(std::initializer_list x) { 37| 1.53k| if(x.size() != 10) ------------------ | Branch (37:13): [True: 0, False: 1.53k] ------------------ 38| 0| throw Invalid_Argument("Invalid FE_25519 initializer list"); 39| 1.53k| copy_mem(m_fe, x.begin(), 10); 40| 1.53k| } _ZN5Botan4EMSAD2Ev: 25| 1.18k| virtual ~EMSA() = default; _ZN5Botan10fmt_detail6do_fmtERNSt3__119basic_ostringstreamIcNS1_11char_traitsIcEENS1_9allocatorIcEEEENS1_17basic_string_viewIcS4_EE: 20| 14.4k|inline void do_fmt(std::ostringstream& oss, std::string_view format) { oss << format; } _ZN5Botan3fmtIJNSt3__117basic_string_viewIcNS1_11char_traitsIcEEEEEEENS1_12basic_stringIcS4_NS1_9allocatorIcEEEES5_DpRKT_: 51| 11.1k|std::string fmt(std::string_view format, const T&... args) { 52| 11.1k| std::ostringstream oss; 53| 11.1k| oss.imbue(std::locale::classic()); 54| 11.1k| fmt_detail::do_fmt(oss, format, args...); 55| 11.1k| return oss.str(); 56| 11.1k|} _ZN5Botan10fmt_detail6do_fmtINSt3__117basic_string_viewIcNS2_11char_traitsIcEEEEJEEEvRNS2_19basic_ostringstreamIcS5_NS2_9allocatorIcEEEES6_RKT_DpRKT0_: 23| 11.6k|void do_fmt(std::ostringstream& oss, std::string_view format, const T& val, const Ts&... rest) { 24| 11.6k| size_t i = 0; 25| | 26| 117k| while(i < format.size()) { ------------------ | Branch (26:10): [True: 117k, False: 0] ------------------ 27| 117k| if(format[i] == '{' && (format.size() > (i + 1)) && format.at(i + 1) == '}') { ------------------ | Branch (27:10): [True: 11.6k, False: 105k] | Branch (27:30): [True: 11.6k, False: 0] | Branch (27:59): [True: 11.6k, False: 0] ------------------ 28| 11.6k| oss << val; 29| 11.6k| return do_fmt(oss, format.substr(i + 2), rest...); 30| 105k| } else { 31| 105k| oss << format[i]; 32| 105k| } 33| | 34| 105k| i += 1; 35| 105k| } 36| 11.6k|} _ZN5Botan3fmtIJNSt3__117basic_string_viewIcNS1_11char_traitsIcEEEEjEEENS1_12basic_stringIcS4_NS1_9allocatorIcEEEES5_DpRKT_: 51| 159|std::string fmt(std::string_view format, const T&... args) { 52| 159| std::ostringstream oss; 53| 159| oss.imbue(std::locale::classic()); 54| 159| fmt_detail::do_fmt(oss, format, args...); 55| 159| return oss.str(); 56| 159|} _ZN5Botan10fmt_detail6do_fmtINSt3__117basic_string_viewIcNS2_11char_traitsIcEEEEJjEEEvRNS2_19basic_ostringstreamIcS5_NS2_9allocatorIcEEEES6_RKT_DpRKT0_: 23| 159|void do_fmt(std::ostringstream& oss, std::string_view format, const T& val, const Ts&... rest) { 24| 159| size_t i = 0; 25| | 26| 159| while(i < format.size()) { ------------------ | Branch (26:10): [True: 159, False: 0] ------------------ 27| 159| if(format[i] == '{' && (format.size() > (i + 1)) && format.at(i + 1) == '}') { ------------------ | Branch (27:10): [True: 159, False: 0] | Branch (27:30): [True: 159, False: 0] | Branch (27:59): [True: 159, False: 0] ------------------ 28| 159| oss << val; 29| 159| return do_fmt(oss, format.substr(i + 2), rest...); 30| 159| } else { 31| 0| oss << format[i]; 32| 0| } 33| | 34| 0| i += 1; 35| 0| } 36| 159|} _ZN5Botan10fmt_detail6do_fmtIjJEEEvRNSt3__119basic_ostringstreamIcNS2_11char_traitsIcEENS2_9allocatorIcEEEENS2_17basic_string_viewIcS5_EERKT_DpRKT0_: 23| 228|void do_fmt(std::ostringstream& oss, std::string_view format, const T& val, const Ts&... rest) { 24| 228| size_t i = 0; 25| | 26| 2.82k| while(i < format.size()) { ------------------ | Branch (26:10): [True: 2.82k, False: 0] ------------------ 27| 2.82k| if(format[i] == '{' && (format.size() > (i + 1)) && format.at(i + 1) == '}') { ------------------ | Branch (27:10): [True: 228, False: 2.59k] | Branch (27:30): [True: 228, False: 0] | Branch (27:59): [True: 228, False: 0] ------------------ 28| 228| oss << val; 29| 228| return do_fmt(oss, format.substr(i + 2), rest...); 30| 2.59k| } else { 31| 2.59k| oss << format[i]; 32| 2.59k| } 33| | 34| 2.59k| i += 1; 35| 2.59k| } 36| 228|} _ZN5Botan3fmtIJjEEENSt3__112basic_stringIcNS1_11char_traitsIcEENS1_9allocatorIcEEEENS1_17basic_string_viewIcS4_EEDpRKT_: 51| 69|std::string fmt(std::string_view format, const T&... args) { 52| 69| std::ostringstream oss; 53| 69| oss.imbue(std::locale::classic()); 54| 69| fmt_detail::do_fmt(oss, format, args...); 55| 69| return oss.str(); 56| 69|} _ZN5Botan3fmtIJNSt3__112basic_stringIcNS1_11char_traitsIcEENS1_9allocatorIcEEEEEEES7_NS1_17basic_string_viewIcS4_EEDpRKT_: 51| 197|std::string fmt(std::string_view format, const T&... args) { 52| 197| std::ostringstream oss; 53| 197| oss.imbue(std::locale::classic()); 54| 197| fmt_detail::do_fmt(oss, format, args...); 55| 197| return oss.str(); 56| 197|} _ZN5Botan10fmt_detail6do_fmtINSt3__112basic_stringIcNS2_11char_traitsIcEENS2_9allocatorIcEEEEJEEEvRNS2_19basic_ostringstreamIcS5_S7_EENS2_17basic_string_viewIcS5_EERKT_DpRKT0_: 23| 197|void do_fmt(std::ostringstream& oss, std::string_view format, const T& val, const Ts&... rest) { 24| 197| size_t i = 0; 25| | 26| 2.87k| while(i < format.size()) { ------------------ | Branch (26:10): [True: 2.87k, False: 0] ------------------ 27| 2.87k| if(format[i] == '{' && (format.size() > (i + 1)) && format.at(i + 1) == '}') { ------------------ | Branch (27:10): [True: 197, False: 2.67k] | Branch (27:30): [True: 197, False: 0] | Branch (27:59): [True: 197, False: 0] ------------------ 28| 197| oss << val; 29| 197| return do_fmt(oss, format.substr(i + 2), rest...); 30| 2.67k| } else { 31| 2.67k| oss << format[i]; 32| 2.67k| } 33| | 34| 2.67k| i += 1; 35| 2.67k| } 36| 197|} _ZN5Botan3fmtIJPKcS2_S2_EEENSt3__112basic_stringIcNS3_11char_traitsIcEENS3_9allocatorIcEEEENS3_17basic_string_viewIcS6_EEDpRKT_: 51| 768|std::string fmt(std::string_view format, const T&... args) { 52| 768| std::ostringstream oss; 53| 768| oss.imbue(std::locale::classic()); 54| 768| fmt_detail::do_fmt(oss, format, args...); 55| 768| return oss.str(); 56| 768|} _ZN5Botan10fmt_detail6do_fmtIPKcJS3_S3_EEEvRNSt3__119basic_ostringstreamIcNS4_11char_traitsIcEENS4_9allocatorIcEEEENS4_17basic_string_viewIcS7_EERKT_DpRKT0_: 23| 768|void do_fmt(std::ostringstream& oss, std::string_view format, const T& val, const Ts&... rest) { 24| 768| size_t i = 0; 25| | 26| 768| while(i < format.size()) { ------------------ | Branch (26:10): [True: 768, False: 0] ------------------ 27| 768| if(format[i] == '{' && (format.size() > (i + 1)) && format.at(i + 1) == '}') { ------------------ | Branch (27:10): [True: 768, False: 0] | Branch (27:30): [True: 768, False: 0] | Branch (27:59): [True: 768, False: 0] ------------------ 28| 768| oss << val; 29| 768| return do_fmt(oss, format.substr(i + 2), rest...); 30| 768| } else { 31| 0| oss << format[i]; 32| 0| } 33| | 34| 0| i += 1; 35| 0| } 36| 768|} _ZN5Botan10fmt_detail6do_fmtIPKcJS3_EEEvRNSt3__119basic_ostringstreamIcNS4_11char_traitsIcEENS4_9allocatorIcEEEENS4_17basic_string_viewIcS7_EERKT_DpRKT0_: 23| 768|void do_fmt(std::ostringstream& oss, std::string_view format, const T& val, const Ts&... rest) { 24| 768| size_t i = 0; 25| | 26| 3.84k| while(i < format.size()) { ------------------ | Branch (26:10): [True: 3.84k, False: 0] ------------------ 27| 3.84k| if(format[i] == '{' && (format.size() > (i + 1)) && format.at(i + 1) == '}') { ------------------ | Branch (27:10): [True: 768, False: 3.07k] | Branch (27:30): [True: 768, False: 0] | Branch (27:59): [True: 768, False: 0] ------------------ 28| 768| oss << val; 29| 768| return do_fmt(oss, format.substr(i + 2), rest...); 30| 3.07k| } else { 31| 3.07k| oss << format[i]; 32| 3.07k| } 33| | 34| 3.07k| i += 1; 35| 3.07k| } 36| 768|} _ZN5Botan10fmt_detail6do_fmtIPKcJEEEvRNSt3__119basic_ostringstreamIcNS4_11char_traitsIcEENS4_9allocatorIcEEEENS4_17basic_string_viewIcS7_EERKT_DpRKT0_: 23| 2.39k|void do_fmt(std::ostringstream& oss, std::string_view format, const T& val, const Ts&... rest) { 24| 2.39k| size_t i = 0; 25| | 26| 24.3k| while(i < format.size()) { ------------------ | Branch (26:10): [True: 24.3k, False: 0] ------------------ 27| 24.3k| if(format[i] == '{' && (format.size() > (i + 1)) && format.at(i + 1) == '}') { ------------------ | Branch (27:10): [True: 2.39k, False: 21.9k] | Branch (27:30): [True: 2.39k, False: 0] | Branch (27:59): [True: 2.39k, False: 0] ------------------ 28| 2.39k| oss << val; 29| 2.39k| return do_fmt(oss, format.substr(i + 2), rest...); 30| 21.9k| } else { 31| 21.9k| oss << format[i]; 32| 21.9k| } 33| | 34| 21.9k| i += 1; 35| 21.9k| } 36| 2.39k|} _ZN5Botan3fmtIJNSt3__117basic_string_viewIcNS1_11char_traitsIcEEEEPKcEEENS1_12basic_stringIcS4_NS1_9allocatorIcEEEES5_DpRKT_: 51| 1.62k|std::string fmt(std::string_view format, const T&... args) { 52| 1.62k| std::ostringstream oss; 53| 1.62k| oss.imbue(std::locale::classic()); 54| 1.62k| fmt_detail::do_fmt(oss, format, args...); 55| 1.62k| return oss.str(); 56| 1.62k|} _ZN5Botan10fmt_detail6do_fmtINSt3__117basic_string_viewIcNS2_11char_traitsIcEEEEJPKcEEEvRNS2_19basic_ostringstreamIcS5_NS2_9allocatorIcEEEES6_RKT_DpRKT0_: 23| 1.62k|void do_fmt(std::ostringstream& oss, std::string_view format, const T& val, const Ts&... rest) { 24| 1.62k| size_t i = 0; 25| | 26| 1.62k| while(i < format.size()) { ------------------ | Branch (26:10): [True: 1.62k, False: 0] ------------------ 27| 1.62k| if(format[i] == '{' && (format.size() > (i + 1)) && format.at(i + 1) == '}') { ------------------ | Branch (27:10): [True: 1.62k, False: 0] | Branch (27:30): [True: 1.62k, False: 0] | Branch (27:59): [True: 1.62k, False: 0] ------------------ 28| 1.62k| oss << val; 29| 1.62k| return do_fmt(oss, format.substr(i + 2), rest...); 30| 1.62k| } else { 31| 0| oss << format[i]; 32| 0| } 33| | 34| 0| i += 1; 35| 0| } 36| 1.62k|} _ZN5Botan3fmtIJPKcNSt3__117basic_string_viewIcNS3_11char_traitsIcEEEEEEENS3_12basic_stringIcS6_NS3_9allocatorIcEEEES7_DpRKT_: 51| 535|std::string fmt(std::string_view format, const T&... args) { 52| 535| std::ostringstream oss; 53| 535| oss.imbue(std::locale::classic()); 54| 535| fmt_detail::do_fmt(oss, format, args...); 55| 535| return oss.str(); 56| 535|} _ZN5Botan10fmt_detail6do_fmtIPKcJNSt3__117basic_string_viewIcNS4_11char_traitsIcEEEEEEEvRNS4_19basic_ostringstreamIcS7_NS4_9allocatorIcEEEES8_RKT_DpRKT0_: 23| 535|void do_fmt(std::ostringstream& oss, std::string_view format, const T& val, const Ts&... rest) { 24| 535| size_t i = 0; 25| | 26| 535| while(i < format.size()) { ------------------ | Branch (26:10): [True: 535, False: 0] ------------------ 27| 535| if(format[i] == '{' && (format.size() > (i + 1)) && format.at(i + 1) == '}') { ------------------ | Branch (27:10): [True: 535, False: 0] | Branch (27:30): [True: 535, False: 0] | Branch (27:59): [True: 535, False: 0] ------------------ 28| 535| oss << val; 29| 535| return do_fmt(oss, format.substr(i + 2), rest...); 30| 535| } else { 31| 0| oss << format[i]; 32| 0| } 33| | 34| 0| i += 1; 35| 0| } 36| 535|} _ZN5Botan11make_uint16Ehh: 63| 9|inline constexpr uint16_t make_uint16(uint8_t i0, uint8_t i1) { 64| 9| return static_cast((static_cast(i0) << 8) | i1); 65| 9|} _ZN5Botan7load_beItEET_PKhm: 136| 645|inline constexpr uint16_t load_be(const uint8_t in[], size_t off) { 137| 645| in += off * sizeof(uint16_t); 138| | 139| 645|#if defined(BOTAN_ENDIAN_N2B) 140| 645| uint16_t x = 0; 141| 645| typecast_copy(x, in); 142| 645| return BOTAN_ENDIAN_N2B(x); ------------------ | | 26| 645| #define BOTAN_ENDIAN_N2B(x) reverse_bytes(x) ------------------ 143| |#else 144| | return make_uint16(in[0], in[1]); 145| |#endif 146| 645|} _ZN5Botan7load_beIjEET_PKhm: 174| 668k|inline constexpr uint32_t load_be(const uint8_t in[], size_t off) { 175| 668k| in += off * sizeof(uint32_t); 176| 668k|#if defined(BOTAN_ENDIAN_N2B) 177| 668k| uint32_t x = 0; 178| 668k| typecast_copy(x, in); 179| 668k| return BOTAN_ENDIAN_N2B(x); ------------------ | | 26| 668k| #define BOTAN_ENDIAN_N2B(x) reverse_bytes(x) ------------------ 180| |#else 181| | return make_uint32(in[0], in[1], in[2], in[3]); 182| |#endif 183| 668k|} _ZN5Botan7load_beImEET_PKhm: 210| 73.3k|inline constexpr uint64_t load_be(const uint8_t in[], size_t off) { 211| 73.3k| in += off * sizeof(uint64_t); 212| 73.3k|#if defined(BOTAN_ENDIAN_N2B) 213| 73.3k| uint64_t x = 0; 214| 73.3k| typecast_copy(x, in); 215| 73.3k| return BOTAN_ENDIAN_N2B(x); ------------------ | | 26| 73.3k| #define BOTAN_ENDIAN_N2B(x) reverse_bytes(x) ------------------ 216| |#else 217| | return make_uint64(in[0], in[1], in[2], in[3], in[4], in[5], in[6], in[7]); 218| |#endif 219| 73.3k|} _ZN5Botan8store_beEjPh: 437| 76.3k|inline constexpr void store_be(uint32_t in, uint8_t out[4]) { 438| 76.3k|#if defined(BOTAN_ENDIAN_B2N) 439| 76.3k| uint32_t o = BOTAN_ENDIAN_B2N(in); ------------------ | | 27| 76.3k| #define BOTAN_ENDIAN_B2N(x) reverse_bytes(x) ------------------ 440| 76.3k| typecast_copy(out, o); 441| |#else 442| | out[0] = get_byte<0>(in); 443| | out[1] = get_byte<1>(in); 444| | out[2] = get_byte<2>(in); 445| | out[3] = get_byte<3>(in); 446| |#endif 447| 76.3k|} _ZN5Botan8store_leEjPh: 454| 3.60k|inline constexpr void store_le(uint32_t in, uint8_t out[4]) { 455| 3.60k|#if defined(BOTAN_ENDIAN_L2N) 456| 3.60k| uint32_t o = BOTAN_ENDIAN_L2N(in); ------------------ | | 25| 3.60k| #define BOTAN_ENDIAN_L2N(x) (x) ------------------ 457| 3.60k| typecast_copy(out, o); 458| |#else 459| | out[0] = get_byte<3>(in); 460| | out[1] = get_byte<2>(in); 461| | out[2] = get_byte<1>(in); 462| | out[3] = get_byte<0>(in); 463| |#endif 464| 3.60k|} _ZN5Botan8store_beEmPh: 471| 34.0k|inline constexpr void store_be(uint64_t in, uint8_t out[8]) { 472| 34.0k|#if defined(BOTAN_ENDIAN_B2N) 473| 34.0k| uint64_t o = BOTAN_ENDIAN_B2N(in); ------------------ | | 27| 34.0k| #define BOTAN_ENDIAN_B2N(x) reverse_bytes(x) ------------------ 474| 34.0k| typecast_copy(out, o); 475| |#else 476| | out[0] = get_byte<0>(in); 477| | out[1] = get_byte<1>(in); 478| | out[2] = get_byte<2>(in); 479| | out[3] = get_byte<3>(in); 480| | out[4] = get_byte<4>(in); 481| | out[5] = get_byte<5>(in); 482| | out[6] = get_byte<6>(in); 483| | out[7] = get_byte<7>(in); 484| |#endif 485| 34.0k|} _ZN5Botan8store_leEmPh: 492| 901|inline constexpr void store_le(uint64_t in, uint8_t out[8]) { 493| 901|#if defined(BOTAN_ENDIAN_L2N) 494| 901| uint64_t o = BOTAN_ENDIAN_L2N(in); ------------------ | | 25| 901| #define BOTAN_ENDIAN_L2N(x) (x) ------------------ 495| 901| typecast_copy(out, o); 496| |#else 497| | out[0] = get_byte<7>(in); 498| | out[1] = get_byte<6>(in); 499| | out[2] = get_byte<5>(in); 500| | out[3] = get_byte<4>(in); 501| | out[4] = get_byte<3>(in); 502| | out[5] = get_byte<2>(in); 503| | out[6] = get_byte<1>(in); 504| | out[7] = get_byte<0>(in); 505| |#endif 506| 901|} _ZN5Botan8get_byteILm0EmEEhT0_: 52| 86.3k|{ 53| 86.3k| const size_t shift = ((~B) & (sizeof(T) - 1)) << 3; 54| 86.3k| return static_cast((input >> shift) & 0xFF); 55| 86.3k|} _ZN5Botan12get_byte_varImEEhmT_: 40| 46.9k|inline constexpr uint8_t get_byte_var(size_t byte_num, T input) { 41| 46.9k| return static_cast(input >> (((~byte_num) & (sizeof(T) - 1)) << 3)); 42| 46.9k|} _ZN5Botan15copy_out_vec_leIjNS_16secure_allocatorIjEEEEvPhmRKNSt3__16vectorIT_T0_EE: 644| 901|void copy_out_vec_le(uint8_t out[], size_t out_bytes, const std::vector& in) { 645| 901| copy_out_le(out, out_bytes, in.data()); 646| 901|} _ZN5Botan11copy_out_leIjEEvPhmPKT_: 631| 901|void copy_out_le(uint8_t out[], size_t out_bytes, const T in[]) { 632| 4.50k| while(out_bytes >= sizeof(T)) { ------------------ | Branch (632:10): [True: 3.60k, False: 901] ------------------ 633| 3.60k| store_le(in[0], out); 634| 3.60k| out += sizeof(T); 635| 3.60k| out_bytes -= sizeof(T); 636| 3.60k| in += 1; 637| 3.60k| } 638| | 639| 901| for(size_t i = 0; i != out_bytes; ++i) ------------------ | Branch (639:22): [True: 0, False: 901] ------------------ 640| 0| out[i] = get_byte_var(sizeof(T) - 1 - (i % 8), in[0]); 641| 901|} _ZN5Botan7load_leIjEEvPT_PKhm: 298| 12.5k|inline constexpr void load_le(T out[], const uint8_t in[], size_t count) { 299| 12.5k| if(count > 0) { ------------------ | Branch (299:7): [True: 12.5k, False: 0] ------------------ 300| 12.5k|#if defined(BOTAN_TARGET_CPU_IS_LITTLE_ENDIAN) 301| 12.5k| typecast_copy(out, in, count); 302| | 303| |#elif defined(BOTAN_TARGET_CPU_IS_BIG_ENDIAN) 304| | typecast_copy(out, in, count); 305| | 306| | const size_t blocks = count - (count % 4); 307| | const size_t left = count - blocks; 308| | 309| | for(size_t i = 0; i != blocks; i += 4) 310| | bswap_4(out + i); 311| | 312| | for(size_t i = 0; i != left; ++i) 313| | out[blocks + i] = reverse_bytes(out[blocks + i]); 314| |#else 315| | for(size_t i = 0; i != count; ++i) 316| | out[i] = load_le(in, i); 317| |#endif 318| 12.5k| } 319| 12.5k|} _ZN5Botan15copy_out_vec_beIjNS_16secure_allocatorIjEEEEvPhmRKNSt3__16vectorIT_T0_EE: 626| 11.1k|void copy_out_vec_be(uint8_t out[], size_t out_bytes, const std::vector& in) { 627| 11.1k| copy_out_be(out, out_bytes, in.data()); 628| 11.1k|} _ZN5Botan11copy_out_beIjEEvPhmPKT_: 613| 11.1k|void copy_out_be(uint8_t out[], size_t out_bytes, const T in[]) { 614| 86.8k| while(out_bytes >= sizeof(T)) { ------------------ | Branch (614:10): [True: 75.7k, False: 11.1k] ------------------ 615| 75.7k| store_be(in[0], out); 616| 75.7k| out += sizeof(T); 617| 75.7k| out_bytes -= sizeof(T); 618| 75.7k| in += 1; 619| 75.7k| } 620| | 621| 11.1k| for(size_t i = 0; i != out_bytes; ++i) ------------------ | Branch (621:22): [True: 0, False: 11.1k] ------------------ 622| 0| out[i] = get_byte_var(i % 8, in[0]); 623| 11.1k|} _ZN5Botan15copy_out_vec_beImNS_16secure_allocatorImEEEEvPhmRKNSt3__16vectorIT_T0_EE: 626| 97|void copy_out_vec_be(uint8_t out[], size_t out_bytes, const std::vector& in) { 627| 97| copy_out_be(out, out_bytes, in.data()); 628| 97|} _ZN5Botan11copy_out_beImEEvPhmPKT_: 613| 97|void copy_out_be(uint8_t out[], size_t out_bytes, const T in[]) { 614| 715| while(out_bytes >= sizeof(T)) { ------------------ | Branch (614:10): [True: 618, False: 97] ------------------ 615| 618| store_be(in[0], out); 616| 618| out += sizeof(T); 617| 618| out_bytes -= sizeof(T); 618| 618| in += 1; 619| 618| } 620| | 621| 97| for(size_t i = 0; i != out_bytes; ++i) ------------------ | Branch (621:22): [True: 0, False: 97] ------------------ 622| 0| out[i] = get_byte_var(i % 8, in[0]); 623| 97|} _ZN5Botan3MD5C2Ev: 30| 901| MD5() : MDx_HashFunction(64, false, true), m_M(16), m_digest(4) { clear(); } _ZNK5Botan3MD54nameEv: 20| 901| std::string name() const override { return "MD5"; } _ZNK5Botan3MD513output_lengthEv: 22| 3.60k| size_t output_length() const override { return 16; } _ZNK5Botan16MDx_HashFunction15hash_block_sizeEv: 29| 12.5k| size_t hash_block_size() const override final { return m_buffer.size(); } _ZNK5Botan14Montgomery_Int19const_time_unpoisonEv: 124| 1.07k| void const_time_unpoison() const { return m_v.const_time_unpoison(); } _ZNK5Botan17Montgomery_Params1pEv: 148| 2.15k| const BigInt& p() const { return m_p; } _ZNK5Botan17Montgomery_Params2R1Ev: 150| 1.07k| const BigInt& R1() const { return m_r1; } _ZNK5Botan17Montgomery_Params2R2Ev: 152| 1.07k| const BigInt& R2() const { return m_r2; } _ZNK5Botan17Montgomery_Params7p_wordsEv: 158| 2.15k| size_t p_words() const { return m_p_words; } _ZN5Botan10word8_sub3EPmPKmS2_m: 413| 12.5M|inline word word8_sub3(word z[8], const word x[8], const word y[8], word carry) { 414| |#if defined(BOTAN_MP_USE_X86_32_ASM) 415| | asm(ADD_OR_SUBTRACT(DO_8_TIMES(ADDSUB3_OP, "sbbl")) 416| | : [carry] "=r"(carry) 417| | : [x] "r"(x), [y] "r"(y), [z] "r"(z), "0"(carry) 418| | : "cc", "memory"); 419| | 420| |#elif defined(BOTAN_MP_USE_X86_64_ASM) 421| 12.5M| asm(ADD_OR_SUBTRACT(DO_8_TIMES(ADDSUB3_OP, "sbbq")) 422| 12.5M| : [carry] "=r"(carry) 423| 12.5M| : [x] "r"(x), [y] "r"(y), [z] "r"(z), "0"(carry) 424| 12.5M| : "cc", "memory"); 425| | 426| |#else 427| | z[0] = word_sub(x[0], y[0], &carry); 428| | z[1] = word_sub(x[1], y[1], &carry); 429| | z[2] = word_sub(x[2], y[2], &carry); 430| | z[3] = word_sub(x[3], y[3], &carry); 431| | z[4] = word_sub(x[4], y[4], &carry); 432| | z[5] = word_sub(x[5], y[5], &carry); 433| | z[6] = word_sub(x[6], y[6], &carry); 434| | z[7] = word_sub(x[7], y[7], &carry); 435| |#endif 436| | 437| 12.5M| return carry; 438| 12.5M|} _ZN5Botan8word_subEmmPm: 326| 29.8M|inline word word_sub(word x, word y, word* carry) { 327| |#if defined(BOTAN_MP_USE_X86_32_ASM) 328| | asm(ADD_OR_SUBTRACT(ASM("sbbl %[y],%[x]")) 329| | : [x] "=r"(x), [carry] "=r"(*carry) 330| | : "0"(x), [y] "rm"(y), "1"(*carry) 331| | : "cc"); 332| | return x; 333| | 334| |#elif defined(BOTAN_MP_USE_X86_64_ASM) 335| 29.8M| asm(ADD_OR_SUBTRACT(ASM("sbbq %[y],%[x]")) 336| 29.8M| : [x] "=r"(x), [carry] "=r"(*carry) 337| 29.8M| : "0"(x), [y] "rm"(y), "1"(*carry) 338| 29.8M| : "cc"); 339| 29.8M| return x; 340| | 341| |#else 342| | word t0 = x - y; 343| | word c1 = (t0 > x); 344| | word z = t0 - *carry; 345| | *carry = c1 | (z > t0); 346| | return z; 347| |#endif 348| 29.8M|} _ZN5Botan10word8_add3EPmPKmS2_m: 296| 53.4k|inline word word8_add3(word z[8], const word x[8], const word y[8], word carry) { 297| |#if defined(BOTAN_MP_USE_X86_32_ASM) 298| | asm(ADD_OR_SUBTRACT(DO_8_TIMES(ADDSUB3_OP, "adcl")) 299| | : [carry] "=r"(carry) 300| | : [x] "r"(x), [y] "r"(y), [z] "r"(z), "0"(carry) 301| | : "cc", "memory"); 302| | 303| |#elif defined(BOTAN_MP_USE_X86_64_ASM) 304| 53.4k| asm(ADD_OR_SUBTRACT(DO_8_TIMES(ADDSUB3_OP, "adcq")) 305| 53.4k| : [carry] "=r"(carry) 306| 53.4k| : [x] "r"(x), [y] "r"(y), [z] "r"(z), "0"(carry) 307| 53.4k| : "cc", "memory"); 308| | 309| |#else 310| | z[0] = word_add(x[0], y[0], &carry); 311| | z[1] = word_add(x[1], y[1], &carry); 312| | z[2] = word_add(x[2], y[2], &carry); 313| | z[3] = word_add(x[3], y[3], &carry); 314| | z[4] = word_add(x[4], y[4], &carry); 315| | z[5] = word_add(x[5], y[5], &carry); 316| | z[6] = word_add(x[6], y[6], &carry); 317| | z[7] = word_add(x[7], y[7], &carry); 318| |#endif 319| | 320| 53.4k| return carry; 321| 53.4k|} _ZN5Botan8word_addEmmPm: 237| 282k|inline word word_add(word x, word y, word* carry) { 238| |#if defined(BOTAN_MP_USE_X86_32_ASM) 239| | asm(ADD_OR_SUBTRACT(ASM("adcl %[y],%[x]")) 240| | : [x] "=r"(x), [carry] "=r"(*carry) 241| | : "0"(x), [y] "rm"(y), "1"(*carry) 242| | : "cc"); 243| | return x; 244| | 245| |#elif defined(BOTAN_MP_USE_X86_64_ASM) 246| | 247| 282k| asm(ADD_OR_SUBTRACT(ASM("adcq %[y],%[x]")) 248| 282k| : [x] "=r"(x), [carry] "=r"(*carry) 249| 282k| : "0"(x), [y] "rm"(y), "1"(*carry) 250| 282k| : "cc"); 251| 282k| return x; 252| | 253| |#else 254| | word z = x + y; 255| | word c1 = (z < x); 256| | z += *carry; 257| | *carry = c1 | (z < *carry); 258| | return z; 259| |#endif 260| 282k|} _ZN5Botan10word_madd2EmmPm: 44| 15.1k|inline word word_madd2(word a, word b, word* c) { 45| |#if defined(BOTAN_MP_USE_X86_32_ASM) 46| | asm(R"( 47| | mull %[b] 48| | addl %[c],%[a] 49| | adcl $0,%[carry] 50| | )" 51| | : [a] "=a"(a), [b] "=rm"(b), [carry] "=&d"(*c) 52| | : "0"(a), "1"(b), [c] "g"(*c) 53| | : "cc"); 54| | 55| | return a; 56| | 57| |#elif defined(BOTAN_MP_USE_X86_64_ASM) 58| 15.1k| asm(R"( 59| 15.1k| mulq %[b] 60| 15.1k| addq %[c],%[a] 61| 15.1k| adcq $0,%[carry] 62| 15.1k| )" 63| 15.1k| : [a] "=a"(a), [b] "=rm"(b), [carry] "=&d"(*c) 64| 15.1k| : "0"(a), "1"(b), [c] "g"(*c) 65| 15.1k| : "cc"); 66| | 67| 15.1k| return a; 68| | 69| |#elif defined(BOTAN_MP_DWORD) 70| | const BOTAN_MP_DWORD s = static_cast(a) * b + *c; 71| | *c = static_cast(s >> BOTAN_MP_WORD_BITS); 72| | return static_cast(s); 73| |#else 74| | static_assert(BOTAN_MP_WORD_BITS == 64, "Unexpected word size"); 75| | 76| | word hi = 0, lo = 0; 77| | 78| | mul64x64_128(a, b, &lo, &hi); 79| | 80| | lo += *c; 81| | hi += (lo < *c); // carry? 82| | 83| | *c = hi; 84| | return lo; 85| |#endif 86| 15.1k|} _ZN5Botan10word_madd3EmmmPm: 91| 4.82M|inline word word_madd3(word a, word b, word c, word* d) { 92| |#if defined(BOTAN_MP_USE_X86_32_ASM) 93| | asm(R"( 94| | mull %[b] 95| | 96| | addl %[c],%[a] 97| | adcl $0,%[carry] 98| | 99| | addl %[d],%[a] 100| | adcl $0,%[carry] 101| | )" 102| | : [a] "=a"(a), [b] "=rm"(b), [carry] "=&d"(*d) 103| | : "0"(a), "1"(b), [c] "g"(c), [d] "g"(*d) 104| | : "cc"); 105| | 106| | return a; 107| | 108| |#elif defined(BOTAN_MP_USE_X86_64_ASM) 109| 4.82M| asm(R"( 110| 4.82M| mulq %[b] 111| 4.82M| 112| 4.82M| addq %[c],%[a] 113| 4.82M| adcq $0,%[carry] 114| 4.82M| 115| 4.82M| addq %[d],%[a] 116| 4.82M| adcq $0,%[carry] 117| 4.82M| )" 118| 4.82M| : [a] "=a"(a), [b] "=rm"(b), [carry] "=&d"(*d) 119| 4.82M| : "0"(a), "1"(b), [c] "g"(c), [d] "g"(*d) 120| 4.82M| : "cc"); 121| | 122| 4.82M| return a; 123| | 124| |#elif defined(BOTAN_MP_DWORD) 125| | const BOTAN_MP_DWORD s = static_cast(a) * b + c + *d; 126| | *d = static_cast(s >> BOTAN_MP_WORD_BITS); 127| | return static_cast(s); 128| |#else 129| | static_assert(BOTAN_MP_WORD_BITS == 64, "Unexpected word size"); 130| | 131| | word hi = 0, lo = 0; 132| | 133| | mul64x64_128(a, b, &lo, &hi); 134| | 135| | lo += c; 136| | hi += (lo < c); // carry? 137| | 138| | lo += *d; 139| | hi += (lo < *d); // carry? 140| | 141| | *d = hi; 142| | return lo; 143| |#endif 144| 4.82M|} _ZN5Botan10word8_add2EPmPKmm: 265| 43.5k|inline word word8_add2(word x[8], const word y[8], word carry) { 266| |#if defined(BOTAN_MP_USE_X86_32_ASM) 267| | asm(ADD_OR_SUBTRACT(DO_8_TIMES(ADDSUB2_OP, "adcl")) 268| | : [carry] "=r"(carry) 269| | : [x] "r"(x), [y] "r"(y), "0"(carry) 270| | : "cc", "memory"); 271| | 272| |#elif defined(BOTAN_MP_USE_X86_64_ASM) 273| | 274| 43.5k| asm(ADD_OR_SUBTRACT(DO_8_TIMES(ADDSUB2_OP, "adcq")) 275| 43.5k| : [carry] "=r"(carry) 276| 43.5k| : [x] "r"(x), [y] "r"(y), "0"(carry) 277| 43.5k| : "cc", "memory"); 278| | 279| |#else 280| | x[0] = word_add(x[0], y[0], &carry); 281| | x[1] = word_add(x[1], y[1], &carry); 282| | x[2] = word_add(x[2], y[2], &carry); 283| | x[3] = word_add(x[3], y[3], &carry); 284| | x[4] = word_add(x[4], y[4], &carry); 285| | x[5] = word_add(x[5], y[5], &carry); 286| | x[6] = word_add(x[6], y[6], &carry); 287| | x[7] = word_add(x[7], y[7], &carry); 288| |#endif 289| | 290| 43.5k| return carry; 291| 43.5k|} _ZN5Botan10word8_sub2EPmPKmm: 353| 19.9k|inline word word8_sub2(word x[8], const word y[8], word carry) { 354| |#if defined(BOTAN_MP_USE_X86_32_ASM) 355| | asm(ADD_OR_SUBTRACT(DO_8_TIMES(ADDSUB2_OP, "sbbl")) 356| | : [carry] "=r"(carry) 357| | : [x] "r"(x), [y] "r"(y), "0"(carry) 358| | : "cc", "memory"); 359| | 360| |#elif defined(BOTAN_MP_USE_X86_64_ASM) 361| 19.9k| asm(ADD_OR_SUBTRACT(DO_8_TIMES(ADDSUB2_OP, "sbbq")) 362| 19.9k| : [carry] "=r"(carry) 363| 19.9k| : [x] "r"(x), [y] "r"(y), "0"(carry) 364| 19.9k| : "cc", "memory"); 365| | 366| |#else 367| | x[0] = word_sub(x[0], y[0], &carry); 368| | x[1] = word_sub(x[1], y[1], &carry); 369| | x[2] = word_sub(x[2], y[2], &carry); 370| | x[3] = word_sub(x[3], y[3], &carry); 371| | x[4] = word_sub(x[4], y[4], &carry); 372| | x[5] = word_sub(x[5], y[5], &carry); 373| | x[6] = word_sub(x[6], y[6], &carry); 374| | x[7] = word_sub(x[7], y[7], &carry); 375| |#endif 376| | 377| 19.9k| return carry; 378| 19.9k|} _ZN5Botan14word8_sub2_revEPmPKmm: 383| 342|inline word word8_sub2_rev(word x[8], const word y[8], word carry) { 384| |#if defined(BOTAN_MP_USE_X86_32_ASM) 385| | asm(ADD_OR_SUBTRACT(DO_8_TIMES(ADDSUB3_OP, "sbbl")) 386| | : [carry] "=r"(carry) 387| | : [x] "r"(y), [y] "r"(x), [z] "r"(x), "0"(carry) 388| | : "cc", "memory"); 389| | 390| |#elif defined(BOTAN_MP_USE_X86_64_ASM) 391| 342| asm(ADD_OR_SUBTRACT(DO_8_TIMES(ADDSUB3_OP, "sbbq")) 392| 342| : [carry] "=r"(carry) 393| 342| : [x] "r"(y), [y] "r"(x), [z] "r"(x), "0"(carry) 394| 342| : "cc", "memory"); 395| | 396| |#else 397| | x[0] = word_sub(y[0], x[0], &carry); 398| | x[1] = word_sub(y[1], x[1], &carry); 399| | x[2] = word_sub(y[2], x[2], &carry); 400| | x[3] = word_sub(y[3], x[3], &carry); 401| | x[4] = word_sub(y[4], x[4], &carry); 402| | x[5] = word_sub(y[5], x[5], &carry); 403| | x[6] = word_sub(y[6], x[6], &carry); 404| | x[7] = word_sub(y[7], x[7], &carry); 405| |#endif 406| | 407| 342| return carry; 408| 342|} _ZN5Botan13word8_linmul2EPmmm: 443| 15.8M|inline word word8_linmul2(word x[8], word y, word carry) { 444| |#if defined(BOTAN_MP_USE_X86_32_ASM) 445| | asm(DO_8_TIMES(LINMUL_OP, "x") : [carry] "=r"(carry) : [x] "r"(x), [y] "rm"(y), "0"(carry) : "cc", "%eax", "%edx"); 446| | 447| |#elif defined(BOTAN_MP_USE_X86_64_ASM) 448| 15.8M| asm(DO_8_TIMES(LINMUL_OP, "x") : [carry] "=r"(carry) : [x] "r"(x), [y] "rm"(y), "0"(carry) : "cc", "%rax", "%rdx"); 449| | 450| |#else 451| | x[0] = word_madd2(x[0], y, &carry); 452| | x[1] = word_madd2(x[1], y, &carry); 453| | x[2] = word_madd2(x[2], y, &carry); 454| | x[3] = word_madd2(x[3], y, &carry); 455| | x[4] = word_madd2(x[4], y, &carry); 456| | x[5] = word_madd2(x[5], y, &carry); 457| | x[6] = word_madd2(x[6], y, &carry); 458| | x[7] = word_madd2(x[7], y, &carry); 459| |#endif 460| | 461| 15.8M| return carry; 462| 15.8M|} _ZN5Botan13word8_linmul3EPmPKmmm: 467| 3.46k|inline word word8_linmul3(word z[8], const word x[8], word y, word carry) { 468| |#if defined(BOTAN_MP_USE_X86_32_ASM) 469| | asm(DO_8_TIMES(LINMUL_OP, "z") 470| | : [carry] "=r"(carry) 471| | : [z] "r"(z), [x] "r"(x), [y] "rm"(y), "0"(carry) 472| | : "cc", "%eax", "%edx"); 473| | 474| |#elif defined(BOTAN_MP_USE_X86_64_ASM) 475| 3.46k| asm(DO_8_TIMES(LINMUL_OP, "z") 476| 3.46k| : [carry] "=r"(carry) 477| 3.46k| : [z] "r"(z), [x] "r"(x), [y] "rm"(y), "0"(carry) 478| 3.46k| : "cc", "%rax", "%rdx"); 479| | 480| |#else 481| | z[0] = word_madd2(x[0], y, &carry); 482| | z[1] = word_madd2(x[1], y, &carry); 483| | z[2] = word_madd2(x[2], y, &carry); 484| | z[3] = word_madd2(x[3], y, &carry); 485| | z[4] = word_madd2(x[4], y, &carry); 486| | z[5] = word_madd2(x[5], y, &carry); 487| | z[6] = word_madd2(x[6], y, &carry); 488| | z[7] = word_madd2(x[7], y, &carry); 489| |#endif 490| | 491| 3.46k| return carry; 492| 3.46k|} _ZN5Botan11word8_madd3EPmPKmmm: 497| 2.70M|inline word word8_madd3(word z[8], const word x[8], word y, word carry) { 498| |#if defined(BOTAN_MP_USE_X86_32_ASM) 499| | asm(DO_8_TIMES(MULADD_OP, "") 500| | : [carry] "=r"(carry) 501| | : [z] "r"(z), [x] "r"(x), [y] "rm"(y), "0"(carry) 502| | : "cc", "%eax", "%edx"); 503| | 504| |#elif defined(BOTAN_MP_USE_X86_64_ASM) 505| 2.70M| asm(DO_8_TIMES(MULADD_OP, "") 506| 2.70M| : [carry] "=r"(carry) 507| 2.70M| : [z] "r"(z), [x] "r"(x), [y] "rm"(y), "0"(carry) 508| 2.70M| : "cc", "%rax", "%rdx"); 509| | 510| |#else 511| | z[0] = word_madd3(x[0], y, z[0], &carry); 512| | z[1] = word_madd3(x[1], y, z[1], &carry); 513| | z[2] = word_madd3(x[2], y, z[2], &carry); 514| | z[3] = word_madd3(x[3], y, z[3], &carry); 515| | z[4] = word_madd3(x[4], y, z[4], &carry); 516| | z[5] = word_madd3(x[5], y, z[5], &carry); 517| | z[6] = word_madd3(x[6], y, z[6], &carry); 518| | z[7] = word_madd3(x[7], y, z[7], &carry); 519| |#endif 520| | 521| 2.70M| return carry; 522| 2.70M|} _ZN5Botan12word3_muladdEPmS0_S0_mm: 528| 50.8M|inline void word3_muladd(word* w2, word* w1, word* w0, word x, word y) { 529| |#if defined(BOTAN_MP_USE_X86_32_ASM) 530| | word z0 = 0, z1 = 0; 531| | 532| | asm("mull %[y]" : "=a"(z0), "=d"(z1) : "a"(x), [y] "rm"(y) : "cc"); 533| | 534| | asm(R"( 535| | addl %[z0],%[w0] 536| | adcl %[z1],%[w1] 537| | adcl $0,%[w2] 538| | )" 539| | : [w0] "=r"(*w0), [w1] "=r"(*w1), [w2] "=r"(*w2) 540| | : [z0] "r"(z0), [z1] "r"(z1), "0"(*w0), "1"(*w1), "2"(*w2) 541| | : "cc"); 542| | 543| |#elif defined(BOTAN_MP_USE_X86_64_ASM) 544| 50.8M| word z0 = 0, z1 = 0; 545| | 546| 50.8M| asm("mulq %[y]" : "=a"(z0), "=d"(z1) : "a"(x), [y] "rm"(y) : "cc"); 547| | 548| 50.8M| asm(R"( 549| 50.8M| addq %[z0],%[w0] 550| 50.8M| adcq %[z1],%[w1] 551| 50.8M| adcq $0,%[w2] 552| 50.8M| )" 553| 50.8M| : [w0] "=r"(*w0), [w1] "=r"(*w1), [w2] "=r"(*w2) 554| 50.8M| : [z0] "r"(z0), [z1] "r"(z1), "0"(*w0), "1"(*w1), "2"(*w2) 555| 50.8M| : "cc"); 556| | 557| |#else 558| | word carry = *w0; 559| | *w0 = word_madd2(x, y, &carry); 560| | *w1 += carry; 561| | *w2 += (*w1 < carry); 562| |#endif 563| 50.8M|} _ZN5Botan9word3_addEPmS0_S0_m: 569| 4.19M|inline void word3_add(word* w2, word* w1, word* w0, word x) { 570| |#if defined(BOTAN_MP_USE_X86_32_ASM) 571| | asm(R"( 572| | addl %[x],%[w0] 573| | adcl $0,%[w1] 574| | adcl $0,%[w2] 575| | )" 576| | : [w0] "=r"(*w0), [w1] "=r"(*w1), [w2] "=r"(*w2) 577| | : [x] "r"(x), "0"(*w0), "1"(*w1), "2"(*w2) 578| | : "cc"); 579| | 580| |#elif defined(BOTAN_MP_USE_X86_64_ASM) 581| 4.19M| asm(R"( 582| 4.19M| addq %[x],%[w0] 583| 4.19M| adcq $0,%[w1] 584| 4.19M| adcq $0,%[w2] 585| 4.19M| )" 586| 4.19M| : [w0] "=r"(*w0), [w1] "=r"(*w1), [w2] "=r"(*w2) 587| 4.19M| : [x] "r"(x), "0"(*w0), "1"(*w1), "2"(*w2) 588| 4.19M| : "cc"); 589| | 590| |#else 591| | *w0 += x; 592| | word c1 = (*w0 < x); 593| | *w1 += c1; 594| | word c2 = (*w1 < c1); 595| | *w2 += c2; 596| |#endif 597| 4.19M|} _ZN5Botan14word3_muladd_2EPmS0_S0_mm: 603| 6.25M|inline void word3_muladd_2(word* w2, word* w1, word* w0, word x, word y) { 604| |#if defined(BOTAN_MP_USE_X86_32_ASM) 605| | word z0 = 0, z1 = 0; 606| | 607| | asm("mull %[y]" : "=a"(z0), "=d"(z1) : "a"(x), [y] "rm"(y) : "cc"); 608| | 609| | asm(R"( 610| | addl %[z0],%[w0] 611| | adcl %[z1],%[w1] 612| | adcl $0,%[w2] 613| | 614| | addl %[z0],%[w0] 615| | adcl %[z1],%[w1] 616| | adcl $0,%[w2] 617| | )" 618| | : [w0] "=r"(*w0), [w1] "=r"(*w1), [w2] "=r"(*w2) 619| | : [z0] "r"(z0), [z1] "r"(z1), "0"(*w0), "1"(*w1), "2"(*w2) 620| | : "cc"); 621| | 622| |#elif defined(BOTAN_MP_USE_X86_64_ASM) 623| 6.25M| word z0 = 0, z1 = 0; 624| | 625| 6.25M| asm("mulq %[y]" : "=a"(z0), "=d"(z1) : "a"(x), [y] "rm"(y) : "cc"); 626| | 627| 6.25M| asm(R"( 628| 6.25M| addq %[z0],%[w0] 629| 6.25M| adcq %[z1],%[w1] 630| 6.25M| adcq $0,%[w2] 631| 6.25M| 632| 6.25M| addq %[z0],%[w0] 633| 6.25M| adcq %[z1],%[w1] 634| 6.25M| adcq $0,%[w2] 635| 6.25M| )" 636| 6.25M| : [w0] "=r"(*w0), [w1] "=r"(*w1), [w2] "=r"(*w2) 637| 6.25M| : [z0] "r"(z0), [z1] "r"(z1), "0"(*w0), "1"(*w1), "2"(*w2) 638| 6.25M| : "cc"); 639| | 640| |#else 641| | word carry = 0; 642| | x = word_madd2(x, y, &carry); 643| | y = carry; 644| | 645| | word top = (y >> (BOTAN_MP_WORD_BITS - 1)); 646| | y <<= 1; 647| | y |= (x >> (BOTAN_MP_WORD_BITS - 1)); 648| | x <<= 1; 649| | 650| | carry = 0; 651| | *w0 = word_add(*w0, x, &carry); 652| | *w1 = word_add(*w1, y, &carry); 653| | *w2 = word_add(*w2, top, &carry); 654| |#endif 655| 6.25M|} _ZN5Botan10bigint_cmpEPKmmS1_m: 468| 8.56k|inline int32_t bigint_cmp(const word x[], size_t x_size, const word y[], size_t y_size) { 469| 8.56k| static_assert(sizeof(word) >= sizeof(uint32_t), "Size assumption"); 470| | 471| 8.56k| const word LT = static_cast(-1); 472| 8.56k| const word EQ = 0; 473| 8.56k| const word GT = 1; 474| | 475| 8.56k| const size_t common_elems = std::min(x_size, y_size); 476| | 477| 8.56k| word result = EQ; // until found otherwise 478| | 479| 179k| for(size_t i = 0; i != common_elems; i++) { ------------------ | Branch (479:22): [True: 171k, False: 8.56k] ------------------ 480| 171k| const auto is_eq = CT::Mask::is_equal(x[i], y[i]); 481| 171k| const auto is_lt = CT::Mask::is_lt(x[i], y[i]); 482| | 483| 171k| result = is_eq.select(result, is_lt.select(LT, GT)); 484| 171k| } 485| | 486| 8.56k| if(x_size < y_size) { ------------------ | Branch (486:7): [True: 6.13k, False: 2.43k] ------------------ 487| 6.13k| word mask = 0; 488| 92.7k| for(size_t i = x_size; i != y_size; i++) ------------------ | Branch (488:30): [True: 86.6k, False: 6.13k] ------------------ 489| 86.6k| mask |= y[i]; 490| | 491| | // If any bits were set in high part of y, then x < y 492| 6.13k| result = CT::Mask::is_zero(mask).select(result, LT); 493| 6.13k| } else if(y_size < x_size) { ------------------ | Branch (493:14): [True: 0, False: 2.43k] ------------------ 494| 0| word mask = 0; 495| 0| for(size_t i = y_size; i != x_size; i++) ------------------ | Branch (495:30): [True: 0, False: 0] ------------------ 496| 0| mask |= x[i]; 497| | 498| | // If any bits were set in high part of x, then x > y 499| 0| result = CT::Mask::is_zero(mask).select(result, GT); 500| 0| } 501| | 502| 8.56k| CT::unpoison(result); 503| 8.56k| BOTAN_DEBUG_ASSERT(result == LT || result == GT || result == EQ); ------------------ | | 99| 8.56k| do { \ | | 100| 8.56k| } while(0) | | ------------------ | | | Branch (100:15): [Folded - Ignored] | | ------------------ ------------------ 504| 8.56k| return static_cast(result); 505| 8.56k|} _ZN5Botan15bigint_ct_is_ltEPKmmS1_mb: 513| 2.15k| const word x[], size_t x_size, const word y[], size_t y_size, bool lt_or_equal = false) { 514| 2.15k| const size_t common_elems = std::min(x_size, y_size); 515| | 516| 2.15k| auto is_lt = CT::Mask::expand(lt_or_equal); 517| | 518| 7.29k| for(size_t i = 0; i != common_elems; i++) { ------------------ | Branch (518:22): [True: 5.14k, False: 2.15k] ------------------ 519| 5.14k| const auto eq = CT::Mask::is_equal(x[i], y[i]); 520| 5.14k| const auto lt = CT::Mask::is_lt(x[i], y[i]); 521| 5.14k| is_lt = eq.select_mask(is_lt, lt); 522| 5.14k| } 523| | 524| 2.15k| if(x_size < y_size) { ------------------ | Branch (524:7): [True: 2.09k, False: 59] ------------------ 525| 2.09k| word mask = 0; 526| 50.6k| for(size_t i = x_size; i != y_size; i++) ------------------ | Branch (526:30): [True: 48.5k, False: 2.09k] ------------------ 527| 48.5k| mask |= y[i]; 528| | // If any bits were set in high part of y, then is_lt should be forced true 529| 2.09k| is_lt |= CT::Mask::expand(mask); 530| 2.09k| } else if(y_size < x_size) { ------------------ | Branch (530:14): [True: 0, False: 59] ------------------ 531| 0| word mask = 0; 532| 0| for(size_t i = y_size; i != x_size; i++) ------------------ | Branch (532:30): [True: 0, False: 0] ------------------ 533| 0| mask |= x[i]; 534| | 535| | // If any bits were set in high part of x, then is_lt should be false 536| 0| is_lt &= CT::Mask::is_zero(mask); 537| 0| } 538| | 539| 2.15k| return is_lt; 540| 2.15k|} _ZN5Botan11bigint_sub3EPmPKmmS2_m: 308| 3.80M|inline word bigint_sub3(word z[], const word x[], size_t x_size, const word y[], size_t y_size) { 309| 3.80M| word borrow = 0; 310| | 311| 3.80M| BOTAN_ASSERT(x_size >= y_size, "Expected sizes"); ------------------ | | 51| 3.80M| do { \ | | 52| 3.80M| if(!(expr)) \ | | ------------------ | | | Branch (52:10): [True: 0, False: 3.80M] | | ------------------ | | 53| 3.80M| Botan::assertion_failure(#expr, assertion_made, __func__, __FILE__, __LINE__); \ | | 54| 3.80M| } while(0) | | ------------------ | | | Branch (54:12): [Folded - Ignored] | | ------------------ ------------------ 312| | 313| 3.80M| const size_t blocks = y_size - (y_size % 8); 314| | 315| 16.2M| for(size_t i = 0; i != blocks; i += 8) ------------------ | Branch (315:22): [True: 12.4M, False: 3.80M] ------------------ 316| 12.4M| borrow = word8_sub3(z + i, x + i, y + i, borrow); 317| | 318| 12.9M| for(size_t i = blocks; i != y_size; ++i) ------------------ | Branch (318:27): [True: 9.17M, False: 3.80M] ------------------ 319| 9.17M| z[i] = word_sub(x[i], y[i], &borrow); 320| | 321| 24.4M| for(size_t i = y_size; i != x_size; ++i) ------------------ | Branch (321:27): [True: 20.6M, False: 3.80M] ------------------ 322| 20.6M| z[i] = word_sub(x[i], 0, &borrow); 323| | 324| 3.80M| return borrow; 325| 3.80M|} _ZN5Botan15bigint_cnd_swapEmPmS0_m: 29| 3.64M|inline void bigint_cnd_swap(word cnd, word x[], word y[], size_t size) { 30| 3.64M| const auto mask = CT::Mask::expand(cnd); 31| | 32| 130M| for(size_t i = 0; i != size; ++i) { ------------------ | Branch (32:22): [True: 126M, False: 3.64M] ------------------ 33| 126M| const word a = x[i]; 34| 126M| const word b = y[i]; 35| 126M| x[i] = mask.select(b, a); 36| 126M| y[i] = mask.select(a, b); 37| 126M| } 38| 3.64M|} _ZN5Botan21bigint_cnd_add_or_subENS_2CT4MaskImEEPmPKmm: 123| 3.34k|inline void bigint_cnd_add_or_sub(CT::Mask mask, word x[], const word y[], size_t size) { 124| 3.34k| const size_t blocks = size - (size % 8); 125| | 126| 3.34k| word carry = 0; 127| 3.34k| word borrow = 0; 128| | 129| 3.34k| word t0[8] = {0}; 130| 3.34k| word t1[8] = {0}; 131| | 132| 23.4k| for(size_t i = 0; i != blocks; i += 8) { ------------------ | Branch (132:22): [True: 20.0k, False: 3.34k] ------------------ 133| 20.0k| carry = word8_add3(t0, x + i, y + i, carry); 134| 20.0k| borrow = word8_sub3(t1, x + i, y + i, borrow); 135| | 136| 180k| for(size_t j = 0; j != 8; ++j) ------------------ | Branch (136:25): [True: 160k, False: 20.0k] ------------------ 137| 160k| x[i + j] = mask.select(t0[j], t1[j]); 138| 20.0k| } 139| | 140| 5.05k| for(size_t i = blocks; i != size; ++i) { ------------------ | Branch (140:27): [True: 1.70k, False: 3.34k] ------------------ 141| 1.70k| const word a = word_add(x[i], y[i], &carry); 142| 1.70k| const word s = word_sub(x[i], y[i], &borrow); 143| | 144| 1.70k| x[i] = mask.select(a, s); 145| 1.70k| } 146| 3.34k|} _ZN5Botan14bigint_add2_ncEPmmPKmm: 201| 28.5k|inline word bigint_add2_nc(word x[], size_t x_size, const word y[], size_t y_size) { 202| 28.5k| word carry = 0; 203| | 204| 28.5k| BOTAN_ASSERT(x_size >= y_size, "Expected sizes"); ------------------ | | 51| 28.5k| do { \ | | 52| 28.5k| if(!(expr)) \ | | ------------------ | | | Branch (52:10): [True: 0, False: 28.5k] | | ------------------ | | 53| 28.5k| Botan::assertion_failure(#expr, assertion_made, __func__, __FILE__, __LINE__); \ | | 54| 28.5k| } while(0) | | ------------------ | | | Branch (54:12): [Folded - Ignored] | | ------------------ ------------------ 205| | 206| 28.5k| const size_t blocks = y_size - (y_size % 8); 207| | 208| 72.0k| for(size_t i = 0; i != blocks; i += 8) ------------------ | Branch (208:22): [True: 43.5k, False: 28.5k] ------------------ 209| 43.5k| carry = word8_add2(x + i, y + i, carry); 210| | 211| 54.3k| for(size_t i = blocks; i != y_size; ++i) ------------------ | Branch (211:27): [True: 25.8k, False: 28.5k] ------------------ 212| 25.8k| x[i] = word_add(x[i], y[i], &carry); 213| | 214| 282k| for(size_t i = y_size; i != x_size; ++i) ------------------ | Branch (214:27): [True: 253k, False: 28.5k] ------------------ 215| 253k| x[i] = word_add(x[i], 0, &carry); 216| | 217| 28.5k| return carry; 218| 28.5k|} _ZN5Botan14bigint_add3_ncEPmPKmmS2_m: 223| 8.34k|inline word bigint_add3_nc(word z[], const word x[], size_t x_size, const word y[], size_t y_size) { 224| 8.34k| if(x_size < y_size) { ------------------ | Branch (224:7): [True: 0, False: 8.34k] ------------------ 225| 0| return bigint_add3_nc(z, y, y_size, x, x_size); 226| 0| } 227| | 228| 8.34k| word carry = 0; 229| | 230| 8.34k| const size_t blocks = y_size - (y_size % 8); 231| | 232| 41.7k| for(size_t i = 0; i != blocks; i += 8) ------------------ | Branch (232:22): [True: 33.3k, False: 8.34k] ------------------ 233| 33.3k| carry = word8_add3(z + i, x + i, y + i, carry); 234| | 235| 9.48k| for(size_t i = blocks; i != y_size; ++i) ------------------ | Branch (235:27): [True: 1.13k, False: 8.34k] ------------------ 236| 1.13k| z[i] = word_add(x[i], y[i], &carry); 237| | 238| 8.34k| for(size_t i = y_size; i != x_size; ++i) ------------------ | Branch (238:27): [True: 0, False: 8.34k] ------------------ 239| 0| z[i] = word_add(x[i], 0, &carry); 240| | 241| 8.34k| return carry; 242| 8.34k|} _ZN5Botan11bigint_add2EPmmPKmm: 251| 3.46k|inline void bigint_add2(word x[], size_t x_size, const word y[], size_t y_size) { 252| 3.46k| x[x_size] += bigint_add2_nc(x, x_size, y, y_size); 253| 3.46k|} _ZN5Botan11bigint_sub2EPmmPKmm: 265| 4.99k|inline word bigint_sub2(word x[], size_t x_size, const word y[], size_t y_size) { 266| 4.99k| word borrow = 0; 267| | 268| 4.99k| BOTAN_ASSERT(x_size >= y_size, "Expected sizes"); ------------------ | | 51| 4.99k| do { \ | | 52| 4.99k| if(!(expr)) \ | | ------------------ | | | Branch (52:10): [True: 0, False: 4.99k] | | ------------------ | | 53| 4.99k| Botan::assertion_failure(#expr, assertion_made, __func__, __FILE__, __LINE__); \ | | 54| 4.99k| } while(0) | | ------------------ | | | Branch (54:12): [Folded - Ignored] | | ------------------ ------------------ 269| | 270| 4.99k| const size_t blocks = y_size - (y_size % 8); 271| | 272| 24.9k| for(size_t i = 0; i != blocks; i += 8) ------------------ | Branch (272:22): [True: 19.9k, False: 4.99k] ------------------ 273| 19.9k| borrow = word8_sub2(x + i, y + i, borrow); 274| | 275| 4.99k| for(size_t i = blocks; i != y_size; ++i) ------------------ | Branch (275:27): [True: 0, False: 4.99k] ------------------ 276| 0| x[i] = word_sub(x[i], y[i], &borrow); 277| | 278| 84.9k| for(size_t i = y_size; i != x_size; ++i) ------------------ | Branch (278:27): [True: 79.9k, False: 4.99k] ------------------ 279| 79.9k| x[i] = word_sub(x[i], 0, &borrow); 280| | 281| 4.99k| return borrow; 282| 4.99k|} _ZN5Botan15bigint_sub2_revEPmPKmm: 287| 96|inline void bigint_sub2_rev(word x[], const word y[], size_t y_size) { 288| 96| word borrow = 0; 289| | 290| 96| const size_t blocks = y_size - (y_size % 8); 291| | 292| 438| for(size_t i = 0; i != blocks; i += 8) ------------------ | Branch (292:22): [True: 342, False: 96] ------------------ 293| 342| borrow = word8_sub2_rev(x + i, y + i, borrow); 294| | 295| 225| for(size_t i = blocks; i != y_size; ++i) ------------------ | Branch (295:27): [True: 129, False: 96] ------------------ 296| 129| x[i] = word_sub(y[i], x[i], &borrow); 297| | 298| 96| BOTAN_ASSERT(borrow == 0, "y must be greater than x"); ------------------ | | 51| 96| do { \ | | 52| 96| if(!(expr)) \ | | ------------------ | | | Branch (52:10): [True: 0, False: 96] | | ------------------ | | 53| 96| Botan::assertion_failure(#expr, assertion_made, __func__, __FILE__, __LINE__); \ | | 54| 96| } while(0) | | ------------------ | | | Branch (54:12): [Folded - Ignored] | | ------------------ ------------------ 299| 96|} _ZN5Botan14bigint_sub_absEPmPKmS2_mS0_: 339| 11.6k|inline CT::Mask bigint_sub_abs(word z[], const word x[], const word y[], size_t N, word ws[]) { 340| | // Subtract in both direction then conditional copy out the result 341| | 342| 11.6k| word* ws0 = ws; 343| 11.6k| word* ws1 = ws + N; 344| | 345| 11.6k| word borrow0 = 0; 346| 11.6k| word borrow1 = 0; 347| | 348| 11.6k| const size_t blocks = N - (N % 8); 349| | 350| 35.0k| for(size_t i = 0; i != blocks; i += 8) { ------------------ | Branch (350:22): [True: 23.3k, False: 11.6k] ------------------ 351| 23.3k| borrow0 = word8_sub3(ws0 + i, x + i, y + i, borrow0); 352| 23.3k| borrow1 = word8_sub3(ws1 + i, y + i, x + i, borrow1); 353| 23.3k| } 354| | 355| 12.8k| for(size_t i = blocks; i != N; ++i) { ------------------ | Branch (355:27): [True: 1.13k, False: 11.6k] ------------------ 356| 1.13k| ws0[i] = word_sub(x[i], y[i], &borrow0); 357| 1.13k| ws1[i] = word_sub(y[i], x[i], &borrow1); 358| 1.13k| } 359| | 360| 11.6k| return CT::conditional_copy_mem(borrow0, z, ws1, ws0, N); 361| 11.6k|} _ZN5Botan11bigint_shr1EPmmmm: 381| 7.11k|inline void bigint_shr1(word x[], size_t x_size, size_t word_shift, size_t bit_shift) { 382| 7.11k| const size_t top = x_size >= word_shift ? (x_size - word_shift) : 0; ------------------ | Branch (382:23): [True: 6.81k, False: 304] ------------------ 383| | 384| 7.11k| if(top > 0) ------------------ | Branch (384:7): [True: 6.80k, False: 307] ------------------ 385| 6.80k| copy_mem(x, x + word_shift, top); 386| 7.11k| clear_mem(x + top, std::min(word_shift, x_size)); 387| | 388| 7.11k| const auto carry_mask = CT::Mask::expand(bit_shift); 389| 7.11k| const size_t carry_shift = carry_mask.if_set_return(BOTAN_MP_WORD_BITS - bit_shift); ------------------ | | 50| 7.11k|#define BOTAN_MP_WORD_BITS 64 ------------------ 390| | 391| 7.11k| word carry = 0; 392| | 393| 172k| for(size_t i = 0; i != top; ++i) { ------------------ | Branch (393:22): [True: 165k, False: 7.11k] ------------------ 394| 165k| const word w = x[top - i - 1]; 395| 165k| x[top - i - 1] = (w >> bit_shift) | carry; 396| 165k| carry = carry_mask.if_set_return(w << carry_shift); 397| 165k| } 398| 7.11k|} _ZN5Botan14bigint_linmul2EPmmm: 434| 3.64M|[[nodiscard]] inline word bigint_linmul2(word x[], size_t x_size, word y) { 435| 3.64M| const size_t blocks = x_size - (x_size % 8); 436| | 437| 3.64M| word carry = 0; 438| | 439| 19.4M| for(size_t i = 0; i != blocks; i += 8) ------------------ | Branch (439:22): [True: 15.8M, False: 3.64M] ------------------ 440| 15.8M| carry = word8_linmul2(x + i, y, carry); 441| | 442| 3.64M| for(size_t i = blocks; i != x_size; ++i) ------------------ | Branch (442:27): [True: 0, False: 3.64M] ------------------ 443| 0| x[i] = word_madd2(x[i], y, &carry); 444| | 445| 3.64M| return carry; 446| 3.64M|} _ZN5Botan14bigint_linmul3EPmPKmmm: 448| 12.8k|inline void bigint_linmul3(word z[], const word x[], size_t x_size, word y) { 449| 12.8k| const size_t blocks = x_size - (x_size % 8); 450| | 451| 12.8k| word carry = 0; 452| | 453| 16.2k| for(size_t i = 0; i != blocks; i += 8) ------------------ | Branch (453:22): [True: 3.46k, False: 12.8k] ------------------ 454| 3.46k| carry = word8_linmul3(z + i, x + i, y, carry); 455| | 456| 27.9k| for(size_t i = blocks; i != x_size; ++i) ------------------ | Branch (456:27): [True: 15.1k, False: 12.8k] ------------------ 457| 15.1k| z[i] = word_madd2(x[i], y, &carry); 458| | 459| 12.8k| z[x_size] = carry; 460| 12.8k|} _ZN5Botan14bigint_sub_absEPmPKmmS2_m: 576| 7.11k|inline int32_t bigint_sub_abs(word z[], const word x[], size_t x_size, const word y[], size_t y_size) { 577| 7.11k| const int32_t relative_size = bigint_cmp(x, x_size, y, y_size); 578| | 579| | // Swap if relative_size == -1 580| 7.11k| const bool need_swap = relative_size < 0; 581| 7.11k| CT::conditional_swap_ptr(need_swap, x, y); 582| 7.11k| CT::conditional_swap(need_swap, x_size, y_size); 583| | 584| | /* 585| | * We know at this point that x >= y so if y_size is larger than 586| | * x_size, we are guaranteed they are just leading zeros which can 587| | * be ignored 588| | */ 589| 7.11k| y_size = std::min(x_size, y_size); 590| | 591| 7.11k| bigint_sub3(z, x, x_size, y, y_size); 592| | 593| 7.11k| return relative_size; 594| 7.11k|} _ZN5Botan17bigint_monty_redcEPmPKmmmS0_m: 727| 147k|inline void bigint_monty_redc(word z[], const word p[], size_t p_size, word p_dash, word ws[], size_t ws_size) { 728| 147k| const size_t z_size = 2 * p_size; 729| | 730| 147k| BOTAN_ARG_CHECK(ws_size >= p_size + 1, "Montgomery workspace too small"); ------------------ | | 30| 147k| do { \ | | 31| 147k| if(!(expr)) \ | | ------------------ | | | Branch (31:10): [True: 0, False: 147k] | | ------------------ | | 32| 147k| Botan::throw_invalid_argument(msg, __func__, __FILE__); \ | | 33| 147k| } while(0) | | ------------------ | | | Branch (33:12): [Folded - Ignored] | | ------------------ ------------------ 731| | 732| 147k| if(p_size == 4) ------------------ | Branch (732:7): [True: 7.69k, False: 140k] ------------------ 733| 7.69k| bigint_monty_redc_4(z, p, p_dash, ws); 734| 140k| else if(p_size == 6) ------------------ | Branch (734:12): [True: 8.45k, False: 131k] ------------------ 735| 8.45k| bigint_monty_redc_6(z, p, p_dash, ws); 736| 131k| else if(p_size == 8) ------------------ | Branch (736:12): [True: 9.25k, False: 122k] ------------------ 737| 9.25k| bigint_monty_redc_8(z, p, p_dash, ws); 738| 122k| else if(p_size == 16) ------------------ | Branch (738:12): [True: 34.5k, False: 87.8k] ------------------ 739| 34.5k| bigint_monty_redc_16(z, p, p_dash, ws); 740| 87.8k| else if(p_size == 24) ------------------ | Branch (740:12): [True: 3.74k, False: 84.0k] ------------------ 741| 3.74k| bigint_monty_redc_24(z, p, p_dash, ws); 742| 84.0k| else if(p_size == 32) ------------------ | Branch (742:12): [True: 7.65k, False: 76.4k] ------------------ 743| 7.65k| bigint_monty_redc_32(z, p, p_dash, ws); 744| 76.4k| else 745| 76.4k| bigint_monty_redc_generic(z, z_size, p, p_size, p_dash, ws); 746| 147k|} _ZN5Botan6PK_Ops12VerificationD2Ev: 83| 1.18k| virtual ~Verification() = default; _ZN5Botan4rotlILm7EjEET0_S1_: 23| 50.3k|{ 24| 50.3k| return static_cast((input << ROT) | (input >> (8 * sizeof(T) - ROT))); 25| 50.3k|} _ZN5Botan4rotlILm11EjEET0_S1_: 23| 50.3k|{ 24| 50.3k| return static_cast((input << ROT) | (input >> (8 * sizeof(T) - ROT))); 25| 50.3k|} _ZN5Botan4rotlILm5EjEET0_S1_: 23| 3.62M|{ 24| 3.62M| return static_cast((input << ROT) | (input >> (8 * sizeof(T) - ROT))); 25| 3.62M|} _ZN5Botan4rotlILm9EjEET0_S1_: 23| 50.3k|{ 24| 50.3k| return static_cast((input << ROT) | (input >> (8 * sizeof(T) - ROT))); 25| 50.3k|} _ZN5Botan4rotlILm15EjEET0_S1_: 23| 50.3k|{ 24| 50.3k| return static_cast((input << ROT) | (input >> (8 * sizeof(T) - ROT))); 25| 50.3k|} _ZN5Botan4rotlILm12EjEET0_S1_: 23| 50.3k|{ 24| 50.3k| return static_cast((input << ROT) | (input >> (8 * sizeof(T) - ROT))); 25| 50.3k|} _ZN5Botan4rotlILm17EjEET0_S1_: 23| 50.3k|{ 24| 50.3k| return static_cast((input << ROT) | (input >> (8 * sizeof(T) - ROT))); 25| 50.3k|} _ZN5Botan4rotlILm22EjEET0_S1_: 23| 50.3k|{ 24| 50.3k| return static_cast((input << ROT) | (input >> (8 * sizeof(T) - ROT))); 25| 50.3k|} _ZN5Botan4rotlILm14EjEET0_S1_: 23| 50.3k|{ 24| 50.3k| return static_cast((input << ROT) | (input >> (8 * sizeof(T) - ROT))); 25| 50.3k|} _ZN5Botan4rotlILm20EjEET0_S1_: 23| 50.3k|{ 24| 50.3k| return static_cast((input << ROT) | (input >> (8 * sizeof(T) - ROT))); 25| 50.3k|} _ZN5Botan4rotlILm4EjEET0_S1_: 23| 50.3k|{ 24| 50.3k| return static_cast((input << ROT) | (input >> (8 * sizeof(T) - ROT))); 25| 50.3k|} _ZN5Botan4rotlILm16EjEET0_S1_: 23| 50.3k|{ 24| 50.3k| return static_cast((input << ROT) | (input >> (8 * sizeof(T) - ROT))); 25| 50.3k|} _ZN5Botan4rotlILm23EjEET0_S1_: 23| 50.3k|{ 24| 50.3k| return static_cast((input << ROT) | (input >> (8 * sizeof(T) - ROT))); 25| 50.3k|} _ZN5Botan4rotlILm6EjEET0_S1_: 23| 50.3k|{ 24| 50.3k| return static_cast((input << ROT) | (input >> (8 * sizeof(T) - ROT))); 25| 50.3k|} _ZN5Botan4rotlILm10EjEET0_S1_: 23| 50.3k|{ 24| 50.3k| return static_cast((input << ROT) | (input >> (8 * sizeof(T) - ROT))); 25| 50.3k|} _ZN5Botan4rotlILm21EjEET0_S1_: 23| 50.3k|{ 24| 50.3k| return static_cast((input << ROT) | (input >> (8 * sizeof(T) - ROT))); 25| 50.3k|} _ZN5Botan4rotlILm30EjEET0_S1_: 23| 3.57M|{ 24| 3.57M| return static_cast((input << ROT) | (input >> (8 * sizeof(T) - ROT))); 25| 3.57M|} _ZN5Botan3rhoILm2ELm13ELm22EjEET2_S1_: 51| 2.67M|inline constexpr T rho(T x) { 52| 2.67M| return rotr(x) ^ rotr(x) ^ rotr(x); 53| 2.67M|} _ZN5Botan4rotrILm2EjEET0_S1_: 35| 2.67M|{ 36| 2.67M| return static_cast((input >> ROT) | (input << (8 * sizeof(T) - ROT))); 37| 2.67M|} _ZN5Botan4rotrILm13EjEET0_S1_: 35| 2.67M|{ 36| 2.67M| return static_cast((input >> ROT) | (input << (8 * sizeof(T) - ROT))); 37| 2.67M|} _ZN5Botan4rotrILm22EjEET0_S1_: 35| 2.67M|{ 36| 2.67M| return static_cast((input >> ROT) | (input << (8 * sizeof(T) - ROT))); 37| 2.67M|} _ZN5Botan3rhoILm6ELm11ELm25EjEET2_S1_: 51| 2.67M|inline constexpr T rho(T x) { 52| 2.67M| return rotr(x) ^ rotr(x) ^ rotr(x); 53| 2.67M|} _ZN5Botan4rotrILm6EjEET0_S1_: 35| 2.67M|{ 36| 2.67M| return static_cast((input >> ROT) | (input << (8 * sizeof(T) - ROT))); 37| 2.67M|} _ZN5Botan4rotrILm11EjEET0_S1_: 35| 2.67M|{ 36| 2.67M| return static_cast((input >> ROT) | (input << (8 * sizeof(T) - ROT))); 37| 2.67M|} _ZN5Botan4rotrILm25EjEET0_S1_: 35| 2.67M|{ 36| 2.67M| return static_cast((input >> ROT) | (input << (8 * sizeof(T) - ROT))); 37| 2.67M|} _ZN5Botan5sigmaILm17ELm19ELm10EjEET2_S1_: 43| 2.67M|inline constexpr T sigma(T x) { 44| 2.67M| return rotr(x) ^ rotr(x) ^ (x >> S); 45| 2.67M|} _ZN5Botan4rotrILm17EjEET0_S1_: 35| 2.67M|{ 36| 2.67M| return static_cast((input >> ROT) | (input << (8 * sizeof(T) - ROT))); 37| 2.67M|} _ZN5Botan4rotrILm19EjEET0_S1_: 35| 2.67M|{ 36| 2.67M| return static_cast((input >> ROT) | (input << (8 * sizeof(T) - ROT))); 37| 2.67M|} _ZN5Botan5sigmaILm7ELm18ELm3EjEET2_S1_: 43| 2.67M|inline constexpr T sigma(T x) { 44| 2.67M| return rotr(x) ^ rotr(x) ^ (x >> S); 45| 2.67M|} _ZN5Botan4rotrILm7EjEET0_S1_: 35| 2.67M|{ 36| 2.67M| return static_cast((input >> ROT) | (input << (8 * sizeof(T) - ROT))); 37| 2.67M|} _ZN5Botan4rotrILm18EjEET0_S1_: 35| 2.67M|{ 36| 2.67M| return static_cast((input >> ROT) | (input << (8 * sizeof(T) - ROT))); 37| 2.67M|} _ZN5Botan3rhoILm14ELm18ELm41EmEET2_S1_: 51| 52.4k|inline constexpr T rho(T x) { 52| 52.4k| return rotr(x) ^ rotr(x) ^ rotr(x); 53| 52.4k|} _ZN5Botan4rotrILm14EmEET0_S1_: 35| 52.4k|{ 36| 52.4k| return static_cast((input >> ROT) | (input << (8 * sizeof(T) - ROT))); 37| 52.4k|} _ZN5Botan4rotrILm18EmEET0_S1_: 35| 52.4k|{ 36| 52.4k| return static_cast((input >> ROT) | (input << (8 * sizeof(T) - ROT))); 37| 52.4k|} _ZN5Botan4rotrILm41EmEET0_S1_: 35| 52.4k|{ 36| 52.4k| return static_cast((input >> ROT) | (input << (8 * sizeof(T) - ROT))); 37| 52.4k|} _ZN5Botan3rhoILm28ELm34ELm39EmEET2_S1_: 51| 52.4k|inline constexpr T rho(T x) { 52| 52.4k| return rotr(x) ^ rotr(x) ^ rotr(x); 53| 52.4k|} _ZN5Botan4rotrILm28EmEET0_S1_: 35| 52.4k|{ 36| 52.4k| return static_cast((input >> ROT) | (input << (8 * sizeof(T) - ROT))); 37| 52.4k|} _ZN5Botan4rotrILm34EmEET0_S1_: 35| 52.4k|{ 36| 52.4k| return static_cast((input >> ROT) | (input << (8 * sizeof(T) - ROT))); 37| 52.4k|} _ZN5Botan4rotrILm39EmEET0_S1_: 35| 52.4k|{ 36| 52.4k| return static_cast((input >> ROT) | (input << (8 * sizeof(T) - ROT))); 37| 52.4k|} _ZN5Botan5sigmaILm19ELm61ELm6EmEET2_S1_: 43| 52.4k|inline constexpr T sigma(T x) { 44| 52.4k| return rotr(x) ^ rotr(x) ^ (x >> S); 45| 52.4k|} _ZN5Botan4rotrILm19EmEET0_S1_: 35| 52.4k|{ 36| 52.4k| return static_cast((input >> ROT) | (input << (8 * sizeof(T) - ROT))); 37| 52.4k|} _ZN5Botan4rotrILm61EmEET0_S1_: 35| 52.4k|{ 36| 52.4k| return static_cast((input >> ROT) | (input << (8 * sizeof(T) - ROT))); 37| 52.4k|} _ZN5Botan5sigmaILm1ELm8ELm7EmEET2_S1_: 43| 52.4k|inline constexpr T sigma(T x) { 44| 52.4k| return rotr(x) ^ rotr(x) ^ (x >> S); 45| 52.4k|} _ZN5Botan4rotrILm1EmEET0_S1_: 35| 52.4k|{ 36| 52.4k| return static_cast((input >> ROT) | (input << (8 * sizeof(T) - ROT))); 37| 52.4k|} _ZN5Botan4rotrILm8EmEET0_S1_: 35| 52.4k|{ 36| 52.4k| return static_cast((input >> ROT) | (input << (8 * sizeof(T) - ROT))); 37| 52.4k|} _ZN5Botan8round_upEmm: 21| 17.2k|inline size_t round_up(size_t n, size_t align_to) { 22| 17.2k| BOTAN_ARG_CHECK(align_to != 0, "align_to must not be 0"); ------------------ | | 30| 17.2k| do { \ | | 31| 17.2k| if(!(expr)) \ | | ------------------ | | | Branch (31:10): [True: 0, False: 17.2k] | | ------------------ | | 32| 17.2k| Botan::throw_invalid_argument(msg, __func__, __FILE__); \ | | 33| 17.2k| } while(0) | | ------------------ | | | Branch (33:12): [Folded - Ignored] | | ------------------ ------------------ 23| | 24| 17.2k| if(n % align_to) ------------------ | Branch (24:7): [True: 15.2k, False: 2.04k] ------------------ 25| 15.2k| n += align_to - (n % align_to); 26| 17.2k| return n; 27| 17.2k|} _ZN5Botan11checked_mulEmm: 47| 532k|inline std::optional checked_mul(size_t x, size_t y) { 48| 532k|#if BOTAN_COMPILER_HAS_BUILTIN(__builtin_add_overflow) 49| 532k| size_t z; 50| 532k| if(__builtin_mul_overflow(x, y, &z)) [[unlikely]] ------------------ | Branch (50:7): [True: 0, False: 532k] ------------------ 51| |#elif defined(_MSC_VER) 52| | size_t z; 53| | if(SizeTMult(x, y, &z) != S_OK) [[unlikely]] 54| |#else 55| | size_t z = x * y; 56| | if(y && z / y != x) [[unlikely]] 57| |#endif 58| 0| { 59| 0| return std::nullopt; 60| 0| } 61| 532k| return z; 62| 532k|} _ZN5Botan11checked_addEmmPKci: 30| 703k|inline size_t checked_add(size_t x, size_t y, const char* file, int line) { 31| 703k|#if BOTAN_COMPILER_HAS_BUILTIN(__builtin_add_overflow) 32| 703k| size_t z; 33| 703k| if(__builtin_add_overflow(x, y, &z)) [[unlikely]] ------------------ | Branch (33:7): [True: 0, False: 703k] ------------------ 34| |#elif defined(_MSC_VER) 35| | size_t z; 36| | if(SizeTAdd(x, y, &z) != S_OK) [[unlikely]] 37| |#else 38| | size_t z = x + y; 39| | if(z < x) [[unlikely]] 40| |#endif 41| 0| { 42| 0| throw Integer_Overflow_Detected(file, line); 43| 0| } 44| 703k| return z; 45| 703k|} _ZNK5Botan9SCAN_Name9algo_nameEv: 44| 4.72k| const std::string algo_name() const { return m_alg_name; } _ZNK5Botan9SCAN_Name9arg_countEv: 49| 4.72k| size_t arg_count() const { return m_args.size(); } _ZN5Botan5SHA_1C2Ev: 32| 4.38k| SHA_1() : MDx_HashFunction(64, true, true), m_digest(5) { clear(); } _ZNK5Botan5SHA_14nameEv: 20| 3| std::string name() const override { return "SHA-1"; } _ZNK5Botan5SHA_113output_lengthEv: 22| 13.1k| size_t output_length() const override { return 20; } _ZN5Botan7SHA_224C2Ev: 33| 112| SHA_224() : MDx_HashFunction(64, true, true), m_digest(8) { clear(); } _ZN5Botan7SHA_256C2Ev: 59| 4.44k| SHA_256() : MDx_HashFunction(64, true, true), m_digest(8) { clear(); } _ZNK5Botan7SHA_2244nameEv: 21| 112| std::string name() const override { return "SHA-224"; } _ZNK5Botan7SHA_22413output_lengthEv: 23| 414| size_t output_length() const override { return 28; } _ZNK5Botan7SHA_2564nameEv: 47| 67| std::string name() const override { return "SHA-256"; } _ZNK5Botan7SHA_25613output_lengthEv: 49| 19.9k| size_t output_length() const override { return 32; } _ZN5Botan9SHA2_32_FEjjjRjjjjS0_S0_jjjj: 31| 2.67M| uint32_t magic) { 32| 2.67M| uint32_t A_rho = rho<2, 13, 22>(A); 33| 2.67M| uint32_t E_rho = rho<6, 11, 25>(E); 34| 2.67M| uint32_t M2_sigma = sigma<17, 19, 10>(M2); 35| 2.67M| uint32_t M4_sigma = sigma<7, 18, 3>(M4); 36| 2.67M| H += magic + E_rho + choose(E, F, G) + M1; 37| 2.67M| D += H; 38| 2.67M| H += A_rho + majority(A, B, C); 39| 2.67M| M1 += M2_sigma + M3 + M4_sigma; 40| 2.67M|} _ZN5Botan7SHA_384C2Ev: 31| 55| SHA_384() : MDx_HashFunction(128, true, true, 16), m_digest(8) { clear(); } _ZN5Botan7SHA_512C2Ev: 61| 30| SHA_512() : MDx_HashFunction(128, true, true, 16), m_digest(8) { clear(); } _ZN5Botan11SHA_512_256C2Ev: 92| 12| SHA_512_256() : MDx_HashFunction(128, true, true, 16), m_digest(8) { clear(); } _ZNK5Botan7SHA_3844nameEv: 20| 55| std::string name() const override { return "SHA-384"; } _ZNK5Botan7SHA_38413output_lengthEv: 22| 217| size_t output_length() const override { return 48; } _ZNK5Botan7SHA_5124nameEv: 45| 30| std::string name() const override { return "SHA-512"; } _ZNK5Botan7SHA_51213output_lengthEv: 47| 119| size_t output_length() const override { return 64; } _ZNK5Botan11SHA_512_2564nameEv: 81| 12| std::string name() const override { return "SHA-512-256"; } _ZNK5Botan11SHA_512_25613output_lengthEv: 83| 47| size_t output_length() const override { return 32; } _ZN5Botan9SHA2_64_FEmmmRmmmmS0_S0_mmmm: 31| 52.4k| uint64_t magic) { 32| 52.4k| const uint64_t E_rho = rho<14, 18, 41>(E); 33| 52.4k| const uint64_t A_rho = rho<28, 34, 39>(A); 34| 52.4k| const uint64_t M2_sigma = sigma<19, 61, 6>(M2); 35| 52.4k| const uint64_t M4_sigma = sigma<1, 8, 7>(M4); 36| 52.4k| H += magic + E_rho + choose(E, F, G) + M1; 37| 52.4k| D += H; 38| 52.4k| H += A_rho + majority(A, B, C); 39| 52.4k| M1 += M2_sigma + M3 + M4_sigma; 40| 52.4k|} _ZN5Botan9SIMD_4x325splatEj: 129| 35.5k| static SIMD_4x32 splat(uint32_t B) noexcept { 130| 35.5k|#if defined(BOTAN_SIMD_USE_SSE2) 131| 35.5k| return SIMD_4x32(_mm_set1_epi32(B)); 132| |#elif defined(BOTAN_SIMD_USE_NEON) 133| | return SIMD_4x32(vdupq_n_u32(B)); 134| |#else 135| | return SIMD_4x32(B, B, B, B); 136| |#endif 137| 35.5k| } _ZN5Botan9SIMD_4x32C2EDv2_x: 605| 4.68M| explicit SIMD_4x32(native_simd_type x) noexcept : m_simd(x) {} _ZN5Botan9SIMD_4x327load_beEPKv: 172| 178k| static SIMD_4x32 load_be(const void* in) noexcept { 173| 178k|#if defined(BOTAN_SIMD_USE_SSE2) 174| 178k| return load_le(in).bswap(); 175| | 176| |#elif defined(BOTAN_SIMD_USE_ALTIVEC) 177| | uint32_t R[4]; 178| | Botan::load_be(R, static_cast(in), 4); 179| | return SIMD_4x32(R); 180| | 181| |#elif defined(BOTAN_SIMD_USE_NEON) 182| | SIMD_4x32 l(vld1q_u32(static_cast(in))); 183| | return CPUID::is_little_endian() ? l.bswap() : l; 184| |#endif 185| 178k| } _ZN5Botan9SIMD_4x327load_leEPKv: 156| 178k| static SIMD_4x32 load_le(const void* in) noexcept { 157| 178k|#if defined(BOTAN_SIMD_USE_SSE2) 158| 178k| return SIMD_4x32(_mm_loadu_si128(reinterpret_cast(in))); 159| |#elif defined(BOTAN_SIMD_USE_ALTIVEC) 160| | uint32_t R[4]; 161| | Botan::load_le(R, static_cast(in), 4); 162| | return SIMD_4x32(R); 163| |#elif defined(BOTAN_SIMD_USE_NEON) 164| | SIMD_4x32 l(vld1q_u32(static_cast(in))); 165| | return CPUID::is_big_endian() ? l.bswap() : l; 166| |#endif 167| 178k| } _ZNK5Botan9SIMD_4x325bswapEv: 474| 178k| SIMD_4x32 bswap() const noexcept { 475| 178k|#if defined(BOTAN_SIMD_USE_SSE2) 476| | 477| 178k| __m128i T = m_simd; 478| 178k| T = _mm_shufflehi_epi16(T, _MM_SHUFFLE(2, 3, 0, 1)); 479| 178k| T = _mm_shufflelo_epi16(T, _MM_SHUFFLE(2, 3, 0, 1)); 480| 178k| return SIMD_4x32(_mm_or_si128(_mm_srli_epi16(T, 8), _mm_slli_epi16(T, 8))); 481| | 482| |#elif defined(BOTAN_SIMD_USE_ALTIVEC) 483| | 484| | union { 485| | __vector unsigned int V; 486| | uint32_t R[4]; 487| | } vec; 488| | 489| | vec.V = m_simd; 490| | bswap_4(vec.R); 491| | return SIMD_4x32(vec.R[0], vec.R[1], vec.R[2], vec.R[3]); 492| | 493| |#elif defined(BOTAN_SIMD_USE_NEON) 494| | return SIMD_4x32(vreinterpretq_u32_u8(vrev32q_u8(vreinterpretq_u8_u32(m_simd)))); 495| |#endif 496| 178k| } _ZNK5Botan9SIMD_4x32plERKS0_: 321| 893k| SIMD_4x32 operator+(const SIMD_4x32& other) const noexcept { 322| 893k| SIMD_4x32 retval(*this); 323| 893k| retval += other; 324| 893k| return retval; 325| 893k| } _ZN5Botan9SIMD_4x32pLERKS0_: 363| 893k| void operator+=(const SIMD_4x32& other) noexcept { 364| 893k|#if defined(BOTAN_SIMD_USE_SSE2) 365| 893k| m_simd = _mm_add_epi32(m_simd, other.m_simd); 366| |#elif defined(BOTAN_SIMD_USE_ALTIVEC) 367| | m_simd = vec_add(m_simd, other.m_simd); 368| |#elif defined(BOTAN_SIMD_USE_NEON) 369| | m_simd = vaddq_u32(m_simd, other.m_simd); 370| |#endif 371| 893k| } _ZNK5Botan9SIMD_4x328store_leEPj: 187| 893k| void store_le(uint32_t out[4]) const noexcept { this->store_le(reinterpret_cast(out)); } _ZNK5Botan9SIMD_4x328store_leEPh: 196| 893k| void store_le(uint8_t out[]) const noexcept { 197| 893k|#if defined(BOTAN_SIMD_USE_SSE2) 198| | 199| 893k| _mm_storeu_si128(reinterpret_cast<__m128i*>(out), raw()); 200| | 201| |#elif defined(BOTAN_SIMD_USE_ALTIVEC) 202| | 203| | union { 204| | __vector unsigned int V; 205| | uint32_t R[4]; 206| | } vec; 207| | 208| | vec.V = raw(); 209| | Botan::store_le(out, vec.R[0], vec.R[1], vec.R[2], vec.R[3]); 210| | 211| |#elif defined(BOTAN_SIMD_USE_NEON) 212| | if(CPUID::is_little_endian()) { 213| | vst1q_u8(out, vreinterpretq_u8_u32(m_simd)); 214| | } else { 215| | vst1q_u8(out, vreinterpretq_u8_u32(bswap().m_simd)); 216| | } 217| |#endif 218| 893k| } _ZNK5Botan9SIMD_4x323rawEv: 603| 4.46M| native_simd_type raw() const noexcept { return m_simd; } _ZNK5Botan9SIMD_4x3217shift_elems_rightILm1EEES0_v: 522| 714k| { 523| 714k|#if defined(BOTAN_SIMD_USE_SSE2) 524| 714k| return SIMD_4x32(_mm_srli_si128(raw(), 4 * I)); 525| |#elif defined(BOTAN_SIMD_USE_NEON) 526| | return SIMD_4x32(vextq_u32(raw(), vdupq_n_u32(0), I)); 527| |#elif defined(BOTAN_SIMD_USE_ALTIVEC) 528| | const __vector unsigned int zero = vec_splat_u32(0); 529| | 530| | const __vector unsigned char shuf[3] = { 531| | {4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16, 17, 18, 19}, 532| | {8, 9, 10, 11, 12, 13, 14, 15, 16, 17, 18, 19, 20, 21, 22, 23}, 533| | {12, 13, 14, 15, 16, 17, 18, 19, 20, 21, 22, 23, 24, 25, 26, 27}, 534| | }; 535| | 536| | return SIMD_4x32(vec_perm(raw(), zero, shuf[I - 1])); 537| |#endif 538| 714k| } _ZN5Botan9SIMD_4x32eOERKS0_: 383| 2.85M| void operator^=(const SIMD_4x32& other) noexcept { 384| 2.85M|#if defined(BOTAN_SIMD_USE_SSE2) 385| 2.85M| m_simd = _mm_xor_si128(m_simd, other.m_simd); 386| |#elif defined(BOTAN_SIMD_USE_ALTIVEC) 387| | m_simd = vec_xor(m_simd, other.m_simd); 388| |#elif defined(BOTAN_SIMD_USE_NEON) 389| | m_simd = veorq_u32(m_simd, other.m_simd); 390| |#endif 391| 2.85M| } _ZNK5Botan9SIMD_4x3216shift_elems_leftILm3EEES0_v: 501| 714k| { 502| 714k|#if defined(BOTAN_SIMD_USE_SSE2) 503| 714k| return SIMD_4x32(_mm_slli_si128(raw(), 4 * I)); 504| |#elif defined(BOTAN_SIMD_USE_NEON) 505| | return SIMD_4x32(vextq_u32(vdupq_n_u32(0), raw(), 4 - I)); 506| |#elif defined(BOTAN_SIMD_USE_ALTIVEC) 507| | const __vector unsigned int zero = vec_splat_u32(0); 508| | 509| | const __vector unsigned char shuf[3] = { 510| | {16, 17, 18, 19, 0, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11}, 511| | {16, 17, 18, 19, 20, 21, 22, 23, 0, 1, 2, 3, 4, 5, 6, 7}, 512| | {16, 17, 18, 19, 20, 21, 22, 23, 24, 25, 26, 27, 0, 1, 2, 3}, 513| | }; 514| | 515| | return SIMD_4x32(vec_perm(raw(), zero, shuf[I - 1])); 516| |#endif 517| 714k| } _ZNK5Botan9SIMD_4x324rotlILm1EEES0_v: 281| 714k| { 282| 714k|#if defined(BOTAN_SIMD_USE_SSE2) 283| | 284| 714k| return SIMD_4x32(_mm_or_si128(_mm_slli_epi32(m_simd, static_cast(ROT)), 285| 714k| _mm_srli_epi32(m_simd, static_cast(32 - ROT)))); 286| | 287| |#elif defined(BOTAN_SIMD_USE_ALTIVEC) 288| | 289| | const unsigned int r = static_cast(ROT); 290| | __vector unsigned int rot = {r, r, r, r}; 291| | return SIMD_4x32(vec_rl(m_simd, rot)); 292| | 293| |#elif defined(BOTAN_SIMD_USE_NEON) 294| | 295| | #if defined(BOTAN_TARGET_ARCH_IS_ARM64) 296| | 297| | if constexpr(ROT == 8) { 298| | const uint8_t maskb[16] = {3, 0, 1, 2, 7, 4, 5, 6, 11, 8, 9, 10, 15, 12, 13, 14}; 299| | const uint8x16_t mask = vld1q_u8(maskb); 300| | return SIMD_4x32(vreinterpretq_u32_u8(vqtbl1q_u8(vreinterpretq_u8_u32(m_simd), mask))); 301| | } else if constexpr(ROT == 16) { 302| | return SIMD_4x32(vreinterpretq_u32_u16(vrev32q_u16(vreinterpretq_u16_u32(m_simd)))); 303| | } 304| | #endif 305| | return SIMD_4x32( 306| | vorrq_u32(vshlq_n_u32(m_simd, static_cast(ROT)), vshrq_n_u32(m_simd, static_cast(32 - ROT)))); 307| |#endif 308| 714k| } _ZNK5Botan9SIMD_4x324rotlILm2EEES0_v: 281| 714k| { 282| 714k|#if defined(BOTAN_SIMD_USE_SSE2) 283| | 284| 714k| return SIMD_4x32(_mm_or_si128(_mm_slli_epi32(m_simd, static_cast(ROT)), 285| 714k| _mm_srli_epi32(m_simd, static_cast(32 - ROT)))); 286| | 287| |#elif defined(BOTAN_SIMD_USE_ALTIVEC) 288| | 289| | const unsigned int r = static_cast(ROT); 290| | __vector unsigned int rot = {r, r, r, r}; 291| | return SIMD_4x32(vec_rl(m_simd, rot)); 292| | 293| |#elif defined(BOTAN_SIMD_USE_NEON) 294| | 295| | #if defined(BOTAN_TARGET_ARCH_IS_ARM64) 296| | 297| | if constexpr(ROT == 8) { 298| | const uint8_t maskb[16] = {3, 0, 1, 2, 7, 4, 5, 6, 11, 8, 9, 10, 15, 12, 13, 14}; 299| | const uint8x16_t mask = vld1q_u8(maskb); 300| | return SIMD_4x32(vreinterpretq_u32_u8(vqtbl1q_u8(vreinterpretq_u8_u32(m_simd), mask))); 301| | } else if constexpr(ROT == 16) { 302| | return SIMD_4x32(vreinterpretq_u32_u16(vrev32q_u16(vreinterpretq_u16_u32(m_simd)))); 303| | } 304| | #endif 305| | return SIMD_4x32( 306| | vorrq_u32(vshlq_n_u32(m_simd, static_cast(ROT)), vshrq_n_u32(m_simd, static_cast(32 - ROT)))); 307| |#endif 308| 714k| } _ZN5Botan9SIMD_4x32C2Ejjjj: 113| 96| SIMD_4x32(uint32_t B0, uint32_t B1, uint32_t B2, uint32_t B3) noexcept { 114| 96|#if defined(BOTAN_SIMD_USE_SSE2) 115| 96| m_simd = _mm_set_epi32(B3, B2, B1, B0); 116| |#elif defined(BOTAN_SIMD_USE_ALTIVEC) 117| | __vector unsigned int val = {B0, B1, B2, B3}; 118| | m_simd = val; 119| |#elif defined(BOTAN_SIMD_USE_NEON) 120| | // Better way to do this? 121| | const uint32_t B[4] = {B0, B1, B2, B3}; 122| | m_simd = vld1q_u32(B); 123| |#endif 124| 96| } _ZN5Botan9SIMD_4x328splat_u8Eh: 142| 2| static SIMD_4x32 splat_u8(uint8_t B) noexcept { 143| 2|#if defined(BOTAN_SIMD_USE_SSE2) 144| 2| return SIMD_4x32(_mm_set1_epi8(B)); 145| |#elif defined(BOTAN_SIMD_USE_NEON) 146| | return SIMD_4x32(vreinterpretq_u32_u8(vdupq_n_u8(B))); 147| |#else 148| | const uint32_t B4 = make_uint32(B, B, B, B); 149| | return SIMD_4x32(B4, B4, B4, B4); 150| |#endif 151| 2| } _ZN5Botan15multimap_insertINS_3OIDENSt3__112basic_stringIcNS2_11char_traitsIcEENS2_9allocatorIcEEEEEEvRNS2_8multimapIT_T0_NS2_4lessISA_EENS6_INS2_4pairIKSA_SB_EEEEEERSF_RKSB_: 81| 209|void multimap_insert(std::multimap& multimap, const K& key, const V& value) { 82| 209| multimap.insert(std::make_pair(key, value)); 83| 209|} _ZN5Botan15multimap_insertINS_3OIDENS_11ASN1_StringEEEvRNSt3__18multimapIT_T0_NS3_4lessIS5_EENS3_9allocatorINS3_4pairIKS5_S6_EEEEEERSB_RKS6_: 81| 75|void multimap_insert(std::multimap& multimap, const K& key, const V& value) { 82| 75| multimap.insert(std::make_pair(key, value)); 83| 75|} _ZN5Botan13typecast_copyImEEvPT_PKhm: 140| 73.3k|{ 141| 73.3k| std::memcpy(out, in, sizeof(T) * N); 142| 73.3k|} _ZN5Botan13typecast_copyImEEvPhPT_m: 133| 34.9k|{ 134| 34.9k| std::memcpy(out, in, sizeof(T) * N); 135| 34.9k|} _ZN5Botan11clear_bytesEPvm: 92| 462k|inline constexpr void clear_bytes(void* ptr, size_t bytes) { 93| 462k| if(bytes > 0) { ------------------ | Branch (93:7): [True: 441k, False: 21.3k] ------------------ 94| 441k| std::memset(ptr, 0, bytes); 95| 441k| } 96| 462k|} _ZN5Botan7set_memEPhmh: 171| 952|inline constexpr void set_mem(uint8_t* ptr, size_t n, uint8_t val) { 172| 952| if(n > 0) { ------------------ | Branch (172:7): [True: 952, False: 0] ------------------ 173| 952| std::memset(ptr, val, n); 174| 952| } 175| 952|} _ZN5Botan22cast_uint8_ptr_to_charEPKh: 179| 11.3k|inline const char* cast_uint8_ptr_to_char(const uint8_t* b) { return reinterpret_cast(b); } _ZN5Botan9clear_memIhEEvPT_m: 109| 34.6k|inline constexpr void clear_mem(T* ptr, size_t n) { 110| 34.6k| clear_bytes(ptr, sizeof(T) * n); 111| 34.6k|} _ZN5Botan9clear_memImEEvPT_m: 109| 417k|inline constexpr void clear_mem(T* ptr, size_t n) { 110| 417k| clear_bytes(ptr, sizeof(T) * n); 111| 417k|} _ZN5Botan8copy_memIhEEvPT_PKS1_m: 122| 5.04M|{ 123| 5.04M| BOTAN_ASSERT_IMPLICATION(n > 0, in != nullptr && out != nullptr, "If n > 0 then args are not null"); ------------------ | | 78| 5.04M| do { \ | | 79| 9.84M| if((expr1) && !(expr2)) \ | | ------------------ | | | Branch (79:10): [True: 4.92M, False: 127k] | | | Branch (79:23): [True: 4.92M, False: 0] | | | Branch (79:23): [True: 4.92M, False: 0] | | ------------------ | | 80| 5.04M| Botan::assertion_failure(#expr1 " implies " #expr2, msg, __func__, __FILE__, __LINE__); \ | | 81| 5.04M| } while(0) | | ------------------ | | | Branch (81:12): [Folded - Ignored] | | ------------------ ------------------ 124| | 125| 5.04M| if(in != nullptr && out != nullptr && n > 0) { ------------------ | Branch (125:7): [True: 5.03M, False: 11.7k] | Branch (125:24): [True: 5.00M, False: 28.3k] | Branch (125:42): [True: 4.92M, False: 87.3k] ------------------ 126| 4.92M| std::memmove(out, in, sizeof(T) * n); 127| 4.92M| } 128| 5.04M|} _ZN5Botan13typecast_copyItEEvPT_PKhm: 140| 645|{ 141| 645| std::memcpy(out, in, sizeof(T) * N); 142| 645|} _ZN5Botan13typecast_copyItEEvRT_PKh: 152| 645|{ 153| 645| typecast_copy(&out, in, 1); 154| 645|} _ZN5Botan13typecast_copyIjEEvPT_PKhm: 140| 681k|{ 141| 681k| std::memcpy(out, in, sizeof(T) * N); 142| 681k|} _ZN5Botan13typecast_copyIjEEvRT_PKh: 152| 668k|{ 153| 668k| typecast_copy(&out, in, 1); 154| 668k|} _ZN5Botan13typecast_copyImEEvRT_PKh: 152| 73.3k|{ 153| 73.3k| typecast_copy(&out, in, 1); 154| 73.3k|} _ZN5Botan13typecast_copyIjEEvPhPT_m: 133| 79.9k|{ 134| 79.9k| std::memcpy(out, in, sizeof(T) * N); 135| 79.9k|} _ZN5Botan13typecast_copyIjEEvPhT_: 145| 79.9k|inline constexpr void typecast_copy(uint8_t out[], T in) { 146| 79.9k| typecast_copy(out, &in, 1); 147| 79.9k|} _ZN5Botan13typecast_copyImEEvPhT_: 145| 34.9k|inline constexpr void typecast_copy(uint8_t out[], T in) { 146| 34.9k| typecast_copy(out, &in, 1); 147| 34.9k|} _ZN5Botan9clear_memIjEEvPT_m: 109| 10.5k|inline constexpr void clear_mem(T* ptr, size_t n) { 110| 10.5k| clear_bytes(ptr, sizeof(T) * n); 111| 10.5k|} _ZN5Botan13buffer_insertIhNS_16secure_allocatorIhEEEEmRNSt3__16vectorIT_T0_EEmPKS5_m: 203| 12.1k|size_t buffer_insert(std::vector& buf, size_t buf_offset, const T input[], size_t input_length) { 204| 12.1k| BOTAN_ASSERT_NOMSG(buf_offset <= buf.size()); ------------------ | | 60| 12.1k| do { \ | | 61| 12.1k| if(!(expr)) \ | | ------------------ | | | Branch (61:10): [True: 0, False: 12.1k] | | ------------------ | | 62| 12.1k| Botan::assertion_failure(#expr, "", __func__, __FILE__, __LINE__); \ | | 63| 12.1k| } while(0) | | ------------------ | | | Branch (63:12): [Folded - Ignored] | | ------------------ ------------------ 205| 12.1k| const size_t to_copy = std::min(input_length, buf.size() - buf_offset); 206| 12.1k| if(to_copy > 0) { ------------------ | Branch (206:7): [True: 12.0k, False: 43] ------------------ 207| 12.0k| copy_mem(&buf[buf_offset], input, to_copy); 208| 12.0k| } 209| 12.1k| return to_copy; 210| 12.1k|} _ZN5Botan8copy_memImEEvPT_PKS1_m: 122| 152k|{ 123| 152k| BOTAN_ASSERT_IMPLICATION(n > 0, in != nullptr && out != nullptr, "If n > 0 then args are not null"); ------------------ | | 78| 152k| do { \ | | 79| 304k| if((expr1) && !(expr2)) \ | | ------------------ | | | Branch (79:10): [True: 152k, False: 0] | | | Branch (79:23): [True: 152k, False: 0] | | | Branch (79:23): [True: 152k, False: 0] | | ------------------ | | 80| 152k| Botan::assertion_failure(#expr1 " implies " #expr2, msg, __func__, __FILE__, __LINE__); \ | | 81| 152k| } while(0) | | ------------------ | | | Branch (81:12): [Folded - Ignored] | | ------------------ ------------------ 124| | 125| 152k| if(in != nullptr && out != nullptr && n > 0) { ------------------ | Branch (125:7): [True: 152k, False: 0] | Branch (125:24): [True: 152k, False: 0] | Branch (125:42): [True: 152k, False: 0] ------------------ 126| 152k| std::memmove(out, in, sizeof(T) * n); 127| 152k| } 128| 152k|} _ZN5Botan13buffer_insertIhNSt3__19allocatorIhEEEEmRNS1_6vectorIT_T0_EEmPKS5_m: 203| 1.90k|size_t buffer_insert(std::vector& buf, size_t buf_offset, const T input[], size_t input_length) { 204| 1.90k| BOTAN_ASSERT_NOMSG(buf_offset <= buf.size()); ------------------ | | 60| 1.90k| do { \ | | 61| 1.90k| if(!(expr)) \ | | ------------------ | | | Branch (61:10): [True: 0, False: 1.90k] | | ------------------ | | 62| 1.90k| Botan::assertion_failure(#expr, "", __func__, __FILE__, __LINE__); \ | | 63| 1.90k| } while(0) | | ------------------ | | | Branch (63:12): [Folded - Ignored] | | ------------------ ------------------ 205| 1.90k| const size_t to_copy = std::min(input_length, buf.size() - buf_offset); 206| 1.90k| if(to_copy > 0) { ------------------ | Branch (206:7): [True: 1.90k, False: 0] ------------------ 207| 1.90k| copy_mem(&buf[buf_offset], input, to_copy); 208| 1.90k| } 209| 1.90k| return to_copy; 210| 1.90k|} _ZN5Botan8copy_memIiEEvPT_PKS1_m: 122| 1.53k|{ 123| 1.53k| BOTAN_ASSERT_IMPLICATION(n > 0, in != nullptr && out != nullptr, "If n > 0 then args are not null"); ------------------ | | 78| 1.53k| do { \ | | 79| 3.07k| if((expr1) && !(expr2)) \ | | ------------------ | | | Branch (79:10): [True: 1.53k, False: 0] | | | Branch (79:23): [True: 1.53k, False: 0] | | | Branch (79:23): [True: 1.53k, False: 0] | | ------------------ | | 80| 1.53k| Botan::assertion_failure(#expr1 " implies " #expr2, msg, __func__, __FILE__, __LINE__); \ | | 81| 1.53k| } while(0) | | ------------------ | | | Branch (81:12): [Folded - Ignored] | | ------------------ ------------------ 124| | 125| 1.53k| if(in != nullptr && out != nullptr && n > 0) { ------------------ | Branch (125:7): [True: 1.53k, False: 0] | Branch (125:24): [True: 1.53k, False: 0] | Branch (125:42): [True: 1.53k, False: 0] ------------------ 126| 1.53k| std::memmove(out, in, sizeof(T) * n); 127| 1.53k| } 128| 1.53k|} _ZN5Botan4OCSP6CertIDC2Ev: 27| 14| CertID() = default; _ZNK5Botan10Public_Key13message_partsEv: 165| 2.36k| virtual size_t message_parts() const { return 1; } _ZNK5Botan10Public_Key17message_part_sizeEv: 176| 1.18k| virtual size_t message_part_size() const { return 0; } _ZNK5Botan10Public_Key29default_x509_signature_formatEv: 178| 1.18k| virtual Signature_Format default_x509_signature_format() const { 179| 1.18k| return (this->message_parts() >= 2) ? Signature_Format::DerSequence : Signature_Format::Standard; ------------------ | Branch (179:17): [True: 0, False: 1.18k] ------------------ 180| 1.18k| } _ZN5Botan22create_hex_fingerprintENSt3__14spanIKhLm18446744073709551615EEENS0_17basic_string_viewIcNS0_11char_traitsIcEEEE: 367| 4.37k|inline std::string create_hex_fingerprint(std::span vec, std::string_view hash_name) { 368| 4.37k| return create_hex_fingerprint(vec.data(), vec.size(), hash_name); 369| 4.37k|} _ZN5Botan14Asymmetric_KeyD2Ev: 57| 1.34k| virtual ~Asymmetric_Key() = default; _ZN5Botan15Key_ConstraintsC2ENS0_4BitsE: 139| 106| Key_Constraints(Key_Constraints::Bits bits) : m_value(bits) {} _ZN5Botan15Key_ConstraintsC2Ej: 141| 9| explicit Key_Constraints(uint32_t bits) : m_value(bits) {} _ZN5Botan15Key_ConstraintsC2Ev: 143| 2.49k| Key_Constraints() : m_value(0) {} _ZNK5Botan15Key_Constraints5emptyEv: 165| 19| bool empty() const { return m_value == 0; } _ZNK5Botan7X509_DN8get_bitsEv: 58| 4.79k| const std::vector& get_bits() const { return m_dn_bits; } _ZNK5Botan7X509_DN5emptyEv: 62| 263| bool empty() const { return m_rdn.empty(); } _ZNK5Botan7X509_DN7dn_infoEv: 66| 426| const std::vector>& dn_info() const { return m_rdn; } _ZN5Botan14GeneralSubtreeC2Ev: 242| 750| GeneralSubtree() : m_base(), m_minimum(0), m_maximum(std::numeric_limits::max()) {} _ZN5Botan15NameConstraintsC2Ev: 295| 3.18k| NameConstraints() : m_permitted_subtrees(), m_excluded_subtrees() {} _ZN5Botan15NameConstraintsC2EONSt3__16vectorINS_14GeneralSubtreeENS1_9allocatorIS3_EEEES7_: 304| 62| m_permitted_subtrees(permitted_subtrees), m_excluded_subtrees(excluded_subtrees) {} _ZN5Botan10ExtensionsC2Ev: 513| 5.11k| Extensions() {} _ZN5Botan10Extensions15Extensions_InfoC2EbRKNSt3__16vectorIhNS2_9allocatorIhEEEENS2_10unique_ptrINS_21Certificate_ExtensionENS2_14default_deleteISA_EEEE: 534| 9.87k| m_obj(std::move(ext)), m_bits(encoding), m_critical(critical) {} _ZNK5Botan10Extensions15Extensions_Info3objEv: 540| 1.37k| const Certificate_Extension& obj() const { 541| 1.37k| BOTAN_ASSERT_NONNULL(m_obj.get()); ------------------ | | 87| 1.37k| do { \ | | 88| 1.37k| if((ptr) == nullptr) \ | | ------------------ | | | Branch (88:10): [True: 0, False: 1.37k] | | ------------------ | | 89| 1.37k| Botan::assertion_failure(#ptr " is not null", "", __func__, __FILE__, __LINE__); \ | | 90| 1.37k| } while(0) | | ------------------ | | | Branch (90:12): [Folded - Ignored] | | ------------------ ------------------ 542| 1.37k| return *m_obj.get(); 543| 1.37k| } _ZN5Botan7X509_DNC2Ev: 37| 11.6k| X509_DN() = default; _ZN5Botan10ExtensionsaSERKS0_: 516| 16| Extensions& operator=(const Extensions&) = default; _ZN5Botan21Certificate_ExtensionD2Ev: 367| 13.9k| virtual ~Certificate_Extension() = default; _ZN5Botan11GeneralNameC2Ev: 190| 750| GeneralName() = default; _ZNK5Botan10Extensions23get_extension_object_asINS_14Cert_Extension9Key_UsageEEEPKT_RKNS_3OIDE: 393| 2.19k| const T* get_extension_object_as(const OID& oid = T::static_oid()) const { 394| 2.19k| if(const Certificate_Extension* extn = get_extension_object(oid)) { ------------------ | Branch (394:42): [True: 39, False: 2.15k] ------------------ 395| | // Unknown_Extension oid_name is empty 396| 39| if(extn->oid_name().empty()) { ------------------ | Branch (396:16): [True: 34, False: 5] ------------------ 397| 34| return nullptr; 398| 34| } else if(const T* extn_as_T = dynamic_cast(extn)) { ------------------ | Branch (398:32): [True: 5, False: 0] ------------------ 399| 5| return extn_as_T; 400| 5| } else { 401| 0| throw Decoding_Error("Exception::get_extension_object_as dynamic_cast failed"); 402| 0| } 403| 39| } 404| | 405| 2.15k| return nullptr; 406| 2.19k| } _ZNK5Botan10Extensions23get_extension_object_asINS_14Cert_Extension14Subject_Key_IDEEEPKT_RKNS_3OIDE: 393| 2.19k| const T* get_extension_object_as(const OID& oid = T::static_oid()) const { 394| 2.19k| if(const Certificate_Extension* extn = get_extension_object(oid)) { ------------------ | Branch (394:42): [True: 7, False: 2.18k] ------------------ 395| | // Unknown_Extension oid_name is empty 396| 7| if(extn->oid_name().empty()) { ------------------ | Branch (396:16): [True: 6, False: 1] ------------------ 397| 6| return nullptr; 398| 6| } else if(const T* extn_as_T = dynamic_cast(extn)) { ------------------ | Branch (398:32): [True: 1, False: 0] ------------------ 399| 1| return extn_as_T; 400| 1| } else { 401| 0| throw Decoding_Error("Exception::get_extension_object_as dynamic_cast failed"); 402| 0| } 403| 7| } 404| | 405| 2.18k| return nullptr; 406| 2.19k| } _ZNK5Botan10Extensions23get_extension_object_asINS_14Cert_Extension16Authority_Key_IDEEEPKT_RKNS_3OIDE: 393| 2.19k| const T* get_extension_object_as(const OID& oid = T::static_oid()) const { 394| 2.19k| if(const Certificate_Extension* extn = get_extension_object(oid)) { ------------------ | Branch (394:42): [True: 190, False: 2.00k] ------------------ 395| | // Unknown_Extension oid_name is empty 396| 190| if(extn->oid_name().empty()) { ------------------ | Branch (396:16): [True: 161, False: 29] ------------------ 397| 161| return nullptr; 398| 161| } else if(const T* extn_as_T = dynamic_cast(extn)) { ------------------ | Branch (398:32): [True: 29, False: 0] ------------------ 399| 29| return extn_as_T; 400| 29| } else { 401| 0| throw Decoding_Error("Exception::get_extension_object_as dynamic_cast failed"); 402| 0| } 403| 190| } 404| | 405| 2.00k| return nullptr; 406| 2.19k| } _ZNK5Botan10Extensions23get_extension_object_asINS_14Cert_Extension16Name_ConstraintsEEEPKT_RKNS_3OIDE: 393| 2.19k| const T* get_extension_object_as(const OID& oid = T::static_oid()) const { 394| 2.19k| if(const Certificate_Extension* extn = get_extension_object(oid)) { ------------------ | Branch (394:42): [True: 131, False: 2.06k] ------------------ 395| | // Unknown_Extension oid_name is empty 396| 131| if(extn->oid_name().empty()) { ------------------ | Branch (396:16): [True: 121, False: 10] ------------------ 397| 121| return nullptr; 398| 121| } else if(const T* extn_as_T = dynamic_cast(extn)) { ------------------ | Branch (398:32): [True: 10, False: 0] ------------------ 399| 10| return extn_as_T; 400| 10| } else { 401| 0| throw Decoding_Error("Exception::get_extension_object_as dynamic_cast failed"); 402| 0| } 403| 131| } 404| | 405| 2.06k| return nullptr; 406| 2.19k| } _ZNK5Botan10Extensions23get_extension_object_asINS_14Cert_Extension17Basic_ConstraintsEEEPKT_RKNS_3OIDE: 393| 2.19k| const T* get_extension_object_as(const OID& oid = T::static_oid()) const { 394| 2.19k| if(const Certificate_Extension* extn = get_extension_object(oid)) { ------------------ | Branch (394:42): [True: 134, False: 2.05k] ------------------ 395| | // Unknown_Extension oid_name is empty 396| 134| if(extn->oid_name().empty()) { ------------------ | Branch (396:16): [True: 110, False: 24] ------------------ 397| 110| return nullptr; 398| 110| } else if(const T* extn_as_T = dynamic_cast(extn)) { ------------------ | Branch (398:32): [True: 24, False: 0] ------------------ 399| 24| return extn_as_T; 400| 24| } else { 401| 0| throw Decoding_Error("Exception::get_extension_object_as dynamic_cast failed"); 402| 0| } 403| 134| } 404| | 405| 2.05k| return nullptr; 406| 2.19k| } _ZNK5Botan10Extensions23get_extension_object_asINS_14Cert_Extension23Issuer_Alternative_NameEEEPKT_RKNS_3OIDE: 393| 2.19k| const T* get_extension_object_as(const OID& oid = T::static_oid()) const { 394| 2.19k| if(const Certificate_Extension* extn = get_extension_object(oid)) { ------------------ | Branch (394:42): [True: 148, False: 2.04k] ------------------ 395| | // Unknown_Extension oid_name is empty 396| 148| if(extn->oid_name().empty()) { ------------------ | Branch (396:16): [True: 102, False: 46] ------------------ 397| 102| return nullptr; 398| 102| } else if(const T* extn_as_T = dynamic_cast(extn)) { ------------------ | Branch (398:32): [True: 46, False: 0] ------------------ 399| 46| return extn_as_T; 400| 46| } else { 401| 0| throw Decoding_Error("Exception::get_extension_object_as dynamic_cast failed"); 402| 0| } 403| 148| } 404| | 405| 2.04k| return nullptr; 406| 2.19k| } _ZNK5Botan10Extensions23get_extension_object_asINS_14Cert_Extension24Subject_Alternative_NameEEEPKT_RKNS_3OIDE: 393| 2.19k| const T* get_extension_object_as(const OID& oid = T::static_oid()) const { 394| 2.19k| if(const Certificate_Extension* extn = get_extension_object(oid)) { ------------------ | Branch (394:42): [True: 48, False: 2.14k] ------------------ 395| | // Unknown_Extension oid_name is empty 396| 48| if(extn->oid_name().empty()) { ------------------ | Branch (396:16): [True: 22, False: 26] ------------------ 397| 22| return nullptr; 398| 26| } else if(const T* extn_as_T = dynamic_cast(extn)) { ------------------ | Branch (398:32): [True: 26, False: 0] ------------------ 399| 26| return extn_as_T; 400| 26| } else { 401| 0| throw Decoding_Error("Exception::get_extension_object_as dynamic_cast failed"); 402| 0| } 403| 48| } 404| | 405| 2.14k| return nullptr; 406| 2.19k| } _ZNK5Botan10Extensions23get_extension_object_asINS_14Cert_Extension18Extended_Key_UsageEEEPKT_RKNS_3OIDE: 393| 2.19k| const T* get_extension_object_as(const OID& oid = T::static_oid()) const { 394| 2.19k| if(const Certificate_Extension* extn = get_extension_object(oid)) { ------------------ | Branch (394:42): [True: 26, False: 2.16k] ------------------ 395| | // Unknown_Extension oid_name is empty 396| 26| if(extn->oid_name().empty()) { ------------------ | Branch (396:16): [True: 16, False: 10] ------------------ 397| 16| return nullptr; 398| 16| } else if(const T* extn_as_T = dynamic_cast(extn)) { ------------------ | Branch (398:32): [True: 10, False: 0] ------------------ 399| 10| return extn_as_T; 400| 10| } else { 401| 0| throw Decoding_Error("Exception::get_extension_object_as dynamic_cast failed"); 402| 0| } 403| 26| } 404| | 405| 2.16k| return nullptr; 406| 2.19k| } _ZNK5Botan10Extensions23get_extension_object_asINS_14Cert_Extension20Certificate_PoliciesEEEPKT_RKNS_3OIDE: 393| 2.19k| const T* get_extension_object_as(const OID& oid = T::static_oid()) const { 394| 2.19k| if(const Certificate_Extension* extn = get_extension_object(oid)) { ------------------ | Branch (394:42): [True: 146, False: 2.04k] ------------------ 395| | // Unknown_Extension oid_name is empty 396| 146| if(extn->oid_name().empty()) { ------------------ | Branch (396:16): [True: 132, False: 14] ------------------ 397| 132| return nullptr; 398| 132| } else if(const T* extn_as_T = dynamic_cast(extn)) { ------------------ | Branch (398:32): [True: 14, False: 0] ------------------ 399| 14| return extn_as_T; 400| 14| } else { 401| 0| throw Decoding_Error("Exception::get_extension_object_as dynamic_cast failed"); 402| 0| } 403| 146| } 404| | 405| 2.04k| return nullptr; 406| 2.19k| } _ZNK5Botan10Extensions23get_extension_object_asINS_14Cert_Extension28Authority_Information_AccessEEEPKT_RKNS_3OIDE: 393| 2.19k| const T* get_extension_object_as(const OID& oid = T::static_oid()) const { 394| 2.19k| if(const Certificate_Extension* extn = get_extension_object(oid)) { ------------------ | Branch (394:42): [True: 28, False: 2.16k] ------------------ 395| | // Unknown_Extension oid_name is empty 396| 28| if(extn->oid_name().empty()) { ------------------ | Branch (396:16): [True: 9, False: 19] ------------------ 397| 9| return nullptr; 398| 19| } else if(const T* extn_as_T = dynamic_cast(extn)) { ------------------ | Branch (398:32): [True: 19, False: 0] ------------------ 399| 19| return extn_as_T; 400| 19| } else { 401| 0| throw Decoding_Error("Exception::get_extension_object_as dynamic_cast failed"); 402| 0| } 403| 28| } 404| | 405| 2.16k| return nullptr; 406| 2.19k| } _ZNK5Botan10Extensions23get_extension_object_asINS_14Cert_Extension23CRL_Distribution_PointsEEEPKT_RKNS_3OIDE: 393| 2.19k| const T* get_extension_object_as(const OID& oid = T::static_oid()) const { 394| 2.19k| if(const Certificate_Extension* extn = get_extension_object(oid)) { ------------------ | Branch (394:42): [True: 477, False: 1.71k] ------------------ 395| | // Unknown_Extension oid_name is empty 396| 477| if(extn->oid_name().empty()) { ------------------ | Branch (396:16): [True: 332, False: 145] ------------------ 397| 332| return nullptr; 398| 332| } else if(const T* extn_as_T = dynamic_cast(extn)) { ------------------ | Branch (398:32): [True: 145, False: 0] ------------------ 399| 145| return extn_as_T; 400| 145| } else { 401| 0| throw Decoding_Error("Exception::get_extension_object_as dynamic_cast failed"); 402| 0| } 403| 477| } 404| | 405| 1.71k| return nullptr; 406| 2.19k| } _ZN5Botan11PK_Verifier14verify_messageENSt3__14spanIKhLm18446744073709551615EEES4_: 320| 1.18k| bool verify_message(std::span msg, std::span sig) { 321| 1.18k| return verify_message(msg.data(), msg.size(), sig.data(), sig.size()); 322| 1.18k| } _ZNK5Botan15Modular_Reducer8multiplyERKNS_6BigIntES3_: 30| 1.18k| BigInt multiply(const BigInt& x, const BigInt& y) const { return reduce(x * y); } _ZNK5Botan15Modular_Reducer6squareERKNS_6BigIntE: 43| 1.18k| BigInt square(const BigInt& x) const { return reduce(Botan::square(x)); } _ZN5Botan16secure_allocatorImE10deallocateEPmm: 47| 51.5k| void deallocate(T* p, std::size_t n) { deallocate_memory(p, n, sizeof(T)); } _ZN5Botan16secure_allocatorIhE8allocateEm: 45| 470k| T* allocate(std::size_t n) { return static_cast(allocate_memory(n, sizeof(T))); } _ZN5Botan16secure_allocatorIhE10deallocateEPhm: 47| 470k| void deallocate(T* p, std::size_t n) { deallocate_memory(p, n, sizeof(T)); } _ZN5Botan16secure_allocatorImE8allocateEm: 45| 51.5k| T* allocate(std::size_t n) { return static_cast(allocate_memory(n, sizeof(T))); } _ZN5BotanneIhhEEbRKNS_16secure_allocatorIT_EERKNS1_IT0_EE: 56| 61.9k|inline bool operator!=(const secure_allocator&, const secure_allocator&) { 57| 61.9k| return false; 58| 61.9k|} _ZN5BotanpLIhNS_16secure_allocatorIhEEmEERNSt3__16vectorIT_T0_EES8_RKNS3_4pairIPS5_T1_EE: 98| 81.6k|std::vector& operator+=(std::vector& out, const std::pair& in) { 99| 81.6k| out.insert(out.end(), in.first, in.first + in.second); 100| 81.6k| return out; 101| 81.6k|} _ZN5BotanpLIhNS_16secure_allocatorIhEEmEERNSt3__16vectorIT_T0_EES8_RKNS3_4pairIPKS5_T1_EE: 92| 32.4k|std::vector& operator+=(std::vector& out, const std::pair& in) { 93| 32.4k| out.insert(out.end(), in.first, in.first + in.second); 94| 32.4k| return out; 95| 32.4k|} _ZN5Botan16secure_allocatorIjE10deallocateEPjm: 47| 10.7k| void deallocate(T* p, std::size_t n) { deallocate_memory(p, n, sizeof(T)); } _ZN5Botan16secure_allocatorIjE8allocateEm: 45| 10.7k| T* allocate(std::size_t n) { return static_cast(allocate_memory(n, sizeof(T))); } _ZN5Botan7zeroiseIjNS_16secure_allocatorIjEEEEvRNSt3__16vectorIT_T0_EE: 108| 10.5k|void zeroise(std::vector& vec) { 109| 10.5k| clear_mem(vec.data(), vec.size()); 110| 10.5k|} _ZN5Botan7zeroiseIhNS_16secure_allocatorIhEEEEvRNSt3__16vectorIT_T0_EE: 108| 22.4k|void zeroise(std::vector& vec) { 109| 22.4k| clear_mem(vec.data(), vec.size()); 110| 22.4k|} _ZN5Botan14Cert_Extension17Basic_ConstraintsC2Ebm: 31| 234| Basic_Constraints(bool ca = false, size_t limit = 0) : m_is_ca(ca), m_path_limit(limit) {} _ZNK5Botan14Cert_Extension17Basic_Constraints9get_is_caEv: 33| 24| bool get_is_ca() const { return m_is_ca; } _ZN5Botan14Cert_Extension17Basic_Constraints10static_oidEv: 37| 10.8k| static OID static_oid() { return OID("2.5.29.19"); } _ZNK5Botan14Cert_Extension17Basic_Constraints8oid_nameEv: 42| 24| std::string oid_name() const override { return "X509v3.BasicConstraints"; } _ZN5Botan14Cert_Extension9Key_UsageC2Ev: 62| 106| explicit Key_Usage() : m_constraints(Key_Constraints::None) {} _ZNK5Botan14Cert_Extension9Key_Usage15get_constraintsEv: 64| 5| Key_Constraints get_constraints() const { return m_constraints; } _ZN5Botan14Cert_Extension9Key_Usage10static_oidEv: 66| 11.9k| static OID static_oid() { return OID("2.5.29.15"); } _ZNK5Botan14Cert_Extension9Key_Usage8oid_nameEv: 71| 5| std::string oid_name() const override { return "X509v3.KeyUsage"; } _ZNK5Botan14Cert_Extension14Subject_Key_ID10get_key_idEv: 96| 1| const std::vector& get_key_id() const { return m_key_id; } _ZN5Botan14Cert_Extension14Subject_Key_ID10static_oidEv: 98| 12.0k| static OID static_oid() { return OID("2.5.29.14"); } _ZNK5Botan14Cert_Extension14Subject_Key_ID8oid_nameEv: 103| 1| std::string oid_name() const override { return "X509v3.SubjectKeyIdentifier"; } _ZNK5Botan14Cert_Extension16Authority_Key_ID10get_key_idEv: 126| 29| const std::vector& get_key_id() const { return m_key_id; } _ZN5Botan14Cert_Extension16Authority_Key_ID10static_oidEv: 128| 10.4k| static OID static_oid() { return OID("2.5.29.35"); } _ZNK5Botan14Cert_Extension16Authority_Key_ID8oid_nameEv: 133| 29| std::string oid_name() const override { return "X509v3.AuthorityKeyIdentifier"; } _ZNK5Botan14Cert_Extension24Subject_Alternative_Name12get_alt_nameEv: 148| 26| const AlternativeName& get_alt_name() const { return m_alt_name; } _ZN5Botan14Cert_Extension24Subject_Alternative_Name10static_oidEv: 150| 11.8k| static OID static_oid() { return OID("2.5.29.17"); } _ZN5Botan14Cert_Extension24Subject_Alternative_NameC2ERKNS_15AlternativeNameE: 158| 284| explicit Subject_Alternative_Name(const AlternativeName& name = AlternativeName()) : m_alt_name(name) {} _ZNK5Botan14Cert_Extension24Subject_Alternative_Name8oid_nameEv: 161| 26| std::string oid_name() const override { return "X509v3.SubjectAlternativeName"; } _ZNK5Botan14Cert_Extension23Issuer_Alternative_Name12get_alt_nameEv: 176| 46| const AlternativeName& get_alt_name() const { return m_alt_name; } _ZN5Botan14Cert_Extension23Issuer_Alternative_Name10static_oidEv: 178| 11.5k| static OID static_oid() { return OID("2.5.29.18"); } _ZN5Botan14Cert_Extension23Issuer_Alternative_NameC2ERKNS_15AlternativeNameE: 186| 681| explicit Issuer_Alternative_Name(const AlternativeName& name = AlternativeName()) : m_alt_name(name) {} _ZNK5Botan14Cert_Extension23Issuer_Alternative_Name8oid_nameEv: 189| 46| std::string oid_name() const override { return "X509v3.IssuerAlternativeName"; } _ZNK5Botan14Cert_Extension18Extended_Key_Usage18object_identifiersEv: 212| 10| const std::vector& object_identifiers() const { return m_oids; } _ZN5Botan14Cert_Extension18Extended_Key_Usage10static_oidEv: 214| 6.79k| static OID static_oid() { return OID("2.5.29.37"); } _ZNK5Botan14Cert_Extension18Extended_Key_Usage8oid_nameEv: 219| 10| std::string oid_name() const override { return "X509v3.ExtendedKeyUsage"; } _ZNK5Botan14Cert_Extension16Name_Constraints20get_name_constraintsEv: 248| 10| const NameConstraints& get_name_constraints() const { return m_name_constraints; } _ZN5Botan14Cert_Extension16Name_Constraints10static_oidEv: 250| 10.1k| static OID static_oid() { return OID("2.5.29.30"); } _ZNK5Botan14Cert_Extension16Name_Constraints8oid_nameEv: 255| 10| std::string oid_name() const override { return "X509v3.NameConstraints"; } _ZNK5Botan14Cert_Extension20Certificate_Policies15get_policy_oidsEv: 278| 14| const std::vector& get_policy_oids() const { return m_oids; } _ZN5Botan14Cert_Extension20Certificate_Policies10static_oidEv: 280| 6.97k| static OID static_oid() { return OID("2.5.29.32"); } _ZNK5Botan14Cert_Extension20Certificate_Policies8oid_nameEv: 291| 14| std::string oid_name() const override { return "X509v3.CertificatePolicies"; } _ZNK5Botan14Cert_Extension28Authority_Information_Access14ocsp_responderEv: 316| 19| std::string ocsp_responder() const { return m_ocsp_responder; } _ZN5Botan14Cert_Extension28Authority_Information_Access10static_oidEv: 318| 6.71k| static OID static_oid() { return OID("1.3.6.1.5.5.7.1.1"); } _ZNK5Botan14Cert_Extension28Authority_Information_Access10ca_issuersEv: 322| 19| const std::vector ca_issuers() const { return m_ca_issuers; } _ZNK5Botan14Cert_Extension28Authority_Information_Access8oid_nameEv: 325| 19| std::string oid_name() const override { return "PKIX.AuthorityInformationAccess"; } _ZN5Botan14Cert_Extension10CRL_NumberC2Ev: 343| 128| CRL_Number() : m_has_value(false), m_crl_number(0) {} _ZN5Botan14Cert_Extension10CRL_Number10static_oidEv: 349| 8.41k| static OID static_oid() { return OID("2.5.29.20"); } _ZN5Botan14Cert_Extension14CRL_ReasonCodeC2ENS_8CRL_CodeE: 374| 68| explicit CRL_ReasonCode(CRL_Code r = CRL_Code::Unspecified) : m_reason(r) {} _ZN5Botan14Cert_Extension14CRL_ReasonCode10static_oidEv: 378| 8.28k| static OID static_oid() { return OID("2.5.29.21"); } _ZNK5Botan14Cert_Extension23CRL_Distribution_Points18Distribution_Point5pointEv: 404| 847| const AlternativeName& point() const { return m_point; } _ZNK5Botan14Cert_Extension23CRL_Distribution_Points21crl_distribution_urlsEv: 420| 145| const std::vector& crl_distribution_urls() const { return m_crl_distribution_urls; } _ZN5Botan14Cert_Extension23CRL_Distribution_Points10static_oidEv: 422| 9.48k| static OID static_oid() { return OID("2.5.29.31"); } _ZNK5Botan14Cert_Extension23CRL_Distribution_Points8oid_nameEv: 427| 145| std::string oid_name() const override { return "X509v3.CRLDistributionPoints"; } _ZN5Botan14Cert_Extension30CRL_Issuing_Distribution_Point10static_oidEv: 455| 4.81k| static OID static_oid() { return OID("2.5.29.28"); } _ZN5Botan14Cert_Extension17Unknown_ExtensionC2ERKNS_3OIDEb: 507| 8.40k| Unknown_Extension(const OID& oid, bool critical) : m_oid(oid), m_critical(critical) {} _ZNK5Botan14Cert_Extension17Unknown_Extension8oid_nameEv: 541| 1.04k| std::string oid_name() const override { return ""; } _ZN5Botan14Cert_Extension14Subject_Key_IDC2Ev: 86| 162| Subject_Key_ID() = default; _ZN5Botan14Cert_Extension16Authority_Key_IDC2Ev: 122| 232| Authority_Key_ID() = default; _ZN5Botan14Cert_Extension16Name_ConstraintsC2Ev: 238| 695| Name_Constraints() = default; _ZN5Botan14Cert_Extension23CRL_Distribution_PointsC2Ev: 414| 2.48k| CRL_Distribution_Points() = default; _ZN5Botan14Cert_Extension30CRL_Issuing_Distribution_PointC2Ev: 444| 31| CRL_Issuing_Distribution_Point() = default; _ZN5Botan14Cert_Extension20Certificate_PoliciesC2Ev: 274| 184| Certificate_Policies() = default; _ZN5Botan14Cert_Extension18Extended_Key_UsageC2Ev: 208| 77| Extended_Key_Usage() = default; _ZN5Botan14Cert_Extension28Authority_Information_AccessC2Ev: 310| 178| Authority_Information_Access() = default; _ZN5Botan4X5098load_keyENSt3__16vectorIhNS1_9allocatorIhEEEE: 61| 2.09k|inline std::unique_ptr load_key(std::vector enc) { 62| 2.09k| DataSource_Memory source(std::move(enc)); 63| 2.09k| return X509::load_key(source); 64| 2.09k|} _ZNK5Botan11X509_Object9signatureEv: 37| 3.36k| const std::vector& signature() const { return m_sig; } _ZNK5Botan11X509_Object11signed_bodyEv: 42| 4.68k| const std::vector& signed_body() const { return m_tbs_bits; } _ZNK5Botan11X509_Object19signature_algorithmEv: 47| 5.80k| const AlgorithmIdentifier& signature_algorithm() const { return m_sig_algo; } _ZN5Botan11X509_ObjectC2ERKS0_: 96| 3.32k| X509_Object(const X509_Object&) = default; _ZN5Botan11X509_ObjectD2Ev: 103| 6.69k| virtual ~X509_Object() = default; _ZN5Botan11X509_ObjectC2Ev: 121| 3.37k| X509_Object() = default; _ZN5Botan16X509_CertificateC2ERKS0_: 405| 3.32k| X509_Certificate(const X509_Certificate& other) = default; LLVMFuzzerInitialize: 24| 2|extern "C" int LLVMFuzzerInitialize(int*, char***) { 25| | /* 26| | * This disables the mlock pool, as overwrites within the pool are 27| | * opaque to ASan or other instrumentation. 28| | */ 29| 2| ::setenv("BOTAN_MLOCK_POOL_SIZE", "0", 1); 30| 2| return 0; 31| 2|} LLVMFuzzerTestOneInput: 34| 4.28k|extern "C" int LLVMFuzzerTestOneInput(const uint8_t in[], size_t len) { 35| 4.28k| if(len <= max_fuzzer_input_size) { ------------------ | Branch (35:7): [True: 4.27k, False: 9] ------------------ 36| 4.27k| fuzz(in, len); 37| 4.27k| } 38| 4.28k| return 0; 39| 4.28k|} _Z4fuzzPKhm: 11| 4.27k|void fuzz(const uint8_t in[], size_t len) { 12| 4.27k| try { 13| 4.27k| Botan::OCSP::Response response(in, len); 14| 4.27k| } catch(Botan::Exception& e) {} 15| 4.27k|} _ZNK5Botan19AlgorithmIdentifier19parameters_are_nullEv: 50| 4.73k|bool AlgorithmIdentifier::parameters_are_null() const { 51| 4.73k| return (m_parameters.size() == 2 && (m_parameters[0] == 0x05) && (m_parameters[1] == 0x00)); ------------------ | Branch (51:12): [True: 4.73k, False: 6] | Branch (51:40): [True: 4.70k, False: 21] | Branch (51:69): [True: 4.70k, False: 1] ------------------ 52| 4.73k|} _ZN5BotaneqERKNS_19AlgorithmIdentifierES2_: 54| 2.43k|bool operator==(const AlgorithmIdentifier& a1, const AlgorithmIdentifier& a2) { 55| 2.43k| if(a1.oid() != a2.oid()) { ------------------ | Branch (55:7): [True: 10, False: 2.42k] ------------------ 56| 10| return false; 57| 10| } 58| | 59| | /* 60| | * Treat NULL and empty as equivalent 61| | */ 62| 2.42k| if(a1.parameters_are_null_or_empty() && a2.parameters_are_null_or_empty()) { ------------------ | Branch (62:7): [True: 2.39k, False: 22] | Branch (62:44): [True: 2.39k, False: 6] ------------------ 63| 2.39k| return true; 64| 2.39k| } 65| | 66| 28| return (a1.parameters() == a2.parameters()); 67| 2.42k|} _ZN5BotanneERKNS_19AlgorithmIdentifierES2_: 69| 2.43k|bool operator!=(const AlgorithmIdentifier& a1, const AlgorithmIdentifier& a2) { return !(a1 == a2); } _ZNK5Botan19AlgorithmIdentifier11encode_intoERNS_11DER_EncoderE: 74| 2.19k|void AlgorithmIdentifier::encode_into(DER_Encoder& codec) const { 75| 2.19k| codec.start_sequence().encode(oid()).raw_bytes(parameters()).end_cons(); 76| 2.19k|} _ZN5Botan19AlgorithmIdentifier11decode_fromERNS_11BER_DecoderE: 81| 12.6k|void AlgorithmIdentifier::decode_from(BER_Decoder& codec) { 82| 12.6k| codec.start_sequence().decode(m_oid).raw_bytes(m_parameters).end_cons(); 83| 12.6k|} _ZNK5Botan11ASN1_Object10BER_encodeEv: 18| 2.19k|std::vector ASN1_Object::BER_encode() const { 19| 2.19k| std::vector output; 20| 2.19k| DER_Encoder der(output); 21| 2.19k| this->encode_into(der); 22| 2.19k| return output; 23| 2.19k|} _ZNK5Botan10BER_Object11assert_is_aENS_9ASN1_TypeENS_10ASN1_ClassENSt3__117basic_string_viewIcNS3_11char_traitsIcEEEE: 28| 108k|void BER_Object::assert_is_a(ASN1_Type expected_type_tag, ASN1_Class expected_class_tag, std::string_view descr) const { 29| 108k| if(this->is_a(expected_type_tag, expected_class_tag) == false) { ------------------ | Branch (29:7): [True: 2.01k, False: 106k] ------------------ 30| 2.01k| std::stringstream msg; 31| | 32| 2.01k| msg << "Tag mismatch when decoding " << descr << " got "; 33| | 34| 2.01k| if(m_class_tag == ASN1_Class::NoObject && m_type_tag == ASN1_Type::NoObject) { ------------------ | Branch (34:10): [True: 497, False: 1.51k] | Branch (34:49): [True: 497, False: 0] ------------------ 35| 497| msg << "EOF"; 36| 1.51k| } else { 37| 1.51k| if(m_class_tag == ASN1_Class::Universal || m_class_tag == ASN1_Class::Constructed) { ------------------ | Branch (37:13): [True: 561, False: 956] | Branch (37:53): [True: 585, False: 371] ------------------ 38| 1.14k| msg << asn1_tag_to_string(m_type_tag); 39| 1.14k| } else { 40| 371| msg << std::to_string(static_cast(m_type_tag)); 41| 371| } 42| | 43| 1.51k| msg << "/" << asn1_class_to_string(m_class_tag); 44| 1.51k| } 45| | 46| 2.01k| msg << " expected "; 47| | 48| 2.01k| if(expected_class_tag == ASN1_Class::Universal || expected_class_tag == ASN1_Class::Constructed) { ------------------ | Branch (48:10): [True: 290, False: 1.72k] | Branch (48:57): [True: 1.62k, False: 98] ------------------ 49| 1.91k| msg << asn1_tag_to_string(expected_type_tag); 50| 1.91k| } else { 51| 98| msg << std::to_string(static_cast(expected_type_tag)); 52| 98| } 53| | 54| 2.01k| msg << "/" << asn1_class_to_string(expected_class_tag); 55| | 56| 2.01k| throw BER_Decoding_Error(msg.str()); 57| 2.01k| } 58| 108k|} _ZNK5Botan10BER_Object4is_aENS_9ASN1_TypeENS_10ASN1_ClassE: 60| 168k|bool BER_Object::is_a(ASN1_Type expected_type_tag, ASN1_Class expected_class_tag) const { 61| 168k| return (m_type_tag == expected_type_tag && m_class_tag == expected_class_tag); ------------------ | Branch (61:12): [True: 121k, False: 46.7k] | Branch (61:47): [True: 121k, False: 586] ------------------ 62| 168k|} _ZNK5Botan10BER_Object4is_aEiNS_10ASN1_ClassE: 64| 31.6k|bool BER_Object::is_a(int expected_type_tag, ASN1_Class expected_class_tag) const { 65| 31.6k| return is_a(ASN1_Type(expected_type_tag), expected_class_tag); 66| 31.6k|} _ZN5Botan10BER_Object11set_taggingENS_9ASN1_TypeENS_10ASN1_ClassE: 68| 210k|void BER_Object::set_tagging(ASN1_Type type_tag, ASN1_Class class_tag) { 69| 210k| m_type_tag = type_tag; 70| 210k| m_class_tag = class_tag; 71| 210k|} _ZN5Botan20asn1_class_to_stringENS_10ASN1_ClassE: 73| 3.53k|std::string asn1_class_to_string(ASN1_Class type) { 74| 3.53k| switch(type) { 75| 851| case ASN1_Class::Universal: ------------------ | Branch (75:7): [True: 851, False: 2.68k] ------------------ 76| 851| return "UNIVERSAL"; 77| 2.21k| case ASN1_Class::Constructed: ------------------ | Branch (77:7): [True: 2.21k, False: 1.32k] ------------------ 78| 2.21k| return "CONSTRUCTED"; 79| 74| case ASN1_Class::ContextSpecific: ------------------ | Branch (79:7): [True: 74, False: 3.45k] ------------------ 80| 74| return "CONTEXT_SPECIFIC"; 81| 41| case ASN1_Class::Application: ------------------ | Branch (81:7): [True: 41, False: 3.49k] ------------------ 82| 41| return "APPLICATION"; 83| 39| case ASN1_Class::Private: ------------------ | Branch (83:7): [True: 39, False: 3.49k] ------------------ 84| 39| return "PRIVATE"; 85| 0| case ASN1_Class::NoObject: ------------------ | Branch (85:7): [True: 0, False: 3.53k] ------------------ 86| 0| return "NO_OBJECT"; 87| 315| default: ------------------ | Branch (87:7): [True: 315, False: 3.21k] ------------------ 88| 315| return "CLASS(" + std::to_string(static_cast(type)) + ")"; 89| 3.53k| } 90| 3.53k|} _ZN5Botan18asn1_tag_to_stringENS_9ASN1_TypeE: 92| 3.06k|std::string asn1_tag_to_string(ASN1_Type type) { 93| 3.06k| switch(type) { 94| 1.66k| case ASN1_Type::Sequence: ------------------ | Branch (94:7): [True: 1.66k, False: 1.39k] ------------------ 95| 1.66k| return "SEQUENCE"; 96| | 97| 127| case ASN1_Type::Set: ------------------ | Branch (97:7): [True: 127, False: 2.93k] ------------------ 98| 127| return "SET"; 99| | 100| 27| case ASN1_Type::PrintableString: ------------------ | Branch (100:7): [True: 27, False: 3.03k] ------------------ 101| 27| return "PRINTABLE STRING"; 102| | 103| 49| case ASN1_Type::NumericString: ------------------ | Branch (103:7): [True: 49, False: 3.01k] ------------------ 104| 49| return "NUMERIC STRING"; 105| | 106| 70| case ASN1_Type::Ia5String: ------------------ | Branch (106:7): [True: 70, False: 2.99k] ------------------ 107| 70| return "IA5 STRING"; 108| | 109| 19| case ASN1_Type::TeletexString: ------------------ | Branch (109:7): [True: 19, False: 3.04k] ------------------ 110| 19| return "T61 STRING"; 111| | 112| 51| case ASN1_Type::Utf8String: ------------------ | Branch (112:7): [True: 51, False: 3.01k] ------------------ 113| 51| return "UTF8 STRING"; 114| | 115| 21| case ASN1_Type::VisibleString: ------------------ | Branch (115:7): [True: 21, False: 3.04k] ------------------ 116| 21| return "VISIBLE STRING"; 117| | 118| 7| case ASN1_Type::BmpString: ------------------ | Branch (118:7): [True: 7, False: 3.05k] ------------------ 119| 7| return "BMP STRING"; 120| | 121| 50| case ASN1_Type::UniversalString: ------------------ | Branch (121:7): [True: 50, False: 3.01k] ------------------ 122| 50| return "UNIVERSAL STRING"; 123| | 124| 26| case ASN1_Type::UtcTime: ------------------ | Branch (124:7): [True: 26, False: 3.03k] ------------------ 125| 26| return "UTC TIME"; 126| | 127| 20| case ASN1_Type::GeneralizedTime: ------------------ | Branch (127:7): [True: 20, False: 3.04k] ------------------ 128| 20| return "GENERALIZED TIME"; 129| | 130| 154| case ASN1_Type::OctetString: ------------------ | Branch (130:7): [True: 154, False: 2.90k] ------------------ 131| 154| return "OCTET STRING"; 132| | 133| 75| case ASN1_Type::BitString: ------------------ | Branch (133:7): [True: 75, False: 2.98k] ------------------ 134| 75| return "BIT STRING"; 135| | 136| 141| case ASN1_Type::Enumerated: ------------------ | Branch (136:7): [True: 141, False: 2.92k] ------------------ 137| 141| return "ENUMERATED"; 138| | 139| 76| case ASN1_Type::Integer: ------------------ | Branch (139:7): [True: 76, False: 2.98k] ------------------ 140| 76| return "INTEGER"; 141| | 142| 13| case ASN1_Type::Null: ------------------ | Branch (142:7): [True: 13, False: 3.04k] ------------------ 143| 13| return "NULL"; 144| | 145| 36| case ASN1_Type::ObjectId: ------------------ | Branch (145:7): [True: 36, False: 3.02k] ------------------ 146| 36| return "OBJECT"; 147| | 148| 51| case ASN1_Type::Boolean: ------------------ | Branch (148:7): [True: 51, False: 3.01k] ------------------ 149| 51| return "BOOLEAN"; 150| | 151| 5| case ASN1_Type::NoObject: ------------------ | Branch (151:7): [True: 5, False: 3.05k] ------------------ 152| 5| return "NO_OBJECT"; 153| | 154| 381| default: ------------------ | Branch (154:7): [True: 381, False: 2.68k] ------------------ 155| 381| return "TAG(" + std::to_string(static_cast(type)) + ")"; 156| 3.06k| } 157| 3.06k|} _ZN5Botan18BER_Decoding_ErrorC2ENSt3__117basic_string_viewIcNS1_11char_traitsIcEEEE: 162| 5.81k|BER_Decoding_Error::BER_Decoding_Error(std::string_view str) : Decoding_Error(fmt("BER: {}", str)) {} _ZN5Botan11BER_Bad_TagC2ENSt3__117basic_string_viewIcNS1_11char_traitsIcEEEEj: 164| 159|BER_Bad_Tag::BER_Bad_Tag(std::string_view str, uint32_t tagging) : BER_Decoding_Error(fmt("{}: {}", str, tagging)) {} _ZN5Botan4ASN115put_in_sequenceERKNSt3__16vectorIhNS1_9allocatorIhEEEE: 171| 8.37k|std::vector put_in_sequence(const std::vector& contents) { 172| 8.37k| return ASN1::put_in_sequence(contents.data(), contents.size()); 173| 8.37k|} _ZN5Botan4ASN115put_in_sequenceEPKhm: 175| 8.37k|std::vector put_in_sequence(const uint8_t bits[], size_t len) { 176| 8.37k| std::vector output; 177| 8.37k| DER_Encoder(output).start_sequence().raw_bytes(bits, len).end_cons(); 178| 8.37k| return output; 179| 8.37k|} _ZN5Botan4ASN19to_stringERKNS_10BER_ObjectE: 184| 11.3k|std::string to_string(const BER_Object& obj) { return std::string(cast_uint8_ptr_to_char(obj.bits()), obj.length()); } _ZN5Botan4ASN19maybe_BERERNS_10DataSourceE: 189| 5.46k|bool maybe_BER(DataSource& source) { 190| 5.46k| uint8_t first_u8; 191| 5.46k| if(!source.peek_byte(first_u8)) { ------------------ | Branch (191:7): [True: 400, False: 5.06k] ------------------ 192| 400| BOTAN_ASSERT_EQUAL(source.read_byte(first_u8), 0, "Expected EOF"); ------------------ | | 69| 400| do { \ | | 70| 400| if((expr1) != (expr2)) \ | | ------------------ | | | Branch (70:10): [True: 0, False: 400] | | ------------------ | | 71| 400| Botan::assertion_failure(#expr1 " == " #expr2, assertion_made, __func__, __FILE__, __LINE__); \ | | 72| 400| } while(0) | | ------------------ | | | Branch (72:12): [Folded - Ignored] | | ------------------ ------------------ 193| 400| throw Stream_IO_Error("ASN1::maybe_BER: Source was empty"); 194| 400| } 195| | 196| 5.06k| const auto cons_seq = static_cast(ASN1_Class::Constructed) | static_cast(ASN1_Type::Sequence); 197| 5.06k| if(first_u8 == cons_seq) { ------------------ | Branch (197:7): [True: 4.76k, False: 304] ------------------ 198| 4.76k| return true; 199| 4.76k| } 200| 304| return false; 201| 5.06k|} _ZN5Botan3OID11from_stringENSt3__117basic_string_viewIcNS1_11char_traitsIcEEEE: 72| 209|OID OID::from_string(std::string_view str) { 73| 209| if(str.empty()) { ------------------ | Branch (73:7): [True: 0, False: 209] ------------------ 74| 0| throw Invalid_Argument("OID::from_string argument must be non-empty"); 75| 0| } 76| | 77| 209| OID o = OID_Map::global_registry().str2oid(str); 78| 209| if(o.has_value()) { ------------------ | Branch (78:7): [True: 209, False: 0] ------------------ 79| 209| return o; 80| 209| } 81| | 82| 0| std::vector raw = parse_oid_str(str); 83| | 84| 0| if(!raw.empty()) { ------------------ | Branch (84:7): [True: 0, False: 0] ------------------ 85| 0| return OID(std::move(raw)); 86| 0| } 87| | 88| 0| throw Lookup_Error(fmt("No OID associated with name '{}'", str)); 89| 0|} _ZN5Botan3OIDC2ENSt3__117basic_string_viewIcNS1_11char_traitsIcEEEE: 94| 133k|OID::OID(std::string_view oid_str) { 95| 133k| if(!oid_str.empty()) { ------------------ | Branch (95:7): [True: 133k, False: 0] ------------------ 96| 133k| m_id = parse_oid_str(oid_str); 97| 133k| if(m_id.size() < 2 || m_id[0] > 2 || (m_id[0] < 2 && m_id[1] > 39)) { ------------------ | Branch (97:10): [True: 0, False: 133k] | Branch (97:29): [True: 0, False: 133k] | Branch (97:45): [True: 9.96k, False: 123k] | Branch (97:60): [True: 0, False: 9.96k] ------------------ 98| 0| throw Decoding_Error(fmt("Invalid OID '{}'", oid_str)); 99| 0| } 100| 133k| } 101| 133k|} _ZNK5Botan3OID9to_stringEv: 106| 14.0k|std::string OID::to_string() const { 107| 14.0k| std::ostringstream out; 108| 14.0k| out << (*this); 109| 14.0k| return out.str(); 110| 14.0k|} _ZNK5Botan3OID19to_formatted_stringEv: 112| 3.37k|std::string OID::to_formatted_string() const { 113| 3.37k| std::string s = this->human_name_or_empty(); 114| 3.37k| if(!s.empty()) { ------------------ | Branch (114:7): [True: 2.56k, False: 807] ------------------ 115| 2.56k| return s; 116| 2.56k| } 117| 807| return this->to_string(); 118| 3.37k|} _ZNK5Botan3OID19human_name_or_emptyEv: 120| 3.37k|std::string OID::human_name_or_empty() const { return OID_Map::global_registry().oid2str(*this); } _ZN5BotanltERKNS_3OIDES2_: 127| 62.5k|bool operator<(const OID& a, const OID& b) { 128| 62.5k| const std::vector& oid1 = a.get_components(); 129| 62.5k| const std::vector& oid2 = b.get_components(); 130| | 131| 62.5k| return std::lexicographical_compare(oid1.begin(), oid1.end(), oid2.begin(), oid2.end()); 132| 62.5k|} _ZN5BotanlsERNSt3__113basic_ostreamIcNS0_11char_traitsIcEEEERKNS_3OIDE: 134| 14.0k|std::ostream& operator<<(std::ostream& out, const OID& oid) { 135| 14.0k| const auto& val = oid.get_components(); 136| | 137| 94.9k| for(size_t i = 0; i != val.size(); ++i) { ------------------ | Branch (137:22): [True: 80.8k, False: 14.0k] ------------------ 138| | // avoid locale issues with integer formatting 139| 80.8k| out << std::to_string(val[i]); 140| 80.8k| if(i != val.size() - 1) { ------------------ | Branch (140:10): [True: 66.7k, False: 14.0k] ------------------ 141| 66.7k| out << "."; 142| 66.7k| } 143| 80.8k| } 144| | 145| 14.0k| return out; 146| 14.0k|} _ZNK5Botan3OID11encode_intoERNS_11DER_EncoderE: 151| 2.19k|void OID::encode_into(DER_Encoder& der) const { 152| 2.19k| if(m_id.size() < 2) { ------------------ | Branch (152:7): [True: 0, False: 2.19k] ------------------ 153| 0| throw Invalid_Argument("OID::encode_into: OID is invalid"); 154| 0| } 155| | 156| 2.19k| std::vector encoding; 157| | 158| 2.19k| if(m_id[0] > 2 || m_id[1] >= 40) { ------------------ | Branch (158:7): [True: 3, False: 2.18k] | Branch (158:22): [True: 0, False: 2.18k] ------------------ 159| 3| throw Encoding_Error("Invalid OID prefix, cannot encode"); 160| 3| } 161| | 162| 2.18k| encoding.push_back(static_cast(40 * m_id[0] + m_id[1])); 163| | 164| 13.2k| for(size_t i = 2; i != m_id.size(); ++i) { ------------------ | Branch (164:22): [True: 11.0k, False: 2.18k] ------------------ 165| 11.0k| if(m_id[i] == 0) { ------------------ | Branch (165:10): [True: 40, False: 10.9k] ------------------ 166| 40| encoding.push_back(0); 167| 10.9k| } else { 168| 10.9k| size_t blocks = high_bit(m_id[i]) + 6; 169| 10.9k| blocks = (blocks - (blocks % 7)) / 7; 170| | 171| 10.9k| BOTAN_ASSERT(blocks > 0, "Math works"); ------------------ | | 51| 10.9k| do { \ | | 52| 10.9k| if(!(expr)) \ | | ------------------ | | | Branch (52:10): [True: 0, False: 10.9k] | | ------------------ | | 53| 10.9k| Botan::assertion_failure(#expr, assertion_made, __func__, __FILE__, __LINE__); \ | | 54| 10.9k| } while(0) | | ------------------ | | | Branch (54:12): [Folded - Ignored] | | ------------------ ------------------ 172| | 173| 17.5k| for(size_t j = 0; j != blocks - 1; ++j) { ------------------ | Branch (173:28): [True: 6.56k, False: 10.9k] ------------------ 174| 6.56k| encoding.push_back(0x80 | ((m_id[i] >> 7 * (blocks - j - 1)) & 0x7F)); 175| 6.56k| } 176| 10.9k| encoding.push_back(m_id[i] & 0x7F); 177| 10.9k| } 178| 11.0k| } 179| 2.18k| der.add_object(ASN1_Type::ObjectId, ASN1_Class::Universal, encoding); 180| 2.18k|} _ZN5Botan3OID11decode_fromERNS_11BER_DecoderE: 185| 27.5k|void OID::decode_from(BER_Decoder& decoder) { 186| 27.5k| BER_Object obj = decoder.get_next_object(); 187| 27.5k| if(obj.tagging() != (ASN1_Class::Universal | ASN1_Type::ObjectId)) { ------------------ | Branch (187:7): [True: 141, False: 27.4k] ------------------ 188| 141| throw BER_Bad_Tag("Error decoding OID, unknown tag", obj.tagging()); 189| 141| } 190| | 191| 27.4k| const size_t length = obj.length(); 192| 27.4k| const uint8_t* bits = obj.bits(); 193| | 194| 27.4k| if(length < 2 && !(length == 1 && bits[0] == 0)) { ------------------ | Branch (194:7): [True: 739, False: 26.6k] | Branch (194:23): [True: 726, False: 13] | Branch (194:38): [True: 700, False: 26] ------------------ 195| 39| throw BER_Decoding_Error("OID encoding is too short"); 196| 39| } 197| | 198| 27.3k| m_id.clear(); 199| 27.3k| m_id.push_back(bits[0] / 40); 200| 27.3k| m_id.push_back(bits[0] % 40); 201| | 202| 27.3k| size_t i = 0; 203| 198k| while(i != length - 1) { ------------------ | Branch (203:10): [True: 171k, False: 27.3k] ------------------ 204| 171k| uint32_t component = 0; 205| 213k| while(i != length - 1) { ------------------ | Branch (205:13): [True: 208k, False: 4.95k] ------------------ 206| 208k| ++i; 207| | 208| 208k| if(component >> (32 - 7)) { ------------------ | Branch (208:13): [True: 51, False: 208k] ------------------ 209| 51| throw Decoding_Error("OID component overflow"); 210| 51| } 211| | 212| 208k| component = (component << 7) + (bits[i] & 0x7F); 213| | 214| 208k| if(!(bits[i] & 0x80)) { ------------------ | Branch (214:13): [True: 166k, False: 42.2k] ------------------ 215| 166k| break; 216| 166k| } 217| 208k| } 218| 171k| m_id.push_back(component); 219| 171k| } 220| 27.3k|} asn1_oid.cpp:_ZN5Botan12_GLOBAL__N_113parse_oid_strENSt3__117basic_string_viewIcNS1_11char_traitsIcEEEE: 24| 133k|std::vector parse_oid_str(std::string_view oid) { 25| 133k| try { 26| 133k| std::string elem; 27| 133k| std::vector oid_elems; 28| | 29| 1.29M| for(char c : oid) { ------------------ | Branch (29:18): [True: 1.29M, False: 133k] ------------------ 30| 1.29M| if(c == '.') { ------------------ | Branch (30:13): [True: 453k, False: 837k] ------------------ 31| 453k| if(elem.empty()) { ------------------ | Branch (31:16): [True: 0, False: 453k] ------------------ 32| 0| return std::vector(); 33| 0| } 34| 453k| oid_elems.push_back(to_u32bit(elem)); 35| 453k| elem.clear(); 36| 837k| } else { 37| 837k| elem += c; 38| 837k| } 39| 1.29M| } 40| | 41| 133k| if(!elem.empty()) { ------------------ | Branch (41:10): [True: 133k, False: 0] ------------------ 42| 133k| oid_elems.push_back(to_u32bit(elem)); 43| 133k| } 44| | 45| 133k| return oid_elems; 46| 133k| } catch(Invalid_Argument&) // thrown by to_u32bit 47| 133k| { 48| 0| return std::vector(); 49| 0| } 50| 133k|} _ZN5Botan11ASN1_String14is_string_typeENS_9ASN1_TypeE: 60| 161|bool ASN1_String::is_string_type(ASN1_Type tag) { return is_asn1_string_type(tag); } _ZN5Botan11ASN1_StringC2ENSt3__117basic_string_viewIcNS1_11char_traitsIcEEEENS_9ASN1_TypeE: 62| 1.27k|ASN1_String::ASN1_String(std::string_view str, ASN1_Type t) : m_utf8_str(str), m_tag(t) { 63| 1.27k| if(!is_utf8_subset_string_type(m_tag)) { ------------------ | Branch (63:7): [True: 4, False: 1.27k] ------------------ 64| 4| throw Invalid_Argument("ASN1_String only supports encoding to UTF-8 or a UTF-8 subset"); 65| 4| } 66| 1.27k|} _ZN5Botan11ASN1_StringC2ENSt3__117basic_string_viewIcNS1_11char_traitsIcEEEE: 68| 1.19k|ASN1_String::ASN1_String(std::string_view str) : ASN1_String(str, choose_encoding(str)) {} _ZN5Botan11ASN1_String11decode_fromERNS_11BER_DecoderE: 86| 1.14k|void ASN1_String::decode_from(BER_Decoder& source) { 87| 1.14k| BER_Object obj = source.get_next_object(); 88| | 89| 1.14k| if(!is_asn1_string_type(obj.type())) { ------------------ | Branch (89:7): [True: 69, False: 1.07k] ------------------ 90| 69| auto typ = static_cast(obj.type()); 91| 69| throw Decoding_Error(fmt("ASN1_String: Unknown string type {}", typ)); 92| 69| } 93| | 94| 1.07k| m_tag = obj.type(); 95| 1.07k| m_data.assign(obj.bits(), obj.bits() + obj.length()); 96| | 97| 1.07k| if(m_tag == ASN1_Type::BmpString) { ------------------ | Branch (97:7): [True: 207, False: 867] ------------------ 98| 207| m_utf8_str = ucs2_to_utf8(m_data.data(), m_data.size()); 99| 867| } else if(m_tag == ASN1_Type::UniversalString) { ------------------ | Branch (99:14): [True: 106, False: 761] ------------------ 100| 106| m_utf8_str = ucs4_to_utf8(m_data.data(), m_data.size()); 101| 761| } else if(m_tag == ASN1_Type::TeletexString) { ------------------ | Branch (101:14): [True: 282, False: 479] ------------------ 102| | /* 103| | TeletexString is nominally ITU T.61 not ISO-8859-1 but it seems 104| | the majority of implementations actually used that charset here. 105| | */ 106| 282| m_utf8_str = latin1_to_utf8(m_data.data(), m_data.size()); 107| 479| } else { 108| | // All other supported string types are UTF-8 or some subset thereof 109| 479| m_utf8_str = ASN1::to_string(obj); 110| 479| } 111| 1.07k|} asn1_str.cpp:_ZN5Botan12_GLOBAL__N_119is_asn1_string_typeENS_9ASN1_TypeE: 52| 1.29k|bool is_asn1_string_type(ASN1_Type tag) { 53| 1.29k| return (is_utf8_subset_string_type(tag) || tag == ASN1_Type::TeletexString || tag == ASN1_Type::BmpString || ------------------ | Branch (53:12): [True: 556, False: 739] | Branch (53:47): [True: 287, False: 452] | Branch (53:82): [True: 212, False: 240] ------------------ 54| 1.29k| tag == ASN1_Type::UniversalString); ------------------ | Branch (54:12): [True: 108, False: 132] ------------------ 55| 1.29k|} asn1_str.cpp:_ZN5Botan12_GLOBAL__N_126is_utf8_subset_string_typeENS_9ASN1_TypeE: 47| 2.57k|bool is_utf8_subset_string_type(ASN1_Type tag) { 48| 2.57k| return (tag == ASN1_Type::NumericString || tag == ASN1_Type::PrintableString || tag == ASN1_Type::VisibleString || ------------------ | Branch (48:12): [True: 93, False: 2.47k] | Branch (48:47): [True: 1.38k, False: 1.09k] | Branch (48:84): [True: 208, False: 890] ------------------ 49| 2.57k| tag == ASN1_Type::Ia5String || tag == ASN1_Type::Utf8String); ------------------ | Branch (49:12): [True: 109, False: 781] | Branch (49:43): [True: 38, False: 743] ------------------ 50| 2.57k|} asn1_str.cpp:_ZN5Botan12_GLOBAL__N_115choose_encodingENSt3__117basic_string_viewIcNS1_11char_traitsIcEEEE: 23| 1.19k|ASN1_Type choose_encoding(std::string_view str) { 24| 1.19k| auto all_printable = CT::Mask::set(); 25| | 26| 1.19k| for(size_t i = 0; i != str.size(); ++i) { ------------------ | Branch (26:22): [True: 0, False: 1.19k] ------------------ 27| 0| const uint8_t c = static_cast(str[i]); 28| | 29| 0| auto is_alpha_lower = CT::Mask::is_within_range(c, 'a', 'z'); 30| 0| auto is_alpha_upper = CT::Mask::is_within_range(c, 'A', 'Z'); 31| 0| auto is_decimal = CT::Mask::is_within_range(c, '0', '9'); 32| | 33| 0| auto is_print_punc = CT::Mask::is_any_of(c, {' ', '(', ')', '+', ',', '-', '.', '/', ':', '=', '?'}); 34| | 35| 0| auto is_printable = is_alpha_lower | is_alpha_upper | is_decimal | is_print_punc; 36| | 37| 0| all_printable &= is_printable; 38| 0| } 39| | 40| 1.19k| if(all_printable.is_set()) { ------------------ | Branch (40:7): [True: 1.19k, False: 0] ------------------ 41| 1.19k| return ASN1_Type::PrintableString; 42| 1.19k| } else { 43| 0| return ASN1_Type::Utf8String; 44| 0| } 45| 1.19k|} _ZN5Botan9ASN1_Time11decode_fromERNS_11BER_DecoderE: 51| 6.57k|void ASN1_Time::decode_from(BER_Decoder& source) { 52| 6.57k| BER_Object ber_time = source.get_next_object(); 53| | 54| 6.57k| set_to(ASN1::to_string(ber_time), ber_time.type()); 55| 6.57k|} _ZN5Botan9ASN1_Time6set_toENSt3__117basic_string_viewIcNS1_11char_traitsIcEEEENS_9ASN1_TypeE: 153| 6.57k|void ASN1_Time::set_to(std::string_view t_spec, ASN1_Type spec_tag) { 154| 6.57k| BOTAN_ARG_CHECK(spec_tag == ASN1_Type::UtcTime || spec_tag == ASN1_Type::GeneralizedTime, ------------------ | | 30| 6.57k| do { \ | | 31| 8.12k| if(!(expr)) \ | | ------------------ | | | Branch (31:12): [True: 5.02k, False: 1.55k] | | | Branch (31:12): [True: 869, False: 682] | | ------------------ | | 32| 6.57k| Botan::throw_invalid_argument(msg, __func__, __FILE__); \ | | 33| 6.57k| } while(0) | | ------------------ | | | Branch (33:12): [Folded - Ignored] | | ------------------ ------------------ 155| 6.57k| "Invalid tag for ASN1_Time"); 156| | 157| 6.57k| if(spec_tag == ASN1_Type::GeneralizedTime) { ------------------ | Branch (157:7): [True: 869, False: 5.70k] ------------------ 158| 869| BOTAN_ARG_CHECK(t_spec.size() == 15, "Invalid GeneralizedTime input string"); ------------------ | | 30| 869| do { \ | | 31| 869| if(!(expr)) \ | | ------------------ | | | Branch (31:10): [True: 11, False: 858] | | ------------------ | | 32| 869| Botan::throw_invalid_argument(msg, __func__, __FILE__); \ | | 33| 869| } while(0) | | ------------------ | | | Branch (33:12): [Folded - Ignored] | | ------------------ ------------------ 159| 5.70k| } else if(spec_tag == ASN1_Type::UtcTime) { ------------------ | Branch (159:14): [True: 5.02k, False: 682] ------------------ 160| 5.02k| BOTAN_ARG_CHECK(t_spec.size() == 13, "Invalid UTCTime input string"); ------------------ | | 30| 5.02k| do { \ | | 31| 5.02k| if(!(expr)) \ | | ------------------ | | | Branch (31:10): [True: 49, False: 4.97k] | | ------------------ | | 32| 5.02k| Botan::throw_invalid_argument(msg, __func__, __FILE__); \ | | 33| 5.02k| } while(0) | | ------------------ | | | Branch (33:12): [Folded - Ignored] | | ------------------ ------------------ 161| 5.02k| } 162| | 163| 6.57k| BOTAN_ARG_CHECK(t_spec.back() == 'Z', "Botan does not support ASN1 times with timezones other than Z"); ------------------ | | 30| 6.57k| do { \ | | 31| 6.57k| if(!(expr)) \ | | ------------------ | | | Branch (31:10): [True: 26, False: 6.54k] | | ------------------ | | 32| 6.57k| Botan::throw_invalid_argument(msg, __func__, __FILE__); \ | | 33| 6.57k| } while(0) | | ------------------ | | | Branch (33:12): [Folded - Ignored] | | ------------------ ------------------ 164| | 165| 6.57k| const size_t field_len = 2; 166| | 167| 6.57k| const size_t year_start = 0; 168| 6.57k| const size_t year_len = (spec_tag == ASN1_Type::UtcTime) ? 2 : 4; ------------------ | Branch (168:28): [True: 4.96k, False: 1.61k] ------------------ 169| 6.57k| const size_t month_start = year_start + year_len; 170| 6.57k| const size_t day_start = month_start + field_len; 171| 6.57k| const size_t hour_start = day_start + field_len; 172| 6.57k| const size_t min_start = hour_start + field_len; 173| 6.57k| const size_t sec_start = min_start + field_len; 174| | 175| 6.57k| m_year = to_u32bit(t_spec.substr(year_start, year_len)); 176| 6.57k| m_month = to_u32bit(t_spec.substr(month_start, field_len)); 177| 6.57k| m_day = to_u32bit(t_spec.substr(day_start, field_len)); 178| 6.57k| m_hour = to_u32bit(t_spec.substr(hour_start, field_len)); 179| 6.57k| m_minute = to_u32bit(t_spec.substr(min_start, field_len)); 180| 6.57k| m_second = to_u32bit(t_spec.substr(sec_start, field_len)); 181| 6.57k| m_tag = spec_tag; 182| | 183| 6.57k| if(spec_tag == ASN1_Type::UtcTime) { ------------------ | Branch (183:7): [True: 4.94k, False: 1.62k] ------------------ 184| 4.94k| if(m_year >= 50) { ------------------ | Branch (184:10): [True: 1.42k, False: 3.52k] ------------------ 185| 1.42k| m_year += 1900; 186| 3.52k| } else { 187| 3.52k| m_year += 2000; 188| 3.52k| } 189| 4.94k| } 190| | 191| 6.57k| if(!passes_sanity_check()) { ------------------ | Branch (191:7): [True: 46, False: 6.52k] ------------------ 192| 46| throw Invalid_Argument(fmt("ASN1_Time string '{}' does not seem to be valid", t_spec)); 193| 46| } 194| 6.57k|} _ZNK5Botan9ASN1_Time19passes_sanity_checkEv: 199| 5.78k|bool ASN1_Time::passes_sanity_check() const { 200| | // AppVeyor's trust store includes a cert with expiration date in 3016 ... 201| 5.78k| if(m_year < 1950 || m_year > 3100) { ------------------ | Branch (201:7): [True: 10, False: 5.77k] | Branch (201:24): [True: 3, False: 5.77k] ------------------ 202| 13| return false; 203| 13| } 204| 5.77k| if(m_month == 0 || m_month > 12) { ------------------ | Branch (204:7): [True: 1, False: 5.76k] | Branch (204:23): [True: 4, False: 5.76k] ------------------ 205| 5| return false; 206| 5| } 207| | 208| 5.76k| const uint32_t days_in_month[12] = {31, 28 + 1, 31, 30, 31, 30, 31, 31, 30, 31, 30, 31}; 209| | 210| 5.76k| if(m_day == 0 || m_day > days_in_month[m_month - 1]) { ------------------ | Branch (210:7): [True: 1, False: 5.76k] | Branch (210:21): [True: 9, False: 5.75k] ------------------ 211| 10| return false; 212| 10| } 213| | 214| 5.75k| if(m_month == 2 && m_day == 29) { ------------------ | Branch (214:7): [True: 678, False: 5.07k] | Branch (214:23): [True: 54, False: 624] ------------------ 215| 54| if(m_year % 4 != 0) { ------------------ | Branch (215:10): [True: 2, False: 52] ------------------ 216| 2| return false; // not a leap year 217| 2| } 218| | 219| 52| if(m_year % 100 == 0 && m_year % 400 != 0) { ------------------ | Branch (219:10): [True: 6, False: 46] | Branch (219:31): [True: 2, False: 4] ------------------ 220| 2| return false; 221| 2| } 222| 52| } 223| | 224| 5.75k| if(m_hour >= 24 || m_minute >= 60 || m_second > 60) { ------------------ | Branch (224:7): [True: 4, False: 5.74k] | Branch (224:23): [True: 2, False: 5.74k] | Branch (224:41): [True: 7, False: 5.73k] ------------------ 225| 13| return false; 226| 13| } 227| | 228| 5.73k| if(m_tag == ASN1_Type::UtcTime) { ------------------ | Branch (228:7): [True: 4.92k, False: 813] ------------------ 229| | /* 230| | UTCTime limits the value of components such that leap seconds 231| | are not covered. See "UNIVERSAL 23" in "Information technology 232| | Abstract Syntax Notation One (ASN.1): Specification of basic notation" 233| | 234| | http://www.itu.int/ITU-T/studygroups/com17/languages/ 235| | */ 236| 4.92k| if(m_second > 59) { ------------------ | Branch (236:10): [True: 1, False: 4.92k] ------------------ 237| 1| return false; 238| 1| } 239| 4.92k| } 240| | 241| 5.73k| return true; 242| 5.73k|} _ZNK5Botan11BER_Decoder10more_itemsEv: 195| 41.4k|bool BER_Decoder::more_items() const { 196| 41.4k| if(m_source->end_of_data() && !m_pushed.is_set()) { ------------------ | Branch (196:7): [True: 11.3k, False: 30.1k] | Branch (196:34): [True: 11.3k, False: 0] ------------------ 197| 11.3k| return false; 198| 11.3k| } 199| 30.1k| return true; 200| 41.4k|} _ZN5Botan11BER_Decoder10verify_endEv: 205| 6.24k|BER_Decoder& BER_Decoder::verify_end() { return verify_end("BER_Decoder::verify_end called, but data remains"); } _ZN5Botan11BER_Decoder10verify_endENSt3__117basic_string_viewIcNS1_11char_traitsIcEEEE: 210| 8.68k|BER_Decoder& BER_Decoder::verify_end(std::string_view err) { 211| 8.68k| if(!m_source->end_of_data() || m_pushed.is_set()) { ------------------ | Branch (211:7): [True: 47, False: 8.63k] | Branch (211:35): [True: 0, False: 8.63k] ------------------ 212| 47| throw Decoding_Error(err); 213| 47| } 214| 8.63k| return (*this); 215| 8.68k|} _ZN5Botan11BER_Decoder17discard_remainingEv: 220| 38|BER_Decoder& BER_Decoder::discard_remaining() { 221| 38| uint8_t buf; 222| 309| while(m_source->read_byte(buf)) {} ------------------ | Branch (222:10): [True: 271, False: 38] ------------------ 223| 38| return (*this); 224| 38|} _ZN5Botan11BER_Decoder15get_next_objectEv: 229| 189k|BER_Object BER_Decoder::get_next_object() { 230| 189k| BER_Object next; 231| | 232| 189k| if(m_pushed.is_set()) { ------------------ | Branch (232:7): [True: 17.6k, False: 172k] ------------------ 233| 17.6k| std::swap(next, m_pushed); 234| 17.6k| return next; 235| 17.6k| } 236| | 237| 209k| for(;;) { 238| 209k| ASN1_Type type_tag; 239| 209k| ASN1_Class class_tag; 240| 209k| decode_tag(m_source, type_tag, class_tag); 241| 209k| next.set_tagging(type_tag, class_tag); 242| 209k| if(next.is_set() == false) { // no more objects ------------------ | Branch (242:10): [True: 7.51k, False: 202k] ------------------ 243| 7.51k| return next; 244| 7.51k| } 245| | 246| 202k| size_t field_size; 247| 202k| const size_t length = decode_length(m_source, field_size, ALLOWED_EOC_NESTINGS); 248| 202k| if(!m_source->check_available(length)) { ------------------ | Branch (248:10): [True: 869, False: 201k] ------------------ 249| 869| throw BER_Decoding_Error("Value truncated"); 250| 869| } 251| | 252| 201k| uint8_t* out = next.mutable_bits(length); 253| 201k| if(m_source->read(out, length) != length) { ------------------ | Branch (253:10): [True: 0, False: 201k] ------------------ 254| 0| throw BER_Decoding_Error("Value truncated"); 255| 0| } 256| | 257| 201k| if(next.tagging() == static_cast(ASN1_Type::Eoc)) { ------------------ | Branch (257:10): [True: 37.4k, False: 163k] ------------------ 258| 37.4k| continue; 259| 163k| } else { 260| 163k| break; 261| 163k| } 262| 201k| } 263| | 264| 163k| return next; 265| 172k|} _ZN5Botan11BER_Decoder9push_backERKNS_10BER_ObjectE: 270| 2.12k|void BER_Decoder::push_back(const BER_Object& obj) { 271| 2.12k| if(m_pushed.is_set()) { ------------------ | Branch (271:7): [True: 0, False: 2.12k] ------------------ 272| 0| throw Invalid_State("BER_Decoder: Only one push back is allowed"); 273| 0| } 274| 2.12k| m_pushed = obj; 275| 2.12k|} _ZN5Botan11BER_Decoder9push_backEONS_10BER_ObjectE: 277| 21.6k|void BER_Decoder::push_back(BER_Object&& obj) { 278| 21.6k| if(m_pushed.is_set()) { ------------------ | Branch (278:7): [True: 0, False: 21.6k] ------------------ 279| 0| throw Invalid_State("BER_Decoder: Only one push back is allowed"); 280| 0| } 281| 21.6k| m_pushed = std::move(obj); 282| 21.6k|} _ZN5Botan11BER_Decoder10start_consENS_9ASN1_TypeENS_10ASN1_ClassE: 284| 73.1k|BER_Decoder BER_Decoder::start_cons(ASN1_Type type_tag, ASN1_Class class_tag) { 285| 73.1k| BER_Object obj = get_next_object(); 286| 73.1k| obj.assert_is_a(type_tag, class_tag | ASN1_Class::Constructed); 287| 73.1k| return BER_Decoder(std::move(obj), this); 288| 73.1k|} _ZN5Botan11BER_Decoder8end_consEv: 293| 47.1k|BER_Decoder& BER_Decoder::end_cons() { 294| 47.1k| if(!m_parent) { ------------------ | Branch (294:7): [True: 0, False: 47.1k] ------------------ 295| 0| throw Invalid_State("BER_Decoder::end_cons called with null parent"); 296| 0| } 297| 47.1k| if(!m_source->end_of_data()) { ------------------ | Branch (297:7): [True: 532, False: 46.5k] ------------------ 298| 532| throw Decoding_Error("BER_Decoder::end_cons called with data left"); 299| 532| } 300| 46.5k| return (*m_parent); 301| 47.1k|} _ZN5Botan11BER_DecoderC2EONS_10BER_ObjectEPS0_: 303| 73.1k|BER_Decoder::BER_Decoder(BER_Object&& obj, BER_Decoder* parent) { 304| 73.1k| m_data_src = std::make_unique(std::move(obj)); 305| 73.1k| m_source = m_data_src.get(); 306| 73.1k| m_parent = parent; 307| 73.1k|} _ZN5Botan11BER_DecoderC2ERNS_10DataSourceE: 312| 4.74k|BER_Decoder::BER_Decoder(DataSource& src) { m_source = &src; } _ZN5Botan11BER_DecoderC2EPKhm: 317| 5.44k|BER_Decoder::BER_Decoder(const uint8_t data[], size_t length) { 318| 5.44k| m_data_src = std::make_unique(data, length); 319| 5.44k| m_source = m_data_src.get(); 320| 5.44k|} _ZN5Botan11BER_DecoderC2ERKNSt3__16vectorIhNS1_9allocatorIhEEEE: 333| 25.2k|BER_Decoder::BER_Decoder(const std::vector& data) { 334| 25.2k| m_data_src = std::make_unique(data.data(), data.size()); 335| 25.2k| m_source = m_data_src.get(); 336| 25.2k|} _ZN5Botan11BER_Decoder6decodeERNS_11ASN1_ObjectENS_9ASN1_TypeENS_10ASN1_ClassE: 352| 60.9k|BER_Decoder& BER_Decoder::decode(ASN1_Object& obj, ASN1_Type /*unused*/, ASN1_Class /*unused*/) { 353| 60.9k| obj.decode_from(*this); 354| 60.9k| return (*this); 355| 60.9k|} _ZN5Botan11BER_Decoder6decodeERbNS_9ASN1_TypeENS_10ASN1_ClassE: 379| 528|BER_Decoder& BER_Decoder::decode(bool& out, ASN1_Type type_tag, ASN1_Class class_tag) { 380| 528| BER_Object obj = get_next_object(); 381| 528| obj.assert_is_a(type_tag, class_tag); 382| | 383| 528| if(obj.length() != 1) { ------------------ | Branch (383:7): [True: 45, False: 483] ------------------ 384| 45| throw BER_Decoding_Error("BER boolean value had invalid size"); 385| 45| } 386| | 387| 483| out = (obj.bits()[0]) ? true : false; ------------------ | Branch (387:10): [True: 482, False: 1] ------------------ 388| 483| return (*this); 389| 528|} _ZN5Botan11BER_Decoder6decodeERmNS_9ASN1_TypeENS_10ASN1_ClassE: 394| 6.42k|BER_Decoder& BER_Decoder::decode(size_t& out, ASN1_Type type_tag, ASN1_Class class_tag) { 395| 6.42k| BigInt integer; 396| 6.42k| decode(integer, type_tag, class_tag); 397| | 398| 6.42k| if(integer.is_negative()) { ------------------ | Branch (398:7): [True: 232, False: 6.19k] ------------------ 399| 232| throw BER_Decoding_Error("Decoded small integer value was negative"); 400| 232| } 401| | 402| 6.19k| if(integer.bits() > 32) { ------------------ | Branch (402:7): [True: 145, False: 6.05k] ------------------ 403| 145| throw BER_Decoding_Error("Decoded integer value larger than expected"); 404| 145| } 405| | 406| 6.05k| out = 0; 407| 29.3k| for(size_t i = 0; i != 4; ++i) { ------------------ | Branch (407:22): [True: 23.3k, False: 6.05k] ------------------ 408| 23.3k| out = (out << 8) | integer.byte_at(3 - i); 409| 23.3k| } 410| | 411| 6.05k| return (*this); 412| 6.19k|} _ZN5Botan11BER_Decoder6decodeERNS_6BigIntENS_9ASN1_TypeENS_10ASN1_ClassE: 440| 11.4k|BER_Decoder& BER_Decoder::decode(BigInt& out, ASN1_Type type_tag, ASN1_Class class_tag) { 441| 11.4k| BER_Object obj = get_next_object(); 442| 11.4k| obj.assert_is_a(type_tag, class_tag); 443| | 444| 11.4k| if(obj.length() == 0) { ------------------ | Branch (444:7): [True: 3.35k, False: 8.13k] ------------------ 445| 3.35k| out.clear(); 446| 8.13k| } else { 447| 8.13k| const bool negative = (obj.bits()[0] & 0x80) ? true : false; ------------------ | Branch (447:29): [True: 1.97k, False: 6.15k] ------------------ 448| | 449| 8.13k| if(negative) { ------------------ | Branch (449:10): [True: 1.97k, False: 6.15k] ------------------ 450| 1.97k| secure_vector vec(obj.bits(), obj.bits() + obj.length()); 451| 3.44k| for(size_t i = obj.length(); i > 0; --i) { ------------------ | Branch (451:39): [True: 3.44k, False: 0] ------------------ 452| 3.44k| if(vec[i - 1]--) { ------------------ | Branch (452:16): [True: 1.97k, False: 1.47k] ------------------ 453| 1.97k| break; 454| 1.97k| } 455| 3.44k| } 456| 67.6k| for(size_t i = 0; i != obj.length(); ++i) { ------------------ | Branch (456:28): [True: 65.7k, False: 1.97k] ------------------ 457| 65.7k| vec[i] = ~vec[i]; 458| 65.7k| } 459| 1.97k| out = BigInt(vec.data(), vec.size()); 460| 1.97k| out.flip_sign(); 461| 6.15k| } else { 462| 6.15k| out = BigInt(obj.bits(), obj.length()); 463| 6.15k| } 464| 8.13k| } 465| | 466| 11.4k| return (*this); 467| 11.4k|} _ZN5Botan11BER_Decoder6decodeERNSt3__16vectorIhNS1_9allocatorIhEEEENS_9ASN1_TypeES7_NS_10ASN1_ClassE: 517| 23.2k| ASN1_Class class_tag) { 518| 23.2k| if(real_type != ASN1_Type::OctetString && real_type != ASN1_Type::BitString) { ------------------ | Branch (518:7): [True: 9.99k, False: 13.2k] | Branch (518:46): [True: 0, False: 9.99k] ------------------ 519| 0| throw BER_Bad_Tag("Bad tag for {BIT,OCTET} STRING", static_cast(real_type)); 520| 0| } 521| | 522| 23.2k| asn1_decode_binary_string(buffer, get_next_object(), real_type, type_tag, class_tag); 523| 23.2k| return (*this); 524| 23.2k|} ber_dec.cpp:_ZN5Botan12_GLOBAL__N_110decode_tagEPNS_10DataSourceERNS_9ASN1_TypeERNS_10ASN1_ClassE: 29| 504k|size_t decode_tag(DataSource* ber, ASN1_Type& type_tag, ASN1_Class& class_tag) { 30| 504k| uint8_t b; 31| 504k| if(!ber->read_byte(b)) { ------------------ | Branch (31:7): [True: 65.7k, False: 438k] ------------------ 32| 65.7k| type_tag = ASN1_Type::NoObject; 33| 65.7k| class_tag = ASN1_Class::NoObject; 34| 65.7k| return 0; 35| 65.7k| } 36| | 37| 438k| if((b & 0x1F) != 0x1F) { ------------------ | Branch (37:7): [True: 435k, False: 3.11k] ------------------ 38| 435k| type_tag = ASN1_Type(b & 0x1F); 39| 435k| class_tag = ASN1_Class(b & 0xE0); 40| 435k| return 1; 41| 435k| } 42| | 43| 3.11k| size_t tag_bytes = 1; 44| 3.11k| class_tag = ASN1_Class(b & 0xE0); 45| | 46| 3.11k| size_t tag_buf = 0; 47| 8.29k| while(true) { ------------------ | Branch (47:10): [Folded - Ignored] ------------------ 48| 8.29k| if(!ber->read_byte(b)) { ------------------ | Branch (48:10): [True: 276, False: 8.02k] ------------------ 49| 276| throw BER_Decoding_Error("Long-form tag truncated"); 50| 276| } 51| 8.02k| if(tag_buf & 0xFF000000) { ------------------ | Branch (51:10): [True: 32, False: 7.98k] ------------------ 52| 32| throw BER_Decoding_Error("Long-form tag overflowed 32 bits"); 53| 32| } 54| 7.98k| ++tag_bytes; 55| 7.98k| tag_buf = (tag_buf << 7) | (b & 0x7F); 56| 7.98k| if((b & 0x80) == 0) { ------------------ | Branch (56:10): [True: 2.80k, False: 5.18k] ------------------ 57| 2.80k| break; 58| 2.80k| } 59| 7.98k| } 60| 2.80k| type_tag = ASN1_Type(tag_buf); 61| 2.80k| return tag_bytes; 62| 3.11k|} ber_dec.cpp:_ZN5Botan12_GLOBAL__N_113decode_lengthEPNS_10DataSourceERmm: 72| 438k|size_t decode_length(DataSource* ber, size_t& field_size, size_t allow_indef) { 73| 438k| uint8_t b; 74| 438k| if(!ber->read_byte(b)) { ------------------ | Branch (74:7): [True: 721, False: 437k] ------------------ 75| 721| throw BER_Decoding_Error("Length field not found"); 76| 721| } 77| 437k| field_size = 1; 78| 437k| if((b & 0x80) == 0) { ------------------ | Branch (78:7): [True: 313k, False: 123k] ------------------ 79| 313k| return b; 80| 313k| } 81| | 82| 123k| field_size += (b & 0x7F); 83| 123k| if(field_size > 5) { ------------------ | Branch (83:7): [True: 1.23k, False: 122k] ------------------ 84| 1.23k| throw BER_Decoding_Error("Length field is too large"); 85| 1.23k| } 86| | 87| 122k| if(field_size == 1) { ------------------ | Branch (87:7): [True: 78.9k, False: 43.5k] ------------------ 88| 78.9k| if(allow_indef == 0) { ------------------ | Branch (88:10): [True: 2, False: 78.9k] ------------------ 89| 2| throw BER_Decoding_Error("Nested EOC markers too deep, rejecting to avoid stack exhaustion"); 90| 78.9k| } else { 91| 78.9k| return find_eoc(ber, allow_indef - 1); 92| 78.9k| } 93| 78.9k| } 94| | 95| 43.5k| size_t length = 0; 96| | 97| 129k| for(size_t i = 0; i != field_size - 1; ++i) { ------------------ | Branch (97:22): [True: 86.3k, False: 43.5k] ------------------ 98| 86.3k| if(get_byte<0>(length) != 0) { ------------------ | Branch (98:10): [True: 0, False: 86.3k] ------------------ 99| 0| throw BER_Decoding_Error("Field length overflow"); 100| 0| } 101| 86.3k| if(!ber->read_byte(b)) { ------------------ | Branch (101:10): [True: 37, False: 86.3k] ------------------ 102| 37| throw BER_Decoding_Error("Corrupted length field"); 103| 37| } 104| 86.3k| length = (length << 8) | b; 105| 86.3k| } 106| 43.5k| return length; 107| 43.5k|} ber_dec.cpp:_ZN5Botan12_GLOBAL__N_18find_eocEPNS_10DataSourceEm: 112| 78.9k|size_t find_eoc(DataSource* ber, size_t allow_indef) { 113| 78.9k| secure_vector buffer(BOTAN_DEFAULT_BUFFER_SIZE), data; ------------------ | | 372| 78.9k|#define BOTAN_DEFAULT_BUFFER_SIZE 4096 ------------------ 114| | 115| 160k| while(true) { ------------------ | Branch (115:10): [Folded - Ignored] ------------------ 116| 160k| const size_t got = ber->peek(buffer.data(), buffer.size(), data.size()); 117| 160k| if(got == 0) { ------------------ | Branch (117:10): [True: 78.9k, False: 81.6k] ------------------ 118| 78.9k| break; 119| 78.9k| } 120| | 121| 81.6k| data += std::make_pair(buffer.data(), got); 122| 81.6k| } 123| | 124| 78.9k| DataSource_Memory source(data); 125| 78.9k| data.clear(); 126| | 127| 78.9k| size_t length = 0; 128| 297k| while(true) { ------------------ | Branch (128:10): [Folded - Ignored] ------------------ 129| 294k| ASN1_Type type_tag; 130| 294k| ASN1_Class class_tag; 131| 294k| size_t tag_size = decode_tag(&source, type_tag, class_tag); 132| 294k| if(type_tag == ASN1_Type::NoObject) { ------------------ | Branch (132:10): [True: 58.3k, False: 236k] ------------------ 133| 58.3k| break; 134| 58.3k| } 135| | 136| 236k| size_t length_size = 0; 137| 236k| size_t item_size = decode_length(&source, length_size, allow_indef); 138| 236k| source.discard_next(item_size); 139| | 140| 236k| length = BOTAN_CHECKED_ADD(length, item_size); ------------------ | | 72| 236k|#define BOTAN_CHECKED_ADD(x, y) checked_add(x, y, __FILE__, __LINE__) ------------------ 141| 236k| length = BOTAN_CHECKED_ADD(length, tag_size); ------------------ | | 72| 236k|#define BOTAN_CHECKED_ADD(x, y) checked_add(x, y, __FILE__, __LINE__) ------------------ 142| 236k| length = BOTAN_CHECKED_ADD(length, length_size); ------------------ | | 72| 236k|#define BOTAN_CHECKED_ADD(x, y) checked_add(x, y, __FILE__, __LINE__) ------------------ 143| | 144| 236k| if(type_tag == ASN1_Type::Eoc && class_tag == ASN1_Class::Universal) { ------------------ | Branch (144:10): [True: 43.5k, False: 193k] | Branch (144:40): [True: 18.4k, False: 25.0k] ------------------ 145| 18.4k| break; 146| 18.4k| } 147| 236k| } 148| 78.9k| return length; 149| 78.9k|} ber_dec.cpp:_ZN5Botan12_GLOBAL__N_120DataSource_BERObjectC2EONS_10BER_ObjectE: 183| 73.1k| explicit DataSource_BERObject(BER_Object&& obj) : m_obj(std::move(obj)), m_offset(0) {} ber_dec.cpp:_ZN5Botan12_GLOBAL__N_120DataSource_BERObject4readEPhm: 153| 2.76M| size_t read(uint8_t out[], size_t length) override { 154| 2.76M| BOTAN_ASSERT_NOMSG(m_offset <= m_obj.length()); ------------------ | | 60| 2.76M| do { \ | | 61| 2.76M| if(!(expr)) \ | | ------------------ | | | Branch (61:10): [True: 0, False: 2.76M] | | ------------------ | | 62| 2.76M| Botan::assertion_failure(#expr, "", __func__, __FILE__, __LINE__); \ | | 63| 2.76M| } while(0) | | ------------------ | | | Branch (63:12): [Folded - Ignored] | | ------------------ ------------------ 155| 2.76M| const size_t got = std::min(m_obj.length() - m_offset, length); 156| 2.76M| copy_mem(out, m_obj.bits() + m_offset, got); 157| 2.76M| m_offset += got; 158| 2.76M| return got; 159| 2.76M| } ber_dec.cpp:_ZN5Botan12_GLOBAL__N_120DataSource_BERObject15check_availableEm: 174| 127k| bool check_available(size_t n) override { 175| 127k| BOTAN_ASSERT_NOMSG(m_offset <= m_obj.length()); ------------------ | | 60| 127k| do { \ | | 61| 127k| if(!(expr)) \ | | ------------------ | | | Branch (61:10): [True: 0, False: 127k] | | ------------------ | | 62| 127k| Botan::assertion_failure(#expr, "", __func__, __FILE__, __LINE__); \ | | 63| 127k| } while(0) | | ------------------ | | | Branch (63:12): [Folded - Ignored] | | ------------------ ------------------ 176| 127k| return (n <= (m_obj.length() - m_offset)); 177| 127k| } ber_dec.cpp:_ZNK5Botan12_GLOBAL__N_120DataSource_BERObject4peekEPhmm: 161| 28.0k| size_t peek(uint8_t out[], size_t length, size_t peek_offset) const override { 162| 28.0k| BOTAN_ASSERT_NOMSG(m_offset <= m_obj.length()); ------------------ | | 60| 28.0k| do { \ | | 61| 28.0k| if(!(expr)) \ | | ------------------ | | | Branch (61:10): [True: 0, False: 28.0k] | | ------------------ | | 62| 28.0k| Botan::assertion_failure(#expr, "", __func__, __FILE__, __LINE__); \ | | 63| 28.0k| } while(0) | | ------------------ | | | Branch (63:12): [Folded - Ignored] | | ------------------ ------------------ 163| 28.0k| const size_t bytes_left = m_obj.length() - m_offset; 164| | 165| 28.0k| if(peek_offset >= bytes_left) { ------------------ | Branch (165:13): [True: 13.8k, False: 14.2k] ------------------ 166| 13.8k| return 0; 167| 13.8k| } 168| | 169| 14.2k| const size_t got = std::min(bytes_left - peek_offset, length); 170| 14.2k| copy_mem(out, m_obj.bits() + m_offset + peek_offset, got); 171| 14.2k| return got; 172| 28.0k| } ber_dec.cpp:_ZNK5Botan12_GLOBAL__N_120DataSource_BERObject11end_of_dataEv: 179| 81.5k| bool end_of_data() const override { return get_bytes_read() == m_obj.length(); } ber_dec.cpp:_ZNK5Botan12_GLOBAL__N_120DataSource_BERObject14get_bytes_readEv: 181| 81.5k| size_t get_bytes_read() const override { return m_offset; } ber_dec.cpp:_ZN5Botan12_GLOBAL__N_125asn1_decode_binary_stringINSt3__19allocatorIhEEEEvRNS2_6vectorIhT_EERKNS_10BER_ObjectENS_9ASN1_TypeESC_NS_10ASN1_ClassE: 476| 23.1k| ASN1_Class class_tag) { 477| 23.1k| obj.assert_is_a(type_tag, class_tag); 478| | 479| 23.1k| if(real_type == ASN1_Type::OctetString) { ------------------ | Branch (479:7): [True: 13.0k, False: 10.1k] ------------------ 480| 13.0k| buffer.assign(obj.bits(), obj.bits() + obj.length()); 481| 13.0k| } else { 482| 10.1k| if(obj.length() == 0) { ------------------ | Branch (482:10): [True: 1, False: 10.0k] ------------------ 483| 1| throw BER_Decoding_Error("Invalid BIT STRING"); 484| 1| } 485| 10.0k| if(obj.bits()[0] >= 8) { ------------------ | Branch (485:10): [True: 2, False: 10.0k] ------------------ 486| 2| throw BER_Decoding_Error("Bad number of unused bits in BIT STRING"); 487| 2| } 488| | 489| 10.0k| buffer.resize(obj.length() - 1); 490| | 491| 10.0k| if(obj.length() > 1) { ------------------ | Branch (491:10): [True: 7.37k, False: 2.71k] ------------------ 492| 7.37k| copy_mem(buffer.data(), obj.bits() + 1, obj.length() - 1); 493| 7.37k| } 494| 10.0k| } 495| 23.1k|} _ZN5Botan11DER_EncoderC2ERNSt3__16vectorIhNS1_9allocatorIhEEEE: 71| 10.5k|DER_Encoder::DER_Encoder(std::vector& vec) { 72| 10.5k| m_append_output = [&vec](const uint8_t b[], size_t l) { vec.insert(vec.end(), b, b + l); }; 73| 10.5k|} _ZN5Botan11DER_Encoder12DER_Sequence13push_contentsERS0_: 78| 14.9k|void DER_Encoder::DER_Sequence::push_contents(DER_Encoder& der) { 79| 14.9k| const auto real_class_tag = m_class_tag | ASN1_Class::Constructed; 80| | 81| 14.9k| if(m_type_tag == ASN1_Type::Set) { ------------------ | Branch (81:7): [True: 0, False: 14.9k] ------------------ 82| 0| std::sort(m_set_contents.begin(), m_set_contents.end()); 83| 0| for(const auto& set_elem : m_set_contents) { ------------------ | Branch (83:32): [True: 0, False: 0] ------------------ 84| 0| m_contents += set_elem; 85| 0| } 86| 0| m_set_contents.clear(); 87| 0| } 88| | 89| 14.9k| der.add_object(m_type_tag, real_class_tag, m_contents.data(), m_contents.size()); 90| 14.9k| m_contents.clear(); 91| 14.9k|} _ZN5Botan11DER_Encoder12DER_Sequence9add_bytesEPKhm: 96| 12.7k|void DER_Encoder::DER_Sequence::add_bytes(const uint8_t data[], size_t length) { 97| 12.7k| if(m_type_tag == ASN1_Type::Set) { ------------------ | Branch (97:7): [True: 0, False: 12.7k] ------------------ 98| 0| m_set_contents.push_back(secure_vector(data, data + length)); 99| 12.7k| } else { 100| 12.7k| m_contents += std::make_pair(data, length); 101| 12.7k| } 102| 12.7k|} _ZN5Botan11DER_Encoder12DER_Sequence9add_bytesEPKhmS3_m: 104| 8.75k|void DER_Encoder::DER_Sequence::add_bytes(const uint8_t hdr[], size_t hdr_len, const uint8_t val[], size_t val_len) { 105| 8.75k| if(m_type_tag == ASN1_Type::Set) { ------------------ | Branch (105:7): [True: 0, False: 8.75k] ------------------ 106| 0| secure_vector m; 107| 0| m.reserve(hdr_len + val_len); 108| 0| m += std::make_pair(hdr, hdr_len); 109| 0| m += std::make_pair(val, val_len); 110| 0| m_set_contents.push_back(std::move(m)); 111| 8.75k| } else { 112| 8.75k| m_contents += std::make_pair(hdr, hdr_len); 113| 8.75k| m_contents += std::make_pair(val, val_len); 114| 8.75k| } 115| 8.75k|} _ZN5Botan11DER_Encoder12DER_SequenceC2ENS_9ASN1_TypeENS_10ASN1_ClassE: 125| 14.9k|DER_Encoder::DER_Sequence::DER_Sequence(ASN1_Type t1, ASN1_Class t2) : m_type_tag(t1), m_class_tag(t2) {} _ZN5Botan11DER_Encoder10start_consENS_9ASN1_TypeENS_10ASN1_ClassE: 161| 14.9k|DER_Encoder& DER_Encoder::start_cons(ASN1_Type type_tag, ASN1_Class class_tag) { 162| 14.9k| m_subsequences.push_back(DER_Sequence(type_tag, class_tag)); 163| 14.9k| return (*this); 164| 14.9k|} _ZN5Botan11DER_Encoder8end_consEv: 169| 14.9k|DER_Encoder& DER_Encoder::end_cons() { 170| 14.9k| if(m_subsequences.empty()) { ------------------ | Branch (170:7): [True: 0, False: 14.9k] ------------------ 171| 0| throw Invalid_State("DER_Encoder::end_cons: No such sequence"); 172| 0| } 173| | 174| 14.9k| DER_Sequence last_seq = std::move(m_subsequences[m_subsequences.size() - 1]); 175| 14.9k| m_subsequences.pop_back(); 176| 14.9k| last_seq.push_contents(*this); 177| | 178| 14.9k| return (*this); 179| 14.9k|} _ZN5Botan11DER_Encoder9raw_bytesEPKhm: 203| 12.7k|DER_Encoder& DER_Encoder::raw_bytes(const uint8_t bytes[], size_t length) { 204| 12.7k| if(!m_subsequences.empty()) { ------------------ | Branch (204:7): [True: 12.7k, False: 0] ------------------ 205| 12.7k| m_subsequences[m_subsequences.size() - 1].add_bytes(bytes, length); 206| 12.7k| } else if(m_append_output) { ------------------ | Branch (206:14): [True: 0, False: 0] ------------------ 207| 0| m_append_output(bytes, length); 208| 0| } else { 209| 0| m_default_outbuf += std::make_pair(bytes, length); 210| 0| } 211| | 212| 12.7k| return (*this); 213| 12.7k|} _ZN5Botan11DER_Encoder10add_objectENS_9ASN1_TypeENS_10ASN1_ClassEPKhm: 218| 19.3k|DER_Encoder& DER_Encoder::add_object(ASN1_Type type_tag, ASN1_Class class_tag, const uint8_t rep[], size_t length) { 219| 19.3k| std::vector hdr; 220| 19.3k| encode_tag(hdr, type_tag, class_tag); 221| 19.3k| encode_length(hdr, length); 222| | 223| 19.3k| if(!m_subsequences.empty()) { ------------------ | Branch (223:7): [True: 8.75k, False: 10.5k] ------------------ 224| 8.75k| m_subsequences[m_subsequences.size() - 1].add_bytes(hdr.data(), hdr.size(), rep, length); 225| 10.5k| } else if(m_append_output) { ------------------ | Branch (225:14): [True: 10.5k, False: 0] ------------------ 226| 10.5k| m_append_output(hdr.data(), hdr.size()); 227| 10.5k| m_append_output(rep, length); 228| 10.5k| } else { 229| 0| m_default_outbuf += hdr; 230| 0| m_default_outbuf += std::make_pair(rep, length); 231| 0| } 232| | 233| 19.3k| return (*this); 234| 19.3k|} _ZN5Botan11DER_Encoder6encodeEPKhmNS_9ASN1_TypeE: 261| 2.18k|DER_Encoder& DER_Encoder::encode(const uint8_t bytes[], size_t length, ASN1_Type real_type) { 262| 2.18k| return encode(bytes, length, real_type, real_type, ASN1_Class::Universal); 263| 2.18k|} _ZN5Botan11DER_Encoder6encodeEPKhmNS_9ASN1_TypeES3_NS_10ASN1_ClassE: 309| 2.18k| const uint8_t bytes[], size_t length, ASN1_Type real_type, ASN1_Type type_tag, ASN1_Class class_tag) { 310| 2.18k| if(real_type != ASN1_Type::OctetString && real_type != ASN1_Type::BitString) { ------------------ | Branch (310:7): [True: 2.18k, False: 0] | Branch (310:46): [True: 0, False: 2.18k] ------------------ 311| 0| throw Invalid_Argument("DER_Encoder: Invalid tag for byte/bit string"); 312| 0| } 313| | 314| 2.18k| if(real_type == ASN1_Type::BitString) { ------------------ | Branch (314:7): [True: 2.18k, False: 0] ------------------ 315| 2.18k| secure_vector encoded; 316| 2.18k| encoded.push_back(0); 317| 2.18k| encoded += std::make_pair(bytes, length); 318| 2.18k| return add_object(type_tag, class_tag, encoded); 319| 2.18k| } else { 320| 0| return add_object(type_tag, class_tag, bytes, length); 321| 0| } 322| 2.18k|} _ZN5Botan11DER_Encoder6encodeERKNS_11ASN1_ObjectE: 324| 4.38k|DER_Encoder& DER_Encoder::encode(const ASN1_Object& obj) { 325| 4.38k| obj.encode_into(*this); 326| 4.38k| return (*this); 327| 4.38k|} der_enc.cpp:_ZN5Botan12_GLOBAL__N_110encode_tagERNSt3__16vectorIhNS1_9allocatorIhEEEENS_9ASN1_TypeENS_10ASN1_ClassE: 24| 19.3k|void encode_tag(std::vector& encoded_tag, ASN1_Type type_tag_e, ASN1_Class class_tag_e) { 25| 19.3k| const uint32_t type_tag = static_cast(type_tag_e); 26| 19.3k| const uint32_t class_tag = static_cast(class_tag_e); 27| | 28| 19.3k| if((class_tag | 0xE0) != 0xE0) { ------------------ | Branch (28:7): [True: 0, False: 19.3k] ------------------ 29| 0| throw Encoding_Error(fmt("DER_Encoder: Invalid class tag {}", std::to_string(class_tag))); 30| 0| } 31| | 32| 19.3k| if(type_tag <= 30) { ------------------ | Branch (32:7): [True: 19.3k, False: 0] ------------------ 33| 19.3k| encoded_tag.push_back(static_cast(type_tag | class_tag)); 34| 19.3k| } else { 35| 0| size_t blocks = high_bit(static_cast(type_tag)) + 6; 36| 0| blocks = (blocks - (blocks % 7)) / 7; 37| | 38| 0| BOTAN_ASSERT_NOMSG(blocks > 0); ------------------ | | 60| 0| do { \ | | 61| 0| if(!(expr)) \ | | ------------------ | | | Branch (61:10): [True: 0, False: 0] | | ------------------ | | 62| 0| Botan::assertion_failure(#expr, "", __func__, __FILE__, __LINE__); \ | | 63| 0| } while(0) | | ------------------ | | | Branch (63:12): [Folded - Ignored] | | ------------------ ------------------ 39| | 40| 0| encoded_tag.push_back(static_cast(class_tag | 0x1F)); 41| 0| for(size_t i = 0; i != blocks - 1; ++i) { ------------------ | Branch (41:25): [True: 0, False: 0] ------------------ 42| 0| encoded_tag.push_back(0x80 | ((type_tag >> 7 * (blocks - i - 1)) & 0x7F)); 43| 0| } 44| 0| encoded_tag.push_back(type_tag & 0x7F); 45| 0| } 46| 19.3k|} der_enc.cpp:_ZN5Botan12_GLOBAL__N_113encode_lengthERNSt3__16vectorIhNS1_9allocatorIhEEEEm: 51| 19.3k|void encode_length(std::vector& encoded_length, size_t length) { 52| 19.3k| if(length <= 127) { ------------------ | Branch (52:7): [True: 10.3k, False: 8.96k] ------------------ 53| 10.3k| encoded_length.push_back(static_cast(length)); 54| 10.3k| } else { 55| 8.96k| const size_t bytes_needed = significant_bytes(length); 56| | 57| 8.96k| encoded_length.push_back(static_cast(0x80 | bytes_needed)); 58| | 59| 26.8k| for(size_t i = sizeof(length) - bytes_needed; i < sizeof(length); ++i) { ------------------ | Branch (59:53): [True: 17.9k, False: 8.96k] ------------------ 60| 17.9k| encoded_length.push_back(get_byte_var(i, length)); 61| 17.9k| } 62| 8.96k| } 63| 19.3k|} der_enc.cpp:_ZZN5Botan11DER_EncoderC1ERNSt3__16vectorIhNS1_9allocatorIhEEEEENK3$_1clEPKhm: 72| 21.1k| m_append_output = [&vec](const uint8_t b[], size_t l) { vec.insert(vec.end(), b, b + l); }; _ZN5Botan7OID_MapC2Ev: 11| 1|OID_Map::OID_Map() { 12| 1| m_str2oid = OID_Map::load_str2oid_map(); 13| 1| m_oid2str = OID_Map::load_oid2str_map(); 14| 1|} _ZN5Botan7OID_Map15global_registryEv: 16| 3.57k|OID_Map& OID_Map::global_registry() { 17| 3.57k| static OID_Map g_map; 18| 3.57k| return g_map; 19| 3.57k|} _ZN5Botan7OID_Map7oid2strERKNS_3OIDE: 56| 3.37k|std::string OID_Map::oid2str(const OID& oid) { 57| 3.37k| const std::string oid_str = oid.to_string(); 58| | 59| 3.37k| lock_guard_type lock(m_mutex); 60| | 61| 3.37k| auto i = m_oid2str.find(oid_str); 62| 3.37k| if(i != m_oid2str.end()) { ------------------ | Branch (62:7): [True: 2.56k, False: 807] ------------------ 63| 2.56k| return i->second; 64| 2.56k| } 65| | 66| 807| return ""; 67| 3.37k|} _ZN5Botan7OID_Map7str2oidENSt3__117basic_string_viewIcNS1_11char_traitsIcEEEE: 69| 209|OID OID_Map::str2oid(std::string_view str) { 70| 209| lock_guard_type lock(m_mutex); 71| 209| auto i = m_str2oid.find(std::string(str)); 72| 209| if(i != m_str2oid.end()) { ------------------ | Branch (72:7): [True: 209, False: 0] ------------------ 73| 209| return i->second; 74| 209| } 75| | 76| 0| return OID(); 77| 209|} _ZN5Botan7OID_Map16load_oid2str_mapEv: 17| 1|std::unordered_map OID_Map::load_oid2str_map() { 18| 1| return std::unordered_map{ 19| | 20| 1| {"0.3.4401.5.3.1.9.26", "Camellia-192/GCM"}, 21| 1| {"0.3.4401.5.3.1.9.46", "Camellia-256/GCM"}, 22| 1| {"0.3.4401.5.3.1.9.6", "Camellia-128/GCM"}, 23| 1| {"0.4.0.127.0.15.1.1.13.0", "XMSS"}, 24| 1| {"1.0.14888.3.0.5", "ECKCDSA"}, 25| 1| {"1.2.156.10197.1.104.100", "SM4/OCB"}, 26| 1| {"1.2.156.10197.1.104.2", "SM4/CBC"}, 27| 1| {"1.2.156.10197.1.104.8", "SM4/GCM"}, 28| 1| {"1.2.156.10197.1.301", "sm2p256v1"}, 29| 1| {"1.2.156.10197.1.301.1", "SM2"}, 30| 1| {"1.2.156.10197.1.301.2", "SM2_Kex"}, 31| 1| {"1.2.156.10197.1.301.3", "SM2_Enc"}, 32| 1| {"1.2.156.10197.1.401", "SM3"}, 33| 1| {"1.2.156.10197.1.501", "SM2_Sig/SM3"}, 34| 1| {"1.2.156.10197.1.504", "RSA/EMSA3(SM3)"}, 35| 1| {"1.2.250.1.223.101.256.1", "frp256v1"}, 36| 1| {"1.2.392.200011.61.1.1.1.2", "Camellia-128/CBC"}, 37| 1| {"1.2.392.200011.61.1.1.1.3", "Camellia-192/CBC"}, 38| 1| {"1.2.392.200011.61.1.1.1.4", "Camellia-256/CBC"}, 39| 1| {"1.2.410.200004.1.100.4.3", "ECKCDSA/SHA-1"}, 40| 1| {"1.2.410.200004.1.100.4.4", "ECKCDSA/SHA-224"}, 41| 1| {"1.2.410.200004.1.100.4.5", "ECKCDSA/SHA-256"}, 42| 1| {"1.2.410.200004.1.4", "SEED/CBC"}, 43| 1| {"1.2.643.100.1", "GOST.OGRN"}, 44| 1| {"1.2.643.100.111", "GOST.SubjectSigningTool"}, 45| 1| {"1.2.643.100.112", "GOST.IssuerSigningTool"}, 46| 1| {"1.2.643.2.2.19", "GOST-34.10"}, 47| 1| {"1.2.643.2.2.3", "GOST-34.10/GOST-R-34.11-94"}, 48| 1| {"1.2.643.2.2.35.1", "gost_256A"}, 49| 1| {"1.2.643.2.2.36.0", "gost_256A"}, 50| 1| {"1.2.643.3.131.1.1", "GOST.INN"}, 51| 1| {"1.2.643.7.1.1.1.1", "GOST-34.10-2012-256"}, 52| 1| {"1.2.643.7.1.1.1.2", "GOST-34.10-2012-512"}, 53| 1| {"1.2.643.7.1.1.2.2", "Streebog-256"}, 54| 1| {"1.2.643.7.1.1.2.3", "Streebog-512"}, 55| 1| {"1.2.643.7.1.1.3.2", "GOST-34.10-2012-256/Streebog-256"}, 56| 1| {"1.2.643.7.1.1.3.3", "GOST-34.10-2012-512/Streebog-512"}, 57| 1| {"1.2.643.7.1.2.1.1.1", "gost_256A"}, 58| 1| {"1.2.643.7.1.2.1.1.2", "gost_256B"}, 59| 1| {"1.2.643.7.1.2.1.2.1", "gost_512A"}, 60| 1| {"1.2.643.7.1.2.1.2.2", "gost_512B"}, 61| 1| {"1.2.840.10040.4.1", "DSA"}, 62| 1| {"1.2.840.10040.4.3", "DSA/SHA-1"}, 63| 1| {"1.2.840.10045.2.1", "ECDSA"}, 64| 1| {"1.2.840.10045.3.1.1", "secp192r1"}, 65| 1| {"1.2.840.10045.3.1.2", "x962_p192v2"}, 66| 1| {"1.2.840.10045.3.1.3", "x962_p192v3"}, 67| 1| {"1.2.840.10045.3.1.4", "x962_p239v1"}, 68| 1| {"1.2.840.10045.3.1.5", "x962_p239v2"}, 69| 1| {"1.2.840.10045.3.1.6", "x962_p239v3"}, 70| 1| {"1.2.840.10045.3.1.7", "secp256r1"}, 71| 1| {"1.2.840.10045.4.1", "ECDSA/SHA-1"}, 72| 1| {"1.2.840.10045.4.3.1", "ECDSA/SHA-224"}, 73| 1| {"1.2.840.10045.4.3.2", "ECDSA/SHA-256"}, 74| 1| {"1.2.840.10045.4.3.3", "ECDSA/SHA-384"}, 75| 1| {"1.2.840.10045.4.3.4", "ECDSA/SHA-512"}, 76| 1| {"1.2.840.10046.2.1", "DH"}, 77| 1| {"1.2.840.113533.7.66.10", "CAST-128/CBC"}, 78| 1| {"1.2.840.113533.7.66.15", "KeyWrap.CAST-128"}, 79| 1| {"1.2.840.113549.1.1.1", "RSA"}, 80| 1| {"1.2.840.113549.1.1.10", "RSA/EMSA4"}, 81| 1| {"1.2.840.113549.1.1.11", "RSA/EMSA3(SHA-256)"}, 82| 1| {"1.2.840.113549.1.1.12", "RSA/EMSA3(SHA-384)"}, 83| 1| {"1.2.840.113549.1.1.13", "RSA/EMSA3(SHA-512)"}, 84| 1| {"1.2.840.113549.1.1.14", "RSA/EMSA3(SHA-224)"}, 85| 1| {"1.2.840.113549.1.1.16", "RSA/EMSA3(SHA-512-256)"}, 86| 1| {"1.2.840.113549.1.1.4", "RSA/EMSA3(MD5)"}, 87| 1| {"1.2.840.113549.1.1.5", "RSA/EMSA3(SHA-1)"}, 88| 1| {"1.2.840.113549.1.1.7", "RSA/OAEP"}, 89| 1| {"1.2.840.113549.1.1.8", "MGF1"}, 90| 1| {"1.2.840.113549.1.5.12", "PKCS5.PBKDF2"}, 91| 1| {"1.2.840.113549.1.5.13", "PBE-PKCS5v20"}, 92| 1| {"1.2.840.113549.1.9.1", "PKCS9.EmailAddress"}, 93| 1| {"1.2.840.113549.1.9.14", "PKCS9.ExtensionRequest"}, 94| 1| {"1.2.840.113549.1.9.16.3.18", "ChaCha20Poly1305"}, 95| 1| {"1.2.840.113549.1.9.16.3.6", "KeyWrap.TripleDES"}, 96| 1| {"1.2.840.113549.1.9.16.3.8", "Compression.Zlib"}, 97| 1| {"1.2.840.113549.1.9.2", "PKCS9.UnstructuredName"}, 98| 1| {"1.2.840.113549.1.9.3", "PKCS9.ContentType"}, 99| 1| {"1.2.840.113549.1.9.4", "PKCS9.MessageDigest"}, 100| 1| {"1.2.840.113549.1.9.7", "PKCS9.ChallengePassword"}, 101| 1| {"1.2.840.113549.2.10", "HMAC(SHA-384)"}, 102| 1| {"1.2.840.113549.2.11", "HMAC(SHA-512)"}, 103| 1| {"1.2.840.113549.2.13", "HMAC(SHA-512-256)"}, 104| 1| {"1.2.840.113549.2.5", "MD5"}, 105| 1| {"1.2.840.113549.2.7", "HMAC(SHA-1)"}, 106| 1| {"1.2.840.113549.2.8", "HMAC(SHA-224)"}, 107| 1| {"1.2.840.113549.2.9", "HMAC(SHA-256)"}, 108| 1| {"1.2.840.113549.3.7", "TripleDES/CBC"}, 109| 1| {"1.3.101.110", "Curve25519"}, 110| 1| {"1.3.101.112", "Ed25519"}, 111| 1| {"1.3.132.0.10", "secp256k1"}, 112| 1| {"1.3.132.0.30", "secp160r2"}, 113| 1| {"1.3.132.0.31", "secp192k1"}, 114| 1| {"1.3.132.0.32", "secp224k1"}, 115| 1| {"1.3.132.0.33", "secp224r1"}, 116| 1| {"1.3.132.0.34", "secp384r1"}, 117| 1| {"1.3.132.0.35", "secp521r1"}, 118| 1| {"1.3.132.0.8", "secp160r1"}, 119| 1| {"1.3.132.0.9", "secp160k1"}, 120| 1| {"1.3.132.1.12", "ECDH"}, 121| 1| {"1.3.14.3.2.26", "SHA-1"}, 122| 1| {"1.3.14.3.2.7", "DES/CBC"}, 123| 1| {"1.3.36.3.2.1", "RIPEMD-160"}, 124| 1| {"1.3.36.3.3.1.2", "RSA/EMSA3(RIPEMD-160)"}, 125| 1| {"1.3.36.3.3.2.5.2.1", "ECGDSA"}, 126| 1| {"1.3.36.3.3.2.5.4.1", "ECGDSA/RIPEMD-160"}, 127| 1| {"1.3.36.3.3.2.5.4.2", "ECGDSA/SHA-1"}, 128| 1| {"1.3.36.3.3.2.5.4.3", "ECGDSA/SHA-224"}, 129| 1| {"1.3.36.3.3.2.5.4.4", "ECGDSA/SHA-256"}, 130| 1| {"1.3.36.3.3.2.5.4.5", "ECGDSA/SHA-384"}, 131| 1| {"1.3.36.3.3.2.5.4.6", "ECGDSA/SHA-512"}, 132| 1| {"1.3.36.3.3.2.8.1.1.1", "brainpool160r1"}, 133| 1| {"1.3.36.3.3.2.8.1.1.11", "brainpool384r1"}, 134| 1| {"1.3.36.3.3.2.8.1.1.13", "brainpool512r1"}, 135| 1| {"1.3.36.3.3.2.8.1.1.3", "brainpool192r1"}, 136| 1| {"1.3.36.3.3.2.8.1.1.5", "brainpool224r1"}, 137| 1| {"1.3.36.3.3.2.8.1.1.7", "brainpool256r1"}, 138| 1| {"1.3.36.3.3.2.8.1.1.9", "brainpool320r1"}, 139| 1| {"1.3.6.1.4.1.11591.15.1", "OpenPGP.Ed25519"}, 140| 1| {"1.3.6.1.4.1.11591.4.11", "Scrypt"}, 141| 1| {"1.3.6.1.4.1.25258.1.10.1", "Dilithium-4x4-AES-r3"}, 142| 1| {"1.3.6.1.4.1.25258.1.10.2", "Dilithium-6x5-AES-r3"}, 143| 1| {"1.3.6.1.4.1.25258.1.10.3", "Dilithium-8x7-AES-r3"}, 144| 1| {"1.3.6.1.4.1.25258.1.11.1", "Kyber-512-90s-r3"}, 145| 1| {"1.3.6.1.4.1.25258.1.11.2", "Kyber-768-90s-r3"}, 146| 1| {"1.3.6.1.4.1.25258.1.11.3", "Kyber-1024-90s-r3"}, 147| 1| {"1.3.6.1.4.1.25258.1.3", "McEliece"}, 148| 1| {"1.3.6.1.4.1.25258.1.5", "XMSS-draft6"}, 149| 1| {"1.3.6.1.4.1.25258.1.6.1", "GOST-34.10-2012-256/SHA-256"}, 150| 1| {"1.3.6.1.4.1.25258.1.7.1", "Kyber-512-r3"}, 151| 1| {"1.3.6.1.4.1.25258.1.7.2", "Kyber-768-r3"}, 152| 1| {"1.3.6.1.4.1.25258.1.7.3", "Kyber-1024-r3"}, 153| 1| {"1.3.6.1.4.1.25258.1.8", "XMSS-draft12"}, 154| 1| {"1.3.6.1.4.1.25258.1.9.1", "Dilithium-4x4-r3"}, 155| 1| {"1.3.6.1.4.1.25258.1.9.2", "Dilithium-6x5-r3"}, 156| 1| {"1.3.6.1.4.1.25258.1.9.3", "Dilithium-8x7-r3"}, 157| 1| {"1.3.6.1.4.1.25258.3.1", "Serpent/CBC"}, 158| 1| {"1.3.6.1.4.1.25258.3.101", "Serpent/GCM"}, 159| 1| {"1.3.6.1.4.1.25258.3.102", "Twofish/GCM"}, 160| 1| {"1.3.6.1.4.1.25258.3.2", "Threefish-512/CBC"}, 161| 1| {"1.3.6.1.4.1.25258.3.2.1", "AES-128/OCB"}, 162| 1| {"1.3.6.1.4.1.25258.3.2.2", "AES-192/OCB"}, 163| 1| {"1.3.6.1.4.1.25258.3.2.3", "AES-256/OCB"}, 164| 1| {"1.3.6.1.4.1.25258.3.2.4", "Serpent/OCB"}, 165| 1| {"1.3.6.1.4.1.25258.3.2.5", "Twofish/OCB"}, 166| 1| {"1.3.6.1.4.1.25258.3.2.6", "Camellia-128/OCB"}, 167| 1| {"1.3.6.1.4.1.25258.3.2.7", "Camellia-192/OCB"}, 168| 1| {"1.3.6.1.4.1.25258.3.2.8", "Camellia-256/OCB"}, 169| 1| {"1.3.6.1.4.1.25258.3.3", "Twofish/CBC"}, 170| 1| {"1.3.6.1.4.1.25258.3.4.1", "AES-128/SIV"}, 171| 1| {"1.3.6.1.4.1.25258.3.4.2", "AES-192/SIV"}, 172| 1| {"1.3.6.1.4.1.25258.3.4.3", "AES-256/SIV"}, 173| 1| {"1.3.6.1.4.1.25258.3.4.4", "Serpent/SIV"}, 174| 1| {"1.3.6.1.4.1.25258.3.4.5", "Twofish/SIV"}, 175| 1| {"1.3.6.1.4.1.25258.3.4.6", "Camellia-128/SIV"}, 176| 1| {"1.3.6.1.4.1.25258.3.4.7", "Camellia-192/SIV"}, 177| 1| {"1.3.6.1.4.1.25258.3.4.8", "Camellia-256/SIV"}, 178| 1| {"1.3.6.1.4.1.25258.3.4.9", "SM4/SIV"}, 179| 1| {"1.3.6.1.4.1.3029.1.2.1", "ElGamal"}, 180| 1| {"1.3.6.1.4.1.3029.1.5.1", "OpenPGP.Curve25519"}, 181| 1| {"1.3.6.1.4.1.311.20.2.2", "Microsoft SmartcardLogon"}, 182| 1| {"1.3.6.1.4.1.311.20.2.3", "Microsoft UPN"}, 183| 1| {"1.3.6.1.4.1.8301.3.1.2.9.0.38", "secp521r1"}, 184| 1| {"1.3.6.1.5.5.7.1.1", "PKIX.AuthorityInformationAccess"}, 185| 1| {"1.3.6.1.5.5.7.3.1", "PKIX.ServerAuth"}, 186| 1| {"1.3.6.1.5.5.7.3.2", "PKIX.ClientAuth"}, 187| 1| {"1.3.6.1.5.5.7.3.3", "PKIX.CodeSigning"}, 188| 1| {"1.3.6.1.5.5.7.3.4", "PKIX.EmailProtection"}, 189| 1| {"1.3.6.1.5.5.7.3.5", "PKIX.IPsecEndSystem"}, 190| 1| {"1.3.6.1.5.5.7.3.6", "PKIX.IPsecTunnel"}, 191| 1| {"1.3.6.1.5.5.7.3.7", "PKIX.IPsecUser"}, 192| 1| {"1.3.6.1.5.5.7.3.8", "PKIX.TimeStamping"}, 193| 1| {"1.3.6.1.5.5.7.3.9", "PKIX.OCSPSigning"}, 194| 1| {"1.3.6.1.5.5.7.48.1", "PKIX.OCSP"}, 195| 1| {"1.3.6.1.5.5.7.48.1.1", "PKIX.OCSP.BasicResponse"}, 196| 1| {"1.3.6.1.5.5.7.48.1.5", "PKIX.OCSP.NoCheck"}, 197| 1| {"1.3.6.1.5.5.7.48.2", "PKIX.CertificateAuthorityIssuers"}, 198| 1| {"1.3.6.1.5.5.7.8.5", "PKIX.XMPPAddr"}, 199| 1| {"2.16.840.1.101.3.4.1.2", "AES-128/CBC"}, 200| 1| {"2.16.840.1.101.3.4.1.22", "AES-192/CBC"}, 201| 1| {"2.16.840.1.101.3.4.1.25", "KeyWrap.AES-192"}, 202| 1| {"2.16.840.1.101.3.4.1.26", "AES-192/GCM"}, 203| 1| {"2.16.840.1.101.3.4.1.27", "AES-192/CCM"}, 204| 1| {"2.16.840.1.101.3.4.1.42", "AES-256/CBC"}, 205| 1| {"2.16.840.1.101.3.4.1.45", "KeyWrap.AES-256"}, 206| 1| {"2.16.840.1.101.3.4.1.46", "AES-256/GCM"}, 207| 1| {"2.16.840.1.101.3.4.1.47", "AES-256/CCM"}, 208| 1| {"2.16.840.1.101.3.4.1.5", "KeyWrap.AES-128"}, 209| 1| {"2.16.840.1.101.3.4.1.6", "AES-128/GCM"}, 210| 1| {"2.16.840.1.101.3.4.1.7", "AES-128/CCM"}, 211| 1| {"2.16.840.1.101.3.4.2.1", "SHA-256"}, 212| 1| {"2.16.840.1.101.3.4.2.10", "SHA-3(512)"}, 213| 1| {"2.16.840.1.101.3.4.2.11", "SHAKE-128"}, 214| 1| {"2.16.840.1.101.3.4.2.12", "SHAKE-256"}, 215| 1| {"2.16.840.1.101.3.4.2.2", "SHA-384"}, 216| 1| {"2.16.840.1.101.3.4.2.3", "SHA-512"}, 217| 1| {"2.16.840.1.101.3.4.2.4", "SHA-224"}, 218| 1| {"2.16.840.1.101.3.4.2.6", "SHA-512-256"}, 219| 1| {"2.16.840.1.101.3.4.2.7", "SHA-3(224)"}, 220| 1| {"2.16.840.1.101.3.4.2.8", "SHA-3(256)"}, 221| 1| {"2.16.840.1.101.3.4.2.9", "SHA-3(384)"}, 222| 1| {"2.16.840.1.101.3.4.3.1", "DSA/SHA-224"}, 223| 1| {"2.16.840.1.101.3.4.3.10", "ECDSA/SHA-3(256)"}, 224| 1| {"2.16.840.1.101.3.4.3.11", "ECDSA/SHA-3(384)"}, 225| 1| {"2.16.840.1.101.3.4.3.12", "ECDSA/SHA-3(512)"}, 226| 1| {"2.16.840.1.101.3.4.3.13", "RSA/EMSA3(SHA-3(224))"}, 227| 1| {"2.16.840.1.101.3.4.3.14", "RSA/EMSA3(SHA-3(256))"}, 228| 1| {"2.16.840.1.101.3.4.3.15", "RSA/EMSA3(SHA-3(384))"}, 229| 1| {"2.16.840.1.101.3.4.3.16", "RSA/EMSA3(SHA-3(512))"}, 230| 1| {"2.16.840.1.101.3.4.3.2", "DSA/SHA-256"}, 231| 1| {"2.16.840.1.101.3.4.3.3", "DSA/SHA-384"}, 232| 1| {"2.16.840.1.101.3.4.3.4", "DSA/SHA-512"}, 233| 1| {"2.16.840.1.101.3.4.3.5", "DSA/SHA-3(224)"}, 234| 1| {"2.16.840.1.101.3.4.3.6", "DSA/SHA-3(256)"}, 235| 1| {"2.16.840.1.101.3.4.3.7", "DSA/SHA-3(384)"}, 236| 1| {"2.16.840.1.101.3.4.3.8", "DSA/SHA-3(512)"}, 237| 1| {"2.16.840.1.101.3.4.3.9", "ECDSA/SHA-3(224)"}, 238| 1| {"2.16.840.1.113730.1.13", "Certificate Comment"}, 239| 1| {"2.5.29.14", "X509v3.SubjectKeyIdentifier"}, 240| 1| {"2.5.29.15", "X509v3.KeyUsage"}, 241| 1| {"2.5.29.16", "X509v3.PrivateKeyUsagePeriod"}, 242| 1| {"2.5.29.17", "X509v3.SubjectAlternativeName"}, 243| 1| {"2.5.29.18", "X509v3.IssuerAlternativeName"}, 244| 1| {"2.5.29.19", "X509v3.BasicConstraints"}, 245| 1| {"2.5.29.20", "X509v3.CRLNumber"}, 246| 1| {"2.5.29.21", "X509v3.ReasonCode"}, 247| 1| {"2.5.29.23", "X509v3.HoldInstructionCode"}, 248| 1| {"2.5.29.24", "X509v3.InvalidityDate"}, 249| 1| {"2.5.29.28", "X509v3.CRLIssuingDistributionPoint"}, 250| 1| {"2.5.29.30", "X509v3.NameConstraints"}, 251| 1| {"2.5.29.31", "X509v3.CRLDistributionPoints"}, 252| 1| {"2.5.29.32", "X509v3.CertificatePolicies"}, 253| 1| {"2.5.29.32.0", "X509v3.AnyPolicy"}, 254| 1| {"2.5.29.35", "X509v3.AuthorityKeyIdentifier"}, 255| 1| {"2.5.29.36", "X509v3.PolicyConstraints"}, 256| 1| {"2.5.29.37", "X509v3.ExtendedKeyUsage"}, 257| 1| {"2.5.4.10", "X520.Organization"}, 258| 1| {"2.5.4.11", "X520.OrganizationalUnit"}, 259| 1| {"2.5.4.12", "X520.Title"}, 260| 1| {"2.5.4.3", "X520.CommonName"}, 261| 1| {"2.5.4.4", "X520.Surname"}, 262| 1| {"2.5.4.42", "X520.GivenName"}, 263| 1| {"2.5.4.43", "X520.Initials"}, 264| 1| {"2.5.4.44", "X520.GenerationalQualifier"}, 265| 1| {"2.5.4.46", "X520.DNQualifier"}, 266| 1| {"2.5.4.5", "X520.SerialNumber"}, 267| 1| {"2.5.4.6", "X520.Country"}, 268| 1| {"2.5.4.65", "X520.Pseudonym"}, 269| 1| {"2.5.4.7", "X520.Locality"}, 270| 1| {"2.5.4.8", "X520.State"}, 271| 1| {"2.5.4.9", "X520.StreetAddress"}, 272| 1| {"2.5.8.1.1", "RSA"}}; 273| 1|} _ZN5Botan7OID_Map16load_str2oid_mapEv: 275| 1|std::unordered_map OID_Map::load_str2oid_map() { 276| 1| return std::unordered_map{ 277| | 278| 1| {"AES-128/CBC", OID({2, 16, 840, 1, 101, 3, 4, 1, 2})}, 279| 1| {"AES-128/CCM", OID({2, 16, 840, 1, 101, 3, 4, 1, 7})}, 280| 1| {"AES-128/GCM", OID({2, 16, 840, 1, 101, 3, 4, 1, 6})}, 281| 1| {"AES-128/OCB", OID({1, 3, 6, 1, 4, 1, 25258, 3, 2, 1})}, 282| 1| {"AES-128/SIV", OID({1, 3, 6, 1, 4, 1, 25258, 3, 4, 1})}, 283| 1| {"AES-192/CBC", OID({2, 16, 840, 1, 101, 3, 4, 1, 22})}, 284| 1| {"AES-192/CCM", OID({2, 16, 840, 1, 101, 3, 4, 1, 27})}, 285| 1| {"AES-192/GCM", OID({2, 16, 840, 1, 101, 3, 4, 1, 26})}, 286| 1| {"AES-192/OCB", OID({1, 3, 6, 1, 4, 1, 25258, 3, 2, 2})}, 287| 1| {"AES-192/SIV", OID({1, 3, 6, 1, 4, 1, 25258, 3, 4, 2})}, 288| 1| {"AES-256/CBC", OID({2, 16, 840, 1, 101, 3, 4, 1, 42})}, 289| 1| {"AES-256/CCM", OID({2, 16, 840, 1, 101, 3, 4, 1, 47})}, 290| 1| {"AES-256/GCM", OID({2, 16, 840, 1, 101, 3, 4, 1, 46})}, 291| 1| {"AES-256/OCB", OID({1, 3, 6, 1, 4, 1, 25258, 3, 2, 3})}, 292| 1| {"AES-256/SIV", OID({1, 3, 6, 1, 4, 1, 25258, 3, 4, 3})}, 293| 1| {"CAST-128/CBC", OID({1, 2, 840, 113533, 7, 66, 10})}, 294| 1| {"Camellia-128/CBC", OID({1, 2, 392, 200011, 61, 1, 1, 1, 2})}, 295| 1| {"Camellia-128/GCM", OID({0, 3, 4401, 5, 3, 1, 9, 6})}, 296| 1| {"Camellia-128/OCB", OID({1, 3, 6, 1, 4, 1, 25258, 3, 2, 6})}, 297| 1| {"Camellia-128/SIV", OID({1, 3, 6, 1, 4, 1, 25258, 3, 4, 6})}, 298| 1| {"Camellia-192/CBC", OID({1, 2, 392, 200011, 61, 1, 1, 1, 3})}, 299| 1| {"Camellia-192/GCM", OID({0, 3, 4401, 5, 3, 1, 9, 26})}, 300| 1| {"Camellia-192/OCB", OID({1, 3, 6, 1, 4, 1, 25258, 3, 2, 7})}, 301| 1| {"Camellia-192/SIV", OID({1, 3, 6, 1, 4, 1, 25258, 3, 4, 7})}, 302| 1| {"Camellia-256/CBC", OID({1, 2, 392, 200011, 61, 1, 1, 1, 4})}, 303| 1| {"Camellia-256/GCM", OID({0, 3, 4401, 5, 3, 1, 9, 46})}, 304| 1| {"Camellia-256/OCB", OID({1, 3, 6, 1, 4, 1, 25258, 3, 2, 8})}, 305| 1| {"Camellia-256/SIV", OID({1, 3, 6, 1, 4, 1, 25258, 3, 4, 8})}, 306| 1| {"Certificate Comment", OID({2, 16, 840, 1, 113730, 1, 13})}, 307| 1| {"ChaCha20Poly1305", OID({1, 2, 840, 113549, 1, 9, 16, 3, 18})}, 308| 1| {"Compression.Zlib", OID({1, 2, 840, 113549, 1, 9, 16, 3, 8})}, 309| 1| {"Curve25519", OID({1, 3, 101, 110})}, 310| 1| {"DES/CBC", OID({1, 3, 14, 3, 2, 7})}, 311| 1| {"DH", OID({1, 2, 840, 10046, 2, 1})}, 312| 1| {"DSA", OID({1, 2, 840, 10040, 4, 1})}, 313| 1| {"DSA/SHA-1", OID({1, 2, 840, 10040, 4, 3})}, 314| 1| {"DSA/SHA-224", OID({2, 16, 840, 1, 101, 3, 4, 3, 1})}, 315| 1| {"DSA/SHA-256", OID({2, 16, 840, 1, 101, 3, 4, 3, 2})}, 316| 1| {"DSA/SHA-3(224)", OID({2, 16, 840, 1, 101, 3, 4, 3, 5})}, 317| 1| {"DSA/SHA-3(256)", OID({2, 16, 840, 1, 101, 3, 4, 3, 6})}, 318| 1| {"DSA/SHA-3(384)", OID({2, 16, 840, 1, 101, 3, 4, 3, 7})}, 319| 1| {"DSA/SHA-3(512)", OID({2, 16, 840, 1, 101, 3, 4, 3, 8})}, 320| 1| {"DSA/SHA-384", OID({2, 16, 840, 1, 101, 3, 4, 3, 3})}, 321| 1| {"DSA/SHA-512", OID({2, 16, 840, 1, 101, 3, 4, 3, 4})}, 322| 1| {"Dilithium-4x4-AES-r3", OID({1, 3, 6, 1, 4, 1, 25258, 1, 10, 1})}, 323| 1| {"Dilithium-4x4-r3", OID({1, 3, 6, 1, 4, 1, 25258, 1, 9, 1})}, 324| 1| {"Dilithium-6x5-AES-r3", OID({1, 3, 6, 1, 4, 1, 25258, 1, 10, 2})}, 325| 1| {"Dilithium-6x5-r3", OID({1, 3, 6, 1, 4, 1, 25258, 1, 9, 2})}, 326| 1| {"Dilithium-8x7-AES-r3", OID({1, 3, 6, 1, 4, 1, 25258, 1, 10, 3})}, 327| 1| {"Dilithium-8x7-r3", OID({1, 3, 6, 1, 4, 1, 25258, 1, 9, 3})}, 328| 1| {"ECDH", OID({1, 3, 132, 1, 12})}, 329| 1| {"ECDSA", OID({1, 2, 840, 10045, 2, 1})}, 330| 1| {"ECDSA/SHA-1", OID({1, 2, 840, 10045, 4, 1})}, 331| 1| {"ECDSA/SHA-224", OID({1, 2, 840, 10045, 4, 3, 1})}, 332| 1| {"ECDSA/SHA-256", OID({1, 2, 840, 10045, 4, 3, 2})}, 333| 1| {"ECDSA/SHA-3(224)", OID({2, 16, 840, 1, 101, 3, 4, 3, 9})}, 334| 1| {"ECDSA/SHA-3(256)", OID({2, 16, 840, 1, 101, 3, 4, 3, 10})}, 335| 1| {"ECDSA/SHA-3(384)", OID({2, 16, 840, 1, 101, 3, 4, 3, 11})}, 336| 1| {"ECDSA/SHA-3(512)", OID({2, 16, 840, 1, 101, 3, 4, 3, 12})}, 337| 1| {"ECDSA/SHA-384", OID({1, 2, 840, 10045, 4, 3, 3})}, 338| 1| {"ECDSA/SHA-512", OID({1, 2, 840, 10045, 4, 3, 4})}, 339| 1| {"ECGDSA", OID({1, 3, 36, 3, 3, 2, 5, 2, 1})}, 340| 1| {"ECGDSA/RIPEMD-160", OID({1, 3, 36, 3, 3, 2, 5, 4, 1})}, 341| 1| {"ECGDSA/SHA-1", OID({1, 3, 36, 3, 3, 2, 5, 4, 2})}, 342| 1| {"ECGDSA/SHA-224", OID({1, 3, 36, 3, 3, 2, 5, 4, 3})}, 343| 1| {"ECGDSA/SHA-256", OID({1, 3, 36, 3, 3, 2, 5, 4, 4})}, 344| 1| {"ECGDSA/SHA-384", OID({1, 3, 36, 3, 3, 2, 5, 4, 5})}, 345| 1| {"ECGDSA/SHA-512", OID({1, 3, 36, 3, 3, 2, 5, 4, 6})}, 346| 1| {"ECKCDSA", OID({1, 0, 14888, 3, 0, 5})}, 347| 1| {"ECKCDSA/SHA-1", OID({1, 2, 410, 200004, 1, 100, 4, 3})}, 348| 1| {"ECKCDSA/SHA-224", OID({1, 2, 410, 200004, 1, 100, 4, 4})}, 349| 1| {"ECKCDSA/SHA-256", OID({1, 2, 410, 200004, 1, 100, 4, 5})}, 350| 1| {"Ed25519", OID({1, 3, 101, 112})}, 351| 1| {"ElGamal", OID({1, 3, 6, 1, 4, 1, 3029, 1, 2, 1})}, 352| 1| {"GOST-34.10", OID({1, 2, 643, 2, 2, 19})}, 353| 1| {"GOST-34.10-2012-256", OID({1, 2, 643, 7, 1, 1, 1, 1})}, 354| 1| {"GOST-34.10-2012-256/SHA-256", OID({1, 3, 6, 1, 4, 1, 25258, 1, 6, 1})}, 355| 1| {"GOST-34.10-2012-256/Streebog-256", OID({1, 2, 643, 7, 1, 1, 3, 2})}, 356| 1| {"GOST-34.10-2012-512", OID({1, 2, 643, 7, 1, 1, 1, 2})}, 357| 1| {"GOST-34.10-2012-512/Streebog-512", OID({1, 2, 643, 7, 1, 1, 3, 3})}, 358| 1| {"GOST-34.10/GOST-R-34.11-94", OID({1, 2, 643, 2, 2, 3})}, 359| 1| {"GOST.INN", OID({1, 2, 643, 3, 131, 1, 1})}, 360| 1| {"GOST.IssuerSigningTool", OID({1, 2, 643, 100, 112})}, 361| 1| {"GOST.OGRN", OID({1, 2, 643, 100, 1})}, 362| 1| {"GOST.SubjectSigningTool", OID({1, 2, 643, 100, 111})}, 363| 1| {"HMAC(SHA-1)", OID({1, 2, 840, 113549, 2, 7})}, 364| 1| {"HMAC(SHA-224)", OID({1, 2, 840, 113549, 2, 8})}, 365| 1| {"HMAC(SHA-256)", OID({1, 2, 840, 113549, 2, 9})}, 366| 1| {"HMAC(SHA-384)", OID({1, 2, 840, 113549, 2, 10})}, 367| 1| {"HMAC(SHA-512)", OID({1, 2, 840, 113549, 2, 11})}, 368| 1| {"HMAC(SHA-512-256)", OID({1, 2, 840, 113549, 2, 13})}, 369| 1| {"KeyWrap.AES-128", OID({2, 16, 840, 1, 101, 3, 4, 1, 5})}, 370| 1| {"KeyWrap.AES-192", OID({2, 16, 840, 1, 101, 3, 4, 1, 25})}, 371| 1| {"KeyWrap.AES-256", OID({2, 16, 840, 1, 101, 3, 4, 1, 45})}, 372| 1| {"KeyWrap.CAST-128", OID({1, 2, 840, 113533, 7, 66, 15})}, 373| 1| {"KeyWrap.TripleDES", OID({1, 2, 840, 113549, 1, 9, 16, 3, 6})}, 374| 1| {"Kyber-1024-90s-r3", OID({1, 3, 6, 1, 4, 1, 25258, 1, 11, 3})}, 375| 1| {"Kyber-1024-r3", OID({1, 3, 6, 1, 4, 1, 25258, 1, 7, 3})}, 376| 1| {"Kyber-512-90s-r3", OID({1, 3, 6, 1, 4, 1, 25258, 1, 11, 1})}, 377| 1| {"Kyber-512-r3", OID({1, 3, 6, 1, 4, 1, 25258, 1, 7, 1})}, 378| 1| {"Kyber-768-90s-r3", OID({1, 3, 6, 1, 4, 1, 25258, 1, 11, 2})}, 379| 1| {"Kyber-768-r3", OID({1, 3, 6, 1, 4, 1, 25258, 1, 7, 2})}, 380| 1| {"MD5", OID({1, 2, 840, 113549, 2, 5})}, 381| 1| {"MGF1", OID({1, 2, 840, 113549, 1, 1, 8})}, 382| 1| {"McEliece", OID({1, 3, 6, 1, 4, 1, 25258, 1, 3})}, 383| 1| {"Microsoft SmartcardLogon", OID({1, 3, 6, 1, 4, 1, 311, 20, 2, 2})}, 384| 1| {"Microsoft UPN", OID({1, 3, 6, 1, 4, 1, 311, 20, 2, 3})}, 385| 1| {"OpenPGP.Curve25519", OID({1, 3, 6, 1, 4, 1, 3029, 1, 5, 1})}, 386| 1| {"OpenPGP.Ed25519", OID({1, 3, 6, 1, 4, 1, 11591, 15, 1})}, 387| 1| {"PBE-PKCS5v20", OID({1, 2, 840, 113549, 1, 5, 13})}, 388| 1| {"PBES2", OID({1, 2, 840, 113549, 1, 5, 13})}, 389| 1| {"PKCS5.PBKDF2", OID({1, 2, 840, 113549, 1, 5, 12})}, 390| 1| {"PKCS9.ChallengePassword", OID({1, 2, 840, 113549, 1, 9, 7})}, 391| 1| {"PKCS9.ContentType", OID({1, 2, 840, 113549, 1, 9, 3})}, 392| 1| {"PKCS9.EmailAddress", OID({1, 2, 840, 113549, 1, 9, 1})}, 393| 1| {"PKCS9.ExtensionRequest", OID({1, 2, 840, 113549, 1, 9, 14})}, 394| 1| {"PKCS9.MessageDigest", OID({1, 2, 840, 113549, 1, 9, 4})}, 395| 1| {"PKCS9.UnstructuredName", OID({1, 2, 840, 113549, 1, 9, 2})}, 396| 1| {"PKIX.AuthorityInformationAccess", OID({1, 3, 6, 1, 5, 5, 7, 1, 1})}, 397| 1| {"PKIX.CertificateAuthorityIssuers", OID({1, 3, 6, 1, 5, 5, 7, 48, 2})}, 398| 1| {"PKIX.ClientAuth", OID({1, 3, 6, 1, 5, 5, 7, 3, 2})}, 399| 1| {"PKIX.CodeSigning", OID({1, 3, 6, 1, 5, 5, 7, 3, 3})}, 400| 1| {"PKIX.EmailProtection", OID({1, 3, 6, 1, 5, 5, 7, 3, 4})}, 401| 1| {"PKIX.IPsecEndSystem", OID({1, 3, 6, 1, 5, 5, 7, 3, 5})}, 402| 1| {"PKIX.IPsecTunnel", OID({1, 3, 6, 1, 5, 5, 7, 3, 6})}, 403| 1| {"PKIX.IPsecUser", OID({1, 3, 6, 1, 5, 5, 7, 3, 7})}, 404| 1| {"PKIX.OCSP", OID({1, 3, 6, 1, 5, 5, 7, 48, 1})}, 405| 1| {"PKIX.OCSP.BasicResponse", OID({1, 3, 6, 1, 5, 5, 7, 48, 1, 1})}, 406| 1| {"PKIX.OCSP.NoCheck", OID({1, 3, 6, 1, 5, 5, 7, 48, 1, 5})}, 407| 1| {"PKIX.OCSPSigning", OID({1, 3, 6, 1, 5, 5, 7, 3, 9})}, 408| 1| {"PKIX.ServerAuth", OID({1, 3, 6, 1, 5, 5, 7, 3, 1})}, 409| 1| {"PKIX.TimeStamping", OID({1, 3, 6, 1, 5, 5, 7, 3, 8})}, 410| 1| {"PKIX.XMPPAddr", OID({1, 3, 6, 1, 5, 5, 7, 8, 5})}, 411| 1| {"RIPEMD-160", OID({1, 3, 36, 3, 2, 1})}, 412| 1| {"RSA", OID({1, 2, 840, 113549, 1, 1, 1})}, 413| 1| {"RSA/EMSA3(MD5)", OID({1, 2, 840, 113549, 1, 1, 4})}, 414| 1| {"RSA/EMSA3(RIPEMD-160)", OID({1, 3, 36, 3, 3, 1, 2})}, 415| 1| {"RSA/EMSA3(SHA-1)", OID({1, 2, 840, 113549, 1, 1, 5})}, 416| 1| {"RSA/EMSA3(SHA-224)", OID({1, 2, 840, 113549, 1, 1, 14})}, 417| 1| {"RSA/EMSA3(SHA-256)", OID({1, 2, 840, 113549, 1, 1, 11})}, 418| 1| {"RSA/EMSA3(SHA-3(224))", OID({2, 16, 840, 1, 101, 3, 4, 3, 13})}, 419| 1| {"RSA/EMSA3(SHA-3(256))", OID({2, 16, 840, 1, 101, 3, 4, 3, 14})}, 420| 1| {"RSA/EMSA3(SHA-3(384))", OID({2, 16, 840, 1, 101, 3, 4, 3, 15})}, 421| 1| {"RSA/EMSA3(SHA-3(512))", OID({2, 16, 840, 1, 101, 3, 4, 3, 16})}, 422| 1| {"RSA/EMSA3(SHA-384)", OID({1, 2, 840, 113549, 1, 1, 12})}, 423| 1| {"RSA/EMSA3(SHA-512)", OID({1, 2, 840, 113549, 1, 1, 13})}, 424| 1| {"RSA/EMSA3(SHA-512-256)", OID({1, 2, 840, 113549, 1, 1, 16})}, 425| 1| {"RSA/EMSA3(SM3)", OID({1, 2, 156, 10197, 1, 504})}, 426| 1| {"RSA/EMSA4", OID({1, 2, 840, 113549, 1, 1, 10})}, 427| 1| {"RSA/OAEP", OID({1, 2, 840, 113549, 1, 1, 7})}, 428| 1| {"SEED/CBC", OID({1, 2, 410, 200004, 1, 4})}, 429| 1| {"SHA-1", OID({1, 3, 14, 3, 2, 26})}, 430| 1| {"SHA-224", OID({2, 16, 840, 1, 101, 3, 4, 2, 4})}, 431| 1| {"SHA-256", OID({2, 16, 840, 1, 101, 3, 4, 2, 1})}, 432| 1| {"SHA-3(224)", OID({2, 16, 840, 1, 101, 3, 4, 2, 7})}, 433| 1| {"SHA-3(256)", OID({2, 16, 840, 1, 101, 3, 4, 2, 8})}, 434| 1| {"SHA-3(384)", OID({2, 16, 840, 1, 101, 3, 4, 2, 9})}, 435| 1| {"SHA-3(512)", OID({2, 16, 840, 1, 101, 3, 4, 2, 10})}, 436| 1| {"SHA-384", OID({2, 16, 840, 1, 101, 3, 4, 2, 2})}, 437| 1| {"SHA-512", OID({2, 16, 840, 1, 101, 3, 4, 2, 3})}, 438| 1| {"SHA-512-256", OID({2, 16, 840, 1, 101, 3, 4, 2, 6})}, 439| 1| {"SHAKE-128", OID({2, 16, 840, 1, 101, 3, 4, 2, 11})}, 440| 1| {"SHAKE-256", OID({2, 16, 840, 1, 101, 3, 4, 2, 12})}, 441| 1| {"SM2", OID({1, 2, 156, 10197, 1, 301, 1})}, 442| 1| {"SM2_Enc", OID({1, 2, 156, 10197, 1, 301, 3})}, 443| 1| {"SM2_Kex", OID({1, 2, 156, 10197, 1, 301, 2})}, 444| 1| {"SM2_Sig", OID({1, 2, 156, 10197, 1, 301, 1})}, 445| 1| {"SM2_Sig/SM3", OID({1, 2, 156, 10197, 1, 501})}, 446| 1| {"SM3", OID({1, 2, 156, 10197, 1, 401})}, 447| 1| {"SM4/CBC", OID({1, 2, 156, 10197, 1, 104, 2})}, 448| 1| {"SM4/GCM", OID({1, 2, 156, 10197, 1, 104, 8})}, 449| 1| {"SM4/OCB", OID({1, 2, 156, 10197, 1, 104, 100})}, 450| 1| {"SM4/SIV", OID({1, 3, 6, 1, 4, 1, 25258, 3, 4, 9})}, 451| 1| {"Scrypt", OID({1, 3, 6, 1, 4, 1, 11591, 4, 11})}, 452| 1| {"Serpent/CBC", OID({1, 3, 6, 1, 4, 1, 25258, 3, 1})}, 453| 1| {"Serpent/GCM", OID({1, 3, 6, 1, 4, 1, 25258, 3, 101})}, 454| 1| {"Serpent/OCB", OID({1, 3, 6, 1, 4, 1, 25258, 3, 2, 4})}, 455| 1| {"Serpent/SIV", OID({1, 3, 6, 1, 4, 1, 25258, 3, 4, 4})}, 456| 1| {"Streebog-256", OID({1, 2, 643, 7, 1, 1, 2, 2})}, 457| 1| {"Streebog-512", OID({1, 2, 643, 7, 1, 1, 2, 3})}, 458| 1| {"Threefish-512/CBC", OID({1, 3, 6, 1, 4, 1, 25258, 3, 2})}, 459| 1| {"TripleDES/CBC", OID({1, 2, 840, 113549, 3, 7})}, 460| 1| {"Twofish/CBC", OID({1, 3, 6, 1, 4, 1, 25258, 3, 3})}, 461| 1| {"Twofish/GCM", OID({1, 3, 6, 1, 4, 1, 25258, 3, 102})}, 462| 1| {"Twofish/OCB", OID({1, 3, 6, 1, 4, 1, 25258, 3, 2, 5})}, 463| 1| {"Twofish/SIV", OID({1, 3, 6, 1, 4, 1, 25258, 3, 4, 5})}, 464| 1| {"X509v3.AnyPolicy", OID({2, 5, 29, 32, 0})}, 465| 1| {"X509v3.AuthorityKeyIdentifier", OID({2, 5, 29, 35})}, 466| 1| {"X509v3.BasicConstraints", OID({2, 5, 29, 19})}, 467| 1| {"X509v3.CRLDistributionPoints", OID({2, 5, 29, 31})}, 468| 1| {"X509v3.CRLIssuingDistributionPoint", OID({2, 5, 29, 28})}, 469| 1| {"X509v3.CRLNumber", OID({2, 5, 29, 20})}, 470| 1| {"X509v3.CertificatePolicies", OID({2, 5, 29, 32})}, 471| 1| {"X509v3.ExtendedKeyUsage", OID({2, 5, 29, 37})}, 472| 1| {"X509v3.HoldInstructionCode", OID({2, 5, 29, 23})}, 473| 1| {"X509v3.InvalidityDate", OID({2, 5, 29, 24})}, 474| 1| {"X509v3.IssuerAlternativeName", OID({2, 5, 29, 18})}, 475| 1| {"X509v3.KeyUsage", OID({2, 5, 29, 15})}, 476| 1| {"X509v3.NameConstraints", OID({2, 5, 29, 30})}, 477| 1| {"X509v3.PolicyConstraints", OID({2, 5, 29, 36})}, 478| 1| {"X509v3.PrivateKeyUsagePeriod", OID({2, 5, 29, 16})}, 479| 1| {"X509v3.ReasonCode", OID({2, 5, 29, 21})}, 480| 1| {"X509v3.SubjectAlternativeName", OID({2, 5, 29, 17})}, 481| 1| {"X509v3.SubjectKeyIdentifier", OID({2, 5, 29, 14})}, 482| 1| {"X520.CommonName", OID({2, 5, 4, 3})}, 483| 1| {"X520.Country", OID({2, 5, 4, 6})}, 484| 1| {"X520.DNQualifier", OID({2, 5, 4, 46})}, 485| 1| {"X520.GenerationalQualifier", OID({2, 5, 4, 44})}, 486| 1| {"X520.GivenName", OID({2, 5, 4, 42})}, 487| 1| {"X520.Initials", OID({2, 5, 4, 43})}, 488| 1| {"X520.Locality", OID({2, 5, 4, 7})}, 489| 1| {"X520.Organization", OID({2, 5, 4, 10})}, 490| 1| {"X520.OrganizationalUnit", OID({2, 5, 4, 11})}, 491| 1| {"X520.Pseudonym", OID({2, 5, 4, 65})}, 492| 1| {"X520.SerialNumber", OID({2, 5, 4, 5})}, 493| 1| {"X520.State", OID({2, 5, 4, 8})}, 494| 1| {"X520.StreetAddress", OID({2, 5, 4, 9})}, 495| 1| {"X520.Surname", OID({2, 5, 4, 4})}, 496| 1| {"X520.Title", OID({2, 5, 4, 12})}, 497| 1| {"XMSS", OID({0, 4, 0, 127, 0, 15, 1, 1, 13, 0})}, 498| 1| {"XMSS-draft12", OID({1, 3, 6, 1, 4, 1, 25258, 1, 8})}, 499| 1| {"XMSS-draft6", OID({1, 3, 6, 1, 4, 1, 25258, 1, 5})}, 500| 1| {"brainpool160r1", OID({1, 3, 36, 3, 3, 2, 8, 1, 1, 1})}, 501| 1| {"brainpool192r1", OID({1, 3, 36, 3, 3, 2, 8, 1, 1, 3})}, 502| 1| {"brainpool224r1", OID({1, 3, 36, 3, 3, 2, 8, 1, 1, 5})}, 503| 1| {"brainpool256r1", OID({1, 3, 36, 3, 3, 2, 8, 1, 1, 7})}, 504| 1| {"brainpool320r1", OID({1, 3, 36, 3, 3, 2, 8, 1, 1, 9})}, 505| 1| {"brainpool384r1", OID({1, 3, 36, 3, 3, 2, 8, 1, 1, 11})}, 506| 1| {"brainpool512r1", OID({1, 3, 36, 3, 3, 2, 8, 1, 1, 13})}, 507| 1| {"frp256v1", OID({1, 2, 250, 1, 223, 101, 256, 1})}, 508| 1| {"gost_256A", OID({1, 2, 643, 7, 1, 2, 1, 1, 1})}, 509| 1| {"gost_256B", OID({1, 2, 643, 7, 1, 2, 1, 1, 2})}, 510| 1| {"gost_512A", OID({1, 2, 643, 7, 1, 2, 1, 2, 1})}, 511| 1| {"gost_512B", OID({1, 2, 643, 7, 1, 2, 1, 2, 2})}, 512| 1| {"secp160k1", OID({1, 3, 132, 0, 9})}, 513| 1| {"secp160r1", OID({1, 3, 132, 0, 8})}, 514| 1| {"secp160r2", OID({1, 3, 132, 0, 30})}, 515| 1| {"secp192k1", OID({1, 3, 132, 0, 31})}, 516| 1| {"secp192r1", OID({1, 2, 840, 10045, 3, 1, 1})}, 517| 1| {"secp224k1", OID({1, 3, 132, 0, 32})}, 518| 1| {"secp224r1", OID({1, 3, 132, 0, 33})}, 519| 1| {"secp256k1", OID({1, 3, 132, 0, 10})}, 520| 1| {"secp256r1", OID({1, 2, 840, 10045, 3, 1, 7})}, 521| 1| {"secp384r1", OID({1, 3, 132, 0, 34})}, 522| 1| {"secp521r1", OID({1, 3, 132, 0, 35})}, 523| 1| {"sm2p256v1", OID({1, 2, 156, 10197, 1, 301})}, 524| 1| {"x962_p192v2", OID({1, 2, 840, 10045, 3, 1, 2})}, 525| 1| {"x962_p192v3", OID({1, 2, 840, 10045, 3, 1, 3})}, 526| 1| {"x962_p239v1", OID({1, 2, 840, 10045, 3, 1, 4})}, 527| 1| {"x962_p239v2", OID({1, 2, 840, 10045, 3, 1, 5})}, 528| 1| {"x962_p239v3", OID({1, 2, 840, 10045, 3, 1, 6})}}; 529| 1|} _ZN5Botan13base64_decodeEPKcmb: 174| 95|secure_vector base64_decode(const char input[], size_t input_length, bool ignore_ws) { 175| 95| return base_decode_to_vec>(Base64(), input, input_length, ignore_ws); 176| 95|} base64.cpp:_ZN5Botan12_GLOBAL__N_16Base6417decode_max_outputEm: 41| 190| static inline size_t decode_max_output(size_t input_length) { 42| 190| return (round_up(input_length, m_encoding_bytes_out) * m_encoding_bytes_in) / m_encoding_bytes_out; 43| 190| } base64.cpp:_ZN5Botan12_GLOBAL__N_16Base6417decoding_bytes_inEv: 29| 95| static inline size_t decoding_bytes_in() noexcept { return m_encoding_bytes_out; } base64.cpp:_ZN5Botan12_GLOBAL__N_16Base6418decoding_bytes_outEv: 31| 95| static inline size_t decoding_bytes_out() noexcept { return m_encoding_bytes_in; } base64.cpp:_ZN5Botan12_GLOBAL__N_16Base6419lookup_binary_valueEc: 103| 25.6k|uint8_t Base64::lookup_binary_value(char input) noexcept { 104| 25.6k| const uint8_t c = static_cast(input); 105| | 106| 25.6k| const auto is_alpha_upper = CT::Mask::is_within_range(c, uint8_t('A'), uint8_t('Z')); 107| 25.6k| const auto is_alpha_lower = CT::Mask::is_within_range(c, uint8_t('a'), uint8_t('z')); 108| 25.6k| const auto is_decimal = CT::Mask::is_within_range(c, uint8_t('0'), uint8_t('9')); 109| | 110| 25.6k| const auto is_plus = CT::Mask::is_equal(c, uint8_t('+')); 111| 25.6k| const auto is_slash = CT::Mask::is_equal(c, uint8_t('/')); 112| 25.6k| const auto is_equal = CT::Mask::is_equal(c, uint8_t('=')); 113| | 114| 25.6k| const auto is_whitespace = 115| 25.6k| CT::Mask::is_any_of(c, {uint8_t(' '), uint8_t('\t'), uint8_t('\n'), uint8_t('\r')}); 116| | 117| 25.6k| const uint8_t c_upper = c - uint8_t('A'); 118| 25.6k| const uint8_t c_lower = c - uint8_t('a') + 26; 119| 25.6k| const uint8_t c_decim = c - uint8_t('0') + 2 * 26; 120| | 121| 25.6k| uint8_t ret = 0xFF; // default value 122| | 123| 25.6k| ret = is_alpha_upper.select(c_upper, ret); 124| 25.6k| ret = is_alpha_lower.select(c_lower, ret); 125| 25.6k| ret = is_decimal.select(c_decim, ret); 126| 25.6k| ret = is_plus.select(62, ret); 127| 25.6k| ret = is_slash.select(63, ret); 128| 25.6k| ret = is_equal.select(0x81, ret); 129| 25.6k| ret = is_whitespace.select(0x80, ret); 130| | 131| 25.6k| return ret; 132| 25.6k|} base64.cpp:_ZN5Botan12_GLOBAL__N_16Base6414check_bad_charEhcb: 135| 25.3k|bool Base64::check_bad_char(uint8_t bin, char input, bool ignore_ws) { 136| 25.3k| if(bin <= 0x3F) { ------------------ | Branch (136:7): [True: 3.89k, False: 21.4k] ------------------ 137| 3.89k| return true; 138| 21.4k| } else if(!(bin == 0x81 || (bin == 0x80 && ignore_ws))) { ------------------ | Branch (138:16): [True: 1.32k, False: 20.1k] | Branch (138:32): [True: 20.0k, False: 36] | Branch (138:47): [True: 20.0k, False: 0] ------------------ 139| 36| throw Invalid_Argument(fmt("base64_decode: invalid character '{}'", format_char_for_display(input))); 140| 36| } 141| 21.4k| return false; 142| 25.3k|} base64.cpp:_ZN5Botan12_GLOBAL__N_16Base646decodeEPhPKh: 51| 980| static void decode(uint8_t* out_ptr, const uint8_t decode_buf[4]) { 52| 980| out_ptr[0] = (decode_buf[0] << 2) | (decode_buf[1] >> 4); 53| 980| out_ptr[1] = (decode_buf[1] << 4) | (decode_buf[2] >> 2); 54| 980| out_ptr[2] = (decode_buf[2] << 6) | decode_buf[3]; 55| 980| } base64.cpp:_ZN5Botan12_GLOBAL__N_16Base6415bytes_to_removeEm: 57| 59| static inline size_t bytes_to_remove(size_t final_truncate) { return final_truncate; } base64.cpp:_ZN5Botan12_GLOBAL__N_16Base644nameEv: 23| 16| static inline std::string name() noexcept { return "base64"; } _ZN5Botan10hex_encodeEPcPKhmb: 33| 4.37k|void hex_encode(char output[], const uint8_t input[], size_t input_length, bool uppercase) { 34| 118k| for(size_t i = 0; i != input_length; ++i) { ------------------ | Branch (34:22): [True: 113k, False: 4.37k] ------------------ 35| 113k| const uint8_t n0 = (input[i] >> 4) & 0xF; 36| 113k| const uint8_t n1 = (input[i]) & 0xF; 37| | 38| 113k| output[2 * i] = hex_encode_nibble(n0, uppercase); 39| 113k| output[2 * i + 1] = hex_encode_nibble(n1, uppercase); 40| 113k| } 41| 4.37k|} _ZN5Botan10hex_encodeEPKhmb: 43| 4.37k|std::string hex_encode(const uint8_t input[], size_t input_length, bool uppercase) { 44| 4.37k| std::string output(2 * input_length, 0); 45| | 46| 4.37k| if(input_length) { ------------------ | Branch (46:7): [True: 4.37k, False: 0] ------------------ 47| 4.37k| hex_encode(&output.front(), input, input_length, uppercase); 48| 4.37k| } 49| | 50| 4.37k| return output; 51| 4.37k|} hex.cpp:_ZN5Botan12_GLOBAL__N_117hex_encode_nibbleEhb: 20| 227k|char hex_encode_nibble(uint8_t n, bool uppercase) { 21| 227k| BOTAN_DEBUG_ASSERT(n <= 15); ------------------ | | 99| 227k| do { \ | | 100| 227k| } while(0) | | ------------------ | | | Branch (100:15): [Folded - Ignored] | | ------------------ ------------------ 22| | 23| 227k| const auto in_09 = CT::Mask::is_lt(n, 10); 24| | 25| 227k| const char c_09 = n + '0'; 26| 227k| const char c_af = n + (uppercase ? 'A' : 'a') - 10; ------------------ | Branch (26:27): [True: 227k, False: 0] ------------------ 27| | 28| 227k| return in_09.select(c_09, c_af); 29| 227k|} _ZN5Botan12HashFunction6createENSt3__117basic_string_viewIcNS1_11char_traitsIcEEEES5_: 103| 9.93k|std::unique_ptr HashFunction::create(std::string_view algo_spec, std::string_view provider) { 104| |#if defined(BOTAN_HAS_COMMONCRYPTO) 105| | if(provider.empty() || provider == "commoncrypto") { 106| | if(auto hash = make_commoncrypto_hash(algo_spec)) 107| | return hash; 108| | 109| | if(!provider.empty()) 110| | return nullptr; 111| | } 112| |#endif 113| | 114| 9.93k| if(provider.empty() == false && provider != "base") { ------------------ | Branch (114:7): [True: 0, False: 9.93k] | Branch (114:36): [True: 0, False: 0] ------------------ 115| 0| return nullptr; // unknown provider 116| 0| } 117| | 118| 9.93k|#if defined(BOTAN_HAS_SHA1) 119| 9.93k| if(algo_spec == "SHA-1") { ------------------ | Branch (119:7): [True: 4.38k, False: 5.55k] ------------------ 120| 4.38k| return std::make_unique(); 121| 4.38k| } 122| 5.55k|#endif 123| | 124| 5.55k|#if defined(BOTAN_HAS_SHA2_32) 125| 5.55k| if(algo_spec == "SHA-224") { ------------------ | Branch (125:7): [True: 112, False: 5.44k] ------------------ 126| 112| return std::make_unique(); 127| 112| } 128| | 129| 5.44k| if(algo_spec == "SHA-256") { ------------------ | Branch (129:7): [True: 4.44k, False: 998] ------------------ 130| 4.44k| return std::make_unique(); 131| 4.44k| } 132| 998|#endif 133| | 134| 998|#if defined(BOTAN_HAS_SHA2_64) 135| 998| if(algo_spec == "SHA-384") { ------------------ | Branch (135:7): [True: 55, False: 943] ------------------ 136| 55| return std::make_unique(); 137| 55| } 138| | 139| 943| if(algo_spec == "SHA-512") { ------------------ | Branch (139:7): [True: 30, False: 913] ------------------ 140| 30| return std::make_unique(); 141| 30| } 142| | 143| 913| if(algo_spec == "SHA-512-256") { ------------------ | Branch (143:7): [True: 12, False: 901] ------------------ 144| 12| return std::make_unique(); 145| 12| } 146| 901|#endif 147| | 148| 901|#if defined(BOTAN_HAS_RIPEMD_160) 149| 901| if(algo_spec == "RIPEMD-160") { ------------------ | Branch (149:7): [True: 0, False: 901] ------------------ 150| 0| return std::make_unique(); 151| 0| } 152| 901|#endif 153| | 154| 901|#if defined(BOTAN_HAS_WHIRLPOOL) 155| 901| if(algo_spec == "Whirlpool") { ------------------ | Branch (155:7): [True: 0, False: 901] ------------------ 156| 0| return std::make_unique(); 157| 0| } 158| 901|#endif 159| | 160| 901|#if defined(BOTAN_HAS_MD5) 161| 901| if(algo_spec == "MD5") { ------------------ | Branch (161:7): [True: 901, False: 0] ------------------ 162| 901| return std::make_unique(); 163| 901| } 164| 0|#endif 165| | 166| 0|#if defined(BOTAN_HAS_MD4) 167| 0| if(algo_spec == "MD4") { ------------------ | Branch (167:7): [True: 0, False: 0] ------------------ 168| 0| return std::make_unique(); 169| 0| } 170| 0|#endif 171| | 172| 0|#if defined(BOTAN_HAS_GOST_34_11) 173| 0| if(algo_spec == "GOST-R-34.11-94" || algo_spec == "GOST-34.11") { ------------------ | Branch (173:7): [True: 0, False: 0] | Branch (173:41): [True: 0, False: 0] ------------------ 174| 0| return std::make_unique(); 175| 0| } 176| 0|#endif 177| | 178| 0|#if defined(BOTAN_HAS_ADLER32) 179| 0| if(algo_spec == "Adler32") { ------------------ | Branch (179:7): [True: 0, False: 0] ------------------ 180| 0| return std::make_unique(); 181| 0| } 182| 0|#endif 183| | 184| 0|#if defined(BOTAN_HAS_CRC24) 185| 0| if(algo_spec == "CRC24") { ------------------ | Branch (185:7): [True: 0, False: 0] ------------------ 186| 0| return std::make_unique(); 187| 0| } 188| 0|#endif 189| | 190| 0|#if defined(BOTAN_HAS_CRC32) 191| 0| if(algo_spec == "CRC32") { ------------------ | Branch (191:7): [True: 0, False: 0] ------------------ 192| 0| return std::make_unique(); 193| 0| } 194| 0|#endif 195| | 196| 0|#if defined(BOTAN_HAS_STREEBOG) 197| 0| if(algo_spec == "Streebog-256") { ------------------ | Branch (197:7): [True: 0, False: 0] ------------------ 198| 0| return std::make_unique(256); 199| 0| } 200| 0| if(algo_spec == "Streebog-512") { ------------------ | Branch (200:7): [True: 0, False: 0] ------------------ 201| 0| return std::make_unique(512); 202| 0| } 203| 0|#endif 204| | 205| 0|#if defined(BOTAN_HAS_SM3) 206| 0| if(algo_spec == "SM3") { ------------------ | Branch (206:7): [True: 0, False: 0] ------------------ 207| 0| return std::make_unique(); 208| 0| } 209| 0|#endif 210| | 211| 0| const SCAN_Name req(algo_spec); 212| | 213| 0|#if defined(BOTAN_HAS_SKEIN_512) 214| 0| if(req.algo_name() == "Skein-512") { ------------------ | Branch (214:7): [True: 0, False: 0] ------------------ 215| 0| return std::make_unique(req.arg_as_integer(0, 512), req.arg(1, "")); 216| 0| } 217| 0|#endif 218| | 219| 0|#if defined(BOTAN_HAS_BLAKE2B) 220| 0| if(req.algo_name() == "Blake2b" || req.algo_name() == "BLAKE2b") { ------------------ | Branch (220:7): [True: 0, False: 0] | Branch (220:7): [True: 0, False: 0] | Branch (220:39): [True: 0, False: 0] ------------------ 221| 0| return std::make_unique(req.arg_as_integer(0, 512)); 222| 0| } 223| 0|#endif 224| | 225| 0|#if defined(BOTAN_HAS_KECCAK) 226| 0| if(req.algo_name() == "Keccak-1600") { ------------------ | Branch (226:7): [True: 0, False: 0] ------------------ 227| 0| return std::make_unique(req.arg_as_integer(0, 512)); 228| 0| } 229| 0|#endif 230| | 231| 0|#if defined(BOTAN_HAS_SHA3) 232| 0| if(req.algo_name() == "SHA-3") { ------------------ | Branch (232:7): [True: 0, False: 0] ------------------ 233| 0| return std::make_unique(req.arg_as_integer(0, 512)); 234| 0| } 235| 0|#endif 236| | 237| 0|#if defined(BOTAN_HAS_SHAKE) 238| 0| if(req.algo_name() == "SHAKE-128" && req.arg_count() == 1) { ------------------ | Branch (238:7): [True: 0, False: 0] | Branch (238:7): [True: 0, False: 0] | Branch (238:41): [True: 0, False: 0] ------------------ 239| 0| return std::make_unique(req.arg_as_integer(0)); 240| 0| } 241| 0| if(req.algo_name() == "SHAKE-256" && req.arg_count() == 1) { ------------------ | Branch (241:7): [True: 0, False: 0] | Branch (241:7): [True: 0, False: 0] | Branch (241:41): [True: 0, False: 0] ------------------ 242| 0| return std::make_unique(req.arg_as_integer(0)); 243| 0| } 244| 0|#endif 245| | 246| 0|#if defined(BOTAN_HAS_PARALLEL_HASH) 247| 0| if(req.algo_name() == "Parallel") { ------------------ | Branch (247:7): [True: 0, False: 0] ------------------ 248| 0| std::vector> hashes; 249| | 250| 0| for(size_t i = 0; i != req.arg_count(); ++i) { ------------------ | Branch (250:25): [True: 0, False: 0] ------------------ 251| 0| auto h = HashFunction::create(req.arg(i)); 252| 0| if(!h) { ------------------ | Branch (252:13): [True: 0, False: 0] ------------------ 253| 0| return nullptr; 254| 0| } 255| 0| hashes.push_back(std::move(h)); 256| 0| } 257| | 258| 0| return std::make_unique(hashes); 259| 0| } 260| 0|#endif 261| | 262| 0|#if defined(BOTAN_HAS_TRUNCATED_HASH) 263| 0| if(req.algo_name() == "Truncated" && req.arg_count() == 2) { ------------------ | Branch (263:7): [True: 0, False: 0] | Branch (263:7): [True: 0, False: 0] | Branch (263:41): [True: 0, False: 0] ------------------ 264| 0| auto hash = HashFunction::create(req.arg(0)); 265| 0| if(!hash) { ------------------ | Branch (265:10): [True: 0, False: 0] ------------------ 266| 0| return nullptr; 267| 0| } 268| | 269| 0| return std::make_unique(std::move(hash), req.arg_as_integer(1)); 270| 0| } 271| 0|#endif 272| | 273| 0|#if defined(BOTAN_HAS_COMB4P) 274| 0| if(req.algo_name() == "Comb4P" && req.arg_count() == 2) { ------------------ | Branch (274:7): [True: 0, False: 0] | Branch (274:7): [True: 0, False: 0] | Branch (274:38): [True: 0, False: 0] ------------------ 275| 0| auto h1 = HashFunction::create(req.arg(0)); 276| 0| auto h2 = HashFunction::create(req.arg(1)); 277| | 278| 0| if(h1 && h2) { ------------------ | Branch (278:10): [True: 0, False: 0] | Branch (278:16): [True: 0, False: 0] ------------------ 279| 0| return std::make_unique(std::move(h1), std::move(h2)); 280| 0| } 281| 0| } 282| 0|#endif 283| | 284| 0| return nullptr; 285| 0|} _ZN5Botan12HashFunction15create_or_throwENSt3__117basic_string_viewIcNS1_11char_traitsIcEEEES5_: 288| 4.37k|std::unique_ptr HashFunction::create_or_throw(std::string_view algo, std::string_view provider) { 289| 4.37k| if(auto hash = HashFunction::create(algo, provider)) { ------------------ | Branch (289:12): [True: 4.37k, False: 0] ------------------ 290| 4.37k| return hash; 291| 4.37k| } 292| 0| throw Lookup_Error("Hash", algo, provider); 293| 4.37k|} _ZN5Botan3MD510compress_nEPKhm: 62| 1.80k|void MD5::compress_n(const uint8_t input[], size_t blocks) { 63| 1.80k| uint32_t A = m_digest[0], B = m_digest[1], C = m_digest[2], D = m_digest[3]; 64| | 65| 14.4k| for(size_t i = 0; i != blocks; ++i) { ------------------ | Branch (65:22): [True: 12.5k, False: 1.80k] ------------------ 66| 12.5k| load_le(m_M.data(), input, m_M.size()); 67| | 68| 12.5k| FF<7>(A, B, C, D, m_M[0] + 0xD76AA478); 69| 12.5k| FF<12>(D, A, B, C, m_M[1] + 0xE8C7B756); 70| 12.5k| FF<17>(C, D, A, B, m_M[2] + 0x242070DB); 71| 12.5k| FF<22>(B, C, D, A, m_M[3] + 0xC1BDCEEE); 72| 12.5k| FF<7>(A, B, C, D, m_M[4] + 0xF57C0FAF); 73| 12.5k| FF<12>(D, A, B, C, m_M[5] + 0x4787C62A); 74| 12.5k| FF<17>(C, D, A, B, m_M[6] + 0xA8304613); 75| 12.5k| FF<22>(B, C, D, A, m_M[7] + 0xFD469501); 76| 12.5k| FF<7>(A, B, C, D, m_M[8] + 0x698098D8); 77| 12.5k| FF<12>(D, A, B, C, m_M[9] + 0x8B44F7AF); 78| 12.5k| FF<17>(C, D, A, B, m_M[10] + 0xFFFF5BB1); 79| 12.5k| FF<22>(B, C, D, A, m_M[11] + 0x895CD7BE); 80| 12.5k| FF<7>(A, B, C, D, m_M[12] + 0x6B901122); 81| 12.5k| FF<12>(D, A, B, C, m_M[13] + 0xFD987193); 82| 12.5k| FF<17>(C, D, A, B, m_M[14] + 0xA679438E); 83| 12.5k| FF<22>(B, C, D, A, m_M[15] + 0x49B40821); 84| | 85| 12.5k| GG<5>(A, B, C, D, m_M[1] + 0xF61E2562); 86| 12.5k| GG<9>(D, A, B, C, m_M[6] + 0xC040B340); 87| 12.5k| GG<14>(C, D, A, B, m_M[11] + 0x265E5A51); 88| 12.5k| GG<20>(B, C, D, A, m_M[0] + 0xE9B6C7AA); 89| 12.5k| GG<5>(A, B, C, D, m_M[5] + 0xD62F105D); 90| 12.5k| GG<9>(D, A, B, C, m_M[10] + 0x02441453); 91| 12.5k| GG<14>(C, D, A, B, m_M[15] + 0xD8A1E681); 92| 12.5k| GG<20>(B, C, D, A, m_M[4] + 0xE7D3FBC8); 93| 12.5k| GG<5>(A, B, C, D, m_M[9] + 0x21E1CDE6); 94| 12.5k| GG<9>(D, A, B, C, m_M[14] + 0xC33707D6); 95| 12.5k| GG<14>(C, D, A, B, m_M[3] + 0xF4D50D87); 96| 12.5k| GG<20>(B, C, D, A, m_M[8] + 0x455A14ED); 97| 12.5k| GG<5>(A, B, C, D, m_M[13] + 0xA9E3E905); 98| 12.5k| GG<9>(D, A, B, C, m_M[2] + 0xFCEFA3F8); 99| 12.5k| GG<14>(C, D, A, B, m_M[7] + 0x676F02D9); 100| 12.5k| GG<20>(B, C, D, A, m_M[12] + 0x8D2A4C8A); 101| | 102| 12.5k| HH<4>(A, B, C, D, m_M[5] + 0xFFFA3942); 103| 12.5k| HH<11>(D, A, B, C, m_M[8] + 0x8771F681); 104| 12.5k| HH<16>(C, D, A, B, m_M[11] + 0x6D9D6122); 105| 12.5k| HH<23>(B, C, D, A, m_M[14] + 0xFDE5380C); 106| 12.5k| HH<4>(A, B, C, D, m_M[1] + 0xA4BEEA44); 107| 12.5k| HH<11>(D, A, B, C, m_M[4] + 0x4BDECFA9); 108| 12.5k| HH<16>(C, D, A, B, m_M[7] + 0xF6BB4B60); 109| 12.5k| HH<23>(B, C, D, A, m_M[10] + 0xBEBFBC70); 110| 12.5k| HH<4>(A, B, C, D, m_M[13] + 0x289B7EC6); 111| 12.5k| HH<11>(D, A, B, C, m_M[0] + 0xEAA127FA); 112| 12.5k| HH<16>(C, D, A, B, m_M[3] + 0xD4EF3085); 113| 12.5k| HH<23>(B, C, D, A, m_M[6] + 0x04881D05); 114| 12.5k| HH<4>(A, B, C, D, m_M[9] + 0xD9D4D039); 115| 12.5k| HH<11>(D, A, B, C, m_M[12] + 0xE6DB99E5); 116| 12.5k| HH<16>(C, D, A, B, m_M[15] + 0x1FA27CF8); 117| 12.5k| HH<23>(B, C, D, A, m_M[2] + 0xC4AC5665); 118| | 119| 12.5k| II<6>(A, B, C, D, m_M[0] + 0xF4292244); 120| 12.5k| II<10>(D, A, B, C, m_M[7] + 0x432AFF97); 121| 12.5k| II<15>(C, D, A, B, m_M[14] + 0xAB9423A7); 122| 12.5k| II<21>(B, C, D, A, m_M[5] + 0xFC93A039); 123| 12.5k| II<6>(A, B, C, D, m_M[12] + 0x655B59C3); 124| 12.5k| II<10>(D, A, B, C, m_M[3] + 0x8F0CCC92); 125| 12.5k| II<15>(C, D, A, B, m_M[10] + 0xFFEFF47D); 126| 12.5k| II<21>(B, C, D, A, m_M[1] + 0x85845DD1); 127| 12.5k| II<6>(A, B, C, D, m_M[8] + 0x6FA87E4F); 128| 12.5k| II<10>(D, A, B, C, m_M[15] + 0xFE2CE6E0); 129| 12.5k| II<15>(C, D, A, B, m_M[6] + 0xA3014314); 130| 12.5k| II<21>(B, C, D, A, m_M[13] + 0x4E0811A1); 131| 12.5k| II<6>(A, B, C, D, m_M[4] + 0xF7537E82); 132| 12.5k| II<10>(D, A, B, C, m_M[11] + 0xBD3AF235); 133| 12.5k| II<15>(C, D, A, B, m_M[2] + 0x2AD7D2BB); 134| 12.5k| II<21>(B, C, D, A, m_M[9] + 0xEB86D391); 135| | 136| 12.5k| A = (m_digest[0] += A); 137| 12.5k| B = (m_digest[1] += B); 138| 12.5k| C = (m_digest[2] += C); 139| 12.5k| D = (m_digest[3] += D); 140| | 141| 12.5k| input += hash_block_size(); 142| 12.5k| } 143| 1.80k|} _ZN5Botan3MD58copy_outEPh: 148| 901|void MD5::copy_out(uint8_t output[]) { copy_out_vec_le(output, output_length(), m_digest); } _ZN5Botan3MD55clearEv: 153| 1.80k|void MD5::clear() { 154| 1.80k| MDx_HashFunction::clear(); 155| 1.80k| zeroise(m_M); 156| 1.80k| m_digest[0] = 0x67452301; 157| 1.80k| m_digest[1] = 0xEFCDAB89; 158| 1.80k| m_digest[2] = 0x98BADCFE; 159| 1.80k| m_digest[3] = 0x10325476; 160| 1.80k|} md5.cpp:_ZN5Botan12_GLOBAL__N_12FFILm7EEEvRjjjjj: 24| 50.3k|inline void FF(uint32_t& A, uint32_t B, uint32_t C, uint32_t D, uint32_t M) { 25| 50.3k| A += choose(B, C, D) + M; 26| 50.3k| A = rotl(A) + B; 27| 50.3k|} md5.cpp:_ZN5Botan12_GLOBAL__N_12FFILm12EEEvRjjjjj: 24| 50.3k|inline void FF(uint32_t& A, uint32_t B, uint32_t C, uint32_t D, uint32_t M) { 25| 50.3k| A += choose(B, C, D) + M; 26| 50.3k| A = rotl(A) + B; 27| 50.3k|} md5.cpp:_ZN5Botan12_GLOBAL__N_12FFILm17EEEvRjjjjj: 24| 50.3k|inline void FF(uint32_t& A, uint32_t B, uint32_t C, uint32_t D, uint32_t M) { 25| 50.3k| A += choose(B, C, D) + M; 26| 50.3k| A = rotl(A) + B; 27| 50.3k|} md5.cpp:_ZN5Botan12_GLOBAL__N_12FFILm22EEEvRjjjjj: 24| 50.3k|inline void FF(uint32_t& A, uint32_t B, uint32_t C, uint32_t D, uint32_t M) { 25| 50.3k| A += choose(B, C, D) + M; 26| 50.3k| A = rotl(A) + B; 27| 50.3k|} md5.cpp:_ZN5Botan12_GLOBAL__N_12GGILm5EEEvRjjjjj: 33| 50.3k|inline void GG(uint32_t& A, uint32_t B, uint32_t C, uint32_t D, uint32_t M) { 34| 50.3k| A += choose(D, B, C) + M; 35| 50.3k| A = rotl(A) + B; 36| 50.3k|} md5.cpp:_ZN5Botan12_GLOBAL__N_12GGILm9EEEvRjjjjj: 33| 50.3k|inline void GG(uint32_t& A, uint32_t B, uint32_t C, uint32_t D, uint32_t M) { 34| 50.3k| A += choose(D, B, C) + M; 35| 50.3k| A = rotl(A) + B; 36| 50.3k|} md5.cpp:_ZN5Botan12_GLOBAL__N_12GGILm14EEEvRjjjjj: 33| 50.3k|inline void GG(uint32_t& A, uint32_t B, uint32_t C, uint32_t D, uint32_t M) { 34| 50.3k| A += choose(D, B, C) + M; 35| 50.3k| A = rotl(A) + B; 36| 50.3k|} md5.cpp:_ZN5Botan12_GLOBAL__N_12GGILm20EEEvRjjjjj: 33| 50.3k|inline void GG(uint32_t& A, uint32_t B, uint32_t C, uint32_t D, uint32_t M) { 34| 50.3k| A += choose(D, B, C) + M; 35| 50.3k| A = rotl(A) + B; 36| 50.3k|} md5.cpp:_ZN5Botan12_GLOBAL__N_12HHILm4EEEvRjjjjj: 42| 50.3k|inline void HH(uint32_t& A, uint32_t B, uint32_t C, uint32_t D, uint32_t M) { 43| 50.3k| A += (B ^ C ^ D) + M; 44| 50.3k| A = rotl(A) + B; 45| 50.3k|} md5.cpp:_ZN5Botan12_GLOBAL__N_12HHILm11EEEvRjjjjj: 42| 50.3k|inline void HH(uint32_t& A, uint32_t B, uint32_t C, uint32_t D, uint32_t M) { 43| 50.3k| A += (B ^ C ^ D) + M; 44| 50.3k| A = rotl(A) + B; 45| 50.3k|} md5.cpp:_ZN5Botan12_GLOBAL__N_12HHILm16EEEvRjjjjj: 42| 50.3k|inline void HH(uint32_t& A, uint32_t B, uint32_t C, uint32_t D, uint32_t M) { 43| 50.3k| A += (B ^ C ^ D) + M; 44| 50.3k| A = rotl(A) + B; 45| 50.3k|} md5.cpp:_ZN5Botan12_GLOBAL__N_12HHILm23EEEvRjjjjj: 42| 50.3k|inline void HH(uint32_t& A, uint32_t B, uint32_t C, uint32_t D, uint32_t M) { 43| 50.3k| A += (B ^ C ^ D) + M; 44| 50.3k| A = rotl(A) + B; 45| 50.3k|} md5.cpp:_ZN5Botan12_GLOBAL__N_12IIILm6EEEvRjjjjj: 51| 50.3k|inline void II(uint32_t& A, uint32_t B, uint32_t C, uint32_t D, uint32_t M) { 52| | // This expr is choose(D, B ^ C, ~C), but that is slower 53| 50.3k| A += (C ^ (B | ~D)) + M; 54| 50.3k| A = rotl(A) + B; 55| 50.3k|} md5.cpp:_ZN5Botan12_GLOBAL__N_12IIILm10EEEvRjjjjj: 51| 50.3k|inline void II(uint32_t& A, uint32_t B, uint32_t C, uint32_t D, uint32_t M) { 52| | // This expr is choose(D, B ^ C, ~C), but that is slower 53| 50.3k| A += (C ^ (B | ~D)) + M; 54| 50.3k| A = rotl(A) + B; 55| 50.3k|} md5.cpp:_ZN5Botan12_GLOBAL__N_12IIILm15EEEvRjjjjj: 51| 50.3k|inline void II(uint32_t& A, uint32_t B, uint32_t C, uint32_t D, uint32_t M) { 52| | // This expr is choose(D, B ^ C, ~C), but that is slower 53| 50.3k| A += (C ^ (B | ~D)) + M; 54| 50.3k| A = rotl(A) + B; 55| 50.3k|} md5.cpp:_ZN5Botan12_GLOBAL__N_12IIILm21EEEvRjjjjj: 51| 50.3k|inline void II(uint32_t& A, uint32_t B, uint32_t C, uint32_t D, uint32_t M) { 52| | // This expr is choose(D, B ^ C, ~C), but that is slower 53| 50.3k| A += (C ^ (B | ~D)) + M; 54| 50.3k| A = rotl(A) + B; 55| 50.3k|} _ZN5Botan16MDx_HashFunctionC2Embbh: 26| 9.93k| m_position(0) { 27| 9.93k| if(!is_power_of_2(block_len)) { ------------------ | Branch (27:7): [True: 0, False: 9.93k] ------------------ 28| 0| throw Invalid_Argument("MDx_HashFunction block length must be a power of 2"); 29| 0| } 30| 9.93k| if(m_block_bits < 3 || m_block_bits > 16) { ------------------ | Branch (30:7): [True: 0, False: 9.93k] | Branch (30:27): [True: 0, False: 9.93k] ------------------ 31| 0| throw Invalid_Argument("MDx_HashFunction block size too large or too small"); 32| 0| } 33| 9.93k| if(m_counter_size < 8 || m_counter_size > block_len) { ------------------ | Branch (33:7): [True: 0, False: 9.93k] | Branch (33:29): [True: 0, False: 9.93k] ------------------ 34| 0| throw Invalid_State("MDx_HashFunction invalid counter length"); 35| 0| } 36| 9.93k|} _ZN5Botan16MDx_HashFunction5clearEv: 41| 22.0k|void MDx_HashFunction::clear() { 42| 22.0k| zeroise(m_buffer); 43| 22.0k| m_count = m_position = 0; 44| 22.0k|} _ZN5Botan16MDx_HashFunction8add_dataEPKhm: 49| 12.1k|void MDx_HashFunction::add_data(const uint8_t input[], size_t length) { 50| 12.1k| const size_t block_len = static_cast(1) << m_block_bits; 51| | 52| 12.1k| m_count += length; 53| | 54| 12.1k| if(m_position) { ------------------ | Branch (54:7): [True: 0, False: 12.1k] ------------------ 55| 0| buffer_insert(m_buffer, m_position, input, length); 56| | 57| 0| if(m_position + length >= block_len) { ------------------ | Branch (57:10): [True: 0, False: 0] ------------------ 58| 0| compress_n(m_buffer.data(), 1); 59| 0| input += (block_len - m_position); 60| 0| length -= (block_len - m_position); 61| 0| m_position = 0; 62| 0| } 63| 0| } 64| | 65| | // Just in case the compiler can't figure out block_len is a power of 2 66| 12.1k| const size_t full_blocks = length >> m_block_bits; 67| 12.1k| const size_t remaining = length & (block_len - 1); 68| | 69| 12.1k| if(full_blocks > 0) { ------------------ | Branch (69:7): [True: 7.71k, False: 4.40k] ------------------ 70| 7.71k| compress_n(input, full_blocks); 71| 7.71k| } 72| | 73| 12.1k| buffer_insert(m_buffer, m_position, input + full_blocks * block_len, remaining); 74| 12.1k| m_position += remaining; 75| 12.1k|} _ZN5Botan16MDx_HashFunction12final_resultEPh: 80| 12.1k|void MDx_HashFunction::final_result(uint8_t output[]) { 81| 12.1k| const size_t block_len = static_cast(1) << m_block_bits; 82| | 83| 12.1k| clear_mem(&m_buffer[m_position], block_len - m_position); 84| 12.1k| m_buffer[m_position] = m_pad_char; 85| | 86| 12.1k| if(m_position >= block_len - m_counter_size) { ------------------ | Branch (86:7): [True: 413, False: 11.7k] ------------------ 87| 413| compress_n(m_buffer.data(), 1); 88| 413| zeroise(m_buffer); 89| 413| } 90| | 91| 12.1k| BOTAN_ASSERT_NOMSG(m_counter_size <= output_length()); ------------------ | | 60| 12.1k| do { \ | | 61| 12.1k| if(!(expr)) \ | | ------------------ | | | Branch (61:10): [True: 0, False: 12.1k] | | ------------------ | | 62| 12.1k| Botan::assertion_failure(#expr, "", __func__, __FILE__, __LINE__); \ | | 63| 12.1k| } while(0) | | ------------------ | | | Branch (63:12): [Folded - Ignored] | | ------------------ ------------------ 92| 12.1k| BOTAN_ASSERT_NOMSG(m_counter_size >= 8); ------------------ | | 60| 12.1k| do { \ | | 61| 12.1k| if(!(expr)) \ | | ------------------ | | | Branch (61:10): [True: 0, False: 12.1k] | | ------------------ | | 62| 12.1k| Botan::assertion_failure(#expr, "", __func__, __FILE__, __LINE__); \ | | 63| 12.1k| } while(0) | | ------------------ | | | Branch (63:12): [Folded - Ignored] | | ------------------ ------------------ 93| | 94| 12.1k| const uint64_t bit_count = m_count * 8; 95| | 96| 12.1k| if(m_count_big_endian) { ------------------ | Branch (96:7): [True: 11.2k, False: 901] ------------------ 97| 11.2k| store_be(bit_count, &m_buffer[block_len - 8]); 98| 11.2k| } else { 99| 901| store_le(bit_count, &m_buffer[block_len - 8]); 100| 901| } 101| | 102| 12.1k| compress_n(m_buffer.data(), 1); 103| 12.1k| copy_out(output); 104| 12.1k| clear(); 105| 12.1k|} _ZN5Botan5SHA_110compress_nEPKhm: 62| 8.87k|void SHA_1::compress_n(const uint8_t input[], size_t blocks) { 63| 8.87k| using namespace SHA1_F; 64| | 65| 8.87k|#if defined(BOTAN_HAS_SHA1_X86_SHA_NI) 66| 8.87k| if(CPUID::has_intel_sha()) { ------------------ | Branch (66:7): [True: 0, False: 8.87k] ------------------ 67| 0| return sha1_compress_x86(m_digest, input, blocks); 68| 0| } 69| 8.87k|#endif 70| | 71| |#if defined(BOTAN_HAS_SHA1_ARMV8) 72| | if(CPUID::has_arm_sha1()) { 73| | return sha1_armv8_compress_n(m_digest, input, blocks); 74| | } 75| |#endif 76| | 77| 8.87k|#if defined(BOTAN_HAS_SHA1_SSE2) 78| 8.87k| if(CPUID::has_sse2()) { ------------------ | Branch (78:7): [True: 8.87k, False: 0] ------------------ 79| 8.87k| return sse2_compress_n(m_digest, input, blocks); 80| 8.87k| } 81| | 82| 0|#endif 83| | 84| 0| uint32_t A = m_digest[0], B = m_digest[1], C = m_digest[2], D = m_digest[3], E = m_digest[4]; 85| | 86| 0| m_W.resize(80); 87| | 88| 0| for(size_t i = 0; i != blocks; ++i) { ------------------ | Branch (88:22): [True: 0, False: 0] ------------------ 89| 0| load_be(m_W.data(), input, 16); 90| | 91| 0| for(size_t j = 16; j != 80; j += 8) { ------------------ | Branch (91:26): [True: 0, False: 0] ------------------ 92| 0| m_W[j] = rotl<1>(m_W[j - 3] ^ m_W[j - 8] ^ m_W[j - 14] ^ m_W[j - 16]); 93| 0| m_W[j + 1] = rotl<1>(m_W[j - 2] ^ m_W[j - 7] ^ m_W[j - 13] ^ m_W[j - 15]); 94| 0| m_W[j + 2] = rotl<1>(m_W[j - 1] ^ m_W[j - 6] ^ m_W[j - 12] ^ m_W[j - 14]); 95| 0| m_W[j + 3] = rotl<1>(m_W[j] ^ m_W[j - 5] ^ m_W[j - 11] ^ m_W[j - 13]); 96| 0| m_W[j + 4] = rotl<1>(m_W[j + 1] ^ m_W[j - 4] ^ m_W[j - 10] ^ m_W[j - 12]); 97| 0| m_W[j + 5] = rotl<1>(m_W[j + 2] ^ m_W[j - 3] ^ m_W[j - 9] ^ m_W[j - 11]); 98| 0| m_W[j + 6] = rotl<1>(m_W[j + 3] ^ m_W[j - 2] ^ m_W[j - 8] ^ m_W[j - 10]); 99| 0| m_W[j + 7] = rotl<1>(m_W[j + 4] ^ m_W[j - 1] ^ m_W[j - 7] ^ m_W[j - 9]); 100| 0| } 101| | 102| 0| F1(A, B, C, D, E, m_W[0]); 103| 0| F1(E, A, B, C, D, m_W[1]); 104| 0| F1(D, E, A, B, C, m_W[2]); 105| 0| F1(C, D, E, A, B, m_W[3]); 106| 0| F1(B, C, D, E, A, m_W[4]); 107| 0| F1(A, B, C, D, E, m_W[5]); 108| 0| F1(E, A, B, C, D, m_W[6]); 109| 0| F1(D, E, A, B, C, m_W[7]); 110| 0| F1(C, D, E, A, B, m_W[8]); 111| 0| F1(B, C, D, E, A, m_W[9]); 112| 0| F1(A, B, C, D, E, m_W[10]); 113| 0| F1(E, A, B, C, D, m_W[11]); 114| 0| F1(D, E, A, B, C, m_W[12]); 115| 0| F1(C, D, E, A, B, m_W[13]); 116| 0| F1(B, C, D, E, A, m_W[14]); 117| 0| F1(A, B, C, D, E, m_W[15]); 118| 0| F1(E, A, B, C, D, m_W[16]); 119| 0| F1(D, E, A, B, C, m_W[17]); 120| 0| F1(C, D, E, A, B, m_W[18]); 121| 0| F1(B, C, D, E, A, m_W[19]); 122| | 123| 0| F2(A, B, C, D, E, m_W[20]); 124| 0| F2(E, A, B, C, D, m_W[21]); 125| 0| F2(D, E, A, B, C, m_W[22]); 126| 0| F2(C, D, E, A, B, m_W[23]); 127| 0| F2(B, C, D, E, A, m_W[24]); 128| 0| F2(A, B, C, D, E, m_W[25]); 129| 0| F2(E, A, B, C, D, m_W[26]); 130| 0| F2(D, E, A, B, C, m_W[27]); 131| 0| F2(C, D, E, A, B, m_W[28]); 132| 0| F2(B, C, D, E, A, m_W[29]); 133| 0| F2(A, B, C, D, E, m_W[30]); 134| 0| F2(E, A, B, C, D, m_W[31]); 135| 0| F2(D, E, A, B, C, m_W[32]); 136| 0| F2(C, D, E, A, B, m_W[33]); 137| 0| F2(B, C, D, E, A, m_W[34]); 138| 0| F2(A, B, C, D, E, m_W[35]); 139| 0| F2(E, A, B, C, D, m_W[36]); 140| 0| F2(D, E, A, B, C, m_W[37]); 141| 0| F2(C, D, E, A, B, m_W[38]); 142| 0| F2(B, C, D, E, A, m_W[39]); 143| | 144| 0| F3(A, B, C, D, E, m_W[40]); 145| 0| F3(E, A, B, C, D, m_W[41]); 146| 0| F3(D, E, A, B, C, m_W[42]); 147| 0| F3(C, D, E, A, B, m_W[43]); 148| 0| F3(B, C, D, E, A, m_W[44]); 149| 0| F3(A, B, C, D, E, m_W[45]); 150| 0| F3(E, A, B, C, D, m_W[46]); 151| 0| F3(D, E, A, B, C, m_W[47]); 152| 0| F3(C, D, E, A, B, m_W[48]); 153| 0| F3(B, C, D, E, A, m_W[49]); 154| 0| F3(A, B, C, D, E, m_W[50]); 155| 0| F3(E, A, B, C, D, m_W[51]); 156| 0| F3(D, E, A, B, C, m_W[52]); 157| 0| F3(C, D, E, A, B, m_W[53]); 158| 0| F3(B, C, D, E, A, m_W[54]); 159| 0| F3(A, B, C, D, E, m_W[55]); 160| 0| F3(E, A, B, C, D, m_W[56]); 161| 0| F3(D, E, A, B, C, m_W[57]); 162| 0| F3(C, D, E, A, B, m_W[58]); 163| 0| F3(B, C, D, E, A, m_W[59]); 164| | 165| 0| F4(A, B, C, D, E, m_W[60]); 166| 0| F4(E, A, B, C, D, m_W[61]); 167| 0| F4(D, E, A, B, C, m_W[62]); 168| 0| F4(C, D, E, A, B, m_W[63]); 169| 0| F4(B, C, D, E, A, m_W[64]); 170| 0| F4(A, B, C, D, E, m_W[65]); 171| 0| F4(E, A, B, C, D, m_W[66]); 172| 0| F4(D, E, A, B, C, m_W[67]); 173| 0| F4(C, D, E, A, B, m_W[68]); 174| 0| F4(B, C, D, E, A, m_W[69]); 175| 0| F4(A, B, C, D, E, m_W[70]); 176| 0| F4(E, A, B, C, D, m_W[71]); 177| 0| F4(D, E, A, B, C, m_W[72]); 178| 0| F4(C, D, E, A, B, m_W[73]); 179| 0| F4(B, C, D, E, A, m_W[74]); 180| 0| F4(A, B, C, D, E, m_W[75]); 181| 0| F4(E, A, B, C, D, m_W[76]); 182| 0| F4(D, E, A, B, C, m_W[77]); 183| 0| F4(C, D, E, A, B, m_W[78]); 184| 0| F4(B, C, D, E, A, m_W[79]); 185| | 186| 0| A = (m_digest[0] += A); 187| 0| B = (m_digest[1] += B); 188| 0| C = (m_digest[2] += C); 189| 0| D = (m_digest[3] += D); 190| 0| E = (m_digest[4] += E); 191| | 192| 0| input += hash_block_size(); 193| 0| } 194| 0|} _ZN5Botan5SHA_18copy_outEPh: 199| 4.38k|void SHA_1::copy_out(uint8_t output[]) { copy_out_vec_be(output, output_length(), m_digest); } _ZN5Botan5SHA_15clearEv: 204| 8.76k|void SHA_1::clear() { 205| 8.76k| MDx_HashFunction::clear(); 206| 8.76k| zeroise(m_W); 207| 8.76k| m_digest[0] = 0x67452301; 208| 8.76k| m_digest[1] = 0xEFCDAB89; 209| 8.76k| m_digest[2] = 0x98BADCFE; 210| 8.76k| m_digest[3] = 0x10325476; 211| 8.76k| m_digest[4] = 0xC3D2E1F0; 212| 8.76k|} _ZN5Botan5SHA_115sse2_compress_nERNSt3__16vectorIjNS_16secure_allocatorIjEEEEPKhm: 115| 8.87k|void SHA_1::sse2_compress_n(secure_vector& digest, const uint8_t input[], size_t blocks) { 116| 8.87k| using namespace SHA1_SSE2_F; 117| | 118| 8.87k| const SIMD_4x32 K00_19 = SIMD_4x32::splat(0x5A827999); 119| 8.87k| const SIMD_4x32 K20_39 = SIMD_4x32::splat(0x6ED9EBA1); 120| 8.87k| const SIMD_4x32 K40_59 = SIMD_4x32::splat(0x8F1BBCDC); 121| 8.87k| const SIMD_4x32 K60_79 = SIMD_4x32::splat(0xCA62C1D6); 122| | 123| 8.87k| uint32_t A = digest[0], B = digest[1], C = digest[2], D = digest[3], E = digest[4]; 124| | 125| 53.5k| for(size_t i = 0; i != blocks; ++i) { ------------------ | Branch (125:22): [True: 44.6k, False: 8.87k] ------------------ 126| 44.6k| uint32_t PT[4]; 127| | 128| 44.6k| SIMD_4x32 W0 = SIMD_4x32::load_be(&input[0]); 129| 44.6k| SIMD_4x32 W1 = SIMD_4x32::load_be(&input[16]); 130| 44.6k| SIMD_4x32 W2 = SIMD_4x32::load_be(&input[32]); 131| 44.6k| SIMD_4x32 W3 = SIMD_4x32::load_be(&input[48]); 132| | 133| 44.6k| SIMD_4x32 P0 = W0 + K00_19; 134| 44.6k| SIMD_4x32 P1 = W1 + K00_19; 135| 44.6k| SIMD_4x32 P2 = W2 + K00_19; 136| 44.6k| SIMD_4x32 P3 = W3 + K00_19; 137| | 138| 44.6k| SIMD_4x32(P0).store_le(PT); 139| 44.6k| F1(A, B, C, D, E, PT[0]); 140| 44.6k| F1(E, A, B, C, D, PT[1]); 141| 44.6k| F1(D, E, A, B, C, PT[2]); 142| 44.6k| F1(C, D, E, A, B, PT[3]); 143| 44.6k| P0 = prep(W0, W1, W2, W3, K00_19); 144| | 145| 44.6k| SIMD_4x32(P1).store_le(PT); 146| 44.6k| F1(B, C, D, E, A, PT[0]); 147| 44.6k| F1(A, B, C, D, E, PT[1]); 148| 44.6k| F1(E, A, B, C, D, PT[2]); 149| 44.6k| F1(D, E, A, B, C, PT[3]); 150| 44.6k| P1 = prep(W1, W2, W3, W0, K20_39); 151| | 152| 44.6k| SIMD_4x32(P2).store_le(PT); 153| 44.6k| F1(C, D, E, A, B, PT[0]); 154| 44.6k| F1(B, C, D, E, A, PT[1]); 155| 44.6k| F1(A, B, C, D, E, PT[2]); 156| 44.6k| F1(E, A, B, C, D, PT[3]); 157| 44.6k| P2 = prep(W2, W3, W0, W1, K20_39); 158| | 159| 44.6k| SIMD_4x32(P3).store_le(PT); 160| 44.6k| F1(D, E, A, B, C, PT[0]); 161| 44.6k| F1(C, D, E, A, B, PT[1]); 162| 44.6k| F1(B, C, D, E, A, PT[2]); 163| 44.6k| F1(A, B, C, D, E, PT[3]); 164| 44.6k| P3 = prep(W3, W0, W1, W2, K20_39); 165| | 166| 44.6k| SIMD_4x32(P0).store_le(PT); 167| 44.6k| F1(E, A, B, C, D, PT[0]); 168| 44.6k| F1(D, E, A, B, C, PT[1]); 169| 44.6k| F1(C, D, E, A, B, PT[2]); 170| 44.6k| F1(B, C, D, E, A, PT[3]); 171| 44.6k| P0 = prep(W0, W1, W2, W3, K20_39); 172| | 173| 44.6k| SIMD_4x32(P1).store_le(PT); 174| 44.6k| F2(A, B, C, D, E, PT[0]); 175| 44.6k| F2(E, A, B, C, D, PT[1]); 176| 44.6k| F2(D, E, A, B, C, PT[2]); 177| 44.6k| F2(C, D, E, A, B, PT[3]); 178| 44.6k| P1 = prep(W1, W2, W3, W0, K20_39); 179| | 180| 44.6k| SIMD_4x32(P2).store_le(PT); 181| 44.6k| F2(B, C, D, E, A, PT[0]); 182| 44.6k| F2(A, B, C, D, E, PT[1]); 183| 44.6k| F2(E, A, B, C, D, PT[2]); 184| 44.6k| F2(D, E, A, B, C, PT[3]); 185| 44.6k| P2 = prep(W2, W3, W0, W1, K40_59); 186| | 187| 44.6k| SIMD_4x32(P3).store_le(PT); 188| 44.6k| F2(C, D, E, A, B, PT[0]); 189| 44.6k| F2(B, C, D, E, A, PT[1]); 190| 44.6k| F2(A, B, C, D, E, PT[2]); 191| 44.6k| F2(E, A, B, C, D, PT[3]); 192| 44.6k| P3 = prep(W3, W0, W1, W2, K40_59); 193| | 194| 44.6k| SIMD_4x32(P0).store_le(PT); 195| 44.6k| F2(D, E, A, B, C, PT[0]); 196| 44.6k| F2(C, D, E, A, B, PT[1]); 197| 44.6k| F2(B, C, D, E, A, PT[2]); 198| 44.6k| F2(A, B, C, D, E, PT[3]); 199| 44.6k| P0 = prep(W0, W1, W2, W3, K40_59); 200| | 201| 44.6k| SIMD_4x32(P1).store_le(PT); 202| 44.6k| F2(E, A, B, C, D, PT[0]); 203| 44.6k| F2(D, E, A, B, C, PT[1]); 204| 44.6k| F2(C, D, E, A, B, PT[2]); 205| 44.6k| F2(B, C, D, E, A, PT[3]); 206| 44.6k| P1 = prep(W1, W2, W3, W0, K40_59); 207| | 208| 44.6k| SIMD_4x32(P2).store_le(PT); 209| 44.6k| F3(A, B, C, D, E, PT[0]); 210| 44.6k| F3(E, A, B, C, D, PT[1]); 211| 44.6k| F3(D, E, A, B, C, PT[2]); 212| 44.6k| F3(C, D, E, A, B, PT[3]); 213| 44.6k| P2 = prep(W2, W3, W0, W1, K40_59); 214| | 215| 44.6k| SIMD_4x32(P3).store_le(PT); 216| 44.6k| F3(B, C, D, E, A, PT[0]); 217| 44.6k| F3(A, B, C, D, E, PT[1]); 218| 44.6k| F3(E, A, B, C, D, PT[2]); 219| 44.6k| F3(D, E, A, B, C, PT[3]); 220| 44.6k| P3 = prep(W3, W0, W1, W2, K60_79); 221| | 222| 44.6k| SIMD_4x32(P0).store_le(PT); 223| 44.6k| F3(C, D, E, A, B, PT[0]); 224| 44.6k| F3(B, C, D, E, A, PT[1]); 225| 44.6k| F3(A, B, C, D, E, PT[2]); 226| 44.6k| F3(E, A, B, C, D, PT[3]); 227| 44.6k| P0 = prep(W0, W1, W2, W3, K60_79); 228| | 229| 44.6k| SIMD_4x32(P1).store_le(PT); 230| 44.6k| F3(D, E, A, B, C, PT[0]); 231| 44.6k| F3(C, D, E, A, B, PT[1]); 232| 44.6k| F3(B, C, D, E, A, PT[2]); 233| 44.6k| F3(A, B, C, D, E, PT[3]); 234| 44.6k| P1 = prep(W1, W2, W3, W0, K60_79); 235| | 236| 44.6k| SIMD_4x32(P2).store_le(PT); 237| 44.6k| F3(E, A, B, C, D, PT[0]); 238| 44.6k| F3(D, E, A, B, C, PT[1]); 239| 44.6k| F3(C, D, E, A, B, PT[2]); 240| 44.6k| F3(B, C, D, E, A, PT[3]); 241| 44.6k| P2 = prep(W2, W3, W0, W1, K60_79); 242| | 243| 44.6k| SIMD_4x32(P3).store_le(PT); 244| 44.6k| F4(A, B, C, D, E, PT[0]); 245| 44.6k| F4(E, A, B, C, D, PT[1]); 246| 44.6k| F4(D, E, A, B, C, PT[2]); 247| 44.6k| F4(C, D, E, A, B, PT[3]); 248| 44.6k| P3 = prep(W3, W0, W1, W2, K60_79); 249| | 250| 44.6k| SIMD_4x32(P0).store_le(PT); 251| 44.6k| F4(B, C, D, E, A, PT[0]); 252| 44.6k| F4(A, B, C, D, E, PT[1]); 253| 44.6k| F4(E, A, B, C, D, PT[2]); 254| 44.6k| F4(D, E, A, B, C, PT[3]); 255| | 256| 44.6k| SIMD_4x32(P1).store_le(PT); 257| 44.6k| F4(C, D, E, A, B, PT[0]); 258| 44.6k| F4(B, C, D, E, A, PT[1]); 259| 44.6k| F4(A, B, C, D, E, PT[2]); 260| 44.6k| F4(E, A, B, C, D, PT[3]); 261| | 262| 44.6k| SIMD_4x32(P2).store_le(PT); 263| 44.6k| F4(D, E, A, B, C, PT[0]); 264| 44.6k| F4(C, D, E, A, B, PT[1]); 265| 44.6k| F4(B, C, D, E, A, PT[2]); 266| 44.6k| F4(A, B, C, D, E, PT[3]); 267| | 268| 44.6k| SIMD_4x32(P3).store_le(PT); 269| 44.6k| F4(E, A, B, C, D, PT[0]); 270| 44.6k| F4(D, E, A, B, C, PT[1]); 271| 44.6k| F4(C, D, E, A, B, PT[2]); 272| 44.6k| F4(B, C, D, E, A, PT[3]); 273| | 274| 44.6k| A = (digest[0] += A); 275| 44.6k| B = (digest[1] += B); 276| 44.6k| C = (digest[2] += C); 277| 44.6k| D = (digest[3] += D); 278| 44.6k| E = (digest[4] += E); 279| | 280| 44.6k| input += 64; 281| 44.6k| } 282| 8.87k|} sha1_sse2.cpp:_ZN5Botan11SHA1_SSE2_F12_GLOBAL__N_12F1EjRjjjS2_j: 77| 893k|inline void F1(uint32_t A, uint32_t& B, uint32_t C, uint32_t D, uint32_t& E, uint32_t msg) { 78| 893k| E += choose(B, C, D) + msg + rotl<5>(A); 79| 893k| B = rotl<30>(B); 80| 893k|} sha1_sse2.cpp:_ZN5Botan11SHA1_SSE2_F12_GLOBAL__N_14prepERNS_9SIMD_4x32ES2_S2_S2_S2_: 50| 714k|BOTAN_FORCE_INLINE SIMD_4x32 prep(SIMD_4x32& XW0, SIMD_4x32 XW1, SIMD_4x32 XW2, SIMD_4x32 XW3, SIMD_4x32 K) { 51| 714k| SIMD_4x32 T0 = XW0; 52| | /* load W[t-4] 16-byte aligned, and shift */ 53| 714k| SIMD_4x32 T2 = XW3.shift_elems_right<1>(); 54| | /* get high 64-bits of XW0 into low 64-bits */ 55| 714k| SIMD_4x32 T1 = SIMD_4x32(_mm_shuffle_epi32(XW0.raw(), _MM_SHUFFLE(1, 0, 3, 2))); 56| | /* load high 64-bits of T1 */ 57| 714k| T1 = SIMD_4x32(_mm_unpacklo_epi64(T1.raw(), XW1.raw())); 58| | 59| 714k| T0 ^= T1; 60| 714k| T2 ^= XW2; 61| 714k| T0 ^= T2; 62| | /* unrotated W[t]..W[t+2] in T0 ... still need W[t+3] */ 63| | 64| 714k| T2 = T0.shift_elems_left<3>(); 65| 714k| T0 = T0.rotl<1>(); 66| 714k| T2 = T2.rotl<2>(); 67| | 68| 714k| T0 ^= T2; /* T0 now has W[t+3] */ 69| | 70| 714k| XW0 = T0; 71| 714k| return T0 + K; 72| 714k|} sha1_sse2.cpp:_ZN5Botan11SHA1_SSE2_F12_GLOBAL__N_12F2EjRjjjS2_j: 85| 893k|inline void F2(uint32_t A, uint32_t& B, uint32_t C, uint32_t D, uint32_t& E, uint32_t msg) { 86| 893k| E += (B ^ C ^ D) + msg + rotl<5>(A); 87| 893k| B = rotl<30>(B); 88| 893k|} sha1_sse2.cpp:_ZN5Botan11SHA1_SSE2_F12_GLOBAL__N_12F3EjRjjjS2_j: 93| 893k|inline void F3(uint32_t A, uint32_t& B, uint32_t C, uint32_t D, uint32_t& E, uint32_t msg) { 94| 893k| E += majority(B, C, D) + msg + rotl<5>(A); 95| 893k| B = rotl<30>(B); 96| 893k|} sha1_sse2.cpp:_ZN5Botan11SHA1_SSE2_F12_GLOBAL__N_12F4EjRjjjS2_j: 101| 893k|inline void F4(uint32_t A, uint32_t& B, uint32_t C, uint32_t D, uint32_t& E, uint32_t msg) { 102| 893k| E += (B ^ C ^ D) + msg + rotl<5>(A); 103| 893k| B = rotl<30>(B); 104| 893k|} _ZN5Botan7SHA_25615compress_digestERNSt3__16vectorIjNS_16secure_allocatorIjEEEEPKhm: 52| 9.38k|void SHA_256::compress_digest(secure_vector& digest, const uint8_t input[], size_t blocks) { 53| 9.38k|#if defined(BOTAN_HAS_SHA2_32_X86) 54| 9.38k| if(CPUID::has_intel_sha()) { ------------------ | Branch (54:7): [True: 0, False: 9.38k] ------------------ 55| 0| return SHA_256::compress_digest_x86(digest, input, blocks); 56| 0| } 57| 9.38k|#endif 58| | 59| 9.38k|#if defined(BOTAN_HAS_SHA2_32_X86_BMI2) 60| 9.38k| if(CPUID::has_bmi2()) { ------------------ | Branch (60:7): [True: 9.38k, False: 0] ------------------ 61| 9.38k| return SHA_256::compress_digest_x86_bmi2(digest, input, blocks); 62| 9.38k| } 63| 0|#endif 64| | 65| |#if defined(BOTAN_HAS_SHA2_32_ARMV8) 66| | if(CPUID::has_arm_sha2()) { 67| | return SHA_256::compress_digest_armv8(digest, input, blocks); 68| | } 69| |#endif 70| | 71| 0| uint32_t A = digest[0], B = digest[1], C = digest[2], D = digest[3], E = digest[4], F = digest[5], G = digest[6], 72| 0| H = digest[7]; 73| | 74| 0| for(size_t i = 0; i != blocks; ++i) { ------------------ | Branch (74:22): [True: 0, False: 0] ------------------ 75| 0| uint32_t W00 = load_be(input, 0); 76| 0| uint32_t W01 = load_be(input, 1); 77| 0| uint32_t W02 = load_be(input, 2); 78| 0| uint32_t W03 = load_be(input, 3); 79| 0| uint32_t W04 = load_be(input, 4); 80| 0| uint32_t W05 = load_be(input, 5); 81| 0| uint32_t W06 = load_be(input, 6); 82| 0| uint32_t W07 = load_be(input, 7); 83| 0| uint32_t W08 = load_be(input, 8); 84| 0| uint32_t W09 = load_be(input, 9); 85| 0| uint32_t W10 = load_be(input, 10); 86| 0| uint32_t W11 = load_be(input, 11); 87| 0| uint32_t W12 = load_be(input, 12); 88| 0| uint32_t W13 = load_be(input, 13); 89| 0| uint32_t W14 = load_be(input, 14); 90| 0| uint32_t W15 = load_be(input, 15); 91| | 92| 0| SHA2_32_F(A, B, C, D, E, F, G, H, W00, W14, W09, W01, 0x428A2F98); 93| 0| SHA2_32_F(H, A, B, C, D, E, F, G, W01, W15, W10, W02, 0x71374491); 94| 0| SHA2_32_F(G, H, A, B, C, D, E, F, W02, W00, W11, W03, 0xB5C0FBCF); 95| 0| SHA2_32_F(F, G, H, A, B, C, D, E, W03, W01, W12, W04, 0xE9B5DBA5); 96| 0| SHA2_32_F(E, F, G, H, A, B, C, D, W04, W02, W13, W05, 0x3956C25B); 97| 0| SHA2_32_F(D, E, F, G, H, A, B, C, W05, W03, W14, W06, 0x59F111F1); 98| 0| SHA2_32_F(C, D, E, F, G, H, A, B, W06, W04, W15, W07, 0x923F82A4); 99| 0| SHA2_32_F(B, C, D, E, F, G, H, A, W07, W05, W00, W08, 0xAB1C5ED5); 100| 0| SHA2_32_F(A, B, C, D, E, F, G, H, W08, W06, W01, W09, 0xD807AA98); 101| 0| SHA2_32_F(H, A, B, C, D, E, F, G, W09, W07, W02, W10, 0x12835B01); 102| 0| SHA2_32_F(G, H, A, B, C, D, E, F, W10, W08, W03, W11, 0x243185BE); 103| 0| SHA2_32_F(F, G, H, A, B, C, D, E, W11, W09, W04, W12, 0x550C7DC3); 104| 0| SHA2_32_F(E, F, G, H, A, B, C, D, W12, W10, W05, W13, 0x72BE5D74); 105| 0| SHA2_32_F(D, E, F, G, H, A, B, C, W13, W11, W06, W14, 0x80DEB1FE); 106| 0| SHA2_32_F(C, D, E, F, G, H, A, B, W14, W12, W07, W15, 0x9BDC06A7); 107| 0| SHA2_32_F(B, C, D, E, F, G, H, A, W15, W13, W08, W00, 0xC19BF174); 108| | 109| 0| SHA2_32_F(A, B, C, D, E, F, G, H, W00, W14, W09, W01, 0xE49B69C1); 110| 0| SHA2_32_F(H, A, B, C, D, E, F, G, W01, W15, W10, W02, 0xEFBE4786); 111| 0| SHA2_32_F(G, H, A, B, C, D, E, F, W02, W00, W11, W03, 0x0FC19DC6); 112| 0| SHA2_32_F(F, G, H, A, B, C, D, E, W03, W01, W12, W04, 0x240CA1CC); 113| 0| SHA2_32_F(E, F, G, H, A, B, C, D, W04, W02, W13, W05, 0x2DE92C6F); 114| 0| SHA2_32_F(D, E, F, G, H, A, B, C, W05, W03, W14, W06, 0x4A7484AA); 115| 0| SHA2_32_F(C, D, E, F, G, H, A, B, W06, W04, W15, W07, 0x5CB0A9DC); 116| 0| SHA2_32_F(B, C, D, E, F, G, H, A, W07, W05, W00, W08, 0x76F988DA); 117| 0| SHA2_32_F(A, B, C, D, E, F, G, H, W08, W06, W01, W09, 0x983E5152); 118| 0| SHA2_32_F(H, A, B, C, D, E, F, G, W09, W07, W02, W10, 0xA831C66D); 119| 0| SHA2_32_F(G, H, A, B, C, D, E, F, W10, W08, W03, W11, 0xB00327C8); 120| 0| SHA2_32_F(F, G, H, A, B, C, D, E, W11, W09, W04, W12, 0xBF597FC7); 121| 0| SHA2_32_F(E, F, G, H, A, B, C, D, W12, W10, W05, W13, 0xC6E00BF3); 122| 0| SHA2_32_F(D, E, F, G, H, A, B, C, W13, W11, W06, W14, 0xD5A79147); 123| 0| SHA2_32_F(C, D, E, F, G, H, A, B, W14, W12, W07, W15, 0x06CA6351); 124| 0| SHA2_32_F(B, C, D, E, F, G, H, A, W15, W13, W08, W00, 0x14292967); 125| | 126| 0| SHA2_32_F(A, B, C, D, E, F, G, H, W00, W14, W09, W01, 0x27B70A85); 127| 0| SHA2_32_F(H, A, B, C, D, E, F, G, W01, W15, W10, W02, 0x2E1B2138); 128| 0| SHA2_32_F(G, H, A, B, C, D, E, F, W02, W00, W11, W03, 0x4D2C6DFC); 129| 0| SHA2_32_F(F, G, H, A, B, C, D, E, W03, W01, W12, W04, 0x53380D13); 130| 0| SHA2_32_F(E, F, G, H, A, B, C, D, W04, W02, W13, W05, 0x650A7354); 131| 0| SHA2_32_F(D, E, F, G, H, A, B, C, W05, W03, W14, W06, 0x766A0ABB); 132| 0| SHA2_32_F(C, D, E, F, G, H, A, B, W06, W04, W15, W07, 0x81C2C92E); 133| 0| SHA2_32_F(B, C, D, E, F, G, H, A, W07, W05, W00, W08, 0x92722C85); 134| 0| SHA2_32_F(A, B, C, D, E, F, G, H, W08, W06, W01, W09, 0xA2BFE8A1); 135| 0| SHA2_32_F(H, A, B, C, D, E, F, G, W09, W07, W02, W10, 0xA81A664B); 136| 0| SHA2_32_F(G, H, A, B, C, D, E, F, W10, W08, W03, W11, 0xC24B8B70); 137| 0| SHA2_32_F(F, G, H, A, B, C, D, E, W11, W09, W04, W12, 0xC76C51A3); 138| 0| SHA2_32_F(E, F, G, H, A, B, C, D, W12, W10, W05, W13, 0xD192E819); 139| 0| SHA2_32_F(D, E, F, G, H, A, B, C, W13, W11, W06, W14, 0xD6990624); 140| 0| SHA2_32_F(C, D, E, F, G, H, A, B, W14, W12, W07, W15, 0xF40E3585); 141| 0| SHA2_32_F(B, C, D, E, F, G, H, A, W15, W13, W08, W00, 0x106AA070); 142| | 143| 0| SHA2_32_F(A, B, C, D, E, F, G, H, W00, W14, W09, W01, 0x19A4C116); 144| 0| SHA2_32_F(H, A, B, C, D, E, F, G, W01, W15, W10, W02, 0x1E376C08); 145| 0| SHA2_32_F(G, H, A, B, C, D, E, F, W02, W00, W11, W03, 0x2748774C); 146| 0| SHA2_32_F(F, G, H, A, B, C, D, E, W03, W01, W12, W04, 0x34B0BCB5); 147| 0| SHA2_32_F(E, F, G, H, A, B, C, D, W04, W02, W13, W05, 0x391C0CB3); 148| 0| SHA2_32_F(D, E, F, G, H, A, B, C, W05, W03, W14, W06, 0x4ED8AA4A); 149| 0| SHA2_32_F(C, D, E, F, G, H, A, B, W06, W04, W15, W07, 0x5B9CCA4F); 150| 0| SHA2_32_F(B, C, D, E, F, G, H, A, W07, W05, W00, W08, 0x682E6FF3); 151| 0| SHA2_32_F(A, B, C, D, E, F, G, H, W08, W06, W01, W09, 0x748F82EE); 152| 0| SHA2_32_F(H, A, B, C, D, E, F, G, W09, W07, W02, W10, 0x78A5636F); 153| 0| SHA2_32_F(G, H, A, B, C, D, E, F, W10, W08, W03, W11, 0x84C87814); 154| 0| SHA2_32_F(F, G, H, A, B, C, D, E, W11, W09, W04, W12, 0x8CC70208); 155| 0| SHA2_32_F(E, F, G, H, A, B, C, D, W12, W10, W05, W13, 0x90BEFFFA); 156| 0| SHA2_32_F(D, E, F, G, H, A, B, C, W13, W11, W06, W14, 0xA4506CEB); 157| 0| SHA2_32_F(C, D, E, F, G, H, A, B, W14, W12, W07, W15, 0xBEF9A3F7); 158| 0| SHA2_32_F(B, C, D, E, F, G, H, A, W15, W13, W08, W00, 0xC67178F2); 159| | 160| 0| A = (digest[0] += A); 161| 0| B = (digest[1] += B); 162| 0| C = (digest[2] += C); 163| 0| D = (digest[3] += D); 164| 0| E = (digest[4] += E); 165| 0| F = (digest[5] += F); 166| 0| G = (digest[6] += G); 167| 0| H = (digest[7] += H); 168| | 169| 0| input += 64; 170| 0| } 171| 0|} _ZN5Botan7SHA_22410compress_nEPKhm: 180| 224|void SHA_224::compress_n(const uint8_t input[], size_t blocks) { SHA_256::compress_digest(m_digest, input, blocks); } _ZN5Botan7SHA_2248copy_outEPh: 185| 112|void SHA_224::copy_out(uint8_t output[]) { copy_out_vec_be(output, output_length(), m_digest); } _ZN5Botan7SHA_2245clearEv: 190| 224|void SHA_224::clear() { 191| 224| MDx_HashFunction::clear(); 192| 224| m_digest[0] = 0xC1059ED8; 193| 224| m_digest[1] = 0x367CD507; 194| 224| m_digest[2] = 0x3070DD17; 195| 224| m_digest[3] = 0xF70E5939; 196| 224| m_digest[4] = 0xFFC00B31; 197| 224| m_digest[5] = 0x68581511; 198| 224| m_digest[6] = 0x64F98FA7; 199| 224| m_digest[7] = 0xBEFA4FA4; 200| 224|} _ZN5Botan7SHA_25610compress_nEPKhm: 205| 9.16k|void SHA_256::compress_n(const uint8_t input[], size_t blocks) { SHA_256::compress_digest(m_digest, input, blocks); } _ZN5Botan7SHA_2568copy_outEPh: 210| 6.63k|void SHA_256::copy_out(uint8_t output[]) { copy_out_vec_be(output, output_length(), m_digest); } _ZN5Botan7SHA_2565clearEv: 215| 11.0k|void SHA_256::clear() { 216| 11.0k| MDx_HashFunction::clear(); 217| 11.0k| m_digest[0] = 0x6A09E667; 218| 11.0k| m_digest[1] = 0xBB67AE85; 219| 11.0k| m_digest[2] = 0x3C6EF372; 220| 11.0k| m_digest[3] = 0xA54FF53A; 221| 11.0k| m_digest[4] = 0x510E527F; 222| 11.0k| m_digest[5] = 0x9B05688C; 223| 11.0k| m_digest[6] = 0x1F83D9AB; 224| 11.0k| m_digest[7] = 0x5BE0CD19; 225| 11.0k|} _ZN5Botan7SHA_25624compress_digest_x86_bmi2ERNSt3__16vectorIjNS_16secure_allocatorIjEEEEPKhm: 23| 9.38k|void SHA_256::compress_digest_x86_bmi2(secure_vector& digest, const uint8_t input[], size_t blocks) { 24| 9.38k| uint32_t A = digest[0], B = digest[1], C = digest[2], D = digest[3], E = digest[4], F = digest[5], G = digest[6], 25| 9.38k| H = digest[7]; 26| | 27| 51.1k| for(size_t i = 0; i != blocks; ++i) { ------------------ | Branch (27:22): [True: 41.7k, False: 9.38k] ------------------ 28| 41.7k| uint32_t W00 = load_be(input, 0); 29| 41.7k| uint32_t W01 = load_be(input, 1); 30| 41.7k| uint32_t W02 = load_be(input, 2); 31| 41.7k| uint32_t W03 = load_be(input, 3); 32| 41.7k| uint32_t W04 = load_be(input, 4); 33| 41.7k| uint32_t W05 = load_be(input, 5); 34| 41.7k| uint32_t W06 = load_be(input, 6); 35| 41.7k| uint32_t W07 = load_be(input, 7); 36| 41.7k| uint32_t W08 = load_be(input, 8); 37| 41.7k| uint32_t W09 = load_be(input, 9); 38| 41.7k| uint32_t W10 = load_be(input, 10); 39| 41.7k| uint32_t W11 = load_be(input, 11); 40| 41.7k| uint32_t W12 = load_be(input, 12); 41| 41.7k| uint32_t W13 = load_be(input, 13); 42| 41.7k| uint32_t W14 = load_be(input, 14); 43| 41.7k| uint32_t W15 = load_be(input, 15); 44| | 45| 41.7k| SHA2_32_F(A, B, C, D, E, F, G, H, W00, W14, W09, W01, 0x428A2F98); 46| 41.7k| SHA2_32_F(H, A, B, C, D, E, F, G, W01, W15, W10, W02, 0x71374491); 47| 41.7k| SHA2_32_F(G, H, A, B, C, D, E, F, W02, W00, W11, W03, 0xB5C0FBCF); 48| 41.7k| SHA2_32_F(F, G, H, A, B, C, D, E, W03, W01, W12, W04, 0xE9B5DBA5); 49| 41.7k| SHA2_32_F(E, F, G, H, A, B, C, D, W04, W02, W13, W05, 0x3956C25B); 50| 41.7k| SHA2_32_F(D, E, F, G, H, A, B, C, W05, W03, W14, W06, 0x59F111F1); 51| 41.7k| SHA2_32_F(C, D, E, F, G, H, A, B, W06, W04, W15, W07, 0x923F82A4); 52| 41.7k| SHA2_32_F(B, C, D, E, F, G, H, A, W07, W05, W00, W08, 0xAB1C5ED5); 53| 41.7k| SHA2_32_F(A, B, C, D, E, F, G, H, W08, W06, W01, W09, 0xD807AA98); 54| 41.7k| SHA2_32_F(H, A, B, C, D, E, F, G, W09, W07, W02, W10, 0x12835B01); 55| 41.7k| SHA2_32_F(G, H, A, B, C, D, E, F, W10, W08, W03, W11, 0x243185BE); 56| 41.7k| SHA2_32_F(F, G, H, A, B, C, D, E, W11, W09, W04, W12, 0x550C7DC3); 57| 41.7k| SHA2_32_F(E, F, G, H, A, B, C, D, W12, W10, W05, W13, 0x72BE5D74); 58| 41.7k| SHA2_32_F(D, E, F, G, H, A, B, C, W13, W11, W06, W14, 0x80DEB1FE); 59| 41.7k| SHA2_32_F(C, D, E, F, G, H, A, B, W14, W12, W07, W15, 0x9BDC06A7); 60| 41.7k| SHA2_32_F(B, C, D, E, F, G, H, A, W15, W13, W08, W00, 0xC19BF174); 61| | 62| 41.7k| SHA2_32_F(A, B, C, D, E, F, G, H, W00, W14, W09, W01, 0xE49B69C1); 63| 41.7k| SHA2_32_F(H, A, B, C, D, E, F, G, W01, W15, W10, W02, 0xEFBE4786); 64| 41.7k| SHA2_32_F(G, H, A, B, C, D, E, F, W02, W00, W11, W03, 0x0FC19DC6); 65| 41.7k| SHA2_32_F(F, G, H, A, B, C, D, E, W03, W01, W12, W04, 0x240CA1CC); 66| 41.7k| SHA2_32_F(E, F, G, H, A, B, C, D, W04, W02, W13, W05, 0x2DE92C6F); 67| 41.7k| SHA2_32_F(D, E, F, G, H, A, B, C, W05, W03, W14, W06, 0x4A7484AA); 68| 41.7k| SHA2_32_F(C, D, E, F, G, H, A, B, W06, W04, W15, W07, 0x5CB0A9DC); 69| 41.7k| SHA2_32_F(B, C, D, E, F, G, H, A, W07, W05, W00, W08, 0x76F988DA); 70| 41.7k| SHA2_32_F(A, B, C, D, E, F, G, H, W08, W06, W01, W09, 0x983E5152); 71| 41.7k| SHA2_32_F(H, A, B, C, D, E, F, G, W09, W07, W02, W10, 0xA831C66D); 72| 41.7k| SHA2_32_F(G, H, A, B, C, D, E, F, W10, W08, W03, W11, 0xB00327C8); 73| 41.7k| SHA2_32_F(F, G, H, A, B, C, D, E, W11, W09, W04, W12, 0xBF597FC7); 74| 41.7k| SHA2_32_F(E, F, G, H, A, B, C, D, W12, W10, W05, W13, 0xC6E00BF3); 75| 41.7k| SHA2_32_F(D, E, F, G, H, A, B, C, W13, W11, W06, W14, 0xD5A79147); 76| 41.7k| SHA2_32_F(C, D, E, F, G, H, A, B, W14, W12, W07, W15, 0x06CA6351); 77| 41.7k| SHA2_32_F(B, C, D, E, F, G, H, A, W15, W13, W08, W00, 0x14292967); 78| | 79| 41.7k| SHA2_32_F(A, B, C, D, E, F, G, H, W00, W14, W09, W01, 0x27B70A85); 80| 41.7k| SHA2_32_F(H, A, B, C, D, E, F, G, W01, W15, W10, W02, 0x2E1B2138); 81| 41.7k| SHA2_32_F(G, H, A, B, C, D, E, F, W02, W00, W11, W03, 0x4D2C6DFC); 82| 41.7k| SHA2_32_F(F, G, H, A, B, C, D, E, W03, W01, W12, W04, 0x53380D13); 83| 41.7k| SHA2_32_F(E, F, G, H, A, B, C, D, W04, W02, W13, W05, 0x650A7354); 84| 41.7k| SHA2_32_F(D, E, F, G, H, A, B, C, W05, W03, W14, W06, 0x766A0ABB); 85| 41.7k| SHA2_32_F(C, D, E, F, G, H, A, B, W06, W04, W15, W07, 0x81C2C92E); 86| 41.7k| SHA2_32_F(B, C, D, E, F, G, H, A, W07, W05, W00, W08, 0x92722C85); 87| 41.7k| SHA2_32_F(A, B, C, D, E, F, G, H, W08, W06, W01, W09, 0xA2BFE8A1); 88| 41.7k| SHA2_32_F(H, A, B, C, D, E, F, G, W09, W07, W02, W10, 0xA81A664B); 89| 41.7k| SHA2_32_F(G, H, A, B, C, D, E, F, W10, W08, W03, W11, 0xC24B8B70); 90| 41.7k| SHA2_32_F(F, G, H, A, B, C, D, E, W11, W09, W04, W12, 0xC76C51A3); 91| 41.7k| SHA2_32_F(E, F, G, H, A, B, C, D, W12, W10, W05, W13, 0xD192E819); 92| 41.7k| SHA2_32_F(D, E, F, G, H, A, B, C, W13, W11, W06, W14, 0xD6990624); 93| 41.7k| SHA2_32_F(C, D, E, F, G, H, A, B, W14, W12, W07, W15, 0xF40E3585); 94| 41.7k| SHA2_32_F(B, C, D, E, F, G, H, A, W15, W13, W08, W00, 0x106AA070); 95| | 96| 41.7k| SHA2_32_F(A, B, C, D, E, F, G, H, W00, W14, W09, W01, 0x19A4C116); 97| 41.7k| SHA2_32_F(H, A, B, C, D, E, F, G, W01, W15, W10, W02, 0x1E376C08); 98| 41.7k| SHA2_32_F(G, H, A, B, C, D, E, F, W02, W00, W11, W03, 0x2748774C); 99| 41.7k| SHA2_32_F(F, G, H, A, B, C, D, E, W03, W01, W12, W04, 0x34B0BCB5); 100| 41.7k| SHA2_32_F(E, F, G, H, A, B, C, D, W04, W02, W13, W05, 0x391C0CB3); 101| 41.7k| SHA2_32_F(D, E, F, G, H, A, B, C, W05, W03, W14, W06, 0x4ED8AA4A); 102| 41.7k| SHA2_32_F(C, D, E, F, G, H, A, B, W06, W04, W15, W07, 0x5B9CCA4F); 103| 41.7k| SHA2_32_F(B, C, D, E, F, G, H, A, W07, W05, W00, W08, 0x682E6FF3); 104| 41.7k| SHA2_32_F(A, B, C, D, E, F, G, H, W08, W06, W01, W09, 0x748F82EE); 105| 41.7k| SHA2_32_F(H, A, B, C, D, E, F, G, W09, W07, W02, W10, 0x78A5636F); 106| 41.7k| SHA2_32_F(G, H, A, B, C, D, E, F, W10, W08, W03, W11, 0x84C87814); 107| 41.7k| SHA2_32_F(F, G, H, A, B, C, D, E, W11, W09, W04, W12, 0x8CC70208); 108| 41.7k| SHA2_32_F(E, F, G, H, A, B, C, D, W12, W10, W05, W13, 0x90BEFFFA); 109| 41.7k| SHA2_32_F(D, E, F, G, H, A, B, C, W13, W11, W06, W14, 0xA4506CEB); 110| 41.7k| SHA2_32_F(C, D, E, F, G, H, A, B, W14, W12, W07, W15, 0xBEF9A3F7); 111| 41.7k| SHA2_32_F(B, C, D, E, F, G, H, A, W15, W13, W08, W00, 0xC67178F2); 112| | 113| 41.7k| A = (digest[0] += A); 114| 41.7k| B = (digest[1] += B); 115| 41.7k| C = (digest[2] += C); 116| 41.7k| D = (digest[3] += D); 117| 41.7k| E = (digest[4] += E); 118| 41.7k| F = (digest[5] += F); 119| 41.7k| G = (digest[6] += G); 120| 41.7k| H = (digest[7] += H); 121| | 122| 41.7k| input += 64; 123| 41.7k| } 124| 9.38k|} _ZN5Botan7SHA_51215compress_digestERNSt3__16vectorImNS_16secure_allocatorImEEEEPKhm: 42| 194|void SHA_512::compress_digest(secure_vector& digest, const uint8_t input[], size_t blocks) { 43| 194|#if defined(BOTAN_HAS_SHA2_64_BMI2) 44| 194| if(CPUID::has_bmi2()) { ------------------ | Branch (44:7): [True: 194, False: 0] ------------------ 45| 194| return compress_digest_bmi2(digest, input, blocks); 46| 194| } 47| 0|#endif 48| | 49| 0| uint64_t A = digest[0], B = digest[1], C = digest[2], D = digest[3], E = digest[4], F = digest[5], G = digest[6], 50| 0| H = digest[7]; 51| | 52| 0| for(size_t i = 0; i != blocks; ++i) { ------------------ | Branch (52:22): [True: 0, False: 0] ------------------ 53| 0| uint64_t W00 = load_be(input, 0); 54| 0| uint64_t W01 = load_be(input, 1); 55| 0| uint64_t W02 = load_be(input, 2); 56| 0| uint64_t W03 = load_be(input, 3); 57| 0| uint64_t W04 = load_be(input, 4); 58| 0| uint64_t W05 = load_be(input, 5); 59| 0| uint64_t W06 = load_be(input, 6); 60| 0| uint64_t W07 = load_be(input, 7); 61| 0| uint64_t W08 = load_be(input, 8); 62| 0| uint64_t W09 = load_be(input, 9); 63| 0| uint64_t W10 = load_be(input, 10); 64| 0| uint64_t W11 = load_be(input, 11); 65| 0| uint64_t W12 = load_be(input, 12); 66| 0| uint64_t W13 = load_be(input, 13); 67| 0| uint64_t W14 = load_be(input, 14); 68| 0| uint64_t W15 = load_be(input, 15); 69| | 70| 0| SHA2_64_F(A, B, C, D, E, F, G, H, W00, W14, W09, W01, 0x428A2F98D728AE22); 71| 0| SHA2_64_F(H, A, B, C, D, E, F, G, W01, W15, W10, W02, 0x7137449123EF65CD); 72| 0| SHA2_64_F(G, H, A, B, C, D, E, F, W02, W00, W11, W03, 0xB5C0FBCFEC4D3B2F); 73| 0| SHA2_64_F(F, G, H, A, B, C, D, E, W03, W01, W12, W04, 0xE9B5DBA58189DBBC); 74| 0| SHA2_64_F(E, F, G, H, A, B, C, D, W04, W02, W13, W05, 0x3956C25BF348B538); 75| 0| SHA2_64_F(D, E, F, G, H, A, B, C, W05, W03, W14, W06, 0x59F111F1B605D019); 76| 0| SHA2_64_F(C, D, E, F, G, H, A, B, W06, W04, W15, W07, 0x923F82A4AF194F9B); 77| 0| SHA2_64_F(B, C, D, E, F, G, H, A, W07, W05, W00, W08, 0xAB1C5ED5DA6D8118); 78| 0| SHA2_64_F(A, B, C, D, E, F, G, H, W08, W06, W01, W09, 0xD807AA98A3030242); 79| 0| SHA2_64_F(H, A, B, C, D, E, F, G, W09, W07, W02, W10, 0x12835B0145706FBE); 80| 0| SHA2_64_F(G, H, A, B, C, D, E, F, W10, W08, W03, W11, 0x243185BE4EE4B28C); 81| 0| SHA2_64_F(F, G, H, A, B, C, D, E, W11, W09, W04, W12, 0x550C7DC3D5FFB4E2); 82| 0| SHA2_64_F(E, F, G, H, A, B, C, D, W12, W10, W05, W13, 0x72BE5D74F27B896F); 83| 0| SHA2_64_F(D, E, F, G, H, A, B, C, W13, W11, W06, W14, 0x80DEB1FE3B1696B1); 84| 0| SHA2_64_F(C, D, E, F, G, H, A, B, W14, W12, W07, W15, 0x9BDC06A725C71235); 85| 0| SHA2_64_F(B, C, D, E, F, G, H, A, W15, W13, W08, W00, 0xC19BF174CF692694); 86| 0| SHA2_64_F(A, B, C, D, E, F, G, H, W00, W14, W09, W01, 0xE49B69C19EF14AD2); 87| 0| SHA2_64_F(H, A, B, C, D, E, F, G, W01, W15, W10, W02, 0xEFBE4786384F25E3); 88| 0| SHA2_64_F(G, H, A, B, C, D, E, F, W02, W00, W11, W03, 0x0FC19DC68B8CD5B5); 89| 0| SHA2_64_F(F, G, H, A, B, C, D, E, W03, W01, W12, W04, 0x240CA1CC77AC9C65); 90| 0| SHA2_64_F(E, F, G, H, A, B, C, D, W04, W02, W13, W05, 0x2DE92C6F592B0275); 91| 0| SHA2_64_F(D, E, F, G, H, A, B, C, W05, W03, W14, W06, 0x4A7484AA6EA6E483); 92| 0| SHA2_64_F(C, D, E, F, G, H, A, B, W06, W04, W15, W07, 0x5CB0A9DCBD41FBD4); 93| 0| SHA2_64_F(B, C, D, E, F, G, H, A, W07, W05, W00, W08, 0x76F988DA831153B5); 94| 0| SHA2_64_F(A, B, C, D, E, F, G, H, W08, W06, W01, W09, 0x983E5152EE66DFAB); 95| 0| SHA2_64_F(H, A, B, C, D, E, F, G, W09, W07, W02, W10, 0xA831C66D2DB43210); 96| 0| SHA2_64_F(G, H, A, B, C, D, E, F, W10, W08, W03, W11, 0xB00327C898FB213F); 97| 0| SHA2_64_F(F, G, H, A, B, C, D, E, W11, W09, W04, W12, 0xBF597FC7BEEF0EE4); 98| 0| SHA2_64_F(E, F, G, H, A, B, C, D, W12, W10, W05, W13, 0xC6E00BF33DA88FC2); 99| 0| SHA2_64_F(D, E, F, G, H, A, B, C, W13, W11, W06, W14, 0xD5A79147930AA725); 100| 0| SHA2_64_F(C, D, E, F, G, H, A, B, W14, W12, W07, W15, 0x06CA6351E003826F); 101| 0| SHA2_64_F(B, C, D, E, F, G, H, A, W15, W13, W08, W00, 0x142929670A0E6E70); 102| 0| SHA2_64_F(A, B, C, D, E, F, G, H, W00, W14, W09, W01, 0x27B70A8546D22FFC); 103| 0| SHA2_64_F(H, A, B, C, D, E, F, G, W01, W15, W10, W02, 0x2E1B21385C26C926); 104| 0| SHA2_64_F(G, H, A, B, C, D, E, F, W02, W00, W11, W03, 0x4D2C6DFC5AC42AED); 105| 0| SHA2_64_F(F, G, H, A, B, C, D, E, W03, W01, W12, W04, 0x53380D139D95B3DF); 106| 0| SHA2_64_F(E, F, G, H, A, B, C, D, W04, W02, W13, W05, 0x650A73548BAF63DE); 107| 0| SHA2_64_F(D, E, F, G, H, A, B, C, W05, W03, W14, W06, 0x766A0ABB3C77B2A8); 108| 0| SHA2_64_F(C, D, E, F, G, H, A, B, W06, W04, W15, W07, 0x81C2C92E47EDAEE6); 109| 0| SHA2_64_F(B, C, D, E, F, G, H, A, W07, W05, W00, W08, 0x92722C851482353B); 110| 0| SHA2_64_F(A, B, C, D, E, F, G, H, W08, W06, W01, W09, 0xA2BFE8A14CF10364); 111| 0| SHA2_64_F(H, A, B, C, D, E, F, G, W09, W07, W02, W10, 0xA81A664BBC423001); 112| 0| SHA2_64_F(G, H, A, B, C, D, E, F, W10, W08, W03, W11, 0xC24B8B70D0F89791); 113| 0| SHA2_64_F(F, G, H, A, B, C, D, E, W11, W09, W04, W12, 0xC76C51A30654BE30); 114| 0| SHA2_64_F(E, F, G, H, A, B, C, D, W12, W10, W05, W13, 0xD192E819D6EF5218); 115| 0| SHA2_64_F(D, E, F, G, H, A, B, C, W13, W11, W06, W14, 0xD69906245565A910); 116| 0| SHA2_64_F(C, D, E, F, G, H, A, B, W14, W12, W07, W15, 0xF40E35855771202A); 117| 0| SHA2_64_F(B, C, D, E, F, G, H, A, W15, W13, W08, W00, 0x106AA07032BBD1B8); 118| 0| SHA2_64_F(A, B, C, D, E, F, G, H, W00, W14, W09, W01, 0x19A4C116B8D2D0C8); 119| 0| SHA2_64_F(H, A, B, C, D, E, F, G, W01, W15, W10, W02, 0x1E376C085141AB53); 120| 0| SHA2_64_F(G, H, A, B, C, D, E, F, W02, W00, W11, W03, 0x2748774CDF8EEB99); 121| 0| SHA2_64_F(F, G, H, A, B, C, D, E, W03, W01, W12, W04, 0x34B0BCB5E19B48A8); 122| 0| SHA2_64_F(E, F, G, H, A, B, C, D, W04, W02, W13, W05, 0x391C0CB3C5C95A63); 123| 0| SHA2_64_F(D, E, F, G, H, A, B, C, W05, W03, W14, W06, 0x4ED8AA4AE3418ACB); 124| 0| SHA2_64_F(C, D, E, F, G, H, A, B, W06, W04, W15, W07, 0x5B9CCA4F7763E373); 125| 0| SHA2_64_F(B, C, D, E, F, G, H, A, W07, W05, W00, W08, 0x682E6FF3D6B2B8A3); 126| 0| SHA2_64_F(A, B, C, D, E, F, G, H, W08, W06, W01, W09, 0x748F82EE5DEFB2FC); 127| 0| SHA2_64_F(H, A, B, C, D, E, F, G, W09, W07, W02, W10, 0x78A5636F43172F60); 128| 0| SHA2_64_F(G, H, A, B, C, D, E, F, W10, W08, W03, W11, 0x84C87814A1F0AB72); 129| 0| SHA2_64_F(F, G, H, A, B, C, D, E, W11, W09, W04, W12, 0x8CC702081A6439EC); 130| 0| SHA2_64_F(E, F, G, H, A, B, C, D, W12, W10, W05, W13, 0x90BEFFFA23631E28); 131| 0| SHA2_64_F(D, E, F, G, H, A, B, C, W13, W11, W06, W14, 0xA4506CEBDE82BDE9); 132| 0| SHA2_64_F(C, D, E, F, G, H, A, B, W14, W12, W07, W15, 0xBEF9A3F7B2C67915); 133| 0| SHA2_64_F(B, C, D, E, F, G, H, A, W15, W13, W08, W00, 0xC67178F2E372532B); 134| 0| SHA2_64_F(A, B, C, D, E, F, G, H, W00, W14, W09, W01, 0xCA273ECEEA26619C); 135| 0| SHA2_64_F(H, A, B, C, D, E, F, G, W01, W15, W10, W02, 0xD186B8C721C0C207); 136| 0| SHA2_64_F(G, H, A, B, C, D, E, F, W02, W00, W11, W03, 0xEADA7DD6CDE0EB1E); 137| 0| SHA2_64_F(F, G, H, A, B, C, D, E, W03, W01, W12, W04, 0xF57D4F7FEE6ED178); 138| 0| SHA2_64_F(E, F, G, H, A, B, C, D, W04, W02, W13, W05, 0x06F067AA72176FBA); 139| 0| SHA2_64_F(D, E, F, G, H, A, B, C, W05, W03, W14, W06, 0x0A637DC5A2C898A6); 140| 0| SHA2_64_F(C, D, E, F, G, H, A, B, W06, W04, W15, W07, 0x113F9804BEF90DAE); 141| 0| SHA2_64_F(B, C, D, E, F, G, H, A, W07, W05, W00, W08, 0x1B710B35131C471B); 142| 0| SHA2_64_F(A, B, C, D, E, F, G, H, W08, W06, W01, W09, 0x28DB77F523047D84); 143| 0| SHA2_64_F(H, A, B, C, D, E, F, G, W09, W07, W02, W10, 0x32CAAB7B40C72493); 144| 0| SHA2_64_F(G, H, A, B, C, D, E, F, W10, W08, W03, W11, 0x3C9EBE0A15C9BEBC); 145| 0| SHA2_64_F(F, G, H, A, B, C, D, E, W11, W09, W04, W12, 0x431D67C49C100D4C); 146| 0| SHA2_64_F(E, F, G, H, A, B, C, D, W12, W10, W05, W13, 0x4CC5D4BECB3E42B6); 147| 0| SHA2_64_F(D, E, F, G, H, A, B, C, W13, W11, W06, W14, 0x597F299CFC657E2A); 148| 0| SHA2_64_F(C, D, E, F, G, H, A, B, W14, W12, W07, W15, 0x5FCB6FAB3AD6FAEC); 149| 0| SHA2_64_F(B, C, D, E, F, G, H, A, W15, W13, W08, W00, 0x6C44198C4A475817); 150| | 151| 0| A = (digest[0] += A); 152| 0| B = (digest[1] += B); 153| 0| C = (digest[2] += C); 154| 0| D = (digest[3] += D); 155| 0| E = (digest[4] += E); 156| 0| F = (digest[5] += F); 157| 0| G = (digest[6] += G); 158| 0| H = (digest[7] += H); 159| | 160| 0| input += 128; 161| 0| } 162| 0|} _ZN5Botan11SHA_512_25610compress_nEPKhm: 172| 24|void SHA_512_256::compress_n(const uint8_t input[], size_t blocks) { 173| 24| SHA_512::compress_digest(m_digest, input, blocks); 174| 24|} _ZN5Botan7SHA_38410compress_nEPKhm: 176| 110|void SHA_384::compress_n(const uint8_t input[], size_t blocks) { SHA_512::compress_digest(m_digest, input, blocks); } _ZN5Botan7SHA_51210compress_nEPKhm: 178| 60|void SHA_512::compress_n(const uint8_t input[], size_t blocks) { SHA_512::compress_digest(m_digest, input, blocks); } _ZN5Botan11SHA_512_2568copy_outEPh: 180| 12|void SHA_512_256::copy_out(uint8_t output[]) { copy_out_vec_be(output, output_length(), m_digest); } _ZN5Botan7SHA_3848copy_outEPh: 182| 55|void SHA_384::copy_out(uint8_t output[]) { copy_out_vec_be(output, output_length(), m_digest); } _ZN5Botan7SHA_5128copy_outEPh: 184| 30|void SHA_512::copy_out(uint8_t output[]) { copy_out_vec_be(output, output_length(), m_digest); } _ZN5Botan11SHA_512_2565clearEv: 186| 24|void SHA_512_256::clear() { 187| 24| MDx_HashFunction::clear(); 188| 24| m_digest[0] = 0x22312194FC2BF72C; 189| 24| m_digest[1] = 0x9F555FA3C84C64C2; 190| 24| m_digest[2] = 0x2393B86B6F53B151; 191| 24| m_digest[3] = 0x963877195940EABD; 192| 24| m_digest[4] = 0x96283EE2A88EFFE3; 193| 24| m_digest[5] = 0xBE5E1E2553863992; 194| 24| m_digest[6] = 0x2B0199FC2C85B8AA; 195| 24| m_digest[7] = 0x0EB72DDC81C52CA2; 196| 24|} _ZN5Botan7SHA_3845clearEv: 198| 110|void SHA_384::clear() { 199| 110| MDx_HashFunction::clear(); 200| 110| m_digest[0] = 0xCBBB9D5DC1059ED8; 201| 110| m_digest[1] = 0x629A292A367CD507; 202| 110| m_digest[2] = 0x9159015A3070DD17; 203| 110| m_digest[3] = 0x152FECD8F70E5939; 204| 110| m_digest[4] = 0x67332667FFC00B31; 205| 110| m_digest[5] = 0x8EB44A8768581511; 206| 110| m_digest[6] = 0xDB0C2E0D64F98FA7; 207| 110| m_digest[7] = 0x47B5481DBEFA4FA4; 208| 110|} _ZN5Botan7SHA_5125clearEv: 210| 60|void SHA_512::clear() { 211| 60| MDx_HashFunction::clear(); 212| 60| m_digest[0] = 0x6A09E667F3BCC908; 213| 60| m_digest[1] = 0xBB67AE8584CAA73B; 214| 60| m_digest[2] = 0x3C6EF372FE94F82B; 215| 60| m_digest[3] = 0xA54FF53A5F1D36F1; 216| 60| m_digest[4] = 0x510E527FADE682D1; 217| 60| m_digest[5] = 0x9B05688C2B3E6C1F; 218| 60| m_digest[6] = 0x1F83D9ABFB41BD6B; 219| 60| m_digest[7] = 0x5BE0CD19137E2179; 220| 60|} _ZN5Botan7SHA_51220compress_digest_bmi2ERNSt3__16vectorImNS_16secure_allocatorImEEEEPKhm: 16| 194|void SHA_512::compress_digest_bmi2(secure_vector& digest, const uint8_t input[], size_t blocks) { 17| 194| uint64_t A = digest[0], B = digest[1], C = digest[2], D = digest[3], E = digest[4], F = digest[5], G = digest[6], 18| 194| H = digest[7]; 19| | 20| 849| for(size_t i = 0; i != blocks; ++i) { ------------------ | Branch (20:22): [True: 655, False: 194] ------------------ 21| 655| uint64_t W00 = load_be(input, 0); 22| 655| uint64_t W01 = load_be(input, 1); 23| 655| uint64_t W02 = load_be(input, 2); 24| 655| uint64_t W03 = load_be(input, 3); 25| 655| uint64_t W04 = load_be(input, 4); 26| 655| uint64_t W05 = load_be(input, 5); 27| 655| uint64_t W06 = load_be(input, 6); 28| 655| uint64_t W07 = load_be(input, 7); 29| 655| uint64_t W08 = load_be(input, 8); 30| 655| uint64_t W09 = load_be(input, 9); 31| 655| uint64_t W10 = load_be(input, 10); 32| 655| uint64_t W11 = load_be(input, 11); 33| 655| uint64_t W12 = load_be(input, 12); 34| 655| uint64_t W13 = load_be(input, 13); 35| 655| uint64_t W14 = load_be(input, 14); 36| 655| uint64_t W15 = load_be(input, 15); 37| | 38| 655| SHA2_64_F(A, B, C, D, E, F, G, H, W00, W14, W09, W01, 0x428A2F98D728AE22); 39| 655| SHA2_64_F(H, A, B, C, D, E, F, G, W01, W15, W10, W02, 0x7137449123EF65CD); 40| 655| SHA2_64_F(G, H, A, B, C, D, E, F, W02, W00, W11, W03, 0xB5C0FBCFEC4D3B2F); 41| 655| SHA2_64_F(F, G, H, A, B, C, D, E, W03, W01, W12, W04, 0xE9B5DBA58189DBBC); 42| 655| SHA2_64_F(E, F, G, H, A, B, C, D, W04, W02, W13, W05, 0x3956C25BF348B538); 43| 655| SHA2_64_F(D, E, F, G, H, A, B, C, W05, W03, W14, W06, 0x59F111F1B605D019); 44| 655| SHA2_64_F(C, D, E, F, G, H, A, B, W06, W04, W15, W07, 0x923F82A4AF194F9B); 45| 655| SHA2_64_F(B, C, D, E, F, G, H, A, W07, W05, W00, W08, 0xAB1C5ED5DA6D8118); 46| 655| SHA2_64_F(A, B, C, D, E, F, G, H, W08, W06, W01, W09, 0xD807AA98A3030242); 47| 655| SHA2_64_F(H, A, B, C, D, E, F, G, W09, W07, W02, W10, 0x12835B0145706FBE); 48| 655| SHA2_64_F(G, H, A, B, C, D, E, F, W10, W08, W03, W11, 0x243185BE4EE4B28C); 49| 655| SHA2_64_F(F, G, H, A, B, C, D, E, W11, W09, W04, W12, 0x550C7DC3D5FFB4E2); 50| 655| SHA2_64_F(E, F, G, H, A, B, C, D, W12, W10, W05, W13, 0x72BE5D74F27B896F); 51| 655| SHA2_64_F(D, E, F, G, H, A, B, C, W13, W11, W06, W14, 0x80DEB1FE3B1696B1); 52| 655| SHA2_64_F(C, D, E, F, G, H, A, B, W14, W12, W07, W15, 0x9BDC06A725C71235); 53| 655| SHA2_64_F(B, C, D, E, F, G, H, A, W15, W13, W08, W00, 0xC19BF174CF692694); 54| 655| SHA2_64_F(A, B, C, D, E, F, G, H, W00, W14, W09, W01, 0xE49B69C19EF14AD2); 55| 655| SHA2_64_F(H, A, B, C, D, E, F, G, W01, W15, W10, W02, 0xEFBE4786384F25E3); 56| 655| SHA2_64_F(G, H, A, B, C, D, E, F, W02, W00, W11, W03, 0x0FC19DC68B8CD5B5); 57| 655| SHA2_64_F(F, G, H, A, B, C, D, E, W03, W01, W12, W04, 0x240CA1CC77AC9C65); 58| 655| SHA2_64_F(E, F, G, H, A, B, C, D, W04, W02, W13, W05, 0x2DE92C6F592B0275); 59| 655| SHA2_64_F(D, E, F, G, H, A, B, C, W05, W03, W14, W06, 0x4A7484AA6EA6E483); 60| 655| SHA2_64_F(C, D, E, F, G, H, A, B, W06, W04, W15, W07, 0x5CB0A9DCBD41FBD4); 61| 655| SHA2_64_F(B, C, D, E, F, G, H, A, W07, W05, W00, W08, 0x76F988DA831153B5); 62| 655| SHA2_64_F(A, B, C, D, E, F, G, H, W08, W06, W01, W09, 0x983E5152EE66DFAB); 63| 655| SHA2_64_F(H, A, B, C, D, E, F, G, W09, W07, W02, W10, 0xA831C66D2DB43210); 64| 655| SHA2_64_F(G, H, A, B, C, D, E, F, W10, W08, W03, W11, 0xB00327C898FB213F); 65| 655| SHA2_64_F(F, G, H, A, B, C, D, E, W11, W09, W04, W12, 0xBF597FC7BEEF0EE4); 66| 655| SHA2_64_F(E, F, G, H, A, B, C, D, W12, W10, W05, W13, 0xC6E00BF33DA88FC2); 67| 655| SHA2_64_F(D, E, F, G, H, A, B, C, W13, W11, W06, W14, 0xD5A79147930AA725); 68| 655| SHA2_64_F(C, D, E, F, G, H, A, B, W14, W12, W07, W15, 0x06CA6351E003826F); 69| 655| SHA2_64_F(B, C, D, E, F, G, H, A, W15, W13, W08, W00, 0x142929670A0E6E70); 70| 655| SHA2_64_F(A, B, C, D, E, F, G, H, W00, W14, W09, W01, 0x27B70A8546D22FFC); 71| 655| SHA2_64_F(H, A, B, C, D, E, F, G, W01, W15, W10, W02, 0x2E1B21385C26C926); 72| 655| SHA2_64_F(G, H, A, B, C, D, E, F, W02, W00, W11, W03, 0x4D2C6DFC5AC42AED); 73| 655| SHA2_64_F(F, G, H, A, B, C, D, E, W03, W01, W12, W04, 0x53380D139D95B3DF); 74| 655| SHA2_64_F(E, F, G, H, A, B, C, D, W04, W02, W13, W05, 0x650A73548BAF63DE); 75| 655| SHA2_64_F(D, E, F, G, H, A, B, C, W05, W03, W14, W06, 0x766A0ABB3C77B2A8); 76| 655| SHA2_64_F(C, D, E, F, G, H, A, B, W06, W04, W15, W07, 0x81C2C92E47EDAEE6); 77| 655| SHA2_64_F(B, C, D, E, F, G, H, A, W07, W05, W00, W08, 0x92722C851482353B); 78| 655| SHA2_64_F(A, B, C, D, E, F, G, H, W08, W06, W01, W09, 0xA2BFE8A14CF10364); 79| 655| SHA2_64_F(H, A, B, C, D, E, F, G, W09, W07, W02, W10, 0xA81A664BBC423001); 80| 655| SHA2_64_F(G, H, A, B, C, D, E, F, W10, W08, W03, W11, 0xC24B8B70D0F89791); 81| 655| SHA2_64_F(F, G, H, A, B, C, D, E, W11, W09, W04, W12, 0xC76C51A30654BE30); 82| 655| SHA2_64_F(E, F, G, H, A, B, C, D, W12, W10, W05, W13, 0xD192E819D6EF5218); 83| 655| SHA2_64_F(D, E, F, G, H, A, B, C, W13, W11, W06, W14, 0xD69906245565A910); 84| 655| SHA2_64_F(C, D, E, F, G, H, A, B, W14, W12, W07, W15, 0xF40E35855771202A); 85| 655| SHA2_64_F(B, C, D, E, F, G, H, A, W15, W13, W08, W00, 0x106AA07032BBD1B8); 86| 655| SHA2_64_F(A, B, C, D, E, F, G, H, W00, W14, W09, W01, 0x19A4C116B8D2D0C8); 87| 655| SHA2_64_F(H, A, B, C, D, E, F, G, W01, W15, W10, W02, 0x1E376C085141AB53); 88| 655| SHA2_64_F(G, H, A, B, C, D, E, F, W02, W00, W11, W03, 0x2748774CDF8EEB99); 89| 655| SHA2_64_F(F, G, H, A, B, C, D, E, W03, W01, W12, W04, 0x34B0BCB5E19B48A8); 90| 655| SHA2_64_F(E, F, G, H, A, B, C, D, W04, W02, W13, W05, 0x391C0CB3C5C95A63); 91| 655| SHA2_64_F(D, E, F, G, H, A, B, C, W05, W03, W14, W06, 0x4ED8AA4AE3418ACB); 92| 655| SHA2_64_F(C, D, E, F, G, H, A, B, W06, W04, W15, W07, 0x5B9CCA4F7763E373); 93| 655| SHA2_64_F(B, C, D, E, F, G, H, A, W07, W05, W00, W08, 0x682E6FF3D6B2B8A3); 94| 655| SHA2_64_F(A, B, C, D, E, F, G, H, W08, W06, W01, W09, 0x748F82EE5DEFB2FC); 95| 655| SHA2_64_F(H, A, B, C, D, E, F, G, W09, W07, W02, W10, 0x78A5636F43172F60); 96| 655| SHA2_64_F(G, H, A, B, C, D, E, F, W10, W08, W03, W11, 0x84C87814A1F0AB72); 97| 655| SHA2_64_F(F, G, H, A, B, C, D, E, W11, W09, W04, W12, 0x8CC702081A6439EC); 98| 655| SHA2_64_F(E, F, G, H, A, B, C, D, W12, W10, W05, W13, 0x90BEFFFA23631E28); 99| 655| SHA2_64_F(D, E, F, G, H, A, B, C, W13, W11, W06, W14, 0xA4506CEBDE82BDE9); 100| 655| SHA2_64_F(C, D, E, F, G, H, A, B, W14, W12, W07, W15, 0xBEF9A3F7B2C67915); 101| 655| SHA2_64_F(B, C, D, E, F, G, H, A, W15, W13, W08, W00, 0xC67178F2E372532B); 102| 655| SHA2_64_F(A, B, C, D, E, F, G, H, W00, W14, W09, W01, 0xCA273ECEEA26619C); 103| 655| SHA2_64_F(H, A, B, C, D, E, F, G, W01, W15, W10, W02, 0xD186B8C721C0C207); 104| 655| SHA2_64_F(G, H, A, B, C, D, E, F, W02, W00, W11, W03, 0xEADA7DD6CDE0EB1E); 105| 655| SHA2_64_F(F, G, H, A, B, C, D, E, W03, W01, W12, W04, 0xF57D4F7FEE6ED178); 106| 655| SHA2_64_F(E, F, G, H, A, B, C, D, W04, W02, W13, W05, 0x06F067AA72176FBA); 107| 655| SHA2_64_F(D, E, F, G, H, A, B, C, W05, W03, W14, W06, 0x0A637DC5A2C898A6); 108| 655| SHA2_64_F(C, D, E, F, G, H, A, B, W06, W04, W15, W07, 0x113F9804BEF90DAE); 109| 655| SHA2_64_F(B, C, D, E, F, G, H, A, W07, W05, W00, W08, 0x1B710B35131C471B); 110| 655| SHA2_64_F(A, B, C, D, E, F, G, H, W08, W06, W01, W09, 0x28DB77F523047D84); 111| 655| SHA2_64_F(H, A, B, C, D, E, F, G, W09, W07, W02, W10, 0x32CAAB7B40C72493); 112| 655| SHA2_64_F(G, H, A, B, C, D, E, F, W10, W08, W03, W11, 0x3C9EBE0A15C9BEBC); 113| 655| SHA2_64_F(F, G, H, A, B, C, D, E, W11, W09, W04, W12, 0x431D67C49C100D4C); 114| 655| SHA2_64_F(E, F, G, H, A, B, C, D, W12, W10, W05, W13, 0x4CC5D4BECB3E42B6); 115| 655| SHA2_64_F(D, E, F, G, H, A, B, C, W13, W11, W06, W14, 0x597F299CFC657E2A); 116| 655| SHA2_64_F(C, D, E, F, G, H, A, B, W14, W12, W07, W15, 0x5FCB6FAB3AD6FAEC); 117| 655| SHA2_64_F(B, C, D, E, F, G, H, A, W15, W13, W08, W00, 0x6C44198C4A475817); 118| | 119| 655| A = (digest[0] += A); 120| 655| B = (digest[1] += B); 121| 655| C = (digest[2] += C); 122| 655| D = (digest[3] += D); 123| 655| E = (digest[4] += E); 124| 655| F = (digest[5] += F); 125| 655| G = (digest[6] += G); 126| 655| H = (digest[7] += H); 127| | 128| 655| input += 128; 129| 655| } 130| 194|} _ZN5Botan6BigInt3addEPKmmNS0_4SignE: 16| 3.55k|BigInt& BigInt::add(const word y[], size_t y_words, Sign y_sign) { 17| 3.55k| const size_t x_sw = sig_words(); 18| | 19| 3.55k| grow_to(std::max(x_sw, y_words) + 1); 20| | 21| 3.55k| if(sign() == y_sign) { ------------------ | Branch (21:7): [True: 3.46k, False: 96] ------------------ 22| 3.46k| bigint_add2(mutable_data(), size() - 1, y, y_words); 23| 3.46k| } else { 24| 96| const int32_t relative_size = bigint_cmp(data(), x_sw, y, y_words); 25| | 26| 96| if(relative_size >= 0) { ------------------ | Branch (26:10): [True: 0, False: 96] ------------------ 27| | // *this >= y 28| 0| bigint_sub2(mutable_data(), x_sw, y, y_words); 29| 96| } else { 30| | // *this < y 31| 96| bigint_sub2_rev(mutable_data(), y, y_words); 32| 96| } 33| | 34| | //this->sign_fixup(relative_size, y_sign); 35| 96| if(relative_size < 0) { ------------------ | Branch (35:10): [True: 96, False: 0] ------------------ 36| 96| set_sign(y_sign); 37| 96| } else if(relative_size == 0) { ------------------ | Branch (37:17): [True: 0, False: 0] ------------------ 38| 0| set_sign(Positive); 39| 0| } 40| 96| } 41| | 42| 3.55k| return (*this); 43| 3.55k|} _ZN5Botan6BigInt7rev_subEPKmmRNSt3__16vectorImNS_16secure_allocatorImEEEE: 130| 3.55k|BigInt& BigInt::rev_sub(const word y[], size_t y_sw, secure_vector& ws) { 131| 3.55k| if(this->sign() != BigInt::Positive) { ------------------ | Branch (131:7): [True: 0, False: 3.55k] ------------------ 132| 0| throw Invalid_State("BigInt::sub_rev requires this is positive"); 133| 0| } 134| | 135| 3.55k| const size_t x_sw = this->sig_words(); 136| | 137| 3.55k| ws.resize(std::max(x_sw, y_sw)); 138| 3.55k| clear_mem(ws.data(), ws.size()); 139| | 140| 3.55k| const int32_t relative_size = bigint_sub_abs(ws.data(), data(), x_sw, y, y_sw); 141| | 142| 3.55k| this->cond_flip_sign(relative_size > 0); 143| 3.55k| this->swap_reg(ws); 144| | 145| 3.55k| return (*this); 146| 3.55k|} _ZN5Botan6BigInt3mulERKS0_RNSt3__16vectorImNS_16secure_allocatorImEEEE: 156| 7.11k|BigInt& BigInt::mul(const BigInt& y, secure_vector& ws) { 157| 7.11k| const size_t x_sw = sig_words(); 158| 7.11k| const size_t y_sw = y.sig_words(); 159| 7.11k| set_sign((sign() == y.sign()) ? Positive : Negative); ------------------ | Branch (159:13): [True: 7.11k, False: 0] ------------------ 160| | 161| 7.11k| if(x_sw == 0 || y_sw == 0) { ------------------ | Branch (161:7): [True: 537, False: 6.57k] | Branch (161:20): [True: 0, False: 6.57k] ------------------ 162| 537| clear(); 163| 537| set_sign(Positive); 164| 6.57k| } else if(x_sw == 1 && y_sw) { ------------------ | Branch (164:14): [True: 1.51k, False: 5.06k] | Branch (164:27): [True: 1.51k, False: 0] ------------------ 165| 1.51k| grow_to(y_sw + 1); 166| 1.51k| bigint_linmul3(mutable_data(), y.data(), y_sw, word_at(0)); 167| 5.06k| } else if(y_sw == 1 && x_sw) { ------------------ | Branch (167:14): [True: 0, False: 5.06k] | Branch (167:27): [True: 0, False: 0] ------------------ 168| 0| word carry = bigint_linmul2(mutable_data(), x_sw, y.word_at(0)); 169| 0| set_word_at(x_sw, carry); 170| 5.06k| } else { 171| 5.06k| const size_t new_size = x_sw + y_sw + 1; 172| 5.06k| ws.resize(new_size); 173| 5.06k| secure_vector z_reg(new_size); 174| | 175| 5.06k| bigint_mul(z_reg.data(), z_reg.size(), data(), size(), x_sw, y.data(), y.size(), y_sw, ws.data(), ws.size()); 176| | 177| 5.06k| this->swap_reg(z_reg); 178| 5.06k| } 179| | 180| 7.11k| return (*this); 181| 7.11k|} _ZN5Botan6BigInt6squareERNSt3__16vectorImNS_16secure_allocatorImEEEE: 183| 1.18k|BigInt& BigInt::square(secure_vector& ws) { 184| 1.18k| const size_t sw = sig_words(); 185| | 186| 1.18k| secure_vector z(2 * sw); 187| 1.18k| ws.resize(z.size()); 188| | 189| 1.18k| bigint_sqr(z.data(), z.size(), data(), size(), sw, ws.data(), ws.size()); 190| | 191| 1.18k| swap_reg(z); 192| 1.18k| set_sign(BigInt::Positive); 193| | 194| 1.18k| return (*this); 195| 1.18k|} _ZN5Botan6BigIntmLEm: 197| 3.64M|BigInt& BigInt::operator*=(word y) { 198| 3.64M| if(y == 0) { ------------------ | Branch (198:7): [True: 0, False: 3.64M] ------------------ 199| 0| clear(); 200| 0| set_sign(Positive); 201| 0| } 202| | 203| 3.64M| const word carry = bigint_linmul2(mutable_data(), size(), y); 204| 3.64M| set_word_at(size(), carry); 205| | 206| 3.64M| return (*this); 207| 3.64M|} _ZN5Botan6BigIntrSEm: 277| 7.11k|BigInt& BigInt::operator>>=(size_t shift) { 278| 7.11k| const size_t shift_words = shift / BOTAN_MP_WORD_BITS; ------------------ | | 50| 7.11k|#define BOTAN_MP_WORD_BITS 64 ------------------ 279| 7.11k| const size_t shift_bits = shift % BOTAN_MP_WORD_BITS; ------------------ | | 50| 7.11k|#define BOTAN_MP_WORD_BITS 64 ------------------ 280| | 281| 7.11k| bigint_shr1(m_data.mutable_data(), m_data.size(), shift_words, shift_bits); 282| | 283| 7.11k| if(is_negative() && is_zero()) { ------------------ | Branch (283:7): [True: 0, False: 7.11k] | Branch (283:24): [True: 0, False: 0] ------------------ 284| 0| set_sign(Positive); 285| 0| } 286| | 287| 7.11k| return (*this); 288| 7.11k|} _ZN5BotanmlERKNS_6BigIntES2_: 46| 1.18k|BigInt operator*(const BigInt& x, const BigInt& y) { 47| 1.18k| const size_t x_sw = x.sig_words(); 48| 1.18k| const size_t y_sw = y.sig_words(); 49| | 50| 1.18k| BigInt z = BigInt::with_capacity(x.size() + y.size()); 51| | 52| 1.18k| if(x_sw == 1 && y_sw) { ------------------ | Branch (52:7): [True: 96, False: 1.09k] | Branch (52:20): [True: 96, False: 0] ------------------ 53| 96| bigint_linmul3(z.mutable_data(), y.data(), y_sw, x.word_at(0)); 54| 1.09k| } else if(y_sw == 1 && x_sw) { ------------------ | Branch (54:14): [True: 20, False: 1.07k] | Branch (54:27): [True: 20, False: 0] ------------------ 55| 20| bigint_linmul3(z.mutable_data(), x.data(), x_sw, y.word_at(0)); 56| 1.07k| } else if(x_sw && y_sw) { ------------------ | Branch (56:14): [True: 1.07k, False: 0] | Branch (56:22): [True: 1.07k, False: 0] ------------------ 57| 1.07k| secure_vector workspace(z.size()); 58| | 59| 1.07k| bigint_mul(z.mutable_data(), 60| 1.07k| z.size(), 61| 1.07k| x.data(), 62| 1.07k| x.size(), 63| 1.07k| x_sw, 64| 1.07k| y.data(), 65| 1.07k| y.size(), 66| 1.07k| y_sw, 67| 1.07k| workspace.data(), 68| 1.07k| workspace.size()); 69| 1.07k| } 70| | 71| 1.18k| z.cond_flip_sign(x_sw > 0 && y_sw > 0 && x.sign() != y.sign()); ------------------ | Branch (71:21): [True: 1.18k, False: 0] | Branch (71:33): [True: 1.18k, False: 0] | Branch (71:45): [True: 0, False: 1.18k] ------------------ 72| | 73| 1.18k| return z; 74| 1.18k|} _ZN5Botan6BigInt13with_capacityEm: 58| 5.82k|BigInt BigInt::with_capacity(size_t size) { 59| 5.82k| BigInt bn; 60| 5.82k| bn.grow_to(size); 61| 5.82k| return bn; 62| 5.82k|} _ZN5Botan6BigIntC2EPKhm: 91| 8.94k|BigInt::BigInt(const uint8_t input[], size_t length) { binary_decode(input, length); } _ZNK5Botan6BigInt7byte_atEm: 119| 23.3k|uint8_t BigInt::byte_at(size_t n) const { 120| 23.3k| return get_byte_var(sizeof(word) - (n % sizeof(word)) - 1, word_at(n / sizeof(word))); 121| 23.3k|} _ZNK5Botan6BigInt8cmp_wordEm: 123| 3.55k|int32_t BigInt::cmp_word(word other) const { 124| 3.55k| if(is_negative()) { ------------------ | Branch (124:7): [True: 0, False: 3.55k] ------------------ 125| 0| return -1; // other is positive ... 126| 0| } 127| | 128| 3.55k| const size_t sw = this->sig_words(); 129| 3.55k| if(sw > 1) { ------------------ | Branch (129:7): [True: 3.29k, False: 261] ------------------ 130| 3.29k| return 1; // must be larger since other is just one word ... 131| 3.29k| } 132| | 133| 261| return bigint_cmp(this->data(), sw, &other, 1); 134| 3.55k|} _ZNK5Botan6BigInt3cmpERKS0_b: 139| 1.09k|int32_t BigInt::cmp(const BigInt& other, bool check_signs) const { 140| 1.09k| if(check_signs) { ------------------ | Branch (140:7): [True: 1.09k, False: 0] ------------------ 141| 1.09k| if(other.is_positive() && this->is_negative()) { ------------------ | Branch (141:10): [True: 1.09k, False: 0] | Branch (141:33): [True: 0, False: 1.09k] ------------------ 142| 0| return -1; 143| 0| } 144| | 145| 1.09k| if(other.is_negative() && this->is_positive()) { ------------------ | Branch (145:10): [True: 0, False: 1.09k] | Branch (145:33): [True: 0, False: 0] ------------------ 146| 0| return 1; 147| 0| } 148| | 149| 1.09k| if(other.is_negative() && this->is_negative()) { ------------------ | Branch (149:10): [True: 0, False: 1.09k] | Branch (149:33): [True: 0, False: 0] ------------------ 150| 0| return (-bigint_cmp(this->data(), this->size(), other.data(), other.size())); 151| 0| } 152| 1.09k| } 153| | 154| 1.09k| return bigint_cmp(this->data(), this->size(), other.data(), other.size()); 155| 1.09k|} _ZNK5Botan6BigInt12is_less_thanERKS0_: 165| 2.15k|bool BigInt::is_less_than(const BigInt& other) const { 166| 2.15k| if(this->is_negative() && other.is_positive()) { ------------------ | Branch (166:7): [True: 0, False: 2.15k] | Branch (166:30): [True: 0, False: 0] ------------------ 167| 0| return true; 168| 0| } 169| | 170| 2.15k| if(this->is_positive() && other.is_negative()) { ------------------ | Branch (170:7): [True: 2.15k, False: 0] | Branch (170:30): [True: 0, False: 2.15k] ------------------ 171| 0| return false; 172| 0| } 173| | 174| 2.15k| if(other.is_negative() && this->is_negative()) { ------------------ | Branch (174:7): [True: 0, False: 2.15k] | Branch (174:30): [True: 0, False: 0] ------------------ 175| 0| return bigint_ct_is_lt(other.data(), other.sig_words(), this->data(), this->sig_words()).is_set(); 176| 0| } 177| | 178| 2.15k| return bigint_ct_is_lt(this->data(), this->sig_words(), other.data(), other.sig_words()).is_set(); 179| 2.15k|} _ZNK5Botan6BigInt4Data14calc_sig_wordsEv: 192| 39.0k|size_t BigInt::Data::calc_sig_words() const { 193| 39.0k| const size_t sz = m_reg.size(); 194| 39.0k| size_t sig = sz; 195| | 196| 39.0k| word sub = 1; 197| | 198| 1.40M| for(size_t i = 0; i != sz; ++i) { ------------------ | Branch (198:22): [True: 1.36M, False: 39.0k] ------------------ 199| 1.36M| const word w = m_reg[sz - i - 1]; 200| 1.36M| sub &= ct_is_zero(w); 201| 1.36M| sig -= sub; 202| 1.36M| } 203| | 204| | /* 205| | * This depends on the data so is poisoned, but unpoison it here as 206| | * later conditionals are made on the size. 207| | */ 208| 39.0k| CT::unpoison(sig); 209| | 210| 39.0k| return sig; 211| 39.0k|} _ZNK5Botan6BigInt13get_substringEmm: 216| 110k|uint32_t BigInt::get_substring(size_t offset, size_t length) const { 217| 110k| if(length == 0 || length > 32) { ------------------ | Branch (217:7): [True: 0, False: 110k] | Branch (217:22): [True: 0, False: 110k] ------------------ 218| 0| throw Invalid_Argument("BigInt::get_substring invalid substring length"); 219| 0| } 220| | 221| 110k| const uint32_t mask = 0xFFFFFFFF >> (32 - length); 222| | 223| 110k| const size_t word_offset = offset / BOTAN_MP_WORD_BITS; ------------------ | | 50| 110k|#define BOTAN_MP_WORD_BITS 64 ------------------ 224| 110k| const size_t wshift = (offset % BOTAN_MP_WORD_BITS); ------------------ | | 50| 110k|#define BOTAN_MP_WORD_BITS 64 ------------------ 225| | 226| | /* 227| | * The substring is contained within one or at most two words. The 228| | * offset and length are not secret, so we can perform conditional 229| | * operations on those values. 230| | */ 231| 110k| const word w0 = word_at(word_offset); 232| | 233| 110k| if(wshift == 0 || (offset + length) / BOTAN_MP_WORD_BITS == word_offset) { ------------------ | | 50| 107k|#define BOTAN_MP_WORD_BITS 64 ------------------ | Branch (233:7): [True: 2.44k, False: 107k] | Branch (233:22): [True: 106k, False: 1.37k] ------------------ 234| 109k| return static_cast(w0 >> wshift) & mask; 235| 109k| } else { 236| 1.37k| const word w1 = word_at(word_offset + 1); 237| 1.37k| return static_cast((w0 >> wshift) | (w1 << (BOTAN_MP_WORD_BITS - wshift))) & mask; ------------------ | | 50| 1.37k|#define BOTAN_MP_WORD_BITS 64 ------------------ 238| 1.37k| } 239| 110k|} _ZNK5Botan6BigInt5bytesEv: 271| 8.13k|size_t BigInt::bytes() const { return round_up(bits(), 8) / 8; } _ZNK5Botan6BigInt13top_bits_freeEv: 273| 13.9k|size_t BigInt::top_bits_free() const { 274| 13.9k| const size_t words = sig_words(); 275| | 276| 13.9k| const word top_word = word_at(words - 1); 277| 13.9k| const size_t bits_used = high_bit(top_word); 278| 13.9k| CT::unpoison(bits_used); 279| 13.9k| return BOTAN_MP_WORD_BITS - bits_used; ------------------ | | 50| 13.9k|#define BOTAN_MP_WORD_BITS 64 ------------------ 280| 13.9k|} _ZNK5Botan6BigInt4bitsEv: 282| 18.7k|size_t BigInt::bits() const { 283| 18.7k| const size_t words = sig_words(); 284| | 285| 18.7k| if(words == 0) { ------------------ | Branch (285:7): [True: 4.81k, False: 13.9k] ------------------ 286| 4.81k| return 0; 287| 4.81k| } 288| | 289| 13.9k| const size_t full_words = (words - 1) * BOTAN_MP_WORD_BITS; ------------------ | | 50| 13.9k|#define BOTAN_MP_WORD_BITS 64 ------------------ 290| 13.9k| const size_t top_bits = BOTAN_MP_WORD_BITS - top_bits_free(); ------------------ | | 50| 13.9k|#define BOTAN_MP_WORD_BITS 64 ------------------ 291| | 292| 13.9k| return full_words + top_bits; 293| 18.7k|} _ZN5Botan6BigInt15ct_reduce_belowERKS0_RNSt3__16vectorImNS_16secure_allocatorImEEEEm: 336| 3.55k|void BigInt::ct_reduce_below(const BigInt& mod, secure_vector& ws, size_t bound) { 337| 3.55k| if(mod.is_negative() || this->is_negative()) { ------------------ | Branch (337:7): [True: 0, False: 3.55k] | Branch (337:28): [True: 0, False: 3.55k] ------------------ 338| 0| throw Invalid_Argument("BigInt::ct_reduce_below both values must be positive"); 339| 0| } 340| | 341| 3.55k| const size_t mod_words = mod.sig_words(); 342| | 343| 3.55k| grow_to(mod_words); 344| | 345| 3.55k| const size_t sz = size(); 346| | 347| 3.55k| ws.resize(sz); 348| | 349| 3.55k| clear_mem(ws.data(), sz); 350| | 351| 10.6k| for(size_t i = 0; i != bound; ++i) { ------------------ | Branch (351:22): [True: 7.11k, False: 3.55k] ------------------ 352| 7.11k| word borrow = bigint_sub3(ws.data(), data(), sz, mod.data(), mod_words); 353| | 354| 7.11k| CT::Mask::is_zero(borrow).select_n(mutable_data(), ws.data(), data(), sz); 355| 7.11k| } 356| 3.55k|} _ZNK5Botan6BigInt13binary_encodeEPh: 367| 3.47k|void BigInt::binary_encode(uint8_t buf[]) const { this->binary_encode(buf, bytes()); } _ZNK5Botan6BigInt13binary_encodeEPhm: 372| 3.47k|void BigInt::binary_encode(uint8_t output[], size_t len) const { 373| 3.47k| const size_t full_words = len / sizeof(word); 374| 3.47k| const size_t extra_bytes = len % sizeof(word); 375| | 376| 25.6k| for(size_t i = 0; i != full_words; ++i) { ------------------ | Branch (376:22): [True: 22.1k, False: 3.47k] ------------------ 377| 22.1k| const word w = word_at(i); 378| 22.1k| store_be(w, output + (len - (i + 1) * sizeof(word))); 379| 22.1k| } 380| | 381| 3.47k| if(extra_bytes > 0) { ------------------ | Branch (381:7): [True: 2.16k, False: 1.31k] ------------------ 382| 2.16k| const word w = word_at(full_words); 383| | 384| 7.88k| for(size_t i = 0; i != extra_bytes; ++i) { ------------------ | Branch (384:25): [True: 5.71k, False: 2.16k] ------------------ 385| 5.71k| output[extra_bytes - i - 1] = get_byte_var(sizeof(word) - i - 1, w); 386| 5.71k| } 387| 2.16k| } 388| 3.47k|} _ZN5Botan6BigInt13binary_decodeEPKhm: 393| 8.94k|void BigInt::binary_decode(const uint8_t buf[], size_t length) { 394| 8.94k| clear(); 395| | 396| 8.94k| const size_t full_words = length / sizeof(word); 397| 8.94k| const size_t extra_bytes = length % sizeof(word); 398| | 399| 8.94k| secure_vector reg((round_up(full_words + (extra_bytes > 0 ? 1 : 0), 8))); ------------------ | Branch (399:52): [True: 7.38k, False: 1.56k] ------------------ 400| | 401| 71.7k| for(size_t i = 0; i != full_words; ++i) { ------------------ | Branch (401:22): [True: 62.8k, False: 8.94k] ------------------ 402| 62.8k| reg[i] = load_be(buf + length - sizeof(word) * (i + 1), 0); 403| 62.8k| } 404| | 405| 8.94k| if(extra_bytes > 0) { ------------------ | Branch (405:7): [True: 7.38k, False: 1.56k] ------------------ 406| 21.1k| for(size_t i = 0; i != extra_bytes; ++i) { ------------------ | Branch (406:25): [True: 13.7k, False: 7.38k] ------------------ 407| 13.7k| reg[full_words] = (reg[full_words] << 8) | buf[i]; 408| 13.7k| } 409| 7.38k| } 410| | 411| 8.94k| m_data.swap(reg); 412| 8.94k|} _ZN5Botan6BigInt12ct_cond_swapEbRS0_: 423| 3.64M|void BigInt::ct_cond_swap(bool predicate, BigInt& other) { 424| 3.64M| const size_t max_words = std::max(size(), other.size()); 425| 3.64M| grow_to(max_words); 426| 3.64M| other.grow_to(max_words); 427| | 428| 3.64M| bigint_cnd_swap(predicate, this->mutable_data(), other.mutable_data(), max_words); 429| 3.64M|} _ZN5Botan6BigInt14cond_flip_signEb: 431| 9.48k|void BigInt::cond_flip_sign(bool predicate) { 432| | // This code is assuming Negative == 0, Positive == 1 433| | 434| 9.48k| const auto mask = CT::Mask::expand(predicate); 435| | 436| 9.48k| const uint8_t current_sign = static_cast(sign()); 437| | 438| 9.48k| const uint8_t new_sign = mask.select(current_sign ^ 1, current_sign); 439| | 440| 9.48k| set_sign(static_cast(new_sign)); 441| 9.48k|} _ZN5Botan9ct_divideERKNS_6BigIntES2_RS0_S3_: 48| 1.18k|void ct_divide(const BigInt& x, const BigInt& y, BigInt& q_out, BigInt& r_out) { 49| 1.18k| if(y.is_zero()) { ------------------ | Branch (49:7): [True: 0, False: 1.18k] ------------------ 50| 0| throw Invalid_Argument("ct_divide: cannot divide by zero"); 51| 0| } 52| | 53| 1.18k| const size_t x_words = x.sig_words(); 54| 1.18k| const size_t y_words = y.sig_words(); 55| | 56| 1.18k| const size_t x_bits = x.bits(); 57| | 58| 1.18k| BigInt q = BigInt::with_capacity(x_words); 59| 1.18k| BigInt r = BigInt::with_capacity(y_words); 60| 1.18k| BigInt t = BigInt::with_capacity(y_words); // a temporary 61| | 62| 3.64M| for(size_t i = 0; i != x_bits; ++i) { ------------------ | Branch (62:22): [True: 3.64M, False: 1.18k] ------------------ 63| 3.64M| const size_t b = x_bits - 1 - i; 64| 3.64M| const bool x_b = x.get_bit(b); 65| | 66| 3.64M| r *= 2; 67| 3.64M| r.conditionally_set_bit(0, x_b); 68| | 69| 3.64M| const bool r_gte_y = bigint_sub3(t.mutable_data(), r.data(), r.size(), y.data(), y_words) == 0; 70| | 71| 3.64M| q.conditionally_set_bit(b, r_gte_y); 72| 3.64M| r.ct_cond_swap(r_gte_y, t); 73| 3.64M| } 74| | 75| 1.18k| sign_fixup(x, y, q, r); 76| 1.18k| r_out = r; 77| 1.18k| q_out = q; 78| 1.18k|} divide.cpp:_ZN5Botan12_GLOBAL__N_110sign_fixupERKNS_6BigIntES3_RS1_S4_: 21| 1.18k|void sign_fixup(const BigInt& x, const BigInt& y, BigInt& q, BigInt& r) { 22| 1.18k| q.cond_flip_sign(x.sign() != y.sign()); 23| | 24| 1.18k| if(x.is_negative() && r.is_nonzero()) { ------------------ | Branch (24:7): [True: 0, False: 1.18k] | Branch (24:26): [True: 0, False: 0] ------------------ 25| 0| q -= 1; 26| 0| r = y.abs() - r; 27| 0| } 28| 1.18k|} _ZN5Botan17bigint_comba_sqr4EPmPKm: 16| 5.89k|void bigint_comba_sqr4(word z[8], const word x[4]) { 17| 5.89k| word w2 = 0, w1 = 0, w0 = 0; 18| | 19| 5.89k| word3_muladd(&w2, &w1, &w0, x[0], x[0]); 20| 5.89k| z[0] = w0; 21| 5.89k| w0 = 0; 22| | 23| 5.89k| word3_muladd_2(&w0, &w2, &w1, x[0], x[1]); 24| 5.89k| z[1] = w1; 25| 5.89k| w1 = 0; 26| | 27| 5.89k| word3_muladd_2(&w1, &w0, &w2, x[0], x[2]); 28| 5.89k| word3_muladd(&w1, &w0, &w2, x[1], x[1]); 29| 5.89k| z[2] = w2; 30| 5.89k| w2 = 0; 31| | 32| 5.89k| word3_muladd_2(&w2, &w1, &w0, x[0], x[3]); 33| 5.89k| word3_muladd_2(&w2, &w1, &w0, x[1], x[2]); 34| 5.89k| z[3] = w0; 35| 5.89k| w0 = 0; 36| | 37| 5.89k| word3_muladd_2(&w0, &w2, &w1, x[1], x[3]); 38| 5.89k| word3_muladd(&w0, &w2, &w1, x[2], x[2]); 39| 5.89k| z[4] = w1; 40| 5.89k| w1 = 0; 41| | 42| 5.89k| word3_muladd_2(&w1, &w0, &w2, x[2], x[3]); 43| 5.89k| z[5] = w2; 44| 5.89k| w2 = 0; 45| | 46| 5.89k| word3_muladd(&w2, &w1, &w0, x[3], x[3]); 47| 5.89k| z[6] = w0; 48| 5.89k| z[7] = w1; 49| 5.89k|} _ZN5Botan17bigint_comba_mul4EPmPKmS2_: 54| 1.94k|void bigint_comba_mul4(word z[8], const word x[4], const word y[4]) { 55| 1.94k| word w2 = 0, w1 = 0, w0 = 0; 56| | 57| 1.94k| word3_muladd(&w2, &w1, &w0, x[0], y[0]); 58| 1.94k| z[0] = w0; 59| 1.94k| w0 = 0; 60| | 61| 1.94k| word3_muladd(&w0, &w2, &w1, x[0], y[1]); 62| 1.94k| word3_muladd(&w0, &w2, &w1, x[1], y[0]); 63| 1.94k| z[1] = w1; 64| 1.94k| w1 = 0; 65| | 66| 1.94k| word3_muladd(&w1, &w0, &w2, x[0], y[2]); 67| 1.94k| word3_muladd(&w1, &w0, &w2, x[1], y[1]); 68| 1.94k| word3_muladd(&w1, &w0, &w2, x[2], y[0]); 69| 1.94k| z[2] = w2; 70| 1.94k| w2 = 0; 71| | 72| 1.94k| word3_muladd(&w2, &w1, &w0, x[0], y[3]); 73| 1.94k| word3_muladd(&w2, &w1, &w0, x[1], y[2]); 74| 1.94k| word3_muladd(&w2, &w1, &w0, x[2], y[1]); 75| 1.94k| word3_muladd(&w2, &w1, &w0, x[3], y[0]); 76| 1.94k| z[3] = w0; 77| 1.94k| w0 = 0; 78| | 79| 1.94k| word3_muladd(&w0, &w2, &w1, x[1], y[3]); 80| 1.94k| word3_muladd(&w0, &w2, &w1, x[2], y[2]); 81| 1.94k| word3_muladd(&w0, &w2, &w1, x[3], y[1]); 82| 1.94k| z[4] = w1; 83| 1.94k| w1 = 0; 84| | 85| 1.94k| word3_muladd(&w1, &w0, &w2, x[2], y[3]); 86| 1.94k| word3_muladd(&w1, &w0, &w2, x[3], y[2]); 87| 1.94k| z[5] = w2; 88| 1.94k| w2 = 0; 89| | 90| 1.94k| word3_muladd(&w2, &w1, &w0, x[3], y[3]); 91| 1.94k| z[6] = w0; 92| 1.94k| z[7] = w1; 93| 1.94k|} _ZN5Botan17bigint_comba_sqr6EPmPKm: 98| 6.44k|void bigint_comba_sqr6(word z[12], const word x[6]) { 99| 6.44k| word w2 = 0, w1 = 0, w0 = 0; 100| | 101| 6.44k| word3_muladd(&w2, &w1, &w0, x[0], x[0]); 102| 6.44k| z[0] = w0; 103| 6.44k| w0 = 0; 104| | 105| 6.44k| word3_muladd_2(&w0, &w2, &w1, x[0], x[1]); 106| 6.44k| z[1] = w1; 107| 6.44k| w1 = 0; 108| | 109| 6.44k| word3_muladd_2(&w1, &w0, &w2, x[0], x[2]); 110| 6.44k| word3_muladd(&w1, &w0, &w2, x[1], x[1]); 111| 6.44k| z[2] = w2; 112| 6.44k| w2 = 0; 113| | 114| 6.44k| word3_muladd_2(&w2, &w1, &w0, x[0], x[3]); 115| 6.44k| word3_muladd_2(&w2, &w1, &w0, x[1], x[2]); 116| 6.44k| z[3] = w0; 117| 6.44k| w0 = 0; 118| | 119| 6.44k| word3_muladd_2(&w0, &w2, &w1, x[0], x[4]); 120| 6.44k| word3_muladd_2(&w0, &w2, &w1, x[1], x[3]); 121| 6.44k| word3_muladd(&w0, &w2, &w1, x[2], x[2]); 122| 6.44k| z[4] = w1; 123| 6.44k| w1 = 0; 124| | 125| 6.44k| word3_muladd_2(&w1, &w0, &w2, x[0], x[5]); 126| 6.44k| word3_muladd_2(&w1, &w0, &w2, x[1], x[4]); 127| 6.44k| word3_muladd_2(&w1, &w0, &w2, x[2], x[3]); 128| 6.44k| z[5] = w2; 129| 6.44k| w2 = 0; 130| | 131| 6.44k| word3_muladd_2(&w2, &w1, &w0, x[1], x[5]); 132| 6.44k| word3_muladd_2(&w2, &w1, &w0, x[2], x[4]); 133| 6.44k| word3_muladd(&w2, &w1, &w0, x[3], x[3]); 134| 6.44k| z[6] = w0; 135| 6.44k| w0 = 0; 136| | 137| 6.44k| word3_muladd_2(&w0, &w2, &w1, x[2], x[5]); 138| 6.44k| word3_muladd_2(&w0, &w2, &w1, x[3], x[4]); 139| 6.44k| z[7] = w1; 140| 6.44k| w1 = 0; 141| | 142| 6.44k| word3_muladd_2(&w1, &w0, &w2, x[3], x[5]); 143| 6.44k| word3_muladd(&w1, &w0, &w2, x[4], x[4]); 144| 6.44k| z[8] = w2; 145| 6.44k| w2 = 0; 146| | 147| 6.44k| word3_muladd_2(&w2, &w1, &w0, x[4], x[5]); 148| 6.44k| z[9] = w0; 149| 6.44k| w0 = 0; 150| | 151| 6.44k| word3_muladd(&w0, &w2, &w1, x[5], x[5]); 152| 6.44k| z[10] = w1; 153| 6.44k| z[11] = w2; 154| 6.44k|} _ZN5Botan17bigint_comba_mul6EPmPKmS2_: 159| 2.10k|void bigint_comba_mul6(word z[12], const word x[6], const word y[6]) { 160| 2.10k| word w2 = 0, w1 = 0, w0 = 0; 161| | 162| 2.10k| word3_muladd(&w2, &w1, &w0, x[0], y[0]); 163| 2.10k| z[0] = w0; 164| 2.10k| w0 = 0; 165| | 166| 2.10k| word3_muladd(&w0, &w2, &w1, x[0], y[1]); 167| 2.10k| word3_muladd(&w0, &w2, &w1, x[1], y[0]); 168| 2.10k| z[1] = w1; 169| 2.10k| w1 = 0; 170| | 171| 2.10k| word3_muladd(&w1, &w0, &w2, x[0], y[2]); 172| 2.10k| word3_muladd(&w1, &w0, &w2, x[1], y[1]); 173| 2.10k| word3_muladd(&w1, &w0, &w2, x[2], y[0]); 174| 2.10k| z[2] = w2; 175| 2.10k| w2 = 0; 176| | 177| 2.10k| word3_muladd(&w2, &w1, &w0, x[0], y[3]); 178| 2.10k| word3_muladd(&w2, &w1, &w0, x[1], y[2]); 179| 2.10k| word3_muladd(&w2, &w1, &w0, x[2], y[1]); 180| 2.10k| word3_muladd(&w2, &w1, &w0, x[3], y[0]); 181| 2.10k| z[3] = w0; 182| 2.10k| w0 = 0; 183| | 184| 2.10k| word3_muladd(&w0, &w2, &w1, x[0], y[4]); 185| 2.10k| word3_muladd(&w0, &w2, &w1, x[1], y[3]); 186| 2.10k| word3_muladd(&w0, &w2, &w1, x[2], y[2]); 187| 2.10k| word3_muladd(&w0, &w2, &w1, x[3], y[1]); 188| 2.10k| word3_muladd(&w0, &w2, &w1, x[4], y[0]); 189| 2.10k| z[4] = w1; 190| 2.10k| w1 = 0; 191| | 192| 2.10k| word3_muladd(&w1, &w0, &w2, x[0], y[5]); 193| 2.10k| word3_muladd(&w1, &w0, &w2, x[1], y[4]); 194| 2.10k| word3_muladd(&w1, &w0, &w2, x[2], y[3]); 195| 2.10k| word3_muladd(&w1, &w0, &w2, x[3], y[2]); 196| 2.10k| word3_muladd(&w1, &w0, &w2, x[4], y[1]); 197| 2.10k| word3_muladd(&w1, &w0, &w2, x[5], y[0]); 198| 2.10k| z[5] = w2; 199| 2.10k| w2 = 0; 200| | 201| 2.10k| word3_muladd(&w2, &w1, &w0, x[1], y[5]); 202| 2.10k| word3_muladd(&w2, &w1, &w0, x[2], y[4]); 203| 2.10k| word3_muladd(&w2, &w1, &w0, x[3], y[3]); 204| 2.10k| word3_muladd(&w2, &w1, &w0, x[4], y[2]); 205| 2.10k| word3_muladd(&w2, &w1, &w0, x[5], y[1]); 206| 2.10k| z[6] = w0; 207| 2.10k| w0 = 0; 208| | 209| 2.10k| word3_muladd(&w0, &w2, &w1, x[2], y[5]); 210| 2.10k| word3_muladd(&w0, &w2, &w1, x[3], y[4]); 211| 2.10k| word3_muladd(&w0, &w2, &w1, x[4], y[3]); 212| 2.10k| word3_muladd(&w0, &w2, &w1, x[5], y[2]); 213| 2.10k| z[7] = w1; 214| 2.10k| w1 = 0; 215| | 216| 2.10k| word3_muladd(&w1, &w0, &w2, x[3], y[5]); 217| 2.10k| word3_muladd(&w1, &w0, &w2, x[4], y[4]); 218| 2.10k| word3_muladd(&w1, &w0, &w2, x[5], y[3]); 219| 2.10k| z[8] = w2; 220| 2.10k| w2 = 0; 221| | 222| 2.10k| word3_muladd(&w2, &w1, &w0, x[4], y[5]); 223| 2.10k| word3_muladd(&w2, &w1, &w0, x[5], y[4]); 224| 2.10k| z[9] = w0; 225| 2.10k| w0 = 0; 226| | 227| 2.10k| word3_muladd(&w0, &w2, &w1, x[5], y[5]); 228| 2.10k| z[10] = w1; 229| 2.10k| z[11] = w2; 230| 2.10k|} _ZN5Botan17bigint_comba_sqr8EPmPKm: 235| 6.85k|void bigint_comba_sqr8(word z[16], const word x[8]) { 236| 6.85k| word w2 = 0, w1 = 0, w0 = 0; 237| | 238| 6.85k| word3_muladd(&w2, &w1, &w0, x[0], x[0]); 239| 6.85k| z[0] = w0; 240| 6.85k| w0 = 0; 241| | 242| 6.85k| word3_muladd_2(&w0, &w2, &w1, x[0], x[1]); 243| 6.85k| z[1] = w1; 244| 6.85k| w1 = 0; 245| | 246| 6.85k| word3_muladd_2(&w1, &w0, &w2, x[0], x[2]); 247| 6.85k| word3_muladd(&w1, &w0, &w2, x[1], x[1]); 248| 6.85k| z[2] = w2; 249| 6.85k| w2 = 0; 250| | 251| 6.85k| word3_muladd_2(&w2, &w1, &w0, x[0], x[3]); 252| 6.85k| word3_muladd_2(&w2, &w1, &w0, x[1], x[2]); 253| 6.85k| z[3] = w0; 254| 6.85k| w0 = 0; 255| | 256| 6.85k| word3_muladd_2(&w0, &w2, &w1, x[0], x[4]); 257| 6.85k| word3_muladd_2(&w0, &w2, &w1, x[1], x[3]); 258| 6.85k| word3_muladd(&w0, &w2, &w1, x[2], x[2]); 259| 6.85k| z[4] = w1; 260| 6.85k| w1 = 0; 261| | 262| 6.85k| word3_muladd_2(&w1, &w0, &w2, x[0], x[5]); 263| 6.85k| word3_muladd_2(&w1, &w0, &w2, x[1], x[4]); 264| 6.85k| word3_muladd_2(&w1, &w0, &w2, x[2], x[3]); 265| 6.85k| z[5] = w2; 266| 6.85k| w2 = 0; 267| | 268| 6.85k| word3_muladd_2(&w2, &w1, &w0, x[0], x[6]); 269| 6.85k| word3_muladd_2(&w2, &w1, &w0, x[1], x[5]); 270| 6.85k| word3_muladd_2(&w2, &w1, &w0, x[2], x[4]); 271| 6.85k| word3_muladd(&w2, &w1, &w0, x[3], x[3]); 272| 6.85k| z[6] = w0; 273| 6.85k| w0 = 0; 274| | 275| 6.85k| word3_muladd_2(&w0, &w2, &w1, x[0], x[7]); 276| 6.85k| word3_muladd_2(&w0, &w2, &w1, x[1], x[6]); 277| 6.85k| word3_muladd_2(&w0, &w2, &w1, x[2], x[5]); 278| 6.85k| word3_muladd_2(&w0, &w2, &w1, x[3], x[4]); 279| 6.85k| z[7] = w1; 280| 6.85k| w1 = 0; 281| | 282| 6.85k| word3_muladd_2(&w1, &w0, &w2, x[1], x[7]); 283| 6.85k| word3_muladd_2(&w1, &w0, &w2, x[2], x[6]); 284| 6.85k| word3_muladd_2(&w1, &w0, &w2, x[3], x[5]); 285| 6.85k| word3_muladd(&w1, &w0, &w2, x[4], x[4]); 286| 6.85k| z[8] = w2; 287| 6.85k| w2 = 0; 288| | 289| 6.85k| word3_muladd_2(&w2, &w1, &w0, x[2], x[7]); 290| 6.85k| word3_muladd_2(&w2, &w1, &w0, x[3], x[6]); 291| 6.85k| word3_muladd_2(&w2, &w1, &w0, x[4], x[5]); 292| 6.85k| z[9] = w0; 293| 6.85k| w0 = 0; 294| | 295| 6.85k| word3_muladd_2(&w0, &w2, &w1, x[3], x[7]); 296| 6.85k| word3_muladd_2(&w0, &w2, &w1, x[4], x[6]); 297| 6.85k| word3_muladd(&w0, &w2, &w1, x[5], x[5]); 298| 6.85k| z[10] = w1; 299| 6.85k| w1 = 0; 300| | 301| 6.85k| word3_muladd_2(&w1, &w0, &w2, x[4], x[7]); 302| 6.85k| word3_muladd_2(&w1, &w0, &w2, x[5], x[6]); 303| 6.85k| z[11] = w2; 304| 6.85k| w2 = 0; 305| | 306| 6.85k| word3_muladd_2(&w2, &w1, &w0, x[5], x[7]); 307| 6.85k| word3_muladd(&w2, &w1, &w0, x[6], x[6]); 308| 6.85k| z[12] = w0; 309| 6.85k| w0 = 0; 310| | 311| 6.85k| word3_muladd_2(&w0, &w2, &w1, x[6], x[7]); 312| 6.85k| z[13] = w1; 313| 6.85k| w1 = 0; 314| | 315| 6.85k| word3_muladd(&w1, &w0, &w2, x[7], x[7]); 316| 6.85k| z[14] = w2; 317| 6.85k| z[15] = w0; 318| 6.85k|} _ZN5Botan17bigint_comba_mul8EPmPKmS2_: 323| 2.53k|void bigint_comba_mul8(word z[16], const word x[8], const word y[8]) { 324| 2.53k| word w2 = 0, w1 = 0, w0 = 0; 325| | 326| 2.53k| word3_muladd(&w2, &w1, &w0, x[0], y[0]); 327| 2.53k| z[0] = w0; 328| 2.53k| w0 = 0; 329| | 330| 2.53k| word3_muladd(&w0, &w2, &w1, x[0], y[1]); 331| 2.53k| word3_muladd(&w0, &w2, &w1, x[1], y[0]); 332| 2.53k| z[1] = w1; 333| 2.53k| w1 = 0; 334| | 335| 2.53k| word3_muladd(&w1, &w0, &w2, x[0], y[2]); 336| 2.53k| word3_muladd(&w1, &w0, &w2, x[1], y[1]); 337| 2.53k| word3_muladd(&w1, &w0, &w2, x[2], y[0]); 338| 2.53k| z[2] = w2; 339| 2.53k| w2 = 0; 340| | 341| 2.53k| word3_muladd(&w2, &w1, &w0, x[0], y[3]); 342| 2.53k| word3_muladd(&w2, &w1, &w0, x[1], y[2]); 343| 2.53k| word3_muladd(&w2, &w1, &w0, x[2], y[1]); 344| 2.53k| word3_muladd(&w2, &w1, &w0, x[3], y[0]); 345| 2.53k| z[3] = w0; 346| 2.53k| w0 = 0; 347| | 348| 2.53k| word3_muladd(&w0, &w2, &w1, x[0], y[4]); 349| 2.53k| word3_muladd(&w0, &w2, &w1, x[1], y[3]); 350| 2.53k| word3_muladd(&w0, &w2, &w1, x[2], y[2]); 351| 2.53k| word3_muladd(&w0, &w2, &w1, x[3], y[1]); 352| 2.53k| word3_muladd(&w0, &w2, &w1, x[4], y[0]); 353| 2.53k| z[4] = w1; 354| 2.53k| w1 = 0; 355| | 356| 2.53k| word3_muladd(&w1, &w0, &w2, x[0], y[5]); 357| 2.53k| word3_muladd(&w1, &w0, &w2, x[1], y[4]); 358| 2.53k| word3_muladd(&w1, &w0, &w2, x[2], y[3]); 359| 2.53k| word3_muladd(&w1, &w0, &w2, x[3], y[2]); 360| 2.53k| word3_muladd(&w1, &w0, &w2, x[4], y[1]); 361| 2.53k| word3_muladd(&w1, &w0, &w2, x[5], y[0]); 362| 2.53k| z[5] = w2; 363| 2.53k| w2 = 0; 364| | 365| 2.53k| word3_muladd(&w2, &w1, &w0, x[0], y[6]); 366| 2.53k| word3_muladd(&w2, &w1, &w0, x[1], y[5]); 367| 2.53k| word3_muladd(&w2, &w1, &w0, x[2], y[4]); 368| 2.53k| word3_muladd(&w2, &w1, &w0, x[3], y[3]); 369| 2.53k| word3_muladd(&w2, &w1, &w0, x[4], y[2]); 370| 2.53k| word3_muladd(&w2, &w1, &w0, x[5], y[1]); 371| 2.53k| word3_muladd(&w2, &w1, &w0, x[6], y[0]); 372| 2.53k| z[6] = w0; 373| 2.53k| w0 = 0; 374| | 375| 2.53k| word3_muladd(&w0, &w2, &w1, x[0], y[7]); 376| 2.53k| word3_muladd(&w0, &w2, &w1, x[1], y[6]); 377| 2.53k| word3_muladd(&w0, &w2, &w1, x[2], y[5]); 378| 2.53k| word3_muladd(&w0, &w2, &w1, x[3], y[4]); 379| 2.53k| word3_muladd(&w0, &w2, &w1, x[4], y[3]); 380| 2.53k| word3_muladd(&w0, &w2, &w1, x[5], y[2]); 381| 2.53k| word3_muladd(&w0, &w2, &w1, x[6], y[1]); 382| 2.53k| word3_muladd(&w0, &w2, &w1, x[7], y[0]); 383| 2.53k| z[7] = w1; 384| 2.53k| w1 = 0; 385| | 386| 2.53k| word3_muladd(&w1, &w0, &w2, x[1], y[7]); 387| 2.53k| word3_muladd(&w1, &w0, &w2, x[2], y[6]); 388| 2.53k| word3_muladd(&w1, &w0, &w2, x[3], y[5]); 389| 2.53k| word3_muladd(&w1, &w0, &w2, x[4], y[4]); 390| 2.53k| word3_muladd(&w1, &w0, &w2, x[5], y[3]); 391| 2.53k| word3_muladd(&w1, &w0, &w2, x[6], y[2]); 392| 2.53k| word3_muladd(&w1, &w0, &w2, x[7], y[1]); 393| 2.53k| z[8] = w2; 394| 2.53k| w2 = 0; 395| | 396| 2.53k| word3_muladd(&w2, &w1, &w0, x[2], y[7]); 397| 2.53k| word3_muladd(&w2, &w1, &w0, x[3], y[6]); 398| 2.53k| word3_muladd(&w2, &w1, &w0, x[4], y[5]); 399| 2.53k| word3_muladd(&w2, &w1, &w0, x[5], y[4]); 400| 2.53k| word3_muladd(&w2, &w1, &w0, x[6], y[3]); 401| 2.53k| word3_muladd(&w2, &w1, &w0, x[7], y[2]); 402| 2.53k| z[9] = w0; 403| 2.53k| w0 = 0; 404| | 405| 2.53k| word3_muladd(&w0, &w2, &w1, x[3], y[7]); 406| 2.53k| word3_muladd(&w0, &w2, &w1, x[4], y[6]); 407| 2.53k| word3_muladd(&w0, &w2, &w1, x[5], y[5]); 408| 2.53k| word3_muladd(&w0, &w2, &w1, x[6], y[4]); 409| 2.53k| word3_muladd(&w0, &w2, &w1, x[7], y[3]); 410| 2.53k| z[10] = w1; 411| 2.53k| w1 = 0; 412| | 413| 2.53k| word3_muladd(&w1, &w0, &w2, x[4], y[7]); 414| 2.53k| word3_muladd(&w1, &w0, &w2, x[5], y[6]); 415| 2.53k| word3_muladd(&w1, &w0, &w2, x[6], y[5]); 416| 2.53k| word3_muladd(&w1, &w0, &w2, x[7], y[4]); 417| 2.53k| z[11] = w2; 418| 2.53k| w2 = 0; 419| | 420| 2.53k| word3_muladd(&w2, &w1, &w0, x[5], y[7]); 421| 2.53k| word3_muladd(&w2, &w1, &w0, x[6], y[6]); 422| 2.53k| word3_muladd(&w2, &w1, &w0, x[7], y[5]); 423| 2.53k| z[12] = w0; 424| 2.53k| w0 = 0; 425| | 426| 2.53k| word3_muladd(&w0, &w2, &w1, x[6], y[7]); 427| 2.53k| word3_muladd(&w0, &w2, &w1, x[7], y[6]); 428| 2.53k| z[13] = w1; 429| 2.53k| w1 = 0; 430| | 431| 2.53k| word3_muladd(&w1, &w0, &w2, x[7], y[7]); 432| 2.53k| z[14] = w2; 433| 2.53k| z[15] = w0; 434| 2.53k|} _ZN5Botan17bigint_comba_sqr9EPmPKm: 439| 3.79k|void bigint_comba_sqr9(word z[18], const word x[9]) { 440| 3.79k| word w2 = 0, w1 = 0, w0 = 0; 441| | 442| 3.79k| word3_muladd(&w2, &w1, &w0, x[0], x[0]); 443| 3.79k| z[0] = w0; 444| 3.79k| w0 = 0; 445| | 446| 3.79k| word3_muladd_2(&w0, &w2, &w1, x[0], x[1]); 447| 3.79k| z[1] = w1; 448| 3.79k| w1 = 0; 449| | 450| 3.79k| word3_muladd_2(&w1, &w0, &w2, x[0], x[2]); 451| 3.79k| word3_muladd(&w1, &w0, &w2, x[1], x[1]); 452| 3.79k| z[2] = w2; 453| 3.79k| w2 = 0; 454| | 455| 3.79k| word3_muladd_2(&w2, &w1, &w0, x[0], x[3]); 456| 3.79k| word3_muladd_2(&w2, &w1, &w0, x[1], x[2]); 457| 3.79k| z[3] = w0; 458| 3.79k| w0 = 0; 459| | 460| 3.79k| word3_muladd_2(&w0, &w2, &w1, x[0], x[4]); 461| 3.79k| word3_muladd_2(&w0, &w2, &w1, x[1], x[3]); 462| 3.79k| word3_muladd(&w0, &w2, &w1, x[2], x[2]); 463| 3.79k| z[4] = w1; 464| 3.79k| w1 = 0; 465| | 466| 3.79k| word3_muladd_2(&w1, &w0, &w2, x[0], x[5]); 467| 3.79k| word3_muladd_2(&w1, &w0, &w2, x[1], x[4]); 468| 3.79k| word3_muladd_2(&w1, &w0, &w2, x[2], x[3]); 469| 3.79k| z[5] = w2; 470| 3.79k| w2 = 0; 471| | 472| 3.79k| word3_muladd_2(&w2, &w1, &w0, x[0], x[6]); 473| 3.79k| word3_muladd_2(&w2, &w1, &w0, x[1], x[5]); 474| 3.79k| word3_muladd_2(&w2, &w1, &w0, x[2], x[4]); 475| 3.79k| word3_muladd(&w2, &w1, &w0, x[3], x[3]); 476| 3.79k| z[6] = w0; 477| 3.79k| w0 = 0; 478| | 479| 3.79k| word3_muladd_2(&w0, &w2, &w1, x[0], x[7]); 480| 3.79k| word3_muladd_2(&w0, &w2, &w1, x[1], x[6]); 481| 3.79k| word3_muladd_2(&w0, &w2, &w1, x[2], x[5]); 482| 3.79k| word3_muladd_2(&w0, &w2, &w1, x[3], x[4]); 483| 3.79k| z[7] = w1; 484| 3.79k| w1 = 0; 485| | 486| 3.79k| word3_muladd_2(&w1, &w0, &w2, x[0], x[8]); 487| 3.79k| word3_muladd_2(&w1, &w0, &w2, x[1], x[7]); 488| 3.79k| word3_muladd_2(&w1, &w0, &w2, x[2], x[6]); 489| 3.79k| word3_muladd_2(&w1, &w0, &w2, x[3], x[5]); 490| 3.79k| word3_muladd(&w1, &w0, &w2, x[4], x[4]); 491| 3.79k| z[8] = w2; 492| 3.79k| w2 = 0; 493| | 494| 3.79k| word3_muladd_2(&w2, &w1, &w0, x[1], x[8]); 495| 3.79k| word3_muladd_2(&w2, &w1, &w0, x[2], x[7]); 496| 3.79k| word3_muladd_2(&w2, &w1, &w0, x[3], x[6]); 497| 3.79k| word3_muladd_2(&w2, &w1, &w0, x[4], x[5]); 498| 3.79k| z[9] = w0; 499| 3.79k| w0 = 0; 500| | 501| 3.79k| word3_muladd_2(&w0, &w2, &w1, x[2], x[8]); 502| 3.79k| word3_muladd_2(&w0, &w2, &w1, x[3], x[7]); 503| 3.79k| word3_muladd_2(&w0, &w2, &w1, x[4], x[6]); 504| 3.79k| word3_muladd(&w0, &w2, &w1, x[5], x[5]); 505| 3.79k| z[10] = w1; 506| 3.79k| w1 = 0; 507| | 508| 3.79k| word3_muladd_2(&w1, &w0, &w2, x[3], x[8]); 509| 3.79k| word3_muladd_2(&w1, &w0, &w2, x[4], x[7]); 510| 3.79k| word3_muladd_2(&w1, &w0, &w2, x[5], x[6]); 511| 3.79k| z[11] = w2; 512| 3.79k| w2 = 0; 513| | 514| 3.79k| word3_muladd_2(&w2, &w1, &w0, x[4], x[8]); 515| 3.79k| word3_muladd_2(&w2, &w1, &w0, x[5], x[7]); 516| 3.79k| word3_muladd(&w2, &w1, &w0, x[6], x[6]); 517| 3.79k| z[12] = w0; 518| 3.79k| w0 = 0; 519| | 520| 3.79k| word3_muladd_2(&w0, &w2, &w1, x[5], x[8]); 521| 3.79k| word3_muladd_2(&w0, &w2, &w1, x[6], x[7]); 522| 3.79k| z[13] = w1; 523| 3.79k| w1 = 0; 524| | 525| 3.79k| word3_muladd_2(&w1, &w0, &w2, x[6], x[8]); 526| 3.79k| word3_muladd(&w1, &w0, &w2, x[7], x[7]); 527| 3.79k| z[14] = w2; 528| 3.79k| w2 = 0; 529| | 530| 3.79k| word3_muladd_2(&w2, &w1, &w0, x[7], x[8]); 531| 3.79k| z[15] = w0; 532| 3.79k| w0 = 0; 533| | 534| 3.79k| word3_muladd(&w0, &w2, &w1, x[8], x[8]); 535| 3.79k| z[16] = w1; 536| 3.79k| z[17] = w2; 537| 3.79k|} _ZN5Botan17bigint_comba_mul9EPmPKmS2_: 542| 1.28k|void bigint_comba_mul9(word z[18], const word x[9], const word y[9]) { 543| 1.28k| word w2 = 0, w1 = 0, w0 = 0; 544| | 545| 1.28k| word3_muladd(&w2, &w1, &w0, x[0], y[0]); 546| 1.28k| z[0] = w0; 547| 1.28k| w0 = 0; 548| | 549| 1.28k| word3_muladd(&w0, &w2, &w1, x[0], y[1]); 550| 1.28k| word3_muladd(&w0, &w2, &w1, x[1], y[0]); 551| 1.28k| z[1] = w1; 552| 1.28k| w1 = 0; 553| | 554| 1.28k| word3_muladd(&w1, &w0, &w2, x[0], y[2]); 555| 1.28k| word3_muladd(&w1, &w0, &w2, x[1], y[1]); 556| 1.28k| word3_muladd(&w1, &w0, &w2, x[2], y[0]); 557| 1.28k| z[2] = w2; 558| 1.28k| w2 = 0; 559| | 560| 1.28k| word3_muladd(&w2, &w1, &w0, x[0], y[3]); 561| 1.28k| word3_muladd(&w2, &w1, &w0, x[1], y[2]); 562| 1.28k| word3_muladd(&w2, &w1, &w0, x[2], y[1]); 563| 1.28k| word3_muladd(&w2, &w1, &w0, x[3], y[0]); 564| 1.28k| z[3] = w0; 565| 1.28k| w0 = 0; 566| | 567| 1.28k| word3_muladd(&w0, &w2, &w1, x[0], y[4]); 568| 1.28k| word3_muladd(&w0, &w2, &w1, x[1], y[3]); 569| 1.28k| word3_muladd(&w0, &w2, &w1, x[2], y[2]); 570| 1.28k| word3_muladd(&w0, &w2, &w1, x[3], y[1]); 571| 1.28k| word3_muladd(&w0, &w2, &w1, x[4], y[0]); 572| 1.28k| z[4] = w1; 573| 1.28k| w1 = 0; 574| | 575| 1.28k| word3_muladd(&w1, &w0, &w2, x[0], y[5]); 576| 1.28k| word3_muladd(&w1, &w0, &w2, x[1], y[4]); 577| 1.28k| word3_muladd(&w1, &w0, &w2, x[2], y[3]); 578| 1.28k| word3_muladd(&w1, &w0, &w2, x[3], y[2]); 579| 1.28k| word3_muladd(&w1, &w0, &w2, x[4], y[1]); 580| 1.28k| word3_muladd(&w1, &w0, &w2, x[5], y[0]); 581| 1.28k| z[5] = w2; 582| 1.28k| w2 = 0; 583| | 584| 1.28k| word3_muladd(&w2, &w1, &w0, x[0], y[6]); 585| 1.28k| word3_muladd(&w2, &w1, &w0, x[1], y[5]); 586| 1.28k| word3_muladd(&w2, &w1, &w0, x[2], y[4]); 587| 1.28k| word3_muladd(&w2, &w1, &w0, x[3], y[3]); 588| 1.28k| word3_muladd(&w2, &w1, &w0, x[4], y[2]); 589| 1.28k| word3_muladd(&w2, &w1, &w0, x[5], y[1]); 590| 1.28k| word3_muladd(&w2, &w1, &w0, x[6], y[0]); 591| 1.28k| z[6] = w0; 592| 1.28k| w0 = 0; 593| | 594| 1.28k| word3_muladd(&w0, &w2, &w1, x[0], y[7]); 595| 1.28k| word3_muladd(&w0, &w2, &w1, x[1], y[6]); 596| 1.28k| word3_muladd(&w0, &w2, &w1, x[2], y[5]); 597| 1.28k| word3_muladd(&w0, &w2, &w1, x[3], y[4]); 598| 1.28k| word3_muladd(&w0, &w2, &w1, x[4], y[3]); 599| 1.28k| word3_muladd(&w0, &w2, &w1, x[5], y[2]); 600| 1.28k| word3_muladd(&w0, &w2, &w1, x[6], y[1]); 601| 1.28k| word3_muladd(&w0, &w2, &w1, x[7], y[0]); 602| 1.28k| z[7] = w1; 603| 1.28k| w1 = 0; 604| | 605| 1.28k| word3_muladd(&w1, &w0, &w2, x[0], y[8]); 606| 1.28k| word3_muladd(&w1, &w0, &w2, x[1], y[7]); 607| 1.28k| word3_muladd(&w1, &w0, &w2, x[2], y[6]); 608| 1.28k| word3_muladd(&w1, &w0, &w2, x[3], y[5]); 609| 1.28k| word3_muladd(&w1, &w0, &w2, x[4], y[4]); 610| 1.28k| word3_muladd(&w1, &w0, &w2, x[5], y[3]); 611| 1.28k| word3_muladd(&w1, &w0, &w2, x[6], y[2]); 612| 1.28k| word3_muladd(&w1, &w0, &w2, x[7], y[1]); 613| 1.28k| word3_muladd(&w1, &w0, &w2, x[8], y[0]); 614| 1.28k| z[8] = w2; 615| 1.28k| w2 = 0; 616| | 617| 1.28k| word3_muladd(&w2, &w1, &w0, x[1], y[8]); 618| 1.28k| word3_muladd(&w2, &w1, &w0, x[2], y[7]); 619| 1.28k| word3_muladd(&w2, &w1, &w0, x[3], y[6]); 620| 1.28k| word3_muladd(&w2, &w1, &w0, x[4], y[5]); 621| 1.28k| word3_muladd(&w2, &w1, &w0, x[5], y[4]); 622| 1.28k| word3_muladd(&w2, &w1, &w0, x[6], y[3]); 623| 1.28k| word3_muladd(&w2, &w1, &w0, x[7], y[2]); 624| 1.28k| word3_muladd(&w2, &w1, &w0, x[8], y[1]); 625| 1.28k| z[9] = w0; 626| 1.28k| w0 = 0; 627| | 628| 1.28k| word3_muladd(&w0, &w2, &w1, x[2], y[8]); 629| 1.28k| word3_muladd(&w0, &w2, &w1, x[3], y[7]); 630| 1.28k| word3_muladd(&w0, &w2, &w1, x[4], y[6]); 631| 1.28k| word3_muladd(&w0, &w2, &w1, x[5], y[5]); 632| 1.28k| word3_muladd(&w0, &w2, &w1, x[6], y[4]); 633| 1.28k| word3_muladd(&w0, &w2, &w1, x[7], y[3]); 634| 1.28k| word3_muladd(&w0, &w2, &w1, x[8], y[2]); 635| 1.28k| z[10] = w1; 636| 1.28k| w1 = 0; 637| | 638| 1.28k| word3_muladd(&w1, &w0, &w2, x[3], y[8]); 639| 1.28k| word3_muladd(&w1, &w0, &w2, x[4], y[7]); 640| 1.28k| word3_muladd(&w1, &w0, &w2, x[5], y[6]); 641| 1.28k| word3_muladd(&w1, &w0, &w2, x[6], y[5]); 642| 1.28k| word3_muladd(&w1, &w0, &w2, x[7], y[4]); 643| 1.28k| word3_muladd(&w1, &w0, &w2, x[8], y[3]); 644| 1.28k| z[11] = w2; 645| 1.28k| w2 = 0; 646| | 647| 1.28k| word3_muladd(&w2, &w1, &w0, x[4], y[8]); 648| 1.28k| word3_muladd(&w2, &w1, &w0, x[5], y[7]); 649| 1.28k| word3_muladd(&w2, &w1, &w0, x[6], y[6]); 650| 1.28k| word3_muladd(&w2, &w1, &w0, x[7], y[5]); 651| 1.28k| word3_muladd(&w2, &w1, &w0, x[8], y[4]); 652| 1.28k| z[12] = w0; 653| 1.28k| w0 = 0; 654| | 655| 1.28k| word3_muladd(&w0, &w2, &w1, x[5], y[8]); 656| 1.28k| word3_muladd(&w0, &w2, &w1, x[6], y[7]); 657| 1.28k| word3_muladd(&w0, &w2, &w1, x[7], y[6]); 658| 1.28k| word3_muladd(&w0, &w2, &w1, x[8], y[5]); 659| 1.28k| z[13] = w1; 660| 1.28k| w1 = 0; 661| | 662| 1.28k| word3_muladd(&w1, &w0, &w2, x[6], y[8]); 663| 1.28k| word3_muladd(&w1, &w0, &w2, x[7], y[7]); 664| 1.28k| word3_muladd(&w1, &w0, &w2, x[8], y[6]); 665| 1.28k| z[14] = w2; 666| 1.28k| w2 = 0; 667| | 668| 1.28k| word3_muladd(&w2, &w1, &w0, x[7], y[8]); 669| 1.28k| word3_muladd(&w2, &w1, &w0, x[8], y[7]); 670| 1.28k| z[15] = w0; 671| 1.28k| w0 = 0; 672| | 673| 1.28k| word3_muladd(&w0, &w2, &w1, x[8], y[8]); 674| 1.28k| z[16] = w1; 675| 1.28k| z[17] = w2; 676| 1.28k|} _ZN5Botan18bigint_comba_sqr16EPmPKm: 681| 42.3k|void bigint_comba_sqr16(word z[32], const word x[16]) { 682| 42.3k| word w2 = 0, w1 = 0, w0 = 0; 683| | 684| 42.3k| word3_muladd(&w2, &w1, &w0, x[0], x[0]); 685| 42.3k| z[0] = w0; 686| 42.3k| w0 = 0; 687| | 688| 42.3k| word3_muladd_2(&w0, &w2, &w1, x[0], x[1]); 689| 42.3k| z[1] = w1; 690| 42.3k| w1 = 0; 691| | 692| 42.3k| word3_muladd_2(&w1, &w0, &w2, x[0], x[2]); 693| 42.3k| word3_muladd(&w1, &w0, &w2, x[1], x[1]); 694| 42.3k| z[2] = w2; 695| 42.3k| w2 = 0; 696| | 697| 42.3k| word3_muladd_2(&w2, &w1, &w0, x[0], x[3]); 698| 42.3k| word3_muladd_2(&w2, &w1, &w0, x[1], x[2]); 699| 42.3k| z[3] = w0; 700| 42.3k| w0 = 0; 701| | 702| 42.3k| word3_muladd_2(&w0, &w2, &w1, x[0], x[4]); 703| 42.3k| word3_muladd_2(&w0, &w2, &w1, x[1], x[3]); 704| 42.3k| word3_muladd(&w0, &w2, &w1, x[2], x[2]); 705| 42.3k| z[4] = w1; 706| 42.3k| w1 = 0; 707| | 708| 42.3k| word3_muladd_2(&w1, &w0, &w2, x[0], x[5]); 709| 42.3k| word3_muladd_2(&w1, &w0, &w2, x[1], x[4]); 710| 42.3k| word3_muladd_2(&w1, &w0, &w2, x[2], x[3]); 711| 42.3k| z[5] = w2; 712| 42.3k| w2 = 0; 713| | 714| 42.3k| word3_muladd_2(&w2, &w1, &w0, x[0], x[6]); 715| 42.3k| word3_muladd_2(&w2, &w1, &w0, x[1], x[5]); 716| 42.3k| word3_muladd_2(&w2, &w1, &w0, x[2], x[4]); 717| 42.3k| word3_muladd(&w2, &w1, &w0, x[3], x[3]); 718| 42.3k| z[6] = w0; 719| 42.3k| w0 = 0; 720| | 721| 42.3k| word3_muladd_2(&w0, &w2, &w1, x[0], x[7]); 722| 42.3k| word3_muladd_2(&w0, &w2, &w1, x[1], x[6]); 723| 42.3k| word3_muladd_2(&w0, &w2, &w1, x[2], x[5]); 724| 42.3k| word3_muladd_2(&w0, &w2, &w1, x[3], x[4]); 725| 42.3k| z[7] = w1; 726| 42.3k| w1 = 0; 727| | 728| 42.3k| word3_muladd_2(&w1, &w0, &w2, x[0], x[8]); 729| 42.3k| word3_muladd_2(&w1, &w0, &w2, x[1], x[7]); 730| 42.3k| word3_muladd_2(&w1, &w0, &w2, x[2], x[6]); 731| 42.3k| word3_muladd_2(&w1, &w0, &w2, x[3], x[5]); 732| 42.3k| word3_muladd(&w1, &w0, &w2, x[4], x[4]); 733| 42.3k| z[8] = w2; 734| 42.3k| w2 = 0; 735| | 736| 42.3k| word3_muladd_2(&w2, &w1, &w0, x[0], x[9]); 737| 42.3k| word3_muladd_2(&w2, &w1, &w0, x[1], x[8]); 738| 42.3k| word3_muladd_2(&w2, &w1, &w0, x[2], x[7]); 739| 42.3k| word3_muladd_2(&w2, &w1, &w0, x[3], x[6]); 740| 42.3k| word3_muladd_2(&w2, &w1, &w0, x[4], x[5]); 741| 42.3k| z[9] = w0; 742| 42.3k| w0 = 0; 743| | 744| 42.3k| word3_muladd_2(&w0, &w2, &w1, x[0], x[10]); 745| 42.3k| word3_muladd_2(&w0, &w2, &w1, x[1], x[9]); 746| 42.3k| word3_muladd_2(&w0, &w2, &w1, x[2], x[8]); 747| 42.3k| word3_muladd_2(&w0, &w2, &w1, x[3], x[7]); 748| 42.3k| word3_muladd_2(&w0, &w2, &w1, x[4], x[6]); 749| 42.3k| word3_muladd(&w0, &w2, &w1, x[5], x[5]); 750| 42.3k| z[10] = w1; 751| 42.3k| w1 = 0; 752| | 753| 42.3k| word3_muladd_2(&w1, &w0, &w2, x[0], x[11]); 754| 42.3k| word3_muladd_2(&w1, &w0, &w2, x[1], x[10]); 755| 42.3k| word3_muladd_2(&w1, &w0, &w2, x[2], x[9]); 756| 42.3k| word3_muladd_2(&w1, &w0, &w2, x[3], x[8]); 757| 42.3k| word3_muladd_2(&w1, &w0, &w2, x[4], x[7]); 758| 42.3k| word3_muladd_2(&w1, &w0, &w2, x[5], x[6]); 759| 42.3k| z[11] = w2; 760| 42.3k| w2 = 0; 761| | 762| 42.3k| word3_muladd_2(&w2, &w1, &w0, x[0], x[12]); 763| 42.3k| word3_muladd_2(&w2, &w1, &w0, x[1], x[11]); 764| 42.3k| word3_muladd_2(&w2, &w1, &w0, x[2], x[10]); 765| 42.3k| word3_muladd_2(&w2, &w1, &w0, x[3], x[9]); 766| 42.3k| word3_muladd_2(&w2, &w1, &w0, x[4], x[8]); 767| 42.3k| word3_muladd_2(&w2, &w1, &w0, x[5], x[7]); 768| 42.3k| word3_muladd(&w2, &w1, &w0, x[6], x[6]); 769| 42.3k| z[12] = w0; 770| 42.3k| w0 = 0; 771| | 772| 42.3k| word3_muladd_2(&w0, &w2, &w1, x[0], x[13]); 773| 42.3k| word3_muladd_2(&w0, &w2, &w1, x[1], x[12]); 774| 42.3k| word3_muladd_2(&w0, &w2, &w1, x[2], x[11]); 775| 42.3k| word3_muladd_2(&w0, &w2, &w1, x[3], x[10]); 776| 42.3k| word3_muladd_2(&w0, &w2, &w1, x[4], x[9]); 777| 42.3k| word3_muladd_2(&w0, &w2, &w1, x[5], x[8]); 778| 42.3k| word3_muladd_2(&w0, &w2, &w1, x[6], x[7]); 779| 42.3k| z[13] = w1; 780| 42.3k| w1 = 0; 781| | 782| 42.3k| word3_muladd_2(&w1, &w0, &w2, x[0], x[14]); 783| 42.3k| word3_muladd_2(&w1, &w0, &w2, x[1], x[13]); 784| 42.3k| word3_muladd_2(&w1, &w0, &w2, x[2], x[12]); 785| 42.3k| word3_muladd_2(&w1, &w0, &w2, x[3], x[11]); 786| 42.3k| word3_muladd_2(&w1, &w0, &w2, x[4], x[10]); 787| 42.3k| word3_muladd_2(&w1, &w0, &w2, x[5], x[9]); 788| 42.3k| word3_muladd_2(&w1, &w0, &w2, x[6], x[8]); 789| 42.3k| word3_muladd(&w1, &w0, &w2, x[7], x[7]); 790| 42.3k| z[14] = w2; 791| 42.3k| w2 = 0; 792| | 793| 42.3k| word3_muladd_2(&w2, &w1, &w0, x[0], x[15]); 794| 42.3k| word3_muladd_2(&w2, &w1, &w0, x[1], x[14]); 795| 42.3k| word3_muladd_2(&w2, &w1, &w0, x[2], x[13]); 796| 42.3k| word3_muladd_2(&w2, &w1, &w0, x[3], x[12]); 797| 42.3k| word3_muladd_2(&w2, &w1, &w0, x[4], x[11]); 798| 42.3k| word3_muladd_2(&w2, &w1, &w0, x[5], x[10]); 799| 42.3k| word3_muladd_2(&w2, &w1, &w0, x[6], x[9]); 800| 42.3k| word3_muladd_2(&w2, &w1, &w0, x[7], x[8]); 801| 42.3k| z[15] = w0; 802| 42.3k| w0 = 0; 803| | 804| 42.3k| word3_muladd_2(&w0, &w2, &w1, x[1], x[15]); 805| 42.3k| word3_muladd_2(&w0, &w2, &w1, x[2], x[14]); 806| 42.3k| word3_muladd_2(&w0, &w2, &w1, x[3], x[13]); 807| 42.3k| word3_muladd_2(&w0, &w2, &w1, x[4], x[12]); 808| 42.3k| word3_muladd_2(&w0, &w2, &w1, x[5], x[11]); 809| 42.3k| word3_muladd_2(&w0, &w2, &w1, x[6], x[10]); 810| 42.3k| word3_muladd_2(&w0, &w2, &w1, x[7], x[9]); 811| 42.3k| word3_muladd(&w0, &w2, &w1, x[8], x[8]); 812| 42.3k| z[16] = w1; 813| 42.3k| w1 = 0; 814| | 815| 42.3k| word3_muladd_2(&w1, &w0, &w2, x[2], x[15]); 816| 42.3k| word3_muladd_2(&w1, &w0, &w2, x[3], x[14]); 817| 42.3k| word3_muladd_2(&w1, &w0, &w2, x[4], x[13]); 818| 42.3k| word3_muladd_2(&w1, &w0, &w2, x[5], x[12]); 819| 42.3k| word3_muladd_2(&w1, &w0, &w2, x[6], x[11]); 820| 42.3k| word3_muladd_2(&w1, &w0, &w2, x[7], x[10]); 821| 42.3k| word3_muladd_2(&w1, &w0, &w2, x[8], x[9]); 822| 42.3k| z[17] = w2; 823| 42.3k| w2 = 0; 824| | 825| 42.3k| word3_muladd_2(&w2, &w1, &w0, x[3], x[15]); 826| 42.3k| word3_muladd_2(&w2, &w1, &w0, x[4], x[14]); 827| 42.3k| word3_muladd_2(&w2, &w1, &w0, x[5], x[13]); 828| 42.3k| word3_muladd_2(&w2, &w1, &w0, x[6], x[12]); 829| 42.3k| word3_muladd_2(&w2, &w1, &w0, x[7], x[11]); 830| 42.3k| word3_muladd_2(&w2, &w1, &w0, x[8], x[10]); 831| 42.3k| word3_muladd(&w2, &w1, &w0, x[9], x[9]); 832| 42.3k| z[18] = w0; 833| 42.3k| w0 = 0; 834| | 835| 42.3k| word3_muladd_2(&w0, &w2, &w1, x[4], x[15]); 836| 42.3k| word3_muladd_2(&w0, &w2, &w1, x[5], x[14]); 837| 42.3k| word3_muladd_2(&w0, &w2, &w1, x[6], x[13]); 838| 42.3k| word3_muladd_2(&w0, &w2, &w1, x[7], x[12]); 839| 42.3k| word3_muladd_2(&w0, &w2, &w1, x[8], x[11]); 840| 42.3k| word3_muladd_2(&w0, &w2, &w1, x[9], x[10]); 841| 42.3k| z[19] = w1; 842| 42.3k| w1 = 0; 843| | 844| 42.3k| word3_muladd_2(&w1, &w0, &w2, x[5], x[15]); 845| 42.3k| word3_muladd_2(&w1, &w0, &w2, x[6], x[14]); 846| 42.3k| word3_muladd_2(&w1, &w0, &w2, x[7], x[13]); 847| 42.3k| word3_muladd_2(&w1, &w0, &w2, x[8], x[12]); 848| 42.3k| word3_muladd_2(&w1, &w0, &w2, x[9], x[11]); 849| 42.3k| word3_muladd(&w1, &w0, &w2, x[10], x[10]); 850| 42.3k| z[20] = w2; 851| 42.3k| w2 = 0; 852| | 853| 42.3k| word3_muladd_2(&w2, &w1, &w0, x[6], x[15]); 854| 42.3k| word3_muladd_2(&w2, &w1, &w0, x[7], x[14]); 855| 42.3k| word3_muladd_2(&w2, &w1, &w0, x[8], x[13]); 856| 42.3k| word3_muladd_2(&w2, &w1, &w0, x[9], x[12]); 857| 42.3k| word3_muladd_2(&w2, &w1, &w0, x[10], x[11]); 858| 42.3k| z[21] = w0; 859| 42.3k| w0 = 0; 860| | 861| 42.3k| word3_muladd_2(&w0, &w2, &w1, x[7], x[15]); 862| 42.3k| word3_muladd_2(&w0, &w2, &w1, x[8], x[14]); 863| 42.3k| word3_muladd_2(&w0, &w2, &w1, x[9], x[13]); 864| 42.3k| word3_muladd_2(&w0, &w2, &w1, x[10], x[12]); 865| 42.3k| word3_muladd(&w0, &w2, &w1, x[11], x[11]); 866| 42.3k| z[22] = w1; 867| 42.3k| w1 = 0; 868| | 869| 42.3k| word3_muladd_2(&w1, &w0, &w2, x[8], x[15]); 870| 42.3k| word3_muladd_2(&w1, &w0, &w2, x[9], x[14]); 871| 42.3k| word3_muladd_2(&w1, &w0, &w2, x[10], x[13]); 872| 42.3k| word3_muladd_2(&w1, &w0, &w2, x[11], x[12]); 873| 42.3k| z[23] = w2; 874| 42.3k| w2 = 0; 875| | 876| 42.3k| word3_muladd_2(&w2, &w1, &w0, x[9], x[15]); 877| 42.3k| word3_muladd_2(&w2, &w1, &w0, x[10], x[14]); 878| 42.3k| word3_muladd_2(&w2, &w1, &w0, x[11], x[13]); 879| 42.3k| word3_muladd(&w2, &w1, &w0, x[12], x[12]); 880| 42.3k| z[24] = w0; 881| 42.3k| w0 = 0; 882| | 883| 42.3k| word3_muladd_2(&w0, &w2, &w1, x[10], x[15]); 884| 42.3k| word3_muladd_2(&w0, &w2, &w1, x[11], x[14]); 885| 42.3k| word3_muladd_2(&w0, &w2, &w1, x[12], x[13]); 886| 42.3k| z[25] = w1; 887| 42.3k| w1 = 0; 888| | 889| 42.3k| word3_muladd_2(&w1, &w0, &w2, x[11], x[15]); 890| 42.3k| word3_muladd_2(&w1, &w0, &w2, x[12], x[14]); 891| 42.3k| word3_muladd(&w1, &w0, &w2, x[13], x[13]); 892| 42.3k| z[26] = w2; 893| 42.3k| w2 = 0; 894| | 895| 42.3k| word3_muladd_2(&w2, &w1, &w0, x[12], x[15]); 896| 42.3k| word3_muladd_2(&w2, &w1, &w0, x[13], x[14]); 897| 42.3k| z[27] = w0; 898| 42.3k| w0 = 0; 899| | 900| 42.3k| word3_muladd_2(&w0, &w2, &w1, x[13], x[15]); 901| 42.3k| word3_muladd(&w0, &w2, &w1, x[14], x[14]); 902| 42.3k| z[28] = w1; 903| 42.3k| w1 = 0; 904| | 905| 42.3k| word3_muladd_2(&w1, &w0, &w2, x[14], x[15]); 906| 42.3k| z[29] = w2; 907| 42.3k| w2 = 0; 908| | 909| 42.3k| word3_muladd(&w2, &w1, &w0, x[15], x[15]); 910| 42.3k| z[30] = w0; 911| 42.3k| z[31] = w1; 912| 42.3k|} _ZN5Botan18bigint_comba_mul16EPmPKmS2_: 917| 16.2k|void bigint_comba_mul16(word z[32], const word x[16], const word y[16]) { 918| 16.2k| word w2 = 0, w1 = 0, w0 = 0; 919| | 920| 16.2k| word3_muladd(&w2, &w1, &w0, x[0], y[0]); 921| 16.2k| z[0] = w0; 922| 16.2k| w0 = 0; 923| | 924| 16.2k| word3_muladd(&w0, &w2, &w1, x[0], y[1]); 925| 16.2k| word3_muladd(&w0, &w2, &w1, x[1], y[0]); 926| 16.2k| z[1] = w1; 927| 16.2k| w1 = 0; 928| | 929| 16.2k| word3_muladd(&w1, &w0, &w2, x[0], y[2]); 930| 16.2k| word3_muladd(&w1, &w0, &w2, x[1], y[1]); 931| 16.2k| word3_muladd(&w1, &w0, &w2, x[2], y[0]); 932| 16.2k| z[2] = w2; 933| 16.2k| w2 = 0; 934| | 935| 16.2k| word3_muladd(&w2, &w1, &w0, x[0], y[3]); 936| 16.2k| word3_muladd(&w2, &w1, &w0, x[1], y[2]); 937| 16.2k| word3_muladd(&w2, &w1, &w0, x[2], y[1]); 938| 16.2k| word3_muladd(&w2, &w1, &w0, x[3], y[0]); 939| 16.2k| z[3] = w0; 940| 16.2k| w0 = 0; 941| | 942| 16.2k| word3_muladd(&w0, &w2, &w1, x[0], y[4]); 943| 16.2k| word3_muladd(&w0, &w2, &w1, x[1], y[3]); 944| 16.2k| word3_muladd(&w0, &w2, &w1, x[2], y[2]); 945| 16.2k| word3_muladd(&w0, &w2, &w1, x[3], y[1]); 946| 16.2k| word3_muladd(&w0, &w2, &w1, x[4], y[0]); 947| 16.2k| z[4] = w1; 948| 16.2k| w1 = 0; 949| | 950| 16.2k| word3_muladd(&w1, &w0, &w2, x[0], y[5]); 951| 16.2k| word3_muladd(&w1, &w0, &w2, x[1], y[4]); 952| 16.2k| word3_muladd(&w1, &w0, &w2, x[2], y[3]); 953| 16.2k| word3_muladd(&w1, &w0, &w2, x[3], y[2]); 954| 16.2k| word3_muladd(&w1, &w0, &w2, x[4], y[1]); 955| 16.2k| word3_muladd(&w1, &w0, &w2, x[5], y[0]); 956| 16.2k| z[5] = w2; 957| 16.2k| w2 = 0; 958| | 959| 16.2k| word3_muladd(&w2, &w1, &w0, x[0], y[6]); 960| 16.2k| word3_muladd(&w2, &w1, &w0, x[1], y[5]); 961| 16.2k| word3_muladd(&w2, &w1, &w0, x[2], y[4]); 962| 16.2k| word3_muladd(&w2, &w1, &w0, x[3], y[3]); 963| 16.2k| word3_muladd(&w2, &w1, &w0, x[4], y[2]); 964| 16.2k| word3_muladd(&w2, &w1, &w0, x[5], y[1]); 965| 16.2k| word3_muladd(&w2, &w1, &w0, x[6], y[0]); 966| 16.2k| z[6] = w0; 967| 16.2k| w0 = 0; 968| | 969| 16.2k| word3_muladd(&w0, &w2, &w1, x[0], y[7]); 970| 16.2k| word3_muladd(&w0, &w2, &w1, x[1], y[6]); 971| 16.2k| word3_muladd(&w0, &w2, &w1, x[2], y[5]); 972| 16.2k| word3_muladd(&w0, &w2, &w1, x[3], y[4]); 973| 16.2k| word3_muladd(&w0, &w2, &w1, x[4], y[3]); 974| 16.2k| word3_muladd(&w0, &w2, &w1, x[5], y[2]); 975| 16.2k| word3_muladd(&w0, &w2, &w1, x[6], y[1]); 976| 16.2k| word3_muladd(&w0, &w2, &w1, x[7], y[0]); 977| 16.2k| z[7] = w1; 978| 16.2k| w1 = 0; 979| | 980| 16.2k| word3_muladd(&w1, &w0, &w2, x[0], y[8]); 981| 16.2k| word3_muladd(&w1, &w0, &w2, x[1], y[7]); 982| 16.2k| word3_muladd(&w1, &w0, &w2, x[2], y[6]); 983| 16.2k| word3_muladd(&w1, &w0, &w2, x[3], y[5]); 984| 16.2k| word3_muladd(&w1, &w0, &w2, x[4], y[4]); 985| 16.2k| word3_muladd(&w1, &w0, &w2, x[5], y[3]); 986| 16.2k| word3_muladd(&w1, &w0, &w2, x[6], y[2]); 987| 16.2k| word3_muladd(&w1, &w0, &w2, x[7], y[1]); 988| 16.2k| word3_muladd(&w1, &w0, &w2, x[8], y[0]); 989| 16.2k| z[8] = w2; 990| 16.2k| w2 = 0; 991| | 992| 16.2k| word3_muladd(&w2, &w1, &w0, x[0], y[9]); 993| 16.2k| word3_muladd(&w2, &w1, &w0, x[1], y[8]); 994| 16.2k| word3_muladd(&w2, &w1, &w0, x[2], y[7]); 995| 16.2k| word3_muladd(&w2, &w1, &w0, x[3], y[6]); 996| 16.2k| word3_muladd(&w2, &w1, &w0, x[4], y[5]); 997| 16.2k| word3_muladd(&w2, &w1, &w0, x[5], y[4]); 998| 16.2k| word3_muladd(&w2, &w1, &w0, x[6], y[3]); 999| 16.2k| word3_muladd(&w2, &w1, &w0, x[7], y[2]); 1000| 16.2k| word3_muladd(&w2, &w1, &w0, x[8], y[1]); 1001| 16.2k| word3_muladd(&w2, &w1, &w0, x[9], y[0]); 1002| 16.2k| z[9] = w0; 1003| 16.2k| w0 = 0; 1004| | 1005| 16.2k| word3_muladd(&w0, &w2, &w1, x[0], y[10]); 1006| 16.2k| word3_muladd(&w0, &w2, &w1, x[1], y[9]); 1007| 16.2k| word3_muladd(&w0, &w2, &w1, x[2], y[8]); 1008| 16.2k| word3_muladd(&w0, &w2, &w1, x[3], y[7]); 1009| 16.2k| word3_muladd(&w0, &w2, &w1, x[4], y[6]); 1010| 16.2k| word3_muladd(&w0, &w2, &w1, x[5], y[5]); 1011| 16.2k| word3_muladd(&w0, &w2, &w1, x[6], y[4]); 1012| 16.2k| word3_muladd(&w0, &w2, &w1, x[7], y[3]); 1013| 16.2k| word3_muladd(&w0, &w2, &w1, x[8], y[2]); 1014| 16.2k| word3_muladd(&w0, &w2, &w1, x[9], y[1]); 1015| 16.2k| word3_muladd(&w0, &w2, &w1, x[10], y[0]); 1016| 16.2k| z[10] = w1; 1017| 16.2k| w1 = 0; 1018| | 1019| 16.2k| word3_muladd(&w1, &w0, &w2, x[0], y[11]); 1020| 16.2k| word3_muladd(&w1, &w0, &w2, x[1], y[10]); 1021| 16.2k| word3_muladd(&w1, &w0, &w2, x[2], y[9]); 1022| 16.2k| word3_muladd(&w1, &w0, &w2, x[3], y[8]); 1023| 16.2k| word3_muladd(&w1, &w0, &w2, x[4], y[7]); 1024| 16.2k| word3_muladd(&w1, &w0, &w2, x[5], y[6]); 1025| 16.2k| word3_muladd(&w1, &w0, &w2, x[6], y[5]); 1026| 16.2k| word3_muladd(&w1, &w0, &w2, x[7], y[4]); 1027| 16.2k| word3_muladd(&w1, &w0, &w2, x[8], y[3]); 1028| 16.2k| word3_muladd(&w1, &w0, &w2, x[9], y[2]); 1029| 16.2k| word3_muladd(&w1, &w0, &w2, x[10], y[1]); 1030| 16.2k| word3_muladd(&w1, &w0, &w2, x[11], y[0]); 1031| 16.2k| z[11] = w2; 1032| 16.2k| w2 = 0; 1033| | 1034| 16.2k| word3_muladd(&w2, &w1, &w0, x[0], y[12]); 1035| 16.2k| word3_muladd(&w2, &w1, &w0, x[1], y[11]); 1036| 16.2k| word3_muladd(&w2, &w1, &w0, x[2], y[10]); 1037| 16.2k| word3_muladd(&w2, &w1, &w0, x[3], y[9]); 1038| 16.2k| word3_muladd(&w2, &w1, &w0, x[4], y[8]); 1039| 16.2k| word3_muladd(&w2, &w1, &w0, x[5], y[7]); 1040| 16.2k| word3_muladd(&w2, &w1, &w0, x[6], y[6]); 1041| 16.2k| word3_muladd(&w2, &w1, &w0, x[7], y[5]); 1042| 16.2k| word3_muladd(&w2, &w1, &w0, x[8], y[4]); 1043| 16.2k| word3_muladd(&w2, &w1, &w0, x[9], y[3]); 1044| 16.2k| word3_muladd(&w2, &w1, &w0, x[10], y[2]); 1045| 16.2k| word3_muladd(&w2, &w1, &w0, x[11], y[1]); 1046| 16.2k| word3_muladd(&w2, &w1, &w0, x[12], y[0]); 1047| 16.2k| z[12] = w0; 1048| 16.2k| w0 = 0; 1049| | 1050| 16.2k| word3_muladd(&w0, &w2, &w1, x[0], y[13]); 1051| 16.2k| word3_muladd(&w0, &w2, &w1, x[1], y[12]); 1052| 16.2k| word3_muladd(&w0, &w2, &w1, x[2], y[11]); 1053| 16.2k| word3_muladd(&w0, &w2, &w1, x[3], y[10]); 1054| 16.2k| word3_muladd(&w0, &w2, &w1, x[4], y[9]); 1055| 16.2k| word3_muladd(&w0, &w2, &w1, x[5], y[8]); 1056| 16.2k| word3_muladd(&w0, &w2, &w1, x[6], y[7]); 1057| 16.2k| word3_muladd(&w0, &w2, &w1, x[7], y[6]); 1058| 16.2k| word3_muladd(&w0, &w2, &w1, x[8], y[5]); 1059| 16.2k| word3_muladd(&w0, &w2, &w1, x[9], y[4]); 1060| 16.2k| word3_muladd(&w0, &w2, &w1, x[10], y[3]); 1061| 16.2k| word3_muladd(&w0, &w2, &w1, x[11], y[2]); 1062| 16.2k| word3_muladd(&w0, &w2, &w1, x[12], y[1]); 1063| 16.2k| word3_muladd(&w0, &w2, &w1, x[13], y[0]); 1064| 16.2k| z[13] = w1; 1065| 16.2k| w1 = 0; 1066| | 1067| 16.2k| word3_muladd(&w1, &w0, &w2, x[0], y[14]); 1068| 16.2k| word3_muladd(&w1, &w0, &w2, x[1], y[13]); 1069| 16.2k| word3_muladd(&w1, &w0, &w2, x[2], y[12]); 1070| 16.2k| word3_muladd(&w1, &w0, &w2, x[3], y[11]); 1071| 16.2k| word3_muladd(&w1, &w0, &w2, x[4], y[10]); 1072| 16.2k| word3_muladd(&w1, &w0, &w2, x[5], y[9]); 1073| 16.2k| word3_muladd(&w1, &w0, &w2, x[6], y[8]); 1074| 16.2k| word3_muladd(&w1, &w0, &w2, x[7], y[7]); 1075| 16.2k| word3_muladd(&w1, &w0, &w2, x[8], y[6]); 1076| 16.2k| word3_muladd(&w1, &w0, &w2, x[9], y[5]); 1077| 16.2k| word3_muladd(&w1, &w0, &w2, x[10], y[4]); 1078| 16.2k| word3_muladd(&w1, &w0, &w2, x[11], y[3]); 1079| 16.2k| word3_muladd(&w1, &w0, &w2, x[12], y[2]); 1080| 16.2k| word3_muladd(&w1, &w0, &w2, x[13], y[1]); 1081| 16.2k| word3_muladd(&w1, &w0, &w2, x[14], y[0]); 1082| 16.2k| z[14] = w2; 1083| 16.2k| w2 = 0; 1084| | 1085| 16.2k| word3_muladd(&w2, &w1, &w0, x[0], y[15]); 1086| 16.2k| word3_muladd(&w2, &w1, &w0, x[1], y[14]); 1087| 16.2k| word3_muladd(&w2, &w1, &w0, x[2], y[13]); 1088| 16.2k| word3_muladd(&w2, &w1, &w0, x[3], y[12]); 1089| 16.2k| word3_muladd(&w2, &w1, &w0, x[4], y[11]); 1090| 16.2k| word3_muladd(&w2, &w1, &w0, x[5], y[10]); 1091| 16.2k| word3_muladd(&w2, &w1, &w0, x[6], y[9]); 1092| 16.2k| word3_muladd(&w2, &w1, &w0, x[7], y[8]); 1093| 16.2k| word3_muladd(&w2, &w1, &w0, x[8], y[7]); 1094| 16.2k| word3_muladd(&w2, &w1, &w0, x[9], y[6]); 1095| 16.2k| word3_muladd(&w2, &w1, &w0, x[10], y[5]); 1096| 16.2k| word3_muladd(&w2, &w1, &w0, x[11], y[4]); 1097| 16.2k| word3_muladd(&w2, &w1, &w0, x[12], y[3]); 1098| 16.2k| word3_muladd(&w2, &w1, &w0, x[13], y[2]); 1099| 16.2k| word3_muladd(&w2, &w1, &w0, x[14], y[1]); 1100| 16.2k| word3_muladd(&w2, &w1, &w0, x[15], y[0]); 1101| 16.2k| z[15] = w0; 1102| 16.2k| w0 = 0; 1103| | 1104| 16.2k| word3_muladd(&w0, &w2, &w1, x[1], y[15]); 1105| 16.2k| word3_muladd(&w0, &w2, &w1, x[2], y[14]); 1106| 16.2k| word3_muladd(&w0, &w2, &w1, x[3], y[13]); 1107| 16.2k| word3_muladd(&w0, &w2, &w1, x[4], y[12]); 1108| 16.2k| word3_muladd(&w0, &w2, &w1, x[5], y[11]); 1109| 16.2k| word3_muladd(&w0, &w2, &w1, x[6], y[10]); 1110| 16.2k| word3_muladd(&w0, &w2, &w1, x[7], y[9]); 1111| 16.2k| word3_muladd(&w0, &w2, &w1, x[8], y[8]); 1112| 16.2k| word3_muladd(&w0, &w2, &w1, x[9], y[7]); 1113| 16.2k| word3_muladd(&w0, &w2, &w1, x[10], y[6]); 1114| 16.2k| word3_muladd(&w0, &w2, &w1, x[11], y[5]); 1115| 16.2k| word3_muladd(&w0, &w2, &w1, x[12], y[4]); 1116| 16.2k| word3_muladd(&w0, &w2, &w1, x[13], y[3]); 1117| 16.2k| word3_muladd(&w0, &w2, &w1, x[14], y[2]); 1118| 16.2k| word3_muladd(&w0, &w2, &w1, x[15], y[1]); 1119| 16.2k| z[16] = w1; 1120| 16.2k| w1 = 0; 1121| | 1122| 16.2k| word3_muladd(&w1, &w0, &w2, x[2], y[15]); 1123| 16.2k| word3_muladd(&w1, &w0, &w2, x[3], y[14]); 1124| 16.2k| word3_muladd(&w1, &w0, &w2, x[4], y[13]); 1125| 16.2k| word3_muladd(&w1, &w0, &w2, x[5], y[12]); 1126| 16.2k| word3_muladd(&w1, &w0, &w2, x[6], y[11]); 1127| 16.2k| word3_muladd(&w1, &w0, &w2, x[7], y[10]); 1128| 16.2k| word3_muladd(&w1, &w0, &w2, x[8], y[9]); 1129| 16.2k| word3_muladd(&w1, &w0, &w2, x[9], y[8]); 1130| 16.2k| word3_muladd(&w1, &w0, &w2, x[10], y[7]); 1131| 16.2k| word3_muladd(&w1, &w0, &w2, x[11], y[6]); 1132| 16.2k| word3_muladd(&w1, &w0, &w2, x[12], y[5]); 1133| 16.2k| word3_muladd(&w1, &w0, &w2, x[13], y[4]); 1134| 16.2k| word3_muladd(&w1, &w0, &w2, x[14], y[3]); 1135| 16.2k| word3_muladd(&w1, &w0, &w2, x[15], y[2]); 1136| 16.2k| z[17] = w2; 1137| 16.2k| w2 = 0; 1138| | 1139| 16.2k| word3_muladd(&w2, &w1, &w0, x[3], y[15]); 1140| 16.2k| word3_muladd(&w2, &w1, &w0, x[4], y[14]); 1141| 16.2k| word3_muladd(&w2, &w1, &w0, x[5], y[13]); 1142| 16.2k| word3_muladd(&w2, &w1, &w0, x[6], y[12]); 1143| 16.2k| word3_muladd(&w2, &w1, &w0, x[7], y[11]); 1144| 16.2k| word3_muladd(&w2, &w1, &w0, x[8], y[10]); 1145| 16.2k| word3_muladd(&w2, &w1, &w0, x[9], y[9]); 1146| 16.2k| word3_muladd(&w2, &w1, &w0, x[10], y[8]); 1147| 16.2k| word3_muladd(&w2, &w1, &w0, x[11], y[7]); 1148| 16.2k| word3_muladd(&w2, &w1, &w0, x[12], y[6]); 1149| 16.2k| word3_muladd(&w2, &w1, &w0, x[13], y[5]); 1150| 16.2k| word3_muladd(&w2, &w1, &w0, x[14], y[4]); 1151| 16.2k| word3_muladd(&w2, &w1, &w0, x[15], y[3]); 1152| 16.2k| z[18] = w0; 1153| 16.2k| w0 = 0; 1154| | 1155| 16.2k| word3_muladd(&w0, &w2, &w1, x[4], y[15]); 1156| 16.2k| word3_muladd(&w0, &w2, &w1, x[5], y[14]); 1157| 16.2k| word3_muladd(&w0, &w2, &w1, x[6], y[13]); 1158| 16.2k| word3_muladd(&w0, &w2, &w1, x[7], y[12]); 1159| 16.2k| word3_muladd(&w0, &w2, &w1, x[8], y[11]); 1160| 16.2k| word3_muladd(&w0, &w2, &w1, x[9], y[10]); 1161| 16.2k| word3_muladd(&w0, &w2, &w1, x[10], y[9]); 1162| 16.2k| word3_muladd(&w0, &w2, &w1, x[11], y[8]); 1163| 16.2k| word3_muladd(&w0, &w2, &w1, x[12], y[7]); 1164| 16.2k| word3_muladd(&w0, &w2, &w1, x[13], y[6]); 1165| 16.2k| word3_muladd(&w0, &w2, &w1, x[14], y[5]); 1166| 16.2k| word3_muladd(&w0, &w2, &w1, x[15], y[4]); 1167| 16.2k| z[19] = w1; 1168| 16.2k| w1 = 0; 1169| | 1170| 16.2k| word3_muladd(&w1, &w0, &w2, x[5], y[15]); 1171| 16.2k| word3_muladd(&w1, &w0, &w2, x[6], y[14]); 1172| 16.2k| word3_muladd(&w1, &w0, &w2, x[7], y[13]); 1173| 16.2k| word3_muladd(&w1, &w0, &w2, x[8], y[12]); 1174| 16.2k| word3_muladd(&w1, &w0, &w2, x[9], y[11]); 1175| 16.2k| word3_muladd(&w1, &w0, &w2, x[10], y[10]); 1176| 16.2k| word3_muladd(&w1, &w0, &w2, x[11], y[9]); 1177| 16.2k| word3_muladd(&w1, &w0, &w2, x[12], y[8]); 1178| 16.2k| word3_muladd(&w1, &w0, &w2, x[13], y[7]); 1179| 16.2k| word3_muladd(&w1, &w0, &w2, x[14], y[6]); 1180| 16.2k| word3_muladd(&w1, &w0, &w2, x[15], y[5]); 1181| 16.2k| z[20] = w2; 1182| 16.2k| w2 = 0; 1183| | 1184| 16.2k| word3_muladd(&w2, &w1, &w0, x[6], y[15]); 1185| 16.2k| word3_muladd(&w2, &w1, &w0, x[7], y[14]); 1186| 16.2k| word3_muladd(&w2, &w1, &w0, x[8], y[13]); 1187| 16.2k| word3_muladd(&w2, &w1, &w0, x[9], y[12]); 1188| 16.2k| word3_muladd(&w2, &w1, &w0, x[10], y[11]); 1189| 16.2k| word3_muladd(&w2, &w1, &w0, x[11], y[10]); 1190| 16.2k| word3_muladd(&w2, &w1, &w0, x[12], y[9]); 1191| 16.2k| word3_muladd(&w2, &w1, &w0, x[13], y[8]); 1192| 16.2k| word3_muladd(&w2, &w1, &w0, x[14], y[7]); 1193| 16.2k| word3_muladd(&w2, &w1, &w0, x[15], y[6]); 1194| 16.2k| z[21] = w0; 1195| 16.2k| w0 = 0; 1196| | 1197| 16.2k| word3_muladd(&w0, &w2, &w1, x[7], y[15]); 1198| 16.2k| word3_muladd(&w0, &w2, &w1, x[8], y[14]); 1199| 16.2k| word3_muladd(&w0, &w2, &w1, x[9], y[13]); 1200| 16.2k| word3_muladd(&w0, &w2, &w1, x[10], y[12]); 1201| 16.2k| word3_muladd(&w0, &w2, &w1, x[11], y[11]); 1202| 16.2k| word3_muladd(&w0, &w2, &w1, x[12], y[10]); 1203| 16.2k| word3_muladd(&w0, &w2, &w1, x[13], y[9]); 1204| 16.2k| word3_muladd(&w0, &w2, &w1, x[14], y[8]); 1205| 16.2k| word3_muladd(&w0, &w2, &w1, x[15], y[7]); 1206| 16.2k| z[22] = w1; 1207| 16.2k| w1 = 0; 1208| | 1209| 16.2k| word3_muladd(&w1, &w0, &w2, x[8], y[15]); 1210| 16.2k| word3_muladd(&w1, &w0, &w2, x[9], y[14]); 1211| 16.2k| word3_muladd(&w1, &w0, &w2, x[10], y[13]); 1212| 16.2k| word3_muladd(&w1, &w0, &w2, x[11], y[12]); 1213| 16.2k| word3_muladd(&w1, &w0, &w2, x[12], y[11]); 1214| 16.2k| word3_muladd(&w1, &w0, &w2, x[13], y[10]); 1215| 16.2k| word3_muladd(&w1, &w0, &w2, x[14], y[9]); 1216| 16.2k| word3_muladd(&w1, &w0, &w2, x[15], y[8]); 1217| 16.2k| z[23] = w2; 1218| 16.2k| w2 = 0; 1219| | 1220| 16.2k| word3_muladd(&w2, &w1, &w0, x[9], y[15]); 1221| 16.2k| word3_muladd(&w2, &w1, &w0, x[10], y[14]); 1222| 16.2k| word3_muladd(&w2, &w1, &w0, x[11], y[13]); 1223| 16.2k| word3_muladd(&w2, &w1, &w0, x[12], y[12]); 1224| 16.2k| word3_muladd(&w2, &w1, &w0, x[13], y[11]); 1225| 16.2k| word3_muladd(&w2, &w1, &w0, x[14], y[10]); 1226| 16.2k| word3_muladd(&w2, &w1, &w0, x[15], y[9]); 1227| 16.2k| z[24] = w0; 1228| 16.2k| w0 = 0; 1229| | 1230| 16.2k| word3_muladd(&w0, &w2, &w1, x[10], y[15]); 1231| 16.2k| word3_muladd(&w0, &w2, &w1, x[11], y[14]); 1232| 16.2k| word3_muladd(&w0, &w2, &w1, x[12], y[13]); 1233| 16.2k| word3_muladd(&w0, &w2, &w1, x[13], y[12]); 1234| 16.2k| word3_muladd(&w0, &w2, &w1, x[14], y[11]); 1235| 16.2k| word3_muladd(&w0, &w2, &w1, x[15], y[10]); 1236| 16.2k| z[25] = w1; 1237| 16.2k| w1 = 0; 1238| | 1239| 16.2k| word3_muladd(&w1, &w0, &w2, x[11], y[15]); 1240| 16.2k| word3_muladd(&w1, &w0, &w2, x[12], y[14]); 1241| 16.2k| word3_muladd(&w1, &w0, &w2, x[13], y[13]); 1242| 16.2k| word3_muladd(&w1, &w0, &w2, x[14], y[12]); 1243| 16.2k| word3_muladd(&w1, &w0, &w2, x[15], y[11]); 1244| 16.2k| z[26] = w2; 1245| 16.2k| w2 = 0; 1246| | 1247| 16.2k| word3_muladd(&w2, &w1, &w0, x[12], y[15]); 1248| 16.2k| word3_muladd(&w2, &w1, &w0, x[13], y[14]); 1249| 16.2k| word3_muladd(&w2, &w1, &w0, x[14], y[13]); 1250| 16.2k| word3_muladd(&w2, &w1, &w0, x[15], y[12]); 1251| 16.2k| z[27] = w0; 1252| 16.2k| w0 = 0; 1253| | 1254| 16.2k| word3_muladd(&w0, &w2, &w1, x[13], y[15]); 1255| 16.2k| word3_muladd(&w0, &w2, &w1, x[14], y[14]); 1256| 16.2k| word3_muladd(&w0, &w2, &w1, x[15], y[13]); 1257| 16.2k| z[28] = w1; 1258| 16.2k| w1 = 0; 1259| | 1260| 16.2k| word3_muladd(&w1, &w0, &w2, x[14], y[15]); 1261| 16.2k| word3_muladd(&w1, &w0, &w2, x[15], y[14]); 1262| 16.2k| z[29] = w2; 1263| 16.2k| w2 = 0; 1264| | 1265| 16.2k| word3_muladd(&w2, &w1, &w0, x[15], y[15]); 1266| 16.2k| z[30] = w0; 1267| 16.2k| z[31] = w1; 1268| 16.2k|} _ZN5Botan18bigint_comba_sqr24EPmPKm: 1273| 2.59k|void bigint_comba_sqr24(word z[48], const word x[24]) { 1274| 2.59k| word w2 = 0, w1 = 0, w0 = 0; 1275| | 1276| 2.59k| word3_muladd(&w2, &w1, &w0, x[0], x[0]); 1277| 2.59k| z[0] = w0; 1278| 2.59k| w0 = 0; 1279| | 1280| 2.59k| word3_muladd_2(&w0, &w2, &w1, x[0], x[1]); 1281| 2.59k| z[1] = w1; 1282| 2.59k| w1 = 0; 1283| | 1284| 2.59k| word3_muladd_2(&w1, &w0, &w2, x[0], x[2]); 1285| 2.59k| word3_muladd(&w1, &w0, &w2, x[1], x[1]); 1286| 2.59k| z[2] = w2; 1287| 2.59k| w2 = 0; 1288| | 1289| 2.59k| word3_muladd_2(&w2, &w1, &w0, x[0], x[3]); 1290| 2.59k| word3_muladd_2(&w2, &w1, &w0, x[1], x[2]); 1291| 2.59k| z[3] = w0; 1292| 2.59k| w0 = 0; 1293| | 1294| 2.59k| word3_muladd_2(&w0, &w2, &w1, x[0], x[4]); 1295| 2.59k| word3_muladd_2(&w0, &w2, &w1, x[1], x[3]); 1296| 2.59k| word3_muladd(&w0, &w2, &w1, x[2], x[2]); 1297| 2.59k| z[4] = w1; 1298| 2.59k| w1 = 0; 1299| | 1300| 2.59k| word3_muladd_2(&w1, &w0, &w2, x[0], x[5]); 1301| 2.59k| word3_muladd_2(&w1, &w0, &w2, x[1], x[4]); 1302| 2.59k| word3_muladd_2(&w1, &w0, &w2, x[2], x[3]); 1303| 2.59k| z[5] = w2; 1304| 2.59k| w2 = 0; 1305| | 1306| 2.59k| word3_muladd_2(&w2, &w1, &w0, x[0], x[6]); 1307| 2.59k| word3_muladd_2(&w2, &w1, &w0, x[1], x[5]); 1308| 2.59k| word3_muladd_2(&w2, &w1, &w0, x[2], x[4]); 1309| 2.59k| word3_muladd(&w2, &w1, &w0, x[3], x[3]); 1310| 2.59k| z[6] = w0; 1311| 2.59k| w0 = 0; 1312| | 1313| 2.59k| word3_muladd_2(&w0, &w2, &w1, x[0], x[7]); 1314| 2.59k| word3_muladd_2(&w0, &w2, &w1, x[1], x[6]); 1315| 2.59k| word3_muladd_2(&w0, &w2, &w1, x[2], x[5]); 1316| 2.59k| word3_muladd_2(&w0, &w2, &w1, x[3], x[4]); 1317| 2.59k| z[7] = w1; 1318| 2.59k| w1 = 0; 1319| | 1320| 2.59k| word3_muladd_2(&w1, &w0, &w2, x[0], x[8]); 1321| 2.59k| word3_muladd_2(&w1, &w0, &w2, x[1], x[7]); 1322| 2.59k| word3_muladd_2(&w1, &w0, &w2, x[2], x[6]); 1323| 2.59k| word3_muladd_2(&w1, &w0, &w2, x[3], x[5]); 1324| 2.59k| word3_muladd(&w1, &w0, &w2, x[4], x[4]); 1325| 2.59k| z[8] = w2; 1326| 2.59k| w2 = 0; 1327| | 1328| 2.59k| word3_muladd_2(&w2, &w1, &w0, x[0], x[9]); 1329| 2.59k| word3_muladd_2(&w2, &w1, &w0, x[1], x[8]); 1330| 2.59k| word3_muladd_2(&w2, &w1, &w0, x[2], x[7]); 1331| 2.59k| word3_muladd_2(&w2, &w1, &w0, x[3], x[6]); 1332| 2.59k| word3_muladd_2(&w2, &w1, &w0, x[4], x[5]); 1333| 2.59k| z[9] = w0; 1334| 2.59k| w0 = 0; 1335| | 1336| 2.59k| word3_muladd_2(&w0, &w2, &w1, x[0], x[10]); 1337| 2.59k| word3_muladd_2(&w0, &w2, &w1, x[1], x[9]); 1338| 2.59k| word3_muladd_2(&w0, &w2, &w1, x[2], x[8]); 1339| 2.59k| word3_muladd_2(&w0, &w2, &w1, x[3], x[7]); 1340| 2.59k| word3_muladd_2(&w0, &w2, &w1, x[4], x[6]); 1341| 2.59k| word3_muladd(&w0, &w2, &w1, x[5], x[5]); 1342| 2.59k| z[10] = w1; 1343| 2.59k| w1 = 0; 1344| | 1345| 2.59k| word3_muladd_2(&w1, &w0, &w2, x[0], x[11]); 1346| 2.59k| word3_muladd_2(&w1, &w0, &w2, x[1], x[10]); 1347| 2.59k| word3_muladd_2(&w1, &w0, &w2, x[2], x[9]); 1348| 2.59k| word3_muladd_2(&w1, &w0, &w2, x[3], x[8]); 1349| 2.59k| word3_muladd_2(&w1, &w0, &w2, x[4], x[7]); 1350| 2.59k| word3_muladd_2(&w1, &w0, &w2, x[5], x[6]); 1351| 2.59k| z[11] = w2; 1352| 2.59k| w2 = 0; 1353| | 1354| 2.59k| word3_muladd_2(&w2, &w1, &w0, x[0], x[12]); 1355| 2.59k| word3_muladd_2(&w2, &w1, &w0, x[1], x[11]); 1356| 2.59k| word3_muladd_2(&w2, &w1, &w0, x[2], x[10]); 1357| 2.59k| word3_muladd_2(&w2, &w1, &w0, x[3], x[9]); 1358| 2.59k| word3_muladd_2(&w2, &w1, &w0, x[4], x[8]); 1359| 2.59k| word3_muladd_2(&w2, &w1, &w0, x[5], x[7]); 1360| 2.59k| word3_muladd(&w2, &w1, &w0, x[6], x[6]); 1361| 2.59k| z[12] = w0; 1362| 2.59k| w0 = 0; 1363| | 1364| 2.59k| word3_muladd_2(&w0, &w2, &w1, x[0], x[13]); 1365| 2.59k| word3_muladd_2(&w0, &w2, &w1, x[1], x[12]); 1366| 2.59k| word3_muladd_2(&w0, &w2, &w1, x[2], x[11]); 1367| 2.59k| word3_muladd_2(&w0, &w2, &w1, x[3], x[10]); 1368| 2.59k| word3_muladd_2(&w0, &w2, &w1, x[4], x[9]); 1369| 2.59k| word3_muladd_2(&w0, &w2, &w1, x[5], x[8]); 1370| 2.59k| word3_muladd_2(&w0, &w2, &w1, x[6], x[7]); 1371| 2.59k| z[13] = w1; 1372| 2.59k| w1 = 0; 1373| | 1374| 2.59k| word3_muladd_2(&w1, &w0, &w2, x[0], x[14]); 1375| 2.59k| word3_muladd_2(&w1, &w0, &w2, x[1], x[13]); 1376| 2.59k| word3_muladd_2(&w1, &w0, &w2, x[2], x[12]); 1377| 2.59k| word3_muladd_2(&w1, &w0, &w2, x[3], x[11]); 1378| 2.59k| word3_muladd_2(&w1, &w0, &w2, x[4], x[10]); 1379| 2.59k| word3_muladd_2(&w1, &w0, &w2, x[5], x[9]); 1380| 2.59k| word3_muladd_2(&w1, &w0, &w2, x[6], x[8]); 1381| 2.59k| word3_muladd(&w1, &w0, &w2, x[7], x[7]); 1382| 2.59k| z[14] = w2; 1383| 2.59k| w2 = 0; 1384| | 1385| 2.59k| word3_muladd_2(&w2, &w1, &w0, x[0], x[15]); 1386| 2.59k| word3_muladd_2(&w2, &w1, &w0, x[1], x[14]); 1387| 2.59k| word3_muladd_2(&w2, &w1, &w0, x[2], x[13]); 1388| 2.59k| word3_muladd_2(&w2, &w1, &w0, x[3], x[12]); 1389| 2.59k| word3_muladd_2(&w2, &w1, &w0, x[4], x[11]); 1390| 2.59k| word3_muladd_2(&w2, &w1, &w0, x[5], x[10]); 1391| 2.59k| word3_muladd_2(&w2, &w1, &w0, x[6], x[9]); 1392| 2.59k| word3_muladd_2(&w2, &w1, &w0, x[7], x[8]); 1393| 2.59k| z[15] = w0; 1394| 2.59k| w0 = 0; 1395| | 1396| 2.59k| word3_muladd_2(&w0, &w2, &w1, x[0], x[16]); 1397| 2.59k| word3_muladd_2(&w0, &w2, &w1, x[1], x[15]); 1398| 2.59k| word3_muladd_2(&w0, &w2, &w1, x[2], x[14]); 1399| 2.59k| word3_muladd_2(&w0, &w2, &w1, x[3], x[13]); 1400| 2.59k| word3_muladd_2(&w0, &w2, &w1, x[4], x[12]); 1401| 2.59k| word3_muladd_2(&w0, &w2, &w1, x[5], x[11]); 1402| 2.59k| word3_muladd_2(&w0, &w2, &w1, x[6], x[10]); 1403| 2.59k| word3_muladd_2(&w0, &w2, &w1, x[7], x[9]); 1404| 2.59k| word3_muladd(&w0, &w2, &w1, x[8], x[8]); 1405| 2.59k| z[16] = w1; 1406| 2.59k| w1 = 0; 1407| | 1408| 2.59k| word3_muladd_2(&w1, &w0, &w2, x[0], x[17]); 1409| 2.59k| word3_muladd_2(&w1, &w0, &w2, x[1], x[16]); 1410| 2.59k| word3_muladd_2(&w1, &w0, &w2, x[2], x[15]); 1411| 2.59k| word3_muladd_2(&w1, &w0, &w2, x[3], x[14]); 1412| 2.59k| word3_muladd_2(&w1, &w0, &w2, x[4], x[13]); 1413| 2.59k| word3_muladd_2(&w1, &w0, &w2, x[5], x[12]); 1414| 2.59k| word3_muladd_2(&w1, &w0, &w2, x[6], x[11]); 1415| 2.59k| word3_muladd_2(&w1, &w0, &w2, x[7], x[10]); 1416| 2.59k| word3_muladd_2(&w1, &w0, &w2, x[8], x[9]); 1417| 2.59k| z[17] = w2; 1418| 2.59k| w2 = 0; 1419| | 1420| 2.59k| word3_muladd_2(&w2, &w1, &w0, x[0], x[18]); 1421| 2.59k| word3_muladd_2(&w2, &w1, &w0, x[1], x[17]); 1422| 2.59k| word3_muladd_2(&w2, &w1, &w0, x[2], x[16]); 1423| 2.59k| word3_muladd_2(&w2, &w1, &w0, x[3], x[15]); 1424| 2.59k| word3_muladd_2(&w2, &w1, &w0, x[4], x[14]); 1425| 2.59k| word3_muladd_2(&w2, &w1, &w0, x[5], x[13]); 1426| 2.59k| word3_muladd_2(&w2, &w1, &w0, x[6], x[12]); 1427| 2.59k| word3_muladd_2(&w2, &w1, &w0, x[7], x[11]); 1428| 2.59k| word3_muladd_2(&w2, &w1, &w0, x[8], x[10]); 1429| 2.59k| word3_muladd(&w2, &w1, &w0, x[9], x[9]); 1430| 2.59k| z[18] = w0; 1431| 2.59k| w0 = 0; 1432| | 1433| 2.59k| word3_muladd_2(&w0, &w2, &w1, x[0], x[19]); 1434| 2.59k| word3_muladd_2(&w0, &w2, &w1, x[1], x[18]); 1435| 2.59k| word3_muladd_2(&w0, &w2, &w1, x[2], x[17]); 1436| 2.59k| word3_muladd_2(&w0, &w2, &w1, x[3], x[16]); 1437| 2.59k| word3_muladd_2(&w0, &w2, &w1, x[4], x[15]); 1438| 2.59k| word3_muladd_2(&w0, &w2, &w1, x[5], x[14]); 1439| 2.59k| word3_muladd_2(&w0, &w2, &w1, x[6], x[13]); 1440| 2.59k| word3_muladd_2(&w0, &w2, &w1, x[7], x[12]); 1441| 2.59k| word3_muladd_2(&w0, &w2, &w1, x[8], x[11]); 1442| 2.59k| word3_muladd_2(&w0, &w2, &w1, x[9], x[10]); 1443| 2.59k| z[19] = w1; 1444| 2.59k| w1 = 0; 1445| | 1446| 2.59k| word3_muladd_2(&w1, &w0, &w2, x[0], x[20]); 1447| 2.59k| word3_muladd_2(&w1, &w0, &w2, x[1], x[19]); 1448| 2.59k| word3_muladd_2(&w1, &w0, &w2, x[2], x[18]); 1449| 2.59k| word3_muladd_2(&w1, &w0, &w2, x[3], x[17]); 1450| 2.59k| word3_muladd_2(&w1, &w0, &w2, x[4], x[16]); 1451| 2.59k| word3_muladd_2(&w1, &w0, &w2, x[5], x[15]); 1452| 2.59k| word3_muladd_2(&w1, &w0, &w2, x[6], x[14]); 1453| 2.59k| word3_muladd_2(&w1, &w0, &w2, x[7], x[13]); 1454| 2.59k| word3_muladd_2(&w1, &w0, &w2, x[8], x[12]); 1455| 2.59k| word3_muladd_2(&w1, &w0, &w2, x[9], x[11]); 1456| 2.59k| word3_muladd(&w1, &w0, &w2, x[10], x[10]); 1457| 2.59k| z[20] = w2; 1458| 2.59k| w2 = 0; 1459| | 1460| 2.59k| word3_muladd_2(&w2, &w1, &w0, x[0], x[21]); 1461| 2.59k| word3_muladd_2(&w2, &w1, &w0, x[1], x[20]); 1462| 2.59k| word3_muladd_2(&w2, &w1, &w0, x[2], x[19]); 1463| 2.59k| word3_muladd_2(&w2, &w1, &w0, x[3], x[18]); 1464| 2.59k| word3_muladd_2(&w2, &w1, &w0, x[4], x[17]); 1465| 2.59k| word3_muladd_2(&w2, &w1, &w0, x[5], x[16]); 1466| 2.59k| word3_muladd_2(&w2, &w1, &w0, x[6], x[15]); 1467| 2.59k| word3_muladd_2(&w2, &w1, &w0, x[7], x[14]); 1468| 2.59k| word3_muladd_2(&w2, &w1, &w0, x[8], x[13]); 1469| 2.59k| word3_muladd_2(&w2, &w1, &w0, x[9], x[12]); 1470| 2.59k| word3_muladd_2(&w2, &w1, &w0, x[10], x[11]); 1471| 2.59k| z[21] = w0; 1472| 2.59k| w0 = 0; 1473| | 1474| 2.59k| word3_muladd_2(&w0, &w2, &w1, x[0], x[22]); 1475| 2.59k| word3_muladd_2(&w0, &w2, &w1, x[1], x[21]); 1476| 2.59k| word3_muladd_2(&w0, &w2, &w1, x[2], x[20]); 1477| 2.59k| word3_muladd_2(&w0, &w2, &w1, x[3], x[19]); 1478| 2.59k| word3_muladd_2(&w0, &w2, &w1, x[4], x[18]); 1479| 2.59k| word3_muladd_2(&w0, &w2, &w1, x[5], x[17]); 1480| 2.59k| word3_muladd_2(&w0, &w2, &w1, x[6], x[16]); 1481| 2.59k| word3_muladd_2(&w0, &w2, &w1, x[7], x[15]); 1482| 2.59k| word3_muladd_2(&w0, &w2, &w1, x[8], x[14]); 1483| 2.59k| word3_muladd_2(&w0, &w2, &w1, x[9], x[13]); 1484| 2.59k| word3_muladd_2(&w0, &w2, &w1, x[10], x[12]); 1485| 2.59k| word3_muladd(&w0, &w2, &w1, x[11], x[11]); 1486| 2.59k| z[22] = w1; 1487| 2.59k| w1 = 0; 1488| | 1489| 2.59k| word3_muladd_2(&w1, &w0, &w2, x[0], x[23]); 1490| 2.59k| word3_muladd_2(&w1, &w0, &w2, x[1], x[22]); 1491| 2.59k| word3_muladd_2(&w1, &w0, &w2, x[2], x[21]); 1492| 2.59k| word3_muladd_2(&w1, &w0, &w2, x[3], x[20]); 1493| 2.59k| word3_muladd_2(&w1, &w0, &w2, x[4], x[19]); 1494| 2.59k| word3_muladd_2(&w1, &w0, &w2, x[5], x[18]); 1495| 2.59k| word3_muladd_2(&w1, &w0, &w2, x[6], x[17]); 1496| 2.59k| word3_muladd_2(&w1, &w0, &w2, x[7], x[16]); 1497| 2.59k| word3_muladd_2(&w1, &w0, &w2, x[8], x[15]); 1498| 2.59k| word3_muladd_2(&w1, &w0, &w2, x[9], x[14]); 1499| 2.59k| word3_muladd_2(&w1, &w0, &w2, x[10], x[13]); 1500| 2.59k| word3_muladd_2(&w1, &w0, &w2, x[11], x[12]); 1501| 2.59k| z[23] = w2; 1502| 2.59k| w2 = 0; 1503| | 1504| 2.59k| word3_muladd_2(&w2, &w1, &w0, x[1], x[23]); 1505| 2.59k| word3_muladd_2(&w2, &w1, &w0, x[2], x[22]); 1506| 2.59k| word3_muladd_2(&w2, &w1, &w0, x[3], x[21]); 1507| 2.59k| word3_muladd_2(&w2, &w1, &w0, x[4], x[20]); 1508| 2.59k| word3_muladd_2(&w2, &w1, &w0, x[5], x[19]); 1509| 2.59k| word3_muladd_2(&w2, &w1, &w0, x[6], x[18]); 1510| 2.59k| word3_muladd_2(&w2, &w1, &w0, x[7], x[17]); 1511| 2.59k| word3_muladd_2(&w2, &w1, &w0, x[8], x[16]); 1512| 2.59k| word3_muladd_2(&w2, &w1, &w0, x[9], x[15]); 1513| 2.59k| word3_muladd_2(&w2, &w1, &w0, x[10], x[14]); 1514| 2.59k| word3_muladd_2(&w2, &w1, &w0, x[11], x[13]); 1515| 2.59k| word3_muladd(&w2, &w1, &w0, x[12], x[12]); 1516| 2.59k| z[24] = w0; 1517| 2.59k| w0 = 0; 1518| | 1519| 2.59k| word3_muladd_2(&w0, &w2, &w1, x[2], x[23]); 1520| 2.59k| word3_muladd_2(&w0, &w2, &w1, x[3], x[22]); 1521| 2.59k| word3_muladd_2(&w0, &w2, &w1, x[4], x[21]); 1522| 2.59k| word3_muladd_2(&w0, &w2, &w1, x[5], x[20]); 1523| 2.59k| word3_muladd_2(&w0, &w2, &w1, x[6], x[19]); 1524| 2.59k| word3_muladd_2(&w0, &w2, &w1, x[7], x[18]); 1525| 2.59k| word3_muladd_2(&w0, &w2, &w1, x[8], x[17]); 1526| 2.59k| word3_muladd_2(&w0, &w2, &w1, x[9], x[16]); 1527| 2.59k| word3_muladd_2(&w0, &w2, &w1, x[10], x[15]); 1528| 2.59k| word3_muladd_2(&w0, &w2, &w1, x[11], x[14]); 1529| 2.59k| word3_muladd_2(&w0, &w2, &w1, x[12], x[13]); 1530| 2.59k| z[25] = w1; 1531| 2.59k| w1 = 0; 1532| | 1533| 2.59k| word3_muladd_2(&w1, &w0, &w2, x[3], x[23]); 1534| 2.59k| word3_muladd_2(&w1, &w0, &w2, x[4], x[22]); 1535| 2.59k| word3_muladd_2(&w1, &w0, &w2, x[5], x[21]); 1536| 2.59k| word3_muladd_2(&w1, &w0, &w2, x[6], x[20]); 1537| 2.59k| word3_muladd_2(&w1, &w0, &w2, x[7], x[19]); 1538| 2.59k| word3_muladd_2(&w1, &w0, &w2, x[8], x[18]); 1539| 2.59k| word3_muladd_2(&w1, &w0, &w2, x[9], x[17]); 1540| 2.59k| word3_muladd_2(&w1, &w0, &w2, x[10], x[16]); 1541| 2.59k| word3_muladd_2(&w1, &w0, &w2, x[11], x[15]); 1542| 2.59k| word3_muladd_2(&w1, &w0, &w2, x[12], x[14]); 1543| 2.59k| word3_muladd(&w1, &w0, &w2, x[13], x[13]); 1544| 2.59k| z[26] = w2; 1545| 2.59k| w2 = 0; 1546| | 1547| 2.59k| word3_muladd_2(&w2, &w1, &w0, x[4], x[23]); 1548| 2.59k| word3_muladd_2(&w2, &w1, &w0, x[5], x[22]); 1549| 2.59k| word3_muladd_2(&w2, &w1, &w0, x[6], x[21]); 1550| 2.59k| word3_muladd_2(&w2, &w1, &w0, x[7], x[20]); 1551| 2.59k| word3_muladd_2(&w2, &w1, &w0, x[8], x[19]); 1552| 2.59k| word3_muladd_2(&w2, &w1, &w0, x[9], x[18]); 1553| 2.59k| word3_muladd_2(&w2, &w1, &w0, x[10], x[17]); 1554| 2.59k| word3_muladd_2(&w2, &w1, &w0, x[11], x[16]); 1555| 2.59k| word3_muladd_2(&w2, &w1, &w0, x[12], x[15]); 1556| 2.59k| word3_muladd_2(&w2, &w1, &w0, x[13], x[14]); 1557| 2.59k| z[27] = w0; 1558| 2.59k| w0 = 0; 1559| | 1560| 2.59k| word3_muladd_2(&w0, &w2, &w1, x[5], x[23]); 1561| 2.59k| word3_muladd_2(&w0, &w2, &w1, x[6], x[22]); 1562| 2.59k| word3_muladd_2(&w0, &w2, &w1, x[7], x[21]); 1563| 2.59k| word3_muladd_2(&w0, &w2, &w1, x[8], x[20]); 1564| 2.59k| word3_muladd_2(&w0, &w2, &w1, x[9], x[19]); 1565| 2.59k| word3_muladd_2(&w0, &w2, &w1, x[10], x[18]); 1566| 2.59k| word3_muladd_2(&w0, &w2, &w1, x[11], x[17]); 1567| 2.59k| word3_muladd_2(&w0, &w2, &w1, x[12], x[16]); 1568| 2.59k| word3_muladd_2(&w0, &w2, &w1, x[13], x[15]); 1569| 2.59k| word3_muladd(&w0, &w2, &w1, x[14], x[14]); 1570| 2.59k| z[28] = w1; 1571| 2.59k| w1 = 0; 1572| | 1573| 2.59k| word3_muladd_2(&w1, &w0, &w2, x[6], x[23]); 1574| 2.59k| word3_muladd_2(&w1, &w0, &w2, x[7], x[22]); 1575| 2.59k| word3_muladd_2(&w1, &w0, &w2, x[8], x[21]); 1576| 2.59k| word3_muladd_2(&w1, &w0, &w2, x[9], x[20]); 1577| 2.59k| word3_muladd_2(&w1, &w0, &w2, x[10], x[19]); 1578| 2.59k| word3_muladd_2(&w1, &w0, &w2, x[11], x[18]); 1579| 2.59k| word3_muladd_2(&w1, &w0, &w2, x[12], x[17]); 1580| 2.59k| word3_muladd_2(&w1, &w0, &w2, x[13], x[16]); 1581| 2.59k| word3_muladd_2(&w1, &w0, &w2, x[14], x[15]); 1582| 2.59k| z[29] = w2; 1583| 2.59k| w2 = 0; 1584| | 1585| 2.59k| word3_muladd_2(&w2, &w1, &w0, x[7], x[23]); 1586| 2.59k| word3_muladd_2(&w2, &w1, &w0, x[8], x[22]); 1587| 2.59k| word3_muladd_2(&w2, &w1, &w0, x[9], x[21]); 1588| 2.59k| word3_muladd_2(&w2, &w1, &w0, x[10], x[20]); 1589| 2.59k| word3_muladd_2(&w2, &w1, &w0, x[11], x[19]); 1590| 2.59k| word3_muladd_2(&w2, &w1, &w0, x[12], x[18]); 1591| 2.59k| word3_muladd_2(&w2, &w1, &w0, x[13], x[17]); 1592| 2.59k| word3_muladd_2(&w2, &w1, &w0, x[14], x[16]); 1593| 2.59k| word3_muladd(&w2, &w1, &w0, x[15], x[15]); 1594| 2.59k| z[30] = w0; 1595| 2.59k| w0 = 0; 1596| | 1597| 2.59k| word3_muladd_2(&w0, &w2, &w1, x[8], x[23]); 1598| 2.59k| word3_muladd_2(&w0, &w2, &w1, x[9], x[22]); 1599| 2.59k| word3_muladd_2(&w0, &w2, &w1, x[10], x[21]); 1600| 2.59k| word3_muladd_2(&w0, &w2, &w1, x[11], x[20]); 1601| 2.59k| word3_muladd_2(&w0, &w2, &w1, x[12], x[19]); 1602| 2.59k| word3_muladd_2(&w0, &w2, &w1, x[13], x[18]); 1603| 2.59k| word3_muladd_2(&w0, &w2, &w1, x[14], x[17]); 1604| 2.59k| word3_muladd_2(&w0, &w2, &w1, x[15], x[16]); 1605| 2.59k| z[31] = w1; 1606| 2.59k| w1 = 0; 1607| | 1608| 2.59k| word3_muladd_2(&w1, &w0, &w2, x[9], x[23]); 1609| 2.59k| word3_muladd_2(&w1, &w0, &w2, x[10], x[22]); 1610| 2.59k| word3_muladd_2(&w1, &w0, &w2, x[11], x[21]); 1611| 2.59k| word3_muladd_2(&w1, &w0, &w2, x[12], x[20]); 1612| 2.59k| word3_muladd_2(&w1, &w0, &w2, x[13], x[19]); 1613| 2.59k| word3_muladd_2(&w1, &w0, &w2, x[14], x[18]); 1614| 2.59k| word3_muladd_2(&w1, &w0, &w2, x[15], x[17]); 1615| 2.59k| word3_muladd(&w1, &w0, &w2, x[16], x[16]); 1616| 2.59k| z[32] = w2; 1617| 2.59k| w2 = 0; 1618| | 1619| 2.59k| word3_muladd_2(&w2, &w1, &w0, x[10], x[23]); 1620| 2.59k| word3_muladd_2(&w2, &w1, &w0, x[11], x[22]); 1621| 2.59k| word3_muladd_2(&w2, &w1, &w0, x[12], x[21]); 1622| 2.59k| word3_muladd_2(&w2, &w1, &w0, x[13], x[20]); 1623| 2.59k| word3_muladd_2(&w2, &w1, &w0, x[14], x[19]); 1624| 2.59k| word3_muladd_2(&w2, &w1, &w0, x[15], x[18]); 1625| 2.59k| word3_muladd_2(&w2, &w1, &w0, x[16], x[17]); 1626| 2.59k| z[33] = w0; 1627| 2.59k| w0 = 0; 1628| | 1629| 2.59k| word3_muladd_2(&w0, &w2, &w1, x[11], x[23]); 1630| 2.59k| word3_muladd_2(&w0, &w2, &w1, x[12], x[22]); 1631| 2.59k| word3_muladd_2(&w0, &w2, &w1, x[13], x[21]); 1632| 2.59k| word3_muladd_2(&w0, &w2, &w1, x[14], x[20]); 1633| 2.59k| word3_muladd_2(&w0, &w2, &w1, x[15], x[19]); 1634| 2.59k| word3_muladd_2(&w0, &w2, &w1, x[16], x[18]); 1635| 2.59k| word3_muladd(&w0, &w2, &w1, x[17], x[17]); 1636| 2.59k| z[34] = w1; 1637| 2.59k| w1 = 0; 1638| | 1639| 2.59k| word3_muladd_2(&w1, &w0, &w2, x[12], x[23]); 1640| 2.59k| word3_muladd_2(&w1, &w0, &w2, x[13], x[22]); 1641| 2.59k| word3_muladd_2(&w1, &w0, &w2, x[14], x[21]); 1642| 2.59k| word3_muladd_2(&w1, &w0, &w2, x[15], x[20]); 1643| 2.59k| word3_muladd_2(&w1, &w0, &w2, x[16], x[19]); 1644| 2.59k| word3_muladd_2(&w1, &w0, &w2, x[17], x[18]); 1645| 2.59k| z[35] = w2; 1646| 2.59k| w2 = 0; 1647| | 1648| 2.59k| word3_muladd_2(&w2, &w1, &w0, x[13], x[23]); 1649| 2.59k| word3_muladd_2(&w2, &w1, &w0, x[14], x[22]); 1650| 2.59k| word3_muladd_2(&w2, &w1, &w0, x[15], x[21]); 1651| 2.59k| word3_muladd_2(&w2, &w1, &w0, x[16], x[20]); 1652| 2.59k| word3_muladd_2(&w2, &w1, &w0, x[17], x[19]); 1653| 2.59k| word3_muladd(&w2, &w1, &w0, x[18], x[18]); 1654| 2.59k| z[36] = w0; 1655| 2.59k| w0 = 0; 1656| | 1657| 2.59k| word3_muladd_2(&w0, &w2, &w1, x[14], x[23]); 1658| 2.59k| word3_muladd_2(&w0, &w2, &w1, x[15], x[22]); 1659| 2.59k| word3_muladd_2(&w0, &w2, &w1, x[16], x[21]); 1660| 2.59k| word3_muladd_2(&w0, &w2, &w1, x[17], x[20]); 1661| 2.59k| word3_muladd_2(&w0, &w2, &w1, x[18], x[19]); 1662| 2.59k| z[37] = w1; 1663| 2.59k| w1 = 0; 1664| | 1665| 2.59k| word3_muladd_2(&w1, &w0, &w2, x[15], x[23]); 1666| 2.59k| word3_muladd_2(&w1, &w0, &w2, x[16], x[22]); 1667| 2.59k| word3_muladd_2(&w1, &w0, &w2, x[17], x[21]); 1668| 2.59k| word3_muladd_2(&w1, &w0, &w2, x[18], x[20]); 1669| 2.59k| word3_muladd(&w1, &w0, &w2, x[19], x[19]); 1670| 2.59k| z[38] = w2; 1671| 2.59k| w2 = 0; 1672| | 1673| 2.59k| word3_muladd_2(&w2, &w1, &w0, x[16], x[23]); 1674| 2.59k| word3_muladd_2(&w2, &w1, &w0, x[17], x[22]); 1675| 2.59k| word3_muladd_2(&w2, &w1, &w0, x[18], x[21]); 1676| 2.59k| word3_muladd_2(&w2, &w1, &w0, x[19], x[20]); 1677| 2.59k| z[39] = w0; 1678| 2.59k| w0 = 0; 1679| | 1680| 2.59k| word3_muladd_2(&w0, &w2, &w1, x[17], x[23]); 1681| 2.59k| word3_muladd_2(&w0, &w2, &w1, x[18], x[22]); 1682| 2.59k| word3_muladd_2(&w0, &w2, &w1, x[19], x[21]); 1683| 2.59k| word3_muladd(&w0, &w2, &w1, x[20], x[20]); 1684| 2.59k| z[40] = w1; 1685| 2.59k| w1 = 0; 1686| | 1687| 2.59k| word3_muladd_2(&w1, &w0, &w2, x[18], x[23]); 1688| 2.59k| word3_muladd_2(&w1, &w0, &w2, x[19], x[22]); 1689| 2.59k| word3_muladd_2(&w1, &w0, &w2, x[20], x[21]); 1690| 2.59k| z[41] = w2; 1691| 2.59k| w2 = 0; 1692| | 1693| 2.59k| word3_muladd_2(&w2, &w1, &w0, x[19], x[23]); 1694| 2.59k| word3_muladd_2(&w2, &w1, &w0, x[20], x[22]); 1695| 2.59k| word3_muladd(&w2, &w1, &w0, x[21], x[21]); 1696| 2.59k| z[42] = w0; 1697| 2.59k| w0 = 0; 1698| | 1699| 2.59k| word3_muladd_2(&w0, &w2, &w1, x[20], x[23]); 1700| 2.59k| word3_muladd_2(&w0, &w2, &w1, x[21], x[22]); 1701| 2.59k| z[43] = w1; 1702| 2.59k| w1 = 0; 1703| | 1704| 2.59k| word3_muladd_2(&w1, &w0, &w2, x[21], x[23]); 1705| 2.59k| word3_muladd(&w1, &w0, &w2, x[22], x[22]); 1706| 2.59k| z[44] = w2; 1707| 2.59k| w2 = 0; 1708| | 1709| 2.59k| word3_muladd_2(&w2, &w1, &w0, x[22], x[23]); 1710| 2.59k| z[45] = w0; 1711| 2.59k| w0 = 0; 1712| | 1713| 2.59k| word3_muladd(&w0, &w2, &w1, x[23], x[23]); 1714| 2.59k| z[46] = w1; 1715| 2.59k| z[47] = w2; 1716| 2.59k|} _ZN5Botan18bigint_comba_mul24EPmPKmS2_: 1721| 1.34k|void bigint_comba_mul24(word z[48], const word x[24], const word y[24]) { 1722| 1.34k| word w2 = 0, w1 = 0, w0 = 0; 1723| | 1724| 1.34k| word3_muladd(&w2, &w1, &w0, x[0], y[0]); 1725| 1.34k| z[0] = w0; 1726| 1.34k| w0 = 0; 1727| | 1728| 1.34k| word3_muladd(&w0, &w2, &w1, x[0], y[1]); 1729| 1.34k| word3_muladd(&w0, &w2, &w1, x[1], y[0]); 1730| 1.34k| z[1] = w1; 1731| 1.34k| w1 = 0; 1732| | 1733| 1.34k| word3_muladd(&w1, &w0, &w2, x[0], y[2]); 1734| 1.34k| word3_muladd(&w1, &w0, &w2, x[1], y[1]); 1735| 1.34k| word3_muladd(&w1, &w0, &w2, x[2], y[0]); 1736| 1.34k| z[2] = w2; 1737| 1.34k| w2 = 0; 1738| | 1739| 1.34k| word3_muladd(&w2, &w1, &w0, x[0], y[3]); 1740| 1.34k| word3_muladd(&w2, &w1, &w0, x[1], y[2]); 1741| 1.34k| word3_muladd(&w2, &w1, &w0, x[2], y[1]); 1742| 1.34k| word3_muladd(&w2, &w1, &w0, x[3], y[0]); 1743| 1.34k| z[3] = w0; 1744| 1.34k| w0 = 0; 1745| | 1746| 1.34k| word3_muladd(&w0, &w2, &w1, x[0], y[4]); 1747| 1.34k| word3_muladd(&w0, &w2, &w1, x[1], y[3]); 1748| 1.34k| word3_muladd(&w0, &w2, &w1, x[2], y[2]); 1749| 1.34k| word3_muladd(&w0, &w2, &w1, x[3], y[1]); 1750| 1.34k| word3_muladd(&w0, &w2, &w1, x[4], y[0]); 1751| 1.34k| z[4] = w1; 1752| 1.34k| w1 = 0; 1753| | 1754| 1.34k| word3_muladd(&w1, &w0, &w2, x[0], y[5]); 1755| 1.34k| word3_muladd(&w1, &w0, &w2, x[1], y[4]); 1756| 1.34k| word3_muladd(&w1, &w0, &w2, x[2], y[3]); 1757| 1.34k| word3_muladd(&w1, &w0, &w2, x[3], y[2]); 1758| 1.34k| word3_muladd(&w1, &w0, &w2, x[4], y[1]); 1759| 1.34k| word3_muladd(&w1, &w0, &w2, x[5], y[0]); 1760| 1.34k| z[5] = w2; 1761| 1.34k| w2 = 0; 1762| | 1763| 1.34k| word3_muladd(&w2, &w1, &w0, x[0], y[6]); 1764| 1.34k| word3_muladd(&w2, &w1, &w0, x[1], y[5]); 1765| 1.34k| word3_muladd(&w2, &w1, &w0, x[2], y[4]); 1766| 1.34k| word3_muladd(&w2, &w1, &w0, x[3], y[3]); 1767| 1.34k| word3_muladd(&w2, &w1, &w0, x[4], y[2]); 1768| 1.34k| word3_muladd(&w2, &w1, &w0, x[5], y[1]); 1769| 1.34k| word3_muladd(&w2, &w1, &w0, x[6], y[0]); 1770| 1.34k| z[6] = w0; 1771| 1.34k| w0 = 0; 1772| | 1773| 1.34k| word3_muladd(&w0, &w2, &w1, x[0], y[7]); 1774| 1.34k| word3_muladd(&w0, &w2, &w1, x[1], y[6]); 1775| 1.34k| word3_muladd(&w0, &w2, &w1, x[2], y[5]); 1776| 1.34k| word3_muladd(&w0, &w2, &w1, x[3], y[4]); 1777| 1.34k| word3_muladd(&w0, &w2, &w1, x[4], y[3]); 1778| 1.34k| word3_muladd(&w0, &w2, &w1, x[5], y[2]); 1779| 1.34k| word3_muladd(&w0, &w2, &w1, x[6], y[1]); 1780| 1.34k| word3_muladd(&w0, &w2, &w1, x[7], y[0]); 1781| 1.34k| z[7] = w1; 1782| 1.34k| w1 = 0; 1783| | 1784| 1.34k| word3_muladd(&w1, &w0, &w2, x[0], y[8]); 1785| 1.34k| word3_muladd(&w1, &w0, &w2, x[1], y[7]); 1786| 1.34k| word3_muladd(&w1, &w0, &w2, x[2], y[6]); 1787| 1.34k| word3_muladd(&w1, &w0, &w2, x[3], y[5]); 1788| 1.34k| word3_muladd(&w1, &w0, &w2, x[4], y[4]); 1789| 1.34k| word3_muladd(&w1, &w0, &w2, x[5], y[3]); 1790| 1.34k| word3_muladd(&w1, &w0, &w2, x[6], y[2]); 1791| 1.34k| word3_muladd(&w1, &w0, &w2, x[7], y[1]); 1792| 1.34k| word3_muladd(&w1, &w0, &w2, x[8], y[0]); 1793| 1.34k| z[8] = w2; 1794| 1.34k| w2 = 0; 1795| | 1796| 1.34k| word3_muladd(&w2, &w1, &w0, x[0], y[9]); 1797| 1.34k| word3_muladd(&w2, &w1, &w0, x[1], y[8]); 1798| 1.34k| word3_muladd(&w2, &w1, &w0, x[2], y[7]); 1799| 1.34k| word3_muladd(&w2, &w1, &w0, x[3], y[6]); 1800| 1.34k| word3_muladd(&w2, &w1, &w0, x[4], y[5]); 1801| 1.34k| word3_muladd(&w2, &w1, &w0, x[5], y[4]); 1802| 1.34k| word3_muladd(&w2, &w1, &w0, x[6], y[3]); 1803| 1.34k| word3_muladd(&w2, &w1, &w0, x[7], y[2]); 1804| 1.34k| word3_muladd(&w2, &w1, &w0, x[8], y[1]); 1805| 1.34k| word3_muladd(&w2, &w1, &w0, x[9], y[0]); 1806| 1.34k| z[9] = w0; 1807| 1.34k| w0 = 0; 1808| | 1809| 1.34k| word3_muladd(&w0, &w2, &w1, x[0], y[10]); 1810| 1.34k| word3_muladd(&w0, &w2, &w1, x[1], y[9]); 1811| 1.34k| word3_muladd(&w0, &w2, &w1, x[2], y[8]); 1812| 1.34k| word3_muladd(&w0, &w2, &w1, x[3], y[7]); 1813| 1.34k| word3_muladd(&w0, &w2, &w1, x[4], y[6]); 1814| 1.34k| word3_muladd(&w0, &w2, &w1, x[5], y[5]); 1815| 1.34k| word3_muladd(&w0, &w2, &w1, x[6], y[4]); 1816| 1.34k| word3_muladd(&w0, &w2, &w1, x[7], y[3]); 1817| 1.34k| word3_muladd(&w0, &w2, &w1, x[8], y[2]); 1818| 1.34k| word3_muladd(&w0, &w2, &w1, x[9], y[1]); 1819| 1.34k| word3_muladd(&w0, &w2, &w1, x[10], y[0]); 1820| 1.34k| z[10] = w1; 1821| 1.34k| w1 = 0; 1822| | 1823| 1.34k| word3_muladd(&w1, &w0, &w2, x[0], y[11]); 1824| 1.34k| word3_muladd(&w1, &w0, &w2, x[1], y[10]); 1825| 1.34k| word3_muladd(&w1, &w0, &w2, x[2], y[9]); 1826| 1.34k| word3_muladd(&w1, &w0, &w2, x[3], y[8]); 1827| 1.34k| word3_muladd(&w1, &w0, &w2, x[4], y[7]); 1828| 1.34k| word3_muladd(&w1, &w0, &w2, x[5], y[6]); 1829| 1.34k| word3_muladd(&w1, &w0, &w2, x[6], y[5]); 1830| 1.34k| word3_muladd(&w1, &w0, &w2, x[7], y[4]); 1831| 1.34k| word3_muladd(&w1, &w0, &w2, x[8], y[3]); 1832| 1.34k| word3_muladd(&w1, &w0, &w2, x[9], y[2]); 1833| 1.34k| word3_muladd(&w1, &w0, &w2, x[10], y[1]); 1834| 1.34k| word3_muladd(&w1, &w0, &w2, x[11], y[0]); 1835| 1.34k| z[11] = w2; 1836| 1.34k| w2 = 0; 1837| | 1838| 1.34k| word3_muladd(&w2, &w1, &w0, x[0], y[12]); 1839| 1.34k| word3_muladd(&w2, &w1, &w0, x[1], y[11]); 1840| 1.34k| word3_muladd(&w2, &w1, &w0, x[2], y[10]); 1841| 1.34k| word3_muladd(&w2, &w1, &w0, x[3], y[9]); 1842| 1.34k| word3_muladd(&w2, &w1, &w0, x[4], y[8]); 1843| 1.34k| word3_muladd(&w2, &w1, &w0, x[5], y[7]); 1844| 1.34k| word3_muladd(&w2, &w1, &w0, x[6], y[6]); 1845| 1.34k| word3_muladd(&w2, &w1, &w0, x[7], y[5]); 1846| 1.34k| word3_muladd(&w2, &w1, &w0, x[8], y[4]); 1847| 1.34k| word3_muladd(&w2, &w1, &w0, x[9], y[3]); 1848| 1.34k| word3_muladd(&w2, &w1, &w0, x[10], y[2]); 1849| 1.34k| word3_muladd(&w2, &w1, &w0, x[11], y[1]); 1850| 1.34k| word3_muladd(&w2, &w1, &w0, x[12], y[0]); 1851| 1.34k| z[12] = w0; 1852| 1.34k| w0 = 0; 1853| | 1854| 1.34k| word3_muladd(&w0, &w2, &w1, x[0], y[13]); 1855| 1.34k| word3_muladd(&w0, &w2, &w1, x[1], y[12]); 1856| 1.34k| word3_muladd(&w0, &w2, &w1, x[2], y[11]); 1857| 1.34k| word3_muladd(&w0, &w2, &w1, x[3], y[10]); 1858| 1.34k| word3_muladd(&w0, &w2, &w1, x[4], y[9]); 1859| 1.34k| word3_muladd(&w0, &w2, &w1, x[5], y[8]); 1860| 1.34k| word3_muladd(&w0, &w2, &w1, x[6], y[7]); 1861| 1.34k| word3_muladd(&w0, &w2, &w1, x[7], y[6]); 1862| 1.34k| word3_muladd(&w0, &w2, &w1, x[8], y[5]); 1863| 1.34k| word3_muladd(&w0, &w2, &w1, x[9], y[4]); 1864| 1.34k| word3_muladd(&w0, &w2, &w1, x[10], y[3]); 1865| 1.34k| word3_muladd(&w0, &w2, &w1, x[11], y[2]); 1866| 1.34k| word3_muladd(&w0, &w2, &w1, x[12], y[1]); 1867| 1.34k| word3_muladd(&w0, &w2, &w1, x[13], y[0]); 1868| 1.34k| z[13] = w1; 1869| 1.34k| w1 = 0; 1870| | 1871| 1.34k| word3_muladd(&w1, &w0, &w2, x[0], y[14]); 1872| 1.34k| word3_muladd(&w1, &w0, &w2, x[1], y[13]); 1873| 1.34k| word3_muladd(&w1, &w0, &w2, x[2], y[12]); 1874| 1.34k| word3_muladd(&w1, &w0, &w2, x[3], y[11]); 1875| 1.34k| word3_muladd(&w1, &w0, &w2, x[4], y[10]); 1876| 1.34k| word3_muladd(&w1, &w0, &w2, x[5], y[9]); 1877| 1.34k| word3_muladd(&w1, &w0, &w2, x[6], y[8]); 1878| 1.34k| word3_muladd(&w1, &w0, &w2, x[7], y[7]); 1879| 1.34k| word3_muladd(&w1, &w0, &w2, x[8], y[6]); 1880| 1.34k| word3_muladd(&w1, &w0, &w2, x[9], y[5]); 1881| 1.34k| word3_muladd(&w1, &w0, &w2, x[10], y[4]); 1882| 1.34k| word3_muladd(&w1, &w0, &w2, x[11], y[3]); 1883| 1.34k| word3_muladd(&w1, &w0, &w2, x[12], y[2]); 1884| 1.34k| word3_muladd(&w1, &w0, &w2, x[13], y[1]); 1885| 1.34k| word3_muladd(&w1, &w0, &w2, x[14], y[0]); 1886| 1.34k| z[14] = w2; 1887| 1.34k| w2 = 0; 1888| | 1889| 1.34k| word3_muladd(&w2, &w1, &w0, x[0], y[15]); 1890| 1.34k| word3_muladd(&w2, &w1, &w0, x[1], y[14]); 1891| 1.34k| word3_muladd(&w2, &w1, &w0, x[2], y[13]); 1892| 1.34k| word3_muladd(&w2, &w1, &w0, x[3], y[12]); 1893| 1.34k| word3_muladd(&w2, &w1, &w0, x[4], y[11]); 1894| 1.34k| word3_muladd(&w2, &w1, &w0, x[5], y[10]); 1895| 1.34k| word3_muladd(&w2, &w1, &w0, x[6], y[9]); 1896| 1.34k| word3_muladd(&w2, &w1, &w0, x[7], y[8]); 1897| 1.34k| word3_muladd(&w2, &w1, &w0, x[8], y[7]); 1898| 1.34k| word3_muladd(&w2, &w1, &w0, x[9], y[6]); 1899| 1.34k| word3_muladd(&w2, &w1, &w0, x[10], y[5]); 1900| 1.34k| word3_muladd(&w2, &w1, &w0, x[11], y[4]); 1901| 1.34k| word3_muladd(&w2, &w1, &w0, x[12], y[3]); 1902| 1.34k| word3_muladd(&w2, &w1, &w0, x[13], y[2]); 1903| 1.34k| word3_muladd(&w2, &w1, &w0, x[14], y[1]); 1904| 1.34k| word3_muladd(&w2, &w1, &w0, x[15], y[0]); 1905| 1.34k| z[15] = w0; 1906| 1.34k| w0 = 0; 1907| | 1908| 1.34k| word3_muladd(&w0, &w2, &w1, x[0], y[16]); 1909| 1.34k| word3_muladd(&w0, &w2, &w1, x[1], y[15]); 1910| 1.34k| word3_muladd(&w0, &w2, &w1, x[2], y[14]); 1911| 1.34k| word3_muladd(&w0, &w2, &w1, x[3], y[13]); 1912| 1.34k| word3_muladd(&w0, &w2, &w1, x[4], y[12]); 1913| 1.34k| word3_muladd(&w0, &w2, &w1, x[5], y[11]); 1914| 1.34k| word3_muladd(&w0, &w2, &w1, x[6], y[10]); 1915| 1.34k| word3_muladd(&w0, &w2, &w1, x[7], y[9]); 1916| 1.34k| word3_muladd(&w0, &w2, &w1, x[8], y[8]); 1917| 1.34k| word3_muladd(&w0, &w2, &w1, x[9], y[7]); 1918| 1.34k| word3_muladd(&w0, &w2, &w1, x[10], y[6]); 1919| 1.34k| word3_muladd(&w0, &w2, &w1, x[11], y[5]); 1920| 1.34k| word3_muladd(&w0, &w2, &w1, x[12], y[4]); 1921| 1.34k| word3_muladd(&w0, &w2, &w1, x[13], y[3]); 1922| 1.34k| word3_muladd(&w0, &w2, &w1, x[14], y[2]); 1923| 1.34k| word3_muladd(&w0, &w2, &w1, x[15], y[1]); 1924| 1.34k| word3_muladd(&w0, &w2, &w1, x[16], y[0]); 1925| 1.34k| z[16] = w1; 1926| 1.34k| w1 = 0; 1927| | 1928| 1.34k| word3_muladd(&w1, &w0, &w2, x[0], y[17]); 1929| 1.34k| word3_muladd(&w1, &w0, &w2, x[1], y[16]); 1930| 1.34k| word3_muladd(&w1, &w0, &w2, x[2], y[15]); 1931| 1.34k| word3_muladd(&w1, &w0, &w2, x[3], y[14]); 1932| 1.34k| word3_muladd(&w1, &w0, &w2, x[4], y[13]); 1933| 1.34k| word3_muladd(&w1, &w0, &w2, x[5], y[12]); 1934| 1.34k| word3_muladd(&w1, &w0, &w2, x[6], y[11]); 1935| 1.34k| word3_muladd(&w1, &w0, &w2, x[7], y[10]); 1936| 1.34k| word3_muladd(&w1, &w0, &w2, x[8], y[9]); 1937| 1.34k| word3_muladd(&w1, &w0, &w2, x[9], y[8]); 1938| 1.34k| word3_muladd(&w1, &w0, &w2, x[10], y[7]); 1939| 1.34k| word3_muladd(&w1, &w0, &w2, x[11], y[6]); 1940| 1.34k| word3_muladd(&w1, &w0, &w2, x[12], y[5]); 1941| 1.34k| word3_muladd(&w1, &w0, &w2, x[13], y[4]); 1942| 1.34k| word3_muladd(&w1, &w0, &w2, x[14], y[3]); 1943| 1.34k| word3_muladd(&w1, &w0, &w2, x[15], y[2]); 1944| 1.34k| word3_muladd(&w1, &w0, &w2, x[16], y[1]); 1945| 1.34k| word3_muladd(&w1, &w0, &w2, x[17], y[0]); 1946| 1.34k| z[17] = w2; 1947| 1.34k| w2 = 0; 1948| | 1949| 1.34k| word3_muladd(&w2, &w1, &w0, x[0], y[18]); 1950| 1.34k| word3_muladd(&w2, &w1, &w0, x[1], y[17]); 1951| 1.34k| word3_muladd(&w2, &w1, &w0, x[2], y[16]); 1952| 1.34k| word3_muladd(&w2, &w1, &w0, x[3], y[15]); 1953| 1.34k| word3_muladd(&w2, &w1, &w0, x[4], y[14]); 1954| 1.34k| word3_muladd(&w2, &w1, &w0, x[5], y[13]); 1955| 1.34k| word3_muladd(&w2, &w1, &w0, x[6], y[12]); 1956| 1.34k| word3_muladd(&w2, &w1, &w0, x[7], y[11]); 1957| 1.34k| word3_muladd(&w2, &w1, &w0, x[8], y[10]); 1958| 1.34k| word3_muladd(&w2, &w1, &w0, x[9], y[9]); 1959| 1.34k| word3_muladd(&w2, &w1, &w0, x[10], y[8]); 1960| 1.34k| word3_muladd(&w2, &w1, &w0, x[11], y[7]); 1961| 1.34k| word3_muladd(&w2, &w1, &w0, x[12], y[6]); 1962| 1.34k| word3_muladd(&w2, &w1, &w0, x[13], y[5]); 1963| 1.34k| word3_muladd(&w2, &w1, &w0, x[14], y[4]); 1964| 1.34k| word3_muladd(&w2, &w1, &w0, x[15], y[3]); 1965| 1.34k| word3_muladd(&w2, &w1, &w0, x[16], y[2]); 1966| 1.34k| word3_muladd(&w2, &w1, &w0, x[17], y[1]); 1967| 1.34k| word3_muladd(&w2, &w1, &w0, x[18], y[0]); 1968| 1.34k| z[18] = w0; 1969| 1.34k| w0 = 0; 1970| | 1971| 1.34k| word3_muladd(&w0, &w2, &w1, x[0], y[19]); 1972| 1.34k| word3_muladd(&w0, &w2, &w1, x[1], y[18]); 1973| 1.34k| word3_muladd(&w0, &w2, &w1, x[2], y[17]); 1974| 1.34k| word3_muladd(&w0, &w2, &w1, x[3], y[16]); 1975| 1.34k| word3_muladd(&w0, &w2, &w1, x[4], y[15]); 1976| 1.34k| word3_muladd(&w0, &w2, &w1, x[5], y[14]); 1977| 1.34k| word3_muladd(&w0, &w2, &w1, x[6], y[13]); 1978| 1.34k| word3_muladd(&w0, &w2, &w1, x[7], y[12]); 1979| 1.34k| word3_muladd(&w0, &w2, &w1, x[8], y[11]); 1980| 1.34k| word3_muladd(&w0, &w2, &w1, x[9], y[10]); 1981| 1.34k| word3_muladd(&w0, &w2, &w1, x[10], y[9]); 1982| 1.34k| word3_muladd(&w0, &w2, &w1, x[11], y[8]); 1983| 1.34k| word3_muladd(&w0, &w2, &w1, x[12], y[7]); 1984| 1.34k| word3_muladd(&w0, &w2, &w1, x[13], y[6]); 1985| 1.34k| word3_muladd(&w0, &w2, &w1, x[14], y[5]); 1986| 1.34k| word3_muladd(&w0, &w2, &w1, x[15], y[4]); 1987| 1.34k| word3_muladd(&w0, &w2, &w1, x[16], y[3]); 1988| 1.34k| word3_muladd(&w0, &w2, &w1, x[17], y[2]); 1989| 1.34k| word3_muladd(&w0, &w2, &w1, x[18], y[1]); 1990| 1.34k| word3_muladd(&w0, &w2, &w1, x[19], y[0]); 1991| 1.34k| z[19] = w1; 1992| 1.34k| w1 = 0; 1993| | 1994| 1.34k| word3_muladd(&w1, &w0, &w2, x[0], y[20]); 1995| 1.34k| word3_muladd(&w1, &w0, &w2, x[1], y[19]); 1996| 1.34k| word3_muladd(&w1, &w0, &w2, x[2], y[18]); 1997| 1.34k| word3_muladd(&w1, &w0, &w2, x[3], y[17]); 1998| 1.34k| word3_muladd(&w1, &w0, &w2, x[4], y[16]); 1999| 1.34k| word3_muladd(&w1, &w0, &w2, x[5], y[15]); 2000| 1.34k| word3_muladd(&w1, &w0, &w2, x[6], y[14]); 2001| 1.34k| word3_muladd(&w1, &w0, &w2, x[7], y[13]); 2002| 1.34k| word3_muladd(&w1, &w0, &w2, x[8], y[12]); 2003| 1.34k| word3_muladd(&w1, &w0, &w2, x[9], y[11]); 2004| 1.34k| word3_muladd(&w1, &w0, &w2, x[10], y[10]); 2005| 1.34k| word3_muladd(&w1, &w0, &w2, x[11], y[9]); 2006| 1.34k| word3_muladd(&w1, &w0, &w2, x[12], y[8]); 2007| 1.34k| word3_muladd(&w1, &w0, &w2, x[13], y[7]); 2008| 1.34k| word3_muladd(&w1, &w0, &w2, x[14], y[6]); 2009| 1.34k| word3_muladd(&w1, &w0, &w2, x[15], y[5]); 2010| 1.34k| word3_muladd(&w1, &w0, &w2, x[16], y[4]); 2011| 1.34k| word3_muladd(&w1, &w0, &w2, x[17], y[3]); 2012| 1.34k| word3_muladd(&w1, &w0, &w2, x[18], y[2]); 2013| 1.34k| word3_muladd(&w1, &w0, &w2, x[19], y[1]); 2014| 1.34k| word3_muladd(&w1, &w0, &w2, x[20], y[0]); 2015| 1.34k| z[20] = w2; 2016| 1.34k| w2 = 0; 2017| | 2018| 1.34k| word3_muladd(&w2, &w1, &w0, x[0], y[21]); 2019| 1.34k| word3_muladd(&w2, &w1, &w0, x[1], y[20]); 2020| 1.34k| word3_muladd(&w2, &w1, &w0, x[2], y[19]); 2021| 1.34k| word3_muladd(&w2, &w1, &w0, x[3], y[18]); 2022| 1.34k| word3_muladd(&w2, &w1, &w0, x[4], y[17]); 2023| 1.34k| word3_muladd(&w2, &w1, &w0, x[5], y[16]); 2024| 1.34k| word3_muladd(&w2, &w1, &w0, x[6], y[15]); 2025| 1.34k| word3_muladd(&w2, &w1, &w0, x[7], y[14]); 2026| 1.34k| word3_muladd(&w2, &w1, &w0, x[8], y[13]); 2027| 1.34k| word3_muladd(&w2, &w1, &w0, x[9], y[12]); 2028| 1.34k| word3_muladd(&w2, &w1, &w0, x[10], y[11]); 2029| 1.34k| word3_muladd(&w2, &w1, &w0, x[11], y[10]); 2030| 1.34k| word3_muladd(&w2, &w1, &w0, x[12], y[9]); 2031| 1.34k| word3_muladd(&w2, &w1, &w0, x[13], y[8]); 2032| 1.34k| word3_muladd(&w2, &w1, &w0, x[14], y[7]); 2033| 1.34k| word3_muladd(&w2, &w1, &w0, x[15], y[6]); 2034| 1.34k| word3_muladd(&w2, &w1, &w0, x[16], y[5]); 2035| 1.34k| word3_muladd(&w2, &w1, &w0, x[17], y[4]); 2036| 1.34k| word3_muladd(&w2, &w1, &w0, x[18], y[3]); 2037| 1.34k| word3_muladd(&w2, &w1, &w0, x[19], y[2]); 2038| 1.34k| word3_muladd(&w2, &w1, &w0, x[20], y[1]); 2039| 1.34k| word3_muladd(&w2, &w1, &w0, x[21], y[0]); 2040| 1.34k| z[21] = w0; 2041| 1.34k| w0 = 0; 2042| | 2043| 1.34k| word3_muladd(&w0, &w2, &w1, x[0], y[22]); 2044| 1.34k| word3_muladd(&w0, &w2, &w1, x[1], y[21]); 2045| 1.34k| word3_muladd(&w0, &w2, &w1, x[2], y[20]); 2046| 1.34k| word3_muladd(&w0, &w2, &w1, x[3], y[19]); 2047| 1.34k| word3_muladd(&w0, &w2, &w1, x[4], y[18]); 2048| 1.34k| word3_muladd(&w0, &w2, &w1, x[5], y[17]); 2049| 1.34k| word3_muladd(&w0, &w2, &w1, x[6], y[16]); 2050| 1.34k| word3_muladd(&w0, &w2, &w1, x[7], y[15]); 2051| 1.34k| word3_muladd(&w0, &w2, &w1, x[8], y[14]); 2052| 1.34k| word3_muladd(&w0, &w2, &w1, x[9], y[13]); 2053| 1.34k| word3_muladd(&w0, &w2, &w1, x[10], y[12]); 2054| 1.34k| word3_muladd(&w0, &w2, &w1, x[11], y[11]); 2055| 1.34k| word3_muladd(&w0, &w2, &w1, x[12], y[10]); 2056| 1.34k| word3_muladd(&w0, &w2, &w1, x[13], y[9]); 2057| 1.34k| word3_muladd(&w0, &w2, &w1, x[14], y[8]); 2058| 1.34k| word3_muladd(&w0, &w2, &w1, x[15], y[7]); 2059| 1.34k| word3_muladd(&w0, &w2, &w1, x[16], y[6]); 2060| 1.34k| word3_muladd(&w0, &w2, &w1, x[17], y[5]); 2061| 1.34k| word3_muladd(&w0, &w2, &w1, x[18], y[4]); 2062| 1.34k| word3_muladd(&w0, &w2, &w1, x[19], y[3]); 2063| 1.34k| word3_muladd(&w0, &w2, &w1, x[20], y[2]); 2064| 1.34k| word3_muladd(&w0, &w2, &w1, x[21], y[1]); 2065| 1.34k| word3_muladd(&w0, &w2, &w1, x[22], y[0]); 2066| 1.34k| z[22] = w1; 2067| 1.34k| w1 = 0; 2068| | 2069| 1.34k| word3_muladd(&w1, &w0, &w2, x[0], y[23]); 2070| 1.34k| word3_muladd(&w1, &w0, &w2, x[1], y[22]); 2071| 1.34k| word3_muladd(&w1, &w0, &w2, x[2], y[21]); 2072| 1.34k| word3_muladd(&w1, &w0, &w2, x[3], y[20]); 2073| 1.34k| word3_muladd(&w1, &w0, &w2, x[4], y[19]); 2074| 1.34k| word3_muladd(&w1, &w0, &w2, x[5], y[18]); 2075| 1.34k| word3_muladd(&w1, &w0, &w2, x[6], y[17]); 2076| 1.34k| word3_muladd(&w1, &w0, &w2, x[7], y[16]); 2077| 1.34k| word3_muladd(&w1, &w0, &w2, x[8], y[15]); 2078| 1.34k| word3_muladd(&w1, &w0, &w2, x[9], y[14]); 2079| 1.34k| word3_muladd(&w1, &w0, &w2, x[10], y[13]); 2080| 1.34k| word3_muladd(&w1, &w0, &w2, x[11], y[12]); 2081| 1.34k| word3_muladd(&w1, &w0, &w2, x[12], y[11]); 2082| 1.34k| word3_muladd(&w1, &w0, &w2, x[13], y[10]); 2083| 1.34k| word3_muladd(&w1, &w0, &w2, x[14], y[9]); 2084| 1.34k| word3_muladd(&w1, &w0, &w2, x[15], y[8]); 2085| 1.34k| word3_muladd(&w1, &w0, &w2, x[16], y[7]); 2086| 1.34k| word3_muladd(&w1, &w0, &w2, x[17], y[6]); 2087| 1.34k| word3_muladd(&w1, &w0, &w2, x[18], y[5]); 2088| 1.34k| word3_muladd(&w1, &w0, &w2, x[19], y[4]); 2089| 1.34k| word3_muladd(&w1, &w0, &w2, x[20], y[3]); 2090| 1.34k| word3_muladd(&w1, &w0, &w2, x[21], y[2]); 2091| 1.34k| word3_muladd(&w1, &w0, &w2, x[22], y[1]); 2092| 1.34k| word3_muladd(&w1, &w0, &w2, x[23], y[0]); 2093| 1.34k| z[23] = w2; 2094| 1.34k| w2 = 0; 2095| | 2096| 1.34k| word3_muladd(&w2, &w1, &w0, x[1], y[23]); 2097| 1.34k| word3_muladd(&w2, &w1, &w0, x[2], y[22]); 2098| 1.34k| word3_muladd(&w2, &w1, &w0, x[3], y[21]); 2099| 1.34k| word3_muladd(&w2, &w1, &w0, x[4], y[20]); 2100| 1.34k| word3_muladd(&w2, &w1, &w0, x[5], y[19]); 2101| 1.34k| word3_muladd(&w2, &w1, &w0, x[6], y[18]); 2102| 1.34k| word3_muladd(&w2, &w1, &w0, x[7], y[17]); 2103| 1.34k| word3_muladd(&w2, &w1, &w0, x[8], y[16]); 2104| 1.34k| word3_muladd(&w2, &w1, &w0, x[9], y[15]); 2105| 1.34k| word3_muladd(&w2, &w1, &w0, x[10], y[14]); 2106| 1.34k| word3_muladd(&w2, &w1, &w0, x[11], y[13]); 2107| 1.34k| word3_muladd(&w2, &w1, &w0, x[12], y[12]); 2108| 1.34k| word3_muladd(&w2, &w1, &w0, x[13], y[11]); 2109| 1.34k| word3_muladd(&w2, &w1, &w0, x[14], y[10]); 2110| 1.34k| word3_muladd(&w2, &w1, &w0, x[15], y[9]); 2111| 1.34k| word3_muladd(&w2, &w1, &w0, x[16], y[8]); 2112| 1.34k| word3_muladd(&w2, &w1, &w0, x[17], y[7]); 2113| 1.34k| word3_muladd(&w2, &w1, &w0, x[18], y[6]); 2114| 1.34k| word3_muladd(&w2, &w1, &w0, x[19], y[5]); 2115| 1.34k| word3_muladd(&w2, &w1, &w0, x[20], y[4]); 2116| 1.34k| word3_muladd(&w2, &w1, &w0, x[21], y[3]); 2117| 1.34k| word3_muladd(&w2, &w1, &w0, x[22], y[2]); 2118| 1.34k| word3_muladd(&w2, &w1, &w0, x[23], y[1]); 2119| 1.34k| z[24] = w0; 2120| 1.34k| w0 = 0; 2121| | 2122| 1.34k| word3_muladd(&w0, &w2, &w1, x[2], y[23]); 2123| 1.34k| word3_muladd(&w0, &w2, &w1, x[3], y[22]); 2124| 1.34k| word3_muladd(&w0, &w2, &w1, x[4], y[21]); 2125| 1.34k| word3_muladd(&w0, &w2, &w1, x[5], y[20]); 2126| 1.34k| word3_muladd(&w0, &w2, &w1, x[6], y[19]); 2127| 1.34k| word3_muladd(&w0, &w2, &w1, x[7], y[18]); 2128| 1.34k| word3_muladd(&w0, &w2, &w1, x[8], y[17]); 2129| 1.34k| word3_muladd(&w0, &w2, &w1, x[9], y[16]); 2130| 1.34k| word3_muladd(&w0, &w2, &w1, x[10], y[15]); 2131| 1.34k| word3_muladd(&w0, &w2, &w1, x[11], y[14]); 2132| 1.34k| word3_muladd(&w0, &w2, &w1, x[12], y[13]); 2133| 1.34k| word3_muladd(&w0, &w2, &w1, x[13], y[12]); 2134| 1.34k| word3_muladd(&w0, &w2, &w1, x[14], y[11]); 2135| 1.34k| word3_muladd(&w0, &w2, &w1, x[15], y[10]); 2136| 1.34k| word3_muladd(&w0, &w2, &w1, x[16], y[9]); 2137| 1.34k| word3_muladd(&w0, &w2, &w1, x[17], y[8]); 2138| 1.34k| word3_muladd(&w0, &w2, &w1, x[18], y[7]); 2139| 1.34k| word3_muladd(&w0, &w2, &w1, x[19], y[6]); 2140| 1.34k| word3_muladd(&w0, &w2, &w1, x[20], y[5]); 2141| 1.34k| word3_muladd(&w0, &w2, &w1, x[21], y[4]); 2142| 1.34k| word3_muladd(&w0, &w2, &w1, x[22], y[3]); 2143| 1.34k| word3_muladd(&w0, &w2, &w1, x[23], y[2]); 2144| 1.34k| z[25] = w1; 2145| 1.34k| w1 = 0; 2146| | 2147| 1.34k| word3_muladd(&w1, &w0, &w2, x[3], y[23]); 2148| 1.34k| word3_muladd(&w1, &w0, &w2, x[4], y[22]); 2149| 1.34k| word3_muladd(&w1, &w0, &w2, x[5], y[21]); 2150| 1.34k| word3_muladd(&w1, &w0, &w2, x[6], y[20]); 2151| 1.34k| word3_muladd(&w1, &w0, &w2, x[7], y[19]); 2152| 1.34k| word3_muladd(&w1, &w0, &w2, x[8], y[18]); 2153| 1.34k| word3_muladd(&w1, &w0, &w2, x[9], y[17]); 2154| 1.34k| word3_muladd(&w1, &w0, &w2, x[10], y[16]); 2155| 1.34k| word3_muladd(&w1, &w0, &w2, x[11], y[15]); 2156| 1.34k| word3_muladd(&w1, &w0, &w2, x[12], y[14]); 2157| 1.34k| word3_muladd(&w1, &w0, &w2, x[13], y[13]); 2158| 1.34k| word3_muladd(&w1, &w0, &w2, x[14], y[12]); 2159| 1.34k| word3_muladd(&w1, &w0, &w2, x[15], y[11]); 2160| 1.34k| word3_muladd(&w1, &w0, &w2, x[16], y[10]); 2161| 1.34k| word3_muladd(&w1, &w0, &w2, x[17], y[9]); 2162| 1.34k| word3_muladd(&w1, &w0, &w2, x[18], y[8]); 2163| 1.34k| word3_muladd(&w1, &w0, &w2, x[19], y[7]); 2164| 1.34k| word3_muladd(&w1, &w0, &w2, x[20], y[6]); 2165| 1.34k| word3_muladd(&w1, &w0, &w2, x[21], y[5]); 2166| 1.34k| word3_muladd(&w1, &w0, &w2, x[22], y[4]); 2167| 1.34k| word3_muladd(&w1, &w0, &w2, x[23], y[3]); 2168| 1.34k| z[26] = w2; 2169| 1.34k| w2 = 0; 2170| | 2171| 1.34k| word3_muladd(&w2, &w1, &w0, x[4], y[23]); 2172| 1.34k| word3_muladd(&w2, &w1, &w0, x[5], y[22]); 2173| 1.34k| word3_muladd(&w2, &w1, &w0, x[6], y[21]); 2174| 1.34k| word3_muladd(&w2, &w1, &w0, x[7], y[20]); 2175| 1.34k| word3_muladd(&w2, &w1, &w0, x[8], y[19]); 2176| 1.34k| word3_muladd(&w2, &w1, &w0, x[9], y[18]); 2177| 1.34k| word3_muladd(&w2, &w1, &w0, x[10], y[17]); 2178| 1.34k| word3_muladd(&w2, &w1, &w0, x[11], y[16]); 2179| 1.34k| word3_muladd(&w2, &w1, &w0, x[12], y[15]); 2180| 1.34k| word3_muladd(&w2, &w1, &w0, x[13], y[14]); 2181| 1.34k| word3_muladd(&w2, &w1, &w0, x[14], y[13]); 2182| 1.34k| word3_muladd(&w2, &w1, &w0, x[15], y[12]); 2183| 1.34k| word3_muladd(&w2, &w1, &w0, x[16], y[11]); 2184| 1.34k| word3_muladd(&w2, &w1, &w0, x[17], y[10]); 2185| 1.34k| word3_muladd(&w2, &w1, &w0, x[18], y[9]); 2186| 1.34k| word3_muladd(&w2, &w1, &w0, x[19], y[8]); 2187| 1.34k| word3_muladd(&w2, &w1, &w0, x[20], y[7]); 2188| 1.34k| word3_muladd(&w2, &w1, &w0, x[21], y[6]); 2189| 1.34k| word3_muladd(&w2, &w1, &w0, x[22], y[5]); 2190| 1.34k| word3_muladd(&w2, &w1, &w0, x[23], y[4]); 2191| 1.34k| z[27] = w0; 2192| 1.34k| w0 = 0; 2193| | 2194| 1.34k| word3_muladd(&w0, &w2, &w1, x[5], y[23]); 2195| 1.34k| word3_muladd(&w0, &w2, &w1, x[6], y[22]); 2196| 1.34k| word3_muladd(&w0, &w2, &w1, x[7], y[21]); 2197| 1.34k| word3_muladd(&w0, &w2, &w1, x[8], y[20]); 2198| 1.34k| word3_muladd(&w0, &w2, &w1, x[9], y[19]); 2199| 1.34k| word3_muladd(&w0, &w2, &w1, x[10], y[18]); 2200| 1.34k| word3_muladd(&w0, &w2, &w1, x[11], y[17]); 2201| 1.34k| word3_muladd(&w0, &w2, &w1, x[12], y[16]); 2202| 1.34k| word3_muladd(&w0, &w2, &w1, x[13], y[15]); 2203| 1.34k| word3_muladd(&w0, &w2, &w1, x[14], y[14]); 2204| 1.34k| word3_muladd(&w0, &w2, &w1, x[15], y[13]); 2205| 1.34k| word3_muladd(&w0, &w2, &w1, x[16], y[12]); 2206| 1.34k| word3_muladd(&w0, &w2, &w1, x[17], y[11]); 2207| 1.34k| word3_muladd(&w0, &w2, &w1, x[18], y[10]); 2208| 1.34k| word3_muladd(&w0, &w2, &w1, x[19], y[9]); 2209| 1.34k| word3_muladd(&w0, &w2, &w1, x[20], y[8]); 2210| 1.34k| word3_muladd(&w0, &w2, &w1, x[21], y[7]); 2211| 1.34k| word3_muladd(&w0, &w2, &w1, x[22], y[6]); 2212| 1.34k| word3_muladd(&w0, &w2, &w1, x[23], y[5]); 2213| 1.34k| z[28] = w1; 2214| 1.34k| w1 = 0; 2215| | 2216| 1.34k| word3_muladd(&w1, &w0, &w2, x[6], y[23]); 2217| 1.34k| word3_muladd(&w1, &w0, &w2, x[7], y[22]); 2218| 1.34k| word3_muladd(&w1, &w0, &w2, x[8], y[21]); 2219| 1.34k| word3_muladd(&w1, &w0, &w2, x[9], y[20]); 2220| 1.34k| word3_muladd(&w1, &w0, &w2, x[10], y[19]); 2221| 1.34k| word3_muladd(&w1, &w0, &w2, x[11], y[18]); 2222| 1.34k| word3_muladd(&w1, &w0, &w2, x[12], y[17]); 2223| 1.34k| word3_muladd(&w1, &w0, &w2, x[13], y[16]); 2224| 1.34k| word3_muladd(&w1, &w0, &w2, x[14], y[15]); 2225| 1.34k| word3_muladd(&w1, &w0, &w2, x[15], y[14]); 2226| 1.34k| word3_muladd(&w1, &w0, &w2, x[16], y[13]); 2227| 1.34k| word3_muladd(&w1, &w0, &w2, x[17], y[12]); 2228| 1.34k| word3_muladd(&w1, &w0, &w2, x[18], y[11]); 2229| 1.34k| word3_muladd(&w1, &w0, &w2, x[19], y[10]); 2230| 1.34k| word3_muladd(&w1, &w0, &w2, x[20], y[9]); 2231| 1.34k| word3_muladd(&w1, &w0, &w2, x[21], y[8]); 2232| 1.34k| word3_muladd(&w1, &w0, &w2, x[22], y[7]); 2233| 1.34k| word3_muladd(&w1, &w0, &w2, x[23], y[6]); 2234| 1.34k| z[29] = w2; 2235| 1.34k| w2 = 0; 2236| | 2237| 1.34k| word3_muladd(&w2, &w1, &w0, x[7], y[23]); 2238| 1.34k| word3_muladd(&w2, &w1, &w0, x[8], y[22]); 2239| 1.34k| word3_muladd(&w2, &w1, &w0, x[9], y[21]); 2240| 1.34k| word3_muladd(&w2, &w1, &w0, x[10], y[20]); 2241| 1.34k| word3_muladd(&w2, &w1, &w0, x[11], y[19]); 2242| 1.34k| word3_muladd(&w2, &w1, &w0, x[12], y[18]); 2243| 1.34k| word3_muladd(&w2, &w1, &w0, x[13], y[17]); 2244| 1.34k| word3_muladd(&w2, &w1, &w0, x[14], y[16]); 2245| 1.34k| word3_muladd(&w2, &w1, &w0, x[15], y[15]); 2246| 1.34k| word3_muladd(&w2, &w1, &w0, x[16], y[14]); 2247| 1.34k| word3_muladd(&w2, &w1, &w0, x[17], y[13]); 2248| 1.34k| word3_muladd(&w2, &w1, &w0, x[18], y[12]); 2249| 1.34k| word3_muladd(&w2, &w1, &w0, x[19], y[11]); 2250| 1.34k| word3_muladd(&w2, &w1, &w0, x[20], y[10]); 2251| 1.34k| word3_muladd(&w2, &w1, &w0, x[21], y[9]); 2252| 1.34k| word3_muladd(&w2, &w1, &w0, x[22], y[8]); 2253| 1.34k| word3_muladd(&w2, &w1, &w0, x[23], y[7]); 2254| 1.34k| z[30] = w0; 2255| 1.34k| w0 = 0; 2256| | 2257| 1.34k| word3_muladd(&w0, &w2, &w1, x[8], y[23]); 2258| 1.34k| word3_muladd(&w0, &w2, &w1, x[9], y[22]); 2259| 1.34k| word3_muladd(&w0, &w2, &w1, x[10], y[21]); 2260| 1.34k| word3_muladd(&w0, &w2, &w1, x[11], y[20]); 2261| 1.34k| word3_muladd(&w0, &w2, &w1, x[12], y[19]); 2262| 1.34k| word3_muladd(&w0, &w2, &w1, x[13], y[18]); 2263| 1.34k| word3_muladd(&w0, &w2, &w1, x[14], y[17]); 2264| 1.34k| word3_muladd(&w0, &w2, &w1, x[15], y[16]); 2265| 1.34k| word3_muladd(&w0, &w2, &w1, x[16], y[15]); 2266| 1.34k| word3_muladd(&w0, &w2, &w1, x[17], y[14]); 2267| 1.34k| word3_muladd(&w0, &w2, &w1, x[18], y[13]); 2268| 1.34k| word3_muladd(&w0, &w2, &w1, x[19], y[12]); 2269| 1.34k| word3_muladd(&w0, &w2, &w1, x[20], y[11]); 2270| 1.34k| word3_muladd(&w0, &w2, &w1, x[21], y[10]); 2271| 1.34k| word3_muladd(&w0, &w2, &w1, x[22], y[9]); 2272| 1.34k| word3_muladd(&w0, &w2, &w1, x[23], y[8]); 2273| 1.34k| z[31] = w1; 2274| 1.34k| w1 = 0; 2275| | 2276| 1.34k| word3_muladd(&w1, &w0, &w2, x[9], y[23]); 2277| 1.34k| word3_muladd(&w1, &w0, &w2, x[10], y[22]); 2278| 1.34k| word3_muladd(&w1, &w0, &w2, x[11], y[21]); 2279| 1.34k| word3_muladd(&w1, &w0, &w2, x[12], y[20]); 2280| 1.34k| word3_muladd(&w1, &w0, &w2, x[13], y[19]); 2281| 1.34k| word3_muladd(&w1, &w0, &w2, x[14], y[18]); 2282| 1.34k| word3_muladd(&w1, &w0, &w2, x[15], y[17]); 2283| 1.34k| word3_muladd(&w1, &w0, &w2, x[16], y[16]); 2284| 1.34k| word3_muladd(&w1, &w0, &w2, x[17], y[15]); 2285| 1.34k| word3_muladd(&w1, &w0, &w2, x[18], y[14]); 2286| 1.34k| word3_muladd(&w1, &w0, &w2, x[19], y[13]); 2287| 1.34k| word3_muladd(&w1, &w0, &w2, x[20], y[12]); 2288| 1.34k| word3_muladd(&w1, &w0, &w2, x[21], y[11]); 2289| 1.34k| word3_muladd(&w1, &w0, &w2, x[22], y[10]); 2290| 1.34k| word3_muladd(&w1, &w0, &w2, x[23], y[9]); 2291| 1.34k| z[32] = w2; 2292| 1.34k| w2 = 0; 2293| | 2294| 1.34k| word3_muladd(&w2, &w1, &w0, x[10], y[23]); 2295| 1.34k| word3_muladd(&w2, &w1, &w0, x[11], y[22]); 2296| 1.34k| word3_muladd(&w2, &w1, &w0, x[12], y[21]); 2297| 1.34k| word3_muladd(&w2, &w1, &w0, x[13], y[20]); 2298| 1.34k| word3_muladd(&w2, &w1, &w0, x[14], y[19]); 2299| 1.34k| word3_muladd(&w2, &w1, &w0, x[15], y[18]); 2300| 1.34k| word3_muladd(&w2, &w1, &w0, x[16], y[17]); 2301| 1.34k| word3_muladd(&w2, &w1, &w0, x[17], y[16]); 2302| 1.34k| word3_muladd(&w2, &w1, &w0, x[18], y[15]); 2303| 1.34k| word3_muladd(&w2, &w1, &w0, x[19], y[14]); 2304| 1.34k| word3_muladd(&w2, &w1, &w0, x[20], y[13]); 2305| 1.34k| word3_muladd(&w2, &w1, &w0, x[21], y[12]); 2306| 1.34k| word3_muladd(&w2, &w1, &w0, x[22], y[11]); 2307| 1.34k| word3_muladd(&w2, &w1, &w0, x[23], y[10]); 2308| 1.34k| z[33] = w0; 2309| 1.34k| w0 = 0; 2310| | 2311| 1.34k| word3_muladd(&w0, &w2, &w1, x[11], y[23]); 2312| 1.34k| word3_muladd(&w0, &w2, &w1, x[12], y[22]); 2313| 1.34k| word3_muladd(&w0, &w2, &w1, x[13], y[21]); 2314| 1.34k| word3_muladd(&w0, &w2, &w1, x[14], y[20]); 2315| 1.34k| word3_muladd(&w0, &w2, &w1, x[15], y[19]); 2316| 1.34k| word3_muladd(&w0, &w2, &w1, x[16], y[18]); 2317| 1.34k| word3_muladd(&w0, &w2, &w1, x[17], y[17]); 2318| 1.34k| word3_muladd(&w0, &w2, &w1, x[18], y[16]); 2319| 1.34k| word3_muladd(&w0, &w2, &w1, x[19], y[15]); 2320| 1.34k| word3_muladd(&w0, &w2, &w1, x[20], y[14]); 2321| 1.34k| word3_muladd(&w0, &w2, &w1, x[21], y[13]); 2322| 1.34k| word3_muladd(&w0, &w2, &w1, x[22], y[12]); 2323| 1.34k| word3_muladd(&w0, &w2, &w1, x[23], y[11]); 2324| 1.34k| z[34] = w1; 2325| 1.34k| w1 = 0; 2326| | 2327| 1.34k| word3_muladd(&w1, &w0, &w2, x[12], y[23]); 2328| 1.34k| word3_muladd(&w1, &w0, &w2, x[13], y[22]); 2329| 1.34k| word3_muladd(&w1, &w0, &w2, x[14], y[21]); 2330| 1.34k| word3_muladd(&w1, &w0, &w2, x[15], y[20]); 2331| 1.34k| word3_muladd(&w1, &w0, &w2, x[16], y[19]); 2332| 1.34k| word3_muladd(&w1, &w0, &w2, x[17], y[18]); 2333| 1.34k| word3_muladd(&w1, &w0, &w2, x[18], y[17]); 2334| 1.34k| word3_muladd(&w1, &w0, &w2, x[19], y[16]); 2335| 1.34k| word3_muladd(&w1, &w0, &w2, x[20], y[15]); 2336| 1.34k| word3_muladd(&w1, &w0, &w2, x[21], y[14]); 2337| 1.34k| word3_muladd(&w1, &w0, &w2, x[22], y[13]); 2338| 1.34k| word3_muladd(&w1, &w0, &w2, x[23], y[12]); 2339| 1.34k| z[35] = w2; 2340| 1.34k| w2 = 0; 2341| | 2342| 1.34k| word3_muladd(&w2, &w1, &w0, x[13], y[23]); 2343| 1.34k| word3_muladd(&w2, &w1, &w0, x[14], y[22]); 2344| 1.34k| word3_muladd(&w2, &w1, &w0, x[15], y[21]); 2345| 1.34k| word3_muladd(&w2, &w1, &w0, x[16], y[20]); 2346| 1.34k| word3_muladd(&w2, &w1, &w0, x[17], y[19]); 2347| 1.34k| word3_muladd(&w2, &w1, &w0, x[18], y[18]); 2348| 1.34k| word3_muladd(&w2, &w1, &w0, x[19], y[17]); 2349| 1.34k| word3_muladd(&w2, &w1, &w0, x[20], y[16]); 2350| 1.34k| word3_muladd(&w2, &w1, &w0, x[21], y[15]); 2351| 1.34k| word3_muladd(&w2, &w1, &w0, x[22], y[14]); 2352| 1.34k| word3_muladd(&w2, &w1, &w0, x[23], y[13]); 2353| 1.34k| z[36] = w0; 2354| 1.34k| w0 = 0; 2355| | 2356| 1.34k| word3_muladd(&w0, &w2, &w1, x[14], y[23]); 2357| 1.34k| word3_muladd(&w0, &w2, &w1, x[15], y[22]); 2358| 1.34k| word3_muladd(&w0, &w2, &w1, x[16], y[21]); 2359| 1.34k| word3_muladd(&w0, &w2, &w1, x[17], y[20]); 2360| 1.34k| word3_muladd(&w0, &w2, &w1, x[18], y[19]); 2361| 1.34k| word3_muladd(&w0, &w2, &w1, x[19], y[18]); 2362| 1.34k| word3_muladd(&w0, &w2, &w1, x[20], y[17]); 2363| 1.34k| word3_muladd(&w0, &w2, &w1, x[21], y[16]); 2364| 1.34k| word3_muladd(&w0, &w2, &w1, x[22], y[15]); 2365| 1.34k| word3_muladd(&w0, &w2, &w1, x[23], y[14]); 2366| 1.34k| z[37] = w1; 2367| 1.34k| w1 = 0; 2368| | 2369| 1.34k| word3_muladd(&w1, &w0, &w2, x[15], y[23]); 2370| 1.34k| word3_muladd(&w1, &w0, &w2, x[16], y[22]); 2371| 1.34k| word3_muladd(&w1, &w0, &w2, x[17], y[21]); 2372| 1.34k| word3_muladd(&w1, &w0, &w2, x[18], y[20]); 2373| 1.34k| word3_muladd(&w1, &w0, &w2, x[19], y[19]); 2374| 1.34k| word3_muladd(&w1, &w0, &w2, x[20], y[18]); 2375| 1.34k| word3_muladd(&w1, &w0, &w2, x[21], y[17]); 2376| 1.34k| word3_muladd(&w1, &w0, &w2, x[22], y[16]); 2377| 1.34k| word3_muladd(&w1, &w0, &w2, x[23], y[15]); 2378| 1.34k| z[38] = w2; 2379| 1.34k| w2 = 0; 2380| | 2381| 1.34k| word3_muladd(&w2, &w1, &w0, x[16], y[23]); 2382| 1.34k| word3_muladd(&w2, &w1, &w0, x[17], y[22]); 2383| 1.34k| word3_muladd(&w2, &w1, &w0, x[18], y[21]); 2384| 1.34k| word3_muladd(&w2, &w1, &w0, x[19], y[20]); 2385| 1.34k| word3_muladd(&w2, &w1, &w0, x[20], y[19]); 2386| 1.34k| word3_muladd(&w2, &w1, &w0, x[21], y[18]); 2387| 1.34k| word3_muladd(&w2, &w1, &w0, x[22], y[17]); 2388| 1.34k| word3_muladd(&w2, &w1, &w0, x[23], y[16]); 2389| 1.34k| z[39] = w0; 2390| 1.34k| w0 = 0; 2391| | 2392| 1.34k| word3_muladd(&w0, &w2, &w1, x[17], y[23]); 2393| 1.34k| word3_muladd(&w0, &w2, &w1, x[18], y[22]); 2394| 1.34k| word3_muladd(&w0, &w2, &w1, x[19], y[21]); 2395| 1.34k| word3_muladd(&w0, &w2, &w1, x[20], y[20]); 2396| 1.34k| word3_muladd(&w0, &w2, &w1, x[21], y[19]); 2397| 1.34k| word3_muladd(&w0, &w2, &w1, x[22], y[18]); 2398| 1.34k| word3_muladd(&w0, &w2, &w1, x[23], y[17]); 2399| 1.34k| z[40] = w1; 2400| 1.34k| w1 = 0; 2401| | 2402| 1.34k| word3_muladd(&w1, &w0, &w2, x[18], y[23]); 2403| 1.34k| word3_muladd(&w1, &w0, &w2, x[19], y[22]); 2404| 1.34k| word3_muladd(&w1, &w0, &w2, x[20], y[21]); 2405| 1.34k| word3_muladd(&w1, &w0, &w2, x[21], y[20]); 2406| 1.34k| word3_muladd(&w1, &w0, &w2, x[22], y[19]); 2407| 1.34k| word3_muladd(&w1, &w0, &w2, x[23], y[18]); 2408| 1.34k| z[41] = w2; 2409| 1.34k| w2 = 0; 2410| | 2411| 1.34k| word3_muladd(&w2, &w1, &w0, x[19], y[23]); 2412| 1.34k| word3_muladd(&w2, &w1, &w0, x[20], y[22]); 2413| 1.34k| word3_muladd(&w2, &w1, &w0, x[21], y[21]); 2414| 1.34k| word3_muladd(&w2, &w1, &w0, x[22], y[20]); 2415| 1.34k| word3_muladd(&w2, &w1, &w0, x[23], y[19]); 2416| 1.34k| z[42] = w0; 2417| 1.34k| w0 = 0; 2418| | 2419| 1.34k| word3_muladd(&w0, &w2, &w1, x[20], y[23]); 2420| 1.34k| word3_muladd(&w0, &w2, &w1, x[21], y[22]); 2421| 1.34k| word3_muladd(&w0, &w2, &w1, x[22], y[21]); 2422| 1.34k| word3_muladd(&w0, &w2, &w1, x[23], y[20]); 2423| 1.34k| z[43] = w1; 2424| 1.34k| w1 = 0; 2425| | 2426| 1.34k| word3_muladd(&w1, &w0, &w2, x[21], y[23]); 2427| 1.34k| word3_muladd(&w1, &w0, &w2, x[22], y[22]); 2428| 1.34k| word3_muladd(&w1, &w0, &w2, x[23], y[21]); 2429| 1.34k| z[44] = w2; 2430| 1.34k| w2 = 0; 2431| | 2432| 1.34k| word3_muladd(&w2, &w1, &w0, x[22], y[23]); 2433| 1.34k| word3_muladd(&w2, &w1, &w0, x[23], y[22]); 2434| 1.34k| z[45] = w0; 2435| 1.34k| w0 = 0; 2436| | 2437| 1.34k| word3_muladd(&w0, &w2, &w1, x[23], y[23]); 2438| 1.34k| z[46] = w1; 2439| 1.34k| z[47] = w2; 2440| 1.34k|} _ZN5Botan12basecase_mulEPmmPKmmS2_m: 20| 21.9k|void basecase_mul(word z[], size_t z_size, const word x[], size_t x_size, const word y[], size_t y_size) { 21| 21.9k| if(z_size < x_size + y_size) { ------------------ | Branch (21:7): [True: 0, False: 21.9k] ------------------ 22| 0| throw Invalid_Argument("basecase_mul z_size too small"); 23| 0| } 24| | 25| 21.9k| const size_t x_size_8 = x_size - (x_size % 8); 26| | 27| 21.9k| clear_mem(z, z_size); 28| | 29| 473k| for(size_t i = 0; i != y_size; ++i) { ------------------ | Branch (29:22): [True: 451k, False: 21.9k] ------------------ 30| 451k| const word y_i = y[i]; 31| | 32| 451k| word carry = 0; 33| | 34| 1.45M| for(size_t j = 0; j != x_size_8; j += 8) { ------------------ | Branch (34:25): [True: 1.00M, False: 451k] ------------------ 35| 1.00M| carry = word8_madd3(z + i + j, x + j, y_i, carry); 36| 1.00M| } 37| | 38| 2.03M| for(size_t j = x_size_8; j != x_size; ++j) { ------------------ | Branch (38:32): [True: 1.58M, False: 451k] ------------------ 39| 1.58M| z[i + j] = word_madd3(x[j], y_i, z[i + j], &carry); 40| 1.58M| } 41| | 42| 451k| z[x_size + i] = carry; 43| 451k| } 44| 21.9k|} _ZN5Botan12basecase_sqrEPmmPKmm: 46| 44.2k|void basecase_sqr(word z[], size_t z_size, const word x[], size_t x_size) { 47| 44.2k| if(z_size < 2 * x_size) { ------------------ | Branch (47:7): [True: 0, False: 44.2k] ------------------ 48| 0| throw Invalid_Argument("basecase_sqr z_size too small"); 49| 0| } 50| | 51| 44.2k| const size_t x_size_8 = x_size - (x_size % 8); 52| | 53| 44.2k| clear_mem(z, z_size); 54| | 55| 806k| for(size_t i = 0; i != x_size; ++i) { ------------------ | Branch (55:22): [True: 761k, False: 44.2k] ------------------ 56| 761k| const word x_i = x[i]; 57| | 58| 761k| word carry = 0; 59| | 60| 2.45M| for(size_t j = 0; j != x_size_8; j += 8) { ------------------ | Branch (60:25): [True: 1.69M, False: 761k] ------------------ 61| 1.69M| carry = word8_madd3(z + i + j, x + j, x_i, carry); 62| 1.69M| } 63| | 64| 4.00M| for(size_t j = x_size_8; j != x_size; ++j) { ------------------ | Branch (64:32): [True: 3.24M, False: 761k] ------------------ 65| 3.24M| z[i + j] = word_madd3(x[j], x_i, z[i + j], &carry); 66| 3.24M| } 67| | 68| 761k| z[x_size + i] = carry; 69| 761k| } 70| 44.2k|} _ZN5Botan10bigint_mulEPmmPKmmmS2_mmS0_m: 291| 43.4k| size_t ws_size) { 292| 43.4k| clear_mem(z, z_size); 293| | 294| 43.4k| if(x_sw == 1) { ------------------ | Branch (294:7): [True: 2.78k, False: 40.6k] ------------------ 295| 2.78k| bigint_linmul3(z, y, y_sw, x[0]); 296| 40.6k| } else if(y_sw == 1) { ------------------ | Branch (296:14): [True: 0, False: 40.6k] ------------------ 297| 0| bigint_linmul3(z, x, x_sw, y[0]); 298| 40.6k| } else if(sized_for_comba_mul<4>(x_sw, x_size, y_sw, y_size, z_size)) { ------------------ | Branch (298:14): [True: 1.94k, False: 38.7k] ------------------ 299| 1.94k| bigint_comba_mul4(z, x, y); 300| 38.7k| } else if(sized_for_comba_mul<6>(x_sw, x_size, y_sw, y_size, z_size)) { ------------------ | Branch (300:14): [True: 2.10k, False: 36.6k] ------------------ 301| 2.10k| bigint_comba_mul6(z, x, y); 302| 36.6k| } else if(sized_for_comba_mul<8>(x_sw, x_size, y_sw, y_size, z_size)) { ------------------ | Branch (302:14): [True: 2.53k, False: 34.1k] ------------------ 303| 2.53k| bigint_comba_mul8(z, x, y); 304| 34.1k| } else if(sized_for_comba_mul<9>(x_sw, x_size, y_sw, y_size, z_size)) { ------------------ | Branch (304:14): [True: 1.28k, False: 32.8k] ------------------ 305| 1.28k| bigint_comba_mul9(z, x, y); 306| 32.8k| } else if(sized_for_comba_mul<16>(x_sw, x_size, y_sw, y_size, z_size)) { ------------------ | Branch (306:14): [True: 7.41k, False: 25.3k] ------------------ 307| 7.41k| bigint_comba_mul16(z, x, y); 308| 25.3k| } else if(sized_for_comba_mul<24>(x_sw, x_size, y_sw, y_size, z_size)) { ------------------ | Branch (308:14): [True: 1.34k, False: 24.0k] ------------------ 309| 1.34k| bigint_comba_mul24(z, x, y); 310| 24.0k| } else if(x_sw < KARATSUBA_MULTIPLY_THRESHOLD || y_sw < KARATSUBA_MULTIPLY_THRESHOLD || !workspace) { ------------------ | Branch (310:14): [True: 18.2k, False: 5.78k] | Branch (310:53): [True: 11, False: 5.77k] | Branch (310:92): [True: 0, False: 5.77k] ------------------ 311| 18.2k| basecase_mul(z, z_size, x, x_sw, y, y_sw); 312| 18.2k| } else { 313| 5.77k| const size_t N = karatsuba_size(z_size, x_size, x_sw, y_size, y_sw); 314| | 315| 5.77k| if(N && z_size >= 2 * N && ws_size >= 2 * N) { ------------------ | Branch (315:10): [True: 3.34k, False: 2.42k] | Branch (315:15): [True: 3.34k, False: 0] | Branch (315:34): [True: 3.34k, False: 0] ------------------ 316| 3.34k| karatsuba_mul(z, x, y, N, workspace); 317| 3.34k| } else { 318| 2.42k| basecase_mul(z, z_size, x, x_sw, y, y_sw); 319| 2.42k| } 320| 5.77k| } 321| 43.4k|} _ZN5Botan10bigint_sqrEPmmPKmmmS0_m: 326| 110k|void bigint_sqr(word z[], size_t z_size, const word x[], size_t x_size, size_t x_sw, word workspace[], size_t ws_size) { 327| 110k| clear_mem(z, z_size); 328| | 329| 110k| BOTAN_ASSERT(z_size / 2 >= x_sw, "Output size is sufficient"); ------------------ | | 51| 110k| do { \ | | 52| 110k| if(!(expr)) \ | | ------------------ | | | Branch (52:10): [True: 0, False: 110k] | | ------------------ | | 53| 110k| Botan::assertion_failure(#expr, assertion_made, __func__, __FILE__, __LINE__); \ | | 54| 110k| } while(0) | | ------------------ | | | Branch (54:12): [Folded - Ignored] | | ------------------ ------------------ 330| | 331| 110k| if(x_sw == 1) { ------------------ | Branch (331:7): [True: 8.39k, False: 102k] ------------------ 332| 8.39k| bigint_linmul3(z, x, x_sw, x[0]); 333| 102k| } else if(sized_for_comba_sqr<4>(x_sw, x_size, z_size)) { ------------------ | Branch (333:14): [True: 5.89k, False: 96.2k] ------------------ 334| 5.89k| bigint_comba_sqr4(z, x); 335| 96.2k| } else if(sized_for_comba_sqr<6>(x_sw, x_size, z_size)) { ------------------ | Branch (335:14): [True: 6.44k, False: 89.8k] ------------------ 336| 6.44k| bigint_comba_sqr6(z, x); 337| 89.8k| } else if(sized_for_comba_sqr<8>(x_sw, x_size, z_size)) { ------------------ | Branch (337:14): [True: 6.85k, False: 82.9k] ------------------ 338| 6.85k| bigint_comba_sqr8(z, x); 339| 82.9k| } else if(sized_for_comba_sqr<9>(x_sw, x_size, z_size)) { ------------------ | Branch (339:14): [True: 3.79k, False: 79.1k] ------------------ 340| 3.79k| bigint_comba_sqr9(z, x); 341| 79.1k| } else if(sized_for_comba_sqr<16>(x_sw, x_size, z_size)) { ------------------ | Branch (341:14): [True: 27.3k, False: 51.8k] ------------------ 342| 27.3k| bigint_comba_sqr16(z, x); 343| 51.8k| } else if(sized_for_comba_sqr<24>(x_sw, x_size, z_size)) { ------------------ | Branch (343:14): [True: 2.59k, False: 49.2k] ------------------ 344| 2.59k| bigint_comba_sqr24(z, x); 345| 49.2k| } else if(x_size < KARATSUBA_SQUARE_THRESHOLD || !workspace) { ------------------ | Branch (345:14): [True: 7.08k, False: 42.1k] | Branch (345:53): [True: 0, False: 42.1k] ------------------ 346| 7.08k| basecase_sqr(z, z_size, x, x_sw); 347| 42.1k| } else { 348| 42.1k| const size_t N = karatsuba_size(z_size, x_size, x_sw); 349| | 350| 42.1k| if(N && z_size >= 2 * N && ws_size >= 2 * N) { ------------------ | Branch (350:10): [True: 19.7k, False: 22.4k] | Branch (350:15): [True: 19.7k, False: 0] | Branch (350:34): [True: 19.7k, False: 0] ------------------ 351| 19.7k| karatsuba_sqr(z, x, N, workspace); 352| 22.4k| } else { 353| 22.4k| basecase_sqr(z, z_size, x, x_sw); 354| 22.4k| } 355| 42.1k| } 356| 110k|} mp_karat.cpp:_ZN5Botan12_GLOBAL__N_114karatsuba_sizeEmmmmm: 202| 5.77k|size_t karatsuba_size(size_t z_size, size_t x_size, size_t x_sw, size_t y_size, size_t y_sw) { 203| 5.77k| if(x_sw > x_size || x_sw > y_size || y_sw > x_size || y_sw > y_size) { ------------------ | Branch (203:7): [True: 0, False: 5.77k] | Branch (203:24): [True: 0, False: 5.77k] | Branch (203:41): [True: 120, False: 5.65k] | Branch (203:58): [True: 0, False: 5.65k] ------------------ 204| 120| return 0; 205| 120| } 206| | 207| 5.65k| if(((x_size == x_sw) && (x_size % 2)) || ((y_size == y_sw) && (y_size % 2))) { ------------------ | Branch (207:8): [True: 14, False: 5.64k] | Branch (207:28): [True: 0, False: 14] | Branch (207:46): [True: 25, False: 5.63k] | Branch (207:66): [True: 0, False: 25] ------------------ 208| 0| return 0; 209| 0| } 210| | 211| 5.65k| const size_t start = (x_sw > y_sw) ? x_sw : y_sw; ------------------ | Branch (211:25): [True: 26, False: 5.62k] ------------------ 212| 5.65k| const size_t end = (x_size < y_size) ? x_size : y_size; ------------------ | Branch (212:23): [True: 384, False: 5.27k] ------------------ 213| | 214| 5.65k| if(start == end) { ------------------ | Branch (214:7): [True: 39, False: 5.61k] ------------------ 215| 39| if(start % 2) { ------------------ | Branch (215:10): [True: 0, False: 39] ------------------ 216| 0| return 0; 217| 0| } 218| 39| return start; 219| 39| } 220| | 221| 7.97k| for(size_t j = start; j <= end; ++j) { ------------------ | Branch (221:26): [True: 7.97k, False: 0] ------------------ 222| 7.97k| if(j % 2) { ------------------ | Branch (222:10): [True: 2.36k, False: 5.61k] ------------------ 223| 2.36k| continue; 224| 2.36k| } 225| | 226| 5.61k| if(2 * j > z_size) { ------------------ | Branch (226:10): [True: 2.30k, False: 3.30k] ------------------ 227| 2.30k| return 0; 228| 2.30k| } 229| | 230| 3.30k| if(x_sw <= j && j <= x_size && y_sw <= j && j <= y_size) { ------------------ | Branch (230:10): [True: 3.30k, False: 0] | Branch (230:23): [True: 3.30k, False: 0] | Branch (230:38): [True: 3.30k, False: 0] | Branch (230:51): [True: 3.30k, False: 0] ------------------ 231| 3.30k| if(j % 4 == 2 && (j + 2) <= x_size && (j + 2) <= y_size && 2 * (j + 2) <= z_size) { ------------------ | Branch (231:13): [True: 418, False: 2.89k] | Branch (231:27): [True: 418, False: 0] | Branch (231:48): [True: 418, False: 0] | Branch (231:69): [True: 150, False: 268] ------------------ 232| 150| return j + 2; 233| 150| } 234| 3.15k| return j; 235| 3.30k| } 236| 3.30k| } 237| | 238| 0| return 0; 239| 5.61k|} mp_karat.cpp:_ZN5Botan12_GLOBAL__N_113karatsuba_mulEPmPKmS3_mS1_: 80| 13.3k|void karatsuba_mul(word z[], const word x[], const word y[], size_t N, word workspace[]) { 81| 13.3k| if(N < KARATSUBA_MULTIPLY_THRESHOLD || N % 2) { ------------------ | Branch (81:7): [True: 10.0k, False: 3.34k] | Branch (81:43): [True: 0, False: 3.34k] ------------------ 82| 10.0k| switch(N) { 83| 0| case 6: ------------------ | Branch (83:10): [True: 0, False: 10.0k] ------------------ 84| 0| return bigint_comba_mul6(z, x, y); 85| 0| case 8: ------------------ | Branch (85:10): [True: 0, False: 10.0k] ------------------ 86| 0| return bigint_comba_mul8(z, x, y); 87| 0| case 9: ------------------ | Branch (87:10): [True: 0, False: 10.0k] ------------------ 88| 0| return bigint_comba_mul9(z, x, y); 89| 8.79k| case 16: ------------------ | Branch (89:10): [True: 8.79k, False: 1.25k] ------------------ 90| 8.79k| return bigint_comba_mul16(z, x, y); 91| 0| case 24: ------------------ | Branch (91:10): [True: 0, False: 10.0k] ------------------ 92| 0| return bigint_comba_mul24(z, x, y); 93| 1.25k| default: ------------------ | Branch (93:10): [True: 1.25k, False: 8.79k] ------------------ 94| 1.25k| return basecase_mul(z, 2 * N, x, N, y, N); 95| 10.0k| } 96| 10.0k| } 97| | 98| 3.34k| const size_t N2 = N / 2; 99| | 100| 3.34k| const word* x0 = x; 101| 3.34k| const word* x1 = x + N2; 102| 3.34k| const word* y0 = y; 103| 3.34k| const word* y1 = y + N2; 104| 3.34k| word* z0 = z; 105| 3.34k| word* z1 = z + N; 106| | 107| 3.34k| word* ws0 = workspace; 108| 3.34k| word* ws1 = workspace + N; 109| | 110| 3.34k| clear_mem(workspace, 2 * N); 111| | 112| | /* 113| | * If either of cmp0 or cmp1 is zero then z0 or z1 resp is zero here, 114| | * resulting in a no-op - z0*z1 will be equal to zero so we don't need to do 115| | * anything, clear_mem above already set the correct result. 116| | * 117| | * However we ignore the result of the comparisons and always perform the 118| | * subtractions and recursively multiply to avoid the timing channel. 119| | */ 120| | 121| | // First compute (X_lo - X_hi)*(Y_hi - Y_lo) 122| 3.34k| const auto cmp0 = bigint_sub_abs(z0, x0, x1, N2, workspace); 123| 3.34k| const auto cmp1 = bigint_sub_abs(z1, y1, y0, N2, workspace); 124| 3.34k| const auto neg_mask = ~(cmp0 ^ cmp1); 125| | 126| 3.34k| karatsuba_mul(ws0, z0, z1, N2, ws1); 127| | 128| | // Compute X_lo * Y_lo 129| 3.34k| karatsuba_mul(z0, x0, y0, N2, ws1); 130| | 131| | // Compute X_hi * Y_hi 132| 3.34k| karatsuba_mul(z1, x1, y1, N2, ws1); 133| | 134| 3.34k| const word ws_carry = bigint_add3_nc(ws1, z0, N, z1, N); 135| 3.34k| word z_carry = bigint_add2_nc(z + N2, N, ws1, N); 136| | 137| 3.34k| z_carry += bigint_add2_nc(z + N + N2, N2, &ws_carry, 1); 138| 3.34k| bigint_add2_nc(z + N + N2, N2, &z_carry, 1); 139| | 140| 3.34k| clear_mem(workspace + N, N2); 141| | 142| 3.34k| bigint_cnd_add_or_sub(neg_mask, z + N2, workspace, 2 * N - N2); 143| 3.34k|} mp_karat.cpp:_ZN5Botan12_GLOBAL__N_114karatsuba_sizeEmmm: 244| 42.1k|size_t karatsuba_size(size_t z_size, size_t x_size, size_t x_sw) { 245| 42.1k| if(x_sw == x_size) { ------------------ | Branch (245:7): [True: 0, False: 42.1k] ------------------ 246| 0| if(x_sw % 2) { ------------------ | Branch (246:10): [True: 0, False: 0] ------------------ 247| 0| return 0; 248| 0| } 249| 0| return x_sw; 250| 0| } 251| | 252| 64.6k| for(size_t j = x_sw; j <= x_size; ++j) { ------------------ | Branch (252:25): [True: 64.6k, False: 0] ------------------ 253| 64.6k| if(j % 2) { ------------------ | Branch (253:10): [True: 22.4k, False: 42.1k] ------------------ 254| 22.4k| continue; 255| 22.4k| } 256| | 257| 42.1k| if(2 * j > z_size) { ------------------ | Branch (257:10): [True: 22.4k, False: 19.7k] ------------------ 258| 22.4k| return 0; 259| 22.4k| } 260| | 261| 19.7k| if(j % 4 == 2 && (j + 2) <= x_size && 2 * (j + 2) <= z_size) { ------------------ | Branch (261:10): [True: 10.1k, False: 9.55k] | Branch (261:24): [True: 10.1k, False: 0] | Branch (261:45): [True: 0, False: 10.1k] ------------------ 262| 0| return j + 2; 263| 0| } 264| 19.7k| return j; 265| 19.7k| } 266| | 267| 0| return 0; 268| 42.1k|} mp_karat.cpp:_ZN5Botan12_GLOBAL__N_113karatsuba_sqrEPmPKmmS1_: 148| 34.7k|void karatsuba_sqr(word z[], const word x[], size_t N, word workspace[]) { 149| 34.7k| if(N < KARATSUBA_SQUARE_THRESHOLD || N % 2) { ------------------ | Branch (149:7): [True: 29.7k, False: 4.99k] | Branch (149:41): [True: 0, False: 4.99k] ------------------ 150| 29.7k| switch(N) { 151| 0| case 6: ------------------ | Branch (151:10): [True: 0, False: 29.7k] ------------------ 152| 0| return bigint_comba_sqr6(z, x); 153| 0| case 8: ------------------ | Branch (153:10): [True: 0, False: 29.7k] ------------------ 154| 0| return bigint_comba_sqr8(z, x); 155| 0| case 9: ------------------ | Branch (155:10): [True: 0, False: 29.7k] ------------------ 156| 0| return bigint_comba_sqr9(z, x); 157| 14.9k| case 16: ------------------ | Branch (157:10): [True: 14.9k, False: 14.7k] ------------------ 158| 14.9k| return bigint_comba_sqr16(z, x); 159| 0| case 24: ------------------ | Branch (159:10): [True: 0, False: 29.7k] ------------------ 160| 0| return bigint_comba_sqr24(z, x); 161| 14.7k| default: ------------------ | Branch (161:10): [True: 14.7k, False: 14.9k] ------------------ 162| 14.7k| return basecase_sqr(z, 2 * N, x, N); 163| 29.7k| } 164| 29.7k| } 165| | 166| 4.99k| const size_t N2 = N / 2; 167| | 168| 4.99k| const word* x0 = x; 169| 4.99k| const word* x1 = x + N2; 170| 4.99k| word* z0 = z; 171| 4.99k| word* z1 = z + N; 172| | 173| 4.99k| word* ws0 = workspace; 174| 4.99k| word* ws1 = workspace + N; 175| | 176| 4.99k| clear_mem(workspace, 2 * N); 177| | 178| | // See comment in karatsuba_mul 179| 4.99k| bigint_sub_abs(z0, x0, x1, N2, workspace); 180| 4.99k| karatsuba_sqr(ws0, z0, N2, ws1); 181| | 182| 4.99k| karatsuba_sqr(z0, x0, N2, ws1); 183| 4.99k| karatsuba_sqr(z1, x1, N2, ws1); 184| | 185| 4.99k| const word ws_carry = bigint_add3_nc(ws1, z0, N, z1, N); 186| 4.99k| word z_carry = bigint_add2_nc(z + N2, N, ws1, N); 187| | 188| 4.99k| z_carry += bigint_add2_nc(z + N + N2, N2, &ws_carry, 1); 189| 4.99k| bigint_add2_nc(z + N + N2, N2, &z_carry, 1); 190| | 191| | /* 192| | * This is only actually required if cmp (result of bigint_sub_abs) is != 0, 193| | * however if cmp==0 then ws0[0:N] == 0 and avoiding the jump hides a 194| | * timing channel. 195| | */ 196| 4.99k| bigint_sub2(z + N2, 2 * N - N2, ws0, N); 197| 4.99k|} mp_karat.cpp:_ZN5Botan12_GLOBAL__N_119sized_for_comba_mulILm4EEEbmmmmm: 271| 40.6k|inline bool sized_for_comba_mul(size_t x_sw, size_t x_size, size_t y_sw, size_t y_size, size_t z_size) { 272| 40.6k| return (x_sw <= SZ && x_size >= SZ && y_sw <= SZ && y_size >= SZ && z_size >= 2 * SZ); ------------------ | Branch (272:12): [True: 4.32k, False: 36.3k] | Branch (272:26): [True: 4.23k, False: 87] | Branch (272:42): [True: 2.95k, False: 1.28k] | Branch (272:56): [True: 2.95k, False: 0] | Branch (272:72): [True: 1.94k, False: 1.00k] ------------------ 273| 40.6k|} mp_karat.cpp:_ZN5Botan12_GLOBAL__N_119sized_for_comba_mulILm6EEEbmmmmm: 271| 38.7k|inline bool sized_for_comba_mul(size_t x_sw, size_t x_size, size_t y_sw, size_t y_size, size_t z_size) { 272| 38.7k| return (x_sw <= SZ && x_size >= SZ && y_sw <= SZ && y_size >= SZ && z_size >= 2 * SZ); ------------------ | Branch (272:12): [True: 5.00k, False: 33.7k] | Branch (272:26): [True: 4.90k, False: 100] | Branch (272:42): [True: 3.64k, False: 1.25k] | Branch (272:56): [True: 3.64k, False: 0] | Branch (272:72): [True: 2.10k, False: 1.53k] ------------------ 273| 38.7k|} mp_karat.cpp:_ZN5Botan12_GLOBAL__N_119sized_for_comba_mulILm8EEEbmmmmm: 271| 36.6k|inline bool sized_for_comba_mul(size_t x_sw, size_t x_size, size_t y_sw, size_t y_size, size_t z_size) { 272| 36.6k| return (x_sw <= SZ && x_size >= SZ && y_sw <= SZ && y_size >= SZ && z_size >= 2 * SZ); ------------------ | Branch (272:12): [True: 7.24k, False: 29.3k] | Branch (272:26): [True: 7.11k, False: 131] | Branch (272:42): [True: 5.12k, False: 1.98k] | Branch (272:56): [True: 5.12k, False: 0] | Branch (272:72): [True: 2.53k, False: 2.59k] ------------------ 273| 36.6k|} mp_karat.cpp:_ZN5Botan12_GLOBAL__N_119sized_for_comba_mulILm9EEEbmmmmm: 271| 34.1k|inline bool sized_for_comba_mul(size_t x_sw, size_t x_size, size_t y_sw, size_t y_size, size_t z_size) { 272| 34.1k| return (x_sw <= SZ && x_size >= SZ && y_sw <= SZ && y_size >= SZ && z_size >= 2 * SZ); ------------------ | Branch (272:12): [True: 6.03k, False: 28.0k] | Branch (272:26): [True: 4.48k, False: 1.55k] | Branch (272:42): [True: 3.23k, False: 1.24k] | Branch (272:56): [True: 3.17k, False: 68] | Branch (272:72): [True: 1.28k, False: 1.88k] ------------------ 273| 34.1k|} mp_karat.cpp:_ZN5Botan12_GLOBAL__N_119sized_for_comba_mulILm16EEEbmmmmm: 271| 32.8k|inline bool sized_for_comba_mul(size_t x_sw, size_t x_size, size_t y_sw, size_t y_size, size_t z_size) { 272| 32.8k| return (x_sw <= SZ && x_size >= SZ && y_sw <= SZ && y_size >= SZ && z_size >= 2 * SZ); ------------------ | Branch (272:12): [True: 18.9k, False: 13.8k] | Branch (272:26): [True: 17.3k, False: 1.63k] | Branch (272:42): [True: 15.7k, False: 1.60k] | Branch (272:56): [True: 15.6k, False: 68] | Branch (272:72): [True: 7.41k, False: 8.22k] ------------------ 273| 32.8k|} mp_karat.cpp:_ZN5Botan12_GLOBAL__N_119sized_for_comba_mulILm24EEEbmmmmm: 271| 25.3k|inline bool sized_for_comba_mul(size_t x_sw, size_t x_size, size_t y_sw, size_t y_size, size_t z_size) { 272| 25.3k| return (x_sw <= SZ && x_size >= SZ && y_sw <= SZ && y_size >= SZ && z_size >= 2 * SZ); ------------------ | Branch (272:12): [True: 14.5k, False: 10.8k] | Branch (272:26): [True: 12.0k, False: 2.50k] | Branch (272:42): [True: 10.3k, False: 1.68k] | Branch (272:56): [True: 10.1k, False: 186] | Branch (272:72): [True: 1.34k, False: 8.79k] ------------------ 273| 25.3k|} mp_karat.cpp:_ZN5Botan12_GLOBAL__N_119sized_for_comba_sqrILm4EEEbmmm: 276| 102k|inline bool sized_for_comba_sqr(size_t x_sw, size_t x_size, size_t z_size) { 277| 102k| return (x_sw <= SZ && x_size >= SZ && z_size >= 2 * SZ); ------------------ | Branch (277:12): [True: 7.61k, False: 94.5k] | Branch (277:26): [True: 7.61k, False: 0] | Branch (277:42): [True: 5.89k, False: 1.72k] ------------------ 278| 102k|} mp_karat.cpp:_ZN5Botan12_GLOBAL__N_119sized_for_comba_sqrILm6EEEbmmm: 276| 96.2k|inline bool sized_for_comba_sqr(size_t x_sw, size_t x_size, size_t z_size) { 277| 96.2k| return (x_sw <= SZ && x_size >= SZ && z_size >= 2 * SZ); ------------------ | Branch (277:12): [True: 9.86k, False: 86.3k] | Branch (277:26): [True: 9.86k, False: 0] | Branch (277:42): [True: 6.44k, False: 3.42k] ------------------ 278| 96.2k|} mp_karat.cpp:_ZN5Botan12_GLOBAL__N_119sized_for_comba_sqrILm8EEEbmmm: 276| 89.8k|inline bool sized_for_comba_sqr(size_t x_sw, size_t x_size, size_t z_size) { 277| 89.8k| return (x_sw <= SZ && x_size >= SZ && z_size >= 2 * SZ); ------------------ | Branch (277:12): [True: 13.7k, False: 76.0k] | Branch (277:26): [True: 13.7k, False: 0] | Branch (277:42): [True: 6.85k, False: 6.87k] ------------------ 278| 89.8k|} mp_karat.cpp:_ZN5Botan12_GLOBAL__N_119sized_for_comba_sqrILm9EEEbmmm: 276| 82.9k|inline bool sized_for_comba_sqr(size_t x_sw, size_t x_size, size_t z_size) { 277| 82.9k| return (x_sw <= SZ && x_size >= SZ && z_size >= 2 * SZ); ------------------ | Branch (277:12): [True: 10.6k, False: 72.2k] | Branch (277:26): [True: 9.52k, False: 1.14k] | Branch (277:42): [True: 3.79k, False: 5.73k] ------------------ 278| 82.9k|} mp_karat.cpp:_ZN5Botan12_GLOBAL__N_119sized_for_comba_sqrILm16EEEbmmm: 276| 79.1k|inline bool sized_for_comba_sqr(size_t x_sw, size_t x_size, size_t z_size) { 277| 79.1k| return (x_sw <= SZ && x_size >= SZ && z_size >= 2 * SZ); ------------------ | Branch (277:12): [True: 55.5k, False: 23.5k] | Branch (277:26): [True: 54.4k, False: 1.14k] | Branch (277:42): [True: 27.3k, False: 27.1k] ------------------ 278| 79.1k|} mp_karat.cpp:_ZN5Botan12_GLOBAL__N_119sized_for_comba_sqrILm24EEEbmmm: 276| 51.8k|inline bool sized_for_comba_sqr(size_t x_sw, size_t x_size, size_t z_size) { 277| 51.8k| return (x_sw <= SZ && x_size >= SZ && z_size >= 2 * SZ); ------------------ | Branch (277:12): [True: 33.7k, False: 18.0k] | Branch (277:26): [True: 30.3k, False: 3.39k] | Branch (277:42): [True: 2.59k, False: 27.7k] ------------------ 278| 51.8k|} _ZN5Botan25bigint_monty_redc_genericEPmmPKmmmS0_: 31| 76.4k|void bigint_monty_redc_generic(word z[], size_t z_size, const word p[], size_t p_size, word p_dash, word ws[]) { 32| 76.4k| BOTAN_ARG_CHECK(z_size >= 2 * p_size && p_size > 0, "Invalid sizes for bigint_monty_redc_generic"); ------------------ | | 30| 76.4k| do { \ | | 31| 152k| if(!(expr)) \ | | ------------------ | | | Branch (31:12): [True: 76.4k, False: 0] | | | Branch (31:12): [True: 76.4k, False: 0] | | ------------------ | | 32| 76.4k| Botan::throw_invalid_argument(msg, __func__, __FILE__); \ | | 33| 76.4k| } while(0) | | ------------------ | | | Branch (33:12): [Folded - Ignored] | | ------------------ ------------------ 33| | 34| 76.4k| word w2 = 0, w1 = 0, w0 = 0; 35| | 36| 76.4k| w0 = z[0]; 37| | 38| 76.4k| ws[0] = w0 * p_dash; 39| | 40| 76.4k| word3_muladd(&w2, &w1, &w0, ws[0], p[0]); 41| | 42| 76.4k| w0 = w1; 43| 76.4k| w1 = w2; 44| 76.4k| w2 = 0; 45| | 46| 1.12M| for(size_t i = 1; i != p_size; ++i) { ------------------ | Branch (46:22): [True: 1.05M, False: 76.4k] ------------------ 47| 12.9M| for(size_t j = 0; j < i; ++j) { ------------------ | Branch (47:25): [True: 11.8M, False: 1.05M] ------------------ 48| 11.8M| word3_muladd(&w2, &w1, &w0, ws[j], p[i - j]); 49| 11.8M| } 50| | 51| 1.05M| word3_add(&w2, &w1, &w0, z[i]); 52| | 53| 1.05M| ws[i] = w0 * p_dash; 54| | 55| 1.05M| word3_muladd(&w2, &w1, &w0, ws[i], p[0]); 56| | 57| 1.05M| w0 = w1; 58| 1.05M| w1 = w2; 59| 1.05M| w2 = 0; 60| 1.05M| } 61| | 62| 1.12M| for(size_t i = 0; i != p_size - 1; ++i) { ------------------ | Branch (62:22): [True: 1.05M, False: 76.4k] ------------------ 63| 12.9M| for(size_t j = i + 1; j != p_size; ++j) { ------------------ | Branch (63:29): [True: 11.8M, False: 1.05M] ------------------ 64| 11.8M| word3_muladd(&w2, &w1, &w0, ws[j], p[p_size + i - j]); 65| 11.8M| } 66| | 67| 1.05M| word3_add(&w2, &w1, &w0, z[p_size + i]); 68| | 69| 1.05M| ws[i] = w0; 70| | 71| 1.05M| w0 = w1; 72| 1.05M| w1 = w2; 73| 1.05M| w2 = 0; 74| 1.05M| } 75| | 76| 76.4k| word3_add(&w2, &w1, &w0, z[2 * p_size - 1]); 77| | 78| 76.4k| ws[p_size - 1] = w0; 79| 76.4k| ws[p_size] = w1; 80| | 81| | /* 82| | * The result might need to be reduced mod p. To avoid a timing 83| | * channel, always perform the subtraction. If in the compution 84| | * of x - p a borrow is required then x was already < p. 85| | * 86| | * x starts at ws[0] and is p_size+1 bytes long. 87| | * x - p starts at z[0] and is also p_size+1 bytes log 88| | * 89| | * If borrow was set then x was already < p and the subtraction 90| | * was not needed. In that case overwrite z[0:p_size] with the 91| | * original x in ws[0:p_size]. 92| | * 93| | * We only copy out p_size in the final step because we know 94| | * the Montgomery result is < P 95| | */ 96| | 97| 76.4k| word borrow = bigint_sub3(z, ws, p_size + 1, p, p_size); 98| | 99| 76.4k| BOTAN_DEBUG_ASSERT(borrow == 0 || borrow == 1); ------------------ | | 99| 76.4k| do { \ | | 100| 76.4k| } while(0) | | ------------------ | | | Branch (100:15): [Folded - Ignored] | | ------------------ ------------------ 100| | 101| 76.4k| CT::conditional_assign_mem(borrow, z, ws, p_size); 102| 76.4k| clear_mem(z + p_size, z_size - p_size); 103| 76.4k|} _ZN5Botan19bigint_monty_redc_4EPmPKmmS0_: 14| 7.69k|void bigint_monty_redc_4(word z[8], const word p[4], word p_dash, word ws[]) { 15| 7.69k| word w2 = 0, w1 = 0, w0 = 0; 16| 7.69k| w0 = z[0]; 17| 7.69k| ws[0] = w0 * p_dash; 18| 7.69k| word3_muladd(&w2, &w1, &w0, ws[0], p[0]); 19| 7.69k| w0 = w1; 20| 7.69k| w1 = w2; 21| 7.69k| w2 = 0; 22| 7.69k| word3_muladd(&w2, &w1, &w0, ws[0], p[1]); 23| 7.69k| word3_add(&w2, &w1, &w0, z[1]); 24| 7.69k| ws[1] = w0 * p_dash; 25| 7.69k| word3_muladd(&w2, &w1, &w0, ws[1], p[0]); 26| 7.69k| w0 = w1; 27| 7.69k| w1 = w2; 28| 7.69k| w2 = 0; 29| 7.69k| word3_muladd(&w2, &w1, &w0, ws[0], p[2]); 30| 7.69k| word3_muladd(&w2, &w1, &w0, ws[1], p[1]); 31| 7.69k| word3_add(&w2, &w1, &w0, z[2]); 32| 7.69k| ws[2] = w0 * p_dash; 33| 7.69k| word3_muladd(&w2, &w1, &w0, ws[2], p[0]); 34| 7.69k| w0 = w1; 35| 7.69k| w1 = w2; 36| 7.69k| w2 = 0; 37| 7.69k| word3_muladd(&w2, &w1, &w0, ws[0], p[3]); 38| 7.69k| word3_muladd(&w2, &w1, &w0, ws[1], p[2]); 39| 7.69k| word3_muladd(&w2, &w1, &w0, ws[2], p[1]); 40| 7.69k| word3_add(&w2, &w1, &w0, z[3]); 41| 7.69k| ws[3] = w0 * p_dash; 42| 7.69k| word3_muladd(&w2, &w1, &w0, ws[3], p[0]); 43| 7.69k| w0 = w1; 44| 7.69k| w1 = w2; 45| 7.69k| w2 = 0; 46| 7.69k| word3_muladd(&w2, &w1, &w0, ws[1], p[3]); 47| 7.69k| word3_muladd(&w2, &w1, &w0, ws[2], p[2]); 48| 7.69k| word3_muladd(&w2, &w1, &w0, ws[3], p[1]); 49| 7.69k| word3_add(&w2, &w1, &w0, z[4]); 50| 7.69k| ws[0] = w0; 51| 7.69k| w0 = w1; 52| 7.69k| w1 = w2; 53| 7.69k| w2 = 0; 54| 7.69k| word3_muladd(&w2, &w1, &w0, ws[2], p[3]); 55| 7.69k| word3_muladd(&w2, &w1, &w0, ws[3], p[2]); 56| 7.69k| word3_add(&w2, &w1, &w0, z[5]); 57| 7.69k| ws[1] = w0; 58| 7.69k| w0 = w1; 59| 7.69k| w1 = w2; 60| 7.69k| w2 = 0; 61| 7.69k| word3_muladd(&w2, &w1, &w0, ws[3], p[3]); 62| 7.69k| word3_add(&w2, &w1, &w0, z[6]); 63| 7.69k| ws[2] = w0; 64| 7.69k| w0 = w1; 65| 7.69k| w1 = w2; 66| 7.69k| w2 = 0; 67| 7.69k| word3_add(&w2, &w1, &w0, z[7]); 68| 7.69k| ws[3] = w0; 69| 7.69k| ws[4] = w1; 70| 7.69k| word borrow = bigint_sub3(z, ws, 4 + 1, p, 4); 71| 7.69k| CT::conditional_assign_mem(borrow, z, ws, 4); 72| 7.69k| clear_mem(z + 4, 4); 73| 7.69k|} _ZN5Botan19bigint_monty_redc_6EPmPKmmS0_: 75| 8.45k|void bigint_monty_redc_6(word z[12], const word p[6], word p_dash, word ws[]) { 76| 8.45k| word w2 = 0, w1 = 0, w0 = 0; 77| 8.45k| w0 = z[0]; 78| 8.45k| ws[0] = w0 * p_dash; 79| 8.45k| word3_muladd(&w2, &w1, &w0, ws[0], p[0]); 80| 8.45k| w0 = w1; 81| 8.45k| w1 = w2; 82| 8.45k| w2 = 0; 83| 8.45k| word3_muladd(&w2, &w1, &w0, ws[0], p[1]); 84| 8.45k| word3_add(&w2, &w1, &w0, z[1]); 85| 8.45k| ws[1] = w0 * p_dash; 86| 8.45k| word3_muladd(&w2, &w1, &w0, ws[1], p[0]); 87| 8.45k| w0 = w1; 88| 8.45k| w1 = w2; 89| 8.45k| w2 = 0; 90| 8.45k| word3_muladd(&w2, &w1, &w0, ws[0], p[2]); 91| 8.45k| word3_muladd(&w2, &w1, &w0, ws[1], p[1]); 92| 8.45k| word3_add(&w2, &w1, &w0, z[2]); 93| 8.45k| ws[2] = w0 * p_dash; 94| 8.45k| word3_muladd(&w2, &w1, &w0, ws[2], p[0]); 95| 8.45k| w0 = w1; 96| 8.45k| w1 = w2; 97| 8.45k| w2 = 0; 98| 8.45k| word3_muladd(&w2, &w1, &w0, ws[0], p[3]); 99| 8.45k| word3_muladd(&w2, &w1, &w0, ws[1], p[2]); 100| 8.45k| word3_muladd(&w2, &w1, &w0, ws[2], p[1]); 101| 8.45k| word3_add(&w2, &w1, &w0, z[3]); 102| 8.45k| ws[3] = w0 * p_dash; 103| 8.45k| word3_muladd(&w2, &w1, &w0, ws[3], p[0]); 104| 8.45k| w0 = w1; 105| 8.45k| w1 = w2; 106| 8.45k| w2 = 0; 107| 8.45k| word3_muladd(&w2, &w1, &w0, ws[0], p[4]); 108| 8.45k| word3_muladd(&w2, &w1, &w0, ws[1], p[3]); 109| 8.45k| word3_muladd(&w2, &w1, &w0, ws[2], p[2]); 110| 8.45k| word3_muladd(&w2, &w1, &w0, ws[3], p[1]); 111| 8.45k| word3_add(&w2, &w1, &w0, z[4]); 112| 8.45k| ws[4] = w0 * p_dash; 113| 8.45k| word3_muladd(&w2, &w1, &w0, ws[4], p[0]); 114| 8.45k| w0 = w1; 115| 8.45k| w1 = w2; 116| 8.45k| w2 = 0; 117| 8.45k| word3_muladd(&w2, &w1, &w0, ws[0], p[5]); 118| 8.45k| word3_muladd(&w2, &w1, &w0, ws[1], p[4]); 119| 8.45k| word3_muladd(&w2, &w1, &w0, ws[2], p[3]); 120| 8.45k| word3_muladd(&w2, &w1, &w0, ws[3], p[2]); 121| 8.45k| word3_muladd(&w2, &w1, &w0, ws[4], p[1]); 122| 8.45k| word3_add(&w2, &w1, &w0, z[5]); 123| 8.45k| ws[5] = w0 * p_dash; 124| 8.45k| word3_muladd(&w2, &w1, &w0, ws[5], p[0]); 125| 8.45k| w0 = w1; 126| 8.45k| w1 = w2; 127| 8.45k| w2 = 0; 128| 8.45k| word3_muladd(&w2, &w1, &w0, ws[1], p[5]); 129| 8.45k| word3_muladd(&w2, &w1, &w0, ws[2], p[4]); 130| 8.45k| word3_muladd(&w2, &w1, &w0, ws[3], p[3]); 131| 8.45k| word3_muladd(&w2, &w1, &w0, ws[4], p[2]); 132| 8.45k| word3_muladd(&w2, &w1, &w0, ws[5], p[1]); 133| 8.45k| word3_add(&w2, &w1, &w0, z[6]); 134| 8.45k| ws[0] = w0; 135| 8.45k| w0 = w1; 136| 8.45k| w1 = w2; 137| 8.45k| w2 = 0; 138| 8.45k| word3_muladd(&w2, &w1, &w0, ws[2], p[5]); 139| 8.45k| word3_muladd(&w2, &w1, &w0, ws[3], p[4]); 140| 8.45k| word3_muladd(&w2, &w1, &w0, ws[4], p[3]); 141| 8.45k| word3_muladd(&w2, &w1, &w0, ws[5], p[2]); 142| 8.45k| word3_add(&w2, &w1, &w0, z[7]); 143| 8.45k| ws[1] = w0; 144| 8.45k| w0 = w1; 145| 8.45k| w1 = w2; 146| 8.45k| w2 = 0; 147| 8.45k| word3_muladd(&w2, &w1, &w0, ws[3], p[5]); 148| 8.45k| word3_muladd(&w2, &w1, &w0, ws[4], p[4]); 149| 8.45k| word3_muladd(&w2, &w1, &w0, ws[5], p[3]); 150| 8.45k| word3_add(&w2, &w1, &w0, z[8]); 151| 8.45k| ws[2] = w0; 152| 8.45k| w0 = w1; 153| 8.45k| w1 = w2; 154| 8.45k| w2 = 0; 155| 8.45k| word3_muladd(&w2, &w1, &w0, ws[4], p[5]); 156| 8.45k| word3_muladd(&w2, &w1, &w0, ws[5], p[4]); 157| 8.45k| word3_add(&w2, &w1, &w0, z[9]); 158| 8.45k| ws[3] = w0; 159| 8.45k| w0 = w1; 160| 8.45k| w1 = w2; 161| 8.45k| w2 = 0; 162| 8.45k| word3_muladd(&w2, &w1, &w0, ws[5], p[5]); 163| 8.45k| word3_add(&w2, &w1, &w0, z[10]); 164| 8.45k| ws[4] = w0; 165| 8.45k| w0 = w1; 166| 8.45k| w1 = w2; 167| 8.45k| w2 = 0; 168| 8.45k| word3_add(&w2, &w1, &w0, z[11]); 169| 8.45k| ws[5] = w0; 170| 8.45k| ws[6] = w1; 171| 8.45k| word borrow = bigint_sub3(z, ws, 6 + 1, p, 6); 172| 8.45k| CT::conditional_assign_mem(borrow, z, ws, 6); 173| 8.45k| clear_mem(z + 6, 6); 174| 8.45k|} _ZN5Botan19bigint_monty_redc_8EPmPKmmS0_: 176| 9.25k|void bigint_monty_redc_8(word z[16], const word p[8], word p_dash, word ws[]) { 177| 9.25k| word w2 = 0, w1 = 0, w0 = 0; 178| 9.25k| w0 = z[0]; 179| 9.25k| ws[0] = w0 * p_dash; 180| 9.25k| word3_muladd(&w2, &w1, &w0, ws[0], p[0]); 181| 9.25k| w0 = w1; 182| 9.25k| w1 = w2; 183| 9.25k| w2 = 0; 184| 9.25k| word3_muladd(&w2, &w1, &w0, ws[0], p[1]); 185| 9.25k| word3_add(&w2, &w1, &w0, z[1]); 186| 9.25k| ws[1] = w0 * p_dash; 187| 9.25k| word3_muladd(&w2, &w1, &w0, ws[1], p[0]); 188| 9.25k| w0 = w1; 189| 9.25k| w1 = w2; 190| 9.25k| w2 = 0; 191| 9.25k| word3_muladd(&w2, &w1, &w0, ws[0], p[2]); 192| 9.25k| word3_muladd(&w2, &w1, &w0, ws[1], p[1]); 193| 9.25k| word3_add(&w2, &w1, &w0, z[2]); 194| 9.25k| ws[2] = w0 * p_dash; 195| 9.25k| word3_muladd(&w2, &w1, &w0, ws[2], p[0]); 196| 9.25k| w0 = w1; 197| 9.25k| w1 = w2; 198| 9.25k| w2 = 0; 199| 9.25k| word3_muladd(&w2, &w1, &w0, ws[0], p[3]); 200| 9.25k| word3_muladd(&w2, &w1, &w0, ws[1], p[2]); 201| 9.25k| word3_muladd(&w2, &w1, &w0, ws[2], p[1]); 202| 9.25k| word3_add(&w2, &w1, &w0, z[3]); 203| 9.25k| ws[3] = w0 * p_dash; 204| 9.25k| word3_muladd(&w2, &w1, &w0, ws[3], p[0]); 205| 9.25k| w0 = w1; 206| 9.25k| w1 = w2; 207| 9.25k| w2 = 0; 208| 9.25k| word3_muladd(&w2, &w1, &w0, ws[0], p[4]); 209| 9.25k| word3_muladd(&w2, &w1, &w0, ws[1], p[3]); 210| 9.25k| word3_muladd(&w2, &w1, &w0, ws[2], p[2]); 211| 9.25k| word3_muladd(&w2, &w1, &w0, ws[3], p[1]); 212| 9.25k| word3_add(&w2, &w1, &w0, z[4]); 213| 9.25k| ws[4] = w0 * p_dash; 214| 9.25k| word3_muladd(&w2, &w1, &w0, ws[4], p[0]); 215| 9.25k| w0 = w1; 216| 9.25k| w1 = w2; 217| 9.25k| w2 = 0; 218| 9.25k| word3_muladd(&w2, &w1, &w0, ws[0], p[5]); 219| 9.25k| word3_muladd(&w2, &w1, &w0, ws[1], p[4]); 220| 9.25k| word3_muladd(&w2, &w1, &w0, ws[2], p[3]); 221| 9.25k| word3_muladd(&w2, &w1, &w0, ws[3], p[2]); 222| 9.25k| word3_muladd(&w2, &w1, &w0, ws[4], p[1]); 223| 9.25k| word3_add(&w2, &w1, &w0, z[5]); 224| 9.25k| ws[5] = w0 * p_dash; 225| 9.25k| word3_muladd(&w2, &w1, &w0, ws[5], p[0]); 226| 9.25k| w0 = w1; 227| 9.25k| w1 = w2; 228| 9.25k| w2 = 0; 229| 9.25k| word3_muladd(&w2, &w1, &w0, ws[0], p[6]); 230| 9.25k| word3_muladd(&w2, &w1, &w0, ws[1], p[5]); 231| 9.25k| word3_muladd(&w2, &w1, &w0, ws[2], p[4]); 232| 9.25k| word3_muladd(&w2, &w1, &w0, ws[3], p[3]); 233| 9.25k| word3_muladd(&w2, &w1, &w0, ws[4], p[2]); 234| 9.25k| word3_muladd(&w2, &w1, &w0, ws[5], p[1]); 235| 9.25k| word3_add(&w2, &w1, &w0, z[6]); 236| 9.25k| ws[6] = w0 * p_dash; 237| 9.25k| word3_muladd(&w2, &w1, &w0, ws[6], p[0]); 238| 9.25k| w0 = w1; 239| 9.25k| w1 = w2; 240| 9.25k| w2 = 0; 241| 9.25k| word3_muladd(&w2, &w1, &w0, ws[0], p[7]); 242| 9.25k| word3_muladd(&w2, &w1, &w0, ws[1], p[6]); 243| 9.25k| word3_muladd(&w2, &w1, &w0, ws[2], p[5]); 244| 9.25k| word3_muladd(&w2, &w1, &w0, ws[3], p[4]); 245| 9.25k| word3_muladd(&w2, &w1, &w0, ws[4], p[3]); 246| 9.25k| word3_muladd(&w2, &w1, &w0, ws[5], p[2]); 247| 9.25k| word3_muladd(&w2, &w1, &w0, ws[6], p[1]); 248| 9.25k| word3_add(&w2, &w1, &w0, z[7]); 249| 9.25k| ws[7] = w0 * p_dash; 250| 9.25k| word3_muladd(&w2, &w1, &w0, ws[7], p[0]); 251| 9.25k| w0 = w1; 252| 9.25k| w1 = w2; 253| 9.25k| w2 = 0; 254| 9.25k| word3_muladd(&w2, &w1, &w0, ws[1], p[7]); 255| 9.25k| word3_muladd(&w2, &w1, &w0, ws[2], p[6]); 256| 9.25k| word3_muladd(&w2, &w1, &w0, ws[3], p[5]); 257| 9.25k| word3_muladd(&w2, &w1, &w0, ws[4], p[4]); 258| 9.25k| word3_muladd(&w2, &w1, &w0, ws[5], p[3]); 259| 9.25k| word3_muladd(&w2, &w1, &w0, ws[6], p[2]); 260| 9.25k| word3_muladd(&w2, &w1, &w0, ws[7], p[1]); 261| 9.25k| word3_add(&w2, &w1, &w0, z[8]); 262| 9.25k| ws[0] = w0; 263| 9.25k| w0 = w1; 264| 9.25k| w1 = w2; 265| 9.25k| w2 = 0; 266| 9.25k| word3_muladd(&w2, &w1, &w0, ws[2], p[7]); 267| 9.25k| word3_muladd(&w2, &w1, &w0, ws[3], p[6]); 268| 9.25k| word3_muladd(&w2, &w1, &w0, ws[4], p[5]); 269| 9.25k| word3_muladd(&w2, &w1, &w0, ws[5], p[4]); 270| 9.25k| word3_muladd(&w2, &w1, &w0, ws[6], p[3]); 271| 9.25k| word3_muladd(&w2, &w1, &w0, ws[7], p[2]); 272| 9.25k| word3_add(&w2, &w1, &w0, z[9]); 273| 9.25k| ws[1] = w0; 274| 9.25k| w0 = w1; 275| 9.25k| w1 = w2; 276| 9.25k| w2 = 0; 277| 9.25k| word3_muladd(&w2, &w1, &w0, ws[3], p[7]); 278| 9.25k| word3_muladd(&w2, &w1, &w0, ws[4], p[6]); 279| 9.25k| word3_muladd(&w2, &w1, &w0, ws[5], p[5]); 280| 9.25k| word3_muladd(&w2, &w1, &w0, ws[6], p[4]); 281| 9.25k| word3_muladd(&w2, &w1, &w0, ws[7], p[3]); 282| 9.25k| word3_add(&w2, &w1, &w0, z[10]); 283| 9.25k| ws[2] = w0; 284| 9.25k| w0 = w1; 285| 9.25k| w1 = w2; 286| 9.25k| w2 = 0; 287| 9.25k| word3_muladd(&w2, &w1, &w0, ws[4], p[7]); 288| 9.25k| word3_muladd(&w2, &w1, &w0, ws[5], p[6]); 289| 9.25k| word3_muladd(&w2, &w1, &w0, ws[6], p[5]); 290| 9.25k| word3_muladd(&w2, &w1, &w0, ws[7], p[4]); 291| 9.25k| word3_add(&w2, &w1, &w0, z[11]); 292| 9.25k| ws[3] = w0; 293| 9.25k| w0 = w1; 294| 9.25k| w1 = w2; 295| 9.25k| w2 = 0; 296| 9.25k| word3_muladd(&w2, &w1, &w0, ws[5], p[7]); 297| 9.25k| word3_muladd(&w2, &w1, &w0, ws[6], p[6]); 298| 9.25k| word3_muladd(&w2, &w1, &w0, ws[7], p[5]); 299| 9.25k| word3_add(&w2, &w1, &w0, z[12]); 300| 9.25k| ws[4] = w0; 301| 9.25k| w0 = w1; 302| 9.25k| w1 = w2; 303| 9.25k| w2 = 0; 304| 9.25k| word3_muladd(&w2, &w1, &w0, ws[6], p[7]); 305| 9.25k| word3_muladd(&w2, &w1, &w0, ws[7], p[6]); 306| 9.25k| word3_add(&w2, &w1, &w0, z[13]); 307| 9.25k| ws[5] = w0; 308| 9.25k| w0 = w1; 309| 9.25k| w1 = w2; 310| 9.25k| w2 = 0; 311| 9.25k| word3_muladd(&w2, &w1, &w0, ws[7], p[7]); 312| 9.25k| word3_add(&w2, &w1, &w0, z[14]); 313| 9.25k| ws[6] = w0; 314| 9.25k| w0 = w1; 315| 9.25k| w1 = w2; 316| 9.25k| w2 = 0; 317| 9.25k| word3_add(&w2, &w1, &w0, z[15]); 318| 9.25k| ws[7] = w0; 319| 9.25k| ws[8] = w1; 320| 9.25k| word borrow = bigint_sub3(z, ws, 8 + 1, p, 8); 321| 9.25k| CT::conditional_assign_mem(borrow, z, ws, 8); 322| 9.25k| clear_mem(z + 8, 8); 323| 9.25k|} _ZN5Botan20bigint_monty_redc_16EPmPKmmS0_: 325| 34.5k|void bigint_monty_redc_16(word z[32], const word p[16], word p_dash, word ws[]) { 326| 34.5k| word w2 = 0, w1 = 0, w0 = 0; 327| 34.5k| w0 = z[0]; 328| 34.5k| ws[0] = w0 * p_dash; 329| 34.5k| word3_muladd(&w2, &w1, &w0, ws[0], p[0]); 330| 34.5k| w0 = w1; 331| 34.5k| w1 = w2; 332| 34.5k| w2 = 0; 333| 34.5k| word3_muladd(&w2, &w1, &w0, ws[0], p[1]); 334| 34.5k| word3_add(&w2, &w1, &w0, z[1]); 335| 34.5k| ws[1] = w0 * p_dash; 336| 34.5k| word3_muladd(&w2, &w1, &w0, ws[1], p[0]); 337| 34.5k| w0 = w1; 338| 34.5k| w1 = w2; 339| 34.5k| w2 = 0; 340| 34.5k| word3_muladd(&w2, &w1, &w0, ws[0], p[2]); 341| 34.5k| word3_muladd(&w2, &w1, &w0, ws[1], p[1]); 342| 34.5k| word3_add(&w2, &w1, &w0, z[2]); 343| 34.5k| ws[2] = w0 * p_dash; 344| 34.5k| word3_muladd(&w2, &w1, &w0, ws[2], p[0]); 345| 34.5k| w0 = w1; 346| 34.5k| w1 = w2; 347| 34.5k| w2 = 0; 348| 34.5k| word3_muladd(&w2, &w1, &w0, ws[0], p[3]); 349| 34.5k| word3_muladd(&w2, &w1, &w0, ws[1], p[2]); 350| 34.5k| word3_muladd(&w2, &w1, &w0, ws[2], p[1]); 351| 34.5k| word3_add(&w2, &w1, &w0, z[3]); 352| 34.5k| ws[3] = w0 * p_dash; 353| 34.5k| word3_muladd(&w2, &w1, &w0, ws[3], p[0]); 354| 34.5k| w0 = w1; 355| 34.5k| w1 = w2; 356| 34.5k| w2 = 0; 357| 34.5k| word3_muladd(&w2, &w1, &w0, ws[0], p[4]); 358| 34.5k| word3_muladd(&w2, &w1, &w0, ws[1], p[3]); 359| 34.5k| word3_muladd(&w2, &w1, &w0, ws[2], p[2]); 360| 34.5k| word3_muladd(&w2, &w1, &w0, ws[3], p[1]); 361| 34.5k| word3_add(&w2, &w1, &w0, z[4]); 362| 34.5k| ws[4] = w0 * p_dash; 363| 34.5k| word3_muladd(&w2, &w1, &w0, ws[4], p[0]); 364| 34.5k| w0 = w1; 365| 34.5k| w1 = w2; 366| 34.5k| w2 = 0; 367| 34.5k| word3_muladd(&w2, &w1, &w0, ws[0], p[5]); 368| 34.5k| word3_muladd(&w2, &w1, &w0, ws[1], p[4]); 369| 34.5k| word3_muladd(&w2, &w1, &w0, ws[2], p[3]); 370| 34.5k| word3_muladd(&w2, &w1, &w0, ws[3], p[2]); 371| 34.5k| word3_muladd(&w2, &w1, &w0, ws[4], p[1]); 372| 34.5k| word3_add(&w2, &w1, &w0, z[5]); 373| 34.5k| ws[5] = w0 * p_dash; 374| 34.5k| word3_muladd(&w2, &w1, &w0, ws[5], p[0]); 375| 34.5k| w0 = w1; 376| 34.5k| w1 = w2; 377| 34.5k| w2 = 0; 378| 34.5k| word3_muladd(&w2, &w1, &w0, ws[0], p[6]); 379| 34.5k| word3_muladd(&w2, &w1, &w0, ws[1], p[5]); 380| 34.5k| word3_muladd(&w2, &w1, &w0, ws[2], p[4]); 381| 34.5k| word3_muladd(&w2, &w1, &w0, ws[3], p[3]); 382| 34.5k| word3_muladd(&w2, &w1, &w0, ws[4], p[2]); 383| 34.5k| word3_muladd(&w2, &w1, &w0, ws[5], p[1]); 384| 34.5k| word3_add(&w2, &w1, &w0, z[6]); 385| 34.5k| ws[6] = w0 * p_dash; 386| 34.5k| word3_muladd(&w2, &w1, &w0, ws[6], p[0]); 387| 34.5k| w0 = w1; 388| 34.5k| w1 = w2; 389| 34.5k| w2 = 0; 390| 34.5k| word3_muladd(&w2, &w1, &w0, ws[0], p[7]); 391| 34.5k| word3_muladd(&w2, &w1, &w0, ws[1], p[6]); 392| 34.5k| word3_muladd(&w2, &w1, &w0, ws[2], p[5]); 393| 34.5k| word3_muladd(&w2, &w1, &w0, ws[3], p[4]); 394| 34.5k| word3_muladd(&w2, &w1, &w0, ws[4], p[3]); 395| 34.5k| word3_muladd(&w2, &w1, &w0, ws[5], p[2]); 396| 34.5k| word3_muladd(&w2, &w1, &w0, ws[6], p[1]); 397| 34.5k| word3_add(&w2, &w1, &w0, z[7]); 398| 34.5k| ws[7] = w0 * p_dash; 399| 34.5k| word3_muladd(&w2, &w1, &w0, ws[7], p[0]); 400| 34.5k| w0 = w1; 401| 34.5k| w1 = w2; 402| 34.5k| w2 = 0; 403| 34.5k| word3_muladd(&w2, &w1, &w0, ws[0], p[8]); 404| 34.5k| word3_muladd(&w2, &w1, &w0, ws[1], p[7]); 405| 34.5k| word3_muladd(&w2, &w1, &w0, ws[2], p[6]); 406| 34.5k| word3_muladd(&w2, &w1, &w0, ws[3], p[5]); 407| 34.5k| word3_muladd(&w2, &w1, &w0, ws[4], p[4]); 408| 34.5k| word3_muladd(&w2, &w1, &w0, ws[5], p[3]); 409| 34.5k| word3_muladd(&w2, &w1, &w0, ws[6], p[2]); 410| 34.5k| word3_muladd(&w2, &w1, &w0, ws[7], p[1]); 411| 34.5k| word3_add(&w2, &w1, &w0, z[8]); 412| 34.5k| ws[8] = w0 * p_dash; 413| 34.5k| word3_muladd(&w2, &w1, &w0, ws[8], p[0]); 414| 34.5k| w0 = w1; 415| 34.5k| w1 = w2; 416| 34.5k| w2 = 0; 417| 34.5k| word3_muladd(&w2, &w1, &w0, ws[0], p[9]); 418| 34.5k| word3_muladd(&w2, &w1, &w0, ws[1], p[8]); 419| 34.5k| word3_muladd(&w2, &w1, &w0, ws[2], p[7]); 420| 34.5k| word3_muladd(&w2, &w1, &w0, ws[3], p[6]); 421| 34.5k| word3_muladd(&w2, &w1, &w0, ws[4], p[5]); 422| 34.5k| word3_muladd(&w2, &w1, &w0, ws[5], p[4]); 423| 34.5k| word3_muladd(&w2, &w1, &w0, ws[6], p[3]); 424| 34.5k| word3_muladd(&w2, &w1, &w0, ws[7], p[2]); 425| 34.5k| word3_muladd(&w2, &w1, &w0, ws[8], p[1]); 426| 34.5k| word3_add(&w2, &w1, &w0, z[9]); 427| 34.5k| ws[9] = w0 * p_dash; 428| 34.5k| word3_muladd(&w2, &w1, &w0, ws[9], p[0]); 429| 34.5k| w0 = w1; 430| 34.5k| w1 = w2; 431| 34.5k| w2 = 0; 432| 34.5k| word3_muladd(&w2, &w1, &w0, ws[0], p[10]); 433| 34.5k| word3_muladd(&w2, &w1, &w0, ws[1], p[9]); 434| 34.5k| word3_muladd(&w2, &w1, &w0, ws[2], p[8]); 435| 34.5k| word3_muladd(&w2, &w1, &w0, ws[3], p[7]); 436| 34.5k| word3_muladd(&w2, &w1, &w0, ws[4], p[6]); 437| 34.5k| word3_muladd(&w2, &w1, &w0, ws[5], p[5]); 438| 34.5k| word3_muladd(&w2, &w1, &w0, ws[6], p[4]); 439| 34.5k| word3_muladd(&w2, &w1, &w0, ws[7], p[3]); 440| 34.5k| word3_muladd(&w2, &w1, &w0, ws[8], p[2]); 441| 34.5k| word3_muladd(&w2, &w1, &w0, ws[9], p[1]); 442| 34.5k| word3_add(&w2, &w1, &w0, z[10]); 443| 34.5k| ws[10] = w0 * p_dash; 444| 34.5k| word3_muladd(&w2, &w1, &w0, ws[10], p[0]); 445| 34.5k| w0 = w1; 446| 34.5k| w1 = w2; 447| 34.5k| w2 = 0; 448| 34.5k| word3_muladd(&w2, &w1, &w0, ws[0], p[11]); 449| 34.5k| word3_muladd(&w2, &w1, &w0, ws[1], p[10]); 450| 34.5k| word3_muladd(&w2, &w1, &w0, ws[2], p[9]); 451| 34.5k| word3_muladd(&w2, &w1, &w0, ws[3], p[8]); 452| 34.5k| word3_muladd(&w2, &w1, &w0, ws[4], p[7]); 453| 34.5k| word3_muladd(&w2, &w1, &w0, ws[5], p[6]); 454| 34.5k| word3_muladd(&w2, &w1, &w0, ws[6], p[5]); 455| 34.5k| word3_muladd(&w2, &w1, &w0, ws[7], p[4]); 456| 34.5k| word3_muladd(&w2, &w1, &w0, ws[8], p[3]); 457| 34.5k| word3_muladd(&w2, &w1, &w0, ws[9], p[2]); 458| 34.5k| word3_muladd(&w2, &w1, &w0, ws[10], p[1]); 459| 34.5k| word3_add(&w2, &w1, &w0, z[11]); 460| 34.5k| ws[11] = w0 * p_dash; 461| 34.5k| word3_muladd(&w2, &w1, &w0, ws[11], p[0]); 462| 34.5k| w0 = w1; 463| 34.5k| w1 = w2; 464| 34.5k| w2 = 0; 465| 34.5k| word3_muladd(&w2, &w1, &w0, ws[0], p[12]); 466| 34.5k| word3_muladd(&w2, &w1, &w0, ws[1], p[11]); 467| 34.5k| word3_muladd(&w2, &w1, &w0, ws[2], p[10]); 468| 34.5k| word3_muladd(&w2, &w1, &w0, ws[3], p[9]); 469| 34.5k| word3_muladd(&w2, &w1, &w0, ws[4], p[8]); 470| 34.5k| word3_muladd(&w2, &w1, &w0, ws[5], p[7]); 471| 34.5k| word3_muladd(&w2, &w1, &w0, ws[6], p[6]); 472| 34.5k| word3_muladd(&w2, &w1, &w0, ws[7], p[5]); 473| 34.5k| word3_muladd(&w2, &w1, &w0, ws[8], p[4]); 474| 34.5k| word3_muladd(&w2, &w1, &w0, ws[9], p[3]); 475| 34.5k| word3_muladd(&w2, &w1, &w0, ws[10], p[2]); 476| 34.5k| word3_muladd(&w2, &w1, &w0, ws[11], p[1]); 477| 34.5k| word3_add(&w2, &w1, &w0, z[12]); 478| 34.5k| ws[12] = w0 * p_dash; 479| 34.5k| word3_muladd(&w2, &w1, &w0, ws[12], p[0]); 480| 34.5k| w0 = w1; 481| 34.5k| w1 = w2; 482| 34.5k| w2 = 0; 483| 34.5k| word3_muladd(&w2, &w1, &w0, ws[0], p[13]); 484| 34.5k| word3_muladd(&w2, &w1, &w0, ws[1], p[12]); 485| 34.5k| word3_muladd(&w2, &w1, &w0, ws[2], p[11]); 486| 34.5k| word3_muladd(&w2, &w1, &w0, ws[3], p[10]); 487| 34.5k| word3_muladd(&w2, &w1, &w0, ws[4], p[9]); 488| 34.5k| word3_muladd(&w2, &w1, &w0, ws[5], p[8]); 489| 34.5k| word3_muladd(&w2, &w1, &w0, ws[6], p[7]); 490| 34.5k| word3_muladd(&w2, &w1, &w0, ws[7], p[6]); 491| 34.5k| word3_muladd(&w2, &w1, &w0, ws[8], p[5]); 492| 34.5k| word3_muladd(&w2, &w1, &w0, ws[9], p[4]); 493| 34.5k| word3_muladd(&w2, &w1, &w0, ws[10], p[3]); 494| 34.5k| word3_muladd(&w2, &w1, &w0, ws[11], p[2]); 495| 34.5k| word3_muladd(&w2, &w1, &w0, ws[12], p[1]); 496| 34.5k| word3_add(&w2, &w1, &w0, z[13]); 497| 34.5k| ws[13] = w0 * p_dash; 498| 34.5k| word3_muladd(&w2, &w1, &w0, ws[13], p[0]); 499| 34.5k| w0 = w1; 500| 34.5k| w1 = w2; 501| 34.5k| w2 = 0; 502| 34.5k| word3_muladd(&w2, &w1, &w0, ws[0], p[14]); 503| 34.5k| word3_muladd(&w2, &w1, &w0, ws[1], p[13]); 504| 34.5k| word3_muladd(&w2, &w1, &w0, ws[2], p[12]); 505| 34.5k| word3_muladd(&w2, &w1, &w0, ws[3], p[11]); 506| 34.5k| word3_muladd(&w2, &w1, &w0, ws[4], p[10]); 507| 34.5k| word3_muladd(&w2, &w1, &w0, ws[5], p[9]); 508| 34.5k| word3_muladd(&w2, &w1, &w0, ws[6], p[8]); 509| 34.5k| word3_muladd(&w2, &w1, &w0, ws[7], p[7]); 510| 34.5k| word3_muladd(&w2, &w1, &w0, ws[8], p[6]); 511| 34.5k| word3_muladd(&w2, &w1, &w0, ws[9], p[5]); 512| 34.5k| word3_muladd(&w2, &w1, &w0, ws[10], p[4]); 513| 34.5k| word3_muladd(&w2, &w1, &w0, ws[11], p[3]); 514| 34.5k| word3_muladd(&w2, &w1, &w0, ws[12], p[2]); 515| 34.5k| word3_muladd(&w2, &w1, &w0, ws[13], p[1]); 516| 34.5k| word3_add(&w2, &w1, &w0, z[14]); 517| 34.5k| ws[14] = w0 * p_dash; 518| 34.5k| word3_muladd(&w2, &w1, &w0, ws[14], p[0]); 519| 34.5k| w0 = w1; 520| 34.5k| w1 = w2; 521| 34.5k| w2 = 0; 522| 34.5k| word3_muladd(&w2, &w1, &w0, ws[0], p[15]); 523| 34.5k| word3_muladd(&w2, &w1, &w0, ws[1], p[14]); 524| 34.5k| word3_muladd(&w2, &w1, &w0, ws[2], p[13]); 525| 34.5k| word3_muladd(&w2, &w1, &w0, ws[3], p[12]); 526| 34.5k| word3_muladd(&w2, &w1, &w0, ws[4], p[11]); 527| 34.5k| word3_muladd(&w2, &w1, &w0, ws[5], p[10]); 528| 34.5k| word3_muladd(&w2, &w1, &w0, ws[6], p[9]); 529| 34.5k| word3_muladd(&w2, &w1, &w0, ws[7], p[8]); 530| 34.5k| word3_muladd(&w2, &w1, &w0, ws[8], p[7]); 531| 34.5k| word3_muladd(&w2, &w1, &w0, ws[9], p[6]); 532| 34.5k| word3_muladd(&w2, &w1, &w0, ws[10], p[5]); 533| 34.5k| word3_muladd(&w2, &w1, &w0, ws[11], p[4]); 534| 34.5k| word3_muladd(&w2, &w1, &w0, ws[12], p[3]); 535| 34.5k| word3_muladd(&w2, &w1, &w0, ws[13], p[2]); 536| 34.5k| word3_muladd(&w2, &w1, &w0, ws[14], p[1]); 537| 34.5k| word3_add(&w2, &w1, &w0, z[15]); 538| 34.5k| ws[15] = w0 * p_dash; 539| 34.5k| word3_muladd(&w2, &w1, &w0, ws[15], p[0]); 540| 34.5k| w0 = w1; 541| 34.5k| w1 = w2; 542| 34.5k| w2 = 0; 543| 34.5k| word3_muladd(&w2, &w1, &w0, ws[1], p[15]); 544| 34.5k| word3_muladd(&w2, &w1, &w0, ws[2], p[14]); 545| 34.5k| word3_muladd(&w2, &w1, &w0, ws[3], p[13]); 546| 34.5k| word3_muladd(&w2, &w1, &w0, ws[4], p[12]); 547| 34.5k| word3_muladd(&w2, &w1, &w0, ws[5], p[11]); 548| 34.5k| word3_muladd(&w2, &w1, &w0, ws[6], p[10]); 549| 34.5k| word3_muladd(&w2, &w1, &w0, ws[7], p[9]); 550| 34.5k| word3_muladd(&w2, &w1, &w0, ws[8], p[8]); 551| 34.5k| word3_muladd(&w2, &w1, &w0, ws[9], p[7]); 552| 34.5k| word3_muladd(&w2, &w1, &w0, ws[10], p[6]); 553| 34.5k| word3_muladd(&w2, &w1, &w0, ws[11], p[5]); 554| 34.5k| word3_muladd(&w2, &w1, &w0, ws[12], p[4]); 555| 34.5k| word3_muladd(&w2, &w1, &w0, ws[13], p[3]); 556| 34.5k| word3_muladd(&w2, &w1, &w0, ws[14], p[2]); 557| 34.5k| word3_muladd(&w2, &w1, &w0, ws[15], p[1]); 558| 34.5k| word3_add(&w2, &w1, &w0, z[16]); 559| 34.5k| ws[0] = w0; 560| 34.5k| w0 = w1; 561| 34.5k| w1 = w2; 562| 34.5k| w2 = 0; 563| 34.5k| word3_muladd(&w2, &w1, &w0, ws[2], p[15]); 564| 34.5k| word3_muladd(&w2, &w1, &w0, ws[3], p[14]); 565| 34.5k| word3_muladd(&w2, &w1, &w0, ws[4], p[13]); 566| 34.5k| word3_muladd(&w2, &w1, &w0, ws[5], p[12]); 567| 34.5k| word3_muladd(&w2, &w1, &w0, ws[6], p[11]); 568| 34.5k| word3_muladd(&w2, &w1, &w0, ws[7], p[10]); 569| 34.5k| word3_muladd(&w2, &w1, &w0, ws[8], p[9]); 570| 34.5k| word3_muladd(&w2, &w1, &w0, ws[9], p[8]); 571| 34.5k| word3_muladd(&w2, &w1, &w0, ws[10], p[7]); 572| 34.5k| word3_muladd(&w2, &w1, &w0, ws[11], p[6]); 573| 34.5k| word3_muladd(&w2, &w1, &w0, ws[12], p[5]); 574| 34.5k| word3_muladd(&w2, &w1, &w0, ws[13], p[4]); 575| 34.5k| word3_muladd(&w2, &w1, &w0, ws[14], p[3]); 576| 34.5k| word3_muladd(&w2, &w1, &w0, ws[15], p[2]); 577| 34.5k| word3_add(&w2, &w1, &w0, z[17]); 578| 34.5k| ws[1] = w0; 579| 34.5k| w0 = w1; 580| 34.5k| w1 = w2; 581| 34.5k| w2 = 0; 582| 34.5k| word3_muladd(&w2, &w1, &w0, ws[3], p[15]); 583| 34.5k| word3_muladd(&w2, &w1, &w0, ws[4], p[14]); 584| 34.5k| word3_muladd(&w2, &w1, &w0, ws[5], p[13]); 585| 34.5k| word3_muladd(&w2, &w1, &w0, ws[6], p[12]); 586| 34.5k| word3_muladd(&w2, &w1, &w0, ws[7], p[11]); 587| 34.5k| word3_muladd(&w2, &w1, &w0, ws[8], p[10]); 588| 34.5k| word3_muladd(&w2, &w1, &w0, ws[9], p[9]); 589| 34.5k| word3_muladd(&w2, &w1, &w0, ws[10], p[8]); 590| 34.5k| word3_muladd(&w2, &w1, &w0, ws[11], p[7]); 591| 34.5k| word3_muladd(&w2, &w1, &w0, ws[12], p[6]); 592| 34.5k| word3_muladd(&w2, &w1, &w0, ws[13], p[5]); 593| 34.5k| word3_muladd(&w2, &w1, &w0, ws[14], p[4]); 594| 34.5k| word3_muladd(&w2, &w1, &w0, ws[15], p[3]); 595| 34.5k| word3_add(&w2, &w1, &w0, z[18]); 596| 34.5k| ws[2] = w0; 597| 34.5k| w0 = w1; 598| 34.5k| w1 = w2; 599| 34.5k| w2 = 0; 600| 34.5k| word3_muladd(&w2, &w1, &w0, ws[4], p[15]); 601| 34.5k| word3_muladd(&w2, &w1, &w0, ws[5], p[14]); 602| 34.5k| word3_muladd(&w2, &w1, &w0, ws[6], p[13]); 603| 34.5k| word3_muladd(&w2, &w1, &w0, ws[7], p[12]); 604| 34.5k| word3_muladd(&w2, &w1, &w0, ws[8], p[11]); 605| 34.5k| word3_muladd(&w2, &w1, &w0, ws[9], p[10]); 606| 34.5k| word3_muladd(&w2, &w1, &w0, ws[10], p[9]); 607| 34.5k| word3_muladd(&w2, &w1, &w0, ws[11], p[8]); 608| 34.5k| word3_muladd(&w2, &w1, &w0, ws[12], p[7]); 609| 34.5k| word3_muladd(&w2, &w1, &w0, ws[13], p[6]); 610| 34.5k| word3_muladd(&w2, &w1, &w0, ws[14], p[5]); 611| 34.5k| word3_muladd(&w2, &w1, &w0, ws[15], p[4]); 612| 34.5k| word3_add(&w2, &w1, &w0, z[19]); 613| 34.5k| ws[3] = w0; 614| 34.5k| w0 = w1; 615| 34.5k| w1 = w2; 616| 34.5k| w2 = 0; 617| 34.5k| word3_muladd(&w2, &w1, &w0, ws[5], p[15]); 618| 34.5k| word3_muladd(&w2, &w1, &w0, ws[6], p[14]); 619| 34.5k| word3_muladd(&w2, &w1, &w0, ws[7], p[13]); 620| 34.5k| word3_muladd(&w2, &w1, &w0, ws[8], p[12]); 621| 34.5k| word3_muladd(&w2, &w1, &w0, ws[9], p[11]); 622| 34.5k| word3_muladd(&w2, &w1, &w0, ws[10], p[10]); 623| 34.5k| word3_muladd(&w2, &w1, &w0, ws[11], p[9]); 624| 34.5k| word3_muladd(&w2, &w1, &w0, ws[12], p[8]); 625| 34.5k| word3_muladd(&w2, &w1, &w0, ws[13], p[7]); 626| 34.5k| word3_muladd(&w2, &w1, &w0, ws[14], p[6]); 627| 34.5k| word3_muladd(&w2, &w1, &w0, ws[15], p[5]); 628| 34.5k| word3_add(&w2, &w1, &w0, z[20]); 629| 34.5k| ws[4] = w0; 630| 34.5k| w0 = w1; 631| 34.5k| w1 = w2; 632| 34.5k| w2 = 0; 633| 34.5k| word3_muladd(&w2, &w1, &w0, ws[6], p[15]); 634| 34.5k| word3_muladd(&w2, &w1, &w0, ws[7], p[14]); 635| 34.5k| word3_muladd(&w2, &w1, &w0, ws[8], p[13]); 636| 34.5k| word3_muladd(&w2, &w1, &w0, ws[9], p[12]); 637| 34.5k| word3_muladd(&w2, &w1, &w0, ws[10], p[11]); 638| 34.5k| word3_muladd(&w2, &w1, &w0, ws[11], p[10]); 639| 34.5k| word3_muladd(&w2, &w1, &w0, ws[12], p[9]); 640| 34.5k| word3_muladd(&w2, &w1, &w0, ws[13], p[8]); 641| 34.5k| word3_muladd(&w2, &w1, &w0, ws[14], p[7]); 642| 34.5k| word3_muladd(&w2, &w1, &w0, ws[15], p[6]); 643| 34.5k| word3_add(&w2, &w1, &w0, z[21]); 644| 34.5k| ws[5] = w0; 645| 34.5k| w0 = w1; 646| 34.5k| w1 = w2; 647| 34.5k| w2 = 0; 648| 34.5k| word3_muladd(&w2, &w1, &w0, ws[7], p[15]); 649| 34.5k| word3_muladd(&w2, &w1, &w0, ws[8], p[14]); 650| 34.5k| word3_muladd(&w2, &w1, &w0, ws[9], p[13]); 651| 34.5k| word3_muladd(&w2, &w1, &w0, ws[10], p[12]); 652| 34.5k| word3_muladd(&w2, &w1, &w0, ws[11], p[11]); 653| 34.5k| word3_muladd(&w2, &w1, &w0, ws[12], p[10]); 654| 34.5k| word3_muladd(&w2, &w1, &w0, ws[13], p[9]); 655| 34.5k| word3_muladd(&w2, &w1, &w0, ws[14], p[8]); 656| 34.5k| word3_muladd(&w2, &w1, &w0, ws[15], p[7]); 657| 34.5k| word3_add(&w2, &w1, &w0, z[22]); 658| 34.5k| ws[6] = w0; 659| 34.5k| w0 = w1; 660| 34.5k| w1 = w2; 661| 34.5k| w2 = 0; 662| 34.5k| word3_muladd(&w2, &w1, &w0, ws[8], p[15]); 663| 34.5k| word3_muladd(&w2, &w1, &w0, ws[9], p[14]); 664| 34.5k| word3_muladd(&w2, &w1, &w0, ws[10], p[13]); 665| 34.5k| word3_muladd(&w2, &w1, &w0, ws[11], p[12]); 666| 34.5k| word3_muladd(&w2, &w1, &w0, ws[12], p[11]); 667| 34.5k| word3_muladd(&w2, &w1, &w0, ws[13], p[10]); 668| 34.5k| word3_muladd(&w2, &w1, &w0, ws[14], p[9]); 669| 34.5k| word3_muladd(&w2, &w1, &w0, ws[15], p[8]); 670| 34.5k| word3_add(&w2, &w1, &w0, z[23]); 671| 34.5k| ws[7] = w0; 672| 34.5k| w0 = w1; 673| 34.5k| w1 = w2; 674| 34.5k| w2 = 0; 675| 34.5k| word3_muladd(&w2, &w1, &w0, ws[9], p[15]); 676| 34.5k| word3_muladd(&w2, &w1, &w0, ws[10], p[14]); 677| 34.5k| word3_muladd(&w2, &w1, &w0, ws[11], p[13]); 678| 34.5k| word3_muladd(&w2, &w1, &w0, ws[12], p[12]); 679| 34.5k| word3_muladd(&w2, &w1, &w0, ws[13], p[11]); 680| 34.5k| word3_muladd(&w2, &w1, &w0, ws[14], p[10]); 681| 34.5k| word3_muladd(&w2, &w1, &w0, ws[15], p[9]); 682| 34.5k| word3_add(&w2, &w1, &w0, z[24]); 683| 34.5k| ws[8] = w0; 684| 34.5k| w0 = w1; 685| 34.5k| w1 = w2; 686| 34.5k| w2 = 0; 687| 34.5k| word3_muladd(&w2, &w1, &w0, ws[10], p[15]); 688| 34.5k| word3_muladd(&w2, &w1, &w0, ws[11], p[14]); 689| 34.5k| word3_muladd(&w2, &w1, &w0, ws[12], p[13]); 690| 34.5k| word3_muladd(&w2, &w1, &w0, ws[13], p[12]); 691| 34.5k| word3_muladd(&w2, &w1, &w0, ws[14], p[11]); 692| 34.5k| word3_muladd(&w2, &w1, &w0, ws[15], p[10]); 693| 34.5k| word3_add(&w2, &w1, &w0, z[25]); 694| 34.5k| ws[9] = w0; 695| 34.5k| w0 = w1; 696| 34.5k| w1 = w2; 697| 34.5k| w2 = 0; 698| 34.5k| word3_muladd(&w2, &w1, &w0, ws[11], p[15]); 699| 34.5k| word3_muladd(&w2, &w1, &w0, ws[12], p[14]); 700| 34.5k| word3_muladd(&w2, &w1, &w0, ws[13], p[13]); 701| 34.5k| word3_muladd(&w2, &w1, &w0, ws[14], p[12]); 702| 34.5k| word3_muladd(&w2, &w1, &w0, ws[15], p[11]); 703| 34.5k| word3_add(&w2, &w1, &w0, z[26]); 704| 34.5k| ws[10] = w0; 705| 34.5k| w0 = w1; 706| 34.5k| w1 = w2; 707| 34.5k| w2 = 0; 708| 34.5k| word3_muladd(&w2, &w1, &w0, ws[12], p[15]); 709| 34.5k| word3_muladd(&w2, &w1, &w0, ws[13], p[14]); 710| 34.5k| word3_muladd(&w2, &w1, &w0, ws[14], p[13]); 711| 34.5k| word3_muladd(&w2, &w1, &w0, ws[15], p[12]); 712| 34.5k| word3_add(&w2, &w1, &w0, z[27]); 713| 34.5k| ws[11] = w0; 714| 34.5k| w0 = w1; 715| 34.5k| w1 = w2; 716| 34.5k| w2 = 0; 717| 34.5k| word3_muladd(&w2, &w1, &w0, ws[13], p[15]); 718| 34.5k| word3_muladd(&w2, &w1, &w0, ws[14], p[14]); 719| 34.5k| word3_muladd(&w2, &w1, &w0, ws[15], p[13]); 720| 34.5k| word3_add(&w2, &w1, &w0, z[28]); 721| 34.5k| ws[12] = w0; 722| 34.5k| w0 = w1; 723| 34.5k| w1 = w2; 724| 34.5k| w2 = 0; 725| 34.5k| word3_muladd(&w2, &w1, &w0, ws[14], p[15]); 726| 34.5k| word3_muladd(&w2, &w1, &w0, ws[15], p[14]); 727| 34.5k| word3_add(&w2, &w1, &w0, z[29]); 728| 34.5k| ws[13] = w0; 729| 34.5k| w0 = w1; 730| 34.5k| w1 = w2; 731| 34.5k| w2 = 0; 732| 34.5k| word3_muladd(&w2, &w1, &w0, ws[15], p[15]); 733| 34.5k| word3_add(&w2, &w1, &w0, z[30]); 734| 34.5k| ws[14] = w0; 735| 34.5k| w0 = w1; 736| 34.5k| w1 = w2; 737| 34.5k| w2 = 0; 738| 34.5k| word3_add(&w2, &w1, &w0, z[31]); 739| 34.5k| ws[15] = w0; 740| 34.5k| ws[16] = w1; 741| 34.5k| word borrow = bigint_sub3(z, ws, 16 + 1, p, 16); 742| 34.5k| CT::conditional_assign_mem(borrow, z, ws, 16); 743| 34.5k| clear_mem(z + 16, 16); 744| 34.5k|} _ZN5Botan20bigint_monty_redc_24EPmPKmmS0_: 746| 3.74k|void bigint_monty_redc_24(word z[48], const word p[24], word p_dash, word ws[]) { 747| 3.74k| word w2 = 0, w1 = 0, w0 = 0; 748| 3.74k| w0 = z[0]; 749| 3.74k| ws[0] = w0 * p_dash; 750| 3.74k| word3_muladd(&w2, &w1, &w0, ws[0], p[0]); 751| 3.74k| w0 = w1; 752| 3.74k| w1 = w2; 753| 3.74k| w2 = 0; 754| 3.74k| word3_muladd(&w2, &w1, &w0, ws[0], p[1]); 755| 3.74k| word3_add(&w2, &w1, &w0, z[1]); 756| 3.74k| ws[1] = w0 * p_dash; 757| 3.74k| word3_muladd(&w2, &w1, &w0, ws[1], p[0]); 758| 3.74k| w0 = w1; 759| 3.74k| w1 = w2; 760| 3.74k| w2 = 0; 761| 3.74k| word3_muladd(&w2, &w1, &w0, ws[0], p[2]); 762| 3.74k| word3_muladd(&w2, &w1, &w0, ws[1], p[1]); 763| 3.74k| word3_add(&w2, &w1, &w0, z[2]); 764| 3.74k| ws[2] = w0 * p_dash; 765| 3.74k| word3_muladd(&w2, &w1, &w0, ws[2], p[0]); 766| 3.74k| w0 = w1; 767| 3.74k| w1 = w2; 768| 3.74k| w2 = 0; 769| 3.74k| word3_muladd(&w2, &w1, &w0, ws[0], p[3]); 770| 3.74k| word3_muladd(&w2, &w1, &w0, ws[1], p[2]); 771| 3.74k| word3_muladd(&w2, &w1, &w0, ws[2], p[1]); 772| 3.74k| word3_add(&w2, &w1, &w0, z[3]); 773| 3.74k| ws[3] = w0 * p_dash; 774| 3.74k| word3_muladd(&w2, &w1, &w0, ws[3], p[0]); 775| 3.74k| w0 = w1; 776| 3.74k| w1 = w2; 777| 3.74k| w2 = 0; 778| 3.74k| word3_muladd(&w2, &w1, &w0, ws[0], p[4]); 779| 3.74k| word3_muladd(&w2, &w1, &w0, ws[1], p[3]); 780| 3.74k| word3_muladd(&w2, &w1, &w0, ws[2], p[2]); 781| 3.74k| word3_muladd(&w2, &w1, &w0, ws[3], p[1]); 782| 3.74k| word3_add(&w2, &w1, &w0, z[4]); 783| 3.74k| ws[4] = w0 * p_dash; 784| 3.74k| word3_muladd(&w2, &w1, &w0, ws[4], p[0]); 785| 3.74k| w0 = w1; 786| 3.74k| w1 = w2; 787| 3.74k| w2 = 0; 788| 3.74k| word3_muladd(&w2, &w1, &w0, ws[0], p[5]); 789| 3.74k| word3_muladd(&w2, &w1, &w0, ws[1], p[4]); 790| 3.74k| word3_muladd(&w2, &w1, &w0, ws[2], p[3]); 791| 3.74k| word3_muladd(&w2, &w1, &w0, ws[3], p[2]); 792| 3.74k| word3_muladd(&w2, &w1, &w0, ws[4], p[1]); 793| 3.74k| word3_add(&w2, &w1, &w0, z[5]); 794| 3.74k| ws[5] = w0 * p_dash; 795| 3.74k| word3_muladd(&w2, &w1, &w0, ws[5], p[0]); 796| 3.74k| w0 = w1; 797| 3.74k| w1 = w2; 798| 3.74k| w2 = 0; 799| 3.74k| word3_muladd(&w2, &w1, &w0, ws[0], p[6]); 800| 3.74k| word3_muladd(&w2, &w1, &w0, ws[1], p[5]); 801| 3.74k| word3_muladd(&w2, &w1, &w0, ws[2], p[4]); 802| 3.74k| word3_muladd(&w2, &w1, &w0, ws[3], p[3]); 803| 3.74k| word3_muladd(&w2, &w1, &w0, ws[4], p[2]); 804| 3.74k| word3_muladd(&w2, &w1, &w0, ws[5], p[1]); 805| 3.74k| word3_add(&w2, &w1, &w0, z[6]); 806| 3.74k| ws[6] = w0 * p_dash; 807| 3.74k| word3_muladd(&w2, &w1, &w0, ws[6], p[0]); 808| 3.74k| w0 = w1; 809| 3.74k| w1 = w2; 810| 3.74k| w2 = 0; 811| 3.74k| word3_muladd(&w2, &w1, &w0, ws[0], p[7]); 812| 3.74k| word3_muladd(&w2, &w1, &w0, ws[1], p[6]); 813| 3.74k| word3_muladd(&w2, &w1, &w0, ws[2], p[5]); 814| 3.74k| word3_muladd(&w2, &w1, &w0, ws[3], p[4]); 815| 3.74k| word3_muladd(&w2, &w1, &w0, ws[4], p[3]); 816| 3.74k| word3_muladd(&w2, &w1, &w0, ws[5], p[2]); 817| 3.74k| word3_muladd(&w2, &w1, &w0, ws[6], p[1]); 818| 3.74k| word3_add(&w2, &w1, &w0, z[7]); 819| 3.74k| ws[7] = w0 * p_dash; 820| 3.74k| word3_muladd(&w2, &w1, &w0, ws[7], p[0]); 821| 3.74k| w0 = w1; 822| 3.74k| w1 = w2; 823| 3.74k| w2 = 0; 824| 3.74k| word3_muladd(&w2, &w1, &w0, ws[0], p[8]); 825| 3.74k| word3_muladd(&w2, &w1, &w0, ws[1], p[7]); 826| 3.74k| word3_muladd(&w2, &w1, &w0, ws[2], p[6]); 827| 3.74k| word3_muladd(&w2, &w1, &w0, ws[3], p[5]); 828| 3.74k| word3_muladd(&w2, &w1, &w0, ws[4], p[4]); 829| 3.74k| word3_muladd(&w2, &w1, &w0, ws[5], p[3]); 830| 3.74k| word3_muladd(&w2, &w1, &w0, ws[6], p[2]); 831| 3.74k| word3_muladd(&w2, &w1, &w0, ws[7], p[1]); 832| 3.74k| word3_add(&w2, &w1, &w0, z[8]); 833| 3.74k| ws[8] = w0 * p_dash; 834| 3.74k| word3_muladd(&w2, &w1, &w0, ws[8], p[0]); 835| 3.74k| w0 = w1; 836| 3.74k| w1 = w2; 837| 3.74k| w2 = 0; 838| 3.74k| word3_muladd(&w2, &w1, &w0, ws[0], p[9]); 839| 3.74k| word3_muladd(&w2, &w1, &w0, ws[1], p[8]); 840| 3.74k| word3_muladd(&w2, &w1, &w0, ws[2], p[7]); 841| 3.74k| word3_muladd(&w2, &w1, &w0, ws[3], p[6]); 842| 3.74k| word3_muladd(&w2, &w1, &w0, ws[4], p[5]); 843| 3.74k| word3_muladd(&w2, &w1, &w0, ws[5], p[4]); 844| 3.74k| word3_muladd(&w2, &w1, &w0, ws[6], p[3]); 845| 3.74k| word3_muladd(&w2, &w1, &w0, ws[7], p[2]); 846| 3.74k| word3_muladd(&w2, &w1, &w0, ws[8], p[1]); 847| 3.74k| word3_add(&w2, &w1, &w0, z[9]); 848| 3.74k| ws[9] = w0 * p_dash; 849| 3.74k| word3_muladd(&w2, &w1, &w0, ws[9], p[0]); 850| 3.74k| w0 = w1; 851| 3.74k| w1 = w2; 852| 3.74k| w2 = 0; 853| 3.74k| word3_muladd(&w2, &w1, &w0, ws[0], p[10]); 854| 3.74k| word3_muladd(&w2, &w1, &w0, ws[1], p[9]); 855| 3.74k| word3_muladd(&w2, &w1, &w0, ws[2], p[8]); 856| 3.74k| word3_muladd(&w2, &w1, &w0, ws[3], p[7]); 857| 3.74k| word3_muladd(&w2, &w1, &w0, ws[4], p[6]); 858| 3.74k| word3_muladd(&w2, &w1, &w0, ws[5], p[5]); 859| 3.74k| word3_muladd(&w2, &w1, &w0, ws[6], p[4]); 860| 3.74k| word3_muladd(&w2, &w1, &w0, ws[7], p[3]); 861| 3.74k| word3_muladd(&w2, &w1, &w0, ws[8], p[2]); 862| 3.74k| word3_muladd(&w2, &w1, &w0, ws[9], p[1]); 863| 3.74k| word3_add(&w2, &w1, &w0, z[10]); 864| 3.74k| ws[10] = w0 * p_dash; 865| 3.74k| word3_muladd(&w2, &w1, &w0, ws[10], p[0]); 866| 3.74k| w0 = w1; 867| 3.74k| w1 = w2; 868| 3.74k| w2 = 0; 869| 3.74k| word3_muladd(&w2, &w1, &w0, ws[0], p[11]); 870| 3.74k| word3_muladd(&w2, &w1, &w0, ws[1], p[10]); 871| 3.74k| word3_muladd(&w2, &w1, &w0, ws[2], p[9]); 872| 3.74k| word3_muladd(&w2, &w1, &w0, ws[3], p[8]); 873| 3.74k| word3_muladd(&w2, &w1, &w0, ws[4], p[7]); 874| 3.74k| word3_muladd(&w2, &w1, &w0, ws[5], p[6]); 875| 3.74k| word3_muladd(&w2, &w1, &w0, ws[6], p[5]); 876| 3.74k| word3_muladd(&w2, &w1, &w0, ws[7], p[4]); 877| 3.74k| word3_muladd(&w2, &w1, &w0, ws[8], p[3]); 878| 3.74k| word3_muladd(&w2, &w1, &w0, ws[9], p[2]); 879| 3.74k| word3_muladd(&w2, &w1, &w0, ws[10], p[1]); 880| 3.74k| word3_add(&w2, &w1, &w0, z[11]); 881| 3.74k| ws[11] = w0 * p_dash; 882| 3.74k| word3_muladd(&w2, &w1, &w0, ws[11], p[0]); 883| 3.74k| w0 = w1; 884| 3.74k| w1 = w2; 885| 3.74k| w2 = 0; 886| 3.74k| word3_muladd(&w2, &w1, &w0, ws[0], p[12]); 887| 3.74k| word3_muladd(&w2, &w1, &w0, ws[1], p[11]); 888| 3.74k| word3_muladd(&w2, &w1, &w0, ws[2], p[10]); 889| 3.74k| word3_muladd(&w2, &w1, &w0, ws[3], p[9]); 890| 3.74k| word3_muladd(&w2, &w1, &w0, ws[4], p[8]); 891| 3.74k| word3_muladd(&w2, &w1, &w0, ws[5], p[7]); 892| 3.74k| word3_muladd(&w2, &w1, &w0, ws[6], p[6]); 893| 3.74k| word3_muladd(&w2, &w1, &w0, ws[7], p[5]); 894| 3.74k| word3_muladd(&w2, &w1, &w0, ws[8], p[4]); 895| 3.74k| word3_muladd(&w2, &w1, &w0, ws[9], p[3]); 896| 3.74k| word3_muladd(&w2, &w1, &w0, ws[10], p[2]); 897| 3.74k| word3_muladd(&w2, &w1, &w0, ws[11], p[1]); 898| 3.74k| word3_add(&w2, &w1, &w0, z[12]); 899| 3.74k| ws[12] = w0 * p_dash; 900| 3.74k| word3_muladd(&w2, &w1, &w0, ws[12], p[0]); 901| 3.74k| w0 = w1; 902| 3.74k| w1 = w2; 903| 3.74k| w2 = 0; 904| 3.74k| word3_muladd(&w2, &w1, &w0, ws[0], p[13]); 905| 3.74k| word3_muladd(&w2, &w1, &w0, ws[1], p[12]); 906| 3.74k| word3_muladd(&w2, &w1, &w0, ws[2], p[11]); 907| 3.74k| word3_muladd(&w2, &w1, &w0, ws[3], p[10]); 908| 3.74k| word3_muladd(&w2, &w1, &w0, ws[4], p[9]); 909| 3.74k| word3_muladd(&w2, &w1, &w0, ws[5], p[8]); 910| 3.74k| word3_muladd(&w2, &w1, &w0, ws[6], p[7]); 911| 3.74k| word3_muladd(&w2, &w1, &w0, ws[7], p[6]); 912| 3.74k| word3_muladd(&w2, &w1, &w0, ws[8], p[5]); 913| 3.74k| word3_muladd(&w2, &w1, &w0, ws[9], p[4]); 914| 3.74k| word3_muladd(&w2, &w1, &w0, ws[10], p[3]); 915| 3.74k| word3_muladd(&w2, &w1, &w0, ws[11], p[2]); 916| 3.74k| word3_muladd(&w2, &w1, &w0, ws[12], p[1]); 917| 3.74k| word3_add(&w2, &w1, &w0, z[13]); 918| 3.74k| ws[13] = w0 * p_dash; 919| 3.74k| word3_muladd(&w2, &w1, &w0, ws[13], p[0]); 920| 3.74k| w0 = w1; 921| 3.74k| w1 = w2; 922| 3.74k| w2 = 0; 923| 3.74k| word3_muladd(&w2, &w1, &w0, ws[0], p[14]); 924| 3.74k| word3_muladd(&w2, &w1, &w0, ws[1], p[13]); 925| 3.74k| word3_muladd(&w2, &w1, &w0, ws[2], p[12]); 926| 3.74k| word3_muladd(&w2, &w1, &w0, ws[3], p[11]); 927| 3.74k| word3_muladd(&w2, &w1, &w0, ws[4], p[10]); 928| 3.74k| word3_muladd(&w2, &w1, &w0, ws[5], p[9]); 929| 3.74k| word3_muladd(&w2, &w1, &w0, ws[6], p[8]); 930| 3.74k| word3_muladd(&w2, &w1, &w0, ws[7], p[7]); 931| 3.74k| word3_muladd(&w2, &w1, &w0, ws[8], p[6]); 932| 3.74k| word3_muladd(&w2, &w1, &w0, ws[9], p[5]); 933| 3.74k| word3_muladd(&w2, &w1, &w0, ws[10], p[4]); 934| 3.74k| word3_muladd(&w2, &w1, &w0, ws[11], p[3]); 935| 3.74k| word3_muladd(&w2, &w1, &w0, ws[12], p[2]); 936| 3.74k| word3_muladd(&w2, &w1, &w0, ws[13], p[1]); 937| 3.74k| word3_add(&w2, &w1, &w0, z[14]); 938| 3.74k| ws[14] = w0 * p_dash; 939| 3.74k| word3_muladd(&w2, &w1, &w0, ws[14], p[0]); 940| 3.74k| w0 = w1; 941| 3.74k| w1 = w2; 942| 3.74k| w2 = 0; 943| 3.74k| word3_muladd(&w2, &w1, &w0, ws[0], p[15]); 944| 3.74k| word3_muladd(&w2, &w1, &w0, ws[1], p[14]); 945| 3.74k| word3_muladd(&w2, &w1, &w0, ws[2], p[13]); 946| 3.74k| word3_muladd(&w2, &w1, &w0, ws[3], p[12]); 947| 3.74k| word3_muladd(&w2, &w1, &w0, ws[4], p[11]); 948| 3.74k| word3_muladd(&w2, &w1, &w0, ws[5], p[10]); 949| 3.74k| word3_muladd(&w2, &w1, &w0, ws[6], p[9]); 950| 3.74k| word3_muladd(&w2, &w1, &w0, ws[7], p[8]); 951| 3.74k| word3_muladd(&w2, &w1, &w0, ws[8], p[7]); 952| 3.74k| word3_muladd(&w2, &w1, &w0, ws[9], p[6]); 953| 3.74k| word3_muladd(&w2, &w1, &w0, ws[10], p[5]); 954| 3.74k| word3_muladd(&w2, &w1, &w0, ws[11], p[4]); 955| 3.74k| word3_muladd(&w2, &w1, &w0, ws[12], p[3]); 956| 3.74k| word3_muladd(&w2, &w1, &w0, ws[13], p[2]); 957| 3.74k| word3_muladd(&w2, &w1, &w0, ws[14], p[1]); 958| 3.74k| word3_add(&w2, &w1, &w0, z[15]); 959| 3.74k| ws[15] = w0 * p_dash; 960| 3.74k| word3_muladd(&w2, &w1, &w0, ws[15], p[0]); 961| 3.74k| w0 = w1; 962| 3.74k| w1 = w2; 963| 3.74k| w2 = 0; 964| 3.74k| word3_muladd(&w2, &w1, &w0, ws[0], p[16]); 965| 3.74k| word3_muladd(&w2, &w1, &w0, ws[1], p[15]); 966| 3.74k| word3_muladd(&w2, &w1, &w0, ws[2], p[14]); 967| 3.74k| word3_muladd(&w2, &w1, &w0, ws[3], p[13]); 968| 3.74k| word3_muladd(&w2, &w1, &w0, ws[4], p[12]); 969| 3.74k| word3_muladd(&w2, &w1, &w0, ws[5], p[11]); 970| 3.74k| word3_muladd(&w2, &w1, &w0, ws[6], p[10]); 971| 3.74k| word3_muladd(&w2, &w1, &w0, ws[7], p[9]); 972| 3.74k| word3_muladd(&w2, &w1, &w0, ws[8], p[8]); 973| 3.74k| word3_muladd(&w2, &w1, &w0, ws[9], p[7]); 974| 3.74k| word3_muladd(&w2, &w1, &w0, ws[10], p[6]); 975| 3.74k| word3_muladd(&w2, &w1, &w0, ws[11], p[5]); 976| 3.74k| word3_muladd(&w2, &w1, &w0, ws[12], p[4]); 977| 3.74k| word3_muladd(&w2, &w1, &w0, ws[13], p[3]); 978| 3.74k| word3_muladd(&w2, &w1, &w0, ws[14], p[2]); 979| 3.74k| word3_muladd(&w2, &w1, &w0, ws[15], p[1]); 980| 3.74k| word3_add(&w2, &w1, &w0, z[16]); 981| 3.74k| ws[16] = w0 * p_dash; 982| 3.74k| word3_muladd(&w2, &w1, &w0, ws[16], p[0]); 983| 3.74k| w0 = w1; 984| 3.74k| w1 = w2; 985| 3.74k| w2 = 0; 986| 3.74k| word3_muladd(&w2, &w1, &w0, ws[0], p[17]); 987| 3.74k| word3_muladd(&w2, &w1, &w0, ws[1], p[16]); 988| 3.74k| word3_muladd(&w2, &w1, &w0, ws[2], p[15]); 989| 3.74k| word3_muladd(&w2, &w1, &w0, ws[3], p[14]); 990| 3.74k| word3_muladd(&w2, &w1, &w0, ws[4], p[13]); 991| 3.74k| word3_muladd(&w2, &w1, &w0, ws[5], p[12]); 992| 3.74k| word3_muladd(&w2, &w1, &w0, ws[6], p[11]); 993| 3.74k| word3_muladd(&w2, &w1, &w0, ws[7], p[10]); 994| 3.74k| word3_muladd(&w2, &w1, &w0, ws[8], p[9]); 995| 3.74k| word3_muladd(&w2, &w1, &w0, ws[9], p[8]); 996| 3.74k| word3_muladd(&w2, &w1, &w0, ws[10], p[7]); 997| 3.74k| word3_muladd(&w2, &w1, &w0, ws[11], p[6]); 998| 3.74k| word3_muladd(&w2, &w1, &w0, ws[12], p[5]); 999| 3.74k| word3_muladd(&w2, &w1, &w0, ws[13], p[4]); 1000| 3.74k| word3_muladd(&w2, &w1, &w0, ws[14], p[3]); 1001| 3.74k| word3_muladd(&w2, &w1, &w0, ws[15], p[2]); 1002| 3.74k| word3_muladd(&w2, &w1, &w0, ws[16], p[1]); 1003| 3.74k| word3_add(&w2, &w1, &w0, z[17]); 1004| 3.74k| ws[17] = w0 * p_dash; 1005| 3.74k| word3_muladd(&w2, &w1, &w0, ws[17], p[0]); 1006| 3.74k| w0 = w1; 1007| 3.74k| w1 = w2; 1008| 3.74k| w2 = 0; 1009| 3.74k| word3_muladd(&w2, &w1, &w0, ws[0], p[18]); 1010| 3.74k| word3_muladd(&w2, &w1, &w0, ws[1], p[17]); 1011| 3.74k| word3_muladd(&w2, &w1, &w0, ws[2], p[16]); 1012| 3.74k| word3_muladd(&w2, &w1, &w0, ws[3], p[15]); 1013| 3.74k| word3_muladd(&w2, &w1, &w0, ws[4], p[14]); 1014| 3.74k| word3_muladd(&w2, &w1, &w0, ws[5], p[13]); 1015| 3.74k| word3_muladd(&w2, &w1, &w0, ws[6], p[12]); 1016| 3.74k| word3_muladd(&w2, &w1, &w0, ws[7], p[11]); 1017| 3.74k| word3_muladd(&w2, &w1, &w0, ws[8], p[10]); 1018| 3.74k| word3_muladd(&w2, &w1, &w0, ws[9], p[9]); 1019| 3.74k| word3_muladd(&w2, &w1, &w0, ws[10], p[8]); 1020| 3.74k| word3_muladd(&w2, &w1, &w0, ws[11], p[7]); 1021| 3.74k| word3_muladd(&w2, &w1, &w0, ws[12], p[6]); 1022| 3.74k| word3_muladd(&w2, &w1, &w0, ws[13], p[5]); 1023| 3.74k| word3_muladd(&w2, &w1, &w0, ws[14], p[4]); 1024| 3.74k| word3_muladd(&w2, &w1, &w0, ws[15], p[3]); 1025| 3.74k| word3_muladd(&w2, &w1, &w0, ws[16], p[2]); 1026| 3.74k| word3_muladd(&w2, &w1, &w0, ws[17], p[1]); 1027| 3.74k| word3_add(&w2, &w1, &w0, z[18]); 1028| 3.74k| ws[18] = w0 * p_dash; 1029| 3.74k| word3_muladd(&w2, &w1, &w0, ws[18], p[0]); 1030| 3.74k| w0 = w1; 1031| 3.74k| w1 = w2; 1032| 3.74k| w2 = 0; 1033| 3.74k| word3_muladd(&w2, &w1, &w0, ws[0], p[19]); 1034| 3.74k| word3_muladd(&w2, &w1, &w0, ws[1], p[18]); 1035| 3.74k| word3_muladd(&w2, &w1, &w0, ws[2], p[17]); 1036| 3.74k| word3_muladd(&w2, &w1, &w0, ws[3], p[16]); 1037| 3.74k| word3_muladd(&w2, &w1, &w0, ws[4], p[15]); 1038| 3.74k| word3_muladd(&w2, &w1, &w0, ws[5], p[14]); 1039| 3.74k| word3_muladd(&w2, &w1, &w0, ws[6], p[13]); 1040| 3.74k| word3_muladd(&w2, &w1, &w0, ws[7], p[12]); 1041| 3.74k| word3_muladd(&w2, &w1, &w0, ws[8], p[11]); 1042| 3.74k| word3_muladd(&w2, &w1, &w0, ws[9], p[10]); 1043| 3.74k| word3_muladd(&w2, &w1, &w0, ws[10], p[9]); 1044| 3.74k| word3_muladd(&w2, &w1, &w0, ws[11], p[8]); 1045| 3.74k| word3_muladd(&w2, &w1, &w0, ws[12], p[7]); 1046| 3.74k| word3_muladd(&w2, &w1, &w0, ws[13], p[6]); 1047| 3.74k| word3_muladd(&w2, &w1, &w0, ws[14], p[5]); 1048| 3.74k| word3_muladd(&w2, &w1, &w0, ws[15], p[4]); 1049| 3.74k| word3_muladd(&w2, &w1, &w0, ws[16], p[3]); 1050| 3.74k| word3_muladd(&w2, &w1, &w0, ws[17], p[2]); 1051| 3.74k| word3_muladd(&w2, &w1, &w0, ws[18], p[1]); 1052| 3.74k| word3_add(&w2, &w1, &w0, z[19]); 1053| 3.74k| ws[19] = w0 * p_dash; 1054| 3.74k| word3_muladd(&w2, &w1, &w0, ws[19], p[0]); 1055| 3.74k| w0 = w1; 1056| 3.74k| w1 = w2; 1057| 3.74k| w2 = 0; 1058| 3.74k| word3_muladd(&w2, &w1, &w0, ws[0], p[20]); 1059| 3.74k| word3_muladd(&w2, &w1, &w0, ws[1], p[19]); 1060| 3.74k| word3_muladd(&w2, &w1, &w0, ws[2], p[18]); 1061| 3.74k| word3_muladd(&w2, &w1, &w0, ws[3], p[17]); 1062| 3.74k| word3_muladd(&w2, &w1, &w0, ws[4], p[16]); 1063| 3.74k| word3_muladd(&w2, &w1, &w0, ws[5], p[15]); 1064| 3.74k| word3_muladd(&w2, &w1, &w0, ws[6], p[14]); 1065| 3.74k| word3_muladd(&w2, &w1, &w0, ws[7], p[13]); 1066| 3.74k| word3_muladd(&w2, &w1, &w0, ws[8], p[12]); 1067| 3.74k| word3_muladd(&w2, &w1, &w0, ws[9], p[11]); 1068| 3.74k| word3_muladd(&w2, &w1, &w0, ws[10], p[10]); 1069| 3.74k| word3_muladd(&w2, &w1, &w0, ws[11], p[9]); 1070| 3.74k| word3_muladd(&w2, &w1, &w0, ws[12], p[8]); 1071| 3.74k| word3_muladd(&w2, &w1, &w0, ws[13], p[7]); 1072| 3.74k| word3_muladd(&w2, &w1, &w0, ws[14], p[6]); 1073| 3.74k| word3_muladd(&w2, &w1, &w0, ws[15], p[5]); 1074| 3.74k| word3_muladd(&w2, &w1, &w0, ws[16], p[4]); 1075| 3.74k| word3_muladd(&w2, &w1, &w0, ws[17], p[3]); 1076| 3.74k| word3_muladd(&w2, &w1, &w0, ws[18], p[2]); 1077| 3.74k| word3_muladd(&w2, &w1, &w0, ws[19], p[1]); 1078| 3.74k| word3_add(&w2, &w1, &w0, z[20]); 1079| 3.74k| ws[20] = w0 * p_dash; 1080| 3.74k| word3_muladd(&w2, &w1, &w0, ws[20], p[0]); 1081| 3.74k| w0 = w1; 1082| 3.74k| w1 = w2; 1083| 3.74k| w2 = 0; 1084| 3.74k| word3_muladd(&w2, &w1, &w0, ws[0], p[21]); 1085| 3.74k| word3_muladd(&w2, &w1, &w0, ws[1], p[20]); 1086| 3.74k| word3_muladd(&w2, &w1, &w0, ws[2], p[19]); 1087| 3.74k| word3_muladd(&w2, &w1, &w0, ws[3], p[18]); 1088| 3.74k| word3_muladd(&w2, &w1, &w0, ws[4], p[17]); 1089| 3.74k| word3_muladd(&w2, &w1, &w0, ws[5], p[16]); 1090| 3.74k| word3_muladd(&w2, &w1, &w0, ws[6], p[15]); 1091| 3.74k| word3_muladd(&w2, &w1, &w0, ws[7], p[14]); 1092| 3.74k| word3_muladd(&w2, &w1, &w0, ws[8], p[13]); 1093| 3.74k| word3_muladd(&w2, &w1, &w0, ws[9], p[12]); 1094| 3.74k| word3_muladd(&w2, &w1, &w0, ws[10], p[11]); 1095| 3.74k| word3_muladd(&w2, &w1, &w0, ws[11], p[10]); 1096| 3.74k| word3_muladd(&w2, &w1, &w0, ws[12], p[9]); 1097| 3.74k| word3_muladd(&w2, &w1, &w0, ws[13], p[8]); 1098| 3.74k| word3_muladd(&w2, &w1, &w0, ws[14], p[7]); 1099| 3.74k| word3_muladd(&w2, &w1, &w0, ws[15], p[6]); 1100| 3.74k| word3_muladd(&w2, &w1, &w0, ws[16], p[5]); 1101| 3.74k| word3_muladd(&w2, &w1, &w0, ws[17], p[4]); 1102| 3.74k| word3_muladd(&w2, &w1, &w0, ws[18], p[3]); 1103| 3.74k| word3_muladd(&w2, &w1, &w0, ws[19], p[2]); 1104| 3.74k| word3_muladd(&w2, &w1, &w0, ws[20], p[1]); 1105| 3.74k| word3_add(&w2, &w1, &w0, z[21]); 1106| 3.74k| ws[21] = w0 * p_dash; 1107| 3.74k| word3_muladd(&w2, &w1, &w0, ws[21], p[0]); 1108| 3.74k| w0 = w1; 1109| 3.74k| w1 = w2; 1110| 3.74k| w2 = 0; 1111| 3.74k| word3_muladd(&w2, &w1, &w0, ws[0], p[22]); 1112| 3.74k| word3_muladd(&w2, &w1, &w0, ws[1], p[21]); 1113| 3.74k| word3_muladd(&w2, &w1, &w0, ws[2], p[20]); 1114| 3.74k| word3_muladd(&w2, &w1, &w0, ws[3], p[19]); 1115| 3.74k| word3_muladd(&w2, &w1, &w0, ws[4], p[18]); 1116| 3.74k| word3_muladd(&w2, &w1, &w0, ws[5], p[17]); 1117| 3.74k| word3_muladd(&w2, &w1, &w0, ws[6], p[16]); 1118| 3.74k| word3_muladd(&w2, &w1, &w0, ws[7], p[15]); 1119| 3.74k| word3_muladd(&w2, &w1, &w0, ws[8], p[14]); 1120| 3.74k| word3_muladd(&w2, &w1, &w0, ws[9], p[13]); 1121| 3.74k| word3_muladd(&w2, &w1, &w0, ws[10], p[12]); 1122| 3.74k| word3_muladd(&w2, &w1, &w0, ws[11], p[11]); 1123| 3.74k| word3_muladd(&w2, &w1, &w0, ws[12], p[10]); 1124| 3.74k| word3_muladd(&w2, &w1, &w0, ws[13], p[9]); 1125| 3.74k| word3_muladd(&w2, &w1, &w0, ws[14], p[8]); 1126| 3.74k| word3_muladd(&w2, &w1, &w0, ws[15], p[7]); 1127| 3.74k| word3_muladd(&w2, &w1, &w0, ws[16], p[6]); 1128| 3.74k| word3_muladd(&w2, &w1, &w0, ws[17], p[5]); 1129| 3.74k| word3_muladd(&w2, &w1, &w0, ws[18], p[4]); 1130| 3.74k| word3_muladd(&w2, &w1, &w0, ws[19], p[3]); 1131| 3.74k| word3_muladd(&w2, &w1, &w0, ws[20], p[2]); 1132| 3.74k| word3_muladd(&w2, &w1, &w0, ws[21], p[1]); 1133| 3.74k| word3_add(&w2, &w1, &w0, z[22]); 1134| 3.74k| ws[22] = w0 * p_dash; 1135| 3.74k| word3_muladd(&w2, &w1, &w0, ws[22], p[0]); 1136| 3.74k| w0 = w1; 1137| 3.74k| w1 = w2; 1138| 3.74k| w2 = 0; 1139| 3.74k| word3_muladd(&w2, &w1, &w0, ws[0], p[23]); 1140| 3.74k| word3_muladd(&w2, &w1, &w0, ws[1], p[22]); 1141| 3.74k| word3_muladd(&w2, &w1, &w0, ws[2], p[21]); 1142| 3.74k| word3_muladd(&w2, &w1, &w0, ws[3], p[20]); 1143| 3.74k| word3_muladd(&w2, &w1, &w0, ws[4], p[19]); 1144| 3.74k| word3_muladd(&w2, &w1, &w0, ws[5], p[18]); 1145| 3.74k| word3_muladd(&w2, &w1, &w0, ws[6], p[17]); 1146| 3.74k| word3_muladd(&w2, &w1, &w0, ws[7], p[16]); 1147| 3.74k| word3_muladd(&w2, &w1, &w0, ws[8], p[15]); 1148| 3.74k| word3_muladd(&w2, &w1, &w0, ws[9], p[14]); 1149| 3.74k| word3_muladd(&w2, &w1, &w0, ws[10], p[13]); 1150| 3.74k| word3_muladd(&w2, &w1, &w0, ws[11], p[12]); 1151| 3.74k| word3_muladd(&w2, &w1, &w0, ws[12], p[11]); 1152| 3.74k| word3_muladd(&w2, &w1, &w0, ws[13], p[10]); 1153| 3.74k| word3_muladd(&w2, &w1, &w0, ws[14], p[9]); 1154| 3.74k| word3_muladd(&w2, &w1, &w0, ws[15], p[8]); 1155| 3.74k| word3_muladd(&w2, &w1, &w0, ws[16], p[7]); 1156| 3.74k| word3_muladd(&w2, &w1, &w0, ws[17], p[6]); 1157| 3.74k| word3_muladd(&w2, &w1, &w0, ws[18], p[5]); 1158| 3.74k| word3_muladd(&w2, &w1, &w0, ws[19], p[4]); 1159| 3.74k| word3_muladd(&w2, &w1, &w0, ws[20], p[3]); 1160| 3.74k| word3_muladd(&w2, &w1, &w0, ws[21], p[2]); 1161| 3.74k| word3_muladd(&w2, &w1, &w0, ws[22], p[1]); 1162| 3.74k| word3_add(&w2, &w1, &w0, z[23]); 1163| 3.74k| ws[23] = w0 * p_dash; 1164| 3.74k| word3_muladd(&w2, &w1, &w0, ws[23], p[0]); 1165| 3.74k| w0 = w1; 1166| 3.74k| w1 = w2; 1167| 3.74k| w2 = 0; 1168| 3.74k| word3_muladd(&w2, &w1, &w0, ws[1], p[23]); 1169| 3.74k| word3_muladd(&w2, &w1, &w0, ws[2], p[22]); 1170| 3.74k| word3_muladd(&w2, &w1, &w0, ws[3], p[21]); 1171| 3.74k| word3_muladd(&w2, &w1, &w0, ws[4], p[20]); 1172| 3.74k| word3_muladd(&w2, &w1, &w0, ws[5], p[19]); 1173| 3.74k| word3_muladd(&w2, &w1, &w0, ws[6], p[18]); 1174| 3.74k| word3_muladd(&w2, &w1, &w0, ws[7], p[17]); 1175| 3.74k| word3_muladd(&w2, &w1, &w0, ws[8], p[16]); 1176| 3.74k| word3_muladd(&w2, &w1, &w0, ws[9], p[15]); 1177| 3.74k| word3_muladd(&w2, &w1, &w0, ws[10], p[14]); 1178| 3.74k| word3_muladd(&w2, &w1, &w0, ws[11], p[13]); 1179| 3.74k| word3_muladd(&w2, &w1, &w0, ws[12], p[12]); 1180| 3.74k| word3_muladd(&w2, &w1, &w0, ws[13], p[11]); 1181| 3.74k| word3_muladd(&w2, &w1, &w0, ws[14], p[10]); 1182| 3.74k| word3_muladd(&w2, &w1, &w0, ws[15], p[9]); 1183| 3.74k| word3_muladd(&w2, &w1, &w0, ws[16], p[8]); 1184| 3.74k| word3_muladd(&w2, &w1, &w0, ws[17], p[7]); 1185| 3.74k| word3_muladd(&w2, &w1, &w0, ws[18], p[6]); 1186| 3.74k| word3_muladd(&w2, &w1, &w0, ws[19], p[5]); 1187| 3.74k| word3_muladd(&w2, &w1, &w0, ws[20], p[4]); 1188| 3.74k| word3_muladd(&w2, &w1, &w0, ws[21], p[3]); 1189| 3.74k| word3_muladd(&w2, &w1, &w0, ws[22], p[2]); 1190| 3.74k| word3_muladd(&w2, &w1, &w0, ws[23], p[1]); 1191| 3.74k| word3_add(&w2, &w1, &w0, z[24]); 1192| 3.74k| ws[0] = w0; 1193| 3.74k| w0 = w1; 1194| 3.74k| w1 = w2; 1195| 3.74k| w2 = 0; 1196| 3.74k| word3_muladd(&w2, &w1, &w0, ws[2], p[23]); 1197| 3.74k| word3_muladd(&w2, &w1, &w0, ws[3], p[22]); 1198| 3.74k| word3_muladd(&w2, &w1, &w0, ws[4], p[21]); 1199| 3.74k| word3_muladd(&w2, &w1, &w0, ws[5], p[20]); 1200| 3.74k| word3_muladd(&w2, &w1, &w0, ws[6], p[19]); 1201| 3.74k| word3_muladd(&w2, &w1, &w0, ws[7], p[18]); 1202| 3.74k| word3_muladd(&w2, &w1, &w0, ws[8], p[17]); 1203| 3.74k| word3_muladd(&w2, &w1, &w0, ws[9], p[16]); 1204| 3.74k| word3_muladd(&w2, &w1, &w0, ws[10], p[15]); 1205| 3.74k| word3_muladd(&w2, &w1, &w0, ws[11], p[14]); 1206| 3.74k| word3_muladd(&w2, &w1, &w0, ws[12], p[13]); 1207| 3.74k| word3_muladd(&w2, &w1, &w0, ws[13], p[12]); 1208| 3.74k| word3_muladd(&w2, &w1, &w0, ws[14], p[11]); 1209| 3.74k| word3_muladd(&w2, &w1, &w0, ws[15], p[10]); 1210| 3.74k| word3_muladd(&w2, &w1, &w0, ws[16], p[9]); 1211| 3.74k| word3_muladd(&w2, &w1, &w0, ws[17], p[8]); 1212| 3.74k| word3_muladd(&w2, &w1, &w0, ws[18], p[7]); 1213| 3.74k| word3_muladd(&w2, &w1, &w0, ws[19], p[6]); 1214| 3.74k| word3_muladd(&w2, &w1, &w0, ws[20], p[5]); 1215| 3.74k| word3_muladd(&w2, &w1, &w0, ws[21], p[4]); 1216| 3.74k| word3_muladd(&w2, &w1, &w0, ws[22], p[3]); 1217| 3.74k| word3_muladd(&w2, &w1, &w0, ws[23], p[2]); 1218| 3.74k| word3_add(&w2, &w1, &w0, z[25]); 1219| 3.74k| ws[1] = w0; 1220| 3.74k| w0 = w1; 1221| 3.74k| w1 = w2; 1222| 3.74k| w2 = 0; 1223| 3.74k| word3_muladd(&w2, &w1, &w0, ws[3], p[23]); 1224| 3.74k| word3_muladd(&w2, &w1, &w0, ws[4], p[22]); 1225| 3.74k| word3_muladd(&w2, &w1, &w0, ws[5], p[21]); 1226| 3.74k| word3_muladd(&w2, &w1, &w0, ws[6], p[20]); 1227| 3.74k| word3_muladd(&w2, &w1, &w0, ws[7], p[19]); 1228| 3.74k| word3_muladd(&w2, &w1, &w0, ws[8], p[18]); 1229| 3.74k| word3_muladd(&w2, &w1, &w0, ws[9], p[17]); 1230| 3.74k| word3_muladd(&w2, &w1, &w0, ws[10], p[16]); 1231| 3.74k| word3_muladd(&w2, &w1, &w0, ws[11], p[15]); 1232| 3.74k| word3_muladd(&w2, &w1, &w0, ws[12], p[14]); 1233| 3.74k| word3_muladd(&w2, &w1, &w0, ws[13], p[13]); 1234| 3.74k| word3_muladd(&w2, &w1, &w0, ws[14], p[12]); 1235| 3.74k| word3_muladd(&w2, &w1, &w0, ws[15], p[11]); 1236| 3.74k| word3_muladd(&w2, &w1, &w0, ws[16], p[10]); 1237| 3.74k| word3_muladd(&w2, &w1, &w0, ws[17], p[9]); 1238| 3.74k| word3_muladd(&w2, &w1, &w0, ws[18], p[8]); 1239| 3.74k| word3_muladd(&w2, &w1, &w0, ws[19], p[7]); 1240| 3.74k| word3_muladd(&w2, &w1, &w0, ws[20], p[6]); 1241| 3.74k| word3_muladd(&w2, &w1, &w0, ws[21], p[5]); 1242| 3.74k| word3_muladd(&w2, &w1, &w0, ws[22], p[4]); 1243| 3.74k| word3_muladd(&w2, &w1, &w0, ws[23], p[3]); 1244| 3.74k| word3_add(&w2, &w1, &w0, z[26]); 1245| 3.74k| ws[2] = w0; 1246| 3.74k| w0 = w1; 1247| 3.74k| w1 = w2; 1248| 3.74k| w2 = 0; 1249| 3.74k| word3_muladd(&w2, &w1, &w0, ws[4], p[23]); 1250| 3.74k| word3_muladd(&w2, &w1, &w0, ws[5], p[22]); 1251| 3.74k| word3_muladd(&w2, &w1, &w0, ws[6], p[21]); 1252| 3.74k| word3_muladd(&w2, &w1, &w0, ws[7], p[20]); 1253| 3.74k| word3_muladd(&w2, &w1, &w0, ws[8], p[19]); 1254| 3.74k| word3_muladd(&w2, &w1, &w0, ws[9], p[18]); 1255| 3.74k| word3_muladd(&w2, &w1, &w0, ws[10], p[17]); 1256| 3.74k| word3_muladd(&w2, &w1, &w0, ws[11], p[16]); 1257| 3.74k| word3_muladd(&w2, &w1, &w0, ws[12], p[15]); 1258| 3.74k| word3_muladd(&w2, &w1, &w0, ws[13], p[14]); 1259| 3.74k| word3_muladd(&w2, &w1, &w0, ws[14], p[13]); 1260| 3.74k| word3_muladd(&w2, &w1, &w0, ws[15], p[12]); 1261| 3.74k| word3_muladd(&w2, &w1, &w0, ws[16], p[11]); 1262| 3.74k| word3_muladd(&w2, &w1, &w0, ws[17], p[10]); 1263| 3.74k| word3_muladd(&w2, &w1, &w0, ws[18], p[9]); 1264| 3.74k| word3_muladd(&w2, &w1, &w0, ws[19], p[8]); 1265| 3.74k| word3_muladd(&w2, &w1, &w0, ws[20], p[7]); 1266| 3.74k| word3_muladd(&w2, &w1, &w0, ws[21], p[6]); 1267| 3.74k| word3_muladd(&w2, &w1, &w0, ws[22], p[5]); 1268| 3.74k| word3_muladd(&w2, &w1, &w0, ws[23], p[4]); 1269| 3.74k| word3_add(&w2, &w1, &w0, z[27]); 1270| 3.74k| ws[3] = w0; 1271| 3.74k| w0 = w1; 1272| 3.74k| w1 = w2; 1273| 3.74k| w2 = 0; 1274| 3.74k| word3_muladd(&w2, &w1, &w0, ws[5], p[23]); 1275| 3.74k| word3_muladd(&w2, &w1, &w0, ws[6], p[22]); 1276| 3.74k| word3_muladd(&w2, &w1, &w0, ws[7], p[21]); 1277| 3.74k| word3_muladd(&w2, &w1, &w0, ws[8], p[20]); 1278| 3.74k| word3_muladd(&w2, &w1, &w0, ws[9], p[19]); 1279| 3.74k| word3_muladd(&w2, &w1, &w0, ws[10], p[18]); 1280| 3.74k| word3_muladd(&w2, &w1, &w0, ws[11], p[17]); 1281| 3.74k| word3_muladd(&w2, &w1, &w0, ws[12], p[16]); 1282| 3.74k| word3_muladd(&w2, &w1, &w0, ws[13], p[15]); 1283| 3.74k| word3_muladd(&w2, &w1, &w0, ws[14], p[14]); 1284| 3.74k| word3_muladd(&w2, &w1, &w0, ws[15], p[13]); 1285| 3.74k| word3_muladd(&w2, &w1, &w0, ws[16], p[12]); 1286| 3.74k| word3_muladd(&w2, &w1, &w0, ws[17], p[11]); 1287| 3.74k| word3_muladd(&w2, &w1, &w0, ws[18], p[10]); 1288| 3.74k| word3_muladd(&w2, &w1, &w0, ws[19], p[9]); 1289| 3.74k| word3_muladd(&w2, &w1, &w0, ws[20], p[8]); 1290| 3.74k| word3_muladd(&w2, &w1, &w0, ws[21], p[7]); 1291| 3.74k| word3_muladd(&w2, &w1, &w0, ws[22], p[6]); 1292| 3.74k| word3_muladd(&w2, &w1, &w0, ws[23], p[5]); 1293| 3.74k| word3_add(&w2, &w1, &w0, z[28]); 1294| 3.74k| ws[4] = w0; 1295| 3.74k| w0 = w1; 1296| 3.74k| w1 = w2; 1297| 3.74k| w2 = 0; 1298| 3.74k| word3_muladd(&w2, &w1, &w0, ws[6], p[23]); 1299| 3.74k| word3_muladd(&w2, &w1, &w0, ws[7], p[22]); 1300| 3.74k| word3_muladd(&w2, &w1, &w0, ws[8], p[21]); 1301| 3.74k| word3_muladd(&w2, &w1, &w0, ws[9], p[20]); 1302| 3.74k| word3_muladd(&w2, &w1, &w0, ws[10], p[19]); 1303| 3.74k| word3_muladd(&w2, &w1, &w0, ws[11], p[18]); 1304| 3.74k| word3_muladd(&w2, &w1, &w0, ws[12], p[17]); 1305| 3.74k| word3_muladd(&w2, &w1, &w0, ws[13], p[16]); 1306| 3.74k| word3_muladd(&w2, &w1, &w0, ws[14], p[15]); 1307| 3.74k| word3_muladd(&w2, &w1, &w0, ws[15], p[14]); 1308| 3.74k| word3_muladd(&w2, &w1, &w0, ws[16], p[13]); 1309| 3.74k| word3_muladd(&w2, &w1, &w0, ws[17], p[12]); 1310| 3.74k| word3_muladd(&w2, &w1, &w0, ws[18], p[11]); 1311| 3.74k| word3_muladd(&w2, &w1, &w0, ws[19], p[10]); 1312| 3.74k| word3_muladd(&w2, &w1, &w0, ws[20], p[9]); 1313| 3.74k| word3_muladd(&w2, &w1, &w0, ws[21], p[8]); 1314| 3.74k| word3_muladd(&w2, &w1, &w0, ws[22], p[7]); 1315| 3.74k| word3_muladd(&w2, &w1, &w0, ws[23], p[6]); 1316| 3.74k| word3_add(&w2, &w1, &w0, z[29]); 1317| 3.74k| ws[5] = w0; 1318| 3.74k| w0 = w1; 1319| 3.74k| w1 = w2; 1320| 3.74k| w2 = 0; 1321| 3.74k| word3_muladd(&w2, &w1, &w0, ws[7], p[23]); 1322| 3.74k| word3_muladd(&w2, &w1, &w0, ws[8], p[22]); 1323| 3.74k| word3_muladd(&w2, &w1, &w0, ws[9], p[21]); 1324| 3.74k| word3_muladd(&w2, &w1, &w0, ws[10], p[20]); 1325| 3.74k| word3_muladd(&w2, &w1, &w0, ws[11], p[19]); 1326| 3.74k| word3_muladd(&w2, &w1, &w0, ws[12], p[18]); 1327| 3.74k| word3_muladd(&w2, &w1, &w0, ws[13], p[17]); 1328| 3.74k| word3_muladd(&w2, &w1, &w0, ws[14], p[16]); 1329| 3.74k| word3_muladd(&w2, &w1, &w0, ws[15], p[15]); 1330| 3.74k| word3_muladd(&w2, &w1, &w0, ws[16], p[14]); 1331| 3.74k| word3_muladd(&w2, &w1, &w0, ws[17], p[13]); 1332| 3.74k| word3_muladd(&w2, &w1, &w0, ws[18], p[12]); 1333| 3.74k| word3_muladd(&w2, &w1, &w0, ws[19], p[11]); 1334| 3.74k| word3_muladd(&w2, &w1, &w0, ws[20], p[10]); 1335| 3.74k| word3_muladd(&w2, &w1, &w0, ws[21], p[9]); 1336| 3.74k| word3_muladd(&w2, &w1, &w0, ws[22], p[8]); 1337| 3.74k| word3_muladd(&w2, &w1, &w0, ws[23], p[7]); 1338| 3.74k| word3_add(&w2, &w1, &w0, z[30]); 1339| 3.74k| ws[6] = w0; 1340| 3.74k| w0 = w1; 1341| 3.74k| w1 = w2; 1342| 3.74k| w2 = 0; 1343| 3.74k| word3_muladd(&w2, &w1, &w0, ws[8], p[23]); 1344| 3.74k| word3_muladd(&w2, &w1, &w0, ws[9], p[22]); 1345| 3.74k| word3_muladd(&w2, &w1, &w0, ws[10], p[21]); 1346| 3.74k| word3_muladd(&w2, &w1, &w0, ws[11], p[20]); 1347| 3.74k| word3_muladd(&w2, &w1, &w0, ws[12], p[19]); 1348| 3.74k| word3_muladd(&w2, &w1, &w0, ws[13], p[18]); 1349| 3.74k| word3_muladd(&w2, &w1, &w0, ws[14], p[17]); 1350| 3.74k| word3_muladd(&w2, &w1, &w0, ws[15], p[16]); 1351| 3.74k| word3_muladd(&w2, &w1, &w0, ws[16], p[15]); 1352| 3.74k| word3_muladd(&w2, &w1, &w0, ws[17], p[14]); 1353| 3.74k| word3_muladd(&w2, &w1, &w0, ws[18], p[13]); 1354| 3.74k| word3_muladd(&w2, &w1, &w0, ws[19], p[12]); 1355| 3.74k| word3_muladd(&w2, &w1, &w0, ws[20], p[11]); 1356| 3.74k| word3_muladd(&w2, &w1, &w0, ws[21], p[10]); 1357| 3.74k| word3_muladd(&w2, &w1, &w0, ws[22], p[9]); 1358| 3.74k| word3_muladd(&w2, &w1, &w0, ws[23], p[8]); 1359| 3.74k| word3_add(&w2, &w1, &w0, z[31]); 1360| 3.74k| ws[7] = w0; 1361| 3.74k| w0 = w1; 1362| 3.74k| w1 = w2; 1363| 3.74k| w2 = 0; 1364| 3.74k| word3_muladd(&w2, &w1, &w0, ws[9], p[23]); 1365| 3.74k| word3_muladd(&w2, &w1, &w0, ws[10], p[22]); 1366| 3.74k| word3_muladd(&w2, &w1, &w0, ws[11], p[21]); 1367| 3.74k| word3_muladd(&w2, &w1, &w0, ws[12], p[20]); 1368| 3.74k| word3_muladd(&w2, &w1, &w0, ws[13], p[19]); 1369| 3.74k| word3_muladd(&w2, &w1, &w0, ws[14], p[18]); 1370| 3.74k| word3_muladd(&w2, &w1, &w0, ws[15], p[17]); 1371| 3.74k| word3_muladd(&w2, &w1, &w0, ws[16], p[16]); 1372| 3.74k| word3_muladd(&w2, &w1, &w0, ws[17], p[15]); 1373| 3.74k| word3_muladd(&w2, &w1, &w0, ws[18], p[14]); 1374| 3.74k| word3_muladd(&w2, &w1, &w0, ws[19], p[13]); 1375| 3.74k| word3_muladd(&w2, &w1, &w0, ws[20], p[12]); 1376| 3.74k| word3_muladd(&w2, &w1, &w0, ws[21], p[11]); 1377| 3.74k| word3_muladd(&w2, &w1, &w0, ws[22], p[10]); 1378| 3.74k| word3_muladd(&w2, &w1, &w0, ws[23], p[9]); 1379| 3.74k| word3_add(&w2, &w1, &w0, z[32]); 1380| 3.74k| ws[8] = w0; 1381| 3.74k| w0 = w1; 1382| 3.74k| w1 = w2; 1383| 3.74k| w2 = 0; 1384| 3.74k| word3_muladd(&w2, &w1, &w0, ws[10], p[23]); 1385| 3.74k| word3_muladd(&w2, &w1, &w0, ws[11], p[22]); 1386| 3.74k| word3_muladd(&w2, &w1, &w0, ws[12], p[21]); 1387| 3.74k| word3_muladd(&w2, &w1, &w0, ws[13], p[20]); 1388| 3.74k| word3_muladd(&w2, &w1, &w0, ws[14], p[19]); 1389| 3.74k| word3_muladd(&w2, &w1, &w0, ws[15], p[18]); 1390| 3.74k| word3_muladd(&w2, &w1, &w0, ws[16], p[17]); 1391| 3.74k| word3_muladd(&w2, &w1, &w0, ws[17], p[16]); 1392| 3.74k| word3_muladd(&w2, &w1, &w0, ws[18], p[15]); 1393| 3.74k| word3_muladd(&w2, &w1, &w0, ws[19], p[14]); 1394| 3.74k| word3_muladd(&w2, &w1, &w0, ws[20], p[13]); 1395| 3.74k| word3_muladd(&w2, &w1, &w0, ws[21], p[12]); 1396| 3.74k| word3_muladd(&w2, &w1, &w0, ws[22], p[11]); 1397| 3.74k| word3_muladd(&w2, &w1, &w0, ws[23], p[10]); 1398| 3.74k| word3_add(&w2, &w1, &w0, z[33]); 1399| 3.74k| ws[9] = w0; 1400| 3.74k| w0 = w1; 1401| 3.74k| w1 = w2; 1402| 3.74k| w2 = 0; 1403| 3.74k| word3_muladd(&w2, &w1, &w0, ws[11], p[23]); 1404| 3.74k| word3_muladd(&w2, &w1, &w0, ws[12], p[22]); 1405| 3.74k| word3_muladd(&w2, &w1, &w0, ws[13], p[21]); 1406| 3.74k| word3_muladd(&w2, &w1, &w0, ws[14], p[20]); 1407| 3.74k| word3_muladd(&w2, &w1, &w0, ws[15], p[19]); 1408| 3.74k| word3_muladd(&w2, &w1, &w0, ws[16], p[18]); 1409| 3.74k| word3_muladd(&w2, &w1, &w0, ws[17], p[17]); 1410| 3.74k| word3_muladd(&w2, &w1, &w0, ws[18], p[16]); 1411| 3.74k| word3_muladd(&w2, &w1, &w0, ws[19], p[15]); 1412| 3.74k| word3_muladd(&w2, &w1, &w0, ws[20], p[14]); 1413| 3.74k| word3_muladd(&w2, &w1, &w0, ws[21], p[13]); 1414| 3.74k| word3_muladd(&w2, &w1, &w0, ws[22], p[12]); 1415| 3.74k| word3_muladd(&w2, &w1, &w0, ws[23], p[11]); 1416| 3.74k| word3_add(&w2, &w1, &w0, z[34]); 1417| 3.74k| ws[10] = w0; 1418| 3.74k| w0 = w1; 1419| 3.74k| w1 = w2; 1420| 3.74k| w2 = 0; 1421| 3.74k| word3_muladd(&w2, &w1, &w0, ws[12], p[23]); 1422| 3.74k| word3_muladd(&w2, &w1, &w0, ws[13], p[22]); 1423| 3.74k| word3_muladd(&w2, &w1, &w0, ws[14], p[21]); 1424| 3.74k| word3_muladd(&w2, &w1, &w0, ws[15], p[20]); 1425| 3.74k| word3_muladd(&w2, &w1, &w0, ws[16], p[19]); 1426| 3.74k| word3_muladd(&w2, &w1, &w0, ws[17], p[18]); 1427| 3.74k| word3_muladd(&w2, &w1, &w0, ws[18], p[17]); 1428| 3.74k| word3_muladd(&w2, &w1, &w0, ws[19], p[16]); 1429| 3.74k| word3_muladd(&w2, &w1, &w0, ws[20], p[15]); 1430| 3.74k| word3_muladd(&w2, &w1, &w0, ws[21], p[14]); 1431| 3.74k| word3_muladd(&w2, &w1, &w0, ws[22], p[13]); 1432| 3.74k| word3_muladd(&w2, &w1, &w0, ws[23], p[12]); 1433| 3.74k| word3_add(&w2, &w1, &w0, z[35]); 1434| 3.74k| ws[11] = w0; 1435| 3.74k| w0 = w1; 1436| 3.74k| w1 = w2; 1437| 3.74k| w2 = 0; 1438| 3.74k| word3_muladd(&w2, &w1, &w0, ws[13], p[23]); 1439| 3.74k| word3_muladd(&w2, &w1, &w0, ws[14], p[22]); 1440| 3.74k| word3_muladd(&w2, &w1, &w0, ws[15], p[21]); 1441| 3.74k| word3_muladd(&w2, &w1, &w0, ws[16], p[20]); 1442| 3.74k| word3_muladd(&w2, &w1, &w0, ws[17], p[19]); 1443| 3.74k| word3_muladd(&w2, &w1, &w0, ws[18], p[18]); 1444| 3.74k| word3_muladd(&w2, &w1, &w0, ws[19], p[17]); 1445| 3.74k| word3_muladd(&w2, &w1, &w0, ws[20], p[16]); 1446| 3.74k| word3_muladd(&w2, &w1, &w0, ws[21], p[15]); 1447| 3.74k| word3_muladd(&w2, &w1, &w0, ws[22], p[14]); 1448| 3.74k| word3_muladd(&w2, &w1, &w0, ws[23], p[13]); 1449| 3.74k| word3_add(&w2, &w1, &w0, z[36]); 1450| 3.74k| ws[12] = w0; 1451| 3.74k| w0 = w1; 1452| 3.74k| w1 = w2; 1453| 3.74k| w2 = 0; 1454| 3.74k| word3_muladd(&w2, &w1, &w0, ws[14], p[23]); 1455| 3.74k| word3_muladd(&w2, &w1, &w0, ws[15], p[22]); 1456| 3.74k| word3_muladd(&w2, &w1, &w0, ws[16], p[21]); 1457| 3.74k| word3_muladd(&w2, &w1, &w0, ws[17], p[20]); 1458| 3.74k| word3_muladd(&w2, &w1, &w0, ws[18], p[19]); 1459| 3.74k| word3_muladd(&w2, &w1, &w0, ws[19], p[18]); 1460| 3.74k| word3_muladd(&w2, &w1, &w0, ws[20], p[17]); 1461| 3.74k| word3_muladd(&w2, &w1, &w0, ws[21], p[16]); 1462| 3.74k| word3_muladd(&w2, &w1, &w0, ws[22], p[15]); 1463| 3.74k| word3_muladd(&w2, &w1, &w0, ws[23], p[14]); 1464| 3.74k| word3_add(&w2, &w1, &w0, z[37]); 1465| 3.74k| ws[13] = w0; 1466| 3.74k| w0 = w1; 1467| 3.74k| w1 = w2; 1468| 3.74k| w2 = 0; 1469| 3.74k| word3_muladd(&w2, &w1, &w0, ws[15], p[23]); 1470| 3.74k| word3_muladd(&w2, &w1, &w0, ws[16], p[22]); 1471| 3.74k| word3_muladd(&w2, &w1, &w0, ws[17], p[21]); 1472| 3.74k| word3_muladd(&w2, &w1, &w0, ws[18], p[20]); 1473| 3.74k| word3_muladd(&w2, &w1, &w0, ws[19], p[19]); 1474| 3.74k| word3_muladd(&w2, &w1, &w0, ws[20], p[18]); 1475| 3.74k| word3_muladd(&w2, &w1, &w0, ws[21], p[17]); 1476| 3.74k| word3_muladd(&w2, &w1, &w0, ws[22], p[16]); 1477| 3.74k| word3_muladd(&w2, &w1, &w0, ws[23], p[15]); 1478| 3.74k| word3_add(&w2, &w1, &w0, z[38]); 1479| 3.74k| ws[14] = w0; 1480| 3.74k| w0 = w1; 1481| 3.74k| w1 = w2; 1482| 3.74k| w2 = 0; 1483| 3.74k| word3_muladd(&w2, &w1, &w0, ws[16], p[23]); 1484| 3.74k| word3_muladd(&w2, &w1, &w0, ws[17], p[22]); 1485| 3.74k| word3_muladd(&w2, &w1, &w0, ws[18], p[21]); 1486| 3.74k| word3_muladd(&w2, &w1, &w0, ws[19], p[20]); 1487| 3.74k| word3_muladd(&w2, &w1, &w0, ws[20], p[19]); 1488| 3.74k| word3_muladd(&w2, &w1, &w0, ws[21], p[18]); 1489| 3.74k| word3_muladd(&w2, &w1, &w0, ws[22], p[17]); 1490| 3.74k| word3_muladd(&w2, &w1, &w0, ws[23], p[16]); 1491| 3.74k| word3_add(&w2, &w1, &w0, z[39]); 1492| 3.74k| ws[15] = w0; 1493| 3.74k| w0 = w1; 1494| 3.74k| w1 = w2; 1495| 3.74k| w2 = 0; 1496| 3.74k| word3_muladd(&w2, &w1, &w0, ws[17], p[23]); 1497| 3.74k| word3_muladd(&w2, &w1, &w0, ws[18], p[22]); 1498| 3.74k| word3_muladd(&w2, &w1, &w0, ws[19], p[21]); 1499| 3.74k| word3_muladd(&w2, &w1, &w0, ws[20], p[20]); 1500| 3.74k| word3_muladd(&w2, &w1, &w0, ws[21], p[19]); 1501| 3.74k| word3_muladd(&w2, &w1, &w0, ws[22], p[18]); 1502| 3.74k| word3_muladd(&w2, &w1, &w0, ws[23], p[17]); 1503| 3.74k| word3_add(&w2, &w1, &w0, z[40]); 1504| 3.74k| ws[16] = w0; 1505| 3.74k| w0 = w1; 1506| 3.74k| w1 = w2; 1507| 3.74k| w2 = 0; 1508| 3.74k| word3_muladd(&w2, &w1, &w0, ws[18], p[23]); 1509| 3.74k| word3_muladd(&w2, &w1, &w0, ws[19], p[22]); 1510| 3.74k| word3_muladd(&w2, &w1, &w0, ws[20], p[21]); 1511| 3.74k| word3_muladd(&w2, &w1, &w0, ws[21], p[20]); 1512| 3.74k| word3_muladd(&w2, &w1, &w0, ws[22], p[19]); 1513| 3.74k| word3_muladd(&w2, &w1, &w0, ws[23], p[18]); 1514| 3.74k| word3_add(&w2, &w1, &w0, z[41]); 1515| 3.74k| ws[17] = w0; 1516| 3.74k| w0 = w1; 1517| 3.74k| w1 = w2; 1518| 3.74k| w2 = 0; 1519| 3.74k| word3_muladd(&w2, &w1, &w0, ws[19], p[23]); 1520| 3.74k| word3_muladd(&w2, &w1, &w0, ws[20], p[22]); 1521| 3.74k| word3_muladd(&w2, &w1, &w0, ws[21], p[21]); 1522| 3.74k| word3_muladd(&w2, &w1, &w0, ws[22], p[20]); 1523| 3.74k| word3_muladd(&w2, &w1, &w0, ws[23], p[19]); 1524| 3.74k| word3_add(&w2, &w1, &w0, z[42]); 1525| 3.74k| ws[18] = w0; 1526| 3.74k| w0 = w1; 1527| 3.74k| w1 = w2; 1528| 3.74k| w2 = 0; 1529| 3.74k| word3_muladd(&w2, &w1, &w0, ws[20], p[23]); 1530| 3.74k| word3_muladd(&w2, &w1, &w0, ws[21], p[22]); 1531| 3.74k| word3_muladd(&w2, &w1, &w0, ws[22], p[21]); 1532| 3.74k| word3_muladd(&w2, &w1, &w0, ws[23], p[20]); 1533| 3.74k| word3_add(&w2, &w1, &w0, z[43]); 1534| 3.74k| ws[19] = w0; 1535| 3.74k| w0 = w1; 1536| 3.74k| w1 = w2; 1537| 3.74k| w2 = 0; 1538| 3.74k| word3_muladd(&w2, &w1, &w0, ws[21], p[23]); 1539| 3.74k| word3_muladd(&w2, &w1, &w0, ws[22], p[22]); 1540| 3.74k| word3_muladd(&w2, &w1, &w0, ws[23], p[21]); 1541| 3.74k| word3_add(&w2, &w1, &w0, z[44]); 1542| 3.74k| ws[20] = w0; 1543| 3.74k| w0 = w1; 1544| 3.74k| w1 = w2; 1545| 3.74k| w2 = 0; 1546| 3.74k| word3_muladd(&w2, &w1, &w0, ws[22], p[23]); 1547| 3.74k| word3_muladd(&w2, &w1, &w0, ws[23], p[22]); 1548| 3.74k| word3_add(&w2, &w1, &w0, z[45]); 1549| 3.74k| ws[21] = w0; 1550| 3.74k| w0 = w1; 1551| 3.74k| w1 = w2; 1552| 3.74k| w2 = 0; 1553| 3.74k| word3_muladd(&w2, &w1, &w0, ws[23], p[23]); 1554| 3.74k| word3_add(&w2, &w1, &w0, z[46]); 1555| 3.74k| ws[22] = w0; 1556| 3.74k| w0 = w1; 1557| 3.74k| w1 = w2; 1558| 3.74k| w2 = 0; 1559| 3.74k| word3_add(&w2, &w1, &w0, z[47]); 1560| 3.74k| ws[23] = w0; 1561| 3.74k| ws[24] = w1; 1562| 3.74k| word borrow = bigint_sub3(z, ws, 24 + 1, p, 24); 1563| 3.74k| CT::conditional_assign_mem(borrow, z, ws, 24); 1564| 3.74k| clear_mem(z + 24, 24); 1565| 3.74k|} _ZN5Botan20bigint_monty_redc_32EPmPKmmS0_: 1567| 7.65k|void bigint_monty_redc_32(word z[64], const word p[32], word p_dash, word ws[]) { 1568| 7.65k| word w2 = 0, w1 = 0, w0 = 0; 1569| 7.65k| w0 = z[0]; 1570| 7.65k| ws[0] = w0 * p_dash; 1571| 7.65k| word3_muladd(&w2, &w1, &w0, ws[0], p[0]); 1572| 7.65k| w0 = w1; 1573| 7.65k| w1 = w2; 1574| 7.65k| w2 = 0; 1575| 7.65k| word3_muladd(&w2, &w1, &w0, ws[0], p[1]); 1576| 7.65k| word3_add(&w2, &w1, &w0, z[1]); 1577| 7.65k| ws[1] = w0 * p_dash; 1578| 7.65k| word3_muladd(&w2, &w1, &w0, ws[1], p[0]); 1579| 7.65k| w0 = w1; 1580| 7.65k| w1 = w2; 1581| 7.65k| w2 = 0; 1582| 7.65k| word3_muladd(&w2, &w1, &w0, ws[0], p[2]); 1583| 7.65k| word3_muladd(&w2, &w1, &w0, ws[1], p[1]); 1584| 7.65k| word3_add(&w2, &w1, &w0, z[2]); 1585| 7.65k| ws[2] = w0 * p_dash; 1586| 7.65k| word3_muladd(&w2, &w1, &w0, ws[2], p[0]); 1587| 7.65k| w0 = w1; 1588| 7.65k| w1 = w2; 1589| 7.65k| w2 = 0; 1590| 7.65k| word3_muladd(&w2, &w1, &w0, ws[0], p[3]); 1591| 7.65k| word3_muladd(&w2, &w1, &w0, ws[1], p[2]); 1592| 7.65k| word3_muladd(&w2, &w1, &w0, ws[2], p[1]); 1593| 7.65k| word3_add(&w2, &w1, &w0, z[3]); 1594| 7.65k| ws[3] = w0 * p_dash; 1595| 7.65k| word3_muladd(&w2, &w1, &w0, ws[3], p[0]); 1596| 7.65k| w0 = w1; 1597| 7.65k| w1 = w2; 1598| 7.65k| w2 = 0; 1599| 7.65k| word3_muladd(&w2, &w1, &w0, ws[0], p[4]); 1600| 7.65k| word3_muladd(&w2, &w1, &w0, ws[1], p[3]); 1601| 7.65k| word3_muladd(&w2, &w1, &w0, ws[2], p[2]); 1602| 7.65k| word3_muladd(&w2, &w1, &w0, ws[3], p[1]); 1603| 7.65k| word3_add(&w2, &w1, &w0, z[4]); 1604| 7.65k| ws[4] = w0 * p_dash; 1605| 7.65k| word3_muladd(&w2, &w1, &w0, ws[4], p[0]); 1606| 7.65k| w0 = w1; 1607| 7.65k| w1 = w2; 1608| 7.65k| w2 = 0; 1609| 7.65k| word3_muladd(&w2, &w1, &w0, ws[0], p[5]); 1610| 7.65k| word3_muladd(&w2, &w1, &w0, ws[1], p[4]); 1611| 7.65k| word3_muladd(&w2, &w1, &w0, ws[2], p[3]); 1612| 7.65k| word3_muladd(&w2, &w1, &w0, ws[3], p[2]); 1613| 7.65k| word3_muladd(&w2, &w1, &w0, ws[4], p[1]); 1614| 7.65k| word3_add(&w2, &w1, &w0, z[5]); 1615| 7.65k| ws[5] = w0 * p_dash; 1616| 7.65k| word3_muladd(&w2, &w1, &w0, ws[5], p[0]); 1617| 7.65k| w0 = w1; 1618| 7.65k| w1 = w2; 1619| 7.65k| w2 = 0; 1620| 7.65k| word3_muladd(&w2, &w1, &w0, ws[0], p[6]); 1621| 7.65k| word3_muladd(&w2, &w1, &w0, ws[1], p[5]); 1622| 7.65k| word3_muladd(&w2, &w1, &w0, ws[2], p[4]); 1623| 7.65k| word3_muladd(&w2, &w1, &w0, ws[3], p[3]); 1624| 7.65k| word3_muladd(&w2, &w1, &w0, ws[4], p[2]); 1625| 7.65k| word3_muladd(&w2, &w1, &w0, ws[5], p[1]); 1626| 7.65k| word3_add(&w2, &w1, &w0, z[6]); 1627| 7.65k| ws[6] = w0 * p_dash; 1628| 7.65k| word3_muladd(&w2, &w1, &w0, ws[6], p[0]); 1629| 7.65k| w0 = w1; 1630| 7.65k| w1 = w2; 1631| 7.65k| w2 = 0; 1632| 7.65k| word3_muladd(&w2, &w1, &w0, ws[0], p[7]); 1633| 7.65k| word3_muladd(&w2, &w1, &w0, ws[1], p[6]); 1634| 7.65k| word3_muladd(&w2, &w1, &w0, ws[2], p[5]); 1635| 7.65k| word3_muladd(&w2, &w1, &w0, ws[3], p[4]); 1636| 7.65k| word3_muladd(&w2, &w1, &w0, ws[4], p[3]); 1637| 7.65k| word3_muladd(&w2, &w1, &w0, ws[5], p[2]); 1638| 7.65k| word3_muladd(&w2, &w1, &w0, ws[6], p[1]); 1639| 7.65k| word3_add(&w2, &w1, &w0, z[7]); 1640| 7.65k| ws[7] = w0 * p_dash; 1641| 7.65k| word3_muladd(&w2, &w1, &w0, ws[7], p[0]); 1642| 7.65k| w0 = w1; 1643| 7.65k| w1 = w2; 1644| 7.65k| w2 = 0; 1645| 7.65k| word3_muladd(&w2, &w1, &w0, ws[0], p[8]); 1646| 7.65k| word3_muladd(&w2, &w1, &w0, ws[1], p[7]); 1647| 7.65k| word3_muladd(&w2, &w1, &w0, ws[2], p[6]); 1648| 7.65k| word3_muladd(&w2, &w1, &w0, ws[3], p[5]); 1649| 7.65k| word3_muladd(&w2, &w1, &w0, ws[4], p[4]); 1650| 7.65k| word3_muladd(&w2, &w1, &w0, ws[5], p[3]); 1651| 7.65k| word3_muladd(&w2, &w1, &w0, ws[6], p[2]); 1652| 7.65k| word3_muladd(&w2, &w1, &w0, ws[7], p[1]); 1653| 7.65k| word3_add(&w2, &w1, &w0, z[8]); 1654| 7.65k| ws[8] = w0 * p_dash; 1655| 7.65k| word3_muladd(&w2, &w1, &w0, ws[8], p[0]); 1656| 7.65k| w0 = w1; 1657| 7.65k| w1 = w2; 1658| 7.65k| w2 = 0; 1659| 7.65k| word3_muladd(&w2, &w1, &w0, ws[0], p[9]); 1660| 7.65k| word3_muladd(&w2, &w1, &w0, ws[1], p[8]); 1661| 7.65k| word3_muladd(&w2, &w1, &w0, ws[2], p[7]); 1662| 7.65k| word3_muladd(&w2, &w1, &w0, ws[3], p[6]); 1663| 7.65k| word3_muladd(&w2, &w1, &w0, ws[4], p[5]); 1664| 7.65k| word3_muladd(&w2, &w1, &w0, ws[5], p[4]); 1665| 7.65k| word3_muladd(&w2, &w1, &w0, ws[6], p[3]); 1666| 7.65k| word3_muladd(&w2, &w1, &w0, ws[7], p[2]); 1667| 7.65k| word3_muladd(&w2, &w1, &w0, ws[8], p[1]); 1668| 7.65k| word3_add(&w2, &w1, &w0, z[9]); 1669| 7.65k| ws[9] = w0 * p_dash; 1670| 7.65k| word3_muladd(&w2, &w1, &w0, ws[9], p[0]); 1671| 7.65k| w0 = w1; 1672| 7.65k| w1 = w2; 1673| 7.65k| w2 = 0; 1674| 7.65k| word3_muladd(&w2, &w1, &w0, ws[0], p[10]); 1675| 7.65k| word3_muladd(&w2, &w1, &w0, ws[1], p[9]); 1676| 7.65k| word3_muladd(&w2, &w1, &w0, ws[2], p[8]); 1677| 7.65k| word3_muladd(&w2, &w1, &w0, ws[3], p[7]); 1678| 7.65k| word3_muladd(&w2, &w1, &w0, ws[4], p[6]); 1679| 7.65k| word3_muladd(&w2, &w1, &w0, ws[5], p[5]); 1680| 7.65k| word3_muladd(&w2, &w1, &w0, ws[6], p[4]); 1681| 7.65k| word3_muladd(&w2, &w1, &w0, ws[7], p[3]); 1682| 7.65k| word3_muladd(&w2, &w1, &w0, ws[8], p[2]); 1683| 7.65k| word3_muladd(&w2, &w1, &w0, ws[9], p[1]); 1684| 7.65k| word3_add(&w2, &w1, &w0, z[10]); 1685| 7.65k| ws[10] = w0 * p_dash; 1686| 7.65k| word3_muladd(&w2, &w1, &w0, ws[10], p[0]); 1687| 7.65k| w0 = w1; 1688| 7.65k| w1 = w2; 1689| 7.65k| w2 = 0; 1690| 7.65k| word3_muladd(&w2, &w1, &w0, ws[0], p[11]); 1691| 7.65k| word3_muladd(&w2, &w1, &w0, ws[1], p[10]); 1692| 7.65k| word3_muladd(&w2, &w1, &w0, ws[2], p[9]); 1693| 7.65k| word3_muladd(&w2, &w1, &w0, ws[3], p[8]); 1694| 7.65k| word3_muladd(&w2, &w1, &w0, ws[4], p[7]); 1695| 7.65k| word3_muladd(&w2, &w1, &w0, ws[5], p[6]); 1696| 7.65k| word3_muladd(&w2, &w1, &w0, ws[6], p[5]); 1697| 7.65k| word3_muladd(&w2, &w1, &w0, ws[7], p[4]); 1698| 7.65k| word3_muladd(&w2, &w1, &w0, ws[8], p[3]); 1699| 7.65k| word3_muladd(&w2, &w1, &w0, ws[9], p[2]); 1700| 7.65k| word3_muladd(&w2, &w1, &w0, ws[10], p[1]); 1701| 7.65k| word3_add(&w2, &w1, &w0, z[11]); 1702| 7.65k| ws[11] = w0 * p_dash; 1703| 7.65k| word3_muladd(&w2, &w1, &w0, ws[11], p[0]); 1704| 7.65k| w0 = w1; 1705| 7.65k| w1 = w2; 1706| 7.65k| w2 = 0; 1707| 7.65k| word3_muladd(&w2, &w1, &w0, ws[0], p[12]); 1708| 7.65k| word3_muladd(&w2, &w1, &w0, ws[1], p[11]); 1709| 7.65k| word3_muladd(&w2, &w1, &w0, ws[2], p[10]); 1710| 7.65k| word3_muladd(&w2, &w1, &w0, ws[3], p[9]); 1711| 7.65k| word3_muladd(&w2, &w1, &w0, ws[4], p[8]); 1712| 7.65k| word3_muladd(&w2, &w1, &w0, ws[5], p[7]); 1713| 7.65k| word3_muladd(&w2, &w1, &w0, ws[6], p[6]); 1714| 7.65k| word3_muladd(&w2, &w1, &w0, ws[7], p[5]); 1715| 7.65k| word3_muladd(&w2, &w1, &w0, ws[8], p[4]); 1716| 7.65k| word3_muladd(&w2, &w1, &w0, ws[9], p[3]); 1717| 7.65k| word3_muladd(&w2, &w1, &w0, ws[10], p[2]); 1718| 7.65k| word3_muladd(&w2, &w1, &w0, ws[11], p[1]); 1719| 7.65k| word3_add(&w2, &w1, &w0, z[12]); 1720| 7.65k| ws[12] = w0 * p_dash; 1721| 7.65k| word3_muladd(&w2, &w1, &w0, ws[12], p[0]); 1722| 7.65k| w0 = w1; 1723| 7.65k| w1 = w2; 1724| 7.65k| w2 = 0; 1725| 7.65k| word3_muladd(&w2, &w1, &w0, ws[0], p[13]); 1726| 7.65k| word3_muladd(&w2, &w1, &w0, ws[1], p[12]); 1727| 7.65k| word3_muladd(&w2, &w1, &w0, ws[2], p[11]); 1728| 7.65k| word3_muladd(&w2, &w1, &w0, ws[3], p[10]); 1729| 7.65k| word3_muladd(&w2, &w1, &w0, ws[4], p[9]); 1730| 7.65k| word3_muladd(&w2, &w1, &w0, ws[5], p[8]); 1731| 7.65k| word3_muladd(&w2, &w1, &w0, ws[6], p[7]); 1732| 7.65k| word3_muladd(&w2, &w1, &w0, ws[7], p[6]); 1733| 7.65k| word3_muladd(&w2, &w1, &w0, ws[8], p[5]); 1734| 7.65k| word3_muladd(&w2, &w1, &w0, ws[9], p[4]); 1735| 7.65k| word3_muladd(&w2, &w1, &w0, ws[10], p[3]); 1736| 7.65k| word3_muladd(&w2, &w1, &w0, ws[11], p[2]); 1737| 7.65k| word3_muladd(&w2, &w1, &w0, ws[12], p[1]); 1738| 7.65k| word3_add(&w2, &w1, &w0, z[13]); 1739| 7.65k| ws[13] = w0 * p_dash; 1740| 7.65k| word3_muladd(&w2, &w1, &w0, ws[13], p[0]); 1741| 7.65k| w0 = w1; 1742| 7.65k| w1 = w2; 1743| 7.65k| w2 = 0; 1744| 7.65k| word3_muladd(&w2, &w1, &w0, ws[0], p[14]); 1745| 7.65k| word3_muladd(&w2, &w1, &w0, ws[1], p[13]); 1746| 7.65k| word3_muladd(&w2, &w1, &w0, ws[2], p[12]); 1747| 7.65k| word3_muladd(&w2, &w1, &w0, ws[3], p[11]); 1748| 7.65k| word3_muladd(&w2, &w1, &w0, ws[4], p[10]); 1749| 7.65k| word3_muladd(&w2, &w1, &w0, ws[5], p[9]); 1750| 7.65k| word3_muladd(&w2, &w1, &w0, ws[6], p[8]); 1751| 7.65k| word3_muladd(&w2, &w1, &w0, ws[7], p[7]); 1752| 7.65k| word3_muladd(&w2, &w1, &w0, ws[8], p[6]); 1753| 7.65k| word3_muladd(&w2, &w1, &w0, ws[9], p[5]); 1754| 7.65k| word3_muladd(&w2, &w1, &w0, ws[10], p[4]); 1755| 7.65k| word3_muladd(&w2, &w1, &w0, ws[11], p[3]); 1756| 7.65k| word3_muladd(&w2, &w1, &w0, ws[12], p[2]); 1757| 7.65k| word3_muladd(&w2, &w1, &w0, ws[13], p[1]); 1758| 7.65k| word3_add(&w2, &w1, &w0, z[14]); 1759| 7.65k| ws[14] = w0 * p_dash; 1760| 7.65k| word3_muladd(&w2, &w1, &w0, ws[14], p[0]); 1761| 7.65k| w0 = w1; 1762| 7.65k| w1 = w2; 1763| 7.65k| w2 = 0; 1764| 7.65k| word3_muladd(&w2, &w1, &w0, ws[0], p[15]); 1765| 7.65k| word3_muladd(&w2, &w1, &w0, ws[1], p[14]); 1766| 7.65k| word3_muladd(&w2, &w1, &w0, ws[2], p[13]); 1767| 7.65k| word3_muladd(&w2, &w1, &w0, ws[3], p[12]); 1768| 7.65k| word3_muladd(&w2, &w1, &w0, ws[4], p[11]); 1769| 7.65k| word3_muladd(&w2, &w1, &w0, ws[5], p[10]); 1770| 7.65k| word3_muladd(&w2, &w1, &w0, ws[6], p[9]); 1771| 7.65k| word3_muladd(&w2, &w1, &w0, ws[7], p[8]); 1772| 7.65k| word3_muladd(&w2, &w1, &w0, ws[8], p[7]); 1773| 7.65k| word3_muladd(&w2, &w1, &w0, ws[9], p[6]); 1774| 7.65k| word3_muladd(&w2, &w1, &w0, ws[10], p[5]); 1775| 7.65k| word3_muladd(&w2, &w1, &w0, ws[11], p[4]); 1776| 7.65k| word3_muladd(&w2, &w1, &w0, ws[12], p[3]); 1777| 7.65k| word3_muladd(&w2, &w1, &w0, ws[13], p[2]); 1778| 7.65k| word3_muladd(&w2, &w1, &w0, ws[14], p[1]); 1779| 7.65k| word3_add(&w2, &w1, &w0, z[15]); 1780| 7.65k| ws[15] = w0 * p_dash; 1781| 7.65k| word3_muladd(&w2, &w1, &w0, ws[15], p[0]); 1782| 7.65k| w0 = w1; 1783| 7.65k| w1 = w2; 1784| 7.65k| w2 = 0; 1785| 7.65k| word3_muladd(&w2, &w1, &w0, ws[0], p[16]); 1786| 7.65k| word3_muladd(&w2, &w1, &w0, ws[1], p[15]); 1787| 7.65k| word3_muladd(&w2, &w1, &w0, ws[2], p[14]); 1788| 7.65k| word3_muladd(&w2, &w1, &w0, ws[3], p[13]); 1789| 7.65k| word3_muladd(&w2, &w1, &w0, ws[4], p[12]); 1790| 7.65k| word3_muladd(&w2, &w1, &w0, ws[5], p[11]); 1791| 7.65k| word3_muladd(&w2, &w1, &w0, ws[6], p[10]); 1792| 7.65k| word3_muladd(&w2, &w1, &w0, ws[7], p[9]); 1793| 7.65k| word3_muladd(&w2, &w1, &w0, ws[8], p[8]); 1794| 7.65k| word3_muladd(&w2, &w1, &w0, ws[9], p[7]); 1795| 7.65k| word3_muladd(&w2, &w1, &w0, ws[10], p[6]); 1796| 7.65k| word3_muladd(&w2, &w1, &w0, ws[11], p[5]); 1797| 7.65k| word3_muladd(&w2, &w1, &w0, ws[12], p[4]); 1798| 7.65k| word3_muladd(&w2, &w1, &w0, ws[13], p[3]); 1799| 7.65k| word3_muladd(&w2, &w1, &w0, ws[14], p[2]); 1800| 7.65k| word3_muladd(&w2, &w1, &w0, ws[15], p[1]); 1801| 7.65k| word3_add(&w2, &w1, &w0, z[16]); 1802| 7.65k| ws[16] = w0 * p_dash; 1803| 7.65k| word3_muladd(&w2, &w1, &w0, ws[16], p[0]); 1804| 7.65k| w0 = w1; 1805| 7.65k| w1 = w2; 1806| 7.65k| w2 = 0; 1807| 7.65k| word3_muladd(&w2, &w1, &w0, ws[0], p[17]); 1808| 7.65k| word3_muladd(&w2, &w1, &w0, ws[1], p[16]); 1809| 7.65k| word3_muladd(&w2, &w1, &w0, ws[2], p[15]); 1810| 7.65k| word3_muladd(&w2, &w1, &w0, ws[3], p[14]); 1811| 7.65k| word3_muladd(&w2, &w1, &w0, ws[4], p[13]); 1812| 7.65k| word3_muladd(&w2, &w1, &w0, ws[5], p[12]); 1813| 7.65k| word3_muladd(&w2, &w1, &w0, ws[6], p[11]); 1814| 7.65k| word3_muladd(&w2, &w1, &w0, ws[7], p[10]); 1815| 7.65k| word3_muladd(&w2, &w1, &w0, ws[8], p[9]); 1816| 7.65k| word3_muladd(&w2, &w1, &w0, ws[9], p[8]); 1817| 7.65k| word3_muladd(&w2, &w1, &w0, ws[10], p[7]); 1818| 7.65k| word3_muladd(&w2, &w1, &w0, ws[11], p[6]); 1819| 7.65k| word3_muladd(&w2, &w1, &w0, ws[12], p[5]); 1820| 7.65k| word3_muladd(&w2, &w1, &w0, ws[13], p[4]); 1821| 7.65k| word3_muladd(&w2, &w1, &w0, ws[14], p[3]); 1822| 7.65k| word3_muladd(&w2, &w1, &w0, ws[15], p[2]); 1823| 7.65k| word3_muladd(&w2, &w1, &w0, ws[16], p[1]); 1824| 7.65k| word3_add(&w2, &w1, &w0, z[17]); 1825| 7.65k| ws[17] = w0 * p_dash; 1826| 7.65k| word3_muladd(&w2, &w1, &w0, ws[17], p[0]); 1827| 7.65k| w0 = w1; 1828| 7.65k| w1 = w2; 1829| 7.65k| w2 = 0; 1830| 7.65k| word3_muladd(&w2, &w1, &w0, ws[0], p[18]); 1831| 7.65k| word3_muladd(&w2, &w1, &w0, ws[1], p[17]); 1832| 7.65k| word3_muladd(&w2, &w1, &w0, ws[2], p[16]); 1833| 7.65k| word3_muladd(&w2, &w1, &w0, ws[3], p[15]); 1834| 7.65k| word3_muladd(&w2, &w1, &w0, ws[4], p[14]); 1835| 7.65k| word3_muladd(&w2, &w1, &w0, ws[5], p[13]); 1836| 7.65k| word3_muladd(&w2, &w1, &w0, ws[6], p[12]); 1837| 7.65k| word3_muladd(&w2, &w1, &w0, ws[7], p[11]); 1838| 7.65k| word3_muladd(&w2, &w1, &w0, ws[8], p[10]); 1839| 7.65k| word3_muladd(&w2, &w1, &w0, ws[9], p[9]); 1840| 7.65k| word3_muladd(&w2, &w1, &w0, ws[10], p[8]); 1841| 7.65k| word3_muladd(&w2, &w1, &w0, ws[11], p[7]); 1842| 7.65k| word3_muladd(&w2, &w1, &w0, ws[12], p[6]); 1843| 7.65k| word3_muladd(&w2, &w1, &w0, ws[13], p[5]); 1844| 7.65k| word3_muladd(&w2, &w1, &w0, ws[14], p[4]); 1845| 7.65k| word3_muladd(&w2, &w1, &w0, ws[15], p[3]); 1846| 7.65k| word3_muladd(&w2, &w1, &w0, ws[16], p[2]); 1847| 7.65k| word3_muladd(&w2, &w1, &w0, ws[17], p[1]); 1848| 7.65k| word3_add(&w2, &w1, &w0, z[18]); 1849| 7.65k| ws[18] = w0 * p_dash; 1850| 7.65k| word3_muladd(&w2, &w1, &w0, ws[18], p[0]); 1851| 7.65k| w0 = w1; 1852| 7.65k| w1 = w2; 1853| 7.65k| w2 = 0; 1854| 7.65k| word3_muladd(&w2, &w1, &w0, ws[0], p[19]); 1855| 7.65k| word3_muladd(&w2, &w1, &w0, ws[1], p[18]); 1856| 7.65k| word3_muladd(&w2, &w1, &w0, ws[2], p[17]); 1857| 7.65k| word3_muladd(&w2, &w1, &w0, ws[3], p[16]); 1858| 7.65k| word3_muladd(&w2, &w1, &w0, ws[4], p[15]); 1859| 7.65k| word3_muladd(&w2, &w1, &w0, ws[5], p[14]); 1860| 7.65k| word3_muladd(&w2, &w1, &w0, ws[6], p[13]); 1861| 7.65k| word3_muladd(&w2, &w1, &w0, ws[7], p[12]); 1862| 7.65k| word3_muladd(&w2, &w1, &w0, ws[8], p[11]); 1863| 7.65k| word3_muladd(&w2, &w1, &w0, ws[9], p[10]); 1864| 7.65k| word3_muladd(&w2, &w1, &w0, ws[10], p[9]); 1865| 7.65k| word3_muladd(&w2, &w1, &w0, ws[11], p[8]); 1866| 7.65k| word3_muladd(&w2, &w1, &w0, ws[12], p[7]); 1867| 7.65k| word3_muladd(&w2, &w1, &w0, ws[13], p[6]); 1868| 7.65k| word3_muladd(&w2, &w1, &w0, ws[14], p[5]); 1869| 7.65k| word3_muladd(&w2, &w1, &w0, ws[15], p[4]); 1870| 7.65k| word3_muladd(&w2, &w1, &w0, ws[16], p[3]); 1871| 7.65k| word3_muladd(&w2, &w1, &w0, ws[17], p[2]); 1872| 7.65k| word3_muladd(&w2, &w1, &w0, ws[18], p[1]); 1873| 7.65k| word3_add(&w2, &w1, &w0, z[19]); 1874| 7.65k| ws[19] = w0 * p_dash; 1875| 7.65k| word3_muladd(&w2, &w1, &w0, ws[19], p[0]); 1876| 7.65k| w0 = w1; 1877| 7.65k| w1 = w2; 1878| 7.65k| w2 = 0; 1879| 7.65k| word3_muladd(&w2, &w1, &w0, ws[0], p[20]); 1880| 7.65k| word3_muladd(&w2, &w1, &w0, ws[1], p[19]); 1881| 7.65k| word3_muladd(&w2, &w1, &w0, ws[2], p[18]); 1882| 7.65k| word3_muladd(&w2, &w1, &w0, ws[3], p[17]); 1883| 7.65k| word3_muladd(&w2, &w1, &w0, ws[4], p[16]); 1884| 7.65k| word3_muladd(&w2, &w1, &w0, ws[5], p[15]); 1885| 7.65k| word3_muladd(&w2, &w1, &w0, ws[6], p[14]); 1886| 7.65k| word3_muladd(&w2, &w1, &w0, ws[7], p[13]); 1887| 7.65k| word3_muladd(&w2, &w1, &w0, ws[8], p[12]); 1888| 7.65k| word3_muladd(&w2, &w1, &w0, ws[9], p[11]); 1889| 7.65k| word3_muladd(&w2, &w1, &w0, ws[10], p[10]); 1890| 7.65k| word3_muladd(&w2, &w1, &w0, ws[11], p[9]); 1891| 7.65k| word3_muladd(&w2, &w1, &w0, ws[12], p[8]); 1892| 7.65k| word3_muladd(&w2, &w1, &w0, ws[13], p[7]); 1893| 7.65k| word3_muladd(&w2, &w1, &w0, ws[14], p[6]); 1894| 7.65k| word3_muladd(&w2, &w1, &w0, ws[15], p[5]); 1895| 7.65k| word3_muladd(&w2, &w1, &w0, ws[16], p[4]); 1896| 7.65k| word3_muladd(&w2, &w1, &w0, ws[17], p[3]); 1897| 7.65k| word3_muladd(&w2, &w1, &w0, ws[18], p[2]); 1898| 7.65k| word3_muladd(&w2, &w1, &w0, ws[19], p[1]); 1899| 7.65k| word3_add(&w2, &w1, &w0, z[20]); 1900| 7.65k| ws[20] = w0 * p_dash; 1901| 7.65k| word3_muladd(&w2, &w1, &w0, ws[20], p[0]); 1902| 7.65k| w0 = w1; 1903| 7.65k| w1 = w2; 1904| 7.65k| w2 = 0; 1905| 7.65k| word3_muladd(&w2, &w1, &w0, ws[0], p[21]); 1906| 7.65k| word3_muladd(&w2, &w1, &w0, ws[1], p[20]); 1907| 7.65k| word3_muladd(&w2, &w1, &w0, ws[2], p[19]); 1908| 7.65k| word3_muladd(&w2, &w1, &w0, ws[3], p[18]); 1909| 7.65k| word3_muladd(&w2, &w1, &w0, ws[4], p[17]); 1910| 7.65k| word3_muladd(&w2, &w1, &w0, ws[5], p[16]); 1911| 7.65k| word3_muladd(&w2, &w1, &w0, ws[6], p[15]); 1912| 7.65k| word3_muladd(&w2, &w1, &w0, ws[7], p[14]); 1913| 7.65k| word3_muladd(&w2, &w1, &w0, ws[8], p[13]); 1914| 7.65k| word3_muladd(&w2, &w1, &w0, ws[9], p[12]); 1915| 7.65k| word3_muladd(&w2, &w1, &w0, ws[10], p[11]); 1916| 7.65k| word3_muladd(&w2, &w1, &w0, ws[11], p[10]); 1917| 7.65k| word3_muladd(&w2, &w1, &w0, ws[12], p[9]); 1918| 7.65k| word3_muladd(&w2, &w1, &w0, ws[13], p[8]); 1919| 7.65k| word3_muladd(&w2, &w1, &w0, ws[14], p[7]); 1920| 7.65k| word3_muladd(&w2, &w1, &w0, ws[15], p[6]); 1921| 7.65k| word3_muladd(&w2, &w1, &w0, ws[16], p[5]); 1922| 7.65k| word3_muladd(&w2, &w1, &w0, ws[17], p[4]); 1923| 7.65k| word3_muladd(&w2, &w1, &w0, ws[18], p[3]); 1924| 7.65k| word3_muladd(&w2, &w1, &w0, ws[19], p[2]); 1925| 7.65k| word3_muladd(&w2, &w1, &w0, ws[20], p[1]); 1926| 7.65k| word3_add(&w2, &w1, &w0, z[21]); 1927| 7.65k| ws[21] = w0 * p_dash; 1928| 7.65k| word3_muladd(&w2, &w1, &w0, ws[21], p[0]); 1929| 7.65k| w0 = w1; 1930| 7.65k| w1 = w2; 1931| 7.65k| w2 = 0; 1932| 7.65k| word3_muladd(&w2, &w1, &w0, ws[0], p[22]); 1933| 7.65k| word3_muladd(&w2, &w1, &w0, ws[1], p[21]); 1934| 7.65k| word3_muladd(&w2, &w1, &w0, ws[2], p[20]); 1935| 7.65k| word3_muladd(&w2, &w1, &w0, ws[3], p[19]); 1936| 7.65k| word3_muladd(&w2, &w1, &w0, ws[4], p[18]); 1937| 7.65k| word3_muladd(&w2, &w1, &w0, ws[5], p[17]); 1938| 7.65k| word3_muladd(&w2, &w1, &w0, ws[6], p[16]); 1939| 7.65k| word3_muladd(&w2, &w1, &w0, ws[7], p[15]); 1940| 7.65k| word3_muladd(&w2, &w1, &w0, ws[8], p[14]); 1941| 7.65k| word3_muladd(&w2, &w1, &w0, ws[9], p[13]); 1942| 7.65k| word3_muladd(&w2, &w1, &w0, ws[10], p[12]); 1943| 7.65k| word3_muladd(&w2, &w1, &w0, ws[11], p[11]); 1944| 7.65k| word3_muladd(&w2, &w1, &w0, ws[12], p[10]); 1945| 7.65k| word3_muladd(&w2, &w1, &w0, ws[13], p[9]); 1946| 7.65k| word3_muladd(&w2, &w1, &w0, ws[14], p[8]); 1947| 7.65k| word3_muladd(&w2, &w1, &w0, ws[15], p[7]); 1948| 7.65k| word3_muladd(&w2, &w1, &w0, ws[16], p[6]); 1949| 7.65k| word3_muladd(&w2, &w1, &w0, ws[17], p[5]); 1950| 7.65k| word3_muladd(&w2, &w1, &w0, ws[18], p[4]); 1951| 7.65k| word3_muladd(&w2, &w1, &w0, ws[19], p[3]); 1952| 7.65k| word3_muladd(&w2, &w1, &w0, ws[20], p[2]); 1953| 7.65k| word3_muladd(&w2, &w1, &w0, ws[21], p[1]); 1954| 7.65k| word3_add(&w2, &w1, &w0, z[22]); 1955| 7.65k| ws[22] = w0 * p_dash; 1956| 7.65k| word3_muladd(&w2, &w1, &w0, ws[22], p[0]); 1957| 7.65k| w0 = w1; 1958| 7.65k| w1 = w2; 1959| 7.65k| w2 = 0; 1960| 7.65k| word3_muladd(&w2, &w1, &w0, ws[0], p[23]); 1961| 7.65k| word3_muladd(&w2, &w1, &w0, ws[1], p[22]); 1962| 7.65k| word3_muladd(&w2, &w1, &w0, ws[2], p[21]); 1963| 7.65k| word3_muladd(&w2, &w1, &w0, ws[3], p[20]); 1964| 7.65k| word3_muladd(&w2, &w1, &w0, ws[4], p[19]); 1965| 7.65k| word3_muladd(&w2, &w1, &w0, ws[5], p[18]); 1966| 7.65k| word3_muladd(&w2, &w1, &w0, ws[6], p[17]); 1967| 7.65k| word3_muladd(&w2, &w1, &w0, ws[7], p[16]); 1968| 7.65k| word3_muladd(&w2, &w1, &w0, ws[8], p[15]); 1969| 7.65k| word3_muladd(&w2, &w1, &w0, ws[9], p[14]); 1970| 7.65k| word3_muladd(&w2, &w1, &w0, ws[10], p[13]); 1971| 7.65k| word3_muladd(&w2, &w1, &w0, ws[11], p[12]); 1972| 7.65k| word3_muladd(&w2, &w1, &w0, ws[12], p[11]); 1973| 7.65k| word3_muladd(&w2, &w1, &w0, ws[13], p[10]); 1974| 7.65k| word3_muladd(&w2, &w1, &w0, ws[14], p[9]); 1975| 7.65k| word3_muladd(&w2, &w1, &w0, ws[15], p[8]); 1976| 7.65k| word3_muladd(&w2, &w1, &w0, ws[16], p[7]); 1977| 7.65k| word3_muladd(&w2, &w1, &w0, ws[17], p[6]); 1978| 7.65k| word3_muladd(&w2, &w1, &w0, ws[18], p[5]); 1979| 7.65k| word3_muladd(&w2, &w1, &w0, ws[19], p[4]); 1980| 7.65k| word3_muladd(&w2, &w1, &w0, ws[20], p[3]); 1981| 7.65k| word3_muladd(&w2, &w1, &w0, ws[21], p[2]); 1982| 7.65k| word3_muladd(&w2, &w1, &w0, ws[22], p[1]); 1983| 7.65k| word3_add(&w2, &w1, &w0, z[23]); 1984| 7.65k| ws[23] = w0 * p_dash; 1985| 7.65k| word3_muladd(&w2, &w1, &w0, ws[23], p[0]); 1986| 7.65k| w0 = w1; 1987| 7.65k| w1 = w2; 1988| 7.65k| w2 = 0; 1989| 7.65k| word3_muladd(&w2, &w1, &w0, ws[0], p[24]); 1990| 7.65k| word3_muladd(&w2, &w1, &w0, ws[1], p[23]); 1991| 7.65k| word3_muladd(&w2, &w1, &w0, ws[2], p[22]); 1992| 7.65k| word3_muladd(&w2, &w1, &w0, ws[3], p[21]); 1993| 7.65k| word3_muladd(&w2, &w1, &w0, ws[4], p[20]); 1994| 7.65k| word3_muladd(&w2, &w1, &w0, ws[5], p[19]); 1995| 7.65k| word3_muladd(&w2, &w1, &w0, ws[6], p[18]); 1996| 7.65k| word3_muladd(&w2, &w1, &w0, ws[7], p[17]); 1997| 7.65k| word3_muladd(&w2, &w1, &w0, ws[8], p[16]); 1998| 7.65k| word3_muladd(&w2, &w1, &w0, ws[9], p[15]); 1999| 7.65k| word3_muladd(&w2, &w1, &w0, ws[10], p[14]); 2000| 7.65k| word3_muladd(&w2, &w1, &w0, ws[11], p[13]); 2001| 7.65k| word3_muladd(&w2, &w1, &w0, ws[12], p[12]); 2002| 7.65k| word3_muladd(&w2, &w1, &w0, ws[13], p[11]); 2003| 7.65k| word3_muladd(&w2, &w1, &w0, ws[14], p[10]); 2004| 7.65k| word3_muladd(&w2, &w1, &w0, ws[15], p[9]); 2005| 7.65k| word3_muladd(&w2, &w1, &w0, ws[16], p[8]); 2006| 7.65k| word3_muladd(&w2, &w1, &w0, ws[17], p[7]); 2007| 7.65k| word3_muladd(&w2, &w1, &w0, ws[18], p[6]); 2008| 7.65k| word3_muladd(&w2, &w1, &w0, ws[19], p[5]); 2009| 7.65k| word3_muladd(&w2, &w1, &w0, ws[20], p[4]); 2010| 7.65k| word3_muladd(&w2, &w1, &w0, ws[21], p[3]); 2011| 7.65k| word3_muladd(&w2, &w1, &w0, ws[22], p[2]); 2012| 7.65k| word3_muladd(&w2, &w1, &w0, ws[23], p[1]); 2013| 7.65k| word3_add(&w2, &w1, &w0, z[24]); 2014| 7.65k| ws[24] = w0 * p_dash; 2015| 7.65k| word3_muladd(&w2, &w1, &w0, ws[24], p[0]); 2016| 7.65k| w0 = w1; 2017| 7.65k| w1 = w2; 2018| 7.65k| w2 = 0; 2019| 7.65k| word3_muladd(&w2, &w1, &w0, ws[0], p[25]); 2020| 7.65k| word3_muladd(&w2, &w1, &w0, ws[1], p[24]); 2021| 7.65k| word3_muladd(&w2, &w1, &w0, ws[2], p[23]); 2022| 7.65k| word3_muladd(&w2, &w1, &w0, ws[3], p[22]); 2023| 7.65k| word3_muladd(&w2, &w1, &w0, ws[4], p[21]); 2024| 7.65k| word3_muladd(&w2, &w1, &w0, ws[5], p[20]); 2025| 7.65k| word3_muladd(&w2, &w1, &w0, ws[6], p[19]); 2026| 7.65k| word3_muladd(&w2, &w1, &w0, ws[7], p[18]); 2027| 7.65k| word3_muladd(&w2, &w1, &w0, ws[8], p[17]); 2028| 7.65k| word3_muladd(&w2, &w1, &w0, ws[9], p[16]); 2029| 7.65k| word3_muladd(&w2, &w1, &w0, ws[10], p[15]); 2030| 7.65k| word3_muladd(&w2, &w1, &w0, ws[11], p[14]); 2031| 7.65k| word3_muladd(&w2, &w1, &w0, ws[12], p[13]); 2032| 7.65k| word3_muladd(&w2, &w1, &w0, ws[13], p[12]); 2033| 7.65k| word3_muladd(&w2, &w1, &w0, ws[14], p[11]); 2034| 7.65k| word3_muladd(&w2, &w1, &w0, ws[15], p[10]); 2035| 7.65k| word3_muladd(&w2, &w1, &w0, ws[16], p[9]); 2036| 7.65k| word3_muladd(&w2, &w1, &w0, ws[17], p[8]); 2037| 7.65k| word3_muladd(&w2, &w1, &w0, ws[18], p[7]); 2038| 7.65k| word3_muladd(&w2, &w1, &w0, ws[19], p[6]); 2039| 7.65k| word3_muladd(&w2, &w1, &w0, ws[20], p[5]); 2040| 7.65k| word3_muladd(&w2, &w1, &w0, ws[21], p[4]); 2041| 7.65k| word3_muladd(&w2, &w1, &w0, ws[22], p[3]); 2042| 7.65k| word3_muladd(&w2, &w1, &w0, ws[23], p[2]); 2043| 7.65k| word3_muladd(&w2, &w1, &w0, ws[24], p[1]); 2044| 7.65k| word3_add(&w2, &w1, &w0, z[25]); 2045| 7.65k| ws[25] = w0 * p_dash; 2046| 7.65k| word3_muladd(&w2, &w1, &w0, ws[25], p[0]); 2047| 7.65k| w0 = w1; 2048| 7.65k| w1 = w2; 2049| 7.65k| w2 = 0; 2050| 7.65k| word3_muladd(&w2, &w1, &w0, ws[0], p[26]); 2051| 7.65k| word3_muladd(&w2, &w1, &w0, ws[1], p[25]); 2052| 7.65k| word3_muladd(&w2, &w1, &w0, ws[2], p[24]); 2053| 7.65k| word3_muladd(&w2, &w1, &w0, ws[3], p[23]); 2054| 7.65k| word3_muladd(&w2, &w1, &w0, ws[4], p[22]); 2055| 7.65k| word3_muladd(&w2, &w1, &w0, ws[5], p[21]); 2056| 7.65k| word3_muladd(&w2, &w1, &w0, ws[6], p[20]); 2057| 7.65k| word3_muladd(&w2, &w1, &w0, ws[7], p[19]); 2058| 7.65k| word3_muladd(&w2, &w1, &w0, ws[8], p[18]); 2059| 7.65k| word3_muladd(&w2, &w1, &w0, ws[9], p[17]); 2060| 7.65k| word3_muladd(&w2, &w1, &w0, ws[10], p[16]); 2061| 7.65k| word3_muladd(&w2, &w1, &w0, ws[11], p[15]); 2062| 7.65k| word3_muladd(&w2, &w1, &w0, ws[12], p[14]); 2063| 7.65k| word3_muladd(&w2, &w1, &w0, ws[13], p[13]); 2064| 7.65k| word3_muladd(&w2, &w1, &w0, ws[14], p[12]); 2065| 7.65k| word3_muladd(&w2, &w1, &w0, ws[15], p[11]); 2066| 7.65k| word3_muladd(&w2, &w1, &w0, ws[16], p[10]); 2067| 7.65k| word3_muladd(&w2, &w1, &w0, ws[17], p[9]); 2068| 7.65k| word3_muladd(&w2, &w1, &w0, ws[18], p[8]); 2069| 7.65k| word3_muladd(&w2, &w1, &w0, ws[19], p[7]); 2070| 7.65k| word3_muladd(&w2, &w1, &w0, ws[20], p[6]); 2071| 7.65k| word3_muladd(&w2, &w1, &w0, ws[21], p[5]); 2072| 7.65k| word3_muladd(&w2, &w1, &w0, ws[22], p[4]); 2073| 7.65k| word3_muladd(&w2, &w1, &w0, ws[23], p[3]); 2074| 7.65k| word3_muladd(&w2, &w1, &w0, ws[24], p[2]); 2075| 7.65k| word3_muladd(&w2, &w1, &w0, ws[25], p[1]); 2076| 7.65k| word3_add(&w2, &w1, &w0, z[26]); 2077| 7.65k| ws[26] = w0 * p_dash; 2078| 7.65k| word3_muladd(&w2, &w1, &w0, ws[26], p[0]); 2079| 7.65k| w0 = w1; 2080| 7.65k| w1 = w2; 2081| 7.65k| w2 = 0; 2082| 7.65k| word3_muladd(&w2, &w1, &w0, ws[0], p[27]); 2083| 7.65k| word3_muladd(&w2, &w1, &w0, ws[1], p[26]); 2084| 7.65k| word3_muladd(&w2, &w1, &w0, ws[2], p[25]); 2085| 7.65k| word3_muladd(&w2, &w1, &w0, ws[3], p[24]); 2086| 7.65k| word3_muladd(&w2, &w1, &w0, ws[4], p[23]); 2087| 7.65k| word3_muladd(&w2, &w1, &w0, ws[5], p[22]); 2088| 7.65k| word3_muladd(&w2, &w1, &w0, ws[6], p[21]); 2089| 7.65k| word3_muladd(&w2, &w1, &w0, ws[7], p[20]); 2090| 7.65k| word3_muladd(&w2, &w1, &w0, ws[8], p[19]); 2091| 7.65k| word3_muladd(&w2, &w1, &w0, ws[9], p[18]); 2092| 7.65k| word3_muladd(&w2, &w1, &w0, ws[10], p[17]); 2093| 7.65k| word3_muladd(&w2, &w1, &w0, ws[11], p[16]); 2094| 7.65k| word3_muladd(&w2, &w1, &w0, ws[12], p[15]); 2095| 7.65k| word3_muladd(&w2, &w1, &w0, ws[13], p[14]); 2096| 7.65k| word3_muladd(&w2, &w1, &w0, ws[14], p[13]); 2097| 7.65k| word3_muladd(&w2, &w1, &w0, ws[15], p[12]); 2098| 7.65k| word3_muladd(&w2, &w1, &w0, ws[16], p[11]); 2099| 7.65k| word3_muladd(&w2, &w1, &w0, ws[17], p[10]); 2100| 7.65k| word3_muladd(&w2, &w1, &w0, ws[18], p[9]); 2101| 7.65k| word3_muladd(&w2, &w1, &w0, ws[19], p[8]); 2102| 7.65k| word3_muladd(&w2, &w1, &w0, ws[20], p[7]); 2103| 7.65k| word3_muladd(&w2, &w1, &w0, ws[21], p[6]); 2104| 7.65k| word3_muladd(&w2, &w1, &w0, ws[22], p[5]); 2105| 7.65k| word3_muladd(&w2, &w1, &w0, ws[23], p[4]); 2106| 7.65k| word3_muladd(&w2, &w1, &w0, ws[24], p[3]); 2107| 7.65k| word3_muladd(&w2, &w1, &w0, ws[25], p[2]); 2108| 7.65k| word3_muladd(&w2, &w1, &w0, ws[26], p[1]); 2109| 7.65k| word3_add(&w2, &w1, &w0, z[27]); 2110| 7.65k| ws[27] = w0 * p_dash; 2111| 7.65k| word3_muladd(&w2, &w1, &w0, ws[27], p[0]); 2112| 7.65k| w0 = w1; 2113| 7.65k| w1 = w2; 2114| 7.65k| w2 = 0; 2115| 7.65k| word3_muladd(&w2, &w1, &w0, ws[0], p[28]); 2116| 7.65k| word3_muladd(&w2, &w1, &w0, ws[1], p[27]); 2117| 7.65k| word3_muladd(&w2, &w1, &w0, ws[2], p[26]); 2118| 7.65k| word3_muladd(&w2, &w1, &w0, ws[3], p[25]); 2119| 7.65k| word3_muladd(&w2, &w1, &w0, ws[4], p[24]); 2120| 7.65k| word3_muladd(&w2, &w1, &w0, ws[5], p[23]); 2121| 7.65k| word3_muladd(&w2, &w1, &w0, ws[6], p[22]); 2122| 7.65k| word3_muladd(&w2, &w1, &w0, ws[7], p[21]); 2123| 7.65k| word3_muladd(&w2, &w1, &w0, ws[8], p[20]); 2124| 7.65k| word3_muladd(&w2, &w1, &w0, ws[9], p[19]); 2125| 7.65k| word3_muladd(&w2, &w1, &w0, ws[10], p[18]); 2126| 7.65k| word3_muladd(&w2, &w1, &w0, ws[11], p[17]); 2127| 7.65k| word3_muladd(&w2, &w1, &w0, ws[12], p[16]); 2128| 7.65k| word3_muladd(&w2, &w1, &w0, ws[13], p[15]); 2129| 7.65k| word3_muladd(&w2, &w1, &w0, ws[14], p[14]); 2130| 7.65k| word3_muladd(&w2, &w1, &w0, ws[15], p[13]); 2131| 7.65k| word3_muladd(&w2, &w1, &w0, ws[16], p[12]); 2132| 7.65k| word3_muladd(&w2, &w1, &w0, ws[17], p[11]); 2133| 7.65k| word3_muladd(&w2, &w1, &w0, ws[18], p[10]); 2134| 7.65k| word3_muladd(&w2, &w1, &w0, ws[19], p[9]); 2135| 7.65k| word3_muladd(&w2, &w1, &w0, ws[20], p[8]); 2136| 7.65k| word3_muladd(&w2, &w1, &w0, ws[21], p[7]); 2137| 7.65k| word3_muladd(&w2, &w1, &w0, ws[22], p[6]); 2138| 7.65k| word3_muladd(&w2, &w1, &w0, ws[23], p[5]); 2139| 7.65k| word3_muladd(&w2, &w1, &w0, ws[24], p[4]); 2140| 7.65k| word3_muladd(&w2, &w1, &w0, ws[25], p[3]); 2141| 7.65k| word3_muladd(&w2, &w1, &w0, ws[26], p[2]); 2142| 7.65k| word3_muladd(&w2, &w1, &w0, ws[27], p[1]); 2143| 7.65k| word3_add(&w2, &w1, &w0, z[28]); 2144| 7.65k| ws[28] = w0 * p_dash; 2145| 7.65k| word3_muladd(&w2, &w1, &w0, ws[28], p[0]); 2146| 7.65k| w0 = w1; 2147| 7.65k| w1 = w2; 2148| 7.65k| w2 = 0; 2149| 7.65k| word3_muladd(&w2, &w1, &w0, ws[0], p[29]); 2150| 7.65k| word3_muladd(&w2, &w1, &w0, ws[1], p[28]); 2151| 7.65k| word3_muladd(&w2, &w1, &w0, ws[2], p[27]); 2152| 7.65k| word3_muladd(&w2, &w1, &w0, ws[3], p[26]); 2153| 7.65k| word3_muladd(&w2, &w1, &w0, ws[4], p[25]); 2154| 7.65k| word3_muladd(&w2, &w1, &w0, ws[5], p[24]); 2155| 7.65k| word3_muladd(&w2, &w1, &w0, ws[6], p[23]); 2156| 7.65k| word3_muladd(&w2, &w1, &w0, ws[7], p[22]); 2157| 7.65k| word3_muladd(&w2, &w1, &w0, ws[8], p[21]); 2158| 7.65k| word3_muladd(&w2, &w1, &w0, ws[9], p[20]); 2159| 7.65k| word3_muladd(&w2, &w1, &w0, ws[10], p[19]); 2160| 7.65k| word3_muladd(&w2, &w1, &w0, ws[11], p[18]); 2161| 7.65k| word3_muladd(&w2, &w1, &w0, ws[12], p[17]); 2162| 7.65k| word3_muladd(&w2, &w1, &w0, ws[13], p[16]); 2163| 7.65k| word3_muladd(&w2, &w1, &w0, ws[14], p[15]); 2164| 7.65k| word3_muladd(&w2, &w1, &w0, ws[15], p[14]); 2165| 7.65k| word3_muladd(&w2, &w1, &w0, ws[16], p[13]); 2166| 7.65k| word3_muladd(&w2, &w1, &w0, ws[17], p[12]); 2167| 7.65k| word3_muladd(&w2, &w1, &w0, ws[18], p[11]); 2168| 7.65k| word3_muladd(&w2, &w1, &w0, ws[19], p[10]); 2169| 7.65k| word3_muladd(&w2, &w1, &w0, ws[20], p[9]); 2170| 7.65k| word3_muladd(&w2, &w1, &w0, ws[21], p[8]); 2171| 7.65k| word3_muladd(&w2, &w1, &w0, ws[22], p[7]); 2172| 7.65k| word3_muladd(&w2, &w1, &w0, ws[23], p[6]); 2173| 7.65k| word3_muladd(&w2, &w1, &w0, ws[24], p[5]); 2174| 7.65k| word3_muladd(&w2, &w1, &w0, ws[25], p[4]); 2175| 7.65k| word3_muladd(&w2, &w1, &w0, ws[26], p[3]); 2176| 7.65k| word3_muladd(&w2, &w1, &w0, ws[27], p[2]); 2177| 7.65k| word3_muladd(&w2, &w1, &w0, ws[28], p[1]); 2178| 7.65k| word3_add(&w2, &w1, &w0, z[29]); 2179| 7.65k| ws[29] = w0 * p_dash; 2180| 7.65k| word3_muladd(&w2, &w1, &w0, ws[29], p[0]); 2181| 7.65k| w0 = w1; 2182| 7.65k| w1 = w2; 2183| 7.65k| w2 = 0; 2184| 7.65k| word3_muladd(&w2, &w1, &w0, ws[0], p[30]); 2185| 7.65k| word3_muladd(&w2, &w1, &w0, ws[1], p[29]); 2186| 7.65k| word3_muladd(&w2, &w1, &w0, ws[2], p[28]); 2187| 7.65k| word3_muladd(&w2, &w1, &w0, ws[3], p[27]); 2188| 7.65k| word3_muladd(&w2, &w1, &w0, ws[4], p[26]); 2189| 7.65k| word3_muladd(&w2, &w1, &w0, ws[5], p[25]); 2190| 7.65k| word3_muladd(&w2, &w1, &w0, ws[6], p[24]); 2191| 7.65k| word3_muladd(&w2, &w1, &w0, ws[7], p[23]); 2192| 7.65k| word3_muladd(&w2, &w1, &w0, ws[8], p[22]); 2193| 7.65k| word3_muladd(&w2, &w1, &w0, ws[9], p[21]); 2194| 7.65k| word3_muladd(&w2, &w1, &w0, ws[10], p[20]); 2195| 7.65k| word3_muladd(&w2, &w1, &w0, ws[11], p[19]); 2196| 7.65k| word3_muladd(&w2, &w1, &w0, ws[12], p[18]); 2197| 7.65k| word3_muladd(&w2, &w1, &w0, ws[13], p[17]); 2198| 7.65k| word3_muladd(&w2, &w1, &w0, ws[14], p[16]); 2199| 7.65k| word3_muladd(&w2, &w1, &w0, ws[15], p[15]); 2200| 7.65k| word3_muladd(&w2, &w1, &w0, ws[16], p[14]); 2201| 7.65k| word3_muladd(&w2, &w1, &w0, ws[17], p[13]); 2202| 7.65k| word3_muladd(&w2, &w1, &w0, ws[18], p[12]); 2203| 7.65k| word3_muladd(&w2, &w1, &w0, ws[19], p[11]); 2204| 7.65k| word3_muladd(&w2, &w1, &w0, ws[20], p[10]); 2205| 7.65k| word3_muladd(&w2, &w1, &w0, ws[21], p[9]); 2206| 7.65k| word3_muladd(&w2, &w1, &w0, ws[22], p[8]); 2207| 7.65k| word3_muladd(&w2, &w1, &w0, ws[23], p[7]); 2208| 7.65k| word3_muladd(&w2, &w1, &w0, ws[24], p[6]); 2209| 7.65k| word3_muladd(&w2, &w1, &w0, ws[25], p[5]); 2210| 7.65k| word3_muladd(&w2, &w1, &w0, ws[26], p[4]); 2211| 7.65k| word3_muladd(&w2, &w1, &w0, ws[27], p[3]); 2212| 7.65k| word3_muladd(&w2, &w1, &w0, ws[28], p[2]); 2213| 7.65k| word3_muladd(&w2, &w1, &w0, ws[29], p[1]); 2214| 7.65k| word3_add(&w2, &w1, &w0, z[30]); 2215| 7.65k| ws[30] = w0 * p_dash; 2216| 7.65k| word3_muladd(&w2, &w1, &w0, ws[30], p[0]); 2217| 7.65k| w0 = w1; 2218| 7.65k| w1 = w2; 2219| 7.65k| w2 = 0; 2220| 7.65k| word3_muladd(&w2, &w1, &w0, ws[0], p[31]); 2221| 7.65k| word3_muladd(&w2, &w1, &w0, ws[1], p[30]); 2222| 7.65k| word3_muladd(&w2, &w1, &w0, ws[2], p[29]); 2223| 7.65k| word3_muladd(&w2, &w1, &w0, ws[3], p[28]); 2224| 7.65k| word3_muladd(&w2, &w1, &w0, ws[4], p[27]); 2225| 7.65k| word3_muladd(&w2, &w1, &w0, ws[5], p[26]); 2226| 7.65k| word3_muladd(&w2, &w1, &w0, ws[6], p[25]); 2227| 7.65k| word3_muladd(&w2, &w1, &w0, ws[7], p[24]); 2228| 7.65k| word3_muladd(&w2, &w1, &w0, ws[8], p[23]); 2229| 7.65k| word3_muladd(&w2, &w1, &w0, ws[9], p[22]); 2230| 7.65k| word3_muladd(&w2, &w1, &w0, ws[10], p[21]); 2231| 7.65k| word3_muladd(&w2, &w1, &w0, ws[11], p[20]); 2232| 7.65k| word3_muladd(&w2, &w1, &w0, ws[12], p[19]); 2233| 7.65k| word3_muladd(&w2, &w1, &w0, ws[13], p[18]); 2234| 7.65k| word3_muladd(&w2, &w1, &w0, ws[14], p[17]); 2235| 7.65k| word3_muladd(&w2, &w1, &w0, ws[15], p[16]); 2236| 7.65k| word3_muladd(&w2, &w1, &w0, ws[16], p[15]); 2237| 7.65k| word3_muladd(&w2, &w1, &w0, ws[17], p[14]); 2238| 7.65k| word3_muladd(&w2, &w1, &w0, ws[18], p[13]); 2239| 7.65k| word3_muladd(&w2, &w1, &w0, ws[19], p[12]); 2240| 7.65k| word3_muladd(&w2, &w1, &w0, ws[20], p[11]); 2241| 7.65k| word3_muladd(&w2, &w1, &w0, ws[21], p[10]); 2242| 7.65k| word3_muladd(&w2, &w1, &w0, ws[22], p[9]); 2243| 7.65k| word3_muladd(&w2, &w1, &w0, ws[23], p[8]); 2244| 7.65k| word3_muladd(&w2, &w1, &w0, ws[24], p[7]); 2245| 7.65k| word3_muladd(&w2, &w1, &w0, ws[25], p[6]); 2246| 7.65k| word3_muladd(&w2, &w1, &w0, ws[26], p[5]); 2247| 7.65k| word3_muladd(&w2, &w1, &w0, ws[27], p[4]); 2248| 7.65k| word3_muladd(&w2, &w1, &w0, ws[28], p[3]); 2249| 7.65k| word3_muladd(&w2, &w1, &w0, ws[29], p[2]); 2250| 7.65k| word3_muladd(&w2, &w1, &w0, ws[30], p[1]); 2251| 7.65k| word3_add(&w2, &w1, &w0, z[31]); 2252| 7.65k| ws[31] = w0 * p_dash; 2253| 7.65k| word3_muladd(&w2, &w1, &w0, ws[31], p[0]); 2254| 7.65k| w0 = w1; 2255| 7.65k| w1 = w2; 2256| 7.65k| w2 = 0; 2257| 7.65k| word3_muladd(&w2, &w1, &w0, ws[1], p[31]); 2258| 7.65k| word3_muladd(&w2, &w1, &w0, ws[2], p[30]); 2259| 7.65k| word3_muladd(&w2, &w1, &w0, ws[3], p[29]); 2260| 7.65k| word3_muladd(&w2, &w1, &w0, ws[4], p[28]); 2261| 7.65k| word3_muladd(&w2, &w1, &w0, ws[5], p[27]); 2262| 7.65k| word3_muladd(&w2, &w1, &w0, ws[6], p[26]); 2263| 7.65k| word3_muladd(&w2, &w1, &w0, ws[7], p[25]); 2264| 7.65k| word3_muladd(&w2, &w1, &w0, ws[8], p[24]); 2265| 7.65k| word3_muladd(&w2, &w1, &w0, ws[9], p[23]); 2266| 7.65k| word3_muladd(&w2, &w1, &w0, ws[10], p[22]); 2267| 7.65k| word3_muladd(&w2, &w1, &w0, ws[11], p[21]); 2268| 7.65k| word3_muladd(&w2, &w1, &w0, ws[12], p[20]); 2269| 7.65k| word3_muladd(&w2, &w1, &w0, ws[13], p[19]); 2270| 7.65k| word3_muladd(&w2, &w1, &w0, ws[14], p[18]); 2271| 7.65k| word3_muladd(&w2, &w1, &w0, ws[15], p[17]); 2272| 7.65k| word3_muladd(&w2, &w1, &w0, ws[16], p[16]); 2273| 7.65k| word3_muladd(&w2, &w1, &w0, ws[17], p[15]); 2274| 7.65k| word3_muladd(&w2, &w1, &w0, ws[18], p[14]); 2275| 7.65k| word3_muladd(&w2, &w1, &w0, ws[19], p[13]); 2276| 7.65k| word3_muladd(&w2, &w1, &w0, ws[20], p[12]); 2277| 7.65k| word3_muladd(&w2, &w1, &w0, ws[21], p[11]); 2278| 7.65k| word3_muladd(&w2, &w1, &w0, ws[22], p[10]); 2279| 7.65k| word3_muladd(&w2, &w1, &w0, ws[23], p[9]); 2280| 7.65k| word3_muladd(&w2, &w1, &w0, ws[24], p[8]); 2281| 7.65k| word3_muladd(&w2, &w1, &w0, ws[25], p[7]); 2282| 7.65k| word3_muladd(&w2, &w1, &w0, ws[26], p[6]); 2283| 7.65k| word3_muladd(&w2, &w1, &w0, ws[27], p[5]); 2284| 7.65k| word3_muladd(&w2, &w1, &w0, ws[28], p[4]); 2285| 7.65k| word3_muladd(&w2, &w1, &w0, ws[29], p[3]); 2286| 7.65k| word3_muladd(&w2, &w1, &w0, ws[30], p[2]); 2287| 7.65k| word3_muladd(&w2, &w1, &w0, ws[31], p[1]); 2288| 7.65k| word3_add(&w2, &w1, &w0, z[32]); 2289| 7.65k| ws[0] = w0; 2290| 7.65k| w0 = w1; 2291| 7.65k| w1 = w2; 2292| 7.65k| w2 = 0; 2293| 7.65k| word3_muladd(&w2, &w1, &w0, ws[2], p[31]); 2294| 7.65k| word3_muladd(&w2, &w1, &w0, ws[3], p[30]); 2295| 7.65k| word3_muladd(&w2, &w1, &w0, ws[4], p[29]); 2296| 7.65k| word3_muladd(&w2, &w1, &w0, ws[5], p[28]); 2297| 7.65k| word3_muladd(&w2, &w1, &w0, ws[6], p[27]); 2298| 7.65k| word3_muladd(&w2, &w1, &w0, ws[7], p[26]); 2299| 7.65k| word3_muladd(&w2, &w1, &w0, ws[8], p[25]); 2300| 7.65k| word3_muladd(&w2, &w1, &w0, ws[9], p[24]); 2301| 7.65k| word3_muladd(&w2, &w1, &w0, ws[10], p[23]); 2302| 7.65k| word3_muladd(&w2, &w1, &w0, ws[11], p[22]); 2303| 7.65k| word3_muladd(&w2, &w1, &w0, ws[12], p[21]); 2304| 7.65k| word3_muladd(&w2, &w1, &w0, ws[13], p[20]); 2305| 7.65k| word3_muladd(&w2, &w1, &w0, ws[14], p[19]); 2306| 7.65k| word3_muladd(&w2, &w1, &w0, ws[15], p[18]); 2307| 7.65k| word3_muladd(&w2, &w1, &w0, ws[16], p[17]); 2308| 7.65k| word3_muladd(&w2, &w1, &w0, ws[17], p[16]); 2309| 7.65k| word3_muladd(&w2, &w1, &w0, ws[18], p[15]); 2310| 7.65k| word3_muladd(&w2, &w1, &w0, ws[19], p[14]); 2311| 7.65k| word3_muladd(&w2, &w1, &w0, ws[20], p[13]); 2312| 7.65k| word3_muladd(&w2, &w1, &w0, ws[21], p[12]); 2313| 7.65k| word3_muladd(&w2, &w1, &w0, ws[22], p[11]); 2314| 7.65k| word3_muladd(&w2, &w1, &w0, ws[23], p[10]); 2315| 7.65k| word3_muladd(&w2, &w1, &w0, ws[24], p[9]); 2316| 7.65k| word3_muladd(&w2, &w1, &w0, ws[25], p[8]); 2317| 7.65k| word3_muladd(&w2, &w1, &w0, ws[26], p[7]); 2318| 7.65k| word3_muladd(&w2, &w1, &w0, ws[27], p[6]); 2319| 7.65k| word3_muladd(&w2, &w1, &w0, ws[28], p[5]); 2320| 7.65k| word3_muladd(&w2, &w1, &w0, ws[29], p[4]); 2321| 7.65k| word3_muladd(&w2, &w1, &w0, ws[30], p[3]); 2322| 7.65k| word3_muladd(&w2, &w1, &w0, ws[31], p[2]); 2323| 7.65k| word3_add(&w2, &w1, &w0, z[33]); 2324| 7.65k| ws[1] = w0; 2325| 7.65k| w0 = w1; 2326| 7.65k| w1 = w2; 2327| 7.65k| w2 = 0; 2328| 7.65k| word3_muladd(&w2, &w1, &w0, ws[3], p[31]); 2329| 7.65k| word3_muladd(&w2, &w1, &w0, ws[4], p[30]); 2330| 7.65k| word3_muladd(&w2, &w1, &w0, ws[5], p[29]); 2331| 7.65k| word3_muladd(&w2, &w1, &w0, ws[6], p[28]); 2332| 7.65k| word3_muladd(&w2, &w1, &w0, ws[7], p[27]); 2333| 7.65k| word3_muladd(&w2, &w1, &w0, ws[8], p[26]); 2334| 7.65k| word3_muladd(&w2, &w1, &w0, ws[9], p[25]); 2335| 7.65k| word3_muladd(&w2, &w1, &w0, ws[10], p[24]); 2336| 7.65k| word3_muladd(&w2, &w1, &w0, ws[11], p[23]); 2337| 7.65k| word3_muladd(&w2, &w1, &w0, ws[12], p[22]); 2338| 7.65k| word3_muladd(&w2, &w1, &w0, ws[13], p[21]); 2339| 7.65k| word3_muladd(&w2, &w1, &w0, ws[14], p[20]); 2340| 7.65k| word3_muladd(&w2, &w1, &w0, ws[15], p[19]); 2341| 7.65k| word3_muladd(&w2, &w1, &w0, ws[16], p[18]); 2342| 7.65k| word3_muladd(&w2, &w1, &w0, ws[17], p[17]); 2343| 7.65k| word3_muladd(&w2, &w1, &w0, ws[18], p[16]); 2344| 7.65k| word3_muladd(&w2, &w1, &w0, ws[19], p[15]); 2345| 7.65k| word3_muladd(&w2, &w1, &w0, ws[20], p[14]); 2346| 7.65k| word3_muladd(&w2, &w1, &w0, ws[21], p[13]); 2347| 7.65k| word3_muladd(&w2, &w1, &w0, ws[22], p[12]); 2348| 7.65k| word3_muladd(&w2, &w1, &w0, ws[23], p[11]); 2349| 7.65k| word3_muladd(&w2, &w1, &w0, ws[24], p[10]); 2350| 7.65k| word3_muladd(&w2, &w1, &w0, ws[25], p[9]); 2351| 7.65k| word3_muladd(&w2, &w1, &w0, ws[26], p[8]); 2352| 7.65k| word3_muladd(&w2, &w1, &w0, ws[27], p[7]); 2353| 7.65k| word3_muladd(&w2, &w1, &w0, ws[28], p[6]); 2354| 7.65k| word3_muladd(&w2, &w1, &w0, ws[29], p[5]); 2355| 7.65k| word3_muladd(&w2, &w1, &w0, ws[30], p[4]); 2356| 7.65k| word3_muladd(&w2, &w1, &w0, ws[31], p[3]); 2357| 7.65k| word3_add(&w2, &w1, &w0, z[34]); 2358| 7.65k| ws[2] = w0; 2359| 7.65k| w0 = w1; 2360| 7.65k| w1 = w2; 2361| 7.65k| w2 = 0; 2362| 7.65k| word3_muladd(&w2, &w1, &w0, ws[4], p[31]); 2363| 7.65k| word3_muladd(&w2, &w1, &w0, ws[5], p[30]); 2364| 7.65k| word3_muladd(&w2, &w1, &w0, ws[6], p[29]); 2365| 7.65k| word3_muladd(&w2, &w1, &w0, ws[7], p[28]); 2366| 7.65k| word3_muladd(&w2, &w1, &w0, ws[8], p[27]); 2367| 7.65k| word3_muladd(&w2, &w1, &w0, ws[9], p[26]); 2368| 7.65k| word3_muladd(&w2, &w1, &w0, ws[10], p[25]); 2369| 7.65k| word3_muladd(&w2, &w1, &w0, ws[11], p[24]); 2370| 7.65k| word3_muladd(&w2, &w1, &w0, ws[12], p[23]); 2371| 7.65k| word3_muladd(&w2, &w1, &w0, ws[13], p[22]); 2372| 7.65k| word3_muladd(&w2, &w1, &w0, ws[14], p[21]); 2373| 7.65k| word3_muladd(&w2, &w1, &w0, ws[15], p[20]); 2374| 7.65k| word3_muladd(&w2, &w1, &w0, ws[16], p[19]); 2375| 7.65k| word3_muladd(&w2, &w1, &w0, ws[17], p[18]); 2376| 7.65k| word3_muladd(&w2, &w1, &w0, ws[18], p[17]); 2377| 7.65k| word3_muladd(&w2, &w1, &w0, ws[19], p[16]); 2378| 7.65k| word3_muladd(&w2, &w1, &w0, ws[20], p[15]); 2379| 7.65k| word3_muladd(&w2, &w1, &w0, ws[21], p[14]); 2380| 7.65k| word3_muladd(&w2, &w1, &w0, ws[22], p[13]); 2381| 7.65k| word3_muladd(&w2, &w1, &w0, ws[23], p[12]); 2382| 7.65k| word3_muladd(&w2, &w1, &w0, ws[24], p[11]); 2383| 7.65k| word3_muladd(&w2, &w1, &w0, ws[25], p[10]); 2384| 7.65k| word3_muladd(&w2, &w1, &w0, ws[26], p[9]); 2385| 7.65k| word3_muladd(&w2, &w1, &w0, ws[27], p[8]); 2386| 7.65k| word3_muladd(&w2, &w1, &w0, ws[28], p[7]); 2387| 7.65k| word3_muladd(&w2, &w1, &w0, ws[29], p[6]); 2388| 7.65k| word3_muladd(&w2, &w1, &w0, ws[30], p[5]); 2389| 7.65k| word3_muladd(&w2, &w1, &w0, ws[31], p[4]); 2390| 7.65k| word3_add(&w2, &w1, &w0, z[35]); 2391| 7.65k| ws[3] = w0; 2392| 7.65k| w0 = w1; 2393| 7.65k| w1 = w2; 2394| 7.65k| w2 = 0; 2395| 7.65k| word3_muladd(&w2, &w1, &w0, ws[5], p[31]); 2396| 7.65k| word3_muladd(&w2, &w1, &w0, ws[6], p[30]); 2397| 7.65k| word3_muladd(&w2, &w1, &w0, ws[7], p[29]); 2398| 7.65k| word3_muladd(&w2, &w1, &w0, ws[8], p[28]); 2399| 7.65k| word3_muladd(&w2, &w1, &w0, ws[9], p[27]); 2400| 7.65k| word3_muladd(&w2, &w1, &w0, ws[10], p[26]); 2401| 7.65k| word3_muladd(&w2, &w1, &w0, ws[11], p[25]); 2402| 7.65k| word3_muladd(&w2, &w1, &w0, ws[12], p[24]); 2403| 7.65k| word3_muladd(&w2, &w1, &w0, ws[13], p[23]); 2404| 7.65k| word3_muladd(&w2, &w1, &w0, ws[14], p[22]); 2405| 7.65k| word3_muladd(&w2, &w1, &w0, ws[15], p[21]); 2406| 7.65k| word3_muladd(&w2, &w1, &w0, ws[16], p[20]); 2407| 7.65k| word3_muladd(&w2, &w1, &w0, ws[17], p[19]); 2408| 7.65k| word3_muladd(&w2, &w1, &w0, ws[18], p[18]); 2409| 7.65k| word3_muladd(&w2, &w1, &w0, ws[19], p[17]); 2410| 7.65k| word3_muladd(&w2, &w1, &w0, ws[20], p[16]); 2411| 7.65k| word3_muladd(&w2, &w1, &w0, ws[21], p[15]); 2412| 7.65k| word3_muladd(&w2, &w1, &w0, ws[22], p[14]); 2413| 7.65k| word3_muladd(&w2, &w1, &w0, ws[23], p[13]); 2414| 7.65k| word3_muladd(&w2, &w1, &w0, ws[24], p[12]); 2415| 7.65k| word3_muladd(&w2, &w1, &w0, ws[25], p[11]); 2416| 7.65k| word3_muladd(&w2, &w1, &w0, ws[26], p[10]); 2417| 7.65k| word3_muladd(&w2, &w1, &w0, ws[27], p[9]); 2418| 7.65k| word3_muladd(&w2, &w1, &w0, ws[28], p[8]); 2419| 7.65k| word3_muladd(&w2, &w1, &w0, ws[29], p[7]); 2420| 7.65k| word3_muladd(&w2, &w1, &w0, ws[30], p[6]); 2421| 7.65k| word3_muladd(&w2, &w1, &w0, ws[31], p[5]); 2422| 7.65k| word3_add(&w2, &w1, &w0, z[36]); 2423| 7.65k| ws[4] = w0; 2424| 7.65k| w0 = w1; 2425| 7.65k| w1 = w2; 2426| 7.65k| w2 = 0; 2427| 7.65k| word3_muladd(&w2, &w1, &w0, ws[6], p[31]); 2428| 7.65k| word3_muladd(&w2, &w1, &w0, ws[7], p[30]); 2429| 7.65k| word3_muladd(&w2, &w1, &w0, ws[8], p[29]); 2430| 7.65k| word3_muladd(&w2, &w1, &w0, ws[9], p[28]); 2431| 7.65k| word3_muladd(&w2, &w1, &w0, ws[10], p[27]); 2432| 7.65k| word3_muladd(&w2, &w1, &w0, ws[11], p[26]); 2433| 7.65k| word3_muladd(&w2, &w1, &w0, ws[12], p[25]); 2434| 7.65k| word3_muladd(&w2, &w1, &w0, ws[13], p[24]); 2435| 7.65k| word3_muladd(&w2, &w1, &w0, ws[14], p[23]); 2436| 7.65k| word3_muladd(&w2, &w1, &w0, ws[15], p[22]); 2437| 7.65k| word3_muladd(&w2, &w1, &w0, ws[16], p[21]); 2438| 7.65k| word3_muladd(&w2, &w1, &w0, ws[17], p[20]); 2439| 7.65k| word3_muladd(&w2, &w1, &w0, ws[18], p[19]); 2440| 7.65k| word3_muladd(&w2, &w1, &w0, ws[19], p[18]); 2441| 7.65k| word3_muladd(&w2, &w1, &w0, ws[20], p[17]); 2442| 7.65k| word3_muladd(&w2, &w1, &w0, ws[21], p[16]); 2443| 7.65k| word3_muladd(&w2, &w1, &w0, ws[22], p[15]); 2444| 7.65k| word3_muladd(&w2, &w1, &w0, ws[23], p[14]); 2445| 7.65k| word3_muladd(&w2, &w1, &w0, ws[24], p[13]); 2446| 7.65k| word3_muladd(&w2, &w1, &w0, ws[25], p[12]); 2447| 7.65k| word3_muladd(&w2, &w1, &w0, ws[26], p[11]); 2448| 7.65k| word3_muladd(&w2, &w1, &w0, ws[27], p[10]); 2449| 7.65k| word3_muladd(&w2, &w1, &w0, ws[28], p[9]); 2450| 7.65k| word3_muladd(&w2, &w1, &w0, ws[29], p[8]); 2451| 7.65k| word3_muladd(&w2, &w1, &w0, ws[30], p[7]); 2452| 7.65k| word3_muladd(&w2, &w1, &w0, ws[31], p[6]); 2453| 7.65k| word3_add(&w2, &w1, &w0, z[37]); 2454| 7.65k| ws[5] = w0; 2455| 7.65k| w0 = w1; 2456| 7.65k| w1 = w2; 2457| 7.65k| w2 = 0; 2458| 7.65k| word3_muladd(&w2, &w1, &w0, ws[7], p[31]); 2459| 7.65k| word3_muladd(&w2, &w1, &w0, ws[8], p[30]); 2460| 7.65k| word3_muladd(&w2, &w1, &w0, ws[9], p[29]); 2461| 7.65k| word3_muladd(&w2, &w1, &w0, ws[10], p[28]); 2462| 7.65k| word3_muladd(&w2, &w1, &w0, ws[11], p[27]); 2463| 7.65k| word3_muladd(&w2, &w1, &w0, ws[12], p[26]); 2464| 7.65k| word3_muladd(&w2, &w1, &w0, ws[13], p[25]); 2465| 7.65k| word3_muladd(&w2, &w1, &w0, ws[14], p[24]); 2466| 7.65k| word3_muladd(&w2, &w1, &w0, ws[15], p[23]); 2467| 7.65k| word3_muladd(&w2, &w1, &w0, ws[16], p[22]); 2468| 7.65k| word3_muladd(&w2, &w1, &w0, ws[17], p[21]); 2469| 7.65k| word3_muladd(&w2, &w1, &w0, ws[18], p[20]); 2470| 7.65k| word3_muladd(&w2, &w1, &w0, ws[19], p[19]); 2471| 7.65k| word3_muladd(&w2, &w1, &w0, ws[20], p[18]); 2472| 7.65k| word3_muladd(&w2, &w1, &w0, ws[21], p[17]); 2473| 7.65k| word3_muladd(&w2, &w1, &w0, ws[22], p[16]); 2474| 7.65k| word3_muladd(&w2, &w1, &w0, ws[23], p[15]); 2475| 7.65k| word3_muladd(&w2, &w1, &w0, ws[24], p[14]); 2476| 7.65k| word3_muladd(&w2, &w1, &w0, ws[25], p[13]); 2477| 7.65k| word3_muladd(&w2, &w1, &w0, ws[26], p[12]); 2478| 7.65k| word3_muladd(&w2, &w1, &w0, ws[27], p[11]); 2479| 7.65k| word3_muladd(&w2, &w1, &w0, ws[28], p[10]); 2480| 7.65k| word3_muladd(&w2, &w1, &w0, ws[29], p[9]); 2481| 7.65k| word3_muladd(&w2, &w1, &w0, ws[30], p[8]); 2482| 7.65k| word3_muladd(&w2, &w1, &w0, ws[31], p[7]); 2483| 7.65k| word3_add(&w2, &w1, &w0, z[38]); 2484| 7.65k| ws[6] = w0; 2485| 7.65k| w0 = w1; 2486| 7.65k| w1 = w2; 2487| 7.65k| w2 = 0; 2488| 7.65k| word3_muladd(&w2, &w1, &w0, ws[8], p[31]); 2489| 7.65k| word3_muladd(&w2, &w1, &w0, ws[9], p[30]); 2490| 7.65k| word3_muladd(&w2, &w1, &w0, ws[10], p[29]); 2491| 7.65k| word3_muladd(&w2, &w1, &w0, ws[11], p[28]); 2492| 7.65k| word3_muladd(&w2, &w1, &w0, ws[12], p[27]); 2493| 7.65k| word3_muladd(&w2, &w1, &w0, ws[13], p[26]); 2494| 7.65k| word3_muladd(&w2, &w1, &w0, ws[14], p[25]); 2495| 7.65k| word3_muladd(&w2, &w1, &w0, ws[15], p[24]); 2496| 7.65k| word3_muladd(&w2, &w1, &w0, ws[16], p[23]); 2497| 7.65k| word3_muladd(&w2, &w1, &w0, ws[17], p[22]); 2498| 7.65k| word3_muladd(&w2, &w1, &w0, ws[18], p[21]); 2499| 7.65k| word3_muladd(&w2, &w1, &w0, ws[19], p[20]); 2500| 7.65k| word3_muladd(&w2, &w1, &w0, ws[20], p[19]); 2501| 7.65k| word3_muladd(&w2, &w1, &w0, ws[21], p[18]); 2502| 7.65k| word3_muladd(&w2, &w1, &w0, ws[22], p[17]); 2503| 7.65k| word3_muladd(&w2, &w1, &w0, ws[23], p[16]); 2504| 7.65k| word3_muladd(&w2, &w1, &w0, ws[24], p[15]); 2505| 7.65k| word3_muladd(&w2, &w1, &w0, ws[25], p[14]); 2506| 7.65k| word3_muladd(&w2, &w1, &w0, ws[26], p[13]); 2507| 7.65k| word3_muladd(&w2, &w1, &w0, ws[27], p[12]); 2508| 7.65k| word3_muladd(&w2, &w1, &w0, ws[28], p[11]); 2509| 7.65k| word3_muladd(&w2, &w1, &w0, ws[29], p[10]); 2510| 7.65k| word3_muladd(&w2, &w1, &w0, ws[30], p[9]); 2511| 7.65k| word3_muladd(&w2, &w1, &w0, ws[31], p[8]); 2512| 7.65k| word3_add(&w2, &w1, &w0, z[39]); 2513| 7.65k| ws[7] = w0; 2514| 7.65k| w0 = w1; 2515| 7.65k| w1 = w2; 2516| 7.65k| w2 = 0; 2517| 7.65k| word3_muladd(&w2, &w1, &w0, ws[9], p[31]); 2518| 7.65k| word3_muladd(&w2, &w1, &w0, ws[10], p[30]); 2519| 7.65k| word3_muladd(&w2, &w1, &w0, ws[11], p[29]); 2520| 7.65k| word3_muladd(&w2, &w1, &w0, ws[12], p[28]); 2521| 7.65k| word3_muladd(&w2, &w1, &w0, ws[13], p[27]); 2522| 7.65k| word3_muladd(&w2, &w1, &w0, ws[14], p[26]); 2523| 7.65k| word3_muladd(&w2, &w1, &w0, ws[15], p[25]); 2524| 7.65k| word3_muladd(&w2, &w1, &w0, ws[16], p[24]); 2525| 7.65k| word3_muladd(&w2, &w1, &w0, ws[17], p[23]); 2526| 7.65k| word3_muladd(&w2, &w1, &w0, ws[18], p[22]); 2527| 7.65k| word3_muladd(&w2, &w1, &w0, ws[19], p[21]); 2528| 7.65k| word3_muladd(&w2, &w1, &w0, ws[20], p[20]); 2529| 7.65k| word3_muladd(&w2, &w1, &w0, ws[21], p[19]); 2530| 7.65k| word3_muladd(&w2, &w1, &w0, ws[22], p[18]); 2531| 7.65k| word3_muladd(&w2, &w1, &w0, ws[23], p[17]); 2532| 7.65k| word3_muladd(&w2, &w1, &w0, ws[24], p[16]); 2533| 7.65k| word3_muladd(&w2, &w1, &w0, ws[25], p[15]); 2534| 7.65k| word3_muladd(&w2, &w1, &w0, ws[26], p[14]); 2535| 7.65k| word3_muladd(&w2, &w1, &w0, ws[27], p[13]); 2536| 7.65k| word3_muladd(&w2, &w1, &w0, ws[28], p[12]); 2537| 7.65k| word3_muladd(&w2, &w1, &w0, ws[29], p[11]); 2538| 7.65k| word3_muladd(&w2, &w1, &w0, ws[30], p[10]); 2539| 7.65k| word3_muladd(&w2, &w1, &w0, ws[31], p[9]); 2540| 7.65k| word3_add(&w2, &w1, &w0, z[40]); 2541| 7.65k| ws[8] = w0; 2542| 7.65k| w0 = w1; 2543| 7.65k| w1 = w2; 2544| 7.65k| w2 = 0; 2545| 7.65k| word3_muladd(&w2, &w1, &w0, ws[10], p[31]); 2546| 7.65k| word3_muladd(&w2, &w1, &w0, ws[11], p[30]); 2547| 7.65k| word3_muladd(&w2, &w1, &w0, ws[12], p[29]); 2548| 7.65k| word3_muladd(&w2, &w1, &w0, ws[13], p[28]); 2549| 7.65k| word3_muladd(&w2, &w1, &w0, ws[14], p[27]); 2550| 7.65k| word3_muladd(&w2, &w1, &w0, ws[15], p[26]); 2551| 7.65k| word3_muladd(&w2, &w1, &w0, ws[16], p[25]); 2552| 7.65k| word3_muladd(&w2, &w1, &w0, ws[17], p[24]); 2553| 7.65k| word3_muladd(&w2, &w1, &w0, ws[18], p[23]); 2554| 7.65k| word3_muladd(&w2, &w1, &w0, ws[19], p[22]); 2555| 7.65k| word3_muladd(&w2, &w1, &w0, ws[20], p[21]); 2556| 7.65k| word3_muladd(&w2, &w1, &w0, ws[21], p[20]); 2557| 7.65k| word3_muladd(&w2, &w1, &w0, ws[22], p[19]); 2558| 7.65k| word3_muladd(&w2, &w1, &w0, ws[23], p[18]); 2559| 7.65k| word3_muladd(&w2, &w1, &w0, ws[24], p[17]); 2560| 7.65k| word3_muladd(&w2, &w1, &w0, ws[25], p[16]); 2561| 7.65k| word3_muladd(&w2, &w1, &w0, ws[26], p[15]); 2562| 7.65k| word3_muladd(&w2, &w1, &w0, ws[27], p[14]); 2563| 7.65k| word3_muladd(&w2, &w1, &w0, ws[28], p[13]); 2564| 7.65k| word3_muladd(&w2, &w1, &w0, ws[29], p[12]); 2565| 7.65k| word3_muladd(&w2, &w1, &w0, ws[30], p[11]); 2566| 7.65k| word3_muladd(&w2, &w1, &w0, ws[31], p[10]); 2567| 7.65k| word3_add(&w2, &w1, &w0, z[41]); 2568| 7.65k| ws[9] = w0; 2569| 7.65k| w0 = w1; 2570| 7.65k| w1 = w2; 2571| 7.65k| w2 = 0; 2572| 7.65k| word3_muladd(&w2, &w1, &w0, ws[11], p[31]); 2573| 7.65k| word3_muladd(&w2, &w1, &w0, ws[12], p[30]); 2574| 7.65k| word3_muladd(&w2, &w1, &w0, ws[13], p[29]); 2575| 7.65k| word3_muladd(&w2, &w1, &w0, ws[14], p[28]); 2576| 7.65k| word3_muladd(&w2, &w1, &w0, ws[15], p[27]); 2577| 7.65k| word3_muladd(&w2, &w1, &w0, ws[16], p[26]); 2578| 7.65k| word3_muladd(&w2, &w1, &w0, ws[17], p[25]); 2579| 7.65k| word3_muladd(&w2, &w1, &w0, ws[18], p[24]); 2580| 7.65k| word3_muladd(&w2, &w1, &w0, ws[19], p[23]); 2581| 7.65k| word3_muladd(&w2, &w1, &w0, ws[20], p[22]); 2582| 7.65k| word3_muladd(&w2, &w1, &w0, ws[21], p[21]); 2583| 7.65k| word3_muladd(&w2, &w1, &w0, ws[22], p[20]); 2584| 7.65k| word3_muladd(&w2, &w1, &w0, ws[23], p[19]); 2585| 7.65k| word3_muladd(&w2, &w1, &w0, ws[24], p[18]); 2586| 7.65k| word3_muladd(&w2, &w1, &w0, ws[25], p[17]); 2587| 7.65k| word3_muladd(&w2, &w1, &w0, ws[26], p[16]); 2588| 7.65k| word3_muladd(&w2, &w1, &w0, ws[27], p[15]); 2589| 7.65k| word3_muladd(&w2, &w1, &w0, ws[28], p[14]); 2590| 7.65k| word3_muladd(&w2, &w1, &w0, ws[29], p[13]); 2591| 7.65k| word3_muladd(&w2, &w1, &w0, ws[30], p[12]); 2592| 7.65k| word3_muladd(&w2, &w1, &w0, ws[31], p[11]); 2593| 7.65k| word3_add(&w2, &w1, &w0, z[42]); 2594| 7.65k| ws[10] = w0; 2595| 7.65k| w0 = w1; 2596| 7.65k| w1 = w2; 2597| 7.65k| w2 = 0; 2598| 7.65k| word3_muladd(&w2, &w1, &w0, ws[12], p[31]); 2599| 7.65k| word3_muladd(&w2, &w1, &w0, ws[13], p[30]); 2600| 7.65k| word3_muladd(&w2, &w1, &w0, ws[14], p[29]); 2601| 7.65k| word3_muladd(&w2, &w1, &w0, ws[15], p[28]); 2602| 7.65k| word3_muladd(&w2, &w1, &w0, ws[16], p[27]); 2603| 7.65k| word3_muladd(&w2, &w1, &w0, ws[17], p[26]); 2604| 7.65k| word3_muladd(&w2, &w1, &w0, ws[18], p[25]); 2605| 7.65k| word3_muladd(&w2, &w1, &w0, ws[19], p[24]); 2606| 7.65k| word3_muladd(&w2, &w1, &w0, ws[20], p[23]); 2607| 7.65k| word3_muladd(&w2, &w1, &w0, ws[21], p[22]); 2608| 7.65k| word3_muladd(&w2, &w1, &w0, ws[22], p[21]); 2609| 7.65k| word3_muladd(&w2, &w1, &w0, ws[23], p[20]); 2610| 7.65k| word3_muladd(&w2, &w1, &w0, ws[24], p[19]); 2611| 7.65k| word3_muladd(&w2, &w1, &w0, ws[25], p[18]); 2612| 7.65k| word3_muladd(&w2, &w1, &w0, ws[26], p[17]); 2613| 7.65k| word3_muladd(&w2, &w1, &w0, ws[27], p[16]); 2614| 7.65k| word3_muladd(&w2, &w1, &w0, ws[28], p[15]); 2615| 7.65k| word3_muladd(&w2, &w1, &w0, ws[29], p[14]); 2616| 7.65k| word3_muladd(&w2, &w1, &w0, ws[30], p[13]); 2617| 7.65k| word3_muladd(&w2, &w1, &w0, ws[31], p[12]); 2618| 7.65k| word3_add(&w2, &w1, &w0, z[43]); 2619| 7.65k| ws[11] = w0; 2620| 7.65k| w0 = w1; 2621| 7.65k| w1 = w2; 2622| 7.65k| w2 = 0; 2623| 7.65k| word3_muladd(&w2, &w1, &w0, ws[13], p[31]); 2624| 7.65k| word3_muladd(&w2, &w1, &w0, ws[14], p[30]); 2625| 7.65k| word3_muladd(&w2, &w1, &w0, ws[15], p[29]); 2626| 7.65k| word3_muladd(&w2, &w1, &w0, ws[16], p[28]); 2627| 7.65k| word3_muladd(&w2, &w1, &w0, ws[17], p[27]); 2628| 7.65k| word3_muladd(&w2, &w1, &w0, ws[18], p[26]); 2629| 7.65k| word3_muladd(&w2, &w1, &w0, ws[19], p[25]); 2630| 7.65k| word3_muladd(&w2, &w1, &w0, ws[20], p[24]); 2631| 7.65k| word3_muladd(&w2, &w1, &w0, ws[21], p[23]); 2632| 7.65k| word3_muladd(&w2, &w1, &w0, ws[22], p[22]); 2633| 7.65k| word3_muladd(&w2, &w1, &w0, ws[23], p[21]); 2634| 7.65k| word3_muladd(&w2, &w1, &w0, ws[24], p[20]); 2635| 7.65k| word3_muladd(&w2, &w1, &w0, ws[25], p[19]); 2636| 7.65k| word3_muladd(&w2, &w1, &w0, ws[26], p[18]); 2637| 7.65k| word3_muladd(&w2, &w1, &w0, ws[27], p[17]); 2638| 7.65k| word3_muladd(&w2, &w1, &w0, ws[28], p[16]); 2639| 7.65k| word3_muladd(&w2, &w1, &w0, ws[29], p[15]); 2640| 7.65k| word3_muladd(&w2, &w1, &w0, ws[30], p[14]); 2641| 7.65k| word3_muladd(&w2, &w1, &w0, ws[31], p[13]); 2642| 7.65k| word3_add(&w2, &w1, &w0, z[44]); 2643| 7.65k| ws[12] = w0; 2644| 7.65k| w0 = w1; 2645| 7.65k| w1 = w2; 2646| 7.65k| w2 = 0; 2647| 7.65k| word3_muladd(&w2, &w1, &w0, ws[14], p[31]); 2648| 7.65k| word3_muladd(&w2, &w1, &w0, ws[15], p[30]); 2649| 7.65k| word3_muladd(&w2, &w1, &w0, ws[16], p[29]); 2650| 7.65k| word3_muladd(&w2, &w1, &w0, ws[17], p[28]); 2651| 7.65k| word3_muladd(&w2, &w1, &w0, ws[18], p[27]); 2652| 7.65k| word3_muladd(&w2, &w1, &w0, ws[19], p[26]); 2653| 7.65k| word3_muladd(&w2, &w1, &w0, ws[20], p[25]); 2654| 7.65k| word3_muladd(&w2, &w1, &w0, ws[21], p[24]); 2655| 7.65k| word3_muladd(&w2, &w1, &w0, ws[22], p[23]); 2656| 7.65k| word3_muladd(&w2, &w1, &w0, ws[23], p[22]); 2657| 7.65k| word3_muladd(&w2, &w1, &w0, ws[24], p[21]); 2658| 7.65k| word3_muladd(&w2, &w1, &w0, ws[25], p[20]); 2659| 7.65k| word3_muladd(&w2, &w1, &w0, ws[26], p[19]); 2660| 7.65k| word3_muladd(&w2, &w1, &w0, ws[27], p[18]); 2661| 7.65k| word3_muladd(&w2, &w1, &w0, ws[28], p[17]); 2662| 7.65k| word3_muladd(&w2, &w1, &w0, ws[29], p[16]); 2663| 7.65k| word3_muladd(&w2, &w1, &w0, ws[30], p[15]); 2664| 7.65k| word3_muladd(&w2, &w1, &w0, ws[31], p[14]); 2665| 7.65k| word3_add(&w2, &w1, &w0, z[45]); 2666| 7.65k| ws[13] = w0; 2667| 7.65k| w0 = w1; 2668| 7.65k| w1 = w2; 2669| 7.65k| w2 = 0; 2670| 7.65k| word3_muladd(&w2, &w1, &w0, ws[15], p[31]); 2671| 7.65k| word3_muladd(&w2, &w1, &w0, ws[16], p[30]); 2672| 7.65k| word3_muladd(&w2, &w1, &w0, ws[17], p[29]); 2673| 7.65k| word3_muladd(&w2, &w1, &w0, ws[18], p[28]); 2674| 7.65k| word3_muladd(&w2, &w1, &w0, ws[19], p[27]); 2675| 7.65k| word3_muladd(&w2, &w1, &w0, ws[20], p[26]); 2676| 7.65k| word3_muladd(&w2, &w1, &w0, ws[21], p[25]); 2677| 7.65k| word3_muladd(&w2, &w1, &w0, ws[22], p[24]); 2678| 7.65k| word3_muladd(&w2, &w1, &w0, ws[23], p[23]); 2679| 7.65k| word3_muladd(&w2, &w1, &w0, ws[24], p[22]); 2680| 7.65k| word3_muladd(&w2, &w1, &w0, ws[25], p[21]); 2681| 7.65k| word3_muladd(&w2, &w1, &w0, ws[26], p[20]); 2682| 7.65k| word3_muladd(&w2, &w1, &w0, ws[27], p[19]); 2683| 7.65k| word3_muladd(&w2, &w1, &w0, ws[28], p[18]); 2684| 7.65k| word3_muladd(&w2, &w1, &w0, ws[29], p[17]); 2685| 7.65k| word3_muladd(&w2, &w1, &w0, ws[30], p[16]); 2686| 7.65k| word3_muladd(&w2, &w1, &w0, ws[31], p[15]); 2687| 7.65k| word3_add(&w2, &w1, &w0, z[46]); 2688| 7.65k| ws[14] = w0; 2689| 7.65k| w0 = w1; 2690| 7.65k| w1 = w2; 2691| 7.65k| w2 = 0; 2692| 7.65k| word3_muladd(&w2, &w1, &w0, ws[16], p[31]); 2693| 7.65k| word3_muladd(&w2, &w1, &w0, ws[17], p[30]); 2694| 7.65k| word3_muladd(&w2, &w1, &w0, ws[18], p[29]); 2695| 7.65k| word3_muladd(&w2, &w1, &w0, ws[19], p[28]); 2696| 7.65k| word3_muladd(&w2, &w1, &w0, ws[20], p[27]); 2697| 7.65k| word3_muladd(&w2, &w1, &w0, ws[21], p[26]); 2698| 7.65k| word3_muladd(&w2, &w1, &w0, ws[22], p[25]); 2699| 7.65k| word3_muladd(&w2, &w1, &w0, ws[23], p[24]); 2700| 7.65k| word3_muladd(&w2, &w1, &w0, ws[24], p[23]); 2701| 7.65k| word3_muladd(&w2, &w1, &w0, ws[25], p[22]); 2702| 7.65k| word3_muladd(&w2, &w1, &w0, ws[26], p[21]); 2703| 7.65k| word3_muladd(&w2, &w1, &w0, ws[27], p[20]); 2704| 7.65k| word3_muladd(&w2, &w1, &w0, ws[28], p[19]); 2705| 7.65k| word3_muladd(&w2, &w1, &w0, ws[29], p[18]); 2706| 7.65k| word3_muladd(&w2, &w1, &w0, ws[30], p[17]); 2707| 7.65k| word3_muladd(&w2, &w1, &w0, ws[31], p[16]); 2708| 7.65k| word3_add(&w2, &w1, &w0, z[47]); 2709| 7.65k| ws[15] = w0; 2710| 7.65k| w0 = w1; 2711| 7.65k| w1 = w2; 2712| 7.65k| w2 = 0; 2713| 7.65k| word3_muladd(&w2, &w1, &w0, ws[17], p[31]); 2714| 7.65k| word3_muladd(&w2, &w1, &w0, ws[18], p[30]); 2715| 7.65k| word3_muladd(&w2, &w1, &w0, ws[19], p[29]); 2716| 7.65k| word3_muladd(&w2, &w1, &w0, ws[20], p[28]); 2717| 7.65k| word3_muladd(&w2, &w1, &w0, ws[21], p[27]); 2718| 7.65k| word3_muladd(&w2, &w1, &w0, ws[22], p[26]); 2719| 7.65k| word3_muladd(&w2, &w1, &w0, ws[23], p[25]); 2720| 7.65k| word3_muladd(&w2, &w1, &w0, ws[24], p[24]); 2721| 7.65k| word3_muladd(&w2, &w1, &w0, ws[25], p[23]); 2722| 7.65k| word3_muladd(&w2, &w1, &w0, ws[26], p[22]); 2723| 7.65k| word3_muladd(&w2, &w1, &w0, ws[27], p[21]); 2724| 7.65k| word3_muladd(&w2, &w1, &w0, ws[28], p[20]); 2725| 7.65k| word3_muladd(&w2, &w1, &w0, ws[29], p[19]); 2726| 7.65k| word3_muladd(&w2, &w1, &w0, ws[30], p[18]); 2727| 7.65k| word3_muladd(&w2, &w1, &w0, ws[31], p[17]); 2728| 7.65k| word3_add(&w2, &w1, &w0, z[48]); 2729| 7.65k| ws[16] = w0; 2730| 7.65k| w0 = w1; 2731| 7.65k| w1 = w2; 2732| 7.65k| w2 = 0; 2733| 7.65k| word3_muladd(&w2, &w1, &w0, ws[18], p[31]); 2734| 7.65k| word3_muladd(&w2, &w1, &w0, ws[19], p[30]); 2735| 7.65k| word3_muladd(&w2, &w1, &w0, ws[20], p[29]); 2736| 7.65k| word3_muladd(&w2, &w1, &w0, ws[21], p[28]); 2737| 7.65k| word3_muladd(&w2, &w1, &w0, ws[22], p[27]); 2738| 7.65k| word3_muladd(&w2, &w1, &w0, ws[23], p[26]); 2739| 7.65k| word3_muladd(&w2, &w1, &w0, ws[24], p[25]); 2740| 7.65k| word3_muladd(&w2, &w1, &w0, ws[25], p[24]); 2741| 7.65k| word3_muladd(&w2, &w1, &w0, ws[26], p[23]); 2742| 7.65k| word3_muladd(&w2, &w1, &w0, ws[27], p[22]); 2743| 7.65k| word3_muladd(&w2, &w1, &w0, ws[28], p[21]); 2744| 7.65k| word3_muladd(&w2, &w1, &w0, ws[29], p[20]); 2745| 7.65k| word3_muladd(&w2, &w1, &w0, ws[30], p[19]); 2746| 7.65k| word3_muladd(&w2, &w1, &w0, ws[31], p[18]); 2747| 7.65k| word3_add(&w2, &w1, &w0, z[49]); 2748| 7.65k| ws[17] = w0; 2749| 7.65k| w0 = w1; 2750| 7.65k| w1 = w2; 2751| 7.65k| w2 = 0; 2752| 7.65k| word3_muladd(&w2, &w1, &w0, ws[19], p[31]); 2753| 7.65k| word3_muladd(&w2, &w1, &w0, ws[20], p[30]); 2754| 7.65k| word3_muladd(&w2, &w1, &w0, ws[21], p[29]); 2755| 7.65k| word3_muladd(&w2, &w1, &w0, ws[22], p[28]); 2756| 7.65k| word3_muladd(&w2, &w1, &w0, ws[23], p[27]); 2757| 7.65k| word3_muladd(&w2, &w1, &w0, ws[24], p[26]); 2758| 7.65k| word3_muladd(&w2, &w1, &w0, ws[25], p[25]); 2759| 7.65k| word3_muladd(&w2, &w1, &w0, ws[26], p[24]); 2760| 7.65k| word3_muladd(&w2, &w1, &w0, ws[27], p[23]); 2761| 7.65k| word3_muladd(&w2, &w1, &w0, ws[28], p[22]); 2762| 7.65k| word3_muladd(&w2, &w1, &w0, ws[29], p[21]); 2763| 7.65k| word3_muladd(&w2, &w1, &w0, ws[30], p[20]); 2764| 7.65k| word3_muladd(&w2, &w1, &w0, ws[31], p[19]); 2765| 7.65k| word3_add(&w2, &w1, &w0, z[50]); 2766| 7.65k| ws[18] = w0; 2767| 7.65k| w0 = w1; 2768| 7.65k| w1 = w2; 2769| 7.65k| w2 = 0; 2770| 7.65k| word3_muladd(&w2, &w1, &w0, ws[20], p[31]); 2771| 7.65k| word3_muladd(&w2, &w1, &w0, ws[21], p[30]); 2772| 7.65k| word3_muladd(&w2, &w1, &w0, ws[22], p[29]); 2773| 7.65k| word3_muladd(&w2, &w1, &w0, ws[23], p[28]); 2774| 7.65k| word3_muladd(&w2, &w1, &w0, ws[24], p[27]); 2775| 7.65k| word3_muladd(&w2, &w1, &w0, ws[25], p[26]); 2776| 7.65k| word3_muladd(&w2, &w1, &w0, ws[26], p[25]); 2777| 7.65k| word3_muladd(&w2, &w1, &w0, ws[27], p[24]); 2778| 7.65k| word3_muladd(&w2, &w1, &w0, ws[28], p[23]); 2779| 7.65k| word3_muladd(&w2, &w1, &w0, ws[29], p[22]); 2780| 7.65k| word3_muladd(&w2, &w1, &w0, ws[30], p[21]); 2781| 7.65k| word3_muladd(&w2, &w1, &w0, ws[31], p[20]); 2782| 7.65k| word3_add(&w2, &w1, &w0, z[51]); 2783| 7.65k| ws[19] = w0; 2784| 7.65k| w0 = w1; 2785| 7.65k| w1 = w2; 2786| 7.65k| w2 = 0; 2787| 7.65k| word3_muladd(&w2, &w1, &w0, ws[21], p[31]); 2788| 7.65k| word3_muladd(&w2, &w1, &w0, ws[22], p[30]); 2789| 7.65k| word3_muladd(&w2, &w1, &w0, ws[23], p[29]); 2790| 7.65k| word3_muladd(&w2, &w1, &w0, ws[24], p[28]); 2791| 7.65k| word3_muladd(&w2, &w1, &w0, ws[25], p[27]); 2792| 7.65k| word3_muladd(&w2, &w1, &w0, ws[26], p[26]); 2793| 7.65k| word3_muladd(&w2, &w1, &w0, ws[27], p[25]); 2794| 7.65k| word3_muladd(&w2, &w1, &w0, ws[28], p[24]); 2795| 7.65k| word3_muladd(&w2, &w1, &w0, ws[29], p[23]); 2796| 7.65k| word3_muladd(&w2, &w1, &w0, ws[30], p[22]); 2797| 7.65k| word3_muladd(&w2, &w1, &w0, ws[31], p[21]); 2798| 7.65k| word3_add(&w2, &w1, &w0, z[52]); 2799| 7.65k| ws[20] = w0; 2800| 7.65k| w0 = w1; 2801| 7.65k| w1 = w2; 2802| 7.65k| w2 = 0; 2803| 7.65k| word3_muladd(&w2, &w1, &w0, ws[22], p[31]); 2804| 7.65k| word3_muladd(&w2, &w1, &w0, ws[23], p[30]); 2805| 7.65k| word3_muladd(&w2, &w1, &w0, ws[24], p[29]); 2806| 7.65k| word3_muladd(&w2, &w1, &w0, ws[25], p[28]); 2807| 7.65k| word3_muladd(&w2, &w1, &w0, ws[26], p[27]); 2808| 7.65k| word3_muladd(&w2, &w1, &w0, ws[27], p[26]); 2809| 7.65k| word3_muladd(&w2, &w1, &w0, ws[28], p[25]); 2810| 7.65k| word3_muladd(&w2, &w1, &w0, ws[29], p[24]); 2811| 7.65k| word3_muladd(&w2, &w1, &w0, ws[30], p[23]); 2812| 7.65k| word3_muladd(&w2, &w1, &w0, ws[31], p[22]); 2813| 7.65k| word3_add(&w2, &w1, &w0, z[53]); 2814| 7.65k| ws[21] = w0; 2815| 7.65k| w0 = w1; 2816| 7.65k| w1 = w2; 2817| 7.65k| w2 = 0; 2818| 7.65k| word3_muladd(&w2, &w1, &w0, ws[23], p[31]); 2819| 7.65k| word3_muladd(&w2, &w1, &w0, ws[24], p[30]); 2820| 7.65k| word3_muladd(&w2, &w1, &w0, ws[25], p[29]); 2821| 7.65k| word3_muladd(&w2, &w1, &w0, ws[26], p[28]); 2822| 7.65k| word3_muladd(&w2, &w1, &w0, ws[27], p[27]); 2823| 7.65k| word3_muladd(&w2, &w1, &w0, ws[28], p[26]); 2824| 7.65k| word3_muladd(&w2, &w1, &w0, ws[29], p[25]); 2825| 7.65k| word3_muladd(&w2, &w1, &w0, ws[30], p[24]); 2826| 7.65k| word3_muladd(&w2, &w1, &w0, ws[31], p[23]); 2827| 7.65k| word3_add(&w2, &w1, &w0, z[54]); 2828| 7.65k| ws[22] = w0; 2829| 7.65k| w0 = w1; 2830| 7.65k| w1 = w2; 2831| 7.65k| w2 = 0; 2832| 7.65k| word3_muladd(&w2, &w1, &w0, ws[24], p[31]); 2833| 7.65k| word3_muladd(&w2, &w1, &w0, ws[25], p[30]); 2834| 7.65k| word3_muladd(&w2, &w1, &w0, ws[26], p[29]); 2835| 7.65k| word3_muladd(&w2, &w1, &w0, ws[27], p[28]); 2836| 7.65k| word3_muladd(&w2, &w1, &w0, ws[28], p[27]); 2837| 7.65k| word3_muladd(&w2, &w1, &w0, ws[29], p[26]); 2838| 7.65k| word3_muladd(&w2, &w1, &w0, ws[30], p[25]); 2839| 7.65k| word3_muladd(&w2, &w1, &w0, ws[31], p[24]); 2840| 7.65k| word3_add(&w2, &w1, &w0, z[55]); 2841| 7.65k| ws[23] = w0; 2842| 7.65k| w0 = w1; 2843| 7.65k| w1 = w2; 2844| 7.65k| w2 = 0; 2845| 7.65k| word3_muladd(&w2, &w1, &w0, ws[25], p[31]); 2846| 7.65k| word3_muladd(&w2, &w1, &w0, ws[26], p[30]); 2847| 7.65k| word3_muladd(&w2, &w1, &w0, ws[27], p[29]); 2848| 7.65k| word3_muladd(&w2, &w1, &w0, ws[28], p[28]); 2849| 7.65k| word3_muladd(&w2, &w1, &w0, ws[29], p[27]); 2850| 7.65k| word3_muladd(&w2, &w1, &w0, ws[30], p[26]); 2851| 7.65k| word3_muladd(&w2, &w1, &w0, ws[31], p[25]); 2852| 7.65k| word3_add(&w2, &w1, &w0, z[56]); 2853| 7.65k| ws[24] = w0; 2854| 7.65k| w0 = w1; 2855| 7.65k| w1 = w2; 2856| 7.65k| w2 = 0; 2857| 7.65k| word3_muladd(&w2, &w1, &w0, ws[26], p[31]); 2858| 7.65k| word3_muladd(&w2, &w1, &w0, ws[27], p[30]); 2859| 7.65k| word3_muladd(&w2, &w1, &w0, ws[28], p[29]); 2860| 7.65k| word3_muladd(&w2, &w1, &w0, ws[29], p[28]); 2861| 7.65k| word3_muladd(&w2, &w1, &w0, ws[30], p[27]); 2862| 7.65k| word3_muladd(&w2, &w1, &w0, ws[31], p[26]); 2863| 7.65k| word3_add(&w2, &w1, &w0, z[57]); 2864| 7.65k| ws[25] = w0; 2865| 7.65k| w0 = w1; 2866| 7.65k| w1 = w2; 2867| 7.65k| w2 = 0; 2868| 7.65k| word3_muladd(&w2, &w1, &w0, ws[27], p[31]); 2869| 7.65k| word3_muladd(&w2, &w1, &w0, ws[28], p[30]); 2870| 7.65k| word3_muladd(&w2, &w1, &w0, ws[29], p[29]); 2871| 7.65k| word3_muladd(&w2, &w1, &w0, ws[30], p[28]); 2872| 7.65k| word3_muladd(&w2, &w1, &w0, ws[31], p[27]); 2873| 7.65k| word3_add(&w2, &w1, &w0, z[58]); 2874| 7.65k| ws[26] = w0; 2875| 7.65k| w0 = w1; 2876| 7.65k| w1 = w2; 2877| 7.65k| w2 = 0; 2878| 7.65k| word3_muladd(&w2, &w1, &w0, ws[28], p[31]); 2879| 7.65k| word3_muladd(&w2, &w1, &w0, ws[29], p[30]); 2880| 7.65k| word3_muladd(&w2, &w1, &w0, ws[30], p[29]); 2881| 7.65k| word3_muladd(&w2, &w1, &w0, ws[31], p[28]); 2882| 7.65k| word3_add(&w2, &w1, &w0, z[59]); 2883| 7.65k| ws[27] = w0; 2884| 7.65k| w0 = w1; 2885| 7.65k| w1 = w2; 2886| 7.65k| w2 = 0; 2887| 7.65k| word3_muladd(&w2, &w1, &w0, ws[29], p[31]); 2888| 7.65k| word3_muladd(&w2, &w1, &w0, ws[30], p[30]); 2889| 7.65k| word3_muladd(&w2, &w1, &w0, ws[31], p[29]); 2890| 7.65k| word3_add(&w2, &w1, &w0, z[60]); 2891| 7.65k| ws[28] = w0; 2892| 7.65k| w0 = w1; 2893| 7.65k| w1 = w2; 2894| 7.65k| w2 = 0; 2895| 7.65k| word3_muladd(&w2, &w1, &w0, ws[30], p[31]); 2896| 7.65k| word3_muladd(&w2, &w1, &w0, ws[31], p[30]); 2897| 7.65k| word3_add(&w2, &w1, &w0, z[61]); 2898| 7.65k| ws[29] = w0; 2899| 7.65k| w0 = w1; 2900| 7.65k| w1 = w2; 2901| 7.65k| w2 = 0; 2902| 7.65k| word3_muladd(&w2, &w1, &w0, ws[31], p[31]); 2903| 7.65k| word3_add(&w2, &w1, &w0, z[62]); 2904| 7.65k| ws[30] = w0; 2905| 7.65k| w0 = w1; 2906| 7.65k| w1 = w2; 2907| 7.65k| w2 = 0; 2908| 7.65k| word3_add(&w2, &w1, &w0, z[63]); 2909| 7.65k| ws[31] = w0; 2910| 7.65k| ws[32] = w1; 2911| 7.65k| word borrow = bigint_sub3(z, ws, 32 + 1, p, 32); 2912| 7.65k| CT::conditional_assign_mem(borrow, z, ws, 32); 2913| 7.65k| clear_mem(z + 32, 32); 2914| 7.65k|} _ZN5Botan13monty_inverseEm: 16| 1.18k|word monty_inverse(word a) { 17| 1.18k| if(a % 2 == 0) { ------------------ | Branch (17:7): [True: 0, False: 1.18k] ------------------ 18| 0| throw Invalid_Argument("monty_inverse only valid for odd integers"); 19| 0| } 20| | 21| | /* 22| | * From "A New Algorithm for Inversion mod p^k" by Çetin Kaya Koç 23| | * https://eprint.iacr.org/2017/411.pdf sections 5 and 7. 24| | */ 25| | 26| 1.18k| word b = 1; 27| 1.18k| word r = 0; 28| | 29| 77.0k| for(size_t i = 0; i != BOTAN_MP_WORD_BITS; ++i) { ------------------ | | 50| 77.0k|#define BOTAN_MP_WORD_BITS 64 ------------------ | Branch (29:22): [True: 75.9k, False: 1.18k] ------------------ 30| 75.9k| const word bi = b % 2; 31| 75.9k| r >>= 1; 32| 75.9k| r += bi << (BOTAN_MP_WORD_BITS - 1); ------------------ | | 50| 75.9k|#define BOTAN_MP_WORD_BITS 64 ------------------ 33| | 34| 75.9k| b -= a * bi; 35| 75.9k| b >>= 1; 36| 75.9k| } 37| | 38| | // Now invert in addition space 39| 1.18k| r = (MP_WORD_MAX - r) + 1; 40| | 41| 1.18k| return r; 42| 1.18k|} _ZN5Botan17Montgomery_ParamsC2ERKNS_6BigIntE: 60| 1.18k|Montgomery_Params::Montgomery_Params(const BigInt& p) { 61| 1.18k| if(p.is_even() || p < 3) { ------------------ | Branch (61:7): [True: 0, False: 1.18k] | Branch (61:22): [True: 0, False: 1.18k] ------------------ 62| 0| throw Invalid_Argument("Montgomery_Params invalid modulus"); 63| 0| } 64| | 65| 1.18k| m_p = p; 66| 1.18k| m_p_words = m_p.sig_words(); 67| 1.18k| m_p_dash = monty_inverse(m_p.word_at(0)); 68| | 69| 1.18k| const BigInt r = BigInt::power_of_2(m_p_words * BOTAN_MP_WORD_BITS); ------------------ | | 50| 1.18k|#define BOTAN_MP_WORD_BITS 64 ------------------ 70| | 71| | // It might be faster to use ct_modulo here vs setting up Barrett reduction? 72| 1.18k| Modular_Reducer mod_p(p); 73| | 74| 1.18k| m_r1 = mod_p.reduce(r); 75| 1.18k| m_r2 = mod_p.square(m_r1); 76| 1.18k| m_r3 = mod_p.multiply(m_r1, m_r2); 77| 1.18k|} _ZNK5Botan17Montgomery_Params4redcERKNS_6BigIntERNSt3__16vectorImNS_16secure_allocatorImEEEE: 84| 1.07k|BigInt Montgomery_Params::redc(const BigInt& x, secure_vector& ws) const { 85| 1.07k| const size_t output_size = m_p_words + 1; 86| | 87| 1.07k| if(ws.size() < output_size) { ------------------ | Branch (87:7): [True: 1.07k, False: 0] ------------------ 88| 1.07k| ws.resize(output_size); 89| 1.07k| } 90| | 91| 1.07k| BigInt z = x; 92| 1.07k| z.grow_to(2 * m_p_words); 93| | 94| 1.07k| bigint_monty_redc(z.mutable_data(), m_p.data(), m_p_words, m_p_dash, ws.data(), ws.size()); 95| | 96| 1.07k| return z; 97| 1.07k|} _ZNK5Botan17Montgomery_Params3mulERKNS_6BigIntES3_RNSt3__16vectorImNS_16secure_allocatorImEEEE: 99| 1.07k|BigInt Montgomery_Params::mul(const BigInt& x, const BigInt& y, secure_vector& ws) const { 100| 1.07k| const size_t output_size = 2 * m_p_words + 2; 101| | 102| 1.07k| if(ws.size() < output_size) { ------------------ | Branch (102:7): [True: 1.07k, False: 0] ------------------ 103| 1.07k| ws.resize(output_size); 104| 1.07k| } 105| | 106| 1.07k| BOTAN_DEBUG_ASSERT(x.sig_words() <= m_p_words); ------------------ | | 99| 1.07k| do { \ | | 100| 1.07k| } while(0) | | ------------------ | | | Branch (100:15): [Folded - Ignored] | | ------------------ ------------------ 107| 1.07k| BOTAN_DEBUG_ASSERT(y.sig_words() <= m_p_words); ------------------ | | 99| 1.07k| do { \ | | 100| 1.07k| } while(0) | | ------------------ | | | Branch (100:15): [Folded - Ignored] | | ------------------ ------------------ 108| | 109| 1.07k| BigInt z = BigInt::with_capacity(output_size); 110| 1.07k| bigint_mul(z.mutable_data(), 111| 1.07k| z.size(), 112| 1.07k| x.data(), 113| 1.07k| x.size(), 114| 1.07k| std::min(m_p_words, x.size()), 115| 1.07k| y.data(), 116| 1.07k| y.size(), 117| 1.07k| std::min(m_p_words, y.size()), 118| 1.07k| ws.data(), 119| 1.07k| ws.size()); 120| | 121| 1.07k| bigint_monty_redc(z.mutable_data(), m_p.data(), m_p_words, m_p_dash, ws.data(), ws.size()); 122| | 123| 1.07k| return z; 124| 1.07k|} _ZNK5Botan17Montgomery_Params6mul_byERNS_6BigIntERKS1_RNSt3__16vectorImNS_16secure_allocatorImEEEE: 182| 36.2k|void Montgomery_Params::mul_by(BigInt& x, const BigInt& y, secure_vector& ws) const { 183| 36.2k| const size_t output_size = 2 * m_p_words; 184| | 185| 36.2k| if(ws.size() < 2 * output_size) { ------------------ | Branch (185:7): [True: 0, False: 36.2k] ------------------ 186| 0| ws.resize(2 * output_size); 187| 0| } 188| | 189| 36.2k| word* z_data = &ws[0]; 190| 36.2k| word* ws_data = &ws[output_size]; 191| | 192| 36.2k| BOTAN_DEBUG_ASSERT(x.sig_words() <= m_p_words); ------------------ | | 99| 36.2k| do { \ | | 100| 36.2k| } while(0) | | ------------------ | | | Branch (100:15): [Folded - Ignored] | | ------------------ ------------------ 193| | 194| 36.2k| bigint_mul(z_data, 195| 36.2k| output_size, 196| 36.2k| x.data(), 197| 36.2k| x.size(), 198| 36.2k| std::min(m_p_words, x.size()), 199| 36.2k| y.data(), 200| 36.2k| y.size(), 201| 36.2k| std::min(m_p_words, y.size()), 202| 36.2k| ws_data, 203| 36.2k| output_size); 204| | 205| 36.2k| bigint_monty_redc(z_data, m_p.data(), m_p_words, m_p_dash, ws_data, output_size); 206| | 207| 36.2k| if(x.size() < output_size) { ------------------ | Branch (207:7): [True: 0, False: 36.2k] ------------------ 208| 0| x.grow_to(output_size); 209| 0| } 210| 36.2k| copy_mem(x.mutable_data(), z_data, output_size); 211| 36.2k|} _ZNK5Botan17Montgomery_Params11square_thisERNS_6BigIntERNSt3__16vectorImNS_16secure_allocatorImEEEE: 231| 109k|void Montgomery_Params::square_this(BigInt& x, secure_vector& ws) const { 232| 109k| const size_t output_size = 2 * m_p_words; 233| | 234| 109k| if(ws.size() < 2 * output_size) { ------------------ | Branch (234:7): [True: 1.03k, False: 108k] ------------------ 235| 1.03k| ws.resize(2 * output_size); 236| 1.03k| } 237| | 238| 109k| word* z_data = &ws[0]; 239| 109k| word* ws_data = &ws[output_size]; 240| | 241| 109k| BOTAN_DEBUG_ASSERT(x.sig_words() <= m_p_words); ------------------ | | 99| 109k| do { \ | | 100| 109k| } while(0) | | ------------------ | | | Branch (100:15): [Folded - Ignored] | | ------------------ ------------------ 242| | 243| 109k| bigint_sqr(z_data, output_size, x.data(), x.size(), std::min(m_p_words, x.size()), ws_data, output_size); 244| | 245| 109k| bigint_monty_redc(z_data, m_p.data(), m_p_words, m_p_dash, ws_data, output_size); 246| | 247| 109k| if(x.size() < output_size) { ------------------ | Branch (247:7): [True: 0, False: 109k] ------------------ 248| 0| x.grow_to(output_size); 249| 0| } 250| 109k| copy_mem(x.mutable_data(), z_data, output_size); 251| 109k|} _ZN5Botan14Montgomery_IntC2ERKNSt3__110shared_ptrIKNS_17Montgomery_ParamsEEERKNS_6BigIntEb: 256| 2.15k| m_params(params) { 257| 2.15k| if(redc_needed == false) { ------------------ | Branch (257:7): [True: 1.07k, False: 1.07k] ------------------ 258| 1.07k| m_v = v; 259| 1.07k| } else { 260| 1.07k| BOTAN_ASSERT_NOMSG(m_v < m_params->p()); ------------------ | | 60| 1.07k| do { \ | | 61| 1.07k| if(!(expr)) \ | | ------------------ | | | Branch (61:10): [True: 0, False: 1.07k] | | ------------------ | | 62| 1.07k| Botan::assertion_failure(#expr, "", __func__, __FILE__, __LINE__); \ | | 63| 1.07k| } while(0) | | ------------------ | | | Branch (63:12): [Folded - Ignored] | | ------------------ ------------------ 261| 1.07k| secure_vector ws; 262| 1.07k| m_v = m_params->mul(v, m_params->R2(), ws); 263| 1.07k| } 264| 2.15k|} _ZN5Botan14Montgomery_Int8fix_sizeEv: 292| 2.15k|void Montgomery_Int::fix_size() { 293| 2.15k| const size_t p_words = m_params->p_words(); 294| | 295| 2.15k| if(m_v.sig_words() > p_words) { ------------------ | Branch (295:7): [True: 0, False: 2.15k] ------------------ 296| 0| throw Internal_Error("Montgomery_Int::fix_size v too large"); 297| 0| } 298| | 299| 2.15k| m_v.grow_to(p_words); 300| 2.15k|} _ZNK5Botan14Montgomery_Int5valueEv: 318| 1.07k|BigInt Montgomery_Int::value() const { 319| 1.07k| secure_vector ws; 320| 1.07k| return m_params->redc(m_v, ws); 321| 1.07k|} _ZN5Botan14Montgomery_Int6mul_byERKS0_RNSt3__16vectorImNS_16secure_allocatorImEEEE: 366| 36.2k|Montgomery_Int& Montgomery_Int::mul_by(const Montgomery_Int& other, secure_vector& ws) { 367| 36.2k| m_params->mul_by(m_v, other.m_v, ws); 368| 36.2k| return (*this); 369| 36.2k|} _ZN5Botan14Montgomery_Int19square_this_n_timesERNSt3__16vectorImNS_16secure_allocatorImEEEEm: 386| 109k|Montgomery_Int& Montgomery_Int::square_this_n_times(secure_vector& ws, size_t n) { 387| 218k| for(size_t i = 0; i != n; ++i) { ------------------ | Branch (387:22): [True: 109k, False: 109k] ------------------ 388| 109k| m_params->square_this(m_v, ws); 389| 109k| } 390| 109k| return (*this); 391| 109k|} _ZN5Botan30Montgomery_Exponentation_StateC2ERKNSt3__110shared_ptrIKNS_17Montgomery_ParamsEEERKNS_6BigIntEmb: 40| 1.07k| m_params(params), m_window_bits(window_bits == 0 ? 4 : window_bits) { 41| 1.07k| BOTAN_ARG_CHECK(g < m_params->p(), "Montgomery base too big"); ------------------ | | 30| 1.07k| do { \ | | 31| 1.07k| if(!(expr)) \ | | ------------------ | | | Branch (31:10): [True: 0, False: 1.07k] | | ------------------ | | 32| 1.07k| Botan::throw_invalid_argument(msg, __func__, __FILE__); \ | | 33| 1.07k| } while(0) | | ------------------ | | | Branch (33:12): [Folded - Ignored] | | ------------------ ------------------ 42| | 43| 1.07k| if(m_window_bits < 1 || m_window_bits > 12) { // really even 8 is too large ... ------------------ | Branch (43:7): [True: 0, False: 1.07k] | Branch (43:28): [True: 0, False: 1.07k] ------------------ 44| 0| throw Invalid_Argument("Invalid window bits for Montgomery exponentiation"); 45| 0| } 46| | 47| 1.07k| const size_t window_size = (static_cast(1) << m_window_bits); 48| | 49| 1.07k| m_g.reserve(window_size); 50| | 51| 1.07k| m_g.push_back(Montgomery_Int(m_params, m_params->R1(), false)); 52| | 53| 1.07k| m_g.push_back(Montgomery_Int(m_params, g)); 54| | 55| 1.07k| for(size_t i = 2; i != window_size; ++i) { ------------------ | Branch (55:22): [True: 0, False: 1.07k] ------------------ 56| 0| m_g.push_back(m_g[1] * m_g[i - 1]); 57| 0| } 58| | 59| | // Resize each element to exactly p words 60| 3.23k| for(size_t i = 0; i != window_size; ++i) { ------------------ | Branch (60:22): [True: 2.15k, False: 1.07k] ------------------ 61| 2.15k| m_g[i].fix_size(); 62| 2.15k| if(const_time) { ------------------ | Branch (62:10): [True: 0, False: 2.15k] ------------------ 63| 0| m_g[i].const_time_poison(); 64| 0| } 65| 2.15k| } 66| 1.07k|} _ZNK5Botan30Montgomery_Exponentation_State22exponentiation_vartimeERKNS_6BigIntE: 121| 1.07k|BigInt Montgomery_Exponentation_State::exponentiation_vartime(const BigInt& scalar) const { 122| 1.07k| const size_t exp_nibbles = (scalar.bits() + m_window_bits - 1) / m_window_bits; 123| | 124| 1.07k| secure_vector ws; 125| | 126| 1.07k| if(exp_nibbles == 0) { ------------------ | Branch (126:7): [True: 0, False: 1.07k] ------------------ 127| 0| return BigInt::one(); 128| 0| } 129| | 130| 1.07k| Montgomery_Int x = m_g[scalar.get_substring(m_window_bits * (exp_nibbles - 1), m_window_bits)]; 131| | 132| 110k| for(size_t i = exp_nibbles - 1; i > 0; --i) { ------------------ | Branch (132:36): [True: 109k, False: 1.07k] ------------------ 133| 109k| x.square_this_n_times(ws, m_window_bits); 134| | 135| 109k| const uint32_t nibble = scalar.get_substring(m_window_bits * (i - 1), m_window_bits); 136| 109k| if(nibble > 0) { ------------------ | Branch (136:10): [True: 36.2k, False: 73.0k] ------------------ 137| 36.2k| x.mul_by(m_g[nibble], ws); 138| 36.2k| } 139| 109k| } 140| | 141| 1.07k| x.const_time_unpoison(); 142| 1.07k| return x.value(); 143| 1.07k|} _ZN5Botan16monty_precomputeERKNSt3__110shared_ptrIKNS_17Montgomery_ParamsEEERKNS_6BigIntEmb: 146| 1.07k| const std::shared_ptr& params, const BigInt& g, size_t window_bits, bool const_time) { 147| 1.07k| return std::make_shared(params, g, window_bits, const_time); 148| 1.07k|} _ZN5Botan21monty_execute_vartimeERKNS_30Montgomery_Exponentation_StateERKNS_6BigIntE: 154| 1.07k|BigInt monty_execute_vartime(const Montgomery_Exponentation_State& precomputed_state, const BigInt& k) { 155| 1.07k| return precomputed_state.exponentiation_vartime(k); 156| 1.07k|} _ZN5Botan6squareERKNS_6BigIntE: 169| 1.18k|BigInt square(const BigInt& x) { 170| 1.18k| BigInt z = x; 171| 1.18k| secure_vector ws; 172| 1.18k| z.square(ws); 173| 1.18k| return z; 174| 1.18k|} _ZN5Botan15Modular_ReducerC2ERKNS_6BigIntE: 19| 1.18k|Modular_Reducer::Modular_Reducer(const BigInt& mod) { 20| 1.18k| if(mod < 0) { ------------------ | Branch (20:7): [True: 0, False: 1.18k] ------------------ 21| 0| throw Invalid_Argument("Modular_Reducer: modulus must be positive"); 22| 0| } 23| | 24| | // Left uninitialized if mod == 0 25| 1.18k| m_mod_words = 0; 26| | 27| 1.18k| if(mod > 0) { ------------------ | Branch (27:7): [True: 1.18k, False: 0] ------------------ 28| 1.18k| m_modulus = mod; 29| 1.18k| m_mod_words = m_modulus.sig_words(); 30| | 31| | // Compute mu = floor(2^{2k} / m) 32| 1.18k| m_mu.set_bit(2 * BOTAN_MP_WORD_BITS * m_mod_words); ------------------ | | 50| 1.18k|#define BOTAN_MP_WORD_BITS 64 ------------------ 33| 1.18k| m_mu = ct_divide(m_mu, m_modulus); 34| 1.18k| } 35| 1.18k|} _ZNK5Botan15Modular_Reducer6reduceERKNS_6BigIntE: 37| 3.55k|BigInt Modular_Reducer::reduce(const BigInt& x) const { 38| 3.55k| BigInt r; 39| 3.55k| secure_vector ws; 40| 3.55k| reduce(r, x, ws); 41| 3.55k| return r; 42| 3.55k|} _ZNK5Botan15Modular_Reducer6reduceERNS_6BigIntERKS1_RNSt3__16vectorImNS_16secure_allocatorImEEEE: 69| 3.55k|void Modular_Reducer::reduce(BigInt& t1, const BigInt& x, secure_vector& ws) const { 70| 3.55k| if(&t1 == &x) { ------------------ | Branch (70:7): [True: 0, False: 3.55k] ------------------ 71| 0| throw Invalid_State("Modular_Reducer arguments cannot alias"); 72| 0| } 73| 3.55k| if(m_mod_words == 0) { ------------------ | Branch (73:7): [True: 0, False: 3.55k] ------------------ 74| 0| throw Invalid_State("Modular_Reducer: Never initalized"); 75| 0| } 76| | 77| 3.55k| const size_t x_sw = x.sig_words(); 78| | 79| 3.55k| if(x_sw > 2 * m_mod_words) { ------------------ | Branch (79:7): [True: 0, False: 3.55k] ------------------ 80| | // too big, fall back to slow boat division 81| 0| t1 = ct_modulo(x, m_modulus); 82| 0| return; 83| 0| } 84| | 85| 3.55k| t1 = x; 86| 3.55k| t1.set_sign(BigInt::Positive); 87| 3.55k| t1 >>= (BOTAN_MP_WORD_BITS * (m_mod_words - 1)); ------------------ | | 50| 3.55k|#define BOTAN_MP_WORD_BITS 64 ------------------ 88| | 89| 3.55k| t1.mul(m_mu, ws); 90| 3.55k| t1 >>= (BOTAN_MP_WORD_BITS * (m_mod_words + 1)); ------------------ | | 50| 3.55k|#define BOTAN_MP_WORD_BITS 64 ------------------ 91| | 92| | // TODO add masked mul to avoid computing high bits 93| 3.55k| t1.mul(m_modulus, ws); 94| 3.55k| t1.mask_bits(BOTAN_MP_WORD_BITS * (m_mod_words + 1)); ------------------ | | 50| 3.55k|#define BOTAN_MP_WORD_BITS 64 ------------------ 95| | 96| 3.55k| t1.rev_sub(x.data(), std::min(x_sw, m_mod_words + 1), ws); 97| | 98| | /* 99| | * If t1 < 0 then we must add b^(k+1) where b = 2^w. To avoid a 100| | * side channel perform the addition unconditionally, with ws set 101| | * to either b^(k+1) or else 0. 102| | */ 103| 3.55k| const word t1_neg = t1.is_negative(); 104| | 105| 3.55k| if(ws.size() < m_mod_words + 2) { ------------------ | Branch (105:7): [True: 159, False: 3.39k] ------------------ 106| 159| ws.resize(m_mod_words + 2); 107| 159| } 108| 3.55k| clear_mem(ws.data(), ws.size()); 109| 3.55k| ws[m_mod_words + 1] = t1_neg; 110| | 111| 3.55k| t1.add(ws.data(), m_mod_words + 2, BigInt::Positive); 112| | 113| | // Per HAC this step requires at most 2 subtractions 114| 3.55k| t1.ct_reduce_below(m_modulus, ws, 2); 115| | 116| 3.55k| cnd_rev_sub(t1.is_nonzero() && x.is_negative(), t1, m_modulus.data(), m_modulus.size(), ws); ------------------ | Branch (116:16): [True: 3.55k, False: 0] | Branch (116:35): [True: 0, False: 3.55k] ------------------ 117| 3.55k|} reducer.cpp:_ZN5Botan12_GLOBAL__N_111cnd_rev_subEbRNS_6BigIntEPKmmRNSt3__16vectorImNS_16secure_allocatorImEEEE: 49| 3.55k|void cnd_rev_sub(bool cnd, BigInt& x, const word y[], size_t y_sw, secure_vector& ws) { 50| 3.55k| if(x.sign() != BigInt::Positive) { ------------------ | Branch (50:7): [True: 0, False: 3.55k] ------------------ 51| 0| throw Invalid_State("BigInt::sub_rev requires this is positive"); 52| 0| } 53| | 54| 3.55k| const size_t x_sw = x.sig_words(); 55| | 56| 3.55k| const size_t max_words = std::max(x_sw, y_sw); 57| 3.55k| ws.resize(std::max(x_sw, y_sw)); 58| 3.55k| clear_mem(ws.data(), ws.size()); 59| 3.55k| x.grow_to(max_words); 60| | 61| 3.55k| const int32_t relative_size = bigint_sub_abs(ws.data(), x.data(), x_sw, y, y_sw); 62| | 63| 3.55k| x.cond_flip_sign((relative_size > 0) && cnd); ------------------ | Branch (63:21): [True: 0, False: 3.55k] | Branch (63:44): [True: 0, False: 0] ------------------ 64| 3.55k| bigint_cnd_swap(cnd, x.mutable_data(), ws.data(), max_words); 65| 3.55k|} _ZN5Botan4EMSA6createENSt3__117basic_string_viewIcNS1_11char_traitsIcEEEE: 35| 1.18k|std::unique_ptr EMSA::create(std::string_view algo_spec) { 36| 1.18k| SCAN_Name req(algo_spec); 37| | 38| 1.18k|#if defined(BOTAN_HAS_EMSA_PKCS1) 39| 1.18k| if(req.algo_name() == "EMSA_PKCS1" || req.algo_name() == "PKCS1v15" || req.algo_name() == "EMSA-PKCS1-v1_5" || ------------------ | Branch (39:7): [True: 0, False: 1.18k] | Branch (39:7): [True: 1.18k, False: 0] | Branch (39:42): [True: 0, False: 1.18k] | Branch (39:75): [True: 0, False: 1.18k] ------------------ 40| 1.18k| req.algo_name() == "EMSA3") { ------------------ | Branch (40:7): [True: 1.18k, False: 0] ------------------ 41| 1.18k| if(req.arg_count() == 2 && req.arg(0) == "Raw") { ------------------ | Branch (41:10): [True: 0, False: 1.18k] | Branch (41:10): [True: 0, False: 1.18k] | Branch (41:34): [True: 0, False: 0] ------------------ 42| 0| return std::make_unique(req.arg(1)); 43| 1.18k| } else if(req.arg_count() == 1) { ------------------ | Branch (43:17): [True: 1.18k, False: 0] ------------------ 44| 1.18k| if(req.arg(0) == "Raw") { ------------------ | Branch (44:13): [True: 0, False: 1.18k] ------------------ 45| 0| return std::make_unique(); 46| 1.18k| } else { 47| 1.18k| if(auto hash = HashFunction::create(req.arg(0))) { ------------------ | Branch (47:21): [True: 1.18k, False: 0] ------------------ 48| 1.18k| return std::make_unique(std::move(hash)); 49| 1.18k| } 50| 1.18k| } 51| 1.18k| } 52| 1.18k| } 53| 0|#endif 54| | 55| 0|#if defined(BOTAN_HAS_EMSA_PSSR) 56| 0| if(req.algo_name() == "PSS_Raw" || req.algo_name() == "PSSR_Raw") { ------------------ | Branch (56:7): [True: 0, False: 0] | Branch (56:7): [True: 0, False: 0] | Branch (56:39): [True: 0, False: 0] ------------------ 57| 0| if(req.arg_count_between(1, 3) && req.arg(1, "MGF1") == "MGF1") { ------------------ | Branch (57:10): [True: 0, False: 0] | Branch (57:10): [True: 0, False: 0] | Branch (57:41): [True: 0, False: 0] ------------------ 58| 0| if(auto hash = HashFunction::create(req.arg(0))) { ------------------ | Branch (58:18): [True: 0, False: 0] ------------------ 59| 0| if(req.arg_count() == 3) { ------------------ | Branch (59:16): [True: 0, False: 0] ------------------ 60| 0| const size_t salt_size = req.arg_as_integer(2, 0); 61| 0| return std::make_unique(std::move(hash), salt_size); 62| 0| } else { 63| 0| return std::make_unique(std::move(hash)); 64| 0| } 65| 0| } 66| 0| } 67| 0| } 68| | 69| 0| if(req.algo_name() == "PSS" || req.algo_name() == "PSSR" || req.algo_name() == "EMSA-PSS" || ------------------ | Branch (69:7): [True: 0, False: 0] | Branch (69:7): [True: 0, False: 0] | Branch (69:35): [True: 0, False: 0] | Branch (69:64): [True: 0, False: 0] ------------------ 70| 0| req.algo_name() == "PSS-MGF1" || req.algo_name() == "EMSA4") { ------------------ | Branch (70:7): [True: 0, False: 0] | Branch (70:40): [True: 0, False: 0] ------------------ 71| 0| if(req.arg_count_between(1, 3) && req.arg(1, "MGF1") == "MGF1") { ------------------ | Branch (71:10): [True: 0, False: 0] | Branch (71:10): [True: 0, False: 0] | Branch (71:41): [True: 0, False: 0] ------------------ 72| 0| if(auto hash = HashFunction::create(req.arg(0))) { ------------------ | Branch (72:18): [True: 0, False: 0] ------------------ 73| 0| if(req.arg_count() == 3) { ------------------ | Branch (73:16): [True: 0, False: 0] ------------------ 74| 0| const size_t salt_size = req.arg_as_integer(2, 0); 75| 0| return std::make_unique(std::move(hash), salt_size); 76| 0| } else { 77| 0| return std::make_unique(std::move(hash)); 78| 0| } 79| 0| } 80| 0| } 81| 0| } 82| 0|#endif 83| | 84| 0|#if defined(BOTAN_HAS_ISO_9796) 85| 0| if(req.algo_name() == "ISO_9796_DS2") { ------------------ | Branch (85:7): [True: 0, False: 0] ------------------ 86| 0| if(req.arg_count_between(1, 3)) { ------------------ | Branch (86:10): [True: 0, False: 0] ------------------ 87| 0| if(auto hash = HashFunction::create(req.arg(0))) { ------------------ | Branch (87:18): [True: 0, False: 0] ------------------ 88| 0| const size_t salt_size = req.arg_as_integer(2, hash->output_length()); 89| 0| const bool implicit = req.arg(1, "exp") == "imp"; 90| 0| return std::make_unique(std::move(hash), implicit, salt_size); 91| 0| } 92| 0| } 93| 0| } 94| | //ISO-9796-2 DS 3 is deterministic and DS2 without a salt 95| 0| if(req.algo_name() == "ISO_9796_DS3") { ------------------ | Branch (95:7): [True: 0, False: 0] ------------------ 96| 0| if(req.arg_count_between(1, 2)) { ------------------ | Branch (96:10): [True: 0, False: 0] ------------------ 97| 0| if(auto hash = HashFunction::create(req.arg(0))) { ------------------ | Branch (97:18): [True: 0, False: 0] ------------------ 98| 0| const bool implicit = req.arg(1, "exp") == "imp"; 99| 0| return std::make_unique(std::move(hash), implicit); 100| 0| } 101| 0| } 102| 0| } 103| 0|#endif 104| | 105| 0|#if defined(BOTAN_HAS_EMSA_X931) 106| 0| if(req.algo_name() == "EMSA_X931" || req.algo_name() == "EMSA2" || req.algo_name() == "X9.31") { ------------------ | Branch (106:7): [True: 0, False: 0] | Branch (106:7): [True: 0, False: 0] | Branch (106:41): [True: 0, False: 0] | Branch (106:71): [True: 0, False: 0] ------------------ 107| 0| if(req.arg_count() == 1) { ------------------ | Branch (107:10): [True: 0, False: 0] ------------------ 108| 0| if(auto hash = HashFunction::create(req.arg(0))) { ------------------ | Branch (108:18): [True: 0, False: 0] ------------------ 109| 0| return std::make_unique(std::move(hash)); 110| 0| } 111| 0| } 112| 0| } 113| 0|#endif 114| | 115| 0|#if defined(BOTAN_HAS_EMSA_RAW) 116| 0| if(req.algo_name() == "Raw") { ------------------ | Branch (116:7): [True: 0, False: 0] ------------------ 117| 0| if(req.arg_count() == 0) { ------------------ | Branch (117:10): [True: 0, False: 0] ------------------ 118| 0| return std::make_unique(); 119| 0| } else { 120| 0| auto hash = HashFunction::create(req.arg(0)); 121| 0| if(hash) { ------------------ | Branch (121:13): [True: 0, False: 0] ------------------ 122| 0| return std::make_unique(hash->output_length()); 123| 0| } 124| 0| } 125| 0| } 126| 0|#endif 127| | 128| 0| return nullptr; 129| 0|} _ZN5Botan4EMSA15create_or_throwENSt3__117basic_string_viewIcNS1_11char_traitsIcEEEE: 131| 1.18k|std::unique_ptr EMSA::create_or_throw(std::string_view algo_spec) { 132| 1.18k| auto emsa = EMSA::create(algo_spec); 133| 1.18k| if(emsa) { ------------------ | Branch (133:7): [True: 1.18k, False: 0] ------------------ 134| 1.18k| return emsa; 135| 1.18k| } 136| 0| throw Algorithm_Not_Found(algo_spec); 137| 1.18k|} _ZN5Botan13EMSA_PKCS1v156updateEPKhm: 44| 1.18k|void EMSA_PKCS1v15::update(const uint8_t input[], size_t length) { m_hash->update(input, length); } _ZN5Botan13EMSA_PKCS1v158raw_dataEv: 46| 1.18k|std::vector EMSA_PKCS1v15::raw_data() { return m_hash->final_stdvec(); } _ZN5Botan13EMSA_PKCS1v156verifyERKNSt3__16vectorIhNS1_9allocatorIhEEEES7_m: 58| 1.07k|bool EMSA_PKCS1v15::verify(const std::vector& coded, const std::vector& raw, size_t key_bits) { 59| 1.07k| if(raw.size() != m_hash->output_length()) { ------------------ | Branch (59:7): [True: 0, False: 1.07k] ------------------ 60| 0| return false; 61| 0| } 62| | 63| 1.07k| try { 64| 1.07k| return (coded == emsa3_encoding(raw, key_bits, m_hash_id.data(), m_hash_id.size())); 65| 1.07k| } catch(...) { 66| 125| return false; 67| 125| } 68| 1.07k|} _ZN5Botan13EMSA_PKCS1v15C2ENSt3__110unique_ptrINS_12HashFunctionENS1_14default_deleteIS3_EEEE: 70| 1.18k|EMSA_PKCS1v15::EMSA_PKCS1v15(std::unique_ptr hash) : m_hash(std::move(hash)) { 71| 1.18k| m_hash_id = pkcs_hash_id(m_hash->name()); 72| 1.18k|} emsa_pkcs1.cpp:_ZN5Botan12_GLOBAL__N_114emsa3_encodingERKNSt3__16vectorIhNS1_9allocatorIhEEEEmPKhm: 20| 1.07k| size_t hash_id_length) { 21| 1.07k| size_t output_length = output_bits / 8; 22| 1.07k| if(output_length < hash_id_length + msg.size() + 10) { ------------------ | Branch (22:7): [True: 125, False: 952] ------------------ 23| 125| throw Encoding_Error("emsa3_encoding: Output length is too small"); 24| 125| } 25| | 26| 952| std::vector T(output_length); 27| 952| const size_t P_LENGTH = output_length - msg.size() - hash_id_length - 2; 28| | 29| 952| T[0] = 0x01; 30| 952| set_mem(&T[1], P_LENGTH, 0xFF); 31| 952| T[P_LENGTH + 1] = 0x00; 32| | 33| 952| if(hash_id_length > 0) { ------------------ | Branch (33:7): [True: 952, False: 0] ------------------ 34| 952| BOTAN_ASSERT_NONNULL(hash_id); ------------------ | | 87| 952| do { \ | | 88| 952| if((ptr) == nullptr) \ | | ------------------ | | | Branch (88:10): [True: 0, False: 952] | | ------------------ | | 89| 952| Botan::assertion_failure(#ptr " is not null", "", __func__, __FILE__, __LINE__); \ | | 90| 952| } while(0) | | ------------------ | | | Branch (90:12): [Folded - Ignored] | | ------------------ ------------------ 35| 952| buffer_insert(T, P_LENGTH + 2, hash_id, hash_id_length); 36| 952| } 37| | 38| 952| buffer_insert(T, output_length - msg.size(), msg.data(), msg.size()); 39| 952| return T; 40| 1.07k|} _ZN5Botan12pkcs_hash_idENSt3__117basic_string_viewIcNS0_11char_traitsIcEEEE: 78| 1.18k|std::vector pkcs_hash_id(std::string_view name) { 79| | // Special case for SSL/TLS RSA signatures 80| 1.18k| if(name == "Parallel(MD5,SHA-1)") { ------------------ | Branch (80:7): [True: 0, False: 1.18k] ------------------ 81| 0| return std::vector(); 82| 0| } 83| | 84| | // If you add a value to this function, also update test_hash_id.cpp 85| | 86| 1.18k| if(name == "MD5") { ------------------ | Branch (86:7): [True: 901, False: 279] ------------------ 87| 901| return std::vector(MD5_PKCS_ID, MD5_PKCS_ID + sizeof(MD5_PKCS_ID)); 88| 901| } 89| | 90| 279| if(name == "RIPEMD-160") { ------------------ | Branch (90:7): [True: 0, False: 279] ------------------ 91| 0| return std::vector(RIPEMD_160_PKCS_ID, RIPEMD_160_PKCS_ID + sizeof(RIPEMD_160_PKCS_ID)); 92| 0| } 93| | 94| 279| if(name == "SHA-1") { ------------------ | Branch (94:7): [True: 3, False: 276] ------------------ 95| 3| return std::vector(SHA_1_PKCS_ID, SHA_1_PKCS_ID + sizeof(SHA_1_PKCS_ID)); 96| 3| } 97| | 98| 276| if(name == "SHA-224") { ------------------ | Branch (98:7): [True: 112, False: 164] ------------------ 99| 112| return std::vector(SHA_224_PKCS_ID, SHA_224_PKCS_ID + sizeof(SHA_224_PKCS_ID)); 100| 112| } 101| | 102| 164| if(name == "SHA-256") { ------------------ | Branch (102:7): [True: 67, False: 97] ------------------ 103| 67| return std::vector(SHA_256_PKCS_ID, SHA_256_PKCS_ID + sizeof(SHA_256_PKCS_ID)); 104| 67| } 105| | 106| 97| if(name == "SHA-384") { ------------------ | Branch (106:7): [True: 55, False: 42] ------------------ 107| 55| return std::vector(SHA_384_PKCS_ID, SHA_384_PKCS_ID + sizeof(SHA_384_PKCS_ID)); 108| 55| } 109| | 110| 42| if(name == "SHA-512") { ------------------ | Branch (110:7): [True: 30, False: 12] ------------------ 111| 30| return std::vector(SHA_512_PKCS_ID, SHA_512_PKCS_ID + sizeof(SHA_512_PKCS_ID)); 112| 30| } 113| | 114| 12| if(name == "SHA-512-256") { ------------------ | Branch (114:7): [True: 12, False: 0] ------------------ 115| 12| return std::vector(SHA_512_256_PKCS_ID, SHA_512_256_PKCS_ID + sizeof(SHA_512_256_PKCS_ID)); 116| 12| } 117| | 118| 0| if(name == "SHA-3(224)") { ------------------ | Branch (118:7): [True: 0, False: 0] ------------------ 119| 0| return std::vector(SHA3_224_PKCS_ID, SHA3_224_PKCS_ID + sizeof(SHA3_224_PKCS_ID)); 120| 0| } 121| | 122| 0| if(name == "SHA-3(256)") { ------------------ | Branch (122:7): [True: 0, False: 0] ------------------ 123| 0| return std::vector(SHA3_256_PKCS_ID, SHA3_256_PKCS_ID + sizeof(SHA3_256_PKCS_ID)); 124| 0| } 125| | 126| 0| if(name == "SHA-3(384)") { ------------------ | Branch (126:7): [True: 0, False: 0] ------------------ 127| 0| return std::vector(SHA3_384_PKCS_ID, SHA3_384_PKCS_ID + sizeof(SHA3_384_PKCS_ID)); 128| 0| } 129| | 130| 0| if(name == "SHA-3(512)") { ------------------ | Branch (130:7): [True: 0, False: 0] ------------------ 131| 0| return std::vector(SHA3_512_PKCS_ID, SHA3_512_PKCS_ID + sizeof(SHA3_512_PKCS_ID)); 132| 0| } 133| | 134| 0| if(name == "SM3") { ------------------ | Branch (134:7): [True: 0, False: 0] ------------------ 135| 0| return std::vector(SM3_PKCS_ID, SM3_PKCS_ID + sizeof(SM3_PKCS_ID)); 136| 0| } 137| | 138| 0| throw Invalid_Argument("No PKCS #1 identifier for " + std::string(name)); 139| 0|} _ZN5Botan8PEM_Code6decodeERNS_10DataSourceERNSt3__112basic_stringIcNS3_11char_traitsIcEENS3_9allocatorIcEEEE: 62| 321|secure_vector decode(DataSource& source, std::string& label) { 63| 321| const size_t RANDOM_CHAR_LIMIT = 8; 64| | 65| 321| label.clear(); 66| | 67| 321| const std::string PEM_HEADER1 = "-----BEGIN "; 68| 321| const std::string PEM_HEADER2 = "-----"; 69| 321| size_t position = 0; 70| | 71| 11.3k| while(position != PEM_HEADER1.length()) { ------------------ | Branch (71:10): [True: 11.1k, False: 177] ------------------ 72| 11.1k| uint8_t b; 73| 11.1k| if(!source.read_byte(b)) { ------------------ | Branch (73:10): [True: 142, False: 11.0k] ------------------ 74| 142| throw Decoding_Error("PEM: No PEM header found"); 75| 142| } 76| 11.0k| if(static_cast(b) == PEM_HEADER1[position]) { ------------------ | Branch (76:10): [True: 2.57k, False: 8.45k] ------------------ 77| 2.57k| ++position; 78| 8.45k| } else if(position >= RANDOM_CHAR_LIMIT) { ------------------ | Branch (78:17): [True: 2, False: 8.44k] ------------------ 79| 2| throw Decoding_Error("PEM: Malformed PEM header"); 80| 8.44k| } else { 81| 8.44k| position = 0; 82| 8.44k| } 83| 11.0k| } 84| 177| position = 0; 85| 34.5k| while(position != PEM_HEADER2.length()) { ------------------ | Branch (85:10): [True: 34.3k, False: 161] ------------------ 86| 34.3k| uint8_t b; 87| 34.3k| if(!source.read_byte(b)) { ------------------ | Branch (87:10): [True: 6, False: 34.3k] ------------------ 88| 6| throw Decoding_Error("PEM: No PEM header found"); 89| 6| } 90| 34.3k| if(static_cast(b) == PEM_HEADER2[position]) { ------------------ | Branch (90:10): [True: 820, False: 33.5k] ------------------ 91| 820| ++position; 92| 33.5k| } else if(position) { ------------------ | Branch (92:17): [True: 10, False: 33.5k] ------------------ 93| 10| throw Decoding_Error("PEM: Malformed PEM header"); 94| 10| } 95| | 96| 34.3k| if(position == 0) { ------------------ | Branch (96:10): [True: 33.5k, False: 820] ------------------ 97| 33.5k| label += static_cast(b); 98| 33.5k| } 99| 34.3k| } 100| | 101| 161| std::vector b64; 102| | 103| 161| const std::string PEM_TRAILER = fmt("-----END {}-----", label); 104| 161| position = 0; 105| 48.3k| while(position != PEM_TRAILER.length()) { ------------------ | Branch (105:10): [True: 48.2k, False: 95] ------------------ 106| 48.2k| uint8_t b; 107| 48.2k| if(!source.read_byte(b)) { ------------------ | Branch (107:10): [True: 24, False: 48.1k] ------------------ 108| 24| throw Decoding_Error("PEM: No PEM trailer found"); 109| 24| } 110| 48.1k| if(static_cast(b) == PEM_TRAILER[position]) { ------------------ | Branch (110:10): [True: 1.99k, False: 46.1k] ------------------ 111| 1.99k| ++position; 112| 46.1k| } else if(position) { ------------------ | Branch (112:17): [True: 42, False: 46.1k] ------------------ 113| 42| throw Decoding_Error("PEM: Malformed PEM trailer"); 114| 42| } 115| | 116| 48.1k| if(position == 0) { ------------------ | Branch (116:10): [True: 46.1k, False: 1.99k] ------------------ 117| 46.1k| b64.push_back(b); 118| 46.1k| } 119| 48.1k| } 120| | 121| 95| return base64_decode(b64.data(), b64.size()); 122| 161|} _ZN5Botan8PEM_Code7matchesERNS_10DataSourceENSt3__117basic_string_viewIcNS3_11char_traitsIcEEEEm: 137| 4.76k|bool matches(DataSource& source, std::string_view extra, size_t search_range) { 138| 4.76k| const std::string PEM_HEADER = fmt("-----BEGIN {}", extra); 139| | 140| 4.76k| secure_vector search_buf(search_range); 141| 4.76k| const size_t got = source.peek(search_buf.data(), search_buf.size(), 0); 142| | 143| 4.76k| if(got < PEM_HEADER.length()) { ------------------ | Branch (143:7): [True: 43, False: 4.72k] ------------------ 144| 43| return false; 145| 43| } 146| | 147| 4.72k| size_t index = 0; 148| | 149| 3.16M| for(size_t j = 0; j != got; ++j) { ------------------ | Branch (149:22): [True: 3.15M, False: 4.70k] ------------------ 150| 3.15M| if(static_cast(search_buf[j]) == PEM_HEADER[index]) { ------------------ | Branch (150:10): [True: 10.4k, False: 3.14M] ------------------ 151| 10.4k| ++index; 152| 3.14M| } else { 153| 3.14M| index = 0; 154| 3.14M| } 155| | 156| 3.15M| if(index == PEM_HEADER.size()) { ------------------ | Branch (156:10): [True: 17, False: 3.15M] ------------------ 157| 17| return true; 158| 17| } 159| 3.15M| } 160| | 161| 4.70k| return false; 162| 4.72k|} _ZN5Botan15load_public_keyERKNS_19AlgorithmIdentifierENSt3__14spanIKhLm18446744073709551615EEE: 88| 1.85k| [[maybe_unused]] std::span key_bits) { 89| 1.85k| const std::string oid_str = alg_id.oid().to_formatted_string(); 90| 1.85k| const std::vector alg_info = split_on(oid_str, '/'); 91| 1.85k| std::string_view alg_name = alg_info[0]; 92| | 93| 1.85k|#if defined(BOTAN_HAS_RSA) 94| 1.85k| if(alg_name == "RSA") { ------------------ | Branch (94:7): [True: 1.34k, False: 510] ------------------ 95| 1.34k| return std::make_unique(alg_id, key_bits); 96| 1.34k| } 97| 510|#endif 98| | 99| 510|#if defined(BOTAN_HAS_CURVE_25519) 100| 510| if(alg_name == "Curve25519") { ------------------ | Branch (100:7): [True: 0, False: 510] ------------------ 101| 0| return std::make_unique(alg_id, key_bits); 102| 0| } 103| 510|#endif 104| | 105| 510|#if defined(BOTAN_HAS_MCELIECE) 106| 510| if(alg_name == "McEliece") { ------------------ | Branch (106:7): [True: 0, False: 510] ------------------ 107| 0| return std::make_unique(key_bits); 108| 0| } 109| 510|#endif 110| | 111| 510|#if defined(BOTAN_HAS_KYBER) || defined(BOTAN_HAS_KYBER_90S) 112| 510| if(alg_name == "Kyber" || alg_name.starts_with("Kyber-")) { ------------------ | Branch (112:7): [True: 0, False: 510] | Branch (112:30): [True: 0, False: 510] ------------------ 113| 0| return std::make_unique(alg_id, key_bits); 114| 0| } 115| 510|#endif 116| | 117| 510|#if defined(BOTAN_HAS_ECDSA) 118| 510| if(alg_name == "ECDSA") { ------------------ | Branch (118:7): [True: 0, False: 510] ------------------ 119| 0| return std::make_unique(alg_id, key_bits); 120| 0| } 121| 510|#endif 122| | 123| 510|#if defined(BOTAN_HAS_ECDH) 124| 510| if(alg_name == "ECDH") { ------------------ | Branch (124:7): [True: 0, False: 510] ------------------ 125| 0| return std::make_unique(alg_id, key_bits); 126| 0| } 127| 510|#endif 128| | 129| 510|#if defined(BOTAN_HAS_DIFFIE_HELLMAN) 130| 510| if(alg_name == "DH") { ------------------ | Branch (130:7): [True: 0, False: 510] ------------------ 131| 0| return std::make_unique(alg_id, key_bits); 132| 0| } 133| 510|#endif 134| | 135| 510|#if defined(BOTAN_HAS_DSA) 136| 510| if(alg_name == "DSA") { ------------------ | Branch (136:7): [True: 0, False: 510] ------------------ 137| 0| return std::make_unique(alg_id, key_bits); 138| 0| } 139| 510|#endif 140| | 141| 510|#if defined(BOTAN_HAS_ELGAMAL) 142| 510| if(alg_name == "ElGamal") { ------------------ | Branch (142:7): [True: 0, False: 510] ------------------ 143| 0| return std::make_unique(alg_id, key_bits); 144| 0| } 145| 510|#endif 146| | 147| 510|#if defined(BOTAN_HAS_ECGDSA) 148| 510| if(alg_name == "ECGDSA") { ------------------ | Branch (148:7): [True: 0, False: 510] ------------------ 149| 0| return std::make_unique(alg_id, key_bits); 150| 0| } 151| 510|#endif 152| | 153| 510|#if defined(BOTAN_HAS_ECKCDSA) 154| 510| if(alg_name == "ECKCDSA") { ------------------ | Branch (154:7): [True: 0, False: 510] ------------------ 155| 0| return std::make_unique(alg_id, key_bits); 156| 0| } 157| 510|#endif 158| | 159| 510|#if defined(BOTAN_HAS_ED25519) 160| 510| if(alg_name == "Ed25519") { ------------------ | Branch (160:7): [True: 0, False: 510] ------------------ 161| 0| return std::make_unique(alg_id, key_bits); 162| 0| } 163| 510|#endif 164| | 165| 510|#if defined(BOTAN_HAS_GOST_34_10_2001) 166| 510| if(alg_name == "GOST-34.10" || alg_name == "GOST-34.10-2012-256" || alg_name == "GOST-34.10-2012-512") { ------------------ | Branch (166:7): [True: 0, False: 510] | Branch (166:35): [True: 0, False: 510] | Branch (166:72): [True: 0, False: 510] ------------------ 167| 0| return std::make_unique(alg_id, key_bits); 168| 0| } 169| 510|#endif 170| | 171| 510|#if defined(BOTAN_HAS_SM2) 172| 510| if(alg_name == "SM2" || alg_name == "SM2_Sig" || alg_name == "SM2_Enc") { ------------------ | Branch (172:7): [True: 0, False: 510] | Branch (172:28): [True: 0, False: 510] | Branch (172:53): [True: 0, False: 510] ------------------ 173| 0| return std::make_unique(alg_id, key_bits); 174| 0| } 175| 510|#endif 176| | 177| 510|#if defined(BOTAN_HAS_XMSS_RFC8391) 178| 510| if(alg_name == "XMSS") { ------------------ | Branch (178:7): [True: 0, False: 510] ------------------ 179| 0| return std::make_unique(key_bits); 180| 0| } 181| 510|#endif 182| | 183| 510|#if defined(BOTAN_HAS_DILITHIUM) || defined(BOTAN_HAS_DILITHIUM_AES) 184| 510| if(alg_name == "Dilithium" || alg_name.starts_with("Dilithium-")) { ------------------ | Branch (184:7): [True: 0, False: 510] | Branch (184:34): [True: 0, False: 510] ------------------ 185| 0| return std::make_unique(alg_id, key_bits); 186| 0| } 187| 510|#endif 188| | 189| 510| throw Decoding_Error(fmt("Unknown or unavailable public key algorithm '{}'", alg_name)); 190| 510|} _ZN5Botan22create_hex_fingerprintEPKhmNSt3__117basic_string_viewIcNS2_11char_traitsIcEEEE: 30| 4.37k|std::string create_hex_fingerprint(const uint8_t bits[], size_t bits_len, std::string_view hash_name) { 31| 4.37k| auto hash_fn = HashFunction::create_or_throw(hash_name); 32| 4.37k| const std::string hex_hash = hex_encode(hash_fn->process(bits, bits_len)); 33| | 34| 4.37k| std::string fprint; 35| | 36| 118k| for(size_t i = 0; i != hex_hash.size(); i += 2) { ------------------ | Branch (36:22): [True: 113k, False: 4.37k] ------------------ 37| 113k| if(i != 0) { ------------------ | Branch (37:10): [True: 109k, False: 4.37k] ------------------ 38| 109k| fprint.push_back(':'); 39| 109k| } 40| | 41| 113k| fprint.push_back(hex_hash[i]); 42| 113k| fprint.push_back(hex_hash[i + 1]); 43| 113k| } 44| | 45| 4.37k| return fprint; 46| 4.37k|} _ZN5Botan11PK_VerifierC2ERKNS_10Public_KeyERKNS_19AlgorithmIdentifierENSt3__117basic_string_viewIcNS7_11char_traitsIcEEEE: 280| 1.18k| std::string_view provider) { 281| 1.18k| m_op = key.create_x509_verification_op(signature_algorithm, provider); 282| | 283| 1.18k| if(!m_op) { ------------------ | Branch (283:7): [True: 0, False: 1.18k] ------------------ 284| 0| throw Invalid_Argument(fmt("Key type {} does not support X.509 signature verification", key.algo_name())); 285| 0| } 286| | 287| 1.18k| m_sig_format = key.default_x509_signature_format(); 288| 1.18k| m_parts = key.message_parts(); 289| 1.18k| m_part_size = key.message_part_size(); 290| 1.18k| check_der_format_supported(m_sig_format, m_parts); 291| 1.18k|} _ZN5Botan11PK_VerifierD2Ev: 293| 1.18k|PK_Verifier::~PK_Verifier() = default; _ZN5Botan11PK_Verifier14verify_messageEPKhmS2_m: 302| 1.18k|bool PK_Verifier::verify_message(const uint8_t msg[], size_t msg_length, const uint8_t sig[], size_t sig_length) { 303| 1.18k| update(msg, msg_length); 304| 1.18k| return check_signature(sig, sig_length); 305| 1.18k|} _ZN5Botan11PK_Verifier6updateEPKhm: 307| 1.18k|void PK_Verifier::update(const uint8_t in[], size_t length) { m_op->update(in, length); } _ZN5Botan11PK_Verifier15check_signatureEPKhm: 341| 1.18k|bool PK_Verifier::check_signature(const uint8_t sig[], size_t length) { 342| 1.18k| try { 343| 1.18k| if(m_sig_format == Signature_Format::Standard) { ------------------ | Branch (343:10): [True: 1.18k, False: 0] ------------------ 344| 1.18k| return m_op->is_valid_signature(sig, length); 345| 1.18k| } else if(m_sig_format == Signature_Format::DerSequence) { ------------------ | Branch (345:17): [True: 0, False: 0] ------------------ 346| 0| bool decoding_success = false; 347| 0| std::vector real_sig; 348| | 349| 0| try { 350| 0| real_sig = decode_der_signature(sig, length, m_parts, m_part_size); 351| 0| decoding_success = true; 352| 0| } catch(Decoding_Error&) {} 353| | 354| 0| bool accept = m_op->is_valid_signature(real_sig.data(), real_sig.size()); 355| | 356| 0| return accept && decoding_success; ------------------ | Branch (356:17): [True: 0, False: 0] | Branch (356:27): [True: 0, False: 0] ------------------ 357| 0| } else { 358| 0| throw Internal_Error("PK_Verifier: Invalid signature format enum"); 359| 0| } 360| 1.18k| } catch(Invalid_Argument&) { 361| 0| return false; 362| 103| } catch(Decoding_Error&) { 363| 103| return false; 364| 103| } catch(Encoding_Error&) { 365| 0| return false; 366| 0| } 367| 1.18k|} pubkey.cpp:_ZN5BotanL26check_der_format_supportedENS_16Signature_FormatEm: 192| 1.18k|static void check_der_format_supported(Signature_Format format, size_t parts) { 193| 1.18k| if(format != Signature_Format::Standard && parts == 1) { ------------------ | Branch (193:7): [True: 0, False: 1.18k] | Branch (193:47): [True: 0, False: 0] ------------------ 194| 0| throw Invalid_Argument("This algorithm does not support DER encoding"); 195| 0| } 196| 1.18k|} _ZNK5Botan13RSA_PublicKey11public_dataEv: 118| 1.18k|std::shared_ptr RSA_PublicKey::public_data() const { return m_public; } _ZN5Botan13RSA_PublicKey4initEONS_6BigIntES2_: 134| 1.22k|void RSA_PublicKey::init(BigInt&& n, BigInt&& e) { 135| 1.22k| if(n.is_negative() || n.is_even() || n.bits() < 5 /* n >= 3*5 */ || e.is_negative() || e.is_even()) { ------------------ | Branch (135:7): [True: 5, False: 1.21k] | Branch (135:26): [True: 12, False: 1.20k] | Branch (135:41): [True: 1, False: 1.20k] | Branch (135:72): [True: 10, False: 1.19k] | Branch (135:91): [True: 10, False: 1.18k] ------------------ 136| 38| throw Decoding_Error("Invalid RSA public key parameters"); 137| 38| } 138| 1.18k| m_public = std::make_shared(std::move(n), std::move(e)); 139| 1.18k|} _ZN5Botan13RSA_PublicKeyC1ERKNS_19AlgorithmIdentifierENSt3__14spanIKhLm18446744073709551615EEE: 141| 1.34k|RSA_PublicKey::RSA_PublicKey(const AlgorithmIdentifier& /*unused*/, std::span key_bits) { 142| 1.34k| BigInt n, e; 143| 1.34k| BER_Decoder(key_bits).start_sequence().decode(n).decode(e).end_cons(); 144| | 145| 1.34k| init(std::move(n), std::move(e)); 146| 1.34k|} _ZNK5Botan13RSA_PublicKey27create_x509_verification_opERKNS_19AlgorithmIdentifierENSt3__117basic_string_viewIcNS4_11char_traitsIcEEEE: 755| 1.18k| std::string_view provider) const { 756| 1.18k| if(provider == "base" || provider.empty()) { ------------------ | Branch (756:7): [True: 0, False: 1.18k] | Branch (756:29): [True: 1.18k, False: 0] ------------------ 757| 1.18k| return std::make_unique(*this, parse_rsa_signature_algorithm(alg_id)); 758| 1.18k| } 759| | 760| 0| throw Provider_Not_Found(algo_name(), provider); 761| 1.18k|} _ZNK5Botan15RSA_Public_Data5get_nEv: 46| 1.09k| const BigInt& get_n() const { return m_n; } _ZNK5Botan15RSA_Public_Data19public_modulus_bitsEv: 50| 1.07k| size_t public_modulus_bits() const { return m_public_modulus_bits; } rsa.cpp:_ZN5Botan12_GLOBAL__N_129parse_rsa_signature_algorithmERKNS_19AlgorithmIdentifierE: 706| 1.18k|std::string parse_rsa_signature_algorithm(const AlgorithmIdentifier& alg_id) { 707| 1.18k| const auto sig_info = split_on(alg_id.oid().to_formatted_string(), '/'); 708| | 709| 1.18k| if(sig_info.empty() || sig_info.size() != 2 || sig_info[0] != "RSA") { ------------------ | Branch (709:7): [True: 0, False: 1.18k] | Branch (709:27): [True: 6, False: 1.18k] | Branch (709:51): [True: 0, False: 1.18k] ------------------ 710| 6| throw Decoding_Error("Unknown AlgorithmIdentifier for RSA X.509 signatures"); 711| 6| } 712| | 713| 1.18k| std::string padding = sig_info[1]; 714| | 715| 1.18k| if(padding == "EMSA4") { ------------------ | Branch (715:7): [True: 0, False: 1.18k] ------------------ 716| | // "MUST contain RSASSA-PSS-params" 717| 0| if(alg_id.parameters().empty()) { ------------------ | Branch (717:10): [True: 0, False: 0] ------------------ 718| 0| throw Decoding_Error("PSS params must be provided"); 719| 0| } 720| | 721| 0| PSS_Params pss_params(alg_id.parameters()); 722| | 723| | // hash_algo must be SHA1, SHA2-224, SHA2-256, SHA2-384 or SHA2-512 724| 0| const std::string hash_algo = pss_params.hash_function(); 725| 0| if(hash_algo != "SHA-1" && hash_algo != "SHA-224" && hash_algo != "SHA-256" && hash_algo != "SHA-384" && ------------------ | Branch (725:10): [True: 0, False: 0] | Branch (725:34): [True: 0, False: 0] | Branch (725:60): [True: 0, False: 0] | Branch (725:86): [True: 0, False: 0] ------------------ 726| 0| hash_algo != "SHA-512") { ------------------ | Branch (726:10): [True: 0, False: 0] ------------------ 727| 0| throw Decoding_Error("Unacceptable hash for PSS signatures"); 728| 0| } 729| | 730| 0| if(pss_params.mgf_function() != "MGF1") { ------------------ | Branch (730:10): [True: 0, False: 0] ------------------ 731| 0| throw Decoding_Error("Unacceptable MGF for PSS signatures"); 732| 0| } 733| | 734| | // For MGF1, it is strongly RECOMMENDED that the underlying hash 735| | // function be the same as the one identified by hashAlgorithm 736| | // 737| | // Must be SHA1, SHA2-224, SHA2-256, SHA2-384 or SHA2-512 738| 0| if(pss_params.hash_algid() != pss_params.mgf_hash_algid()) { ------------------ | Branch (738:10): [True: 0, False: 0] ------------------ 739| 0| throw Decoding_Error("Unacceptable MGF hash for PSS signatures"); 740| 0| } 741| | 742| 0| if(pss_params.trailer_field() != 1) { ------------------ | Branch (742:10): [True: 0, False: 0] ------------------ 743| 0| throw Decoding_Error("Unacceptable trailer field for PSS signatures"); 744| 0| } 745| | 746| 0| padding += fmt("({},MGF1,{})", hash_algo, pss_params.salt_length()); 747| 0| } 748| | 749| 1.18k| return padding; 750| 1.18k|} _ZN5Botan15RSA_Public_DataC2EONS_6BigIntES2_: 38| 1.18k| m_public_modulus_bytes(m_n.bytes()) {} rsa.cpp:_ZN5Botan12_GLOBAL__N_120RSA_Public_OperationC2ERKNS_13RSA_PublicKeyE: 587| 1.18k| explicit RSA_Public_Operation(const RSA_PublicKey& rsa) : m_public(rsa.public_data()) {} rsa.cpp:_ZNK5Botan12_GLOBAL__N_120RSA_Public_Operation20public_modulus_bytesEv: 600| 1.18k| size_t public_modulus_bytes() const { return m_public->public_modulus_bytes(); } _ZNK5Botan15RSA_Public_Data20public_modulus_bytesEv: 52| 1.18k| size_t public_modulus_bytes() const { return m_public_modulus_bytes; } rsa.cpp:_ZNK5Botan12_GLOBAL__N_120RSA_Public_Operation19public_modulus_bitsEv: 589| 1.07k| size_t public_modulus_bits() const { return m_public->public_modulus_bits(); } rsa.cpp:_ZNK5Botan12_GLOBAL__N_120RSA_Public_Operation9public_opERKNS_6BigIntE: 592| 1.09k| BigInt public_op(const BigInt& m) const { 593| 1.09k| if(m >= m_public->get_n()) { ------------------ | Branch (593:13): [True: 17, False: 1.07k] ------------------ 594| 17| throw Decoding_Error("RSA public op - input is too large"); 595| 17| } 596| | 597| 1.07k| return m_public->public_op(m); 598| 1.09k| } _ZNK5Botan15RSA_Public_Data9public_opERKNS_6BigIntE: 40| 1.07k| BigInt public_op(const BigInt& m) const { 41| 1.07k| const size_t powm_window = 1; 42| 1.07k| auto powm_m_n = monty_precompute(m_monty_n, m, powm_window, false); 43| 1.07k| return monty_execute_vartime(*powm_m_n, m_e); 44| 1.07k| } rsa.cpp:_ZN5Botan12_GLOBAL__N_120RSA_Verify_OperationC2ERKNS_13RSA_PublicKeyENSt3__117basic_string_viewIcNS5_11char_traitsIcEEEE: 638| 1.18k| RSA_Public_Operation(rsa), m_emsa(EMSA::create_or_throw(padding)) {} rsa.cpp:_ZN5Botan12_GLOBAL__N_120RSA_Verify_Operation6updateEPKhm: 629| 1.18k| void update(const uint8_t msg[], size_t msg_len) override { m_emsa->update(msg, msg_len); } rsa.cpp:_ZN5Botan12_GLOBAL__N_120RSA_Verify_Operation18is_valid_signatureEPKhm: 631| 1.18k| bool is_valid_signature(const uint8_t sig[], size_t sig_len) override { 632| 1.18k| const auto msg = m_emsa->raw_data(); 633| 1.18k| const auto message_repr = recover_message_repr(sig, sig_len); 634| 1.18k| return m_emsa->verify(message_repr, msg, public_modulus_bits() - 1); 635| 1.18k| } rsa.cpp:_ZN5Botan12_GLOBAL__N_120RSA_Verify_Operation20recover_message_reprEPKhm: 643| 1.18k| std::vector recover_message_repr(const uint8_t input[], size_t input_len) { 644| 1.18k| if(input_len > public_modulus_bytes()) { ------------------ | Branch (644:13): [True: 86, False: 1.09k] ------------------ 645| 86| throw Decoding_Error("RSA signature too large to be valid for this key"); 646| 86| } 647| 1.09k| BigInt input_bn(input, input_len); 648| 1.09k| return BigInt::encode(public_op(input_bn)); 649| 1.18k| } _ZN5Botan4X5098load_keyERNS_10DataSourceE: 26| 2.09k|std::unique_ptr load_key(DataSource& source) { 27| 2.09k| try { 28| 2.09k| AlgorithmIdentifier alg_id; 29| 2.09k| std::vector key_bits; 30| | 31| 2.09k| if(ASN1::maybe_BER(source) && !PEM_Code::matches(source)) { ------------------ | Branch (31:10): [True: 2.09k, False: 0] | Branch (31:37): [True: 2.09k, False: 0] ------------------ 32| 2.09k| BER_Decoder(source).start_sequence().decode(alg_id).decode(key_bits, ASN1_Type::BitString).end_cons(); 33| 2.09k| } else { 34| 0| DataSource_Memory ber(PEM_Code::decode_check_label(source, "PUBLIC KEY")); 35| | 36| 0| BER_Decoder(ber).start_sequence().decode(alg_id).decode(key_bits, ASN1_Type::BitString).end_cons(); 37| 0| } 38| | 39| 2.09k| if(key_bits.empty()) { ------------------ | Branch (39:10): [True: 0, False: 2.09k] ------------------ 40| 0| throw Decoding_Error("X.509 public key decoding"); 41| 0| } 42| | 43| 2.09k| return load_public_key(alg_id, key_bits); 44| 2.09k| } catch(Decoding_Error& e) { 45| 913| throw Decoding_Error("X.509 public key decoding", e); 46| 913| } 47| 2.09k|} _ZN5Botan22throw_invalid_argumentEPKcS1_S1_: 21| 768|void throw_invalid_argument(const char* message, const char* func, const char* file) { 22| 768| throw Invalid_Argument(fmt("{} in {}:{}", message, func, file)); 23| 768|} _ZN5Botan12ucs2_to_utf8EPKhm: 54| 207|std::string ucs2_to_utf8(const uint8_t ucs2[], size_t len) { 55| 207| if(len % 2 != 0) { ------------------ | Branch (55:7): [True: 10, False: 197] ------------------ 56| 10| throw Decoding_Error("Invalid length for UCS-2 string"); 57| 10| } 58| | 59| 197| const size_t chars = len / 2; 60| | 61| 197| std::string s; 62| 842| for(size_t i = 0; i != chars; ++i) { ------------------ | Branch (62:22): [True: 645, False: 197] ------------------ 63| 645| const uint32_t c = load_be(ucs2, i); 64| 645| append_utf8_for(s, c); 65| 645| } 66| | 67| 197| return s; 68| 207|} _ZN5Botan12ucs4_to_utf8EPKhm: 70| 106|std::string ucs4_to_utf8(const uint8_t ucs4[], size_t len) { 71| 106| if(len % 4 != 0) { ------------------ | Branch (71:7): [True: 3, False: 103] ------------------ 72| 3| throw Decoding_Error("Invalid length for UCS-4 string"); 73| 3| } 74| | 75| 103| const size_t chars = len / 4; 76| | 77| 103| std::string s; 78| 249| for(size_t i = 0; i != chars; ++i) { ------------------ | Branch (78:22): [True: 146, False: 103] ------------------ 79| 146| const uint32_t c = load_be(ucs4, i); 80| 146| append_utf8_for(s, c); 81| 146| } 82| | 83| 103| return s; 84| 106|} _ZN5Botan14latin1_to_utf8EPKhm: 89| 282|std::string latin1_to_utf8(const uint8_t chars[], size_t len) { 90| 282| std::string s; 91| 3.05k| for(size_t i = 0; i != len; ++i) { ------------------ | Branch (91:22): [True: 2.77k, False: 282] ------------------ 92| 2.77k| const uint32_t c = static_cast(chars[i]); 93| 2.77k| append_utf8_for(s, c); 94| 2.77k| } 95| 282| return s; 96| 282|} _ZN5Botan23format_char_for_displayEc: 98| 36|std::string format_char_for_display(char c) { 99| 36| std::ostringstream oss; 100| | 101| 36| oss << "'"; 102| | 103| 36| if(c == '\t') { ------------------ | Branch (103:7): [True: 0, False: 36] ------------------ 104| 0| oss << "\\t"; 105| 36| } else if(c == '\n') { ------------------ | Branch (105:14): [True: 0, False: 36] ------------------ 106| 0| oss << "\\n"; 107| 36| } else if(c == '\r') { ------------------ | Branch (107:14): [True: 0, False: 36] ------------------ 108| 0| oss << "\\r"; 109| 36| } else if(static_cast(c) >= 128) { ------------------ | Branch (109:14): [True: 16, False: 20] ------------------ 110| 16| unsigned char z = static_cast(c); 111| 16| oss << "\\x" << std::hex << std::uppercase << static_cast(z); 112| 20| } else { 113| 20| oss << c; 114| 20| } 115| | 116| 36| oss << "'"; 117| | 118| 36| return oss.str(); 119| 36|} charset.cpp:_ZN5Botan12_GLOBAL__N_115append_utf8_forERNSt3__112basic_stringIcNS1_11char_traitsIcEENS1_9allocatorIcEEEEj: 18| 3.56k|void append_utf8_for(std::string& s, uint32_t c) { 19| 3.56k| if(c >= 0xD800 && c < 0xE000) { ------------------ | Branch (19:7): [True: 265, False: 3.30k] | Branch (19:22): [True: 12, False: 253] ------------------ 20| 12| throw Decoding_Error("Invalid Unicode character"); 21| 12| } 22| | 23| 3.55k| if(c <= 0x7F) { ------------------ | Branch (23:7): [True: 2.41k, False: 1.13k] ------------------ 24| 2.41k| const uint8_t b0 = static_cast(c); 25| 2.41k| s.push_back(static_cast(b0)); 26| 2.41k| } else if(c <= 0x7FF) { ------------------ | Branch (26:14): [True: 639, False: 495] ------------------ 27| 639| const uint8_t b0 = 0xC0 | static_cast(c >> 6); 28| 639| const uint8_t b1 = 0x80 | static_cast(c & 0x3F); 29| 639| s.push_back(static_cast(b0)); 30| 639| s.push_back(static_cast(b1)); 31| 639| } else if(c <= 0xFFFF) { ------------------ | Branch (31:14): [True: 366, False: 129] ------------------ 32| 366| const uint8_t b0 = 0xE0 | static_cast(c >> 12); 33| 366| const uint8_t b1 = 0x80 | static_cast((c >> 6) & 0x3F); 34| 366| const uint8_t b2 = 0x80 | static_cast(c & 0x3F); 35| 366| s.push_back(static_cast(b0)); 36| 366| s.push_back(static_cast(b1)); 37| 366| s.push_back(static_cast(b2)); 38| 366| } else if(c <= 0x10FFFF) { ------------------ | Branch (38:14): [True: 64, False: 65] ------------------ 39| 64| const uint8_t b0 = 0xF0 | static_cast(c >> 18); 40| 64| const uint8_t b1 = 0x80 | static_cast((c >> 12) & 0x3F); 41| 64| const uint8_t b2 = 0x80 | static_cast((c >> 6) & 0x3F); 42| 64| const uint8_t b3 = 0x80 | static_cast(c & 0x3F); 43| 64| s.push_back(static_cast(b0)); 44| 64| s.push_back(static_cast(b1)); 45| 64| s.push_back(static_cast(b2)); 46| 64| s.push_back(static_cast(b3)); 47| 65| } else { 48| 65| throw Decoding_Error("Invalid Unicode character"); 49| 65| } 50| 3.55k|} _ZN5Botan5CPUID10CPUID_DataC2Ev: 120| 1|CPUID::CPUID_Data::CPUID_Data() { 121| 1| m_processor_features = 0; 122| | 123| 1|#if defined(BOTAN_TARGET_CPU_IS_PPC_FAMILY) || defined(BOTAN_TARGET_CPU_IS_ARM_FAMILY) || \ 124| 1| defined(BOTAN_TARGET_CPU_IS_X86_FAMILY) 125| | 126| 1| m_processor_features = detect_cpu_features(); 127| | 128| 1|#endif 129| | 130| 1| m_processor_features |= CPUID::CPUID_INITIALIZED_BIT; 131| | 132| 1| if(runtime_check_if_big_endian()) { ------------------ | Branch (132:7): [True: 0, False: 1] ------------------ 133| 0| m_processor_features |= CPUID::CPUID_IS_BIG_ENDIAN_BIT; 134| 0| } 135| | 136| 1| std::string clear_cpuid_env; 137| 1| if(OS::read_env_variable(clear_cpuid_env, "BOTAN_CLEAR_CPUID")) { ------------------ | Branch (137:7): [True: 0, False: 1] ------------------ 138| 0| for(const auto& cpuid : split_on(clear_cpuid_env, ',')) { ------------------ | Branch (138:29): [True: 0, False: 0] ------------------ 139| 0| for(auto& bit : CPUID::bit_from_string(cpuid)) { ------------------ | Branch (139:24): [True: 0, False: 0] ------------------ 140| 0| const uint32_t cleared = ~static_cast(bit); 141| 0| m_processor_features &= cleared; 142| 0| } 143| 0| } 144| 0| } 145| 1|} cpuid.cpp:_ZN5Botan12_GLOBAL__N_127runtime_check_if_big_endianEv: 93| 1|bool runtime_check_if_big_endian() { 94| | // Check runtime endian 95| 1| const uint32_t endian32 = 0x01234567; 96| 1| const uint8_t* e8 = reinterpret_cast(&endian32); 97| | 98| 1| bool is_big_endian = false; 99| | 100| 1| if(e8[0] == 0x01 && e8[1] == 0x23 && e8[2] == 0x45 && e8[3] == 0x67) { ------------------ | Branch (100:7): [True: 0, False: 1] | Branch (100:24): [True: 0, False: 0] | Branch (100:41): [True: 0, False: 0] | Branch (100:58): [True: 0, False: 0] ------------------ 101| 0| is_big_endian = true; 102| 1| } else if(e8[0] == 0x67 && e8[1] == 0x45 && e8[2] == 0x23 && e8[3] == 0x01) { ------------------ | Branch (102:14): [True: 1, False: 0] | Branch (102:31): [True: 1, False: 0] | Branch (102:48): [True: 1, False: 0] | Branch (102:65): [True: 1, False: 0] ------------------ 103| 1| is_big_endian = false; 104| 1| } else { 105| 0| throw Internal_Error("Unexpected endian at runtime, neither big nor little"); 106| 0| } 107| | 108| | // If we were compiled with a known endian, verify it matches at runtime 109| 1|#if defined(BOTAN_TARGET_CPU_IS_LITTLE_ENDIAN) 110| 1| BOTAN_ASSERT(!is_big_endian, "Build and runtime endian match"); ------------------ | | 51| 1| do { \ | | 52| 1| if(!(expr)) \ | | ------------------ | | | Branch (52:10): [True: 0, False: 1] | | ------------------ | | 53| 1| Botan::assertion_failure(#expr, assertion_made, __func__, __FILE__, __LINE__); \ | | 54| 1| } while(0) | | ------------------ | | | Branch (54:12): [Folded - Ignored] | | ------------------ ------------------ 111| |#elif defined(BOTAN_TARGET_CPU_IS_BIG_ENDIAN) 112| | BOTAN_ASSERT(is_big_endian, "Build and runtime endian match"); 113| |#endif 114| | 115| 1| return is_big_endian; 116| 1|} _ZN5Botan5CPUID10CPUID_Data19detect_cpu_featuresEv: 69| 1|uint32_t CPUID::CPUID_Data::detect_cpu_features() { 70| 1| uint32_t features_detected = 0; 71| 1| uint32_t cpuid[4] = {0}; 72| 1| bool has_os_ymm_support = false; 73| 1| bool has_os_zmm_support = false; 74| | 75| | // CPUID 0: vendor identification, max sublevel 76| 1| invoke_cpuid(0, cpuid); 77| | 78| 1| const uint32_t max_supported_sublevel = cpuid[0]; 79| | 80| 1| if(max_supported_sublevel >= 1) { ------------------ | Branch (80:7): [True: 1, False: 0] ------------------ 81| | // CPUID 1: feature bits 82| 1| invoke_cpuid(1, cpuid); 83| 1| const uint64_t flags0 = (static_cast(cpuid[2]) << 32) | cpuid[3]; 84| | 85| 1| enum x86_CPUID_1_bits : uint64_t { 86| 1| RDTSC = (1ULL << 4), 87| 1| SSE2 = (1ULL << 26), 88| 1| CLMUL = (1ULL << 33), 89| 1| SSSE3 = (1ULL << 41), 90| 1| AESNI = (1ULL << 57), 91| 1| OSXSAVE = (1ULL << 59), 92| 1| AVX = (1ULL << 60), 93| 1| RDRAND = (1ULL << 62) 94| 1| }; 95| | 96| 1| if(flags0 & x86_CPUID_1_bits::RDTSC) { ------------------ | Branch (96:10): [True: 1, False: 0] ------------------ 97| 1| features_detected |= CPUID::CPUID_RDTSC_BIT; 98| 1| } 99| 1| if(flags0 & x86_CPUID_1_bits::SSE2) { ------------------ | Branch (99:10): [True: 1, False: 0] ------------------ 100| 1| features_detected |= CPUID::CPUID_SSE2_BIT; 101| 1| } 102| 1| if(flags0 & x86_CPUID_1_bits::CLMUL) { ------------------ | Branch (102:10): [True: 1, False: 0] ------------------ 103| 1| features_detected |= CPUID::CPUID_CLMUL_BIT; 104| 1| } 105| 1| if(flags0 & x86_CPUID_1_bits::SSSE3) { ------------------ | Branch (105:10): [True: 1, False: 0] ------------------ 106| 1| features_detected |= CPUID::CPUID_SSSE3_BIT; 107| 1| } 108| 1| if(flags0 & x86_CPUID_1_bits::AESNI) { ------------------ | Branch (108:10): [True: 1, False: 0] ------------------ 109| 1| features_detected |= CPUID::CPUID_AESNI_BIT; 110| 1| } 111| 1| if(flags0 & x86_CPUID_1_bits::RDRAND) { ------------------ | Branch (111:10): [True: 1, False: 0] ------------------ 112| 1| features_detected |= CPUID::CPUID_RDRAND_BIT; 113| 1| } 114| | 115| 1| if((flags0 & x86_CPUID_1_bits::AVX) && (flags0 & x86_CPUID_1_bits::OSXSAVE)) { ------------------ | Branch (115:10): [True: 1, False: 0] | Branch (115:46): [True: 1, False: 0] ------------------ 116| 1| const uint64_t xcr_flags = xgetbv(); 117| 1| if((xcr_flags & 0x6) == 0x6) { ------------------ | Branch (117:13): [True: 1, False: 0] ------------------ 118| 1| has_os_ymm_support = true; 119| 1| has_os_zmm_support = (xcr_flags & 0xE0) == 0xE0; 120| 1| } 121| 1| } 122| 1| } 123| | 124| 1| if(max_supported_sublevel >= 7) { ------------------ | Branch (124:7): [True: 1, False: 0] ------------------ 125| 1| clear_mem(cpuid, 4); 126| 1| invoke_cpuid_sublevel(7, 0, cpuid); 127| | 128| 1| enum x86_CPUID_7_bits : uint64_t { 129| 1| BMI1 = (1ULL << 3), 130| 1| AVX2 = (1ULL << 5), 131| 1| BMI2 = (1ULL << 8), 132| 1| AVX512_F = (1ULL << 16), 133| 1| AVX512_DQ = (1ULL << 17), 134| 1| RDSEED = (1ULL << 18), 135| 1| ADX = (1ULL << 19), 136| 1| AVX512_IFMA = (1ULL << 21), 137| 1| SHA = (1ULL << 29), 138| 1| AVX512_BW = (1ULL << 30), 139| 1| AVX512_VL = (1ULL << 31), 140| 1| AVX512_VBMI = (1ULL << 33), 141| 1| AVX512_VBMI2 = (1ULL << 38), 142| 1| AVX512_VAES = (1ULL << 41), 143| 1| AVX512_VCLMUL = (1ULL << 42), 144| 1| AVX512_VBITALG = (1ULL << 44), 145| 1| }; 146| | 147| 1| const uint64_t flags7 = (static_cast(cpuid[2]) << 32) | cpuid[1]; 148| | 149| 1| if((flags7 & x86_CPUID_7_bits::AVX2) && has_os_ymm_support) { ------------------ | Branch (149:10): [True: 1, False: 0] | Branch (149:47): [True: 1, False: 0] ------------------ 150| 1| features_detected |= CPUID::CPUID_AVX2_BIT; 151| 1| } 152| 1| if(flags7 & x86_CPUID_7_bits::RDSEED) { ------------------ | Branch (152:10): [True: 1, False: 0] ------------------ 153| 1| features_detected |= CPUID::CPUID_RDSEED_BIT; 154| 1| } 155| 1| if(flags7 & x86_CPUID_7_bits::ADX) { ------------------ | Branch (155:10): [True: 1, False: 0] ------------------ 156| 1| features_detected |= CPUID::CPUID_ADX_BIT; 157| 1| } 158| 1| if(flags7 & x86_CPUID_7_bits::SHA) { ------------------ | Branch (158:10): [True: 0, False: 1] ------------------ 159| 0| features_detected |= CPUID::CPUID_SHA_BIT; 160| 0| } 161| | 162| | /* 163| | We only set the BMI bit if both BMI1 and BMI2 are supported, since 164| | typically we want to use both extensions in the same code. 165| | */ 166| 1| if((flags7 & x86_CPUID_7_bits::BMI1) && (flags7 & x86_CPUID_7_bits::BMI2)) { ------------------ | Branch (166:10): [True: 1, False: 0] | Branch (166:47): [True: 1, False: 0] ------------------ 167| 1| features_detected |= CPUID::CPUID_BMI_BIT; 168| 1| } 169| | 170| 1| if((flags7 & x86_CPUID_7_bits::AVX512_F) && has_os_zmm_support) { ------------------ | Branch (170:10): [True: 0, False: 1] | Branch (170:51): [True: 0, False: 0] ------------------ 171| 0| const uint64_t AVX512_PROFILE_FLAGS = x86_CPUID_7_bits::AVX512_F | x86_CPUID_7_bits::AVX512_DQ | 172| 0| x86_CPUID_7_bits::AVX512_IFMA | x86_CPUID_7_bits::AVX512_BW | 173| 0| x86_CPUID_7_bits::AVX512_VL | x86_CPUID_7_bits::AVX512_VBMI | 174| 0| x86_CPUID_7_bits::AVX512_VBMI2 | x86_CPUID_7_bits::AVX512_VBITALG; 175| | 176| | /* 177| | We only enable AVX512 support if all of the above flags are available 178| | 179| | This is more than we strictly need for most uses, however it also has 180| | the effect of preventing execution of AVX512 codepaths on cores that 181| | have serious downclocking problems when AVX512 code executes, 182| | especially Intel Skylake. 183| | 184| | VBMI2/VBITALG are the key flags here as they restrict us to Intel Ice 185| | Lake/Rocket Lake, or AMD Zen4, all of which do not have penalties for 186| | executing AVX512. 187| | 188| | There is nothing stopping some future processor from supporting the 189| | above flags and having AVX512 penalties, but maybe you should not have 190| | bought such a processor. 191| | */ 192| 0| if((flags7 & AVX512_PROFILE_FLAGS) == AVX512_PROFILE_FLAGS) { ------------------ | Branch (192:13): [True: 0, False: 0] ------------------ 193| 0| features_detected |= CPUID::CPUID_AVX512_BIT; 194| | 195| 0| if(flags7 & x86_CPUID_7_bits::AVX512_VAES) { ------------------ | Branch (195:16): [True: 0, False: 0] ------------------ 196| 0| features_detected |= CPUID::CPUID_AVX512_AES_BIT; 197| 0| } 198| 0| if(flags7 & x86_CPUID_7_bits::AVX512_VCLMUL) { ------------------ | Branch (198:16): [True: 0, False: 0] ------------------ 199| 0| features_detected |= CPUID::CPUID_AVX512_CLMUL_BIT; 200| 0| } 201| 0| } 202| 0| } 203| 1| } 204| | 205| | /* 206| | * If we don't have access to CPUID, we can still safely assume that 207| | * any x86-64 processor has SSE2 and RDTSC 208| | */ 209| 1| #if defined(BOTAN_TARGET_ARCH_IS_X86_64) 210| 1| if(features_detected == 0) { ------------------ | Branch (210:7): [True: 0, False: 1] ------------------ 211| 0| features_detected |= CPUID::CPUID_SSE2_BIT; 212| 0| features_detected |= CPUID::CPUID_RDTSC_BIT; 213| 0| } 214| 1| #endif 215| | 216| 1| return features_detected; 217| 1|} cpuid_x86.cpp:_ZN5Botan12_GLOBAL__N_112invoke_cpuidEjPj: 33| 2|void invoke_cpuid(uint32_t type, uint32_t out[4]) { 34| | #if defined(BOTAN_BUILD_COMPILER_IS_MSVC) || defined(BOTAN_BUILD_COMPILER_IS_INTEL) 35| | __cpuid((int*)out, type); 36| | 37| | #elif defined(BOTAN_BUILD_COMPILER_IS_GCC) || defined(BOTAN_BUILD_COMPILER_IS_CLANG) 38| 2| __get_cpuid(type, out, out + 1, out + 2, out + 3); 39| | 40| | #elif defined(BOTAN_USE_GCC_INLINE_ASM) 41| | asm("cpuid\n\t" : "=a"(out[0]), "=b"(out[1]), "=c"(out[2]), "=d"(out[3]) : "0"(type)); 42| | 43| | #else 44| | #warning "No way of calling x86 cpuid instruction for this compiler" 45| | clear_mem(out, 4); 46| | #endif 47| 2|} cpuid_x86.cpp:_ZN5Botan12_GLOBAL__N_16xgetbvEv: 49| 1|BOTAN_FUNC_ISA("xsave") uint64_t xgetbv() { return _xgetbv(0); } cpuid_x86.cpp:_ZN5Botan12_GLOBAL__N_121invoke_cpuid_sublevelEjjPj: 51| 1|void invoke_cpuid_sublevel(uint32_t type, uint32_t level, uint32_t out[4]) { 52| | #if defined(BOTAN_BUILD_COMPILER_IS_MSVC) 53| | __cpuidex((int*)out, type, level); 54| | 55| | #elif defined(BOTAN_BUILD_COMPILER_IS_GCC) || defined(BOTAN_BUILD_COMPILER_IS_CLANG) 56| 1| __cpuid_count(type, level, out[0], out[1], out[2], out[3]); 57| | 58| | #elif defined(BOTAN_USE_GCC_INLINE_ASM) 59| | asm("cpuid\n\t" : "=a"(out[0]), "=b"(out[1]), "=c"(out[2]), "=d"(out[3]) : "0"(type), "2"(level)); 60| | 61| | #else 62| | #warning "No way of calling x86 cpuid instruction for this compiler" 63| | clear_mem(out, 4); 64| | #endif 65| 1|} _ZN5Botan10DataSource9read_byteERh: 25| 3.49M|size_t DataSource::read_byte(uint8_t& out) { return read(&out, 1); } _ZNK5Botan10DataSource9peek_byteERh: 30| 5.46k|size_t DataSource::peek_byte(uint8_t& out) const { return peek(&out, 1, 0); } _ZN5Botan10DataSource12discard_nextEm: 35| 234k|size_t DataSource::discard_next(size_t n) { 36| 234k| uint8_t buf[64] = {0}; 37| 234k| size_t discarded = 0; 38| | 39| 1.47M| while(n) { ------------------ | Branch (39:10): [True: 1.24M, False: 234k] ------------------ 40| 1.24M| const size_t got = this->read(buf, std::min(n, sizeof(buf))); 41| 1.24M| discarded += got; 42| 1.24M| n -= got; 43| | 44| 1.24M| if(got == 0) { ------------------ | Branch (44:10): [True: 288, False: 1.24M] ------------------ 45| 288| break; 46| 288| } 47| 1.24M| } 48| | 49| 234k| return discarded; 50| 234k|} _ZN5Botan17DataSource_Memory4readEPhm: 55| 2.16M|size_t DataSource_Memory::read(uint8_t out[], size_t length) { 56| 2.16M| const size_t got = std::min(m_source.size() - m_offset, length); 57| 2.16M| copy_mem(out, m_source.data() + m_offset, got); 58| 2.16M| m_offset += got; 59| 2.16M| return got; 60| 2.16M|} _ZN5Botan17DataSource_Memory15check_availableEm: 62| 72.6k|bool DataSource_Memory::check_available(size_t n) { return (n <= (m_source.size() - m_offset)); } _ZNK5Botan17DataSource_Memory4peekEPhmm: 67| 142k|size_t DataSource_Memory::peek(uint8_t out[], size_t length, size_t peek_offset) const { 68| 142k| const size_t bytes_left = m_source.size() - m_offset; 69| 142k| if(peek_offset >= bytes_left) { ------------------ | Branch (69:7): [True: 65.5k, False: 77.2k] ------------------ 70| 65.5k| return 0; 71| 65.5k| } 72| | 73| 77.2k| const size_t got = std::min(bytes_left - peek_offset, length); 74| 77.2k| copy_mem(out, &m_source[m_offset + peek_offset], got); 75| 77.2k| return got; 76| 142k|} _ZNK5Botan17DataSource_Memory11end_of_dataEv: 81| 15.7k|bool DataSource_Memory::end_of_data() const { return (m_offset == m_source.size()); } _ZN5Botan9ExceptionC2ENSt3__117basic_string_viewIcNS1_11char_traitsIcEEEE: 71| 8.86k|Exception::Exception(std::string_view msg) : m_msg(msg) {} _ZN5Botan9ExceptionC2ENSt3__117basic_string_viewIcNS1_11char_traitsIcEEEERKSt9exception: 73| 1.62k|Exception::Exception(std::string_view msg, const std::exception& e) : m_msg(fmt("{} failed with {}", msg, e.what())) {} _ZN5Botan9ExceptionC2EPKcNSt3__117basic_string_viewIcNS3_11char_traitsIcEEEE: 75| 535|Exception::Exception(const char* prefix, std::string_view msg) : m_msg(fmt("{} {}", prefix, msg)) {} _ZN5Botan16Invalid_ArgumentC2ENSt3__117basic_string_viewIcNS1_11char_traitsIcEEEE: 77| 890|Invalid_Argument::Invalid_Argument(std::string_view msg) : Exception(msg) {} _ZN5Botan14Encoding_ErrorC2ENSt3__117basic_string_viewIcNS1_11char_traitsIcEEEE: 123| 135|Encoding_Error::Encoding_Error(std::string_view name) : Exception("Encoding error:", name) {} _ZN5Botan14Decoding_ErrorC2ENSt3__117basic_string_viewIcNS1_11char_traitsIcEEEE: 125| 7.97k|Decoding_Error::Decoding_Error(std::string_view name) : Exception(name) {} _ZN5Botan14Decoding_ErrorC2ENSt3__117basic_string_viewIcNS1_11char_traitsIcEEEERKSt9exception: 130| 1.62k|Decoding_Error::Decoding_Error(std::string_view msg, const std::exception& e) : Exception(msg, e) {} _ZN5Botan15Stream_IO_ErrorC2ENSt3__117basic_string_viewIcNS1_11char_traitsIcEEEE: 135| 400|Stream_IO_Error::Stream_IO_Error(std::string_view err) : Exception("I/O error:", err) {} _ZN5Botan15allocate_memoryEmm: 20| 532k|BOTAN_MALLOC_FN void* allocate_memory(size_t elems, size_t elem_size) { 21| 532k| if(elems == 0 || elem_size == 0) { ------------------ | Branch (21:7): [True: 0, False: 532k] | Branch (21:21): [True: 0, False: 532k] ------------------ 22| 0| return nullptr; 23| 0| } 24| | 25| | // Some calloc implementations do not check for overflow (?!?) 26| | 27| 532k| if(!BOTAN_CHECKED_MUL(elems, elem_size).has_value()) { ------------------ | | 73| 532k|#define BOTAN_CHECKED_MUL(x, y) checked_mul(x, y) ------------------ | Branch (27:7): [True: 0, False: 532k] ------------------ 28| 0| throw std::bad_alloc(); 29| 0| } 30| | 31| |#if defined(BOTAN_HAS_LOCKING_ALLOCATOR) 32| | if(void* p = mlock_allocator::instance().allocate(elems, elem_size)) { 33| | return p; 34| | } 35| |#endif 36| | 37| |#if defined(BOTAN_TARGET_OS_HAS_ALLOC_CONCEAL) 38| | void* ptr = ::calloc_conceal(elems, elem_size); 39| |#else 40| 532k| void* ptr = std::calloc(elems, elem_size); // NOLINT(*-no-malloc) 41| 532k|#endif 42| 532k| if(!ptr) { ------------------ | Branch (42:7): [True: 0, False: 532k] ------------------ 43| 0| [[unlikely]] throw std::bad_alloc(); 44| 0| } 45| 532k| return ptr; 46| 532k|} _ZN5Botan17deallocate_memoryEPvmm: 48| 532k|void deallocate_memory(void* p, size_t elems, size_t elem_size) { 49| 532k| if(p == nullptr) { ------------------ | Branch (49:7): [True: 0, False: 532k] ------------------ 50| 0| [[unlikely]] return; 51| 0| } 52| | 53| 532k| secure_scrub_memory(p, elems * elem_size); 54| | 55| |#if defined(BOTAN_HAS_LOCKING_ALLOCATOR) 56| | if(mlock_allocator::instance().deallocate(p, elems, elem_size)) { 57| | return; 58| | } 59| |#endif 60| | 61| 532k| std::free(p); // NOLINT(*-no-malloc) 62| 532k|} _ZN5Botan19secure_scrub_memoryEPvm: 78| 532k|void secure_scrub_memory(void* ptr, size_t n) { 79| |#if defined(BOTAN_TARGET_OS_HAS_RTLSECUREZEROMEMORY) 80| | ::RtlSecureZeroMemory(ptr, n); 81| | 82| |#elif defined(BOTAN_TARGET_OS_HAS_EXPLICIT_BZERO) 83| 532k| ::explicit_bzero(ptr, n); 84| | 85| |#elif defined(BOTAN_TARGET_OS_HAS_EXPLICIT_MEMSET) 86| | (void)::explicit_memset(ptr, 0, n); 87| | 88| |#elif defined(BOTAN_USE_VOLATILE_MEMSET_FOR_ZERO) && (BOTAN_USE_VOLATILE_MEMSET_FOR_ZERO == 1) 89| | /* 90| | Call memset through a static volatile pointer, which the compiler 91| | should not elide. This construct should be safe in conforming 92| | compilers, but who knows. I did confirm that on x86-64 GCC 6.1 and 93| | Clang 3.8 both create code that saves the memset address in the 94| | data segment and unconditionally loads and jumps to that address. 95| | */ 96| | static void* (*const volatile memset_ptr)(void*, int, size_t) = std::memset; 97| | (memset_ptr)(ptr, 0, n); 98| |#else 99| | 100| | volatile uint8_t* p = reinterpret_cast(ptr); 101| | 102| | for(size_t i = 0; i != n; ++i) 103| | p[i] = 0; 104| |#endif 105| 532k|} _ZN5Botan2OS10get_auxvalEm: 119| 1|unsigned long OS::get_auxval(unsigned long id) { 120| 1|#if defined(BOTAN_TARGET_OS_HAS_GETAUXVAL) 121| 1| return ::getauxval(id); 122| |#elif defined(BOTAN_TARGET_OS_IS_ANDROID) && defined(BOTAN_TARGET_ARCH_IS_ARM32) 123| | 124| | if(id == 0) 125| | return 0; 126| | 127| | char** p = environ; 128| | 129| | while(*p++ != nullptr) 130| | ; 131| | 132| | Elf32_auxv_t* e = reinterpret_cast(p); 133| | 134| | while(e != nullptr) { 135| | if(e->a_type == id) 136| | return e->a_un.a_val; 137| | e++; 138| | } 139| | 140| | return 0; 141| |#elif defined(BOTAN_TARGET_OS_HAS_ELF_AUX_INFO) 142| | unsigned long auxinfo = 0; 143| | ::elf_aux_info(static_cast(id), &auxinfo, sizeof(auxinfo)); 144| | return auxinfo; 145| |#elif defined(BOTAN_TARGET_OS_HAS_AUXINFO) 146| | for(const AuxInfo* auxinfo = static_cast(::_dlauxinfo()); auxinfo != AT_NULL; ++auxinfo) { 147| | if(id == auxinfo->a_type) 148| | return auxinfo->a_v; 149| | } 150| | 151| | return 0; 152| |#else 153| | BOTAN_UNUSED(id); 154| | return 0; 155| |#endif 156| 1|} _ZN5Botan2OS27running_in_privileged_stateEv: 158| 1|bool OS::running_in_privileged_state() { 159| 1|#if defined(AT_SECURE) 160| 1| return OS::get_auxval(AT_SECURE) != 0; 161| |#elif defined(BOTAN_TARGET_OS_HAS_POSIX1) 162| | return (::getuid() != ::geteuid()) || (::getgid() != ::getegid()); 163| |#else 164| | return false; 165| |#endif 166| 1|} _ZN5Botan2OS17read_env_variableERNSt3__112basic_stringIcNS1_11char_traitsIcEENS1_9allocatorIcEEEENS1_17basic_string_viewIcS4_EE: 400| 1|bool OS::read_env_variable(std::string& value_out, std::string_view name_view) { 401| 1| value_out = ""; 402| | 403| 1| if(running_in_privileged_state()) { ------------------ | Branch (403:7): [True: 0, False: 1] ------------------ 404| 0| return false; 405| 0| } 406| | 407| |#if defined(BOTAN_TARGET_OS_HAS_WIN32) && defined(BOTAN_BUILD_COMPILER_IS_MSVC) 408| | const std::string name(name_view); 409| | char val[128] = {0}; 410| | size_t req_size = 0; 411| | if(getenv_s(&req_size, val, sizeof(val), name.c_str()) == 0) { 412| | value_out = std::string(val, req_size); 413| | return true; 414| | } 415| |#else 416| 1| const std::string name(name_view); 417| 1| if(const char* val = std::getenv(name.c_str())) { ------------------ | Branch (417:19): [True: 0, False: 1] ------------------ 418| 0| value_out = val; 419| 0| return true; 420| 0| } 421| 1|#endif 422| | 423| 1| return false; 424| 1|} _ZN5Botan9to_u32bitENSt3__117basic_string_viewIcNS0_11char_traitsIcEEEE: 32| 621k|uint32_t to_u32bit(std::string_view str_view) { 33| 621k| const std::string str(str_view); 34| | 35| | // std::stoul is not strict enough. Ensure that str is digit only [0-9]* 36| 908k| for(const char chr : str) { ------------------ | Branch (36:23): [True: 908k, False: 621k] ------------------ 37| 908k| if(chr < '0' || chr > '9') { ------------------ | Branch (37:10): [True: 14, False: 908k] | Branch (37:23): [True: 6, False: 908k] ------------------ 38| 20| throw Invalid_Argument("to_u32bit invalid decimal string '" + str + "'"); 39| 20| } 40| 908k| } 41| | 42| 621k| const unsigned long int x = std::stoul(str); 43| | 44| 621k| if constexpr(sizeof(unsigned long int) > 4) { ------------------ | Branch (44:17): [Folded - Ignored] ------------------ 45| | // x might be uint64 46| 621k| if(x > std::numeric_limits::max()) { ------------------ | Branch (46:10): [True: 0, False: 621k] ------------------ 47| 0| throw Invalid_Argument("Integer value of " + str + " exceeds 32 bit range"); 48| 0| } 49| 621k| } 50| | 51| 621k| return static_cast(x); 52| 621k|} _ZN5Botan8split_onENSt3__117basic_string_viewIcNS0_11char_traitsIcEEEEc: 111| 3.03k|std::vector split_on(std::string_view str, char delim) { 112| 3.03k| std::vector elems; 113| 3.03k| if(str.empty()) { ------------------ | Branch (113:7): [True: 0, False: 3.03k] ------------------ 114| 0| return elems; 115| 0| } 116| | 117| 3.03k| std::string substr; 118| 67.3k| for(auto i = str.begin(); i != str.end(); ++i) { ------------------ | Branch (118:30): [True: 64.3k, False: 3.03k] ------------------ 119| 64.3k| if(*i == delim) { ------------------ | Branch (119:10): [True: 2.51k, False: 61.8k] ------------------ 120| 2.51k| if(!substr.empty()) { ------------------ | Branch (120:13): [True: 2.51k, False: 0] ------------------ 121| 2.51k| elems.push_back(substr); 122| 2.51k| } 123| 2.51k| substr.clear(); 124| 61.8k| } else { 125| 61.8k| substr += *i; 126| 61.8k| } 127| 64.3k| } 128| | 129| 3.03k| if(substr.empty()) { ------------------ | Branch (129:7): [True: 0, False: 3.03k] ------------------ 130| 0| throw Invalid_Argument(fmt("Unable to split string '{}", str)); 131| 0| } 132| 3.03k| elems.push_back(substr); 133| | 134| 3.03k| return elems; 135| 3.03k|} _ZN5Botan14ipv4_to_stringEj: 181| 592|std::string ipv4_to_string(uint32_t ip) { 182| 592| std::string str; 183| 592| uint8_t bits[4]; 184| 592| store_be(ip, bits); 185| | 186| 2.96k| for(size_t i = 0; i != 4; ++i) { ------------------ | Branch (186:22): [True: 2.36k, False: 592] ------------------ 187| 2.36k| if(i > 0) { ------------------ | Branch (187:10): [True: 1.77k, False: 592] ------------------ 188| 1.77k| str += "."; 189| 1.77k| } 190| 2.36k| str += std::to_string(bits[i]); 191| 2.36k| } 192| | 193| 592| return str; 194| 592|} _ZN5Botan9SCAN_NameC2ENSt3__117basic_string_viewIcNS1_11char_traitsIcEEEE: 58| 1.18k|SCAN_Name::SCAN_Name(std::string_view algo_spec) : m_orig_algo_spec(algo_spec), m_alg_name(), m_args(), m_mode_info() { 59| 1.18k| if(algo_spec.empty()) { ------------------ | Branch (59:7): [True: 0, False: 1.18k] ------------------ 60| 0| throw Invalid_Argument("Expected algorithm name, got empty string"); 61| 0| } 62| | 63| 1.18k| std::vector> name; 64| 1.18k| size_t level = 0; 65| 1.18k| std::pair accum = std::make_pair(level, ""); 66| | 67| 1.18k| const std::string decoding_error = "Bad SCAN name '" + m_orig_algo_spec + "': "; 68| | 69| 12.9k| for(char c : algo_spec) { ------------------ | Branch (69:15): [True: 12.9k, False: 1.18k] ------------------ 70| 12.9k| if(c == '/' || c == ',' || c == '(' || c == ')') { ------------------ | Branch (70:10): [True: 0, False: 12.9k] | Branch (70:22): [True: 0, False: 12.9k] | Branch (70:34): [True: 1.18k, False: 11.7k] | Branch (70:46): [True: 1.18k, False: 10.5k] ------------------ 71| 2.36k| if(c == '(') { ------------------ | Branch (71:13): [True: 1.18k, False: 1.18k] ------------------ 72| 1.18k| ++level; 73| 1.18k| } else if(c == ')') { ------------------ | Branch (73:20): [True: 1.18k, False: 0] ------------------ 74| 1.18k| if(level == 0) { ------------------ | Branch (74:16): [True: 0, False: 1.18k] ------------------ 75| 0| throw Decoding_Error(decoding_error + "Mismatched parens"); 76| 0| } 77| 1.18k| --level; 78| 1.18k| } 79| | 80| 2.36k| if(c == '/' && level > 0) { ------------------ | Branch (80:13): [True: 0, False: 2.36k] | Branch (80:25): [True: 0, False: 0] ------------------ 81| 0| accum.second.push_back(c); 82| 2.36k| } else { 83| 2.36k| if(!accum.second.empty()) { ------------------ | Branch (83:16): [True: 2.36k, False: 0] ------------------ 84| 2.36k| name.push_back(accum); 85| 2.36k| } 86| 2.36k| accum = std::make_pair(level, ""); 87| 2.36k| } 88| 10.5k| } else { 89| 10.5k| accum.second.push_back(c); 90| 10.5k| } 91| 12.9k| } 92| | 93| 1.18k| if(!accum.second.empty()) { ------------------ | Branch (93:7): [True: 0, False: 1.18k] ------------------ 94| 0| name.push_back(accum); 95| 0| } 96| | 97| 1.18k| if(level != 0) { ------------------ | Branch (97:7): [True: 0, False: 1.18k] ------------------ 98| 0| throw Decoding_Error(decoding_error + "Missing close paren"); 99| 0| } 100| | 101| 1.18k| if(name.empty()) { ------------------ | Branch (101:7): [True: 0, False: 1.18k] ------------------ 102| 0| throw Decoding_Error(decoding_error + "Empty name"); 103| 0| } 104| | 105| 1.18k| m_alg_name = name[0].second; 106| | 107| 1.18k| bool in_modes = false; 108| | 109| 2.36k| for(size_t i = 1; i != name.size(); ++i) { ------------------ | Branch (109:22): [True: 1.18k, False: 1.18k] ------------------ 110| 1.18k| if(name[i].first == 0) { ------------------ | Branch (110:10): [True: 0, False: 1.18k] ------------------ 111| 0| m_mode_info.push_back(make_arg(name, i)); 112| 0| in_modes = true; 113| 1.18k| } else if(name[i].first == 1 && !in_modes) { ------------------ | Branch (113:17): [True: 1.18k, False: 0] | Branch (113:39): [True: 1.18k, False: 0] ------------------ 114| 1.18k| m_args.push_back(make_arg(name, i)); 115| 1.18k| } 116| 1.18k| } 117| 1.18k|} _ZNK5Botan9SCAN_Name3argEm: 119| 2.36k|std::string SCAN_Name::arg(size_t i) const { 120| 2.36k| if(i >= arg_count()) { ------------------ | Branch (120:7): [True: 0, False: 2.36k] ------------------ 121| 0| throw Invalid_Argument("SCAN_Name::arg " + std::to_string(i) + " out of range for '" + to_string() + "'"); 122| 0| } 123| 2.36k| return m_args[i]; 124| 2.36k|} scan_name.cpp:_ZN5Botan12_GLOBAL__N_18make_argERKNSt3__16vectorINS1_4pairImNS1_12basic_stringIcNS1_11char_traitsIcEENS1_9allocatorIcEEEEEENS7_ISA_EEEEm: 17| 1.18k|std::string make_arg(const std::vector>& name, size_t start) { 18| 1.18k| std::string output = name[start].second; 19| 1.18k| size_t level = name[start].first; 20| | 21| 1.18k| size_t paren_depth = 0; 22| | 23| 1.18k| for(size_t i = start + 1; i != name.size(); ++i) { ------------------ | Branch (23:30): [True: 0, False: 1.18k] ------------------ 24| 0| if(name[i].first <= name[start].first) { ------------------ | Branch (24:10): [True: 0, False: 0] ------------------ 25| 0| break; 26| 0| } 27| | 28| 0| if(name[i].first > level) { ------------------ | Branch (28:10): [True: 0, False: 0] ------------------ 29| 0| output += "(" + name[i].second; 30| 0| ++paren_depth; 31| 0| } else if(name[i].first < level) { ------------------ | Branch (31:17): [True: 0, False: 0] ------------------ 32| 0| for(size_t j = name[i].first; j < level; j++) { ------------------ | Branch (32:40): [True: 0, False: 0] ------------------ 33| 0| output += ")"; 34| 0| --paren_depth; 35| 0| } 36| 0| output += "," + name[i].second; 37| 0| } else { 38| 0| if(output[output.size() - 1] != '(') { ------------------ | Branch (38:13): [True: 0, False: 0] ------------------ 39| 0| output += ","; 40| 0| } 41| 0| output += name[i].second; 42| 0| } 43| | 44| 0| level = name[i].first; 45| 0| } 46| | 47| 1.18k| for(size_t i = 0; i != paren_depth; ++i) { ------------------ | Branch (47:22): [True: 0, False: 1.18k] ------------------ 48| 0| output += ")"; 49| 0| } 50| | 51| 1.18k| return output; 52| 1.18k|} _ZN5Botan15AlternativeNameC2ENSt3__117basic_string_viewIcNS1_11char_traitsIcEEEES5_S5_S5_: 27| 9.19k| std::string_view ip) { 28| 9.19k| add_attribute("RFC822", email_addr); 29| 9.19k| add_attribute("DNS", dns); 30| 9.19k| add_attribute("URI", uri); 31| 9.19k| add_attribute("IP", ip); 32| 9.19k|} _ZN5Botan15AlternativeName13add_attributeENSt3__117basic_string_viewIcNS1_11char_traitsIcEEEES5_: 37| 41.4k|void AlternativeName::add_attribute(std::string_view type, std::string_view value) { 38| 41.4k| if(type.empty() || value.empty()) { ------------------ | Branch (38:7): [True: 0, False: 41.4k] | Branch (38:23): [True: 36.9k, False: 4.49k] ------------------ 39| 36.9k| return; 40| 36.9k| } 41| | 42| 4.49k| auto range = m_alt_info.equal_range(type); 43| 11.6k| for(auto j = range.first; j != range.second; ++j) { ------------------ | Branch (43:30): [True: 7.29k, False: 4.33k] ------------------ 44| 7.29k| if(j->second == value) { ------------------ | Branch (44:10): [True: 164, False: 7.13k] ------------------ 45| 164| return; 46| 164| } 47| 7.29k| } 48| | 49| 4.33k| m_alt_info.emplace(type, value); 50| 4.33k|} _ZN5Botan15AlternativeName13add_othernameERKNS_3OIDENSt3__117basic_string_viewIcNS4_11char_traitsIcEEEENS_9ASN1_TypeE: 55| 80|void AlternativeName::add_othername(const OID& oid, std::string_view value, ASN1_Type type) { 56| 80| if(value.empty()) { ------------------ | Branch (56:7): [True: 1, False: 79] ------------------ 57| 1| return; 58| 1| } 59| 79| multimap_insert(m_othernames, oid, ASN1_String(value, type)); 60| 79|} _ZNK5Botan15AlternativeName8contentsEv: 65| 847|std::multimap AlternativeName::contents() const { 66| 847| std::multimap names; 67| | 68| 1.94k| for(const auto& name : m_alt_info) { ------------------ | Branch (68:25): [True: 1.94k, False: 847] ------------------ 69| 1.94k| names.emplace(name.first, name.second); 70| 1.94k| } 71| | 72| 847| for(const auto& othername : m_othernames) { ------------------ | Branch (72:30): [True: 0, False: 847] ------------------ 73| 0| multimap_insert(names, othername.first.to_formatted_string(), othername.second.value()); 74| 0| } 75| | 76| 847| return names; 77| 847|} _ZN5Botan15AlternativeName11decode_fromERNS_11BER_DecoderE: 177| 1.89k|void AlternativeName::decode_from(BER_Decoder& source) { 178| 1.89k| BER_Decoder names = source.start_sequence(); 179| | 180| | // FIXME this is largely a duplication of GeneralName::decode_from 181| | 182| 8.89k| while(names.more_items()) { ------------------ | Branch (182:10): [True: 7.00k, False: 1.88k] ------------------ 183| 7.00k| BER_Object obj = names.get_next_object(); 184| | 185| 7.00k| if(obj.is_a(0, ASN1_Class::ContextSpecific)) { ------------------ | Branch (185:10): [True: 269, False: 6.74k] ------------------ 186| 269| BER_Decoder othername(obj); 187| | 188| 269| OID oid; 189| 269| othername.decode(oid); 190| 269| if(othername.more_items()) { ------------------ | Branch (190:13): [True: 207, False: 62] ------------------ 191| 207| BER_Object othername_value_outer = othername.get_next_object(); 192| 207| othername.verify_end(); 193| | 194| 207| if(othername_value_outer.is_a(0, ASN1_Class::ExplicitContextSpecific) == false) { ------------------ | Branch (194:16): [True: 18, False: 189] ------------------ 195| 18| throw Decoding_Error("Invalid tags on otherName value"); 196| 18| } 197| | 198| 189| BER_Decoder othername_value_inner(othername_value_outer); 199| | 200| 189| BER_Object value = othername_value_inner.get_next_object(); 201| 189| othername_value_inner.verify_end(); 202| | 203| 189| if(ASN1_String::is_string_type(value.type()) && value.get_class() == ASN1_Class::Universal) { ------------------ | Branch (203:16): [True: 98, False: 91] | Branch (203:61): [True: 80, False: 18] ------------------ 204| 80| add_othername(oid, ASN1::to_string(value), value.type()); 205| 80| } 206| 189| } 207| 269| } 208| 6.99k| if(obj.is_a(1, ASN1_Class::ContextSpecific)) { ------------------ | Branch (208:10): [True: 845, False: 6.14k] ------------------ 209| 845| add_attribute("RFC822", ASN1::to_string(obj)); 210| 6.14k| } else if(obj.is_a(2, ASN1_Class::ContextSpecific)) { ------------------ | Branch (210:17): [True: 1.64k, False: 4.50k] ------------------ 211| 1.64k| add_attribute("DNS", ASN1::to_string(obj)); 212| 4.50k| } else if(obj.is_a(6, ASN1_Class::ContextSpecific)) { ------------------ | Branch (212:17): [True: 1.35k, False: 3.14k] ------------------ 213| 1.35k| add_attribute("URI", ASN1::to_string(obj)); 214| 3.14k| } else if(obj.is_a(4, ASN1_Class::ContextSpecific | ASN1_Class::Constructed)) { ------------------ | Branch (214:17): [True: 562, False: 2.58k] ------------------ 215| 562| BER_Decoder dec(obj); 216| 562| X509_DN dn; 217| 562| std::stringstream ss; 218| | 219| 562| dec.decode(dn); 220| 562| ss << dn; 221| | 222| 562| add_attribute("DN", ss.str()); 223| 2.58k| } else if(obj.is_a(7, ASN1_Class::ContextSpecific)) { ------------------ | Branch (223:17): [True: 480, False: 2.10k] ------------------ 224| 480| if(obj.length() == 4) { ------------------ | Branch (224:13): [True: 438, False: 42] ------------------ 225| 438| const uint32_t ip = load_be(obj.bits(), 0); 226| 438| add_attribute("IP", ipv4_to_string(ip)); 227| 438| } 228| 480| } 229| 6.99k| } 230| 1.89k|} _ZN5Botan11GeneralName11decode_fromERNS_11BER_DecoderE: 34| 558|void GeneralName::decode_from(BER_Decoder& ber) { 35| 558| BER_Object obj = ber.get_next_object(); 36| | 37| 558| if(obj.is_a(1, ASN1_Class::ContextSpecific)) { ------------------ | Branch (37:7): [True: 253, False: 305] ------------------ 38| 253| m_type = "RFC822"; 39| 253| m_name = ASN1::to_string(obj); 40| 305| } else if(obj.is_a(2, ASN1_Class::ContextSpecific)) { ------------------ | Branch (40:14): [True: 49, False: 256] ------------------ 41| 49| m_type = "DNS"; 42| 49| m_name = ASN1::to_string(obj); 43| 256| } else if(obj.is_a(6, ASN1_Class::ContextSpecific)) { ------------------ | Branch (43:14): [True: 93, False: 163] ------------------ 44| 93| m_type = "URI"; 45| 93| m_name = ASN1::to_string(obj); 46| 163| } else if(obj.is_a(4, ASN1_Class::ContextSpecific | ASN1_Class::Constructed)) { ------------------ | Branch (46:14): [True: 4, False: 159] ------------------ 47| 4| m_type = "DN"; 48| 4| X509_DN dn; 49| 4| BER_Decoder dec(obj); 50| 4| std::stringstream ss; 51| | 52| 4| dn.decode_from(dec); 53| 4| ss << dn; 54| | 55| 4| m_name = ss.str(); 56| 159| } else if(obj.is_a(7, ASN1_Class::ContextSpecific)) { ------------------ | Branch (56:14): [True: 99, False: 60] ------------------ 57| 99| if(obj.length() == 8) { ------------------ | Branch (57:10): [True: 77, False: 22] ------------------ 58| 77| m_type = "IP"; 59| 77| m_name = 60| 77| ipv4_to_string(load_be(obj.bits(), 0)) + "/" + ipv4_to_string(load_be(obj.bits(), 1)); 61| 77| } else if(obj.length() == 32) { ------------------ | Branch (61:17): [True: 0, False: 22] ------------------ 62| 0| throw Decoding_Error("Unsupported IPv6 name constraint"); 63| 22| } else { 64| 22| throw Decoding_Error("Invalid IP name constraint size " + std::to_string(obj.length())); 65| 22| } 66| 99| } else { 67| 60| throw Decoding_Error("Found unknown GeneralName type"); 68| 60| } 69| 558|} _ZN5Botan14GeneralSubtree11decode_fromERNS_11BER_DecoderE: 200| 750|void GeneralSubtree::decode_from(BER_Decoder& ber) { 201| 750| ber.start_sequence() 202| 750| .decode(m_base) 203| 750| .decode_optional(m_minimum, ASN1_Type(0), ASN1_Class::ContextSpecific, size_t(0)) 204| 750| .end_cons(); 205| | 206| 750| if(m_minimum != 0) { ------------------ | Branch (206:7): [True: 1, False: 749] ------------------ 207| 1| throw Decoding_Error("GeneralSubtree minimum must be 0"); 208| 1| } 209| | 210| 749| m_maximum = std::numeric_limits::max(); 211| 749|} _ZN5Botan4OCSP8ResponseC2EPKhm: 83| 4.27k| m_response_bits(response_bits, response_bits + response_bits_len) { 84| 4.27k| BER_Decoder response_outer = BER_Decoder(m_response_bits).start_sequence(); 85| | 86| 4.27k| size_t resp_status = 0; 87| | 88| 4.27k| response_outer.decode(resp_status, ASN1_Type::Enumerated, ASN1_Class::Universal); 89| | 90| 4.27k| m_status = static_cast(resp_status); 91| | 92| 4.27k| if(m_status != Response_Status_Code::Successful) { ------------------ | Branch (92:7): [True: 73, False: 4.20k] ------------------ 93| 73| return; 94| 73| } 95| | 96| 4.20k| if(response_outer.more_items()) { ------------------ | Branch (96:7): [True: 3.27k, False: 933] ------------------ 97| 3.27k| BER_Decoder response_bytes = response_outer.start_context_specific(0).start_sequence(); 98| | 99| 3.27k| response_bytes.decode_and_check(OID("1.3.6.1.5.5.7.48.1.1"), "Unknown response type in OCSP response"); 100| | 101| 3.27k| BER_Decoder basicresponse = BER_Decoder(response_bytes.get_next_octet_string()).start_sequence(); 102| | 103| 3.27k| basicresponse.start_sequence() 104| 3.27k| .raw_bytes(m_tbs_bits) 105| 3.27k| .end_cons() 106| 3.27k| .decode(m_sig_algo) 107| 3.27k| .decode(m_signature, ASN1_Type::BitString); 108| 3.27k| decode_optional_list(basicresponse, ASN1_Type(0), m_certs); 109| | 110| 3.27k| size_t responsedata_version = 0; 111| 3.27k| Extensions extensions; 112| | 113| 3.27k| BER_Decoder(m_tbs_bits) 114| 3.27k| .decode_optional(responsedata_version, ASN1_Type(0), ASN1_Class::ContextSpecific | ASN1_Class::Constructed) 115| | 116| 3.27k| .decode_optional(m_signer_name, ASN1_Type(1), ASN1_Class::ContextSpecific | ASN1_Class::Constructed) 117| | 118| 3.27k| .decode_optional_string( 119| 3.27k| m_key_hash, ASN1_Type::OctetString, 2, ASN1_Class::ContextSpecific | ASN1_Class::Constructed) 120| | 121| 3.27k| .decode(m_produced_at) 122| | 123| 3.27k| .decode_list(m_responses) 124| | 125| 3.27k| .decode_optional(extensions, ASN1_Type(1), ASN1_Class::ContextSpecific | ASN1_Class::Constructed); 126| | 127| 3.27k| const bool has_signer = !m_signer_name.empty(); 128| 3.27k| const bool has_key_hash = !m_key_hash.empty(); 129| | 130| 3.27k| if(has_signer && has_key_hash) { ------------------ | Branch (130:10): [True: 0, False: 3.27k] | Branch (130:24): [True: 0, False: 0] ------------------ 131| 0| throw Decoding_Error("OCSP response includes both byName and byKey in responderID field"); 132| 0| } 133| 3.27k| if(!has_signer && !has_key_hash) { ------------------ | Branch (133:10): [True: 263, False: 3.00k] | Branch (133:25): [True: 256, False: 7] ------------------ 134| 256| throw Decoding_Error("OCSP response contains neither byName nor byKey in responderID field"); 135| 256| } 136| 3.27k| } 137| | 138| 3.94k| response_outer.end_cons(); 139| 3.94k|} ocsp.cpp:_ZN5Botan4OCSP12_GLOBAL__N_120decode_optional_listERNS_11BER_DecoderENS_9ASN1_TypeERNSt3__16vectorINS_16X509_CertificateENS5_9allocatorIS7_EEEE: 29| 2.99k|void decode_optional_list(BER_Decoder& ber, ASN1_Type tag, std::vector& output) { 30| 2.99k| BER_Object obj = ber.get_next_object(); 31| | 32| 2.99k| if(obj.is_a(tag, ASN1_Class::ContextSpecific | ASN1_Class::Constructed) == false) { ------------------ | Branch (32:7): [True: 1.04k, False: 1.94k] ------------------ 33| 1.04k| ber.push_back(obj); 34| 1.04k| return; 35| 1.04k| } 36| | 37| 1.94k| BER_Decoder list(obj); 38| | 39| 5.31k| while(list.more_items()) { ------------------ | Branch (39:10): [True: 3.37k, False: 1.94k] ------------------ 40| 3.37k| BER_Object certbits = list.get_next_object(); 41| 3.37k| X509_Certificate cert(certbits.bits(), certbits.length()); 42| 3.37k| output.push_back(std::move(cert)); 43| 3.37k| } 44| 1.94k|} _ZN5Botan4OCSP6CertID11decode_fromERNS_11BER_DecoderE: 62| 11|void CertID::decode_from(BER_Decoder& from) { 63| 11| from.start_sequence() 64| 11| .decode(m_hash_id) 65| 11| .decode(m_issuer_dn_hash, ASN1_Type::OctetString) 66| 11| .decode(m_issuer_key_hash, ASN1_Type::OctetString) 67| 11| .decode(m_subject_serial) 68| 11| .end_cons(); 69| 11|} _ZN5Botan4OCSP14SingleResponse11decode_fromERNS_11BER_DecoderE: 73| 14|void SingleResponse::decode_from(BER_Decoder& from) { 74| 14| BER_Object cert_status; 75| 14| Extensions extensions; 76| | 77| 14| from.start_sequence() 78| 14| .decode(m_certid) 79| 14| .get_next(cert_status) 80| 14| .decode(m_thisupdate) 81| 14| .decode_optional(m_nextupdate, ASN1_Type(0), ASN1_Class::ContextSpecific | ASN1_Class::Constructed) 82| 14| .decode_optional(extensions, ASN1_Type(1), ASN1_Class::ContextSpecific | ASN1_Class::Constructed) 83| 14| .end_cons(); 84| | 85| | /* CertStatus ::= CHOICE { 86| | good [0] IMPLICIT NULL, 87| | revoked [1] IMPLICIT RevokedInfo, 88| | unknown [2] IMPLICIT UnknownInfo } 89| | 90| | RevokedInfo ::= SEQUENCE { 91| | revocationTime GeneralizedTime, 92| | revocationReason [0] EXPLICIT CRLReason OPTIONAL } 93| | 94| | UnknownInfo ::= NULL 95| | 96| | We should verify the expected body and decode the RevokedInfo 97| | */ 98| 14| m_cert_status = static_cast(cert_status.type()); 99| 14|} _ZN5Botan7X509_DN13add_attributeERKNS_3OIDERKNS_11ASN1_StringE: 96| 944|void X509_DN::add_attribute(const OID& oid, const ASN1_String& str) { 97| 944| if(str.empty()) { ------------------ | Branch (97:7): [True: 175, False: 769] ------------------ 98| 175| return; 99| 175| } 100| | 101| 769| m_rdn.push_back(std::make_pair(oid, str)); 102| 769| m_dn_bits.clear(); 103| 769|} _ZNK5Botan7X509_DN14get_attributesEv: 108| 4.38k|std::multimap X509_DN::get_attributes() const { 109| 4.38k| std::multimap retval; 110| | 111| 4.38k| for(auto& i : m_rdn) { ------------------ | Branch (111:16): [True: 209, False: 4.38k] ------------------ 112| 209| multimap_insert(retval, i.first, i.second.value()); 113| 209| } 114| 4.38k| return retval; 115| 4.38k|} _ZN5BotaneqERKNS_7X509_DNES2_: 216| 2.19k|bool operator==(const X509_DN& dn1, const X509_DN& dn2) { 217| 2.19k| auto attr1 = dn1.get_attributes(); 218| 2.19k| auto attr2 = dn2.get_attributes(); 219| | 220| 2.19k| if(attr1.size() != attr2.size()) { ------------------ | Branch (220:7): [True: 21, False: 2.17k] ------------------ 221| 21| return false; 222| 21| } 223| | 224| 2.17k| auto p1 = attr1.begin(); 225| 2.17k| auto p2 = attr2.begin(); 226| | 227| 2.17k| while(true) { ------------------ | Branch (227:10): [Folded - Ignored] ------------------ 228| 2.17k| if(p1 == attr1.end() && p2 == attr2.end()) { ------------------ | Branch (228:10): [True: 2.09k, False: 73] | Branch (228:10): [True: 2.09k, False: 73] | Branch (228:31): [True: 2.09k, False: 0] ------------------ 229| 2.09k| break; 230| 2.09k| } 231| 73| if(p1 == attr1.end()) { ------------------ | Branch (231:10): [True: 0, False: 73] ------------------ 232| 0| return false; 233| 0| } 234| 73| if(p2 == attr2.end()) { ------------------ | Branch (234:10): [True: 0, False: 73] ------------------ 235| 0| return false; 236| 0| } 237| 73| if(p1->first != p2->first) { ------------------ | Branch (237:10): [True: 38, False: 35] ------------------ 238| 38| return false; 239| 38| } 240| 35| if(!x500_name_cmp(p1->second, p2->second)) { ------------------ | Branch (240:10): [True: 34, False: 1] ------------------ 241| 34| return false; 242| 34| } 243| 1| ++p1; 244| 1| ++p2; 245| 1| } 246| 2.09k| return true; 247| 2.17k|} _ZN5Botan7X509_DN11decode_fromERNS_11BER_DecoderE: 341| 5.67k|void X509_DN::decode_from(BER_Decoder& source) { 342| 5.67k| std::vector bits; 343| | 344| 5.67k| source.start_sequence().raw_bytes(bits).end_cons(); 345| | 346| 5.67k| BER_Decoder sequence(bits); 347| | 348| 5.67k| m_rdn.clear(); 349| | 350| 6.98k| while(sequence.more_items()) { ------------------ | Branch (350:10): [True: 1.31k, False: 5.67k] ------------------ 351| 1.31k| BER_Decoder rdn = sequence.start_set(); 352| | 353| 2.50k| while(rdn.more_items()) { ------------------ | Branch (353:13): [True: 1.19k, False: 1.31k] ------------------ 354| 1.19k| OID oid; 355| 1.19k| ASN1_String str; 356| | 357| 1.19k| rdn.start_sequence() 358| 1.19k| .decode(oid) 359| 1.19k| .decode(str) // TODO support Any 360| 1.19k| .end_cons(); 361| | 362| 1.19k| add_attribute(oid, str); 363| 1.19k| } 364| 1.31k| } 365| | 366| | // Have to assign last as add_attribute zaps m_dn_bits 367| 5.67k| m_dn_bits = bits; 368| 5.67k|} _ZN5BotanlsERNSt3__113basic_ostreamIcNS0_11char_traitsIcEEEERKNS_7X509_DNE: 402| 426|std::ostream& operator<<(std::ostream& out, const X509_DN& dn) { 403| 426| auto info = dn.dn_info(); 404| | 405| 759| for(size_t i = 0; i != info.size(); ++i) { ------------------ | Branch (405:22): [True: 333, False: 426] ------------------ 406| 333| out << to_short_form(info[i].first) << "=\""; 407| 2.89k| for(char c : info[i].second.value()) { ------------------ | Branch (407:18): [True: 2.89k, False: 333] ------------------ 408| 2.89k| if(c == '\\' || c == '\"') { ------------------ | Branch (408:13): [True: 33, False: 2.86k] | Branch (408:26): [True: 103, False: 2.75k] ------------------ 409| 136| out << "\\"; 410| 136| } 411| 2.89k| out << c; 412| 2.89k| } 413| 333| out << "\""; 414| | 415| 333| if(i + 1 < info.size()) { ------------------ | Branch (415:10): [True: 0, False: 333] ------------------ 416| 0| out << ","; 417| 0| } 418| 333| } 419| 426| return out; 420| 426|} x509_dn.cpp:_ZN5Botan12_GLOBAL__N_113x500_name_cmpENSt3__117basic_string_viewIcNS1_11char_traitsIcEEEES5_: 34| 35|bool x500_name_cmp(std::string_view name1, std::string_view name2) { 35| 35| auto p1 = name1.begin(); 36| 35| auto p2 = name2.begin(); 37| | 38| 256| while((p1 != name1.end()) && is_space(*p1)) { ------------------ | Branch (38:10): [True: 255, False: 1] | Branch (38:33): [True: 221, False: 34] ------------------ 39| 221| ++p1; 40| 221| } 41| 170| while((p2 != name2.end()) && is_space(*p2)) { ------------------ | Branch (41:10): [True: 169, False: 1] | Branch (41:33): [True: 135, False: 34] ------------------ 42| 135| ++p2; 43| 135| } 44| | 45| 101| while(p1 != name1.end() && p2 != name2.end()) { ------------------ | Branch (45:10): [True: 92, False: 9] | Branch (45:31): [True: 91, False: 1] ------------------ 46| 91| if(is_space(*p1)) { ------------------ | Branch (46:10): [True: 25, False: 66] ------------------ 47| 25| if(!is_space(*p2)) { ------------------ | Branch (47:13): [True: 3, False: 22] ------------------ 48| 3| return false; 49| 3| } 50| | 51| 83| while((p1 != name1.end()) && is_space(*p1)) { ------------------ | Branch (51:16): [True: 80, False: 3] | Branch (51:39): [True: 61, False: 19] ------------------ 52| 61| ++p1; 53| 61| } 54| 104| while((p2 != name2.end()) && is_space(*p2)) { ------------------ | Branch (54:16): [True: 101, False: 3] | Branch (54:39): [True: 82, False: 19] ------------------ 55| 82| ++p2; 56| 82| } 57| | 58| 22| if(p1 == name1.end() && p2 == name2.end()) { ------------------ | Branch (58:13): [True: 3, False: 19] | Branch (58:34): [True: 1, False: 2] ------------------ 59| 1| return true; 60| 1| } 61| 21| if(p1 == name1.end() || p2 == name2.end()) { ------------------ | Branch (61:13): [True: 2, False: 19] | Branch (61:34): [True: 2, False: 17] ------------------ 62| 4| return false; 63| 4| } 64| 21| } 65| | 66| 83| if(!caseless_cmp(*p1, *p2)) { ------------------ | Branch (66:10): [True: 17, False: 66] ------------------ 67| 17| return false; 68| 17| } 69| 66| ++p1; 70| 66| ++p2; 71| 66| } 72| | 73| 10| while((p1 != name1.end()) && is_space(*p1)) { ------------------ | Branch (73:10): [True: 1, False: 9] | Branch (73:33): [True: 0, False: 1] ------------------ 74| 0| ++p1; 75| 0| } 76| 40| while((p2 != name2.end()) && is_space(*p2)) { ------------------ | Branch (76:10): [True: 39, False: 1] | Branch (76:33): [True: 30, False: 9] ------------------ 77| 30| ++p2; 78| 30| } 79| | 80| 10| if((p1 != name1.end()) || (p2 != name2.end())) { ------------------ | Branch (80:7): [True: 1, False: 9] | Branch (80:30): [True: 9, False: 0] ------------------ 81| 10| return false; 82| 10| } 83| 0| return true; 84| 10|} x509_dn.cpp:_ZN5Botan12_GLOBAL__N_112_GLOBAL__N_18is_spaceEc: 27| 761|bool is_space(char c) { return std::isspace(static_cast(c)); } x509_dn.cpp:_ZN5Botan12_GLOBAL__N_112_GLOBAL__N_112caseless_cmpEcc: 23| 83|bool caseless_cmp(char a, char b) { 24| 83| return (std::tolower(static_cast(a)) == std::tolower(static_cast(b))); 25| 83|} x509_dn.cpp:_ZN5Botan12_GLOBAL__N_113to_short_formERKNS_3OIDE: 372| 333|std::string to_short_form(const OID& oid) { 373| 333| std::string long_id = oid.to_formatted_string(); 374| | 375| 333| if(long_id == "X520.CommonName") { ------------------ | Branch (375:7): [True: 2, False: 331] ------------------ 376| 2| return "CN"; 377| 2| } 378| | 379| 331| if(long_id == "X520.Country") { ------------------ | Branch (379:7): [True: 1, False: 330] ------------------ 380| 1| return "C"; 381| 1| } 382| | 383| 330| if(long_id == "X520.Organization") { ------------------ | Branch (383:7): [True: 1, False: 329] ------------------ 384| 1| return "O"; 385| 1| } 386| | 387| 329| if(long_id == "X520.OrganizationalUnit") { ------------------ | Branch (387:7): [True: 4, False: 325] ------------------ 388| 4| return "OU"; 389| 4| } 390| | 391| 325| return long_id; 392| 329|} _ZN5Botan10Extensions15create_extn_objERKNS_3OIDEbRKNSt3__16vectorIhNS4_9allocatorIhEEEE: 93| 9.88k| const std::vector& body) { 94| 9.88k| const std::string oid_str = oid.to_string(); 95| | 96| 9.88k| auto extn = extension_from_oid(oid); 97| | 98| 9.88k| if(!extn) { ------------------ | Branch (98:7): [True: 4.34k, False: 5.54k] ------------------ 99| | // some other unknown extension type 100| 4.34k| extn = std::make_unique(oid, critical); 101| 4.34k| } 102| | 103| 9.88k| try { 104| 9.88k| extn->decode_inner(body); 105| 9.88k| } catch(Decoding_Error&) { 106| 4.05k| extn = std::make_unique(oid, critical); 107| 4.05k| extn->decode_inner(body); 108| 4.05k| } 109| 9.88k| return extn; 110| 9.88k|} _ZNK5Botan10Extensions20get_extension_objectERKNS_3OIDE: 188| 24.1k|const Certificate_Extension* Extensions::get_extension_object(const OID& oid) const { 189| 24.1k| auto extn = m_extension_info.find(oid); 190| 24.1k| if(extn == m_extension_info.end()) { ------------------ | Branch (190:7): [True: 22.7k, False: 1.37k] ------------------ 191| 22.7k| return nullptr; 192| 22.7k| } 193| | 194| 1.37k| return &extn->second.obj(); 195| 24.1k|} _ZN5Botan10Extensions11decode_fromERNS_11BER_DecoderE: 245| 1.94k|void Extensions::decode_from(BER_Decoder& from_source) { 246| 1.94k| m_extension_oids.clear(); 247| 1.94k| m_extension_info.clear(); 248| | 249| 1.94k| BER_Decoder sequence = from_source.start_sequence(); 250| | 251| 12.5k| while(sequence.more_items()) { ------------------ | Branch (251:10): [True: 10.5k, False: 1.94k] ------------------ 252| 10.5k| OID oid; 253| 10.5k| bool critical; 254| 10.5k| std::vector bits; 255| | 256| 10.5k| sequence.start_sequence() 257| 10.5k| .decode(oid) 258| 10.5k| .decode_optional(critical, ASN1_Type::Boolean, ASN1_Class::Universal, false) 259| 10.5k| .decode(bits, ASN1_Type::OctetString) 260| 10.5k| .end_cons(); 261| | 262| 10.5k| auto obj = create_extn_obj(oid, critical, bits); 263| 10.5k| Extensions_Info info(critical, bits, std::move(obj)); 264| | 265| 10.5k| m_extension_oids.push_back(oid); 266| 10.5k| m_extension_info.emplace(oid, info); 267| 10.5k| } 268| 1.94k| sequence.verify_end(); 269| 1.94k|} _ZNK5Botan14Cert_Extension17Basic_Constraints14get_path_limitEv: 276| 14|size_t Basic_Constraints::get_path_limit() const { 277| 14| if(!m_is_ca) { ------------------ | Branch (277:7): [True: 0, False: 14] ------------------ 278| 0| throw Invalid_State("Basic_Constraints::get_path_limit: Not a CA"); 279| 0| } 280| 14| return m_path_limit; 281| 14|} _ZN5Botan14Cert_Extension17Basic_Constraints12decode_innerERKNSt3__16vectorIhNS2_9allocatorIhEEEE: 298| 234|void Basic_Constraints::decode_inner(const std::vector& in) { 299| 234| BER_Decoder(in) 300| 234| .start_sequence() 301| 234| .decode_optional(m_is_ca, ASN1_Type::Boolean, ASN1_Class::Universal, false) 302| 234| .decode_optional(m_path_limit, ASN1_Type::Integer, ASN1_Class::Universal, NO_CERT_PATH_LIMIT) 303| 234| .end_cons(); 304| | 305| 234| if(m_is_ca == false) { ------------------ | Branch (305:7): [True: 18, False: 216] ------------------ 306| 18| m_path_limit = 0; 307| 18| } 308| 234|} _ZN5Botan14Cert_Extension9Key_Usage12decode_innerERKNSt3__16vectorIhNS2_9allocatorIhEEEE: 336| 106|void Key_Usage::decode_inner(const std::vector& in) { 337| 106| BER_Decoder ber(in); 338| | 339| 106| BER_Object obj = ber.get_next_object(); 340| | 341| 106| obj.assert_is_a(ASN1_Type::BitString, ASN1_Class::Universal, "usage constraint"); 342| | 343| 106| if(obj.length() != 2 && obj.length() != 3) { ------------------ | Branch (343:7): [True: 10, False: 96] | Branch (343:28): [True: 4, False: 6] ------------------ 344| 4| throw BER_Decoding_Error("Bad size for BITSTRING in usage constraint"); 345| 4| } 346| | 347| 102| uint16_t usage = 0; 348| | 349| 102| const uint8_t* bits = obj.bits(); 350| | 351| 102| if(bits[0] >= 8) { ------------------ | Branch (351:7): [True: 5, False: 97] ------------------ 352| 5| throw BER_Decoding_Error("Invalid unused bits in usage constraint"); 353| 5| } 354| | 355| 97| const uint8_t mask = static_cast(0xFF << bits[0]); 356| | 357| 97| if(obj.length() == 2) { ------------------ | Branch (357:7): [True: 5, False: 92] ------------------ 358| 5| usage = make_uint16(bits[1] & mask, 0); 359| 92| } else if(obj.length() == 3) { ------------------ | Branch (359:14): [True: 4, False: 88] ------------------ 360| 4| usage = make_uint16(bits[1], bits[2] & mask); 361| 4| } 362| | 363| 97| m_constraints = Key_Constraints(usage); 364| 97|} _ZN5Botan14Cert_Extension14Subject_Key_ID12decode_innerERKNSt3__16vectorIhNS2_9allocatorIhEEEE: 378| 162|void Subject_Key_ID::decode_inner(const std::vector& in) { 379| 162| BER_Decoder(in).decode(m_key_id, ASN1_Type::OctetString).verify_end(); 380| 162|} _ZN5Botan14Cert_Extension16Authority_Key_ID12decode_innerERKNSt3__16vectorIhNS2_9allocatorIhEEEE: 415| 232|void Authority_Key_ID::decode_inner(const std::vector& in) { 416| 232| BER_Decoder(in).start_sequence().decode_optional_string(m_key_id, ASN1_Type::OctetString, 0); 417| 232|} _ZN5Botan14Cert_Extension24Subject_Alternative_Name12decode_innerERKNSt3__16vectorIhNS2_9allocatorIhEEEE: 440| 284|void Subject_Alternative_Name::decode_inner(const std::vector& in) { BER_Decoder(in).decode(m_alt_name); } _ZN5Botan14Cert_Extension23Issuer_Alternative_Name12decode_innerERKNSt3__16vectorIhNS2_9allocatorIhEEEE: 445| 681|void Issuer_Alternative_Name::decode_inner(const std::vector& in) { BER_Decoder(in).decode(m_alt_name); } _ZN5Botan14Cert_Extension18Extended_Key_Usage12decode_innerERKNSt3__16vectorIhNS2_9allocatorIhEEEE: 459| 77|void Extended_Key_Usage::decode_inner(const std::vector& in) { BER_Decoder(in).decode_list(m_oids); } _ZN5Botan14Cert_Extension16Name_Constraints12decode_innerERKNSt3__16vectorIhNS2_9allocatorIhEEEE: 469| 695|void Name_Constraints::decode_inner(const std::vector& in) { 470| 695| std::vector permit, exclude; 471| 695| BER_Decoder ber(in); 472| 695| BER_Decoder ext = ber.start_sequence(); 473| 695| BER_Object per = ext.get_next_object(); 474| | 475| 695| ext.push_back(per); 476| 695| if(per.is_a(0, ASN1_Class::Constructed | ASN1_Class::ContextSpecific)) { ------------------ | Branch (476:7): [True: 155, False: 540] ------------------ 477| 155| ext.decode_list(permit, ASN1_Type(0), ASN1_Class::Constructed | ASN1_Class::ContextSpecific); 478| 155| if(permit.empty()) { ------------------ | Branch (478:10): [True: 1, False: 154] ------------------ 479| 1| throw Encoding_Error("Empty Name Contraint list"); 480| 1| } 481| 155| } 482| | 483| 694| BER_Object exc = ext.get_next_object(); 484| 694| ext.push_back(exc); 485| 694| if(per.is_a(1, ASN1_Class::Constructed | ASN1_Class::ContextSpecific)) { ------------------ | Branch (485:7): [True: 324, False: 370] ------------------ 486| 324| ext.decode_list(exclude, ASN1_Type(1), ASN1_Class::Constructed | ASN1_Class::ContextSpecific); 487| 324| if(exclude.empty()) { ------------------ | Branch (487:10): [True: 3, False: 321] ------------------ 488| 3| throw Encoding_Error("Empty Name Contraint list"); 489| 3| } 490| 324| } 491| | 492| 691| ext.end_cons(); 493| | 494| 691| if(permit.empty() && exclude.empty()) { ------------------ | Branch (494:7): [True: 46, False: 645] | Branch (494:25): [True: 3, False: 43] ------------------ 495| 3| throw Encoding_Error("Empty Name Contraint extension"); 496| 3| } 497| | 498| 688| m_name_constraints = NameConstraints(std::move(permit), std::move(exclude)); 499| 688|} _ZN5Botan14Cert_Extension20Certificate_Policies12decode_innerERKNSt3__16vectorIhNS2_9allocatorIhEEEE: 598| 184|void Certificate_Policies::decode_inner(const std::vector& in) { 599| 184| std::vector policies; 600| | 601| 184| BER_Decoder(in).decode_list(policies); 602| 184| m_oids.clear(); 603| 184| for(const auto& policy : policies) { ------------------ | Branch (603:27): [True: 33, False: 184] ------------------ 604| 33| m_oids.push_back(policy.oid()); 605| 33| } 606| 184|} _ZN5Botan14Cert_Extension28Authority_Information_Access12decode_innerERKNSt3__16vectorIhNS2_9allocatorIhEEEE: 633| 178|void Authority_Information_Access::decode_inner(const std::vector& in) { 634| 178| BER_Decoder ber = BER_Decoder(in).start_sequence(); 635| | 636| 323| while(ber.more_items()) { ------------------ | Branch (636:10): [True: 145, False: 178] ------------------ 637| 145| OID oid; 638| | 639| 145| BER_Decoder info = ber.start_sequence(); 640| | 641| 145| info.decode(oid); 642| | 643| 145| if(oid == OID::from_string("PKIX.OCSP")) { ------------------ | Branch (643:10): [True: 49, False: 96] ------------------ 644| 49| BER_Object name = info.get_next_object(); 645| | 646| 49| if(name.is_a(6, ASN1_Class::ContextSpecific)) { ------------------ | Branch (646:13): [True: 10, False: 39] ------------------ 647| 10| m_ocsp_responder = ASN1::to_string(name); 648| 10| } 649| 49| } 650| 145| if(oid == OID::from_string("PKIX.CertificateAuthorityIssuers")) { ------------------ | Branch (650:10): [True: 23, False: 122] ------------------ 651| 23| BER_Object name = info.get_next_object(); 652| | 653| 23| if(name.is_a(6, ASN1_Class::ContextSpecific)) { ------------------ | Branch (653:13): [True: 11, False: 12] ------------------ 654| 11| m_ca_issuers.push_back(ASN1::to_string(name)); 655| 11| } 656| 23| } 657| 145| } 658| 178|} _ZN5Botan14Cert_Extension10CRL_Number12decode_innerERKNSt3__16vectorIhNS2_9allocatorIhEEEE: 692| 128|void CRL_Number::decode_inner(const std::vector& in) { 693| 128| BER_Decoder(in).decode(m_crl_number); 694| 128| m_has_value = true; 695| 128|} _ZN5Botan14Cert_Extension14CRL_ReasonCode12decode_innerERKNSt3__16vectorIhNS2_9allocatorIhEEEE: 709| 68|void CRL_ReasonCode::decode_inner(const std::vector& in) { 710| 68| size_t reason_code = 0; 711| 68| BER_Decoder(in).decode(reason_code, ASN1_Type::Enumerated, ASN1_Class::Universal); 712| 68| m_reason = static_cast(reason_code); 713| 68|} _ZN5Botan14Cert_Extension23CRL_Distribution_Points12decode_innerERKNSt3__16vectorIhNS2_9allocatorIhEEEE: 719| 2.48k|void CRL_Distribution_Points::decode_inner(const std::vector& buf) { 720| 2.48k| BER_Decoder(buf).decode_list(m_distribution_points).verify_end(); 721| | 722| 2.48k| std::stringstream ss; 723| | 724| 2.48k| for(const auto& distribution_point : m_distribution_points) { ------------------ | Branch (724:39): [True: 847, False: 2.48k] ------------------ 725| 847| auto contents = distribution_point.point().contents(); 726| | 727| 1.94k| for(const auto& pair : contents) { ------------------ | Branch (727:28): [True: 1.94k, False: 847] ------------------ 728| 1.94k| ss << pair.first << ": " << pair.second << " "; 729| 1.94k| } 730| 847| } 731| | 732| 2.48k| m_crl_distribution_urls.push_back(ss.str()); 733| 2.48k|} _ZN5Botan14Cert_Extension23CRL_Distribution_Points18Distribution_Point11decode_fromERNS_11BER_DecoderE: 739| 2.11k|void CRL_Distribution_Points::Distribution_Point::decode_from(BER_Decoder& ber) { 740| 2.11k| ber.start_sequence() 741| 2.11k| .start_context_specific(0) 742| 2.11k| .decode_optional_implicit(m_point, 743| 2.11k| ASN1_Type(0), 744| 2.11k| ASN1_Class::ContextSpecific | ASN1_Class::Constructed, 745| 2.11k| ASN1_Type::Sequence, 746| 2.11k| ASN1_Class::Constructed) 747| 2.11k| .end_cons() 748| 2.11k| .end_cons(); 749| 2.11k|} _ZN5Botan14Cert_Extension30CRL_Issuing_Distribution_Point12decode_innerERKNSt3__16vectorIhNS2_9allocatorIhEEEE: 755| 31|void CRL_Issuing_Distribution_Point::decode_inner(const std::vector& buf) { 756| 31| BER_Decoder(buf).decode(m_distribution_point).verify_end(); 757| 31|} _ZN5Botan14Cert_Extension17Unknown_Extension12decode_innerERKNSt3__16vectorIhNS2_9allocatorIhEEEE: 763| 8.40k|void Unknown_Extension::decode_inner(const std::vector& bytes) { 764| | // Just treat as an opaque blob at this level 765| 8.40k| m_bytes = bytes; 766| 8.40k|} x509_ext.cpp:_ZN5Botan12_GLOBAL__N_118extension_from_oidERKNS_3OIDE: 26| 9.88k|std::unique_ptr extension_from_oid(const OID& oid) { 27| 9.88k| if(oid == Cert_Extension::Subject_Key_ID::static_oid()) { ------------------ | Branch (27:7): [True: 162, False: 9.72k] ------------------ 28| 162| return std::make_unique(); 29| 162| } 30| | 31| 9.72k| if(oid == Cert_Extension::Key_Usage::static_oid()) { ------------------ | Branch (31:7): [True: 106, False: 9.61k] ------------------ 32| 106| return std::make_unique(); 33| 106| } 34| | 35| 9.61k| if(oid == Cert_Extension::Subject_Alternative_Name::static_oid()) { ------------------ | Branch (35:7): [True: 284, False: 9.33k] ------------------ 36| 284| return std::make_unique(); 37| 284| } 38| | 39| 9.33k| if(oid == Cert_Extension::Issuer_Alternative_Name::static_oid()) { ------------------ | Branch (39:7): [True: 681, False: 8.65k] ------------------ 40| 681| return std::make_unique(); 41| 681| } 42| | 43| 8.65k| if(oid == Cert_Extension::Basic_Constraints::static_oid()) { ------------------ | Branch (43:7): [True: 234, False: 8.41k] ------------------ 44| 234| return std::make_unique(); 45| 234| } 46| | 47| 8.41k| if(oid == Cert_Extension::CRL_Number::static_oid()) { ------------------ | Branch (47:7): [True: 128, False: 8.28k] ------------------ 48| 128| return std::make_unique(); 49| 128| } 50| | 51| 8.28k| if(oid == Cert_Extension::CRL_ReasonCode::static_oid()) { ------------------ | Branch (51:7): [True: 68, False: 8.22k] ------------------ 52| 68| return std::make_unique(); 53| 68| } 54| | 55| 8.22k| if(oid == Cert_Extension::Authority_Key_ID::static_oid()) { ------------------ | Branch (55:7): [True: 232, False: 7.98k] ------------------ 56| 232| return std::make_unique(); 57| 232| } 58| | 59| 7.98k| if(oid == Cert_Extension::Name_Constraints::static_oid()) { ------------------ | Branch (59:7): [True: 695, False: 7.29k] ------------------ 60| 695| return std::make_unique(); 61| 695| } 62| | 63| 7.29k| if(oid == Cert_Extension::CRL_Distribution_Points::static_oid()) { ------------------ | Branch (63:7): [True: 2.48k, False: 4.81k] ------------------ 64| 2.48k| return std::make_unique(); 65| 2.48k| } 66| | 67| 4.81k| if(oid == Cert_Extension::CRL_Issuing_Distribution_Point::static_oid()) { ------------------ | Branch (67:7): [True: 31, False: 4.78k] ------------------ 68| 31| return std::make_unique(); 69| 31| } 70| | 71| 4.78k| if(oid == Cert_Extension::Certificate_Policies::static_oid()) { ------------------ | Branch (71:7): [True: 184, False: 4.59k] ------------------ 72| 184| return std::make_unique(); 73| 184| } 74| | 75| 4.59k| if(oid == Cert_Extension::Extended_Key_Usage::static_oid()) { ------------------ | Branch (75:7): [True: 77, False: 4.52k] ------------------ 76| 77| return std::make_unique(); 77| 77| } 78| | 79| 4.52k| if(oid == Cert_Extension::Authority_Information_Access::static_oid()) { ------------------ | Branch (79:7): [True: 178, False: 4.34k] ------------------ 80| 178| return std::make_unique(); 81| 178| } 82| | 83| 4.34k| return nullptr; // unknown 84| 4.52k|} x509_ext.cpp:_ZN5Botan14Cert_Extension12_GLOBAL__N_118Policy_Information11decode_fromERNS_11BER_DecoderE: 569| 94| void decode_from(BER_Decoder& codec) override { 570| 94| codec.start_sequence().decode(m_oid).discard_remaining().end_cons(); 571| 94| } x509_ext.cpp:_ZNK5Botan14Cert_Extension12_GLOBAL__N_118Policy_Information3oidEv: 565| 33| const OID& oid() const { return m_oid; } x509_ext.cpp:_ZN5Botan14Cert_Extension12_GLOBAL__N_118Policy_InformationC2Ev: 561| 94| Policy_Information() = default; _ZN5Botan11X509_Object9load_dataERNS_10DataSourceE: 24| 3.37k|void X509_Object::load_data(DataSource& in) { 25| 3.37k| try { 26| 3.37k| if(ASN1::maybe_BER(in) && !PEM_Code::matches(in)) { ------------------ | Branch (26:10): [True: 2.66k, False: 704] | Branch (26:33): [True: 2.64k, False: 17] ------------------ 27| 2.64k| BER_Decoder dec(in); 28| 2.64k| decode_from(dec); 29| 2.64k| } else { 30| 721| std::string got_label; 31| 721| DataSource_Memory ber(PEM_Code::decode(in, got_label)); 32| | 33| 721| if(got_label != PEM_label()) { ------------------ | Branch (33:13): [True: 43, False: 678] ------------------ 34| 43| bool is_alternate = false; 35| 43| for(std::string_view alt_label : alternate_PEM_labels()) { ------------------ | Branch (35:44): [True: 43, False: 43] ------------------ 36| 43| if(got_label == alt_label) { ------------------ | Branch (36:19): [True: 0, False: 43] ------------------ 37| 0| is_alternate = true; 38| 0| break; 39| 0| } 40| 43| } 41| | 42| 43| if(!is_alternate) { ------------------ | Branch (42:16): [True: 43, False: 0] ------------------ 43| 43| throw Decoding_Error("Unexpected PEM label for " + PEM_label() + " of " + got_label); 44| 43| } 45| 43| } 46| | 47| 678| BER_Decoder dec(ber); 48| 678| decode_from(dec); 49| 678| } 50| 3.37k| } catch(Decoding_Error& e) { 51| 716| throw Decoding_Error(PEM_label() + " decoding", e); 52| 716| } 53| 3.37k|} _ZNK5Botan11X509_Object11encode_intoERNS_11DER_EncoderE: 55| 2.19k|void X509_Object::encode_into(DER_Encoder& to) const { 56| 2.19k| to.start_sequence() 57| 2.19k| .start_sequence() 58| 2.19k| .raw_bytes(signed_body()) 59| 2.19k| .end_cons() 60| 2.19k| .encode(signature_algorithm()) 61| 2.19k| .encode(signature(), ASN1_Type::BitString) 62| 2.19k| .end_cons(); 63| 2.19k|} _ZN5Botan11X509_Object11decode_fromERNS_11BER_DecoderE: 68| 2.64k|void X509_Object::decode_from(BER_Decoder& from) { 69| 2.64k| from.start_sequence() 70| 2.64k| .start_sequence() 71| 2.64k| .raw_bytes(m_tbs_bits) 72| 2.64k| .end_cons() 73| 2.64k| .decode(m_sig_algo) 74| 2.64k| .decode(m_sig, ASN1_Type::BitString) 75| 2.64k| .end_cons(); 76| | 77| 2.64k| force_decode(); 78| 2.64k|} _ZNK5Botan11X509_Object8tbs_dataEv: 88| 1.18k|std::vector X509_Object::tbs_data() const { return ASN1::put_in_sequence(m_tbs_bits); } _ZNK5Botan11X509_Object16verify_signatureERKNS_10Public_KeyE: 98| 1.18k|std::pair X509_Object::verify_signature(const Public_Key& pub_key) const { 99| 1.18k| try { 100| 1.18k| PK_Verifier verifier(pub_key, signature_algorithm()); 101| 1.18k| const bool valid = verifier.verify_message(tbs_data(), signature()); 102| | 103| 1.18k| if(valid) { ------------------ | Branch (103:10): [True: 0, False: 1.18k] ------------------ 104| 0| return std::make_pair(Certificate_Status_Code::VERIFIED, verifier.hash_function()); 105| 1.18k| } else { 106| 1.18k| return std::make_pair(Certificate_Status_Code::SIGNATURE_ERROR, ""); 107| 1.18k| } 108| 1.18k| } catch(Decoding_Error&) { 109| 6| return std::make_pair(Certificate_Status_Code::SIGNATURE_ALGO_BAD_PARAMS, ""); 110| 6| } catch(Algorithm_Not_Found&) { 111| 0| return std::make_pair(Certificate_Status_Code::SIGNATURE_ALGO_UNKNOWN, ""); 112| 0| } catch(...) { 113| | // This shouldn't happen, fallback to generic signature error 114| 0| return std::make_pair(Certificate_Status_Code::SIGNATURE_ERROR, ""); 115| 0| } 116| 1.18k|} _ZNK5Botan16X509_Certificate9PEM_labelEv: 70| 802|std::string X509_Certificate::PEM_label() const { return "CERTIFICATE"; } _ZNK5Botan16X509_Certificate20alternate_PEM_labelsEv: 72| 43|std::vector X509_Certificate::alternate_PEM_labels() const { return {"X509 CERTIFICATE"}; } _ZN5Botan16X509_CertificateC2EPKhm: 81| 3.37k|X509_Certificate::X509_Certificate(const uint8_t data[], size_t len) { 82| 3.37k| DataSource_Memory src(data, len); 83| 3.37k| load_data(src); 84| 3.37k|} _ZN5Botan16X509_Certificate12force_decodeEv: 276| 2.49k|void X509_Certificate::force_decode() { 277| 2.49k| m_data.reset(); 278| 2.49k| m_data = parse_x509_cert_body(*this); 279| 2.49k|} x509cert.cpp:_ZN5Botan12_GLOBAL__N_120parse_x509_cert_bodyERKNS_11X509_ObjectE: 95| 2.49k|std::unique_ptr parse_x509_cert_body(const X509_Object& obj) { 96| 2.49k| auto data = std::make_unique(); 97| | 98| 2.49k| BigInt serial_bn; 99| 2.49k| BER_Object public_key; 100| 2.49k| BER_Object v3_exts_data; 101| | 102| 2.49k| BER_Decoder(obj.signed_body()) 103| 2.49k| .decode_optional(data->m_version, ASN1_Type(0), ASN1_Class::Constructed | ASN1_Class::ContextSpecific) 104| 2.49k| .decode(serial_bn) 105| 2.49k| .decode(data->m_sig_algo_inner) 106| 2.49k| .decode(data->m_issuer_dn) 107| 2.49k| .start_sequence() 108| 2.49k| .decode(data->m_not_before) 109| 2.49k| .decode(data->m_not_after) 110| 2.49k| .end_cons() 111| 2.49k| .decode(data->m_subject_dn) 112| 2.49k| .get_next(public_key) 113| 2.49k| .decode_optional_string(data->m_v2_issuer_key_id, ASN1_Type::BitString, 1) 114| 2.49k| .decode_optional_string(data->m_v2_subject_key_id, ASN1_Type::BitString, 2) 115| 2.49k| .get_next(v3_exts_data) 116| 2.49k| .verify_end("TBSCertificate has extra data after extensions block"); 117| | 118| 2.49k| if(data->m_version > 2) { ------------------ | Branch (118:7): [True: 1, False: 2.49k] ------------------ 119| 1| throw Decoding_Error("Unknown X.509 cert version " + std::to_string(data->m_version)); 120| 1| } 121| 2.49k| if(obj.signature_algorithm() != data->m_sig_algo_inner) { ------------------ | Branch (121:7): [True: 32, False: 2.45k] ------------------ 122| 32| throw Decoding_Error("X.509 Certificate had differing algorithm identifers in inner and outer ID fields"); 123| 32| } 124| | 125| 2.45k| public_key.assert_is_a(ASN1_Type::Sequence, ASN1_Class::Constructed, "X.509 certificate public key"); 126| | 127| | // crude method to save the serial's sign; will get lost during decoding, otherwise 128| 2.45k| data->m_serial_negative = serial_bn.is_negative(); 129| | 130| | // for general sanity convert wire version (0 based) to standards version (v1 .. v3) 131| 2.45k| data->m_version += 1; 132| | 133| 2.45k| data->m_serial = BigInt::encode(serial_bn); 134| 2.45k| data->m_subject_dn_bits = ASN1::put_in_sequence(data->m_subject_dn.get_bits()); 135| 2.45k| data->m_issuer_dn_bits = ASN1::put_in_sequence(data->m_issuer_dn.get_bits()); 136| | 137| 2.45k| data->m_subject_public_key_bits.assign(public_key.bits(), public_key.bits() + public_key.length()); 138| | 139| 2.45k| data->m_subject_public_key_bits_seq = ASN1::put_in_sequence(data->m_subject_public_key_bits); 140| | 141| 2.45k| BER_Decoder(data->m_subject_public_key_bits) 142| 2.45k| .decode(data->m_subject_public_key_algid) 143| 2.45k| .decode(data->m_subject_public_key_bitstring, ASN1_Type::BitString); 144| | 145| 2.45k| if(v3_exts_data.is_a(3, ASN1_Class::Constructed | ASN1_Class::ContextSpecific)) { ------------------ | Branch (145:7): [True: 1.15k, False: 1.30k] ------------------ 146| | // Path validation will reject a v1/v2 cert with v3 extensions 147| 1.15k| BER_Decoder(v3_exts_data).decode(data->m_v3_extensions).verify_end(); 148| 1.30k| } else if(v3_exts_data.is_set()) { ------------------ | Branch (148:14): [True: 18, False: 1.28k] ------------------ 149| 18| throw BER_Bad_Tag("Unknown tag in X.509 cert", v3_exts_data.tagging()); 150| 18| } 151| | 152| | // Now cache some fields from the extensions 153| 2.44k| if(auto ext = data->m_v3_extensions.get_extension_object_as()) { ------------------ | Branch (153:12): [True: 5, False: 2.43k] ------------------ 154| 5| data->m_key_constraints = ext->get_constraints(); 155| | /* 156| | RFC 5280: When the keyUsage extension appears in a certificate, 157| | at least one of the bits MUST be set to 1. 158| | */ 159| 5| if(data->m_key_constraints.empty()) { ------------------ | Branch (159:10): [True: 2, False: 3] ------------------ 160| 2| throw Decoding_Error("Certificate has invalid encoding for KeyUsage"); 161| 2| } 162| 5| } 163| | 164| 2.43k| if(auto ext = data->m_v3_extensions.get_extension_object_as()) { ------------------ | Branch (164:12): [True: 1, False: 2.43k] ------------------ 165| 1| data->m_subject_key_id = ext->get_key_id(); 166| 1| } 167| | 168| 2.43k| if(auto ext = data->m_v3_extensions.get_extension_object_as()) { ------------------ | Branch (168:12): [True: 29, False: 2.41k] ------------------ 169| 29| data->m_authority_key_id = ext->get_key_id(); 170| 29| } 171| | 172| 2.43k| if(auto ext = data->m_v3_extensions.get_extension_object_as()) { ------------------ | Branch (172:12): [True: 10, False: 2.42k] ------------------ 173| 10| data->m_name_constraints = ext->get_name_constraints(); 174| 10| } 175| | 176| 2.43k| if(auto ext = data->m_v3_extensions.get_extension_object_as()) { ------------------ | Branch (176:12): [True: 24, False: 2.41k] ------------------ 177| 24| if(ext->get_is_ca() == true) { ------------------ | Branch (177:10): [True: 14, False: 10] ------------------ 178| | /* 179| | * RFC 5280 section 4.2.1.3 requires that CAs include KeyUsage in all 180| | * intermediate CA certificates they issue. Currently we accept it being 181| | * missing, as do most other implementations. But it may be worth 182| | * removing this entirely, or alternately adding a warning level 183| | * validation failure for it. 184| | */ 185| 14| if(data->m_key_constraints.empty() || data->m_key_constraints.includes(Key_Constraints::KeyCertSign)) { ------------------ | Branch (185:13): [True: 14, False: 0] | Branch (185:48): [True: 0, False: 0] ------------------ 186| 14| data->m_is_ca_certificate = true; 187| 14| data->m_path_len_constraint = ext->get_path_limit(); 188| 14| } 189| 14| } 190| 24| } 191| | 192| 2.43k| if(auto ext = data->m_v3_extensions.get_extension_object_as()) { ------------------ | Branch (192:12): [True: 46, False: 2.39k] ------------------ 193| 46| data->m_issuer_alt_name = ext->get_alt_name(); 194| 46| } 195| | 196| 2.43k| if(auto ext = data->m_v3_extensions.get_extension_object_as()) { ------------------ | Branch (196:12): [True: 26, False: 2.41k] ------------------ 197| 26| data->m_subject_alt_name = ext->get_alt_name(); 198| 26| } 199| | 200| 2.43k| if(auto ext = data->m_v3_extensions.get_extension_object_as()) { ------------------ | Branch (200:12): [True: 10, False: 2.42k] ------------------ 201| 10| data->m_extended_key_usage = ext->object_identifiers(); 202| 10| } 203| | 204| 2.43k| if(auto ext = data->m_v3_extensions.get_extension_object_as()) { ------------------ | Branch (204:12): [True: 14, False: 2.42k] ------------------ 205| 14| data->m_cert_policies = ext->get_policy_oids(); 206| 14| } 207| | 208| 2.43k| if(auto ext = data->m_v3_extensions.get_extension_object_as()) { ------------------ | Branch (208:12): [True: 19, False: 2.42k] ------------------ 209| 19| data->m_ocsp_responder = ext->ocsp_responder(); 210| 19| data->m_ca_issuers = ext->ca_issuers(); 211| 19| } 212| | 213| 2.43k| if(auto ext = data->m_v3_extensions.get_extension_object_as()) { ------------------ | Branch (213:12): [True: 145, False: 2.29k] ------------------ 214| 145| data->m_crl_distribution_points = ext->crl_distribution_urls(); 215| 145| } 216| | 217| | // Check for self-signed vs self-issued certificates 218| 2.43k| if(data->m_subject_dn == data->m_issuer_dn) { ------------------ | Branch (218:7): [True: 2.09k, False: 340] ------------------ 219| 2.09k| if(data->m_subject_key_id.empty() == false && data->m_authority_key_id.empty() == false) { ------------------ | Branch (219:10): [True: 1, False: 2.09k] | Branch (219:53): [True: 0, False: 1] ------------------ 220| 0| data->m_self_signed = (data->m_subject_key_id == data->m_authority_key_id); 221| 2.09k| } else { 222| | /* 223| | If a parse error or unknown algorithm is encountered, default 224| | to assuming it is self signed. We have no way of being certain but 225| | that is usually the default case (self-issued is rare in practice). 226| | */ 227| 2.09k| data->m_self_signed = true; 228| | 229| 2.09k| try { 230| 2.09k| auto pub_key = X509::load_key(data->m_subject_public_key_bits_seq); 231| | 232| 2.09k| const auto sig_status = obj.verify_signature(*pub_key); 233| | 234| 2.09k| if(sig_status.first == Certificate_Status_Code::OK || ------------------ | Branch (234:16): [True: 913, False: 1.18k] ------------------ 235| 2.09k| sig_status.first == Certificate_Status_Code::SIGNATURE_ALGO_UNKNOWN) { ------------------ | Branch (235:16): [True: 0, False: 1.18k] ------------------ 236| 0| data->m_self_signed = true; 237| 2.09k| } else { 238| 2.09k| data->m_self_signed = false; 239| 2.09k| } 240| 2.09k| } catch(...) { 241| | // ignore errors here to allow parsing to continue 242| 913| } 243| 2.09k| } 244| 2.09k| } 245| | 246| 2.43k| const std::vector full_encoding = obj.BER_encode(); 247| | 248| 2.43k| auto sha1 = HashFunction::create("SHA-1"); 249| 2.43k| if(sha1) { ------------------ | Branch (249:7): [True: 2.18k, False: 250] ------------------ 250| 2.18k| sha1->update(data->m_subject_public_key_bitstring); 251| 2.18k| data->m_subject_public_key_bitstring_sha1 = sha1->final_stdvec(); 252| | // otherwise left as empty, and we will throw if subject_public_key_bitstring_sha1 is called 253| | 254| 2.18k| data->m_fingerprint_sha1 = create_hex_fingerprint(full_encoding, "SHA-1"); 255| 2.18k| } 256| | 257| 2.43k| auto sha256 = HashFunction::create("SHA-256"); 258| 2.43k| if(sha256) { ------------------ | Branch (258:7): [True: 2.18k, False: 250] ------------------ 259| 2.18k| sha256->update(data->m_issuer_dn_bits); 260| 2.18k| data->m_issuer_dn_bits_sha256 = sha256->final_stdvec(); 261| | 262| 2.18k| sha256->update(data->m_subject_dn_bits); 263| 2.18k| data->m_subject_dn_bits_sha256 = sha256->final_stdvec(); 264| | 265| 2.18k| data->m_fingerprint_sha256 = create_hex_fingerprint(full_encoding, "SHA-256"); 266| 2.18k| } 267| | 268| 2.43k| return data; 269| 2.43k|}